Мануал siemens s7 200

Related Manuals for Siemens SIMATIC S7-200

SIMATIC

S7-200

Programmable Controller

System Manual

Preface, Contents

Product Overview

Getting Started

Installing the S7-200

PLC Concepts

Programming Concepts,

Conventions and Features

S7-200 Instruction Set

Communicating over a Network

Hardware Troubleshooting Guide and Software Debugging Tools

Open Loop Motion Control with the S7-200

Creating a Program for the

Modem Module

Using the USS Protocol Library to

Control a MicroMaster Drive

Using the Modbus Protocol

Library

Using Recipes

Using Data Logs

PID Auto-Tune and the PID

Tuning Control Panel

Appendices

13

14

15

4

5

6

1

2

3

7

8

9

10

11

12

Index

This manual has the order number:

6ES7298-8FA24—8BH0

Edition 08/2008

A5E00307987—04

Safety Guidelines

This manual contains notices which you should observe to ensure your own personal safety, as well as to protect the product and connected equipment. These notices are highlighted in the manual by a warning triangle and are marked as follows according to the level of danger:

Danger

Danger indicates an imminently hazardous situation which, if not avoided, will result in death or serious injury.

Warning

Warning indicates a potentially hazardous situation which, if not avoided, could result in death or serious injury.

Caution

Caution used with the safety alert symbol indicates a potentially hazardous situation which, if not avoided, may result in minor or moderate injury.

Caution

Caution used without the safety alert symbol indicates a potentially hazardous situation which, if not avoided, may result in property damage.

Notice

Notice indicates a potential situation which, if not avoided, may result in an undesirable result or state.

Qualified Personnel

Only qualified personnel should be allowed to install and work on this equipment. Qualified persons are defined as persons who are authorized to commission, to ground, and to tag circuits, equipment, and systems in accordance with established safety practices and standards.

Correct Usage

Note the following:

Warning

This device and its components may only be used for the applications described in the catalog or the technical descriptions, and only in connection with devices or components from other manufacturers which have been approved or recommended by Siemens.

This product can only function correctly and safely if it is transported, stored, set up, and installed correctly, and operated and maintained as recommended.

Trademarks

SIMATIC

R

, SIMATIC HMI

R and SIMATIC NET

R are registered trademarks of SIEMENS AG.

Some of other designations used in these documents are also registered trademarks; the owner’s rights may be violated if they are used by third parties for their own purposes.

Copyright Siemens AG 2008 All rights reserved

The reproduction, transmission or use of this document or its contents is not permitted without express written authority. Offenders will be liable for damages.

All rights, including rights created by patent grant or registration of a utility model or design, are reserved.

Disclaimer of Liability

We have checked the contents of this manual for agreement with the hardware and software described. Since deviations cannot be precluded entirely, we cannot guarantee full agreement. However, the data in this manual are reviewed regularly and any necessary corrections included in subsequent editions. Suggestions for improvement are welcomed.

Siemens AG

Bereich Automation and Drives

Geschaeftsgebiet Industrial Automation Systems

Postfach 4848, D- 90327 Nuernberg

ii

Siemens Aktiengesellschaft

E

Siemens AG 2008

Technical data subject to change.

6ES7298-8FA24-8BH0

Preface

Purpose of the manual

The S7-200 series is a line of micro-programmable logic controllers (Micro PLCs) that can control a variety of automation applications. Compact design, low cost, and a powerful instruction set make the S7-200 a perfect solution for controlling small applications. The wide variety of S7-200 models and the Windows-based programming tool give you the flexibility you need to solve your automation problems.

This manual provides information about installing and programming the S7-200 Micro PLCs and is designed for engineers, programmers, installers, and electricians who have a general knowledge of programmable logic controllers.

Required Basic Knowledge

To understand this manual, it is necessary to have a general knowledge of automation and programmable logic controllers.

Scope of the Manual

This manual is valid for STEP 7—Micro/WIN, version 4.0 and the S7-200 CPU product family. For a complete list of the S7-200 products and order numbers described in this manual, see

Appendix A.

Changes compared to the previous version

This manual has been revised to include two new analog expansion modules and one additional appendix.

—

—

—

EM 231 Analog Input RTD, 4 Inputs

EM 231 Analog Input Thermocouple 8 Inputs

Appendix H, S7-200CN Products

Certification

The SIMATIC S7-200 products have the following certification:

—

—

—

Underwriters Laboratories, Inc. UL 508 Listed (Industrial Control Equipment),

Registration number E75310

Canadian Standards Association: CSA C22.2 Number 142 (Process Control Equipment)

Factory Mutual Research: Class Number 3600, Class Number 3611, FM Class I, Division 2,

Groups A, B, C, & D Hazardous Locations, T4A and Class I, Zone 2, IIC, T4

Tip

The SIMATIC S7-200 series meets the CSA standard.

The cULus logo indicates that the S7-200 has been examined and certified by Underwriters

Laboratories (UL) to standards UL 508 and CSA 22.2 No. 142.

iii

S7-200 Programmable Controller System Manual

CE Labeling

Refer to the General Technical Specifications in Appendix A for more information.

C-Tick

The SIMATIC S7-200 products are compliant with requirements of the AS/NZS 2064 (Australian) standard.

Standards:

The SIMATIC S7-200 products fulfill the requirement and criteria of IEC 61131—2, Programmable controllers — Equipment requirements.

Refer to Appendix A for additional compliance information.

Place of this Documentation in the Information Environment

Product

Family

Documentation Order Number

S7-200 S7-200 Point-to-Point Interface Communication Manual (English/German) 6ES7 298—8GA00—8XH0

SIMATIC Text Display User Manual (included on the STEP 7—Micro/WIN documentation CD) none

HMI device OP 73micro, TP 177micro (WinCC Flexible) Operating

Instructions (English)

6AV6 691—1DF01—0AB0

SIMATIC HMI WinCC flexible 2005 Micro User’s Manual (English)

SIMATIC NET CP 243—2 AS-Interface Master Manual (English)

6AV6 691—1AA01—0AB0

6GK7 243—2AX00—8BA0

SIMATIC NET CP 243—1 Communications processor of Industrial Ethernet

Technical Manual (English)

SIMATIC NET CP 243—1 IT Communications Processor of Industrial

Ethernet and Information Technology Technical Manual (English)

J31069—D0428—U001—A2—7618

J31069—D0429—U001—A2—7618

SIMATIC NET S7Beans / Applets for IT—CPs Programming Tips (English) C79000—G8976—C180—02

C79000—G8976—C211 SIMATIC NET GPRS/GSM—Modem SINAUT MD720—3 System manual

(English)

SIMATIC NET SINAUT MICRO SC System manual (English)

SIWAREX MS Device Manual (English) (included with device)

S7-200 Programmable Controller System Manual (English)

C79000—G8900—C210 none

6ES7 298—8FA24—8BH0 iv

Preface

Finding Your Way

If you are a first-time user of S7-200 Micro PLCs, you should read the entire

S7-200

Programmable Controller System Manual

. If you are an experienced user, refer to the table of contents or index to find specific information.

The

S7-200 Programmable Controller System Manual

is organized according to the following topics:

—

—

—

—

—

—

—

—

Chapter 1 (Product Overview) provides an overview of some of the features of the S7-200 family of Micro PLC products.

Chapter 2 (Getting Started) provides a tutorial for creating and downloading a sample control program to an S7-200.

Chapter 3 (Installing the S7-200) provides the dimensions and basic guidelines for installing the S7-200 CPU modules and expansion I/O modules.

Chapter 4 (PLC Concepts) provides information about the operation of the S7-200.

Chapter 5 (Programming Concepts, Conventions, and Features) provides information about the features of STEP 7—Micro/WIN, the program editors and types of instructions

(IEC 1131-3 or SIMATIC), S7-200 data types, and guidelines for creating programs.

Chapter 6 (S7-200 Instruction Set) provides descriptions and examples of programming instructions supported by the S7-200.

Chapter 7 (Communicating over a Network) provides information for setting up the different network configurations supported by the S7-200.

Chapter 8 (Hardware Troubleshooting Guide and Software Debugging Tools) provides information for troubleshooting problems with the S7-200 hardware and about the

STEP 7—Micro/WIN features that help you debug your program.

—

—

—

—

—

Chapter 9 (Open Loop Motion Control with the S7-200) provides information about three methods of open loop motion control: Pulse Width Modulation, Pulse Train Output, and the

EM 253 Position Control Module.

Chapter 10 (Creating a Program for the Modem Module) provides information about the instructions and wizard used to create a program for the EM 241 Modem module.

Chapter 11 (Using the USS Protocol Library to Control a MicroMaster Drive) provides information about the instructions used to create a control program for a MicroMaster drive.

It also provides information about how to configure the MicroMaster 3 and MicroMaster 4 drives.

Chapter 12 (Using the Modbus Protocol Library) provides information about the instructions used to create a program that uses the Modbus protocol for communications.

Chapter 13 (Using Recipes) provides information about organizing and loading automation program recipes in the memory cartridge.

—

Chapter 14 (Using Data Logs) provides information about storing process measurement data in the memory cartridge.

—

—

Chapter 15 (PID Auto-Tune and the PID Tuning Control Panel) provides information about using these features to greatly enhance the utility and ease of use of the PID function provided by the S7-200.

Appendix A (Technical Specifications) provides the technical information and data sheets about the S7-200 hardware.

The other appendices provide additional reference information, such as descriptions of the error codes, descriptions of the Special Memory (SM) area, part numbers for ordering S7-200 equipment, STL instruction execution times, and S7-200CN product information.

In addition to this manual, STEP 7—Micro/WIN provides extensive online help for getting started with programming the S7-200. Included with the purchase of the STEP 7—Micro/WIN software is a free documentation CD. On this CD you can find application tips, an electronic version of this manual and other information.

v

S7-200 Programmable Controller System Manual

Online Help

Help is only a keystroke away! Pressing F1 accesses the extensive online help for

STEP 7—Micro/WIN. The online help includes useful information about getting started with programming the S7-200, as well as many other topics.

Electronic Manual

An electronic version of this S7-200 System Manual is available on the documentation CD. You can install the electronic manual onto your computer so that you can easily access the information in the manual while you are working with the STEP 7—Micro/WIN software.

Programming Tips

The documentation CD includes Programming Tips, a set of application examples with sample programs. Reviewing or modifying these examples can help you find efficient or innovative solutions for your own application. You can also find the most current version of Programming Tips on the S7-200 Internet site.

Recycling and Disposal

Please contact a company certified in the disposal of electronic scrap for environmentally safe recycling and disposal of your device.

Additional Support

Local Siemens Sales Office or Distributor

For assistance in answering any technical questions, for training on the S7-200 products, or for ordering S7-200 products, contact your Siemens distributor or sales office. Because your sales representatives are technically trained and have the most specific knowledge about your operations, process and industry, as well as about the individual Siemens products that you are using, they can provide the fastest and most efficient answers to any problems that you might encounter.

Service & Support on the Internet

In addition to our documentation, we offer our Know-how online on the Internet at: http://www.siemens.com/automation/service&support where you will find the following:

—

—

—

—

—

www.siemens.com/S7—200

for S7-200 product information

The S7-200 Internet site includes frequently asked questions (FAQs), Programming Tips

(application examples and sample programs), information about newly released products, and product updates or downloads.

The newsletter, which constantly provides you with up-to-date information on your products.

The right documents via our Search function in Service & Support.

A forum, where users and experts from all over the world exchange their experiences.

Your local representative for Automation & Drives.

Information on field service, repairs, spare parts and more under “Services”.

Technical Services

The highly trained staff of the S7-200 Technical Services center is also available to help you solve any problems that you might encounter. You can call on them 24 hours a day, 7 days a week.

vi

Preface

A&D Technical Support

Worldwide, available 24 hours a day:

Nuernberg

Johnson City

Beijing

Technical Support

Worldwide

(Nuernberg)

Technical Support

24 hours a day, 365 days a year

Phone: +49 (180) 5050-222

Fax: +49 (180) 5050-223 mailto:[email protected]

GMT: +1:00

Europe / Africa

(Nuernberg)

Authorization

United States

(Johnson City)

Technical Support and

Authorization

Local time: Mon.-Fri.

8:00 AM to 5:00 PM

Phone: +1 (423) 262 2522

+1 (800) 333—7421 (USA only)

Fax: +1 (423) 262 2289

Asia / Australia

(Beijing)

Technical Support and

Authorization

Local time: Mon.-Fri.

8:00 AM to 5:00 PM

Phone: +86 10 64 75 75 75

Fax: +86 10 64 74 74 74 mailto:[email protected]

GMT: +8:00

GMT: —5:00

Local time: Mon.-Fri.

8:00 AM to 5:00 PM

Phone: +49 (180) 5050—222

Fax: +49 (180) 5050-223 mailto:[email protected]

GMT: +1:00

The languages of the SIMATIC Hotlines and the authorization hotline are generally German and English.

vii

S7-200 Programmable Controller System Manual viii

2

3

4

5

1

Contents

Product Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

What’s New?

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

S7-200 CPU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

S7-200 Expansion Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

STEP 7—Micro/WIN Programming Package . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Communications Options

Display Panels

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Getting Started . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Connecting the S7-200 CPU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Creating a Sample Program . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Downloading the Sample Program . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Placing the S7-200 in RUN Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Installing the S7-200 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Guidelines for Installing S7-200 Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Installing and Removing the S7-200 Modules

Guidelines for Grounding and Wiring

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

PLC Concepts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Understanding How the S7-200 Executes Your Control Logic

Accessing the Data of the S7-200

. . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Understanding How the S7-200 Saves and Restores Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Selecting the Operating Mode for the S7-200 CPU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Using the S7-200 Explorer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Features of the S7-200 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Programming Concepts, Conventions, and Features . . . . . . . . . . . . . . . . . . . . . . .

Guidelines for Designing a Micro PLC System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Basic Elements of a Program . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Using STEP 7—Micro/WIN to Create Your Programs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Choosing Between the SIMATIC and IEC 1131—3 Instruction Sets

Understanding the Conventions Used by the Program Editors

. . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . .

Using Wizards To Help You Create Your Control Program . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Handling Errors in the S7-200 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Assigning Addresses and Initial Values in the Data Block Editor . . . . . . . . . . . . . . . . . . . . . . . .

Using the Symbol Table for Symbolic Addressing of Variables

Using Local Variables

. . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Using the Status Chart to Monitor Your Program . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Creating an Instruction Library . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Features for Debugging Your Program . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

1

7

8

10

14

14

15

4

5

2

2

5

6

16

17

20

23

24

27

36

40

41

41

51

57

58

60

60

62

52

53

55

62

63

63

64

64 ix

S7-200 Programmable Controller System Manual

6 S7-200 Instruction Set . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Conventions Used to Describe the Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

S7-200 Memory Ranges and Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Bit Logic Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Contacts

Coils

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Logic Stack Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Set and Reset Dominant Bistable Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Clock Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Communications Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Network Read and Network Write Instructions

Transmit and Receive Instructions (Freeport)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Get Port Address and Set Port Address Instructions

Compare Instructions

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Comparing Numerical Values

Compare String

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Conversion Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Standard Conversion Instructions

ASCII Conversion Instructions

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

String Conversion Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Encode and Decode Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Counter Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SIMATIC Counter Instructions

IEC Counter Instructions

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

High-Speed Counter Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Pulse Output Instruction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Math Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Add, Subtract, Multiply, and Divide Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Multiply Integer to Double Integer and Divide Integer with Remainder . . . . . . . . . . . . . . . .

Numeric Functions Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Increment and Decrement Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Proportional/Integral/Derivative (PID) Loop Instruction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Interrupt Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Logical Operations Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Invert Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

AND, OR, and Exclusive OR Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Move Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Move Byte, Word, Double Word, or Real . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Move Byte Immediate (Read and Write)

Block Move Instructions

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Program Control Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Conditional End

Stop

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Watchdog Reset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

For—Next Loop Instructions

Jump Instructions

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Sequence Control Relay (SCR) Instructions

Diagnostic LED Instruction

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

65

153

161

161

162

164

164

165

166

167

167

167

167

169

171

172

178

113

116

118

133

99

103

107

112

113

140

140

142

143

144

145

81

81

86

95

96

96

98

99

70

73

75

77

78

67

68

70 x

Contents

7

8

9

Shift and Rotate Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Shift Right and Shift Left Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Rotate Right and Rotate Left Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Shift Register Bit Instruction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Swap Bytes Instruction

String Instructions

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Table Instructions

Add To Table

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

First-In-First-Out and Last-In-First-Out

Memory Fill

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Table Find . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Timer Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SIMATIC Timer Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

IEC Timer Instructions

Interval Timers

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Subroutine Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Communicating over a Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Understanding the Basics of S7-200 Network Communications . . . . . . . . . . . . . . . . . . . . . . . . .

Selecting the Communications Protocol for Your Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Installing and Removing Communications Interfaces

Building Your Network

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Creating User-Defined Protocols with Freeport Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Using Modems and STEP 7—Micro/WIN with Your Network . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Advanced Topics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Configuring the RS-232/PPI Multi-Master Cable for Remote Operation . . . . . . . . . . . . . . . . . . .

Hardware Troubleshooting Guide and Software Debugging Tools . . . . . . . . . . .

Features for Debugging Your Program . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Displaying the Program Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Using a Status Chart to Monitor and Modify the Data in the S7-200 . . . . . . . . . . . . . . . . . . . . . .

Forcing Specific Values . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Running Your Program for a Specified Number of Scans . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Hardware Troubleshooting Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Open Loop Motion Control with the S7-200 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Using the PWM (Pulse Width Modulation) Output . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Basic Information for Open Loop Position Control Using Steppers or Servos . . . . . . . . . . . . . .

Instructions Created by the Position Control Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Error Codes for the PTO Instructions

Features of the Position Module

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Configuring the Position Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Instructions Created by the Position Control Wizard for the Position Module . . . . . . . . . . . . . .

Sample Programs for the Position Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Monitoring the Position Module with the EM 253 Control Panel . . . . . . . . . . . . . . . . . . . . . . . . .

Error Codes for the Position Module and the Position Instructions . . . . . . . . . . . . . . . . . . . . . . .

Advanced Topics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Understanding the RP Seek Modes Supported by the Position Module . . . . . . . . . . . . . . . . . .

226

228

233

239

210

214

220

221

243

244

246

247

248

248

249

251

264

265

267

273

285

252

253

255

260

290

292

294

303

179

179

179

181

183

184

189

189

190

192

193

196

196

201

203

204

209

xi

S7-200 Programmable Controller System Manual

10 Creating a Program for the Modem Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Features of the Modem Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Using the Modem Expansion Wizard to Configure the Modem Module . . . . . . . . . . . . . . . . . . .

Overview of Modem Instructions and Restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Instructions for the Modem Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Sample Program for the Modem Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

S7-200 CPUs that Support Intelligent Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Special Memory Location for the Modem Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Advanced Topics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Messaging Telephone Number Format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Text Message Format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

CPU Data Transfer Message Format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

11 Using the USS Protocol Library to Control a MicroMaster Drive . . . . . . . . . . . . .

Requirements for Using the USS Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Calculating the Time Required for Communicating with the Drive

Using the USS Instructions

. . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Instructions for the USS Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Sample Programs for the USS Protocol

USS Execution Error Codes

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Connecting and Setting Up the MicroMaster Series 3 Drive . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Connecting and Setting Up the MicroMaster Series 4 Drive . . . . . . . . . . . . . . . . . . . . . . . . . . . .

12 Using the Modbus Protocol Library . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Requirements for Using Modbus Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Initialization and Execution Time for Modbus Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Modbus Addressing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Using the Modbus Master Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Using the Modbus Slave Instructions

Instructions for the Modbus Protocol

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Advanced Topics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

13 Using Recipes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Recipe Definition and Terminology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Using the Recipe Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Instructions Created by the Recipe Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

14 Using Data Logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Using the Data Log Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Instruction Created by the Data Log Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

15 PID Auto-Tune and the PID Tuning Control Panel . . . . . . . . . . . . . . . . . . . . . . . . . .

Understanding the PID Auto-Tune . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Expanded Loop Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Auto-Hysteresis and Auto-Deviation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Auto-Tune Sequence . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

348

348

349

350

351

352

353

362

365

331

341

342

342

345

332

332

333

334

347

307

308

314

318

319

323

323

323

325

327

328

329

366

367

367

371

373

374

375

379

381

382

382

385

385

386 xii

Contents

A

B

C

D

Exception Conditions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Notes Concerning PV Out-of-Range (Result Code 3) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

PID Tuning Control Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Technical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

General Technical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

CPU Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Digital Expansion Modules Specifications

Analog Expansion Modules Specifications

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Thermocouple and RTD Expansion Modules Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . .

EM 277 PROFIBUS—DP Module Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

EM 241 Modem Module Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

EM 253 Position Module Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(CP 243—1) Ethernet Module Specifications

(CP 243—1 IT) Internet Module Specifications

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(CP 243—2) AS—Interface Module Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Optional Cartridges . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

I/O Expansion Cable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

RS-232/PPI Multi-Master Cable and USB/PPI Multi-Master Cable . . . . . . . . . . . . . . . . . . . . . .

Input Simulators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Calculating a Power Budget . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

438

450

452

458

460

463

465

392

396

405

412

424

466

467

471

473

387

387

388

391

Error Codes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Fatal Error Codes and Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Run-Time Programming Problems

Compile Rule Violations

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Special Memory (SM) Bits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB0: Status Bits

SMB1: Status Bits

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB2: Freeport Receive Character . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB3: Freeport Parity Error . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB4: Queue Overflow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB5: I/O Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB6: CPU ID Register . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB7: Reserved . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB8 to SMB21: I/O Module ID and Error Registers

SMW22 to SMW26: Scan Times

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB28 and SMB29: Analog Adjustment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB30 and SMB130: Freeport Control Registers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB31 and SMW32: Permanent Memory (EEPROM) Write Control

SMB34 and SMB35: Time Interval Registers for Timed Interrupts

. . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . .

SMB36 to SMB65: HSC0, HSC1, and HSC2 Register . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB66 to SMB85: PTO/PWM Registers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB86 to SMB94, and SMB186 to SMB194: Receive Message Control . . . . . . . . . . . . . . . . .

SMW98: Errors on the Expansion I/O Bus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB130: Freeport Control Register (see SMB30) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB131 to SMB165: HSC3, HSC4, and HSC5 Register . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB166 to SMB185: PTO0, PTO1 Profile Definition Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

477

478

479

480

481

484

484

484

485

486

486

486

482

482

483

483

483

491

491

491

492

487

487

487

489

490 xiii

S7-200 Programmable Controller System Manual

G

H

E

F

SMB186 to SMB194: Receive Message Control (see SMB86 to SMB94) . . . . . . . . . . . . . . . . .

SMB200 to SMB549: Intelligent Module Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

S7-200 Order Numbers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

492

493

495

Execution Times for STL Instructions

S7-200 Quick Reference Information

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

499

505

S7-200CN Products . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Certifications and Approvals for S7-200CN Products . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

S7-200CN Products . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

511

512

513 xiv

Product Overview

The S7-200 series of micro-programmable logic controllers (Micro PLCs) can control a wide variety of devices to support your automation needs.

The S7-200 monitors inputs and changes outputs as controlled by the user program, which can include Boolean logic, counting, timing, complex math operations, and communications with other intelligent devices. The compact design, flexible configuration, and powerful instruction set combine to make the S7-200 a perfect solution for controlling a wide variety of applications.

In This Chapter

What’s New?

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

S7-200 CPU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

S7-200 Expansion Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

STEP 7—Micro/WIN Programming Package . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Communications Options

Display Panels

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

4

5

2

2

5

6

1

S7-200 Programmable Controller System Manual

What’s New?

The new features of the SIMATIC S7-200 include two new analog expansion modules:

—

—

—

EM 231 Analog Input RTD, 4 Inputs

EM 231 Analog Input Thermocouple 8 Inputs

Appendix H, S7-200CN Products

S7-200 CPU

The S7-200 CPU combines a microprocessor, an integrated power supply, input circuits, and output circuits in a compact housing to create a powerful Micro PLC. See Figure 1-1. After you have downloaded your program, the S7-200 contains the logic required to monitor and control the input and output devices in your application.

Status LEDs:

System Fault/Diagnostic

(SF/DIAG)

RUN

STOP

I/O LEDs

Optional cartridge:

Memory Cartridge

Real-time Clock

Battery

Communications port

Access door:

Mode selector switch (RUN/STOP)

Analog adjustment potentiometer(s)

Expansion port (for most CPUs)

Terminal connector

(removable on CPU 224, CPU 224XP and CPU 226)

Clip for installation on a standard (DIN) rail

Figure 1-1 S7-200 Micro PLC

2

Product Overview

Chapter 1

Siemens provides different S7-200 CPU models with a diversity of features and capabilities that help you create effective solutions for your varied applications. Table 1-1 briefly compares some of the features of the CPU. For detailed information about a specific CPU, see Appendix A.

Table 1-1 Comparison of the S7-200 CPU Models

Feature CPU 221 CPU 222 CPU 224

CPU 224XP

CPU 224XPsi

120.5 x 80 x 62 140 x 80 x 62

CPU 226

Physical size (mm)

Program memory: with run mode edit without run mode edit

Data memory

Memory backup

90 x 80 x 62 90 x 80 x 62

4096 bytes

4096 bytes

2048 bytes

50 hours typical

4096 bytes

4096 bytes

2048 bytes

50 hours typical

Local on-board I/O

Digital

Analog

Expansion modules

High-speed counters

Single phase

6 In/4 Out

—

0 modules

4 at 30 kHz

8 In/6 Out

—

2 modules

1

4 at 30 kHz

8192 bytes

12288 bytes

8192 bytes

100 hours typical

14 In/10 Out

—

7 modules

1

12288 bytes

16384 bytes

10240 bytes

100 hours typical

14 In/10 Out

2 In/1 Out

7 modules

1

190 x 80 x 62

16384 bytes

24576 bytes

10240 bytes

100 hours typical

24 In/16 Out

—

7 modules

1

1

Two phase 2 at 20 kHz 2 at 20 kHz

Pulse outputs (DC)

Analog adjustments

2 at 20 kHz

1

2 at 20 kHz

1

Real-time clock Cartridge Cartridge

Communications ports 1 RS—485 1 RS—485

Floating-point math

Digital I/O image size

Boolean execution speed

Yes

256 (128 in, 128 out)

0.22 microseconds/instruction

6 at 30 kHz

4 at 20 kHz

2 at 20 kHz

2

Built-in

1 RS—485

4 at 30 kHz

2 at 200 kHz

3 at 20 kHz

1 at 100 kHz

2 at 100 kHz

2

Built-in

2 RS—485

6 at 30 kHz

4 at 20 kHz

2 at 20 kHz

2

Built-in

2 RS—485

You must calculate your power budget to determine how much power (or current) the S7-200 CPU can provide for your configuration. If the CPU power budget is exceeded, you may not be able to connect the maximum number of modules. See Appendix A for CPU and expansion module power requirements, and Appendix B to calculate your power budget.

3

S7-200 Programmable Controller System Manual

S7-200 Expansion Modules

To better solve your application requirements, the S7-200 family includes a wide variety of expansion modules. You can use these expansion modules to add additional functionality to the

S7-200 CPU. Table 1-2 provides a list of the expansion modules that are currently available. For detailed information about a specific module, see Appendix A.

Table 1-2

Expansion

Modules

S7-200 Expansion Modules

Discrete modules

Type

Input

Output

Combination

8 x DC In

4 x DC Out

8 x DC Out

4 x DC In/

4 x DC Out

4 x DC In /

4 x Relay

8 x AC In

4 x Relays

8 x AC Out

8 x DC In/

8 x DC Out

8 x DC In /

8 x Relay

16 x DC In

8 x Relay

16 x DC In/

16 x DC Out

16 x DC In/

16 x Relay

32 x DC In/

32 x DC Out

32 x DC In/

32 x Relay

Analog modules

Input

Output

Combination

4 x Analog In 8 x Analog In

2 x RTD In 4 x RTD In

2 x Analog Out 4 x Analog Out

4 x Analog In

4 x Analog Out

4 x Thermocouple In 8 x Thermocouple In

Intelligent modules

Position

Ethernet

Modem

Ethernet IT

PROFIBUS—DP

Other modules

AS—Interface SIWAREX MS

1

1

Detailed information not included in Appendix A. Please refer to your module documentation.

4

Product Overview

Chapter 1

STEP 7—Micro/WIN Programming Package

The STEP 7—Micro/WIN programming package provides a user-friendly environment to develop, edit, and monitor the logic needed to control your application. STEP 7—Micro/WIN provides three program editors for convenience and efficiency in developing the control program for your application. To help you find the information you need, STEP 7—Micro/WIN provides an extensive online help system and a documentation CD that contains an electronic version of this manual, application tips, and other useful information.

Computer Requirements

STEP 7—Micro/WIN runs on either a personal computer or a Siemens programming device, such as a PG 760. Your computer or programming device should meet the following minimum requirements:

—

—

—

Operating system:

Windows 2000, Windows XP, Vista

At least 350M bytes of free hard disk space

Mouse (recommended)

Figure 1-2 STEP 7—Micro/WIN

Installing STEP 7—Micro/WIN

Insert the STEP 7—Micro/WIN CD into the CD-ROM drive of your computer. The installation wizard starts automatically and prompts you through the installation process. Refer to the Readme file for more information about installing STEP 7—Micro/WIN.

Tip

To install STEP 7—Micro/WIN on a Windows 2000, Windows XP, or Windows Vista operating system, you must log in with Administrator privileges.

Communications Options

Siemens provides two programming options for connecting your computer to your S7-200: a direct connection with a PPI Multi-Master cable, or a Communications Processor (CP) card with an MPI cable.

The PPI Multi-Master programming cable is the most common and economical method of connecting your computer to the S7-200. This cable connects the communications port of the

S7-200 to the serial communications of your computer. The PPI Multi-Master programming cable can also be used to connect other communications devices to the S7-200.

5

S7-200 Programmable Controller System Manual

Display Panels

Text Display Units

The Text Display (TD) is a display device that can be connected to the S7-200. Using the Text

Display wizard, you can easily program your S7-200 to display text messages and other data pertaining to your application.

Text Display

The TD device provides a low cost interface to your application by allowing you to view, monitor, and change the process variables pertaining to your application.

The S7-200 product family provides four TD devices:

—

—

—

The TD100C has a 4-line text display with 2 font choices.

The TD 200C has a 2-line text display with 20 characters per line for a total of 40 characters.

The TD 200 has a faceplate which provides four keys with predefined, set-bit functions and allows up to eight set-bit functions.

The TD400C can have a 2 or

4-line text display depending on your font and character choice.

TD 100C

TD 200C

Figure 1-3 Text Display Units

TD 200

TD400C

For more information about the Text Display Units, refer to the

SIMATIC Text Display (TD) User

Manual

on the STEP 7—Micro/WIN docuCD.

The Text Display wizard in STEP 7—Micro/WIN helps you configure Text Display messages quickly and easily. To start the Text Display wizard, select the

Tools > Text Display Wizard

menu command.

Operator and Touch Panel Displays

The OP 73micro and TP 177micro panels are tailored to applications with

SIMATIC S7-200 Micro PLC and provide operating and monitoring functions for small-scale machines and plants. Short configuration and commissioning times, and their configuration in WinCC flexible form the highlights of these panels. In addition, these panels support up to 32 configuration languages and five online languages, including the Asian and

Cyrillic character sets.

The mounting dimensions of the

Operator Panel OP 73micro with its graphical 3” display unit are compatible with OP3 and TD 200.

Touch Panel TP 177micro replaces the

Touch Panel TP 070/TP 170micro. It can be mounted vertically to accommodate additional applications. This feature enables its use even when space is restricted.

Figure 1-4 Operator and Touch Panel Displays

6

Getting Started

STEP 7—Micro/WIN makes it easy for you to program your S7-200. In just a few short steps using a simple example, you can learn how to connect, program, and run your S7-200.

All you need for this example is a PPI Multi-Master cable, an S7-200 CPU, and a programming device running the STEP 7—Micro/WIN programming software.

In This Chapter

Connecting the S7-200 CPU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Creating a Sample Program . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Downloading the Sample Program . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Placing the S7-200 in RUN Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

8

10

14

14

7

S7-200 Programmable Controller System Manual

Connecting the S7-200 CPU

Connecting your S7-200 is easy. For this example, you only need to connect power to your

S7-200 CPU and then connect the communications cable between your programming device and the S7-200 CPU.

Connecting Power to the S7-200 CPU

The first step is to connect the S7-200 to a power source. Figure 2-1 shows the wiring connections for either a DC or an AC model of the S7-200 CPU.

Before you install or remove any electrical device, ensure that the power to that equipment has been turned off. Always follow appropriate safety precautions and ensure that power to the

S7-200 is disabled before attempting to install or remove the S7-200.

Warning

Attempts to install or wire the S7-200 or related equipment with power applied could cause electric shock or faulty operation of equipment. Failure to disable all power to the S7-200 and related equipment during installation or removal procedures could result in death or serious injury to personnel, and/or damage to equipment.

Always follow appropriate safety precautions and ensure that power to the S7-200 is disabled before attempting to install or remove the S7-200 or related equipment.

24 VDC 85 to 265 VAC

DC Installation AC Installation

Figure 2-1 Connecting Power to the S7-200 CPU

8

Getting Started

Chapter 2

Connecting the RS-232/PPI Multi-Master Cable

Figure 2-2 shows an RS-232/PPI

Multi-Master cable connecting the

S7-200 to the programming device. To connect the cable:

1. Connect the RS-232 connector

(marked “PC”) of the RS-232/PPI

Multi-Master cable to the communications port of the programming device. (For this example, connect to COM 1.)

2. Connect the RS-485 connector

(marked “PPI”) of the RS-232/PPI

Multi-Master cable to Port 0 or

Port 1 of the S7-200.

3. Ensure that the DIP switches of the RS-232/PPI Multi-Master cable are set as shown in Figure 2-2.

1 2 3 4 5 6 7 8

Programming

Device

RS-232/PPI

Multi-Master Cable

↑

1 — On

↓

0 — Off

S7-200

Figure 2-2 Connecting the RS-232/PPI Multi-Master Cable

Tip

Examples in this manual use the RS-232/PPI Multi-Master cable. The RS-232/PPI Multi-Master cable replaces the previous PC/PPI cable. A USB/PPI Multi-Master cable is also available.

Refer to Appendix E for order numbers.

Starting STEP 7—Micro/WIN

Click on the STEP 7—Micro/WIN icon to open a new project. Figure 2-3 shows a new project.

Notice the navigation bar. You can use the icons on the navigation bar to open elements of the STEP 7—Micro/WIN project.

Click on the Communications icon in the navigation bar to display the

Communications dialog box. You use this dialog box to set up the communications for STEP 7—Micro/WIN.

Navigation bar

Communications icon

Figure 2-3 New STEP 7—Micro/WIN Project

9

S7-200 Programmable Controller System Manual

Verifying the Communications Parameters for STEP 7—Micro/WIN

The example project uses the default settings for STEP 7—Micro/WIN and the RS-232/PPI

Multi-Master cable. To verify these settings:

1. Verify that the address of the

PC/PPI cable in the

Communications dialog box is set to 0.

2. Verify that the interface for the network parameter is set for

PC/PPI cable(COM1).

3. Verify that the transmission rate is set to 9.6 kbps.

If you need to change your communications parameter settings, see

Chapter 7.

Figure 2-4 Verifying the Communications Parameters

Establishing Communications with the S7-200

Use the Communications dialog box to connect with your S7-200 CPU:

1. Double-click the refresh icon in the

Communications dialog box.

STEP 7—Micro/WIN searches for the S7-200 station and displays a

CPU icon for the connected

S7-200 station.

2. Select the S7-200 and click OK.

If STEP 7—Micro/WIN does not find your

S7-200 CPU, check the settings for the communications parameters and repeat these steps.

After you have established communications with the S7-200, you are ready to create and download the example program.

Figure 2-5 Establishing Communications to the S7-200

Creating a Sample Program

Entering this example of a control program will help you understand how easy it is to use

STEP 7—Micro/WIN. This program uses six instructions in three networks to create a very simple, self-starting timer that resets itself.

For this example, you use the Ladder (LAD) editor to enter the instructions for the program. The following example shows the complete program in both LAD and Statement List (STL). The network comments in the STL program explain the logic for each network. The timing diagram shows the operation of the program.

10

Getting Started

Chapter 2

Example: Sample Program for getting started with STEP 7—Micro/WIN

Network 1 //10 ms timer T33 times out after

//(100 x 10 ms = 1 s) M0.0 pulse is

// too fast to monitor with Status view.

LDN

TON

Network 2

M0.0

T33, +100

//Comparison becomes true at a

//rate that is visible with

//Status view. Turn on Q0.0 after

//(40 x 10 ms = 0.4 s), for a

// 40% OFF/60% ON waveform.

LDW>= T33, +40

= Q0.0

Network 3 //T33 (bit) pulse too fast to monitor with

//Status view. Reset the timer through

//M0.0 after the (100 x 10 ms = 1 s) period.

LD

=

T33

M0.0

Timing Diagram

current = 100 current = 40

T33 (current)

0

.

4s 0

.

6s

T33 (bit)

M0.0

Q0.0

Opening the Program Editor

Click on the Program Block icon to open the program editor. See Figure 2-6.

Notice the instruction tree and the program editor. You use the instruction tree to insert the LAD instructions into the networks of the program editor by dragging and dropping the instructions from the instruction tree to the networks.

The toolbar icons provide shortcuts to the menu commands.

After you enter and save the program, you can download the program to the

S7-200.

Program editor

Instruction tree

Figure 2-6 STEP 7—Micro/WIN Window

11

S7-200 Programmable Controller System Manual

12

Entering Network 1: Starting the Timer

When M0.0 is off (0), this contact turns on and provides power flow to start the timer. To enter the contact for M0.0:

1. Either double-click the Bit Logic icon or click on the plus sign (+) to display the bit logic instructions.

2. Select the Normally Closed contact.

3. Hold down the left mouse button and drag the contact onto the first network.

4. Click on the “???” above the contact and enter the following address: M0.0

5 Press the Return key to enter the address for the contact.

To enter the timer instruction for T33:

Figure 2-7 Network 1

1. Double-click the Timers icon to display the timer instructions.

2. Select the TON (On-Delay Timer).

3. Hold down the left mouse button and drag the timer onto the first network.

4. Click on the “???” above the timer box and enter the following timer number: T33

5. Press the Return key to enter the timer number and to move the focus to the preset time

(PT) parameter.

6. Enter the following value for the preset time: 100

7. Press the Return key to enter the value.

Entering Network 2: Turning the Output On

When the timer value for T33 is greater than or equal to 40 (40 times 10 milliseconds, or 0.4

seconds), the contact provides power flow to turn on output Q0.0 of the S7-200. To enter the

Compare instruction:

1. Double-click the Compare icon to display the compare instructions. Select the >=I instruction (Greater-Than-Or-Equal-To-Integer ).

2. Hold down the left mouse button and drag the compare instruction onto the second network.

3. Click on the “???” above the contact and enter the address for the timer value: T33

4. Press the Return key to enter the timer number and to move the focus to the other value to be compared with the timer value.

5. Enter the following value to be

6. Press the Return key to enter the value.

Figure 2-8 Network 2

To enter the instruction for turning on output Q0.0:

1. Double-click the Bit Logic icon to display the bit logic instructions and select the output coil.

2. Hold down the left mouse button and drag the coil onto the second network.

3. Click on the “???” above the coil and enter the following address: Q0.0

4. Press the Return key to enter the address for the coil.

Getting Started

Chapter 2

Entering Network 3: Resetting the Timer

When the timer reaches the preset value (100) and turns the timer bit on, the contact for T33 turns on. Power flow from this contact turns on the M0.0 memory location. Because the timer is enabled by a Normally Closed contact for M0.0, changing the state of M0.0 from off (0) to on (1) resets the timer.

To enter the contact for the timer bit of

T33:

1. Select the Normally Open contact from the bit logic instructions.

2. Hold down the left mouse button and drag the contact onto the third network.

3. Click on the “???” above the contact and enter the address of the timer bit: T33

4. Press the Return key to enter the address for the contact.

To enter the coil for turning on M0.0:

Figure 2-9 Network 3

1. Select the output coil from the bit logic instructions.

2. Hold down the left mouse button and drag the output coil onto the third network.

3. Double-click the “???” above the coil and enter the following address: M0.0

4. Press the Return key to enter the address for the coil.

Saving the Sample Project

After entering the three networks of instructions, you have finished entering the program. When you save the program, you create a project that includes the S7-200 CPU type and other parameters. To save the project:

1. Select the

File > Save As

menu command from the menu bar.

2. Enter a name for the project in the

Save As dialog box.

3. Click OK to save the project.

After saving the project, you can download the program to the S7-200.

Figure 2-10 Saving the Example Program

13

S7-200 Programmable Controller System Manual

Downloading the Sample Program

Tip

Each STEP 7—Micro/WIN project is associated with a CPU type (CPU 221, CPU 222, CPU 224,

CPU 224XP, or CPU 226). If the project type does not match the CPU to which you are connected, STEP 7—Micro/WIN indicates a mismatch and prompts you to take an action. If this occurs, choose “Continue Download” for this example.

1. Click the Download icon on the toolbar or select the

File > Download

menu command to download the program. See

Figure 2-11.

2. Click OK to download the elements of the program to the S7-200.

If your S7-200 is in RUN mode, a dialog box prompts you to place the S7-200 in

STOP mode. Click Yes to place the

S7-200 into STOP mode.

Figure 2-11 Downloading the Program

Placing the S7-200 in RUN Mode

For STEP 7—Micro/WIN to place the S7-200 CPU in RUN mode, the mode switch of the S7-200 must be set to TERM or RUN. When you place the S7-200 in RUN mode, the S7-200 executes the program:

1. Click the RUN icon on the toolbar or select the

PLC > RUN

menu command.

2. Click OK to change the operating mode of the S7-200.

When the S7-200 goes to RUN mode, the output LED for Q0.0 turns on and off as the S7-200 executes the program.

Figure 2-12 Placing the S7-200 in RUN Mode

Congratulations! You have just completed your first S7-200 program.

You can monitor the program by selecting the

Debug > Program Status

menu command.

STEP 7—Micro/WIN displays the values for the instructions. To stop the program, place the S7-200 in STOP mode by clicking the STOP icon or by selecting the

PLC > STOP

menu command.

14

Installing the S7-200

The S7-200 equipment is designed to be easy to install. You can use the mounting holes to attach the modules to a panel, or you can use the built-in clips to mount the modules onto a standard

(DIN) rail. The small size of the S7-200 allows you to make efficient use of space.

This chapter provides guidelines for installing and wiring your S7-200 system.

In This Chapter

Guidelines for Installing S7-200 Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Installing and Removing the S7-200 Modules

Guidelines for Grounding and Wiring

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

16

17

20

15

S7-200 Programmable Controller System Manual

Guidelines for Installing S7-200 Devices

You can install an S7-200 either on a panel or on a standard rail, and you can orient the S7-200 either horizontally or vertically.

Warning

The SIMATIC S7-200 PLCs are Open Type Controllers. It is required that you install the S7-200 in a housing, cabinet, or electric control room. Entry to the housing, cabinet, or electric control room should be limited to authorized personnel.

Failure to follow these installation requirements could result in death or serious injury to personnel, and/or damage to equipment.

Always follow these requirements when installing S7-200 PLCs.

Separate the S7-200 Devices from Heat, High Voltage, and Electrical

Noise

As a general rule for laying out the devices of your system, always separate the devices that generate high voltage and high electrical noise from the low-voltage, logic-type devices such as the S7-200.

When configuring the layout of the S7-200 inside your panel, consider the heat-generating devices and locate the electronic-type devices in the cooler areas of your cabinet. Operating any electronic device in a high-temperature environment will reduce the time to failure.

Consider also the routing of the wiring for the devices in the panel. Avoid placing low voltage signal wires and communications cables in the same tray with AC power wiring and high-energy, rapidly-switched DC wiring.

Provide Adequate Clearance for Cooling and Wiring

S7-200 devices are designed for natural convection cooling. For proper cooling, you must provide a clearance of at least 25 mm above and below the devices. Also, allow at least 75 mm of depth.

Caution

For vertical mounting, the maximum allowable ambient temperature is reduced by

10 degrees C. Mount the S7-200 CPU below any expansion modules.

When planning your layout for the S7-200 system, allow enough clearance for the wiring and communications cable connections. For additional flexibility in configuring the layout of the S7-200 system, use the I/O expansion cable.

Clearance

35 mm

1 mm

7.5 mm

DIN Rail

25 mm

75 mm

Front of the enclosure

Mounting surface

Vertical Panel

Mounting

Horizontal DIN Rail Mounting with Optional

Expansion Cable (limit one per system)

Figure 3-1 Mounting Methods, Orientation, and Clearance

Side View

16

Installing the S7-200

Chapter 3

Power Budget

All S7-200 CPUs have an internal power supply that provides power for the CPU, the expansion modules, and other 24 VDC user power requirements.

The S7-200 CPU provides the 5 VDC logic power needed for any expansion in your system. Pay careful attention to your system configuration to ensure that your CPU can supply the 5V power required by your selected expansion modules. If your configuration requires more power than the

CPU can supply, you must remove a module or select a CPU with more power capability. Refer to

Appendix A for information about the 5 VDC logic budget supplied by your S7-200 CPU and the

5 VDC power requirements of the expansion modules. Use Appendix B as a guide for determining how much power (or current) the CPU can provide for your configuration.

All S7-200 CPUs also provide a 24 VDC sensor supply that can supply 24 VDC for input points, for relay coil power on the expansion modules, or for other requirements. If your power requirements exceed the budget of the sensor supply, then you must add an external 24 VDC power supply to your system. Refer to Appendix A for the 24 VDC sensor supply power budget for your particular S7-200 CPU.

If you require an external 24 VDC power supply, ensure that the power supply is not connected in parallel with the sensor supply of the S7-200 CPU. For improved electrical noise protection, it is recommended that the commons (M) of the different power supplies be connected.

Warning

Connecting an external 24 VDC power supply in parallel with the S7-200 24 VDC sensor supply can result in a conflict between the two supplies as each seeks to establish its own preferred output voltage level.

The result of this conflict can be shortened lifetime or immediate failure of one or both power supplies, with consequent unpredictable operation of the PLC system. Unpredictable operation could result in death or serious injury to personnel, and/or damage to equipment.

The S7-200 DC sensor supply and any external power supply should provide power to different points.

Installing and Removing the S7-200 Modules

The S7-200 can be easily installed on a standard DIN rail or on a panel.

Prerequisites

Before you install or remove any electrical device, ensure that the power to that equipment has been turned off. Also, ensure that the power to any related equipment has been turned off.

Warning

Attempts to install or remove S7-200 or related equipment with the power applied could cause electric shock or faulty operation of equipment.

Failure to disable all power to the S7-200 and related equipment during installation or removal procedures could result in death or serious injury to personnel, and/or damage to equipment.

Always follow appropriate safety precautions and ensure that power to the S7-200 is disabled before attempting to install or remove S7-200 CPUs or related equipment.

Always ensure that whenever you replace or install an S7-200 device you use the correct module or equivalent device.

Warning

If you install an incorrect module, the program in the S7-200 could function unpredictably.

Failure to replace an S7-200 device with the same model, orientation, or order could result in death or serious injury to personnel, and/or damage to equipment.

Replace an S7-200 device with the same model, and be sure to orient and position it correctly.

17

S7-200 Programmable Controller System Manual

Mounting Dimensions

The S7-200 CPUs and expansion modules include mounting holes to facilitate installation on panels. Refer to Table 3-1 for the mounting dimensions.

Table 3-1 Mounting Dimensions

4 mm

A

B

9.5 mm* * Minimum spacing between modules when hard-mounted

Mounting holes (M4 or No.

96 mm 88 mm 80 mm

4 mm

4 mm

S7-200 Module

CPU 221 and CPU 222

CPU 224

CPU 224XP, CPU 224XPsi

CPU 226

Expansion modules:

Expansion modules:

4- and 8-point DC and Relay I/O (8I, 4Q, 8Q, 4I/4Q) and Analog Out (2 AQ)

16-point digital I/O (16I, 8I/8Q), Analog I/O (4AI, 8AI, 4AQ,

4AI/1AQ), RTD, Thermocouple, PROFIBUS, Ethernet,

Internet, AS-Interface, 8-point AC (8I and 8Q), Position, and

Modem

Expansion modules:

Expansion modules:

32-point digital I/O (16I/16Q)

64-point digital I/O (32I/32Q)

B

A

Width A Width B

90 mm 82 mm

120.5 mm 112.5 mm

140 mm 132 mm

196 mm

46 mm

188 mm

38 mm

71.2 mm 63.2 mm

137.3 mm 129.3 mm

196 mm 188 mm

Installing a CPU or Expansion Module

Installing the S7-200 is easy! Just follow these steps.

Panel Mounting

1. Locate, drill, and tap the mounting holes (M4 or American Standard number 8), using the dimensions in Table 3-1.

2. Secure the module(s) to the panel, using the appropriate screws.

3. If you are using an expansion module, connect the expansion module ribbon cable into the expansion port connector under the access door.

DIN Rail Mounting

1. Secure the rail to the mounting panel every 75 mm.

2. Snap open the DIN clip (located on the bottom of the module) and hook the back of the module onto the DIN rail.

3. If you are using an expansion module, connect the expansion module ribbon cable into the expansion port connector under the access door.

4. Rotate the module down to the DIN rail and snap the clip closed. Carefully check that the clip has fastened the module securely onto the rail. To avoid damage to the module, press on the tab of the mounting hole instead of pressing directly on the front of the module.

18

Installing the S7-200

Chapter 3

Tip

Using DIN rail stops could be helpful if your S7-200 is in an environment with high vibration potential or if the S7-200 has been installed vertically.

If your system is in a high-vibration environment, then panel-mounting the S7-200 will provide a greater level of vibration protection.

Removing a CPU or Expansion Module

To remove an S7-200 CPU or expansion module, follow these steps:

1. Remove power from the S7-200.

2. Disconnect all the wiring and cabling that is attached to the module. Most S7-200 CPU and expansion modules have removable connectors to make this job easier.

3. If you have expansion modules connected to the unit that you are removing, open the access cover door and disconnect the expansion module ribbon cable from the adjacent modules.

4. Unscrew the mounting screws or snap open the DIN clip.

5. Remove the module.

Removing and Reinstalling the Terminal Block Connector

Most S7-200 modules have removable connectors to make installing and replacing the module easy. Refer to Appendix A to determine whether your S7-200 module has removable connectors.

You can order an optional fan-out connector for modules that do not have removable connectors.

See Appendix E for order numbers.

To Remove the Connector

1. Open the connector door to gain access to the connector.

2. Insert a small screwdriver in the notch in the middle of the connector.

3. Remove the terminal connector by prying the screwdriver away from the S7-200 housing.

See Figure 3-2.

Figure 3-2 Removing the Connector

To Reinstall the Connector

1. Open the connector door.

2. Align the connector with the pins on the unit and align the wiring edge of the connector inside the rim of the connector base.

3. Press down firmly to rotate the connector until it snaps into place. Check carefully to ensure that the connector is properly aligned and fully engaged.

19

S7-200 Programmable Controller System Manual

Guidelines for Grounding and Wiring

Proper grounding and wiring of all electrical equipment is important to help ensure the optimum operation of your system and to provide additional electrical noise protection for your application and the S7-200.

Prerequisites

Before you ground or install wiring to any electrical device, ensure that the power to that equipment has been turned off. Also, ensure that the power to any related equipment has been turned off.

Ensure that you follow all applicable electrical codes when wiring the S7-200 and related equipment. Install and operate all equipment according to all applicable national and local standards. Contact your local authorities to determine which codes and standards apply to your specific case.

Warning

Attempts to install or wire the S7-200 or related equipment with power applied could cause electric shock or faulty operation of equipment. Failure to disable all power to the S7-200 and related equipment during installation or removal procedures could result in death or serious injury to personnel, and/or damage to equipment.

Always follow appropriate safety precautions and ensure that power to the S7-200 is disabled before attempting to install or remove the S7-200 or related equipment.

Always take safety into consideration as you design the grounding and wiring of your S7-200 system. Electronic control devices, such as the S7-200, can fail and can cause unexpected operation of the equipment that is being controlled or monitored. For this reason, you should implement safeguards that are independent of the S7-200 to protect against possible personal injury or equipment damage.

Warning

Control devices can fail in an unsafe condition, resulting in unexpected operation of controlled equipment. Such unexpected operations could result in death or serious injury to personnel, and/or damage to equipment.

Use an emergency stop function, electromechanical overrides, or other redundant safeguards that are independent of the S7-200.

Guidelines for Isolation

S7-200 AC power supply boundaries and I/O boundaries to AC circuits have been designed and approved to provide safe separation between AC line voltages and low voltage circuits. These boundaries include double or reinforced insulation, or basic plus supplementary insulation, according to various standards. Components which cross these boundaries such as optical couplers, capacitors, transformers, and relays have been approved as providing safe separation.

Isolation boundaries which meet these requirements have been identified in S7-200 product data sheets as having 1500VAC or greater isolation. This designation is based on a routine factory test of ( 2Ue + 1000VAC ) or equivalent according to approved methods. S7-200 safe separation boundaries have been type tested to 4242 VDC.

The sensor supply output, communications circuits, and internal logic circuits of an S7-200 with included AC power supply are sourced as SELV (safety extra—low voltage) according to EN

61131—2. These circuits become PELV (protective extra—low voltage) if the sensor supply M, or any other non-isolated M connection to the S7-200 is connected to ground. Other S7-200 M connections which may ground reference the low voltage are designated as not isolated to logic on specific product data sheets. Examples are RS485 communications port M, analog I/O M, and relay coil power M.

To maintain the SELV / PELV character of the S7-200 low voltage circuits, external connections to communications ports, analog circuits, and all 24V nominal power supply and I/O circuits must be powered from approved sources that meet the requirements of SELV, PELV, Class 2, Limited

Voltage, or Limited Power according to various standards.

20

Installing the S7-200

Chapter 3

Warning

Use of non-isolated or single insulation supplies to supply low voltage circuits from an AC line can result in hazardous voltages appearing on circuits that are expected to be touch safe, such as communications circuits and low voltage sensor wiring.

Such unexpected high voltages could result in death or serious injury to personnel, and/or damage to equipment.

Only use high voltage to low voltage power converters that are approved as sources of touch safe, limited voltage circuits.

Guidelines for Grounding the S7-200

The best way to ground your application is to ensure that all the common and ground connections of your S7-200 and related equipment are grounded to a single point. This single point should be connected directly to the earth ground for your system.

For improved electrical noise protection, it is recommended that all DC common returns be connected to the same single-point earth ground. Connect the 24 VDC sensor supply common

(M) to earth ground.

All ground wires should be as short as possible and should use a large wire size, such as 2 mm 2

(14 AWG).

When locating grounds, remember to consider safety grounding requirements and the proper operation of protective interrupting devices.

Guidelines for Wiring the S7-200

When designing the wiring for your S7-200, provide a single disconnect switch that simultaneously removes power from the S7-200 CPU power supply, from all input circuits, and from all output circuits. Provide overcurrent protection, such as a fuse or circuit breaker, to limit fault currents on supply wiring. You might want to provide additional protection by placing a fuse or other current limit in each output circuit.

Install appropriate surge suppression devices for any wiring that could be subject to lightning surges.

Avoid placing low-voltage signal wires and communications cables in the same wire tray with AC wires and high-energy, rapidly switched DC wires. Always route wires in pairs, with the neutral or common wire paired with the hot or signal-carrying wire.

Use the shortest wire possible and ensure that the wire is sized properly to carry the required current. The connector accepts wire sizes from 2 mm 2 to 0.3 mm 2 (14 AWG to 22 AWG). Use shielded wires for optimum protection against electrical noise. Typically, grounding the shield at the S7-200 gives the best results.

When wiring input circuits that are powered by an external power supply, include an overcurrent protection device in that circuit. External protection is not necessary for circuits that are powered by the 24 VDC sensor supply from the S7-200 because the sensor supply is already current-limited.

Most S7-200 modules have removable connectors for user wiring. (Refer to Appendix A to determine if your module has removable connectors.) To prevent loose connections, ensure that the connector is seated securely and that the wire is installed securely into the connector. To avoid damaging the connector, be careful that you do not over-tighten the screws. The maximum torque for the connector screw is 0.56 N-m (5 inch-pounds).

To help prevent unwanted current flows in your installation, the S7-200 provides isolation boundaries at certain points. When you plan the wiring for your system, you should consider these isolation boundaries. Refer to Appendix A for the amount of isolation provided and the location of the isolation boundaries. Isolation boundaries rated less than 1500 VAC must not be depended on as safety boundaries.

Tip

For a communications network, the maximum length of the communications cable is 50 m without using a repeater. The communications port on the S7-200 is non-isolated. Refer to

Chapter 7 for more information.

21

S7-200 Programmable Controller System Manual

Guidelines for Inductive Loads

You should equip inductive loads with suppression circuits to limit voltage rise when the control output turns off. Suppression circuits protect your outputs from premature failure due to high inductive switching currents. In addition, suppression circuits limit the electrical noise generated when switching inductive loads.

Tip

The effectiveness of a given suppression circuit depends on the application, and you must verify it for your particular use. Always ensure that all components used in your suppression circuit are rated for use in the application.

DC Outputs and Relays That Control DC Loads

The DC outputs have internal protection that is adequate for most applications. Since the relays can be used for either a DC or an AC load, internal protection is not provided.

Figure 3-3 shows a sample suppression circuit for a DC load. In most applications, the addition of a diode (A) across the inductive load is suitable, but if your application requires faster turn-off times, then the addition of a Zener diode

(B) is recommended. Be sure to size your Zener diode properly for the amount of current in your output circuit.

Output

Point

A B (optional)

A — I1N4001 diode or equivalent

B — 8.2 V Zener for DC Outputs

36 V Zener for Relay Outputs

DC Inductive Load

Figure 3-3 Suppression Circuit for a DC Load

AC Outputs and Relays That Control AC Loads

The AC outputs have internal protection that is adequate for most applications. Since the relays can be used for either a DC or an AC load, internal protection is not provided.

Figure 3-4 shows a sample suppression circuit for an AC load. When you use a relay or AC output to switch 115 V/230

VAC loads, place resistor/capacitor networks across the AC load as shown in this figure. You can also use a metal oxide varistor (MOV) to limit peak voltage. Ensure that the working voltage of the MOV is at least 20% greater than the nominal line voltage.

.1

µ

F 100 to 120

Ω

MOV

Output

Point

AC Inductive Load

Figure 3-4 Suppression Circuit for an AC Load

Warning

When relay expansion modules are used to switch AC inductive loads, the external resistor/capacitor noise suppression circuit must be placed across the AC load to prevent unexpected machine or process operation. See Figure 3-4.

Guidelines for Lamp Loads

Lamp loads are damaging to relay contacts because of the high turn-on surge current. This surge current will nominally be 10 to 15 times the steady state current for a Tungsten lamp. A replaceable interposing relay or surge limiter is recommended for lamp loads that will be switched a large number of times during the lifetime of the application.

22

PLC Concepts

The basic function of the S7-200 is to monitor field inputs and, based on your control logic, turn on or off field output devices. This chapter explains the concepts used to execute your program, the various types of memory used, and how that memory is retained.

In This Chapter

Understanding How the S7-200 Executes Your Control Logic

Accessing the Data of the S7-200

. . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Understanding How the S7-200 Saves and Restores Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Selecting the Operating Mode for the S7-200 CPU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Using the S7-200 Explorer

Features of the S7-200

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

24

27

36

40

41

41

23

S7-200 Programmable Controller System Manual

Understanding How the S7-200 Executes Your Control Logic

The S7-200 continuously cycles through the control logic in your program, reading and writing data.

The S7-200 Relates Your Program to the Physical Inputs and Outputs

The basic operation of the S7-200 is very simple:

Start_PB E_Stop M_Starter

—

The S7-200 reads the status of the inputs.

—

—

The program that is stored in the S7-200 uses these inputs to evaluate the control logic. As the program runs, the S7-200 updates the data.

The S7-200 writes the data to the outputs.

Figure 4-1 shows a simple diagram of how an electrical relay diagram relates to the S7-200. In this example, the state of the switch for starting the motor is combined with the states of other inputs.

The calculations of these states then determine the state for the output that goes to the actuator which starts the motor.

M_Starter

Output

Input

Motor Starter

Motor

Start / Stop Switch

Figure 4-1 Controlling Inputs and Outputs

The S7-200 Executes Its Tasks in a Scan Cycle

The S7-200 executes a series of tasks repetitively. This cyclical execution of tasks is called the scan cycle. As shown in Figure 4-2, the S7-200 performs most or all of the following tasks during a scan cycle:

—

—

—

—

Reading the inputs: The S7-200 copies the state of the physical inputs to the process-image input register.

Executing the control logic in the program:

The S7-200 executes the instructions of the program and stores the values in the various memory areas.

Processing any communications requests:

The S7-200 performs any tasks required for communications.

Executing the CPU self-test diagnostics: The

S7-200 ensures that the firmware, the program memory, and any expansion modules are working properly.

W iti t th t t Th to the physical outputs.

l t d i the process-image output register are written

Writes to the outputs

Perform the CPU Diagnostics

Process any

Communications Requests

Execute the Program

Reads the inputs

Figure 4-2 S7-200 Scan Cycle

Scan Cycle

The execution of the user program is dependent upon whether the S7-200 is in STOP mode or in

RUN mode. In RUN mode, your program is executed; in STOP mode, your program is not executed.

24

PLC Concepts

Chapter 4

Reading the Inputs

Digital inputs:

Each scan cycle begins by reading the current value of the digital inputs and then writing these values to the process-image input register.

Analog inputs:

The S7-200 does not update analog inputs from expansion modules as part of the normal scan cycle unless filtering of analog inputs is enabled. An analog filter is provided to allow you to have a more stable signal. You can enable the analog filter for each analog input point.

When analog input filtering is enabled for an analog input, the S7-200 updates that analog input once per scan cycle, performs the filtering function, and stores the filtered value internally. The filtered value is then supplied each time your program accesses the analog input.

When analog filtering is not enabled, the S7-200 reads the value of the analog input from expansion modules each time your program accesses the analog input.

Analog inputs AIW0 and AIW2 included on the CPU 224XP are updated every scan with the most recent result from the analog-to-digital converter. This converter is an averaging type (sigma-delta) and those values will usually not need software filtering.

Tip

Analog input filtering is provided to allow you to have a more stable analog value. Use the analog input filter for applications where the input signal varies slowly with time. If the signal is a high-speed signal, then you should not enable the analog filter.

Do not use the analog filter with modules that pass digital information or alarm indications in the analog words. Always disable analog filtering for RTD, Thermocouple, and AS-Interface Master modules.

Executing the Program

During the execution phase of the scan cycle, the S7-200 executes your program, starting with the first instruction and proceeding to the end instruction. The immediate I/O instructions give you immediate access to inputs and outputs during the execution of either the program or an interrupt routine.

If you use subroutines in your program, the subroutines are stored as part of the program. The subroutines are executed when they are called by the main program, by another subroutine, or by an interrupt routine. Subroutine nesting depth is 8 from the main and 1 from an interrupt routine.

If you use interrupts in your program, the interrupt routines that are associated with the interrupt events are stored as part of the program. The interrupt routines are not executed as part of the normal scan cycle, but are executed when the interrupt event occurs (which could be at any point in the scan cycle).

Local memory is reserved for each of eleven entities: one main, eight subroutine nesting levels when initiated from the main, one interrupt, and one subroutine nesting level when initiated from an interrupt routine. Local memory has a local scope in that it is available only within its associated program entity, and cannot be accessed by the other program entities. For more information about Local memory, refer to Local Memory Area: L in this chapter.

Figure 4-3 depicts the flow of a typical scan including the Local memory usage and two interrupt events, one during the program—execution phase and another during the communications phase of the scan cycle. Subroutines are called by the next higher level, and are executed when called.

Interrupt routines are not called; they are a result of an occurrence of the associated interrupt event.

25

S7-200 Programmable Controller System Manual

Max 64 bytes data for each entity level

1 ms*

Event

1 ms*

Reading inputs to process image input register

Main Program

Subroutine

Interrupt

Subroutine

Main Program

Subroutine

1 ms*

1 ms*

Subroutine

Subroutine

Main Program

Communication

HMI, EM277, Status Chart, PC access

ٛ

Event

1 ms*

* Internal 1ms

Timer Update

Self-test diagnostics

S7-200 ensures that the firmware, the program memory, and any expansion modules are working properly

Writing from proces s image to the outputs

SI Q0.0

Immediate I/O operations

Figure 4-3 Typical Scan Flow

26

PLC Concepts

Chapter 4

Processing Any Communications Requests

During the message-processing phase of the scan cycle, the S7-200 processes any messages that were received from the communications port or intelligent I/O modules.

Executing the CPU Self-test Diagnostics

During this phase of the scan cycle, the S7-200 checks for proper operation of the CPU and for the status of any expansion modules.

Writing to the Digital Outputs

At the end of every scan cycle, the S7-200 writes the values stored in the process-image output register to the digital outputs. (Analog outputs are updated immediately, independently from the scan cycle.)

Accessing the Data of the S7-200

The S7-200 stores information in different memory locations that have unique addresses. You can explicitly identify the memory address that you want to access. This allows your program to have direct access to the information. Table 4-1 shows the range of integer values that can be represented by the different sizes of data.

Table 4-1

Representation

Unsigned Integer

Signed Integer

Real

IEEE 32-bit

Floating Point

Decimal and Hexadecimal Ranges for the Different Sizes of Data

Byte (B)

0 to 255

0 to FF

Word (W)

0 to 65,535

0 to FFFF

—128 to +127

80 to 7F

—32,768 to +32,767

8000 to 7FFF

Not applicable Not applicable

Double Word (D)

0 to 4,294,967,295

0 to FFFF FFFF

—2,147,483,648 to +2,147,483,647

8000 0000 to 7FFF FFFF

+1.175495E—38 to +3.402823E+38 (positive)

—1.175495E—38 to —3.402823E+38 (negative)

To access a bit in a memory area, you specify the address, which includes the memory area identifier, the byte address, and the bit number. Figure 4-4 shows an example of accessing a bit

(which is also called “byte.bit” addressing). In this example, the memory area and byte address

(I = input, and 3 = byte 3) are followed by a period (“.”) to separate the bit address (bit 4).

I 3

.

4

Bit of byte, or bit number: bit 4 of 8 (0 to 7)

Period separates the byte address from the bit number

Byte address: byte 3 (the fourth byte)

Memory area identifier

Byte.Bit Addressing

Process-image Input (I) Memory Area

7 6 5 4 3 2 1 0

Byte 0

Byte 1

Byte 2

Byte 3

Byte 4

Byte 5

Figure 4-4

You can access data in most memory areas (V, I, Q, M, S, L, and SM) as bytes, words, or double words by using the byte-address format. To access a byte, word, or double word of data in the memory, you must specify the address in a way similar to specifying the address for a bit. This includes an area identifier, data size designation, and the starting byte address of the byte, word, or double-word value, as shown in Figure 4-5.

27

S7-200 Programmable Controller System Manual

Data in other memory areas (such as T, C, HC, and the accumulators) are accessed by using an address format that includes an area identifier and a device number.

V W 100 V D 100 V B 100

VB100

Byte address

Access to a byte size

Area identifier

MSB

7

VB100

LSB

0

Byte address

Access to a word size

Area identifier

Byte address

Access to a double word size

Area identifier

MSB =

LSB = most significant bit least significant bit

VW100

Most significant byte

MSB

15

VB100

8 7

Least significant byte

LSB

VB101

0

VD100

Most significant byte

MSB

31

VB100

24 23

VB101

16 15

VB102

8 7

Least significant byte

LSB

VB103

0

Figure 4-5 Comparing Byte, Word, and Double-Word Access to the Same Address

Accessing Data in the Memory Areas

Process-Image Input Register: I

The S7-200 samples the physical input points at the beginning of each scan cycle and writes these values to the process-image input register. You can access the process-image input register in bits, bytes, words, or double words:

Bit:

Byte, Word, or Double Word:

I

[byte address].[bit address]

I

[size][starting byte address]

I0.1

IB4

Process-Image Output Register: Q

At the end of the scan cycle, the S7-200 copies the values stored in the process-image output register to the physical output points. You can access the process-image output register in bits, bytes, words, or double words:

Bit:

Byte, Word, or Double Word:

Q

[byte address].[bit address]

Q

[size][starting byte address]

Q1.1

QB5

Variable Memory Area: V

You can use V memory to store intermediate results of operations being performed by the control logic in your program. You can also use V memory to store other data pertaining to your process or task. You can access the V memory area in bits, bytes, words, or double words:

Bit:

Byte, Word, or Double Word:

V

[byte address].[bit address]

V

[size][starting byte address]

V10.2

VW100

Bit Memory Area: M

You can use the bit memory area (M memory) as control relays to store the intermediate status of an operation or other control information. You can access the bit memory area in bits, bytes, words, or double words:

Bit:

Byte, Word, or Double Word:

M

[byte address].[bit address]

M

[size][starting byte address]

M26.7

MD20

28

PLC Concepts

Chapter 4

Timer Memory Area: T

The S7-200 provides timers that count increments of time in resolutions (time-base increments) of

1 ms, 10 ms, or 100 ms. Two variables are associated with a timer:

—

—

Current value: this 16-bit signed integer stores the amount of time counted by the timer.

Timer bit: this bit is set or cleared as a result of comparing the current and the preset value.

The preset value is entered as part of the timer instruction.

You access both of these variables by using the timer address (T + timer number). Access to either the timer bit or the current value is dependent on the instruction used: instructions with bit operands access the timer bit, while instructions with word operands access the current value. As shown in Figure 4-6, the Normally Open Contact instruction accesses the timer bit, while the Move

Word instruction accesses the current value of the timer.

Format: T

[timer number]

T24

Figure 4-6

I2.1

T3

EN

MOV_

W

IN OUT VW200

Current Value

15 (MSB)

T0

T1

T2

T3

Accesses the current value

Accessing the Timer Bit or the Current Value of a Timer

0 (LSB)

Timer Bits

T0

T1

T2

T3

T3

Accesses the timer bit

Counter Memory Area: C

The S7-200 provides three types of counters that count each low-to-high transition event on the counter input(s): one type counts up only, one type counts down only, and one type counts both up and down. Two variables are associated with a counter:

—

—

Current value: this 16-bit signed integer stores the accumulated count.

Counter bit: this bit is set or cleared as a result of comparing the current and the preset value. The preset value is entered as part of the counter instruction.

You access both of these variables by using the counter address (C + counter number). Access to either the counter bit or the current value is dependent on the instruction used: instructions with bit operands access the counter bit, while instructions with word operands access the current value.

As shown in Figure 4-7, the Normally Open Contact instruction accesses the counter bit, while the

Move Word instruction accesses the current value of the counter.

Format: C

[counter number]

C24

I2.1

Figure 4-7

C3

MOV_W

EN

IN OUT VW200

Current Value

15 (MSB)

C0

C1

C2

C3

Accesses the current value

Accessing the Counter Bit or the Current Value of a Counter

0 (LSB)

Counter Bits

C0

C1

C2

C3

C3

Accesses the counter bit

29

S7-200 Programmable Controller System Manual

High-Speed Counters: HC

The high-speed counters count high-speed events independent of the CPU scan. High-speed counters have a signed, 32-bit integer counting value (or current value). To access the count value for the high-speed counter, you specify the address of the high-speed counter, using the memory type (HC) and the counter number (such as HC0). The current value of the high-speed counter is a read-only value and can be addressed only as a double word (32 bits).

Format: HC

[high-speed counter number]

HC1

Accumulators: AC

The accumulators are read/write devices that can be used like memory. For example, you can use accumulators to pass parameters to and from subroutines and to store intermediate values used in a calculation. The S7-200 provides four 32-bit accumulators (AC0, AC1, AC2, and AC3). You can access the data in the accumulators as bytes, words, or double words.

The size of the data being accessed is determined by the instruction that is used to access the accumulator. As shown in Figure 4-8, you use the least significant 8 or 16 bits of the value that is stored in the accumulator to access the accumulator as bytes or words. To access the accumulator as a double word, you use all 32 bits.

For information about how to use the accumulators within interrupt subroutines, refer to the

Interrupt Instructions in Chapter 6.

Format: AC

[accumulator number]

AC0

AC2 (accessed as a byte)

MSB

7

LSB

0

Figure 4-8 Accessing the Accumulators

AC1 (accessed as a word)

MSB

15

Most significant

8

Byte 1

7

Least significant

LSB

0

Byte 0

AC3 (accessed as a double word)

MSB

31 24 23 16 15

Most significant

Byte 3 Byte 2 Byte 1

8 7

Least significant

LSB

0

Byte 0

30

PLC Concepts

Chapter 4

Special Memory: SM

The SM bits provide a means for communicating information between the CPU and your program.

You can use these bits to select and control some of the special functions of the S7-200 CPU, such as: a bit that turns on for the first scan cycle, a bit that toggles at a fixed rate, or a bit that shows the status of math or operational instructions. (For more information about the SM bits, see

Appendix D.) You can access the SM bits as bits, bytes, words, or double words:

Bit:

Byte, Word, or Double Word:

SM

[byte address].[bit address]

SM

[size][starting byte address]

SM0.1

SMB86

Local Memory Area: L

The S7-200 provides 64 bytes of local memory of which 60 can be used as scratchpad memory or for passing formal parameters to subroutines.

Tip

If you are programming in either LAD or FBD, STEP 7—Micro/WIN reserves the last four bytes of local memory for its own use.

Local memory is similar to V memory with one major exception. V memory has a global scope while L memory has a local scope. The term global scope means that the same memory location can be accessed from any program entity (main program, subroutines, or interrupt routines). The term local scope means that the memory allocation is associated with a particular program entity.

The S7-200 allocates 64 bytes of L memory for the main program, 64 bytes for each subroutine nesting level, and 64 bytes for interrupt routines.

The allocation of L memory for the main program cannot be accessed from subroutines or from interrupt routines. A subroutine cannot access the L memory allocation of the main program, an interrupt routine, or another subroutine. Likewise, an interrupt routine cannot access the L memory allocation of the main program or of a subroutine.

The allocation of L memory is made by the S7-200 on an as-needed basis. This means that while the main portion of the program is being executed, the L memory allocations for subroutines and interrupt routines do not exist. At the time that an interrupt occurs or a subroutine is called, local memory is allocated as required. The new allocation of L memory might reuse the same L memory locations of a different subroutine or interrupt routine.

The L memory is not initialized by the S7-200 at the time of allocation and might contain any value. When you pass formal parameters in a subroutine call, the values of the parameters being passed are placed by the S7-200 in the appropriate L memory locations of the called subroutine. L memory locations, which do not receive a value as a result of the formal parameter passing step, will not be initialized and might contain any value at the time of allocation.

Bit:

Byte, Word, or Double Word:

L

[byte address].[bit address]

L

[size] [starting byte address]

L0.0

LB33

Analog Inputs: AI

The S7-200 converts an analog value (such as temperature or voltage) into a word-length (16-bit) digital value. You access these values by the area identifier (AI), size of the data (W), and the starting byte address. Since analog inputs are words and always start on even-number bytes

(such as 0, 2, or 4), you access them with even-number byte addresses (such as AIW0, AIW2, or

AIW4). Analog input values are read-only values.

Format: AIW

[starting byte address]

AIW4

31

S7-200 Programmable Controller System Manual

Analog Outputs: AQ

The S7-200 converts a word-length (16-bit) digital value into a current or voltage, proportional to the digital value (such as for a current or voltage). You write these values by the area identifier

(AQ), size of the data (W), and the starting byte address. Since analog outputs are words and always start on even-number bytes (such as 0, 2, or 4), you write them with even-number byte addresses (such as AQW0, AQW2, or AQW4). Analog output values are write-only values.

Format: AQW

[starting byte address]

AQW4

Sequence Control Relay (SCR) Memory Area: S

SCRs or S bits are used to organize machine operations or steps into equivalent program segments. SCRs allow logical segmentation of the control program. You can access the S bits as bits, bytes, words, or double words.

Bit:

Byte, Word, or Double Word:

S

[byte address].[bit address]

S

[size][starting byte address]

S3.1

SB4

Format for Real Numbers

Real (or floating-point) numbers are represented as 32-bit, single-precision numbers, whose format is described in the ANSI/IEEE 754—1985 standard. See Figure 4-9. Real numbers are accessed in double-word lengths.

For the S7-200, floating point numbers are accurate up to 6 decimal places. Therefore, you can specify a maximum of 6 decimal p g g p

MSB

31 30

S Exponent

23 22

Mantissa

Sign

Figure 4-9 Format of a Real Number

LSB

0

Accuracy when Calculating Real Numbers

Calculations that involve a long series of values including very large and very small numbers can produce inaccurate results. This can occur if the numbers differ by 10 to the power of

x

, where

x

> 6.

For example: 100 000 000 + 1 = 100 000 000

Format for Strings

A string is a sequence of characters, with each character being stored as a byte. The first byte of the string defines the length of the string, which is the number of characters. Figure 4-10 shows the format for a string. A string can have a length of 0 to 254 characters, plus the length byte, so the maximum length for a string is 255 bytes. A string constant is limited to 126 bytes.

Length

Byte 0

Character 1

Byte 1

Figure 4-10 Format for Strings

Character 2

Byte 2

Character 3

Byte 3

Character 4

Byte 4

…

Character 254

Byte 254

32

PLC Concepts

Chapter 4

Specifying a Constant Value for S7-200 Instructions

You can use a constant value in many of the S7-200 instructions. Constants can be bytes, words, or double words. The S7-200 stores all constants as binary numbers, which can then be represented in decimal, hexadecimal, ASCII, or real number (floating point) formats. See

Table 4-2.

Table 4-2 Representation of Constant Values

Representation

Decimal

Hexadecimal

Binary

ASCII

Real

String

Format

[decimal value]

16#[hexadecimal value]

2#[binary number]

’[ASCII text]’

ANSI/IEEE 754—1985

“[stringtext]”

Sample

20047

16#4E4F

2#1010_0101_1010_0101

’ABCD’

+1.175495E—38 (positive) —1.175495E—38 (negative)

“ABCDE”

Tip

The S7-200 CPU does not support “data typing” or data checking (such as specifying that the constant is stored as an integer, a signed integer, or a double integer). For example, an Add instruction can use the value in VW100 as a signed integer value, while an Exclusive Or instruction can use the same value in VW100 as an unsigned binary value.

Addressing the Local and Expansion I/O

The local I/O provided by the CPU provides a fixed set of I/O addresses. You can add I/O points to the S7-200 CPU by connecting expansion I/O modules to the right side of the CPU, forming an I/O chain. The addresses of the points of the module are determined by the type of I/O and the position of the module in the chain, with respect to the preceding input or output module of the same type. For example, an output module does not affect the addresses of the points on an input module, and vice versa. Likewise, analog modules do not affect the addressing of digital modules, and vice versa.

Tip

Process-image register space for digital I/O is always reserved in increments of eight bits (one byte). If a module does not provide a physical point for each bit of each reserved byte, these unused bits cannot be assigned to subsequent modules in the I/O chain. For input modules, the unused bits are set to zero with each input update cycle.

Analog I/O points are always allocated in increments of two points. If a module does not provide physical I/O for each of these points, these I/O points are lost and are not available for assignment to subsequent modules in the I/O chain.

33

S7-200 Programmable Controller System Manual

Figure 4-11 provides an example of the I/O numbering for a particular hardware configuration. The gaps in the addressing (shown as gray italic text) cannot be used by your program.

CPU 224XP 4 In / 4 Out 8 In

4 Analog In

1 Analog Out

8 Out

I1.0

I1.1

I1.2

I1.3

I1.4

I1.5

I0.0

I0.1

I0.2

I0.3

I0.4

I0.5

I0.6

I0.7

I1.6

I1.7

AIW0

AIW2

Local I/O

Q0.0

Q0.1

Q0.2

Q0.3

Q0.4

Q0.5

Q0.6

Q0.7

Q1.0

Q1.1

Q1.2

Q1.3

Q1.4

Q1.5

Q1.6

Q1.7

AQW0

AQW2

Module 0

I2.0

I2.1

I2.2

I2.3

I2.4

I2.5

I2.6

I2.7

Q2.0

Q2.1

Q2.2

Q2.3

Q2.4

Q2.5

Q2.6

Q2.7

Expansion I/O

Module 1

I3.0

I3.1

I3.2

I3.3

I3.4

I3.5

I3.6

I3.7

Module 2

AIW4

AIW6

AIW8

AIW10

AQW4

AQW6

Figure 4-11 Sample I/O Addresses for Local and Expansion I/O (CPU 224XP)

Module 3

Q3.0

Q3.1

Q3.2

Q3.3

Q3.4

Q3.5

Q3.6

Q3.7

4 Analog In

1 Analog Out

Module 4

AIW12

AIW14

AIW16

AIW18

AQW8

AQW10

Using Pointers for Indirect Addressing of the S7-200 Memory Areas

Indirect addressing uses a pointer to access the data in memory. Pointers are double word memory locations that contain the address of another memory location. You can only use

V memory locations, L memory locations, or accumulator registers (AC1, AC2, AC3) as pointers.

To create a pointer, you must use the Move Double Word instruction to move the address of the indirectly addressed memory location to the pointer location. Pointers can also be passed to a subroutine as a parameter.

The S7-200 allows pointers to access the following memory areas: I, Q, V, M, S, AI, AQ, SM,

T (current value only), and C (current value only). You cannot use indirect addressing to access an individual bit or to access HC or L memory areas.

To indirectly access the data in a memory address, you create a pointer to that location by entering an ampersand (&) and the memory location to be addressed. The input operand of the instruction must be preceded with an ampersand (&) to signify that the address of a memory location, instead of its contents, is to be moved into the location identified in the output operand of the instruction (the pointer).

Entering an asterisk (*) in front of an operand for an instruction specifies that the operand is a pointer. As shown in Figure 4-12, entering *AC1 specifies that AC1 is a pointer to the word-length value being referenced by the Move Word (MOVW) instruction. In this example, the values stored in both VB200 and VB201 are moved to accumulator AC0.

V199

V200

V201

V202

V203

1 2

3 4

5 6

7 8

AC1 address of VW200

AC0

1 2 3 4

MOVD &VW200, AC1

Creates the pointer by moving the address of VB200

(address of the initial byte for VW200) to AC1.

MOVW *AC1, AC0

Moves the word value pointed to by AC1 to AC0.

Figure 4-12 Creating and Using a Pointer

34

PLC Concepts

Chapter 4

As shown in Figure 4-13, you can change the value of a pointer. Since pointers are 32-bit values, use double-word instructions to modify pointer values. Simple mathematical operations, such as adding or incrementing, can be used to modify pointer values.

V199

V200

V201

V202

V203

AC1 address of VW200

1 2

3 4

5 6

7 8

AC0

1 2 3 4

V199

V200

V201

V202

V203

1 2

3 4

5 6

7 8

AC1 address of VW202

AC0

Figure 4-13 Modifying a Pointer

5 6 7 8

MOVD &VW200, AC1

Creates the pointer by moving the address of

VB200 (address of VW200’s initial byte) to AC1.

MOVW *AC1, AC0

Moves the word value pointed to by

AC1 (VW200) to AC0.

+D +2, AC1

Adds 2 to the accumulator to point to the next word location.

MOVW *AC1, AC0

Moves the word value pointed to by

AC1 (VW202) to AC0.

Tip

Remember to adjust for the size of the data that you are accessing: to access a byte, increment the pointer value by 1; to access a word or a current value for a timer or counter, add or increment the pointer value by 2; and to access a double word, add or increment the pointer value by 4.

Sample Program for Using an Offset to Access Data in V Memory

This example uses LD10 as a pointer to the address VB0. You then increment the pointer by an offset stored in VD1004.

LD10 then points to another address in V memory (VB0 + offset). The value stored in the V memory address pointed to by LD10 is then copied to VB1900. By changing the value in VD1004, you can access any V memory location.

Network 1 //How to use an offset to read the value

//of any VB location:

//

//1. Load the starting address of the

//V memory to a pointer.

//2. Add the offset value to the pointer.

//3. Copy the value from the V memory

//location (offset) to VB1900.

//

LD SM0.0

MOVD &VB0, LD10

+D VD1004, LD10

MOVB *LD10, VB1900

35

S7-200 Programmable Controller System Manual

Sample Program for Using a Pointer to Access Data in a Table

This example uses LD14 as a pointer to a recipe stored in a table of recipes that begins at VB100. In this example,

VW1008 stores the index to a specific recipe in the table. If each recipe in the table is 50 bytes long, you multiply the index by 50 to obtain the offset for the starting address of a specific recipe. By adding the offset to the pointer, you can access the individual recipe from the table. In this example, the recipe is copied to the 50 bytes that start at VB1500.

Network 1 //How to transfer a recipe from a table of recipes:

// — Each recipe is 50 bytes long.

// — The index parameter (VW1008) identifies

// the recipe to be loaded.

//

//1. Create a pointer to the starting address

// of the recipe table.

//2. Convert the index of the recipe to a

// double-word value.

//3. Multiply the offset to accommodate

// the size of each recipe.

//4. Add the adjusted offset to the pointer.

//5. Transfer the selected recipe to

// VB1500 through VB1549.

LD SM0.0

MOVD &VB100, LD14

ITD

*D

VW1008, LD18

+50, LD18

+D LD18, LD14

BMB *LD14, VB1500, 50

Understanding How the S7-200 Saves and Restores Data

The S7-200 provides a variety of features to ensure that your user program and data are properly retained in the S7-200.

—

—

—

Retentive Data Memory — Areas of data memory the user selects to remain unchanged over a power cycle, as long as the super capacitor and the optional battery cartridge have not been discharged. V, M, Timer Currents, and Counter Currents are the only data memory areas that are configurable to be retentive.

Permanent Memory — Non-volatile memory used to store the program block, data block, system block, forced values, M memory configured to be saved on loss of power, and selected values written under user program control

Memory Cartridge — Removable non-volatile memory used to store the program block, data block, system block, recipes, data logs, and forced values

You can use the S7-200 Explorer to store documentation files (doc, text, pdf, etc.) into the cartridge. You can also use the S7-200 Explorer to perform general file maintenance on the memory cartridge (copy, delete, directory and launch).

To install a memory cartridge, remove the plastic slot cover from the S7-200 CPU and insert the memory cartridge in the slot. The memory cartridge is keyed for proper installation.

Caution

Electrostatic discharge can damage the memory cartridge or the receptacle on the S7-200 CPU.

Make contact with a grounded conductive pad and/or wear a grounded wrist strap when you handle the cartridge. Store the cartridge in a conductive container.

36

PLC Concepts

Chapter 4

Downloading and Uploading the Elements of Your Project

Your project consists of different elements:

—

—

—

—

Program block

Data block (optional)

System block (optional)

Recipes (optional)

—

Data log configurations (optional)

When you download a project, the program block, data block and system block are stored in permanent memory for safekeeping. Recipes and data log configurations are stored in the memory cartridge, and replace any existing recipes and data logs. Any program elements not included in the download operation are left unchanged in permanent memory and the memory cartridge.

If a project download includes recipes or data log configurations, the memory cartridge must remain installed for proper program operation.

To download your project to an S7-200

CPU:

1. Select the

File > Download

menu command.

2. Click each project element you wish to download.

3. Click the Download Button.

Figure 4-14 Download a Project to S7-200 CPU

When you upload a project to your computer using STEP 7—Micro/WIN, the S7-200 uploads the program block, data block and system block from permanent memory. The recipes and data log configurations are uploaded from the memory cartridge. The data from the data logs is not uploaded to your computer using STEP7—Micro/WIN. The S7-200 Explorer is used to upload the data from the data logs (see Chapter 14).

To upload your project from an S7-200

CPU:

1. Select the

File > Upload

menu command.

2. Click each project element that you wish to upload.

3. Click the Upload Button.

Figure 4-15 Upload a Project to the S7-200

37

S7-200 Programmable Controller System Manual

38

Storing your Program on a Memory Cartridge

The S7-200 allows you to copy your user program from one CPU to another using a memory cartridge. You can also distribute updates for any of the following blocks in your S7-200: the program block, system block or data block.

Before copying any program elements to the memory cartridge, STEP 7—Micro/WIN deletes all program elements (including recipes and data logs) except for user files on the memory cartridge.

If your program will not fit because of the size of your files, you can do one of two things to create enough storage space for your program. You can either erase the memory cartridge using the

PLC > Erase Memory Cartridge

menu command. Or, you can open the S7-200 Explorer and remove user files that are no longer needed.

The PLC must be in STOP mode to program the memory cartridge.

To store your program in the memory cartridge:

1. Select the

PLC > Program

Memory Cartridge

menu command.

2. Click each project element you wish to copy to the memory cartridge (all program elements that exist in your project are selected by default). If the system block is selected the force values will be copied as well.

3. Click the Program Button

Figure 4-16 Store a Program on a Memory Cartridge

The program block, system block, data block, and any forced values are copied from permanent memory in the S7-200 to the memory cartridge. The recipes and data log configurations are copied from STEP 7—Micro/WIN to the memory cartridge.

Restoring a Program from a Memory Cartridge

To transfer the program from a memory cartridge to the S7-200, you must apply power to the

S7-200 with the memory cartridge installed. If any of the blocks or force values present in the memory cartridge are different from the blocks or force values in the S7-200, then all blocks present in the memory cartridge are copied to the S7-200.

—

—

—

If a program block was transferred from the memory cartridge, the program block in permanent memory is replaced.

If a data block was transferred from the memory cartridge, the data block in permanent memory is replaced, all of V memory is cleared, and V memory is initialized with the contents of the data block.

If a system block was transferred from the memory cartridge, the system block and force values in the permanent memory are replaced and all retentive memory is cleared.

Once the transferred program has been stored to permanent memory you can remove the memory cartridge. However, if recipes or data logs are present in the cartridge, you must leave the memory cartridge installed. Leaving the memory cartridge installed will delay entry to RUN mode on subsequent power cycles.

Notice

Powering on an S7-200 CPU with an installed memory cartridge that was programmed by a different model of S7-200 CPU can cause an error. Memory cartridges that are programmed by a lower model number CPU can be read by a higher model number CPU. However, the opposite is not true. For example, memory cartridges that are programmed by a CPU 221 or

CPU 222 can be read by a CPU 224, but memory cartridges that are programmed by a

CPU 224 are rejected by a CPU 221 or CPU 222.

For a complete list of memory cartridge usage restrictions, see Optional Cartridges (Memory

Cartridge) in Appendix A.

PLC Concepts

Chapter 4

Saving the Retentive M Memory Area on Power Loss

If you configured any of the first 14 bytes of bit memory (MB0 to MB13) to be retentive, these bytes are saved to permanent memory when the S7-200 loses power. By default, the first 14 bytes of M memory are selected to be non-retentive.

Restoring Data after Power On

When power is applied, the S7-200 restores the program block and the system block from permanent memory. The S7-200 then verifies that the super capacitor and optional battery cartridge, if installed, has successfully maintained the data stored in RAM memory. If the data was successfully maintained, the retentive areas of user data memory are left unchanged. The non-retentive portions of V memory are restored from the contents of the data block in permanent memory. The non-retentive portions of other memory areas are cleared.

If the contents of RAM were not maintained (such as after an extended power failure), the S7-200 clears all user data areas, sets the Retentive Data Lost memory bit (SM0.2), restores V memory from the contents of the data block in permanent memory, and restores the first 14 bytes of

M memory from permanent memory if these bytes were previously configured as retentive.

Using Your Program to Save V Memory to Permanent Memory

You can save a value (byte, word, or double word) stored in any location of the V memory area to permanent memory. A save to permanent memory operation typically increases the scan time by

10 to 15 ms. The value written by the Save operation overwrites any previous value stored in the

V memory area of permanent memory.

The save to permanent memory operation does not update the data in the memory cartridge.

Tip

Since the number of save operations to the permanent memory (EEPROM) is limited (100,000 minimum, and 1,000,000 typical), you should ensure that only necessary values are saved.

Otherwise, the EEPROM can wear out and the CPU can fail. Typically, you should perform save operations at the occurrence of specific events that occur rather infrequently.

For example, if the scan time of the S7-200 is 50 ms and a value was saved once per scan, the

EEPROM would last a minimum of 5,000 seconds, which is less than an hour and a half. On the other hand, if a value were saved once an hour, the EEPROM would last a minimum of 11 years.

Copying V Memory to Permanent Memory

Special Memory Byte 31 (SMB31) commands the S7-200 to copy a value in V memory to the

V memory area of permanent memory. Special Memory Word 32 (SMW32) stores the address location of the value that is to be copied. Figure 4-17 shows the format of SMB31 and SMW32.

Use the following steps to program the S7-200 to save or write a specific value in V memory:

1. Load the V memory address of the value to be saved in SMW32.

2. Load the size of the data in SM31.0 and

SM31.1, as shown in Figure 4-17.

3. Set SM31.7 to 1.

SMB31

7 sv 0 0 0 0 0 s1 s0

0

Size of value to be saved:

00 — byte

01 — byte

10 — word

11 — double word

Save to permanent memory:

0 = No

1 = Yes

The CPU resets

SM31.7 after each save operation.

At the end of every scan cycle, the S7-200 checks

SM31.7; if SM31.7 equals 1, the specified value is saved to permanent memory. The operation is complete when the S7-200 resets SM31.7 to 0.

Do not change the value in V memory until the save operation is complete.

SMW32

15 V memory address 0

Specify the V memory address as an offset from V0.

Figure 4-17 SMB31 and SMW32

39

S7-200 Programmable Controller System Manual

Tip

Copying V Memory to permanent memory can be used to save values that are created from an

HMI and stored from the program to the internal EEPROM.

To include the values saved to the internal EEPROM in your STEP 7—Micro/WIN project, you must upload the DB. However, this upload is only possible if the DB (which included a variable that was at an equal or higher address than the V Memory address saved in SMW32) was previously downloaded from STEP 7—Micro/WIN.

Sample Program: Copying V Memory to the Permanent Memory

This example transfers VB100 to permanent memory. On a rising edge of I0.0, if another transfer is not in progress, it loads the address of the V memory location to be transferred to SMW32. It selects the amount of V memory to transfer

(1=Byte; 2=Word; 3=Double Word or Real). It then sets SM31.7 to have the S7-200 transfer the data at the end of the scan.

The S7-200 automatically resets SM31.7 when the transfer is complete.

Network 1 //Transfer a V memory

//location (VB100) to

//permanent memory

LD

EU

I0.0

AN SM31.7

MOVW +100, SMW32

MOVB 1, SMB31

S SM31.7, 1

Selecting the Operating Mode for the S7-200 CPU

The S7-200 has two modes of operation: STOP mode and RUN mode. The status LEDs on the front of the CPU indicates the current mode of operation. In STOP mode, the S7-200 is not executing the program, and you can download a program or the CPU configuration. In RUN mode, the S7-200 is running the program.

—

—

—

The S7-200 provides a mode switch for changing the mode of operation. You can use the mode switch (located under the front access door of the S7-200) to manually select the operating mode: setting the mode switch to STOP mode stops the execution of the program; setting the mode switch to RUN mode starts the execution of the program; and setting the mode switch to TERM (terminal) mode does not change the operating mode.

If a power cycle occurs when the mode switch is set to either STOP or TERM, the S7-200 goes automatically to STOP mode when power is restored. If a power cycle occurs when the mode switch is set to RUN, the S7-200 goes to RUN mode when power is restored.

STEP 7—Micro/WIN allows you to change the operating mode of the online S7-200. To enable the software to change the operating mode, you must manually set the mode switch on the S7-200 to either TERM or RUN. You can use the

PLC > STOP

or

PLC > RUN

menu commands or the associated buttons on the toolbar to change the operating mode.

You can insert the STOP instruction in your program to change the S7-200 to STOP mode.

This allows you to halt the execution of your program based on the program logic. For more information about the STOP instruction, see Chapter 6.

40

PLC Concepts

Chapter 4

Using the S7-200 Explorer

The S7-200 Explorer is an extension to the Windows Explorer application that provides access to S7-200 PLCs and allows the contents of each connected

PLC to be explored. The different blocks that may reside in either the PLC or the memory cartridge can be determined.

Properties are available for each block.

Since the S7-200 Explorer is an extension to the Windows Explorer application, standard Windows navigation and behaviors are supported.

Figure 4-18 S7-200 Explorer

The S7-200 Explorer is the mechanism used to read data log data stored within the memory cartridge. Refer to Chapter 14 for more information about data logs.

The S7-200 Explorer can also be used to read or write user files to the memory cartridge. These can be any type of files, Word documents, bitmap files, jpeg files, or STEP 7—Micro/WIN projects.

Features of the S7-200

The S7-200 provides several special features that allow you to customize how the S7-200 functions to better fit your application.

The S7-200 Allows Your Program to Immediately Read or Write the I/O

The S7-200 instruction set provides instructions that immediately read from or write to the physical

I/O. These immediate I/O instructions allow direct access to the actual input or output point, even though the image registers are normally used as either the source or the destination for I/O accesses.

The corresponding process-image input register location is not modified when you use an immediate instruction to access an input point. The corresponding process-image output register location is updated simultaneously when you use an immediate instruction to access an output point.

Tip

The S7-200 handles reads of analog inputs as immediate data, unless you enable analog input filtering. When you write a value to an analog output, the output is updated immediately.

It is usually advantageous to use the process-image register rather than to directly access inputs or outputs during the execution of your program. There are three reasons for using the image registers:

—

—

—

The sampling of all inputs at the start of the scan synchronizes and freezes the values of the inputs for the program execution phase of the scan cycle. The outputs are updated from the image register after the execution of the program is complete. This provides a stabilizing effect on the system.

Your program can access the image register much more quickly than it can access I/O points, allowing faster execution of the program.

I/O points are bit entities and must be accessed as bits or bytes, but you can access the image register as bits, bytes, words, or double words. Thus, the image registers provide additional flexibility.

41

S7-200 Programmable Controller System Manual

The S7-200 Allows Your Program to Interrupt the Scan Cycle

If you use interrupts, the routines associated with each interrupt event are stored as part of the program. The interrupt routines are not executed as part of the normal scan cycle, but are executed when the interrupt event occurs (which could be at any point in the scan cycle).

Interrupts are serviced by the S7-200 on a first-come-first-served basis within their respective priority assignments. See the Interrupt instructions in Chapter 6 for more information.

The S7-200 Allows You to Allocate Processing Time for Run Mode Edit and Execution Status

You can configure a percentage of the scan cycle to be dedicated for processing a run mode edit compilation or execution status. (Run mode edit and execution status are options provided by

STEP 7—Micro/WIN to make debugging your program easier.) As you increase the percentage of time that is dedicated to these two tasks, you increase the scan time, which makes your control process run more slowly.

The default percentage of the scan dedicated to processing run mode edits and execution status is set to 10%. This setting was chosen to provide a reasonable compromise for processing the compilation and status operations while minimizing the impact to your control process. You can adjust this value by 5% increments up to a maximum of 50%. To set the scan cycle time-slice for background communications:

1. Select the

View > Component >

System Block

menu command and select Background Time.

2. In the Background tab, use the drop down box to select the communications background time.

3. Click OK to save your selection.

4. Download the modified system block to the S7-200.

Figure 4-19 Communications Background Time

42

PLC Concepts

Chapter 4

The S7-200 Allows You to Set the States of Digital Outputs for Stop

Mode

The output table of the S7-200 allows you to determine whether to set the state of the digital output points to known values upon a transition to the STOP mode, or to leave the outputs in the state they were in before the transition to the STOP mode. The output table is part of the system block that is downloaded and stored in the S7-200.

1. Select the

View > Component >

System Block

menu command and select Output Table. Click on the Digital tab.

2. To freeze the outputs in their last state, select the Freeze Outputs checkbox.

3. To copy the table values to the outputs, enter the output table values by clicking the checkbox for each output bit you want to set to

On (1) after a run-to-stop transition.

The default values of the table are all zeroes.

4. Click OK to save your selections.

5. Download the modified system block to the S7-200.

Figure 4-20 Digital Output Table

The S7-200 Allows You to Configure the Value of Analog Outputs

The Analog Output Table allows you to set analog output points to known values after a

RUN-to-STOP transition, or to preserve the output values that existed before the transition to

STOP mode. The Analog Output table is part of the system block that is downloaded and stored in the S7-200 CPU.

1. Select the

View > Component >

System Block

menu command and select Output Table. Click on the Analog tab.

2. To freeze the outputs in their last state, select the Freeze Outputs check box.

3. The Freeze Values table allows you to set the analog outputs to a known value (—32768 to 37262), on a RUN-to-STOP transition.

4. Click OK to save your selections.

5. Download the modified system block to the S7-200.

Figure 4-21 Analog Output Table

The S7-200 Allows You to Define Memory to Be Retained on Loss of

Power

You can define up to six retentive ranges to select the areas of memory you want to retain through power cycles. You can define ranges of addresses in the following memory areas to be retentive:

V, M, C, and T. For timers, only the retentive timers (TONR) can be retained. The default setting for the first 14 bytes of M Memory is to be non-retentive.

Only the current values for timers and counters can be retained: the timer and counter bits are not retentive.

43

S7-200 Programmable Controller System Manual

Tip

Changing the range MB0 to MB13 to be retentive enables a special feature that automatically saves these locations to the permanent memory on power down.

To define the retentive memory:

1. Select the

View > Component >

System Block

menu command and select Retentive Ranges.

2. Select the ranges of memory to be retained following loss of power and click OK.

3. Download the modified system block to the S7-200.

Figure 4-22 Retentive Memory

The S7-200 Allows You to Filter the Digital Inputs

The S7-200 allows you to select an input filter that defines a delay time (selectable from 0.2 ms to

12.8 ms) for some or all of the local digital input points. This delay helps to filter noise on the input wiring that could cause inadvertent changes to the states of the inputs.

The input filter is part of the system block that is downloaded and stored in the

S7-200. The default filter time is 6.4 ms.

As shown in Figure 4-23, each delay specification applies to groups of input points.

To configure the delay times for the input filter:

1. Select the

View > Component >

System Block

menu command and select Input Filters. Click on the Digital tab.

2. Enter the amount of delay for each group of inputs and click OK.

3 Download the modified system block to the S7-200.

Figure 4-23 Digital Input Filter

Tip

The digital input filter affects the input value as seen by instruction reads, input interrupts, and pulse catches. Depending on your filter selection, your program could miss an interrupt event or pulse catch. The high speed counters count the events on the unfiltered inputs.

44

PLC Concepts

Chapter 4

The S7-200 Allows You to Filter the Analog Inputs

The S7-200 allows you to select software filtering on individual analog inputs. The filtered value is the average value of a preselected number of samples of the analog input. The filter specification

(number of samples and deadband) is the same for all analog inputs for which filtering is enabled.

The filter has a fast response feature to allow large changes to be quickly reflected in the filter value. The filter makes a step function change to the latest analog input value when the input exceeds a specified change from the current value. This change, called the deadband, is specified in counts of the digital value of the analog input.

The default configuration is to enable filtering for all analog inputs except AIW0 and AIW2 on CPU 224XP.

1. Select the

View > Component >

System Block

menu command and select Input Filters. Click on the Analog tab.

2. Select the analog inputs that you want to filter, the number of samples, and the deadband.

3. Click OK.

4. Download the modified system block to the S7-200.

Figure 4-24 Analog Input Filter

Tip

Do not use the analog filter with modules that pass digital information or alarm indications in the analog words. Always disable analog filtering for RTD, Thermocouple, and AS-Interface Master modules.

Tip

AIW0 and AIW2 on the CPU 224XP are filtered by the analog to digital converter, and usually will not need the additional software filter.

The S7-200 Allows You to Catch Pulses of Short Duration

The S7-200 provides a pulse catch feature which can be used for some or all of the local digital input points. The pulse catch feature allows you to capture high-going pulses or low-going pulses that are of such a short duration that they would not always be seen when the S7-200 reads the digital inputs at the beginning of the scan cycle. When pulse catch is enabled for an input, a change in state of the input is latched and held until the next input cycle update. This ensures that a pulse which lasts for a short period of time is caught and held until the S7-200 reads the inputs.

You can individually enable the pulse catch operation for each of the local digital inputs.

To access the pulse catch configuration screen:

1. Select the

View > Component >

System Block

menu command and select Pulse Catch Bits.

2. Click the corresponding check box and click OK.

3. Download the modified system block to the S7-200.

Figure 4-25 Pulse Catch

45

S7-200 Programmable Controller System Manual

Figure 4-26 shows the basic operation of the S7-200 with and without pulse catch enabled.

Scan cycle

Input update

Next scan cycle

Input update

Physical Input

Output from pulse catch

Disabled

The S7-200 misses this pulse because the input turned on and off before the S7-200 updated the process-image input register

The S7-200 catches the pulse on the physical input

Enabled

Figure 4-26 Operation of the S7-200 with the Pulse Catch Feature Enabled and Disabled

Because the pulse catch function operates on the input after it passes through the input filter, you must adjust the input filter time so that the pulse is not removed by the filter. Figure 4-27 shows a block diagram of the digital input circuit.

Optical

Isolation

External

Digital Input

Figure 4-27 Digital Input Circuit

Digital Input

Filter

Pulse

Catch

Pulse Catch Enable

Input to S7-200

Figure 4-28 shows the response of an enabled pulse catch function to various input conditions. If you have more than one pulse in a given scan, only the first pulse is read. If you have multiple pulses in a given scan, you should use the rising/falling edge interrupt events. (For a listing of interrupt events, see Table 6-46.)

Scan cycle

Input update

Next scan cycle

Input update

Input to pulse catch

Output from pulse catch

Input to pulse catch

Output from pulse catch

Input to pulse catch

Output from pulse catch

Figure 4-28 Responses of the Pulse Catch Function to Various Input Conditions

46

PLC Concepts

Chapter 4

The S7-200 Provides a User-Controlled LED

The S7-200 provides an LED (SF/DIAG) that can indicate red (system fault LED) or yellow

(diagnostic LED). The diagnostic LED can be illuminated under user program control, or can automatically illuminate under certain conditions: when an I/O point or data value is forced, or when a module has an I/O error.

To configure the automatic selections for the diagnostic LED:

1. Select the

View > Component >

System Block

menu command and select Configure LED.

2. Click each item to either enable or disable turning on the LED when an I/O point or data value is forced, or when a module has an I/O error.

3. Download the modified system block to the S7-200.

To control the state of the diagnostic LED with your user program, use the

Diagnostic LED instruction in Chapter 6.

Figure 4-29 Diagnostic LED

The S7-200 Maintains a History Log of Major CPU Events

The S7-200 maintains a log that contains a time-stamped history of major CPU events, such as when power is applied, when the CPU enters RUN mode, and when fatal errors occur. Your time-of-day clock must be configured in order to get valid time and date stamps on the log entries.

To view the Event History log, select the

PLC > Information

select Event History.

menu command and

Figure 4-30 Viewing the Event History Log

The S7-200 Allows You to Increase Your Available User Program

Memory

The S7-200 allows you to disable the run mode edit feature in the CPU 224,

CPU 224XP, and CPU 226 in order to increase the amount of program memory available for your use. Refer to Table 1-1 to see the amount of program memory for each CPU model.

To disable the run mode edit feature, follow these steps

1. Select the

View > System Block

menu command and select

Increase Program Memory.

2. Click the Increase Memory item to disable the run mode edit feature.

3 D l d th difi d block to the S7-200.

t

Figure 4-31 Disable Run Mode Edit

47

S7-200 Programmable Controller System Manual

The S7-200 Provides Password Protection

All models of the S7-200 provide password protection for restricting access to specific functions.

A password authorizes access to the functions and memory: without a password, the S7-200 provides unrestricted access. When it is password protected, the S7-200 limits all restricted operations according to the configuration provided when the password was installed

The password is not case-sensitive.

As shown in Table 4-3, the S7-200 provides four levels of access restriction. Each level allows certain functions to be accessible without a password. For the four levels of access, entering the correct password provides access to the functions as noted below. The default condition for the

S7-200 is level 1 (no restriction).

Entering the password over a network does not compromise the password protection for the

S7-200.

You can in effect, disable the password by changing the password level 4, 3, or 2 to Level 1, since

Level 1 allows all unrestricted CPU access.

Table 4-3 Restricting Access to the S7-200

CPU Function

Read and write user data

Start, Stop, and Power—Up Reset of the CPU

Read and write the time—of—day

Clock

Upload the user program, data, and the CPU configuration

Download of Program Block, Data

Block or System Block

Level 1 Level 2 Level 3 Level 4

Access allowed

Access allowed Access allowed

Never allowed

Runtime Edits

Delete of Program Block, Data

Block, or System Data Block

Access allowed

Password required (Never allowed for

System Block)

Never allowed

Password required (Never allowed for

System Block)

Copy of Program Block, Data

Block, or System Data Block to the memory cartridge

Force data in status chart

Execute the single or multiple scan

Writing of output in STOP mode

Reset of scan rates in PLC information

Execution status

Project compare

Password required

Password required

Password q

Having one user authorized to access restricted functions Reset of Scan Rates in PLC information does not authorize other users to access those functions. Only one user is allowed unrestricted access to the S7-200 at a time.

Tip

After you enter the password, the authorization level for that password remains effective for up to one minute after the programming device has been disconnected from the S7-200. Always exit STEP 7-Micro/WIN before disconnecting the cable to prevent another user from accessing the privileges of the programming device.

48

PLC Concepts

Chapter 4

Configuring a Password for the S7-200

The System Block dialog box (Figure 4-32) allows you to configure a password for the S7-200.

The default condition for the S7-200 is set at Full (Level 1), no restriction.

1. Select the

View > Component >

System Block

menu command to display the System Block dialog box and select Password.

2. Select the appropriate level of access for the S7-200.

3. Enter and verify the password for

Partial (Level 2) or Minimum

(Level 3).

4. Click OK.

5. Download the modified system block to the S7-200.

Figure 4-32 Creating a Password

Recovering from a Lost Password

If you forget the password, you must clear the memory of the S7-200 and reload your program.

Clearing the memory puts the S7-200 in STOP mode and resets the S7-200 to the factory-set defaults, except for the network address, baud rate, and the time-of-day clock. To clear your program in the S7-200:

1. Select the

PLC > Clear

menu command to display the Clear dialog box.

2. Select all three blocks and confirm your action by clicking OK.

3. If a password had been configured, STEP 7—Micro/WIN displays a password-authorization dialog box. To clear the password, enter CLEARPLC in the password-authorization dialog box to continue the Clear All operation. (The CLEARPLC password is not case sensitive.)

The Clear All operation does not remove the program from a memory cartridge. Since the memory cartridge stores the password along with the program, you must also reprogram the memory cartridge to remove the lost password.

Warning

Clearing the S7-200 memory causes the outputs to turn off (or in the case of an analog output, to be frozen at a specific value).

If the S7-200 is connected to equipment when you clear the memory, changes in the state of the outputs can be transmitted to the equipment. If you had configured the “safe state” for the outputs to be different from the factory settings, changes in the outputs could cause unpredictable operation of your equipment, which in turn could cause death or serious injury to personnel, and/or damage to equipment.

Always follow appropriate safety precautions and ensure that your process is in a safe state before clearing the S7-200 memory.

49

S7-200 Programmable Controller System Manual

The S7-200 Provides Analog Adjustment Potentiometers

The analog adjustment potentiometers are located under the front access cover of the module.

You can adjust these potentiometers to increase or decrease values that are stored in bytes of

Special Memory (SMB). These read-only values can be used by the program for a variety of functions, such as updating the current value for a timer or a counter, entering or changing the preset values, or setting limits. Use a small screwdriver to make the adjustments: turn the potentiometer clockwise (to the right) to increase the value, and counterclockwise (to the left) to decrease the value.

SMB28 holds the digital value that represents the position of analog adjustment 0. SMB29 holds the digital value that represents the position of analog adjustment 1. The analog adjustment has a nominal range of 0 to 255 and a repeatability of

±

2 counts.

Sample Program for Referencing the Value Entered with the Analog Adjustment Potentiometers

Network 1

LD

BTI

//Read analog adjustment 0 (SMB28).

//Save the value as an integer in VW100.

I0.0

SMB28, VW100

Network 2 //Use the integer value (VW100) as

//a preset for a timer.

LDN Q0.0

TON T33, VW100

Network 3

LD

=

T33

Q0.0

//Turn on Q0.0 when T33 reaches

//the preset value.

The S7-200 Provides High-speed I/O

High-Speed Counters

The S7-200 provides integrated high-speed counter functions that count high speed external events without degrading the performance of the S7-200. See Appendix A for the rates supported by your CPU model. Each counter has dedicated inputs for clocks, direction control, reset, and start, where these functions are supported. You can select different quadrature modes for varying the counting rate. For more information on high-speed counters, see Chapter 6.

High-Speed Pulse Output

The S7-200 supports high-speed pulse outputs, with outputs Q0.0 and Q0.1 generating either a high-speed pulse train output (PTO) or pulse width modulation (PWM).

The PTO function provides a square wave (50% duty cycle) output for a specified number of pulses (from 1 to 4,294,967,295 pulses) and a specified cycle time (in either microsecond or millisecond increments. You can program the PTO function to produce either one train of pulses or a pulse profile consisting of multiple trains of pulses. For example, you can use a pulse profile to control a stepper motor through a simple ramp up, run, and ramp down sequence or more complicated sequences.

The PWM function provides a fixed cycle time with a variable duty cycle output, with the cycle time and the pulse width specified in either microsecond or millisecond increments. When the pulse width is equal to the cycle time, the duty cycle is 100 percent and the output is turned on continuously. When the pulse width is zero, the duty cycle is 0 percent and the output is turned off.

For more information on the high-speed pulse output instruction, see Chapter 6. For more information about using PTO in open loop motion control, see Chapter 9.

50

Programming Concepts, Conventions, and Features

The S7-200 continuously executes your program to control a task or process. You use

STEP 7—Micro/WIN to create this program and download it to the S7-200. STEP 7—Micro/WIN provides a variety of tools and features for designing, implementing, and debugging your program.

In This Chapter

Guidelines for Designing a Micro PLC System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Basic Elements of a Program . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Using STEP 7—Micro/WIN to Create Your Programs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Choosing Between the SIMATIC and IEC 1131—3 Instruction Sets . . . . . . . . . . . . . . . . . . . . . .

Understanding the Conventions Used by the Program Editors . . . . . . . . . . . . . . . . . . . . . . . . . .

Using Wizards To Help You Create Your Control Program . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Handling Errors in the S7-200 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Assigning Addresses and Initial Values in the Data Block Editor . . . . . . . . . . . . . . . . . . . . . . . .

Using the Symbol Table for Symbolic Addressing of Variables

Using Local Variables

. . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Using the Status Chart to Monitor Your Program . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Creating an Instruction Library . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Features for Debugging Your Program . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

52

53

55

57

58

60

60

62

62

63

63

64

64

51

S7-200 Programmable Controller System Manual

Guidelines for Designing a Micro PLC System

There are many methods for designing a Micro PLC system. The following general guidelines can apply to many design projects. Of course, you must follow the directives of your own company’s procedures and the accepted practices of your own training and location.

Partition Your Process or Machine

Divide your process or machine into sections that have a level of independence from each other.

These partitions determine the boundaries between controllers and influence the functional description specifications and the assignment of resources.

Create the Functional Specifications

Write the descriptions of operation for each section of the process or machine. Include the following topics: I/O points, functional description of the operation, states that must be achieved before allowing action for each actuator (such as solenoids, motors, and drives), description of the operator interface, and any interfaces with other sections of the process or machine.

Design the Safety Circuits

Identify equipment requiring hard-wired logic for safety. Control devices can fail in an unsafe manner, producing unexpected startup or change in the operation of machinery. Where unexpected or incorrect operation of the machinery could result in physical injury to people or significant property damage, consideration should be given to the use of electro-mechanical overrides which operate independently of the S7-200 to prevent unsafe operations. The following tasks should be included in the design of safety circuits:

—

—

—

—

—

—

Identify improper or unexpected operation of actuators that could be hazardous.

Identify the conditions that would assure the operation is not hazardous, and determine how to detect these conditions independently of the S7-200.

Identify how the S7-200 CPU and I/O affect the process when power is applied and removed, and when errors are detected. This information should only be used for designing for the normal and expected abnormal operation, and should not be relied on for safety purposes.

Design manual or electro-mechanical safety overrides that block the hazardous operation independent of the S7-200.

Provide appropriate status information from the independent circuits to the S7-200 so that the program and any operator interfaces have necessary information.

Identify any other safety-related requirements for safe operation of the process.

Specify the Operator Stations

Based on the requirements of the functional specifications, create drawings of the operator stations. Include the following items:

—

—

—

Overview showing the location of each operator station in relation to the process or machine

Mechanical layout of the devices, such as display, switches, and lights, for the operator station

Electrical drawings with the associated I/O of the S7-200 CPU or expansion module

52

Programming Concepts, Conventions, and Features

Chapter 5

Create the Configuration Drawings

Based on the requirements of the functional specification, create configuration drawings of the control equipment. Include the following items:

—

—

—

Overview showing the location of each S7-200 in relation to the process or machine

Mechanical layout of the S7-200 and expansion I/O modules (including cabinets and other equipment)

Electrical drawings for each S7-200 and expansion I/O module (including the device model numbers, communications addresses, and I/O addresses)

Create a List of Symbolic Names (optional)

If you choose to use symbolic names for addressing, create a list of symbolic names for the absolute addresses. Include not only the physical I/O signals, but also the other elements to be used in your program.

Basic Elements of a Program

A program block is composed of executable code and comments. The executable code consists of a main program and any subroutines or interrupt routines. The code is compiled and downloaded to the S7-200; the program comments are not. You can use the organizational elements (main program, subroutines, and interrupt routines) to structure your control program.

The following example shows a program that includes a subroutine and an interrupt routine. This sample program uses a timed interrupt for reading the value of an analog input every 100 ms.

R

0

S

B

Example:Basic Elements of a Program

M

A

I

N

Network 1

LD

CALL

//On first scan, call subroutine 0.

SM0.1

SBR_0

Network 1 //Set the interval to 100 ms

//for the timed interrupt.

//Enable interrupt 0.

LD SM0.0

MOVB 100, SMB34

ATCH

ENI

INT_0, 10

T

0

I

N

Network 1 //Sample the Analog Input 4.

LD SM0.0

MOVW AIW4,VW100

Main Program

The main body of the program contains the instructions that control your application. The S7-200 executes these instructions sequentially, once per scan cycle. The main program is also referred to as OB1.

53

S7-200 Programmable Controller System Manual

Subroutines

These optional elements of your program are executed only when called: by the main program, by an interrupt routine, or by another subroutine. Subroutines are useful in cases where you want to execute a function repeatedly. Rather than rewriting the logic for each place in the main program where you want the function to occur, you can write the logic once in a subroutine and call the subroutine as many times as needed during the main program. Subroutines provide several benefits:

—

—

—

Using subroutines reduces the overall size of your program.

Using subroutines decreases your scan time because you have moved the code out of the main program. The S7-200 evaluates the code in the main program every scan cycle, whether the code is executed or not, but the S7-200 evaluates the code in the subroutine only when you call the subroutine, and does not evaluate the code during the scans in which the subroutine is not called.

Using subroutines creates code that is portable. You can isolate the code for a function in a subroutine, and then copy that subroutine into other programs with little or no rework.

Tip

Using V memory addresses can limit the portability of your subroutine, because it is possible for

V memory address assignment from one program to conflict with an assignment in another program. Subroutines that use the local variable table (L memory) for all address assignments, by contrast, are highly portable because there is no concern about address conflicts between the subroutine and another part of the program when using local variables.

Interrupt Routines

These optional elements of your program react to specific interrupt events. You design an interrupt routine to handle a pre-defined interrupt event. Whenever the specified event occurs, the S7-200 executes the interrupt routine.

The interrupt routines are not called by your main program. You associate an interrupt routine with an interrupt event, and the S7-200 executes the instructions in the interrupt routine only on each occurrence of the interrupt event.

Tip

Because it is not possible to predict when the S7-200 might generate an interrupt, it is desirable to limit the number of variables that are used both by the interrupt routine and elsewhere in the program.

Use the local variable table of the interrupt routine to ensure that your interrupt routine uses only the temporary memory and does not overwrite data used somewhere else in your program.

There are a number of programming techniques you can use to ensure that data is correctly shared between your main program and the interrupt routines. These techniques are described in Chapter 6 with the Interrupt instructions.

Other Elements of the Program

Other blocks contain information for the S7-200. You can choose to download these blocks when you download your program.

System

Block

System Block

The system block allows you to configure different hardware options for the S7-200.

Data

Block

Data Block

The data block stores the values for different variables (V memory) used by your program. You can use the data block to enter initial values for the data.

54

Programming Concepts, Conventions, and Features

Chapter 5

Using STEP 7—Micro/WIN to Create Your Programs

To open STEP 7—Micro/WIN, double-click on the STEP 7—Micro/WIN icon, or select the

Start >

SIMATIC > STEP 7 MicroWIN V4.0

menu command. As shown in Figure 5-1, the

STEP 7—Micro/WIN project window provides a convenient working space for creating your control program.

The toolbars provide buttons for shortcuts to frequently used menu commands. You can view or hide any of the toolbars.

The navigation bar presents groups of icons for accessing different programming features of

STEP 7—Micro/WIN.

The instruction tree displays all of the project objects and the instructions for creating your control program. You can drag and drop individual instructions from the tree into your program, or you can double-click an instruction to insert it at the current location of the cursor in the program editor.

The program editor contains the program logic and a local variable table where you can assign symbolic names for temporary local variables. Subroutines and interrupt routines appear as tabs at the bottom of the program editor window.

Click on the tabs to move between the subroutines, interrupts, and the main program.

Navigation bar

Instruction tree

Figure 5-1 STEP 7—Micro/WIN

Program Editor

STEP 7—Micro/WIN provides three editors for creating your program: Ladder Logic (LAD),

Statement List (STL), and Function Block Diagram (FBD). With some restrictions, programs written in any of these program editors can be viewed and edited with the other program editors.

Program

Editor

Features of the STL Editor

The STL editor displays the program as a text-based language. The STL editor allows you to create control programs by entering the instruction mnemonics. The STL editor also allows you to create programs that you could not otherwise create with the LAD or FBD editors. This is because you are programming in the native language of the S7-200, rather than in a graphical editor where some restrictions must be applied in order to draw the diagrams correctly. As shown in Figure 5-2, this text-based concept is very similar to assembly language programming.

The S7-200 executes each instruction in the order dictated by the program, from top to bottom, and then restarts at the top.

LD

A

=

I0.0

I0.1

Q1.0

//Read one input

//AND with another input

//Write value to output 1

STL uses a logic stack to resolve the control logic. You insert the STL instructions for handling the stack operations.

Figure 5-2 Sample STL Program

Consider these main points when you select the STL editor:

—

—

—

—

STL is most appropriate for experienced programmers.

STL sometimes allows you to solve problems that you cannot solve very easily with the

LAD or FBD editor.

You can only use the STL editor with the SIMATIC instruction set.

While you can always use the STL editor to view or edit a program that was created with the

LAD or FBD editors, the reverse is not always true. You cannot always use the LAD or FBD editors to display a program that was written with the STL editor.

55

S7-200 Programmable Controller System Manual

Features of the LAD Editor

The LAD editor displays the program as a graphical representation similar to electrical wiring diagrams. Ladder programs allow the program to emulate the flow of electric current from a power source through a series of logical input conditions that in turn enable logical output conditions. A

LAD program includes a left power rail that is energized. Contacts that are closed allow energy to flow through them to the next element, and contacts that are open block that energy flow.

The logic is separated into networks.

The program is executed one network at a time, from left to right and then top to bottom as dictated by the program.

Figure 5-3 shows an example of a LAD program. The various instructions are represented by graphic symbols and include three basic forms.

Contacts represent logic input conditions such as switches, buttons, or internal conditions.

Coils usually represent logic output results such as lamps, motor starters, interposing relays, or internal output conditions.

Figure 5-3 Sample LAD Program

Boxes represent additional instructions, such as timers, counters, or math instructions.

Consider these main points when you select the LAD editor:

—

—

—

—

Ladder logic is easy for beginning programmers to use.

Graphical representation is easy to understand and is popular around the world.

The LAD editor can be used with both the SIMATIC and IEC 1131—3 instruction sets.

You can always use the STL editor to display a program created with the SIMATIC LAD editor.

Features of the FBD Editor

The FBD editor displays the program as a graphical representation that resembles common logic gate diagrams. There are no contacts and coils as found in the LAD editor, but there are equivalent instructions that appear as box instructions.

Figure 5-4 shows an example of an FBD program.

FBD does not use the concept of left and right power rails; therefore, the term

“power flow” is used to express the analogous concept of control flow through the FBD logic blocks.

—

—

—

Figure 5-4 Sample FBD Program

The logic “1” path through FBD elements is called power flow. The origin of a power flow input and the destination of a power flow output can be assigned directly to an operand.

The program logic is derived from the connections between these box instructions. That is, the output from one instruction (such as an AND box) can be used to enable another instruction (such as a timer) to create the necessary control logic. This connection concept allows you to solve a wide variety of logic problems.

Consider these main points when you select the FBD editor:

The graphical logic gate style of representation is good for following program flow.

The FBD editor can be used with both the SIMATIC and IEC 1131—3 instruction sets.

You can always use the STL editor to display a program created with the SIMATIC FBD editor.

56

Programming Concepts, Conventions, and Features

Chapter 5

Choosing Between the SIMATIC and IEC 1131—3 Instruction Sets

Most PLCs offer similar basic instructions, but there are usually small differences from vendor to vendor in appearance, operation, and so forth. Over the last several years, the International

Electrotechnical Commission (IEC) has developed an emerging global standard that specifically relates to many aspects of PLC programming. This standard encourages different PLC manufacturers to offer instructions that are the same in both appearance and operation.

Your S7-200 offers two instruction sets that allow you to solve a wide variety of automation tasks.

The IEC instruction set complies with the IEC 1131—3 standard for PLC programming, and the

SIMATIC instruction set is designed specifically for the S7-200.

Tip

When STEP 7—Micro/WIN is set to the IEC mode, it displays a red diamond

⟨ ♦

) in the Instruction

Tree beside the instructions that are not defined by the IEC 1131—3 standard.

There are a few key differences between the SIMATIC instruction set and the IEC instruction set:

—

—

The IEC instruction set is restricted to those instructions that are standard among PLC vendors. Some instructions that are normally included in the SIMATIC set are not standard instructions in the IEC 1131—3 specification. These are still available for use as non-standard instructions, but if you use them, the program is no longer strictly IEC 1131—3 compatible.

Some IEC box instructions accept multiple data formats. This practice is often referred to as overloading. For example, rather than have separate ADD_I (Add Integer) and ADD_R (Add

Real), math boxes, the IEC ADD instruction examines the format of the data being added and automatically chooses the correct instruction in the S7-200. This can save valuable program design time.

—

When you use the IEC instructions, the instruction parameters are automatically checked for the proper data format, such as a signed integer versus an unsigned integer. For example, an error results if you try to enter an integer value for an instruction that expected a bit value (on/off). This feature helps to minimize programming syntax errors.

Consider these points when you select either the SIMATIC or the IEC instruction set:

—

—

—

—

—

—

SIMATIC instructions usually have the shortest execution times. Some IEC instructions might have longer execution times.

Some IEC instructions, such as timers, counters, multiply, and divide, operate differently than their SIMATIC counterparts.

You can use all three program editors (LAD, STL, FBD) with the SIMATIC instruction set.

You can use only the LAD and FBD program editors for IEC instructions.

The operation of the IEC instructions is standard for different brands of PLCs, and the knowledge about creating an IEC-compliant program can be leveraged across PLC platforms.

While the IEC standard defines fewer instructions than are available in the SIMATIC instruction set, you can always include SIMATIC instructions in your IEC program.

IEC 1131—3 specifies that variables must be declared with a type, and supports system checking of data type.

57

S7-200 Programmable Controller System Manual

Understanding the Conventions Used by the Program Editors

STEP 7—Micro/WIN uses the following conventions in all of the program editors:

—

—

A # in front of a symbol name (#var1) indicates that the symbol is of local scope.

For IEC instructions, the % symbol indicates a direct address.

—

The operand symbol “?.?” or “????” indicates that an operand configuration is required.

LAD programs are divided into segments called networks. A network is an ordered arrangement of contacts, coils, and boxes that are all connected to form a complete circuit: no short circuits, no open circuits, and no reverse power flow conditions exist. STEP 7—Micro/WIN allows you to create comments for your LAD program on a network-by-network basis. FBD programming uses the network concept for segmenting and commenting your program.

STL programs do not use networks; however, you can use the NETWORK keyword to segment your program.

Conventions Specific to the LAD Editor

In the LAD editor, you can use the F4, F6, and F9 keys on your keyboard to access contact, box, and coil instructions. The LAD editor uses the following conventions:

—

—

—

The symbol “——>>” is an open circuit or a required power flow connection.

The symbol “ ” indicates that the output is an optional power flow for an instruction that can be cascaded or connected in series.

The symbol “>>” indicates that you can use power flow.

Conventions Specific to the FBD Editor

In the FBD editor, you can use the F4, F6, and F9 keys on your keyboard to access AND, OR, and box instructions. The FBD editor uses the following conventions:

—

—

—

—

—

—

The symbol “——>>” on an EN operand is a power flow or operand indicator. It can also depict an open circuit or a required power flow connection.

The symbol “ ” indicates that the output is an optional power flow for an instruction that can be cascaded or connected in series.

The symbols “<<” and “>>” indicate that you can use either a value or power flow.

Negation bubbles: The logical NOT condition or inverted condition of the operand or power flow is shown by the small circle on the input.

In Figure 5-5, Q0.0 is equal to the NOT of I0.0

AND I0.1. Negation bubbles are only valid for

Boolean signals, which can be specified as parameters or power flow.

y ifi d

Logical NOT

Condition

Immediate

Condition

Figure 5-5 FBD Conventions

Immediate indicators: As shown in Figure 5-5, the FBD editor displays an immediate condition of a Boolean operand with a vertical line on the input to an FBD instruction. The immediate indicator causes an immediate read from the specified physical input. Immediate operators are only valid for physical inputs.

Box with no input or output: A box with no input indicates an instruction that is independent of power flow.

Tip

The number of operands can be expanded up to 32 inputs for AND and OR instructions. To add or subtract operand tics, use the “+” and “—” keys on your keyboard.

58

Programming Concepts, Conventions, and Features

Chapter 5

General Conventions of Programming for an S7-200

EN/ENO Definition

EN (Enable IN) is a Boolean input for boxes in LAD and FBD. Power flow must be present at this input for the box instruction to be executed. In STL, the instructions do not have an EN input, but the top of stack value must be a logic “1” for the corresponding STL instruction to be executed.

ENO (Enable Out) is a Boolean output for boxes in LAD and FBD. If the box has power flow at the

EN input and the box executes its function without error, then the ENO output passes power flow to the next element. If an error is detected in the execution of the box, then power flow is terminated at the box that generated the error.

In STL, there is no ENO output, but the STL instructions that correspond to the LAD and FBD instructions with ENO outputs do set a special ENO bit. This bit is accessible with the AND ENO

(AENO) instruction and can be used to generate the same effect as the ENO bit of a box.

Tip

The EN/ENO operands and data types are not shown in the valid operands table for each instruction because the operands are the same for all LAD and FBD instructions. Table 5-1 lists these operands and data types for LAD and FBD. These operands apply to all LAD and FBD instructions shown in this manual.

Table 5-1 EN/ENO Operands and Data Types for LAD and FBD

Program Editor Inputs/Outputs Operands

LAD

FBD

EN, ENO

EN, ENO

Power Flow

I, Q, V, M, SM, S, T, C, L

Data Types

BOOL

BOOL

Conditional/Unconditional Inputs

In LAD and FBD, a box or a coil that is dependent upon power flow is shown with a connection to any element on the left side. A coil or box that is independent of power flow is shown with a connection directly to the left power rail. Table 5-2 shows an example of both a conditional and an unconditional input.

Table 5-2

Power Flow

Representation of Conditional and Unconditional Inputs

LAD

Instruction that is dependent on power flow (conditional)

FBD

Instruction that is independent of power flow (unconditional)

Instructions without Outputs

Boxes that cannot cascade are drawn with no Boolean outputs. These include the Subroutine

Call, Jump, and Conditional Return instructions. There are also ladder coils that can only be placed on the left power rail. These include the Label, Next, Load SCR, Conditional SCR End, and

SCR End instructions. These are shown in FBD as boxes and are distinguished with unlabeled power inputs and no outputs.

Compare Instructions

The compare instruction is executed regardless of the state of power flow. If power flow is false, the output is false. If power flow is true, the output is set depending upon the result of the compare. SIMATIC FBD, IEC Ladder, and IEC FBD compare instructions are shown as boxes, although the operation is performed as a contact.

59

S7-200 Programmable Controller System Manual

Using Wizards To Help You Create Your Control Program

STEP 7—Micro/WIN provides wizards to make aspects of your programming easier and more automatic. In Chapter 6, instructions that have an associated wizard are identified by the following

Instruction Wizard icon:

Instruction

Wizard

Handling Errors in the S7-200

The S7-200 classifies errors as either fatal errors or non-fatal errors. You can view the error codes that were generated by an error by selecting the

PLC > Information

menu command.

Figure 5-6 shows the PLC Information dialog box that displays the error code and the description of the error.

The Last Fatal field shows the previous fatal error code generated by the

S7-200. This value is retained over power cycles if the RAM is retained. This location is cleared either whenever all memory of the S7-200 is cleared or if the

RAM is not retained after a prolonged power outage.

The Total Fatal field is the count of fatal errors generated by the S7-200 since the last time the S7-200 had all memory areas cleared. This value is retained over power cycles if the RAM is retained.

This location is cleared whenever all memory of the S7-200 is cleared, or when the RAM is not retained after a prolonged power outage.

Appendix C lists the S7-200 error codes, and Appendix D describes the special memory (SM) bits, which can be used for monitoring errors.

Non-Fatal Errors

Figure 5-6 PLC Information Dialog Box

Non-fatal errors are those indicating problems with the construction of the user program, with the execution of an instruction in the user program, and with expansion I/O modules. You can use

STEP 7—Micro/WIN to view the error codes that were generated by the non-fatal error. There are three basic categories of non-fatal errors.

Program-compile errors

The S7-200 compiles the program as it downloads. If the S7-200 detects that the program violates a compilation rule, the download is aborted and an error code is generated. (A program that was already downloaded to the S7-200 would still exist in the permanent memory and would not be lost.) After you correct your program, you can download it again. Refer to Appendix C for a list of compile rule violations.

I/O errors

At startup, the S7-200 reads the I/O configuration from each module. During normal operation, the

S7-200 periodically checks the status of each module and compares it against the configuration obtained during startup. If the S7-200 detects a difference, the S7-200 sets the configuration error bit in the module error register. The S7-200 does not read input data from or write output data to that module until the module configuration again matches the one obtained at startup.

60

Programming Concepts, Conventions, and Features

Chapter 5

The module status information is stored in special memory (SM) bits. Your program can monitor and evaluate these bits. Refer to Appendix D for more information about the SM bits used for reporting I/O errors. SM5.0 is the global I/O error bit and remains set while an error condition exists on an expansion module.

Program execution errors

Your program can create error conditions while being executed. These errors can result from improper use of an instruction or from the processing of invalid data by an instruction. For example, an indirect-address pointer that was valid when the program compiled could be modified during the execution of the program to point to an out-of-range address. This is an example of a run-time programming problem. SM4.3 is set upon the occurrence of a run-time programming problem and remains set while the S7-200 is in RUN mode. (Refer to Appendix C for the list of run-time programming problems). Program execution error information is stored in special memory

(SM) bits. Your program can monitor and evaluate these bits. Refer to Appendix D for more information about the SM bits used for reporting program execution errors.

The S7-200 does not change to STOP mode when it detects a non-fatal error. It only logs the event in SM memory and continues with the execution of your program. However, you can design your program to force the S7-200 to STOP mode when a non-fatal error is detected. The following sample program shows a network of a program that is monitoring two of the global non-fatal error bits and changes the S7-200 to STOP whenever either of these bits turns on.

Sample Program: Logic for Detecting a Non-Fatal Error Condition

Network 1 //When an I/O error or a run-time error occurs,

//go to STOP mode

LD

O

STOP

SM5.0

SM4.3

Fatal Errors

Fatal errors cause the S7-200 to stop the execution of your program. Depending upon the severity of the fatal error, it can render the S7-200 incapable of performing any or all functions. The objective for handling fatal errors is to bring the S7-200 to a safe state from which the S7-200 can respond to interrogations about the existing error conditions. When a fatal error is detected, the

S7-200 changes to STOP mode, turns on the SF/DIAG (Red) and the STOP LED, overrides the output table, and turns off the outputs. The S7-200 remains in this condition until the fatal error condition is corrected.

Once you have made the changes to correct the fatal error condition, use one of the following methods to restart the S7-200:

—

—

Turn the power off and then on.

Change the mode switch from RUN or TERM to STOP.

—

Select the

PLC > Power-Up Reset

menu command from STEP 7—Micro/WIN to restart the

S7-200. This forces the S7-200 to restart and clear any fatal errors.

Restarting the S7-200 clears the fatal error condition and performs power-up diagnostic testing to verify that the fatal error has been corrected. If another fatal error condition is found, the S7-200 again sets the fault LED, indicating that an error still exists. Otherwise, the S7-200 begins normal operation.

Some error conditions can render the S7-200 incapable of communication. In these cases, you cannot view the error code from the S7-200. These types of errors indicate hardware failures that require the S7-200 to be repaired; they cannot be fixed by changes to the program or clearing the memory of the S7-200.

61

S7-200 Programmable Controller System Manual

Assigning Addresses and Initial Values in the Data Block Editor

Data

Block

The data block editor allows you to make initial data assignments to V memory (variable memory) only. You can make assignments to bytes, words, or double words of V memory. Comments are optional.

The data block editor is a free-form text editor; that is, no specific fields are defined for particular types of information. After you finish typing a line and press the Enter key, the data block editor formats the line (aligns columns of addresses, data, comments; capitalizes

V memory addresses) and redisplays it.

Pressing CTRL—ENTER, after completing an assignment line, auto-increments the address to the next available address.

Figure 5-7 Data Block Editor

The data block editor assigns an appropriate amount of V memory based on your previous address allocations and the size (byte, word, or double word) of the data value(s).

The first line of the data block must have an explicit address assignment. Subsequent lines can have explicit or implicit address assignments. An implicit address assignment is made by the editor when you type multiple data values after a single address assignment, or type a line that contains only data values.

The data block editor accepts uppercase or lowercase letters and allows commas, tabs, or spaces to serve as separators between addresses and data values.

Using the Symbol Table for Symbolic Addressing of Variables

Symbol

Table

The symbol table allows you to define and edit the symbols that can be accessed by the symbolic name anywhere in your program. You can create multiple symbol tables. There is also a tab in the symbol table for system-defined symbols that you can use in your program. The symbol table is also referred to as the global variable table.

You can identify the operands of the instructions in your program absolutely or symbolically. An absolute reference uses the memory area and bit or byte location to identify the address. A symbolic reference uses a combination of alphanumeric characters to identify the address.

For SIMATIC programs, you make global symbol assignments by using the symbol table. For IEC programs, you make global symbol assignments by using the global variable table.

Figure 5-8 Symbol Table

1. Click on the Symbol Table icon in the navigation bar to open the symbol table.

2. Enter the symbol name (for example, Input1) in the Symbol Name column. The maximum symbol length is 23 characters.

3. Enter the address (for example, I0.0) in the Address column.

4. For an IEC global variable table, enter a value in the Data Type column or select one from the list box.

You can create multiple symbol tables; however, you cannot use the same string more than once as a global symbol assignment, neither within a single table nor among several tables.

62

Programming Concepts, Conventions, and Features

Chapter 5

Using Local Variables

You can use the local variable table of the program editor to assign variables that are unique to an individual subroutine or interrupt routine. See

Figure 5-9.

Local variables can be used as parameters that are passed in to a subroutine and they increase the portability or reuse of a subroutine.

Figure 5-9 Local Variable Table

Using the Status Chart to Monitor Your Program

Status

Chart

A status chart allows you to monitor or modify the values of the process variables as your S7-200 runs the control program. You can track the status of program inputs, outputs, or variables by displaying the current values. The status chart also allows you to force or change the values of the process variables.

You can create multiple status charts in order to view elements from different portions of your program.

To access the status chart, select the

View > Component > Status Chart

menu command or click the Status Chart icon in the navigation bar.

When you create a status chart, you enter addresses of process variables for monitoring. You cannot view the status of constants, accumulators, or local variables. You can display a timer or counter value either as a bit or as a word. Displaying the value as a bit shows the status of the timer or counter bit; displaying the value as a word shows the timer or counter value.

Figure 5-10 Status Chart

To build a status chart and monitor the variables:

1. Enter the address for each desired value in the Address field.

2. Select the data type in the Format column.

3. To view the status of the process variables in your S7-200, select the

Debug > Chart

Status

menu command.

4. To continuously sample the values, or to perform a single read of the status, click the button on the toolbar. The Status Chart also allows you to modify or force values for the different process variables.

You can insert additional rows in your Status Chart by selecting the

Edit > Insert > Row

menu command.

Tip

You can create multiple status charts to divide the variables into logical groups so that each group can be viewed in a shorter and separate status chart.

63

S7-200 Programmable Controller System Manual

Creating an Instruction Library

STEP 7—Micro/WIN allows you either to create a custom library of instructions, or to use a library created by someone else. See Figure 5-11.

To create a library of instructions, you create standard STEP 7—Micro/WIN subroutine and interrupt routines and group them together. You can hide the code in these routines to prevent accidental changes or to protect the technology (know-how) of the author.

To create an instruction library, perform the following tasks:

1. Write the program as a standard

STEP 7—Micro/WIN project and put the function to be included in the library into subroutines or interrupt routines.

2. Ensure that all V memory locations in the subroutines or interrupt routines have been assigned a symbolic name. To minimize the amount of V memory that the library requires, use sequential V memory locations.

3. Rename the subroutines or interrupt routines to the names that you want to appear in the instruction library.

4. Select the

File > Create Library

menu command to compile the new instruction library.

For more information about creating libraries, refer to the online help for STEP 7—Micro/WIN.

Use the following procedure to access an instruction in an instruction library:

Figure 5-11 Instruction Tree with Libraries

1. Add the Libraries directory to the instruction tree by selecting the

File > Add Libraries

menu command.

2. Select the specific instruction and insert it into your program (as you would any standard instruction).

If the library routine requires any V memory, STEP 7—Micro/WIN prompts you when the project is compiled to assign a block of memory. Use the Library Memory Allocation dialog box to assign blocks of memory.

Features for Debugging Your Program

STEP 7—Micro/WIN provides the following features to help you debug your program:

—

—

Bookmarks in your program to make it easy to move back and forth between lines of a long program.

Cross Reference table allow you to check the references used in your program.

—

RUN-mode editing allows you to make small changes to your program with minimal disturbance to the process controlled by the program. You can also download the program block when you are editing in RUN mode.

For more information about debugging your program, refer to Chapter 8.

64

S7-200 Instruction Set

This chapter describes the SIMATIC and IEC 1131 instruction set for the S7-200 Micro PLCs.

In This Chapter

Conventions Used to Describe the Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

S7-200 Memory Ranges and Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Bit Logic Instructions

Contacts

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Coils . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Logic Stack Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Set and Reset Dominant Bistable Instructions

Clock Instructions

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Communications Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Network Read and Network Write Instructions

Transmit and Receive Instructions (Freeport)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Get Port Address and Set Port Address Instructions

Compare Instructions

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Comparing Numerical Values . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Compare String . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Conversion Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Standard Conversion Instructions

ASCII Conversion Instructions

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

String Conversion Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Encode and Decode Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Counter Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SIMATIC Counter Instructions

IEC Counter Instructions

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

High-Speed Counter Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Pulse Output Instruction

Math Instructions

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Add, Subtract, Multiply, and Divide Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Multiply Integer to Double Integer and Divide Integer with Remainder . . . . . . . . . . . . . . . .

Numeric Functions Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Increment and Decrement Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Proportional/Integral/Derivative (PID) Loop Instruction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Interrupt Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Logical Operations Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Invert Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

AND, OR, and Exclusive OR Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Move Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Move Byte, Word, Double Word, or Real

Move Byte Immediate (Read and Write)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Block Move Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

113

116

118

133

140

99

103

107

112

113

140

142

143

144

145

95

96

96

81

81

86

98

99

67

68

70

70

73

75

77

78

153

161

161

162

164

164

165

166

65

S7-200 Programmable Controller System Manual

Program Control Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Conditional End

Stop

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Watchdog Reset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

For—Next Loop Instructions

Jump Instructions

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Sequence Control Relay (SCR) Instructions

Diagnostic LED Instruction

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Shift and Rotate Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Shift Right and Shift Left Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Rotate Right and Rotate Left Instructions

Shift Register Bit Instruction

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Swap Bytes Instruction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

String Instructions

Table Instructions

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Add To Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

First-In-First-Out and Last-In-First-Out

Memory Fill

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Table Find . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Timer Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SIMATIC Timer Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

IEC Timer Instructions

Interval Timers

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Subroutine Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

167

193

196

196

201

203

204

184

189

189

190

192

167

167

167

169

171

172

178

179

179

179

181

183

66

S7-200 Instruction Set

Chapter 6

Conventions Used to Describe the Instructions

Figure 6-1 shows a typical description for an instruction and points to the different areas used to describe the instruction and its operation. The illustration of the instruction shows the format in

LAD, FBD, and STL. The operand table lists the operands for the instruction and shows the valid data types, memory areas and sizes for each operand.

EN/ENO operands and data types are not shown in the instruction operand table because the operands are the same for all LAD and FBD instructions.

—

—

For LAD:

EN and ENO are power flow and are BOOL data types.

For FBD:

EN and ENO are I, Q, V, M, SM, S, T, C, L, or power flow and are BOOL data types.

Description of the instruction and operands

STL instruction LAD and FBD instructions

List of the error conditions that affect ENO and any SM bits affected

Operands for the instruction

Valid data types

Valid memory areas and sizes for the operands

Figure 6-1 Instruction Descriptions

67

S7-200 Programmable Controller System Manual

S7-200 Memory Ranges and Features

Table 6-1 Memory Ranges and Features for the S7-200 CPUs

Description CPU 221 CPU 222 CPU 224

CPU 224XP

CPU 224XPsi

CPU 226

1

User program size with run mode edit without run mode edit

User data size

4096 bytes

4096 bytes

2048 bytes

4096 bytes

4096 bytes

2048 bytes

Process-image input register I0.0 to I15.7

Process-image output register Q0.0 to Q15.7

Analog inputs (read only)

Analog outputs (write only)

AIW0 to AIW30

I0.0 to I15.7

Q0.0 to Q15.7

AIW0 to AIW30

AQW0 to AQW30 AQW0 to AQW30

Variable memory (V)

Local memory (L)

1

Bit memory (M)

Special Memory (SM)

Read only

Timers

Retentive on-delay 1 ms

10 ms

On/Off delay

100 ms

1 ms

10 ms

100 ms

VB0 to VB2047

LB0 to LB63

M0.0 to M31.7

SM0.0 to SM179.7

SM0.0 to SM29.7

256 (T0 to T255)

T0, T64

T1 to T4, and

T65 to T68

T5 to T31, and

T69 to T95

T32, T96

T33 to T36, and

T97 to T100

T37 to T63, and

T101 to T255

C0 to C255

HC0 to HC5

Counters

High-speed counters

Sequential control relays (S)

Accumulator registers

Jumps/Labels

Call/Subroutine

Interrupt routines

Positive/negative transitions

PID loops

Ports

S0.0 to S31.7

AC0 to AC3

0 to 255

0 to 63

0 to 127

256

0 to 7

Port 0

VB0 to VB2047

LB0 to LB63

M0.0 to M31.7

SM0.0 to SM299.7

SM0.0 to SM29.7

256 (T0 to T255)

T0, T64

T1 to T4, and

T65 to T68

T5 to T31, and

T69 to T95

T32, T96

T33 to T36, and

T97 to T100

T37 to T63, and

T101 to T255

C0 to C255

HC0 to HC5

S0.0 to S31.7

AC0 to AC3

0 to 255

0 to 63

0 to 127

256

0 to 7

Port 0

LB60 to LB63 are reserved by STEP 7—Micro/WIN, version 3.0 or later.

8192 bytes

12288 bytes

8192 bytes

12288 bytes

16384 bytes

10240 bytes

I0.0 to I15.7

Q0.0 to Q15.7

I0.0 to I15.7

Q0.0 to Q15.7

AIW0 to AIW62 AIW0 to AIW62

AQW0 to AQW62 AQW0 to AQW62

VB0 to VB8191 VB0 to VB10239

LB0 to LB63

M0.0 to M31.7

SM0.0 to SM549.7

SM0.0 to SM29.7

256 (T0 to T255)

T0, T64

T1 to T4, and

T65 to T68

T5 to T31, and

T69 to T95

T32, T96

T33 to T36, and

T97 to T100

T37 to T63, and

T101 to T255

C0 to C255

HC0 to HC5

LB0 to LB63

M0.0 to M31.7

SM0.0 to SM549.7

SM0.0 to SM29.7

256 (T0 to T255)

T0, T64

T1 to T4, and

T65 to T68

T5 to T31, and

T69 to T95

T32, T96

T33 to T36, and

T97 to T100

T37 to T63, and

T101 to T255

C0 to C255

HC0 to HC5

S0.0 to S31.7

AC0 to AC3

0 to 255

0 to 63

0 to 127

256

0 to 7

Port 0

S0.0 to S31.7

AC0 to AC3

0 to 255

0 to 63

0 to 127

256

0 to 7

Port 0, Port 1

16384 bytes

24576 bytes

10240 bytes

I0.0 to I15.7

Q0.0 to Q15.7

AIW0 to AIW62

AQW0 to AQW62

VB0 to VB10239

LB0 to LB63

M0.0 to M31.7

SM0.0 to SM549.7

SM0.0 to SM29.7

256 (T0 to T255)

T0, T64

T1 to T4, and

T65 to T68

T5 to T31, and

T69 to T95

T32, T96

T33 to T36, and

T97 to T100

T37 to T63, and

T101 to T255

C0 to C255

HC0 to HC5

S0.0 to S31.7

AC0 to AC3

0 to 255

0 to 127

0 to 127

256

0 to 7

Port 0, Port 1

68

S7-200 Instruction Set

Chapter 6

Table 6-2

Access Method CPU 221

0.0 to 15.7

0.0 to 15.7

0.0 to 2047.7

0.0 to 31.7

0.0 to 165.7

0.0 to 31.7

0 to 255

0 to 255

0.0 to 63.7

0 to 15

0 to 15

0 to 2047

0 to 31

0 to 165

0 to 31

0 to 63

0 to 3

KB (Constant)

0 to 14

0 to 14

0 to 2046

0 to 30

0 to 164

0 to 30

0 to 255

0 to 255

0 to 62

0 to 3

0 to 30

0 to 30

KW (Constant)

0 to 12

0 to 12

0 to 2044

0 to 28

0 to 162

0 to 28

0 to 60

0 to 3

0 to 5

KD (Constant)

Bit access (byte.bit)

Byte access

SMB

SB

LB

AC

KB (Constant)

IB

QB

VB

MB

SM

S

T

C

L

V

M

Q

I

Word access

SMW

SW

T

C

IW

QW

VW

MW

LW

AC

AIW

AQW

KW (Constant)

Double word access

SMD

SD

LD

AC

ID

QD

VD

MD

HC

KD (Constant)

Operand Ranges for the S7-200 CPUs

CPU 222

0.0 to 15.7

0.0 to 15.7

0.0 to 2047.7

0.0 to 31.7

0.0 to 299.7

0.0 to 31.7

0 to 255

0 to 255

0.0 to 63.7

0 to 15

0 to 15

0 to 2047

0 to 31

0 to 299

0 to 31

0 to 63

0 to 3

KB (Constant)

0 to 14

0 to 14

0 to 2046

0 to 30

0 to 298

0 to 30

0 to 255

0 to 255

0 to 62

0 to 3

0 to 30

0 to 30

KW (Constant)

0 to 12

0 to 12

0 to 2044

0 to 28

0 to 296

0 to 28

0 to 60

0 to 3

0 to 5

KD (Constant)

CPU 224

0.0 to 15.7

0.0 to 15.7

0.0 to 8191.7

0.0 to 31.7

0.0 to 549.7

0.0 to 31.7

0 to 255

0 to 255

0.0 to 63.7

0 to 15

0 to 15

0 to 8191

0 to 31

0 to 549

0 to 31

0 to 63

0 to 3

KB (Constant)

0 to 14

0 to 14

0 to 8190

0 to 30

0 to 548

0 to 30

0 to 255

0 to 255

0 to 62

0 to 3

0 to 62

0 to 62

KW (Constant)

0 to 12

0 to 12

0 to 8188

0 to 28

0 to 546

0 to 28

0 to 60

0 to 3

0 to 5

KD (Constant)

CPU 224XP

CPU 224XPsi

0.0 to 15.7

0.0 to 15.7

0.0 to 10239.7

0.0 to 31.7

0.0 to 549.7

0.0 to 31.7

0 to 255

0 to 255

0.0 to 63.7

0 to 15

0 to 15

0 to 10239

0 to 31

0 to 549

0 to 31

0 to 63

0 to 255

KB (Constant)

0 to 14

0 to 14

0 to 10238

0 to 30

0 to 548

0 to 30

0 to 255

0 to 255

0 to 62

0 to 3

0 to 62

0 to 62

KW (Constant)

0 to 12

0 to 12

0 to 10236

0 to 28

0 to 546

0 to 28

0 to 60

0 to 3

0 to 5

KD (Constant)

CPU 226

0.0 to 15.7

0.0 to 15.7

0.0 to 10239.7

0.0 to 31.7

0.0 to 549.7

0.0 to 31.7

0 to 255

0 to 255

0.0 to 63.7

0 to 15

0 to 15

0 to 10239

0 to 31

0 to 549

0 to 31

0 to 63

0 to 255

KB (Constant)

0 to 14

0 to 14

0 to 10238

0 to 30

0 to 548

0 to 30

0 to 255

0 to 255

0 to 62

0 to 3

0 to 62

0 to 62

KW (Constant)

0 to 12

0 to 12

0 to 10236

0 to 28

0 to 546

0 to 28

0 to 60

0 to 3

0 to 5

KD (Constant)

69

S7-200 Programmable Controller System Manual

Bit Logic Instructions

Contacts

Standard Contacts

The Normally Open contact instructions (LD, A, and O) and

Normally Closed contact instructions (LDN, AN, ON) obtain the referenced value from the memory or from the process-image register. The standard contact instructions obtain the referenced value from the memory (or process-image register if the data type is I or Q).

The Normally Open contact is closed (on) when the bit is equal to 1, and the Normally Closed contact is closed (on) when the bit is equal to 0. In FBD, inputs to both the And and Or boxes can be expanded to a maximum of 32 inputs.

In STL, the Normally Open instructions Load, AND, or OR the bit value of the address bit to the top of the stack, and the Normally Closed instructions Load, AND, or OR the logical NOT of the bit value to the top of the stack.

Immediate Contacts

An immediate contact does not rely on the S7-200 scan cycle to update; it updates immediately. The Normally Open

Immediate contact instructions (LDI, AI, and OI) and

Normally Closed Immediate contact instructions (LDNI, ANI, and ONI) obtain the physical input value when the instruction is executed, but the process-image register is not updated.

The Normally Open Immediate contact is closed (on) when the physical input point (bit) is 1, and the Normally Closed

Immediate contact is closed (on) when the physical input point (bit) is 0. The Normally Open instructions immediately

Load, AND, or OR the physical input value to the top of the stack, and the Normally Closed instructions immediately

Load, AND, or OR the logical NOT of the value of the physical input point to the top of the stack.

NOT Instruction

The Not instruction (NOT) changes the state of power flow input (that is, it changes the value on the top of the stack from 0 to 1 or from 1 to 0).

70

S7-200 Instruction Set

Chapter 6

Positive and Negative Transition Instructions

The Positive Transition contact instruction (EU) allows power to flow for one scan for each off-to-on transition. The Negative Transition contact instruction (ED) allows power to flow for one scan for each on-to-off transition. For the Positive Transition instruction, detection of a 0-to-1 transition in the value on the top of the stack sets the top of the stack value to 1; otherwise, it is set to 0. For a Negative Transition instruction, detection of a 1-to-0 transition in the value on the top of the stack sets the top of the stack value to 1; otherwise, it is set to 0.

For run mode editing (when you edit your program in RUN mode), you must enter a parameter for the Positive Transition and Negative Transition instructions. Refer to Chapter 5 for more information about editing in RUN mode.

Table 6-3 Valid Operands for the Bit Logic Input Instructions

Inputs/Outputs

Bit

Bit (immediate)

Data Type

BOOL

BOOL I

Operands

I, Q, V, M, SM, S, T, C, L, Power Flow

As shown in Figure 6-2, the S7-200 uses a logic stack to resolve the control logic. In these examples, “iv0” to “iv7” identify the initial values of the logic stack, “nv” identifies a new value provided by the instruction, and “S0” identifies the calculated value that is stored in the logic stack.

Load (LD, LDI,

LDN, LDNI)

Loads a new value (nv) onto the stack.

Before iv0 iv1 iv2 iv3 iv4 iv5 iv6 iv7 iv8

2 iv2 iv3 iv4 iv5

After nv iv0 iv1 iv6 iv7

And (A, AI, AN,

ANI)

ANDs a new value (nv) with the initial value

(iv) at the top of the stack.

S0=iv0 AND nv iv3 iv4 iv5 iv6

Before iv0 iv1 iv2 iv7 iv8

1

2

S0 identifies the calculated value that is stored in the logic stack.

After the execution of a Load, the value iv8 is lost.

Figure 6-2 Operations of the Contact Instructions.

iv3 iv4 iv5 iv6

After

S0

1 iv1 iv2 iv7 iv8

Or (O, OI, ON,

ONI)

ORs a new value (nv) with the initial value

(iv) at the top of the stack.

S0=iv0 OR nv iv3 iv4 iv5 iv6

Before iv0 iv1 iv2 iv7 iv8 iv3 iv4 iv5 iv6

After

S0

1 iv1 iv2 iv7 iv8

Tip

Because the Positive Transition and Negative Transition instructions require an on-to-off or an off-to-on transition, you cannot detect an edge-up or edge-down transition on the first scan.

During the first scan, the S7-200 sets the state of the bit specified by these instructions. On subsequent scans, these instructions can then detect transitions for the specified bit.

71

S7-200 Programmable Controller System Manual

Example: Contact Instructions

LD

LPS

EU

S

=

LPP

ED

R

=

Network 1 //N.O. contacts I0.0 AND I0.1 must be on

//(closed) to activate Q0.0. The NOT

//instruction acts as an inverter. In RUN

// mode, Q0.0 and Q0.1 have opposite logic states.

LD

A

=

NOT

=

I0.0

I0.1

Q0.0

Q0.1

Network 2 //N.O. contact I0.2 must be on or N.C.

//contact I0.3 must be off to activate Q0.2.

// One or more parallel LAD branches

//(OR logic inputs) must be true to make

//the output active.

LD

ON

=

I0.2

I0.3

Q0.2

Network 3 //A positive Edge Up input on a P contact

//or a negative Edge Down input on a N contact

//outputs a pulse with a 1 scan cycle

//duration. In RUN mode, the pulsed state

//changes of Q0.4 and Q0.5 are too fast to

// be visible in program status view.

//The Set and Reset outputs latch the

// pulse in Q0.3 and make the state

//change visible in program status view.

I0.4

Q0.3, 1

Q0.4

Q0.3, 1

Q0.5

Timing Diagram

Network 1

I0.0

Network 2

I0.2

I0.3

I0.1

Q0.0

Q0.1

Q0.2

Network 3

I0.4

Q0.3

Q0.4

Q0.5

On for one scan

On for one scan

72

S7-200 Instruction Set

Chapter 6

Coils

Output

The Output instruction (=) writes the new value for the output bit to the process-image register. When the Output instruction is executed, the S7-200 turns the output bit in the process-image register on or off. For LAD and FBD, the specified bit is set equal to power flow. For STL, the value on the top of the stack is copied to the specified bit.

Output Immediate

The Output Immediate instruction (=I) writes the new value to both the physical output and the corresponding process-image register location when the instruction is executed.

When the Output Immediate instruction is executed, the physical output point (Bit) is immediately set equal to power flow. For STL, the instruction immediately copies the value on the top of the stack to the specified physical output bit

(STL). The “I” indicates an immediate reference; the new value is written to both the physical output and the corresponding process-image register location when the instruction is executed. This differs from the non-immediate references, which write the new value to the process-image register only.

Set and Reset

The Set (S) and Reset (R) instructions set (turn on) or reset

(turn off) the specified number of points (N), starting at the specified address (Bit). You can set or reset from 1 to 255 points.

If the Reset instruction specifies either a timer bit (T) or counter bit (C), the instruction resets the timer or counter bit and clears the current value of the timer or counter.

Error conditions that set ENO = 0

H

0006 (indirect address)

H

0091 (operand out of range)

Set Immediate and Reset Immediate

The Set Immediate and Reset Immediate instructions immediately set (turn on) or immediately reset (turn off) the number of points (N), starting at specified address (Bit). You can set or reset from 1 to 128 points immediately.

The “I” indicates an immediate reference; when the instruction is executed, the new value is written to both the physical output point and the corresponding process-image register location.

This differs from the non-immediate references, which write the new value to the process-image register only.

Error conditions that set ENO = 0

H

0006 (indirect address)

H

0091 (operand out of range)

Table 6-4 Valid Operands for the Bit Logic Output Instructions

Inputs/Outputs Data Type Operands

Bit

Bit (immediate)

N

BOOL

BOOL

BYTE

I, Q, V, M, SM, S, T, C, L

Q

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *LD, *AC, Constant

73

S7-200 Programmable Controller System Manual

Example: Coil Instructions

Timing Diagram

Network 1

I0.0

Q0.0, Q0.1, V0.0

Networks 2 and 3

I0.1 (Set)

I0.2 (Reset)

Network 1 //Output instructions assign bit values to external I/O (I, Q)

//and internal memory (M, SM, T, C, V, S, L).

=

=

LD

=

I0.0

Q0.0

Q0.1

V0.0

Network 2 //Set a sequential group of 6 bits to a value of 1. Specify a

//starting bit address and how many bits to set. The program

//status indicator for Set is ON when the value of the first bit

//(Q0.2) is 1.

LD

S

I0.1

Q0.2, 6

Network 3 //Reset a sequential group of 6 bits to a value of 0.

//Specify a starting bit address and how many bits to reset.

//The program status indicator for Reset is ON when the value

//of the first bit (Q0.2) is 0.

LD

R

I0.2

Q0.2, 6

Network 4 //Sets and resets 8 output bits (Q1.0 to Q1.7) as a group.

A

S

LD

LPS

LPP

A

R

I0.3

I0.4

Q1.0, 8

I0.5

Q1.0, 8

Network 5 //The Set and Reset instructions perform the function of a latched

//relay. To isolate the Set/Reset bits, make sure they are not

//overwritten by another assignment instruction. In this example,

//Network 4 sets and resets eight output bits (Q1.0 to Q1.7)

//as a group. In RUN mode, Network 5 can overwrite

//the Q1.0 bit value and control the Set/Reset program

//status indicators in Network 4.

LD

=

I0.6

Q1.0

Reset to 0 overwrites Set to 1 because the program scan executes the Network 3 Reset after the Network 2 Set

Networks 4 and 5

I0.3

I0.4 (Set)

I0.5 (Reset)

I0.6

Q1.0

Network 5 Output bit (=) instruction overwrites the first bit (Q1.0) Set/Reset in

Network 4 because the program scan executes the Network 5 assignment last

74

S7-200 Instruction Set

Chapter 6

Logic Stack Instructions

AND Load

The AND Load instruction (ALD) combines the values in the first and second levels of the stack using a logical AND operation. The result is loaded in the top of stack. After the

ALD is executed, the stack depth is decreased by one.

OR Load

The OR Load instruction (OLD) combines the values in the first and second levels of the stack, using a logical OR operation. The result is loaded in the top of the stack. After the OLD is executed, the stack depth is decreased by one.

Logic Push

The Logic Push instruction (LPS) duplicates the top value on the stack and pushes this value onto the stack. The bottom of the stack is pushed off and lost.

Logic Read

The Logic Read instruction (LRD) copies the second stack value to the top of stack. The stack is not pushed or popped, but the old top-of-stack value is destroyed by the copy.

Logic Pop

The Logic Pop instruction (LPP) pops one value off of the stack. The second stack value becomes the new top of stack value.

AND ENO

The AND ENO instruction (AENO) performs a logical AND of the ENO bit with the top of the stack to generate the same effect as the ENO bit of a box in LAD or FBD. The result of the AND operation is the new top of stack.

ENO is a Boolean output for boxes in LAD and FBD. If a box has power flow at the EN input and is executed without error, the ENO output passes power flow to the next element. You can use the

ENO as an enable bit that indicates the successful completion of an instruction. The ENO bit is used with the top of stack to affect power flow for execution of subsequent instructions. STL instructions do not have an EN input. The top of the stack must be a logic 1 for conditional instructions to be executed. In STL there is also no ENO output. However, the STL instructions that correspond to LAD and FBD instructions with ENO outputs set a special ENO bit. This bit is accessible with the AENO instruction.

Load Stack

The Load Stack instruction (LDS) duplicates the stack bit (N) on the stack and places this value on top of the stack. The bottom of the stack is pushed off and lost.

Table 6-5 Valid Operands for the Load Stack Instruction

Inputs/Outputs

N

Data Type

BYTE

Operands

Constant (0 to

75

S7-200 Programmable Controller System Manual

As shown in Figure 6-3, the S7-200 uses a logic stack to resolve the control logic. In these examples, “iv0” to “iv7” identify the initial values of the logic stack, “nv” identifies a new value provided by the instruction, and “S0” identifies the calculated value that is stored in the logic stack.

ALD

AND the top two stack values

S0 = iv0 AND iv1

LPS

Logic Push iv5 iv6 iv7 iv8

Before iv0 iv1 iv2 iv3 iv4 iv3 iv4 iv5 iv6

Before iv0 iv1 iv2 iv7 iv8

2

After

S0 iv2 iv3 iv4 iv5 iv6 iv7 iv8 x

1 iv2 iv3 iv4 iv5

After iv0 iv0 iv1 iv6 iv7

OLD

OR the top two stack values

S0 = iv0 OR iv1 iv5 iv6 iv7 iv8

Before iv0 iv1 iv2 iv3 iv4

LRD

Logic Read iv3 iv4 iv5 iv6

Before iv0 iv1 iv2 iv7 iv8

After

S0 iv2 iv3 iv4 iv5 iv6 iv7 iv8 x

1

1

2

The value is unknown (it could be either a 0 or a 1).

After the execution of a Logic Push or a Load Stack instruction, value iv8 is lost.

Figure 6-3 Operations of the Logic Stack Instructions iv3 iv4 iv5 iv6

After iv1 iv1 iv2 iv7 iv8

LDS

Load Stack

Before iv0 iv1 iv2 iv3 iv4 iv5 iv6 iv7 iv8

2

LPP

Logic Pop iv3 iv4 iv5 iv6

Before iv0 iv1 iv2 iv7 iv8

Example: Logic Stack Instructions

Network 1

A

=

O

ALD

=

LPP

LD

LPS

LD

O

ALD

=

LRD

LD

LD

LD

LD

A

OLD

ALD

=

I0.0

I0.1

I2.0

I2.1

Q5.0

Network 2

I0.0

I0.5

I0.6

Q7.0

I2.1

I1.3

Q6.0

I1.0

Q3.0

After iv3 iv0 iv1 iv2 iv3 iv4 iv5 iv6 iv7 iv4 iv5 iv6 iv7

After iv1 iv2 iv3 iv8 x

1

76

S7-200 Instruction Set

Chapter 6

Set and Reset Dominant Bistable Instructions

The Set Dominant Bistable is a latch where the set dominates. If the set (S1) and reset (R) signals are both true, the output (OUT) is true.

The Reset Dominant Bistable is a latch where the reset dominates. If the set (S) and reset (R1) signals are both true, the output (OUT) is false.

The Bit parameter specifies the Boolean parameter that is set or reset. The optional output reflects the signal state of the Bit parameter.

Table 6-7 shows the truth tables for the sample program.

Table 6-6 Valid Operands for the Set Dominant Bistable and Reset Dominant Bistable

Instructions

Inputs/Outputs Data Types Operands

S1, R

S, R1, OUT

Bit

BOOL

BOOL

BOOL

I, Q, V, M, SM, S, T, C, Power Flow

I, Q, V, M, SM, S, T, C, L, Power Flow

I, Q, V, M, S

Example: Set and Reset Dominant Bistable Instructions

Timing Diagram

Set I0.0

Reset I0.1

SR Q0.0

RS Q0.1

Table 6-7 Truth Table for the Set and Reset Dominant Bistable Instructions

Instruction

Set Dominant Bistable instruction

(SR)

Instruction

Reset Dominant Bistable instruction

(RS)

S

0

0

1

1

0

1

S1

0

1

R1

0

1

0

1

1

0

R

0

1

Out (Bit)

Previous state

0

1

1

Out (Bit)

Previous state

0

1

0

77

S7-200 Programmable Controller System Manual

Clock Instructions

Read Real-Time Clock and Set Real-Time

Clock

The Read Real-Time Clock (TODR) instruction reads the current time and date from the hardware clock and loads it in an 8-byte Time buffer starting at address T. The Set

Real-Time Clock (TODW) instruction writes the current time and date to the hardware clock, beginning at the 8-byte

Time buffer address specified by T.

You must code all date and time values in BCD format (for example, 16#97 for the year 1997). Figure 6-4 shows the format of the 8-Byte Time buffer (T).

The time-of-day (TOD) clock initializes the following date and time after extended power outages or when memory has been lost:

Date:

Time:

Day of Week:

01—Jan—90

00:00:00

Sunday

Error conditions that set ENO = 0

H

0006 (indirect address)

H

0007 (TOD data error)

Set Real-Time Clock only

H

000C (clock not present)

Table 6-8 Valid Operands for the Clock Instructions

Inputs/Outputs Data Types Operands

T BYTE IB, QB, VB, MB, SMB, SB, LB, *VD, *LD, *AC

T

Year:

00 to 99

T+1

Month:

01 to 12

T+2

Day:

01 to 31

T+3

Hours:

00 to 23

T+4

Minutes:

00 to 59

T+5

Seconds:

00 to 59

T+6

0

T+7

Day of Week:

0 to 7*

*T+7 1=Sunday, 7=Saturday

0 disables the day of week.

Figure 6-4 Format of the 8-Byte Time Buffer (T)

78

S7-200 Instruction Set

Chapter 6

Tip

The S7-200 CPU does not perform a check to verify that the day of week is correct based upon the date. Invalid dates, such as February 30, could be accepted. You should ensure that the date you enter is correct.

Do not use the TODR/TODW instruction in both the main program and in an interrupt routine. A

TODR/TODW instruction in an interrupt routine that attempts to execute while another

TODR/TODW instruction is in process cannot be executed. SM4.3 is set indicating that two simultaneous accesses to the clock were attempted (non-fatal error 0007).

The time-of-day clock in the S7-200 uses only the least significant two digits for the year, so for the year 2000, the year is represented as 00. The S7-200 PLC does not use the year information in any way. However, user programs that use arithmetic or compares with the year’s value must take into account the two-digit representation and the change in century.

Leap year is correctly handled through year 2096.

Read Real Time Clock Extended

The Read Real Time Clock Extended (TODRX) instruction reads the current time, date, and daylight savings configuration from the PLC and loads it in a 19-byte buffer beginning at the address specified by T.

Error conditions that set ENO = 0

H

0006 (indirect address)

H

000C (clock cartridge not present)

H

0091 (range error)

Set Real Time Clock Extended

The Set Real Time Clock (TODWX) instruction writes the current time, date, and daylight savings configuration to the

PLC beginning at the 19-byte buffer address specified by T.

Error conditions that set ENO = 0

H

0006 (indirect address)

H

0007 (TOD data error)

H

000C (clock cartridge not present)

H

0091 (range error) You must code all date and time values in BCD format (for example, 16#02 for the year 2002). Table 6-9 shows the format of the 19-Byte Time Buffer (T).

The time-of-day clock initializes the following date and time after extended power outages or memory has been lost:

Date:

Time

01—Jan—90

00:00:00

Day of Week: Sunday

Tip

The only time the S7-200 CPU uses bytes 9 to18 is when the “User Specified” mode is selected in byte 8. Otherwise, the last value written to these bytes by STEP 7—Micro/WIN or the

SET_RTCX instruction is returned.

79

S7-200 Programmable Controller System Manual

15

16

17

18

9

10

11

12

13

14

Table 6-9 Format of the 19-Byte Time Buffer (TI)

T Byte Description

6

7

4

5

8

2

3

0

1 year (0—99) month (1—12) day (1—31) hour (0—23) minute (0—59) second (0—59)

00 day of week (1—7) mode (00H—03H, 08H,

10H—13H, FFH) correction hours (0—23) correction minutes (0—59) beginning month (1—12) beginning day (1—31) beginning hour (0—23) beginning minute (0—59) ending month (1—12) ending day (1—31) ending hour (0—23) ending minute (0—59)

Byte Data

current year (BCD value) current month (BCD value) current day (BCD value current hour (BCD value) current minute (BCD value) current second (BCD value) reserved — always set to 00 current day of the week, 1=Sunday (BCD value) correction mode:

00H = correction disabled

01H = EU (time zone offset from UTC = 0 hrs)

02H = EU (time zone offset from UTC = +1 hrs)

1

03H = EU (time zone offset from UTC = +2 hrs)

04H—07H = reserved

08H = EU (time zone offset from UTC = —1 hrs)

09H—0FH = reserved

10H = US

2

11H = Australia

3

1

1

1

12H = Australia (Tasmania)

13H = New Zealand

5

4

14H—FEH = reserved

FFH = user specified (using values in bytes 9—18) correction amount, hours (BCD value) correction amount, minutes (BCD value) beginning month of daylight saving time (BCD value) beginning day of daylight saving time (BCD value) beginning hour of daylight saving time (BCD value) beginning minute of daylight saving time (BCD value) ending month of daylight saving time (BCD value) ending day of daylight saving time (BCD value) ending hour of daylight saving time (BCD value ending minute of daylight saving time (BCD value)

1

2

3

4

5

EU convention: Adjust time ahead one hour on last Sunday in March at 1:00 a.m. UTC. Adjust time back one hour on last Sunday in October at 2:00 a.m UTC. (The local time when the correction is made depends upon the time zone offset from UTC).

US convention: Adjust time ahead one hour on first Sunday in April at 2:00 a.m local time. Adjust time back one hour on last

Sunday in October at 2:00 a.m local time.

Australia convention: Adjust time ahead one hour on last Sunday in October at 2:00 a.m. local time. Adjust time back one hour on last Sunday in March at 3:00 a.m. local time.

Australia (Tasmania) convention: Adjust time ahead one hour on first Sunday in October at 2:00 a.m. local time. Adjust time back one hour on last Sunday in March at 3:00 a.m. local time

New Zealand convention: Adjust time ahead one hour on first Sunday in October at 2:00 a.m. local time. Adjust time back one hour on first Sunday on or after March 15 at 3:00 a.m. local time

80

S7-200 Instruction Set

Chapter 6

Communications Instructions

Instruction

Wizard

Network Read and Network Write Instructions

The Network Read instruction (NETR) initiates a communications operation to gather data from a remote device through the specified port (PORT), as defined by the table (TBL). The Network Write instruction (NETW) initiates a communications operation to write data to a remote device through the specified port (PORT), as defined by the table (TBL).

Error conditions that set ENO = 0:

H

0006 (indirect address)

H

If the function returns an error and sets the E bit of table status byte (see Figure 6-5)

The Network Read instruction can read up to 16 bytes of information from a remote station, and the Network Write instruction can write up to 16 bytes of information to a remote station.

You can have any number of Network Read and Network

Write instructions in the program, but only a maximum of eight Network Read and Network Write instructions can be activated at any one time. For example, you can have 4

Network Read and 4 Network Write instructions, or 2

Network Read and 6 Network Write instructions, active at the same time in a given S7-200.

You can use the Network Read/Network Write Instruction Wizard to configure the counter. To start the Network Read/Network Write Instruction Wizard, select the

Tools > Instruction Wizard

menu command and then select Network Read/Network Write from the Instruction Wizard window.

Table 6-10 Valid Operands for the Network Read and Network Write Instructions

Inputs/Outputs Data Type Operands

TBL

PORT

BYTE

BYTE

VB, MB, *VD, *LD, *AC

Constant

for CPU 221, CPU 222, CPU 224: for CPU 224XP, CPU 226:

0

0 or 1

81

S7-200 Programmable Controller System Manual

Figure 6-5 describes the table that is referenced by the TBL parameter, and Table 6-11 lists the error codes.

Byte

Offset

5

6

3

4

7

8

0

1

2

7 0

D A E 0 Error code

Remote station address

Pointer to the data area in the remote station

(I, Q, M, or V)

Data length

Data byte 0

Data byte 1

22

Figure 6-5

D Done (function has been completed):

A Active (function has been queued):

E Error (function returned an error): 0 = no error

1 = done

1 = error

Remote station address: the address of the PLC whose data is to be accessed.

Pointer to the data area in the remote station: an indirect pointer to the data that is to be accessed.

Data length: the number of bytes of data that are to be accessed in the remote station (1 to 16 bytes).

0 = not done

0 = not active 1 = active

Data byte 15

Receive or transmit data area. 1 to 16 bytes reserved for the data.

For a Network Read instruction, stores the values that were read from the remote station when the instruction was executed.

For a Network Write instruction, stores the values to be sent to the remote station when the instruction is executed.

TBL Parameter for the Network Read and Network Write Instructions

Table 6-11 Error Codes for the TBL Parameter

Code Definition

0 No error.

1

2

Time-out error: Remote station not responding.

Receive error: Parity, framing, or checksum error in the response.

3

4

5

Offline error: Collisions caused by duplicate station addresses or failed hardware.

Queue overflow error: More than 8 Network Read or Network Write instructions have been activated.

Protocol violation: Attempt to execute a Network Read or Network Write instruction without enabling the PPI Master Mode in SMB30 or SMB130.

8

9

6

7

Illegal parameter: TBL parameter contains an illegal or invalid value.

No resource: Remote station is busy. (An upload or a download sequence is in process.)

Layer 7 error: Application protocol violation

Message error: Wrong data address or incorrect data length

A to F Not used. (Reserved)

Figure 6-6 shows an example to illustrate the utility of the Network Read and Network Write instructions. For this example, consider a production line where tubs of butter are being filled and sent to one of four boxing machines (case packers). The case packer packs eight tubs of butter into a single cardboard box. A diverter machine controls the flow of butter tubs to each of the case packers. Four S7-200s control the case packers, and an S7-200 with a TD 200 operator interface controls the diverter.

82

S7-200 Instruction Set

Chapter 6

Case Packer #1

Station 2

Case Packer #2

Station 3

Case Packer #3

Station 4

Case Packer #4

Station 5

Diverter

Station 6 TD 200 Station 1

VB100

VW101

Control

Status

VB100

VW101

Control

Status

VB100

VW101

Control

Status

VB100

VW101

Control

Status

VB200 Rcv

Buffers

VB300 Xmt

Buffers

VB100 f e e e 0 g b t

Control

VB200 Receive buffer

Station 2

VB101 Number of

Status MSB

VB210 Receive buffer

Station 3

VB102 cases packed

LSB

VB220

VB230 t Out of butter tubs to pack; t=1, out of butter tubs b Box supply is low; b=1, must add boxes in the next 30 minutes f g Glue supply is low; g=1, must add glue in the next 30 minutes eee error code identifying the type of fault experienced

Fault indicator; f=1, the case packer has detected an error

Receive buffer

Station 4

Receive buffer

Station 5

Figure 6-6 Example of the Network Read and Network Write Instructions

VB300

VB310

VB320

VB330

Transmit buffer

Station 2

Transmit buffer

Station

Transmit buffer

Station 4

Transmit buffer

Station

Figure 6-7 shows the receive buffer (VB200) and transmit buffer (VB300) for accessing the data in station 2. The S7-200 uses a Network Read instruction to read the control and status information on a continuous basis from each of the case packers. Each time a case packer has packed 100 cases, the diverter notes this and sends a message to clear the status word using a Network Write instruction.

Receive Buffer

for reading from

Case Packer #1

7

VB200

VB201

VB202

VB203

VB204

VB205

VB206

VB207

VB208

VB209

D A E 0 Error Code

Remote station address = 2

Pointer to the data area in the

Remote station = (&VB100)

Data length = 3 bytes

Control

Status (MSB)

Status (LSB)

0

VB300

VB301

VB302

VB303

VB304

VB305

VB306

VB307

VB308

Transmit Buffer

for clearing the count of

Case Packer #1

7

D A E 0 Error Code

Remote station address = 2

Pointer to the data area in the

Remote station = (&VB101)

Data length = 2 bytes

0

0

0

Figure 6-7 Sample TBL Data for the Network Read/Write Example

83

S7-200 Programmable Controller System Manual

Example: Network Read and Network Write Instructions

Network 1 //On the first scan, enable the

//PPI master mode

//and clear all receive and transmit buffers.

LD

MOVB

FILL

SM0.1

2, SMB30

+0, VW200, 68

Network 2 //When the NETR Done bit (V200.7)

//is set and 100 cases have been

//packed:

//1. Load the station address of

// case packer #1.

//2. Load a pointer to the data in

// the remote station.

//3. Load the length of data to be

// transmitted.

//4. Load the data to transmit.

//5. Reset the number of cases packed

// by case packer #1

LD

AW=

MOVB

MOVD

MOVB

MOVW

NETW

V200.7

VW208, +100

2, VB301

&VB101, VD302

2, VB306

+0, VW307

VB300, 0

Network 3 //When the NETR Done bit is set,

//save the control data from

//case packer #1.

LD

MOVB

V200.7

VB207, VB400

84

S7-200 Instruction Set

Chapter 6

Example: Network Read and Network Write Instructions , continued

Network 4

LDN

AN

AN

MOVB

MOVD

MOVB

NETR

//If not the first scan and there are

//no errors:

//1. Load the station address of

// case packer #1.

//2. Load a pointer to the data in

// the remote station.

//3. Load the length of data to

// be received.

//4. Read the control and status data

// in case packer #1.

SM0.1

V200.6

V200.5

2, VB201

&VB100, VD202

3, VB206

VB200, 0

85

S7-200 Programmable Controller System Manual

Transmit and Receive Instructions (Freeport)

The Transmit instruction (XMT) is used in Freeport mode to transmit data by means of the communications port(s).

The Receive instruction (RCV) initiates or terminates the receive message function. You must specify a start and an end condition for the Receive box to operate. Messages received through the specified port (PORT) are stored in the data buffer (TBL). The first entry in the data buffer specifies the number of bytes received.

Error conditions that set ENO = 0

H

0006 (indirect address)

H

0009 (simultaneous Transmit/Receive on port 0)

H

000B (simultaneous Transmit/Receive on port 1)

H

Receive parameter error sets SM86.6 or SM186.6

H

S7-200 CPU is not in Freeport mode

Table 6-12 Valid Operands for the Transmit and Receive Instructions

Inputs/Outputs Data Type Operands

TBL

PORT

BYTE

BYTE

IB, QB, VB, MB, SMB, SB, *VD, *LD, *AC

Constant

for CPU 221, CPU 222, CPU 224: for CPU 224XP, CPU 226:

For more information about using Freeport mode, see the section Creating User-Defined

Protocols with Freeport Mode on page 226 in Chapter 7.

0

0 or 1

Using Freeport Mode to Control the Serial Communications Port

You can select the Freeport mode to control the serial communications port of the S7-200 by means of the user program. When you select Freeport mode, your program controls the operation of the communications port through the use of the receive interrupts, the transmit interrupts, the

Transmit instruction, and the Receive instruction. The communications protocol is entirely controlled by the ladder program while in Freeport mode. SMB30 (for port 0) and SMB130 (for port

1 if your S7-200 has two ports) are used to select the baud rate and parity.

The Freeport mode is disabled and normal communications are re-established (for example, programming device access) when the S7-200 is in STOP mode.

In the simplest case, you can send a message to a printer or a display using only the Transmit

(XMT) instruction. Other examples include a connection to a bar code reader, a weighing scale, and a welder. In each case, you must write your program to support the protocol that is used by the device with which the S7-200 communicates while in Freeport mode.

Freeport communications are possible only when the S7-200 is in RUN mode. Enable the

Freeport mode by setting a value of 01 in the protocol select field of SMB30 (Port 0) or SMB130

(Port 1). While in Freeport mode, communications with the programming device are not possible.

Tip

Freeport mode can be controlled using special memory bit SM0.7, which reflects the current position of the operating mode switch. When SM0.7 is equal to 0, the switch is in TERM position; when SM0.7 = 1, the operating mode switch is in RUN position. If you enable Freeport mode only when the switch is in RUN position, you can use the programming device to monitor or control the S7-200 operation by changing the switch to any other position.

86

S7-200 Instruction Set

Chapter 6

Changing PPI Communications to Freeport Mode

SMB30 and SMB130 configure the communications ports, 0 and 1 respectively, for Freeport operation and provide selection of baud rate, parity, and number of data bits. Figure 6-8 describes the Freeport control byte. One stop bit is generated for all configurations.

MSB

7 p p d

SMB30 =

SMB130 = b b

Port 0

Port 1 b

LSB

0 m m

pp:

Parity select

00 =

01 =

10 =

11 = no parity even parity no parity odd parity

d:

Data bits per character

0 =

1 =

8 bits per character

7 bits per character

bbb:

Freeport baud rate

000 =

001 =

010 =

011 =

100 =

101 =

110 =

111 =

38,400 baud

19,200 baud

9,600 baud

4,800 baud

2,400 baud

1,200 baud

115.2 kbaud

57.6 kbaud

1

1

1

Requires S7-200

CPUs version 1.2

or later

mm:

Protocol selection

00 =

01 =

10 =

11 =

PPI/slave mode

Freeport protocol

PPI/master mode

Reserved (defaults to PPI/slave mode)

Figure 6-8 SM Control Byte for Freeport Mode (SMB30 or SMB130)

Transmitting Data

The Transmit instruction lets you send a buffer of one or more characters, up to a maximum of

255.

Figure 6-9 shows the format of the

Transmit buffer.

Count M E S S A G E

If an interrupt routine is attached to the transmit complete event, the S7-200 generates an interrupt (interrupt event 9 for port 0 and interrupt event 26 for port

1) after the last character of the buffer is sent.

Characters of the message

Number of bytes to transmit (byte field)

Figure 6-9 Format for the Transmit Buffer

You can make transmissions without using interrupts (for example, sending a message to a printer) by monitoring SM4.5 or SM4.6 to signal when transmission is complete.

You can use the Transmit instruction to generate a BREAK condition by setting the number of characters to zero and then executing the Transmit instruction. This generates a BREAK condition on the line for 16-bit times at the current baud rate. Transmitting a BREAK is handled in the same manner as transmitting any other message, in that a Transmit interrupt is generated when the

BREAK is complete and SM4.5 or SM4.6 signals the current status of the Transmit operation.

Receiving Data

The Receive instruction lets you receive a buffer of one or more characters, up to a maximum of

255.

Figure 6-10 shows the format of the

Receive buffer.

Count

Start

Char

M E S S A G E

End

Char

If an interrupt routine is attached to the receive message complete event, the

S7-200 generates an interrupt (interrupt event 23 for port 0 and interrupt event 24 for port 1) after the last character of the buffer is received.

Characters of the message

Number of bytes received (byte field)

Figure 6-10 Format for the Receive Buffer

You can receive messages without using interrupts by monitoring SMB86 (port 0) or SMB186

(port 1). This byte is non-zero when the Receive instruction is inactive or has been terminated. It is zero when a receive is in progress.

87

S7-200 Programmable Controller System Manual

As shown in Table 6-13, the Receive instruction allows you to select the message start and message end conditions, using SMB86 through SMB94 for port 0 and SMB186 through SMB194 for port 1.

Tip

The receive message function is automatically terminated in case of an overrun or a parity error.

You must define a start condition and an end condition (maximum character count) for the receive message function to operate.

Table 6-13 Bytes of the Receive Buffer (SMB86 to SMB94, and SM1B86 to SMB194)

Port 0

SMB86

SMB87

Port 1

SMB186

SMB187

Description

Receive message status byte

MSB

7 n r e 0 0 t n: 1 = Receive message function terminated: user issued disable command.

r: 1 = Receive message function terminated: error in input parameters or missing start or end condition.

e: 1 = End character received.

t: 1 = Receive message function terminated: timer expired.

c: 1 = Receive message function terminated: maximum character count achieved.

p 1 = Receive message function terminated: a parity error.

Receive message control byte

MSB

7 en sc ec il c c/m tmr bk

LSB

0 p

LSB

0

0

SMB88

SMB89

SMW90

SMW92

SMB94

SMB188

SMB189

SMW190

SMW192

SMB194 en: 0 =Receive message function is disabled.

1 =Receive message function is enabled.

The enable/disable receive message bit is checked each time the RCV instruction is executed.

sc: 0 =Ignore SMB88 or SMB188.

1 =Use the value of SMB88 or SMB188 to detect start of message.

ec: 0 =Ignore SMB89 or SMB189.

1 =Use the value of SMB89 or SMB189 to detect end of message.

il: 0 =Ignore SMW90 or SMW190.

1 =Use the value of SMW90 or SMW190 to detect an idle line condition.

c/m: 0 =Timer is an inter-character timer.

1 =Timer is a message timer.

tmr: 0 =Ignore SMW92 or SMW192.

1 =Terminate receive if the time period in SMW92 or

SMW192 is exceeded.

bk: 0 =Ignore break conditions.

1 =Use break condition as start of message detection.

Start of message character.

End of message character.

Idle line time period given in milliseconds. The first character received after idle line time has expired is the start of a new message.

Inter-character/message timer time-out value given in milliseconds. If the time period is exceeded, the receive message function is terminated.

Maximum number of characters to be received (1 to 255 bytes). This range must be set to the expected maximum buffer size, even if the character count message termination is not used.

88

S7-200 Instruction Set

Chapter 6

Start and End Conditions for the Receive Instruction

The Receive instruction uses the bits of the receive message control byte (SMB87 or SMB187) to define the message start and end conditions.

Tip

If there is traffic present on the communications port from other devices when the Receive instruction is executed, the receive message function could begin receiving a character in the middle of that character, resulting in a possible parity error and termination of the receive message function. If parity is not enabled the received message could contain incorrect characters. This situation can occur when the start condition is specified to be a specific start character or any character, as described in item 2. and item 6. below.

The Receive instruction supports several message start conditions. Specifying a start condition involving a break or an idle line detection avoids this problem by forcing the receive message function to synchronize the start of the message with the start of a character before placing characters into the message buffer.

The Receive instruction supports several start conditions:

1.

Idle line detection:

The idle line condition is defined as a quiet or idle time on the transmission line. A receive is started when the communications line has been quiet or idle for the number of milliseconds specified in SMW90 or SMW190. When the Receive instruction in your program is executed, the receive message function initiates a search for an idle line condition. If any characters are received before the idle line time expires, the receive message function ignores those characters and restarts the idle line timer with the time from SMW90 or SMW190. See Figure 6-11. After the idle line time expires, the receive message function stores all subsequent characters received in the message buffer.

The idle line time should always be greater than the time to transmit one character (start bit, data bits, parity and stop bits) at the specified baud rate. A typical value for the idle line time is three character times at the specified baud rate.

You use idle line detection as a start condition for binary protocols, protocols where there is not a particular start character, or when the protocol specifies a minimum time between messages.

Setup: il = 1, sc = 0, bk = 0, SMW90/SMW190 = idle line timeout in milliseconds

Characters Characters

Receive instruction is executed: starts the idle time

Restarts the idle time First character placed in the message buffer

Idle time is detected: starts the Receive Message function

Figure 6-11 Using Idle Time Detection to Start the Receive Instruction

2.

Start character detection:

The start character is any character which is used as the first character of a message. A message is started when the start character specified in SMB88 or SMB188 is received. The receive message function stores the start character in the receive buffer as the first character of the message. The receive message function ignores any characters that are received before the start character. The start character and all characters received after the start character are stored in the message buffer.

Typically, you use start character detection for ASCII protocols in which all messages start with the same character.

Setup: il = 0, sc = 1, bk = 0, SMW90/SMW190 = don’t care, SMB88/SMB188 = start character

89

S7-200 Programmable Controller System Manual

3.

Idle line and start character:

The Receive instruction can start a message with the combination of an idle line and a start character. When the Receive instruction is executed, the receive message function searches for an idle line condition. After finding the idle line condition, the receive message function looks for the specified start character. If any character but the start character is received, the receive message function restarts the search for an idle line condition. All characters received before the idle line condition has been satisfied and before the start character has been received are ignored. The start character is placed in the message buffer along with all subsequent characters.

The idle line time should always be greater than the time to transmit one character (start bit, data bits, parity and stop bits) at the specified baud rate. A typical value for the idle line time is three character times at the specified baud rate.

Typically, you use this type of start condition when there is a protocol that specifies a minimum time between messages, and the first character of the message is an address or something which specifies a particular device. This is most useful when implementing a protocol where there are multiple devices on the communications link. In this case the

Receive instruction triggers an interrupt only when a message is received for the specific address or devices specified by the start character.

Setup: il = 1, sc = 1, bk = 0, SMW90/SMW190 > 0, SMB88/SMB188 = start character

4.

Break detection:

A break is indicated when the received data is held to a zero value for a time greater than a full character transmission time. A full character transmission time is defined as the total time of the start, data, parity and stop bits. If the Receive instruction is configured to start a message on receiving a break condition, any characters received after the break condition are placed in the message buffer. Any characters received before the break condition are ignored.

Typically, you use break detection as a start condition only when a protocol requires it.

Setup: il = 0, sc = 0, bk = 1, SMW90/SMW190 = don’t care, SMB88/SMB188 = don’t care

5.

Break and a start character:

The Receive instruction can be configured to start receiving characters after receiving a break condition, and then a specific start character, in that sequence. After the break condition, the receive message function looks for the specified start character. If any character but the start character is received, the receive message function restarts the search for an break condition. All characters received before the break condition has been satisfied and before the start character has been received are ignored.

The start character is placed in the message buffer along with all subsequent characters.

Setup: il = 0, sc = 1, bk = 1, SMW90/SMW190 = don’t care,

SMB88/SMB188 = start character

6.

Any character:

The Receive instruction can be configured to immediately start receiving any and all characters and placing them in the message buffer. This is a special case of the idle line detection. In this case the idle line time (SMW90 or SMW190) is set to zero. This forces the Receive instruction to begin receiving characters immediately upon execution.

Setup: il = 1, sc = 0, bk = 0, SMW90/SMW190 = 0, SMB88/SMB188 = don’t care

Starting a message on any character allows the message timer to be used to time out the receiving of a message. This is useful in cases where Freeport is used to implement the master or host portion of a protocol and there is a need to time out if no response is received from a slave device within a specified amount of time. The message timer starts when the Receive instruction executes because the idle line time was set to zero. The message timer times out and terminates the receive message function if no other end condition is satisfied.

Setup: il = 1, sc = 0, bk = 0, SMW90/SMW190 = 0, SMB88/SMB188 = don’t care c/m = 1, tmr = 1, SMW92 = message timeout in milliseconds

90

S7-200 Instruction Set

Chapter 6

The Receive instruction supports several ways to terminate a message. The message can be terminated on one or a combination of the following:

1.

End character detection:

The end character is any character which is used to denote the end of the message. After finding the start condition, the Receive instruction checks each character received to see if it matches the end character. When the end character is received, it is placed in the message buffer and the receive is terminated.

Typically, you use end character detection with ASCII protocols where every message ends with a specific character. You can use end character detection in combination with the intercharacter timer, the message timer or the maximum character count to terminate a message.

Setup: ec = 1, SMB89/SMB189 = end character

2.

Intercharacter timer:

The intercharacter time is the time measured from the end of one character (the stop bit) to the end of the next character (the stop bit). If the time between characters (including the second character) exceeds the number of milliseconds specified in SMW92 or SMW192, the receive message function is terminated. The intercharacter timer is restarted on each character received. See Figure 6-12.

You can use the intercharacter timer to terminate a message for protocols which do not have a specific end-of-message character. This timer must be set to a value greater than one character time at the selected baud rate since this timer always includes the time to receive one entire character (start bit, data bits, parity and stop bits).

You can use the intercharacter timer in combination with the end character detection and the maximum character count to terminate a message.

Setup: c/m = 0, tmr = 1, SMW92/SMW192 = timeout in milliseconds

Characters Characters

Restarts the intercharacter timer

The intercharacter timer expires:

Terminates the message and generates the

Receive Message interrupt

Figure 6-12 Using the Intercharacter Timer to Terminate the Receive Instruction

3.

Message timer:

The message timer terminates a message at a specified time after the start of the message. The message timer starts as soon as the start condition(s) for the receive message function have been met. The message timer expires when the number of milliseconds specified in SMW92 or SMW192 have passed. See Figure 6-13.

Typically, you use a message timer when the communications devices cannot guarantee that there will not be time gaps between characters or when operating over modems. For modems, you can use a message timer to specify a maximum time allowed to receive the message after the message has started. A typical value for a message timer would be about 1.5 times the time required to receive the longest possible message at the selected baud rate.

You can use the message timer in combination with the end character detection and the maximum character count to terminate a message.

Setup: c/m = 1, tmr = 1, SMW92/SMW192 = timeout in milliseconds

91

S7-200 Programmable Controller System Manual

Characters Characters

Start of the message:

Starts the message timer

The message timer expires:

Terminates the message and generates the

Receive Message interrupt

Figure 6-13 Using the Message Timer to Terminate the Receive Instruction

4.

Maximum character count:

The Receive instruction must be told the maximum number of characters to receive (SMB94 or SMB194). When this value is met or exceeded, the receive message function is terminated. The Receive instruction requires that the user specify a maximum character count even if this is not specifically used as a terminating condition.

This is because the Receive instruction needs to know the maximum size of the receive message so that user data placed after the message buffer is not overwritten.

The maximum character count can be used to terminate messages for protocols where the message length is known and always the same. The maximum character count is always used in combination with the end character detection, intercharacter timer, or message timer.

5.

Parity errors:

The Receive instruction is automatically terminated when the hardware signals a parity error on a received character. Parity errors are only possible if parity is enabled in SMB30 or SMB130. There is no way to disable this function.

6.

User termination:

The user program can terminate a receive message function by executing another Receive instruction with the enable bit (EN) in SMB87 or SMB187 set to zero. This immediately terminates the receive message function.

Using Character Interrupt Control to Receive Data

To allow complete flexibility in protocol support, you can also receive data using character interrupt control. Each character received generates an interrupt. The received character is placed in

SMB2, and the parity status (if enabled) is placed in SM3.0 just prior to execution of the interrupt routine attached to the receive character event. SMB2 is the Freeport receive character buffer.

Each character received while in Freeport mode is placed in this location for easy access from the user program. SMB3 is used for Freeport mode and contains a parity error bit that is turned on when a parity error is detected on a received character. All other bits of the byte are reserved. Use the parity bit either to discard the message or to generate a negative acknowledgement to the message.

When the character interrupt is used at high baud rates (38.4 kbaud to 115.2 kbaud), the time between interrupts is very short. For example, the character interrupt for 38.4 kbaud is

260 microseconds, for 57.6 kbaud is 173 microseconds, and for 115.2 kbaud is 86 microseconds.

Ensure that you keep the interrupt routines very short to avoid missing characters, or else use the

Receive instruction.

Tip

SMB2 and SMB3 are shared between Port 0 and Port 1. When the reception of a character on

Port 0 results in the execution of the interrupt routine attached to that event (interrupt event 8),

SMB2 contains the character received on Port 0, and SMB3 contains the parity status of that character. When the reception of a character on Port 1 results in the execution of the interrupt routine attached to that event (interrupt event 25), SMB2 contains the character received on

Port 1 and SMB3 contains the parity status of that character.

92

S7-200 Instruction Set

Chapter 6

Example: Transmit and Receive Instructions

I

N

M

A

Network 1 //This program receives a string of characters

//until a line feed character is received.

//The message is then transmitted back

//to the sender.

LD SM0.1

//On the first scan:

MOVB 16#09, SMB30 //1. Initialize Freeport:

// — Select 9600 baud.

// — Select 8 data bits.

// — Select no parity.

MOVB 16#B0, SMB87 //2. Initialize RCV message control byte:

// — RCV enabled.

// — Detect end of message character.

// — Detect idle line condition

// as the message start condition.

MOVB 16#0A, SMB89 //3. Set end of message character

// to hex OA (line feed).

MOVW +5, SMW90 //4. Set idle line timeout

// to 5 ms.

MOVB 100, SMB94 //5. Set maximum number of characters

// to 100.

ATCH INT_0, 23

ATCH

ENI

RCV

INT_2, 9

VB100, 0

//6. Attach interrupt 0

// to the Receive Complete event.

//7. Attach interrupt 2

// to the Transmit Complete event.

//8. Enable user interrupts.

//9. Enable receive box with

// buffer at VB100.

93

T

2

I

N

T

1

I

N

S7-200 Programmable Controller System Manual

Example: Transmit and Receive Instructions, continued

T

0

I

N

Network 1 //Receive complete interrupt routine:

//1. If receive status shows receive of

// end character, then attach a

// 10 ms timer to trigger a transmit and return.

//2. If the receive completed for any other reason,

// then start a new receive.

LDB= SMB86, 16#20

MOVB 10, SMB34

ATCH

CRETI

NOT

RCV

INT_1, 10

VB100, 0

Network 1 //10-ms Timer interrupt:

//1. Detach timer interrupt.

//2. Transmit message back to user on port.

LD SM0.0

DTCH 10

XMT VB100, 0

Network 1

LD

RCV

SM0.0

VB100, 0

//Transmit Complete interrupt:

//Enable another receive.

94

S7-200 Instruction Set

Chapter 6

Get Port Address and Set Port Address Instructions

The Get Port Address instruction (GPA) reads the station address of the S7-200 CPU port specified in PORT and places the value in the address specified in ADDR.

The Set Port Address instruction (SPA) sets the port station address (PORT) to the value specified in ADDR. The new address is not saved permanently. After a power cycle, the affected port returns to the last address (the one that was downloaded with the system block).

Error conditions that set ENO = 0:

H

0006 (indirect address)

H

0004 (attempted to perform a Set Port Address instruction in an interrupt routine)

Table 6-14 Valid Operands for the Get Port Address and Set Port Address Instructions

Inputs/Outputs

ADDR

PORT

Data Type

BYTE

BYTE

Operands

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *LD, *AC, Constant

(A constant value is valid only for the Set Port Address instruction.)

Constant

for CPU 221, CPU 222, CPU 224: for CPU 224XP, CPU 226:

0

0 or 1

95

S7-200 Programmable Controller System Manual

Compare Instructions

Comparing Numerical Values

The compare instructions are used to compare two values:

IN1 = IN2

IN1 > IN2

IN1 >= IN2 IN1 <= IN2

IN1 < IN2 IN1 <> IN2

Compare Byte operations are unsigned.

Compare Integer operations are signed.

Compare Double Word operations are signed.

Compare Real operations are signed.

For LAD and FBD:

When the comparison is true, the

Compare instruction turns on the contact (LAD) or output

(FBD).

For STL:

When the comparison is true, the Compare instruction Loads, ANDs, or ORs a 1 with the value on the top of the stack (STL).

When you use the IEC compare instructions, you can use various data types for the inputs. However, both input values must be of the same data type.

Notice

The following conditions are fatal errors and cause your

S7-200 to immediately stop the execution of your program:

H

Illegal indirect address is encountered (any Compare instruction)

H

Illegal real number (for example, NAN) is encountered

(Compare Real instruction)

To prevent these conditions from occurring, ensure that you properly initialize pointers and values that contain real numbers before executing compare instructions that use these values.

Compare instructions are executed regardless of the state of power flow.

Table 6-15 Valid Operands for the Compare Instructions

Inputs/Outputs Type Operands

IN1, IN2

Output (or OUT)

BYTE

INT

DINT

REAL

BOOL

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *LD, *AC, Constant

IW, QW, VW, MW, SMW, SW, T, C, LW, AC, AIW, *VD, *LD, *AC,

Constant

ID, QD, VD, MD, SMD, SD, LD, AC, HC, *VD, *LD, *AC, Constant

ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *LD, *AC, Constant

I, Q, V, M, SM, S, T, C, L, Power Flow

96

S7-200 Instruction Set

Chapter 6

Example: Compare Instructions

LD

LPS

AB<=

=

LPP

AB>=

=

Network 1

I0.0

//Turn analog adjustment potentiometer 0

//to vary the SMB28 byte value.

//Q0.0 is active when the SMB28 value

//is less than or equal to 50.

//Q0.1 is active when the SMB28 value

//is greater than or equal to 150.

//The status indicator is on when

//the comparison is true.

SMB28, 50

Q0.0

SMB28, 150

Q0.1

Network 2 //Load V memory addresses with

//low values that make the comparisons

//false and that turn

//the status indicators off.

LD I0.1

MOVW —30000, VW0

MOVD —200000000, VD2

MOVR 1.012E—006, VD6

Network 3 //Load V memory addresses with

//high values that make the

//comparisons true and that turn

//the status indicators on.

LD I0.2

MOVW +30000, VW0

MOVD —100000000, VD2

MOVR 3.141593, VD6

LD

LPS

AW>

=

LRD

AD<

=

LPP

AR>

=

Network 4 //The Integer Word comparison tests

//to find if VW0 > +10000 is true.

//Uses program constants to show the

// different data types. You can also

//compare two values

//stored in programmable memory

//like: VW0 > VW100

I0.3

VW0, +10000

Q0.2

—150000000, VD2

Q0.3

VD6, 5.001E—006

Q0.4

97

S7-200 Programmable Controller System Manual

Compare String

The Compare String instruction compares two strings of

ASCII characters:

IN1 = IN2 IN1 <> IN2

When the comparison is true, the Compare instruction turns the contact (LAD) or output (FBD) on, or the compare instruction Loads, ANDs or ORs a 1 with the value on the top of the stack (STL).

Notice

The following conditions are fatal errors and cause your

S7-200 to immediately stop the execution of your program:

H

Illegal indirect address is encountered (any compare instruction)

H

A string with a length greater than 254 characters is encountered (Compare String instruction)

H

A string whose starting address and length are such that it will not fit in the specified memory area

(Compare String instruction)

To prevent these conditions from occurring, ensure that you properly initialize pointers and memory locations that are intended to hold ASCII strings prior to executing compare instructions that use these values. Ensure that the buffer reserved for an ASCII string can reside completely within the specified memory area.

Compare instructions are executed regardless of the state of power flow.

Table 6-16 Valid Operands for the Compare String Instructions

Inputs/Outputs Type Operands

IN1 STRING VB, LB, *VD, *LD, *AC, constant

IN2

Output (OUT)

STRING

BOOL

VB, LB, *VD, *LD, *AC

I, Q, V, M, SM, S, T, C, L, Power Flow

98

Conversion Instructions

Standard Conversion Instructions

Numerical Conversions

The Byte to Integer (BTI), Integer to Byte (ITB), Integer to

Double Integer (ITD), Double Integer to Integer (DTI),

Double Integer to Real (DTR), BCD to Integer (BCDI) and

Integer to BCD (IBCD) instructions convert an input value IN to the specified format and stores the output value in the memory location specified by OUT. For example, you can convert a double integer value to a real number. You can also convert between integer and BCD formats.

Round and Truncate

The Round instruction (ROUND) converts a real value IN to a double integer value and places the rounded result into the variable specified by OUT.

The Truncate instruction (TRUNC) converts a real number

IN into a double integer and places the whole-number portion of the result into the variable specified by OUT.

Segment

The Segment instruction (SEG) allows you to generate a bit pattern that illuminates the segments of a seven-segment display.

S7-200 Instruction Set

Chapter 6

Table 6-17 Valid Operands for the Standard Conversion Instructions

Inputs/Outputs Data Type Operands

IN

OUT

BYTE

WORD, INT

DINT

REAL

BYTE

WORD, INT

DINT, REAL

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *LD, *AC, Constant

IW, QW, VW, MW, SMW, SW, T, C, LW, AIW, AC, *VD, *LD, *AC, Constant

ID, QD, VD, MD, SMD, SD, LD, HC, AC, *VD, *LD, *AC, Constant

ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *LD, *AC, Constant

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *LD, *AC

IW, QW, VW, MW, SMW, SW, T, C, LW, AC, *VD, *LD, *AC

ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *LD, *AC

99

S7-200 Programmable Controller System Manual

Operation of the BCD to Integer and Integer to BCD Instructions

The BCD to Integer instruction (BCDI) converts the binary-coded decimal value IN to an integer value and loads the result into the variable specified by OUT. The valid range for IN is 0 to 9999 BCD.

Error conditions that set ENO = 0

H

SM1.6 (invalid BCD)

H

0006 (indirect address)

The Integer to BCD instruction (IBCD) converts the input integer value IN to a binary-coded decimal and loads the result into the variable specified by OUT. The valid range for

IN is 0 to 9999 integer.

SM bits affected:

H

SM1.6 (invalid BCD)

Operation of the Double Integer to Real Instruction

The Double Integer to Real instruction (DTR) converts a

32-bit, signed integer IN into a 32-bit real number and places the result into the variable specified by OUT.

Error conditions that set ENO = 0

H

0006 (indirect address)

Operation of the Double Integer to Integer Instruction

The Double Integer to Integer instruction (DTI) converts the double integer value IN to an integer value and places the result into the variable specified by OUT.

Error conditions that set ENO = 0

H

SM1.1 (overflow)

H

0006 (indirect address)

If the value that you are converting is too large to be represented in the output, then the overflow bit is set and the output is not affected.

SM bits affected:

H

SM1.1 (overflow)

Operation of the Integer to Double Integer Instruction

The Integer to Double Integer instruction (ITD) converts the integer value IN to a double integer value and places the result into the variable specified by OUT. The sign is extended.

Error conditions that set ENO = 0

H

0006 (indirect address)

Operation of the Byte to Integer Instruction

The Byte to Integer instruction (BTI) converts the byte value

IN to an integer value and places the result into the variable specified by OUT. The byte is unsigned, therefore there is no sign extension.

Error conditions that set ENO = 0

H

0006 (indirect address)

Operation of the Integer to Byte Instruction

The Integer to Byte instruction (ITB) converts the word value

IN to a byte value and places the result into the variable specified by OUT. Values 0 to 255 are converted. All other values result in overflow and the output is not affected.

Error conditions that set ENO = 0

H

SM1.1 (overflow)

H

0006 (indirect address)

SM bits affected:

H

SM1.1 (overflow)

Tip

To change an integer to a real number, use the Integer to Double Integer instruction and then use the Double Integer to Real instruction.

100

S7-200 Instruction Set

Chapter 6

Operation of the Round and Truncate Instructions

The Round instruction (ROUND) converts the real-number value IN to a double integer value and places the result into the variable specified by OUT. If the fraction portion is 0.5 or greater, the number is rounded up.

Error conditions that set ENO = 0

H

SM1.1 (overflow)

H

0006 (indirect address)

The Truncate instruction (TRUNC) converts a real-number value IN into a double integer and places the result into the variable specified by OUT. Only the whole number portion of the real number is converted, and the fraction is discarded.

SM bits affected:

H

SM1.1 (overflow)

If the value that you are converting is not a valid real number or is too large to be represented in the output, then the overflow bit is set and the output is not affected.

Example: Standard Conversion Instructions

Network 1 //Convert inches to centimeters:

//1. Load a counter value (inches) into AC1.

//2. Convert the value to a real number.

//3. Multiply by 2.54 (convert to centimeters).

//4. Convert the value back to an integer.

LD

ITD

I0.0

C10, AC1

DTR AC1, VD0

MOVR VD0, VD8

*R VD4, VD8

ROUND VD8, VD12

Network 2

LD

BCDI

I0.3

AC0

//Convert a BCD value to an integer

Double Word Integer to Real and Round

C10

VD0

VD4

VD8

VD12

101

101.0

2.54

256.54

257

Count = 101 inches

Count (as a real number)

2.54 constant (inches to centimeters)

256.54 centimeters as real number

257 centimeters as double integer

BCD to Integer

AC0

AC0

1234

BCDI

04D2

101

S7-200 Programmable Controller System Manual

Operation of the Segment Instruction

To illuminate the segments of a seven-segment display, the Segment instruction (SEG) converts the character (byte) specified by IN to generate a bit pattern (byte) at the location specified by

OUT.

The illuminated segments represent the character in the least significant digit of the input byte. Figure 6-14 shows the seven-segment display coding used by the Segment instruction.

Error conditions that set ENO = 0

H

0006 (indirect address)

(IN)

LSD

0

3

4

5

6

1

2

7

Segment

Display

(OUT)

— g f e d c b a

0 0 1 1 1 1 1 1

0 0 0 0 0 1 1 0

0 1 0 1 1 0 1 1

0 1 0 0 1 1 1 1

0 1 1 0 0 1 1 0

0 1 1 0 1 1 0 1

0 1 1 1 1 1 0 1

0 0 0 0 0 1 1 1

Figure 6-14 Coding for a Seven-Segment Display a e f g d b c

(IN)

LSD

8

D

E

F

9

A

B

C

Segment

Display

(OUT)

— g f e d c b a

0 1 1 1 1 1 1 1

0 1 1 0 0 1 1 1

0 1 1 1 0 1 1 1

0 1 1 1 1 1 0 0

0 0 1 1 1 0 0 1

0 1 0 1 1 1 1 0

0 1 1 1 1 0 0 1

0 1 1 1 0 0 0 1

Example: Segment Instruction

Network 1

LD

SEG

I1.0

VB48, AC1

05

VB48

SEG

6D

AC1

(display character)

102

S7-200 Instruction Set

Chapter 6

ASCII Conversion Instructions

Valid ASCII characters are the hexadecimal values 30 to 39, and 41 to 46.

Converting between ASCII and Hexadecimal

Values

The ASCII to Hexadecimal instruction (ATH) converts a number LEN of ASCII characters, starting at IN, to hexadecimal digits starting at OUT. The Hexadecimal to

ASCII instruction (HTA) converts the hexadecimal digits, starting with the input byte IN, to ASCII characters starting at

OUT. The number of hexadecimal digits to be converted is specified by length LEN.

The maximum number of ASCII characters or hexadecimal digits that can be converted is 255. Valid ASCII input

Valid ASCII input characters are alphanumeric characters 0 to 9 with a hex code value of 30 to 39, and uppercase characters A to F with a hex code value of 41 to 46.

Error conditions that set ENO = 0

H

SM1.7 (illegal ASCII)

ASCII to Hexadecimal only

H

0006 (indirect address)

H

0091 (operand out of range)

SM bits affected:

H

SM1.7 (illegal ASCII)

Converting Numerical Values to ASCII

The Integer to ASCII (ITA), Double Integer to ASCII (DTA), and Real to ASCII (RTA) instructions convert integer, double integer, or real number values to ASCII characters.

Table 6-18 Valid Operands for the ASCII Conversion Instructions

Inputs/Outputs

IN

LEN, FMT

OUT

Data Type

BYTE

INT

DINT

REAL

BYTE

BYTE

Operands

IB, QB, VB, MB, SMB, SB, LB, *VD, *LD, *AC

IW, QW, VW, MW, SMW, SW, T, C, LW, AC, AIW, *VD, *LD, *AC,

Constant

ID, QD, VD, MD, SMD, SD, LD, AC, HC, *VD, *LD, *AC, Constant

ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *LD, *AC, Constant

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *LD, *AC, Constant

IB, QB, VB, MB, SMB, SB, LB, *VD, *LD, *AC

Operation of the Integer to ASCII Instruction

The Integer to ASCII instruction (ITA) converts an integer word IN to an array of ASCII characters. The format FMT specifies the conversion precision to the right of the decimal, and whether the decimal point is to be shown as a comma or a period. The resulting conversion is placed in 8 consecutive bytes beginning with OUT.

The array of ASCII characters is always 8 characters.

Error conditions that set ENO = 0

H

0006 (indirect address)

H

Illegal format

H

nnn

> 5

103

S7-200 Programmable Controller System Manual

Figure 6-15 describes the format operand for the Integer to ASCII instruction. The size of the output buffer is always 8 bytes. The number of digits to the right of the decimal point in the output buffer is specified by the

nnn

field. The valid range of the

nnn

field is 0 to 5. Specifying 0 digits to the right of the decimal point causes the value to be displayed without a decimal point. For values of

nnn

bigger than 5, the output buffer is filled with ASCII spaces. The

c

bit specifies the use of either a comma (c=1) or a decimal point (c=0) as the separator between the whole number and the fraction. The upper 4 bits must be zero.

Figure 6-15 shows examples of values that are formatted using a decimal point (c=0) with three digits to the right of the decimal point (nnn=011). The output buffer is formatted according to the following rules:

—

—

—

—

Positive values are written to the output buffer without a sign.

Negative values are written to the output buffer with a leading minus sign (—).

Leading zeros to the left of the decimal point (except the digit adjacent to the decimal point) are suppressed.

Values are right-justified in the output buffer.

FMT

MSB

7

0

6

0

5 4 3

0 0 c

LSB

2 1 0 n n n c = comma (1) or decimal point (0) nnn = digits to right of decimal point in=12 in=—123 in=1234 in = —12345

Out Out Out Out Out Out Out Out

+1 +2 +3 +4 +5 +6 +7

0 .

0 1 2

-0 .

1 2 3

-1

1

2 .

.

2

3

3

4

4

5

Figure 6-15 FMT Operand for the Integer to ASCII (ITA) Instruction

Operation of the Double Integer to ASCII Instruction

The Double Integer to ASCII (DTA) instruction converts a double word IN to an array of ASCII characters. The format operand FMT specifies the conversion precision to the right of the decimal. The resulting conversion is placed in 12 consecutive bytes beginning with OUT.

Error conditions that set ENO = 0

H

0006 (indirect address)

H

Illegal format

H

nnn

> 5

The size of the output buffer is always 12 bytes.

Figure 6-16 describes the format operand for the Double Integer to ASCII instruction. The number of digits to the right of the decimal point in the output buffer is specified by the

nnn

field. The valid range of the

nnn

field is 0 to 5. Specifying 0 digits to the right of the decimal point causes the value to be displayed without a decimal point. For values of

nnn

bigger than 5, the output buffer is filled with ASCII spaces. The

c

bit specifies the use of either a comma (c=1) or a decimal point (c=0) as the separator between the whole number and the fraction. The upper 4 bits must be zero.

Figure 6-16 shows examples of values that are formatted using a decimal point (c=0) with four digits to the right of the decimal point (nnn=100). The output buffer is formatted according to the following rules:

—

—

—

—

Positive values are written to the output buffer without a sign.

Negative values are written to the output buffer with a leading minus sign (—).

Leading zeros to the left of the decimal point (except the digit adjacent to the decimal point) are suppressed.

Values are right-justified in the output buffer.

104

S7-200 Instruction Set

Chapter 6

FMT

MSB

7

0

6

0

5 4 3

0 0 c

LSB

2 1 0 n n n c = comma (1) or decimal point (0) nnn = digits to right of decimal point in=—12 in=1234567

Out Out Out Out Out Out Out Out

+1 +2 +3 +4 +5 +6 +7

-0

1 2 3 .

.

Out Out Out Out

+8 +9 +10 +11

0 0 1

4 5 6

2

7

Figure 6-16 FMT Operand for the Double Integer to ASCII (DTA) Instruction

Operation of the Real to ASCII Instruction

The Real to ASCII instruction (RTA) converts a real-number value IN to ASCII characters. The format FMT specifies the conversion precision to the right of the decimal, whether the decimal point is shown as a comma or a period, and the output buffer size.

Error conditions that set ENO = 0

H

0006 (indirect address)

H nnn > 5

H ssss < 3

H ssss< number of characters in OUT

The resulting conversion is placed in an output buffer beginning with OUT.

The number (or length) of the resulting ASCII characters is the size of the output buffer and can be specified to a size ranging from 3 to 15 bytes or characters.

The real-number format used by the S7-200 supports a maximum of 7 significant digits.

Attempting to display more than 7 significant digits produces a rounding error.

Figure 6-17 describes the format operand (FMT) for the RTA instruction. The size of the output buffer is specified by the ssss field. A size of 0, 1, or 2 bytes is not valid. The number of digits to the right of the decimal point in the output buffer is specified by the nnn field. The valid range of the nnn field is 0 to 5. Specifying 0 digits to the right of the decimal point causes the value to be displayed without a decimal point. The output buffer is filled with ASCII spaces for values of nnn bigger than 5 or when the specified output buffer is too small to store the converted value. The c bit specifies the use of either a comma (c=1) or a decimal point (c=0) as the separator between the whole number and the fraction.

Figure 6-17 also shows examples of values that are formatted using a decimal point (c=0) with one digit to the right of the decimal point (nnn=001) and a buffer size of six bytes (ssss=0110). The output buffer is formatted according to the following rules:

—

—

—

—

—

—

Positive values are written to the output buffer without a sign.

Negative values are written to the output buffer with a leading minus sign (—).

Leading zeros to the left of the decimal point (except the digit adjacent to the decimal point) are suppressed.

Values to the right of the decimal point are rounded to fit in the specified number of digits to the right of the decimal point.

The size of the output buffer must be a minimum of three bytes more than the number of digits to the right of the decimal point.

Values are right-justified in the output buffer.

FMT

MSB LSB

7 6 5 4 3 2 1 0 s s s s c n n n ssss = size of output buffer c = comma (1) or decimal point (0) nnn = digits to right of decimal point in = 1234.5

in = —0.0004

in = —3.67526

in = 1.95

Figure 6-17 FMT Operand for the Real to ASCII (RTA) Instruction

Out Out Out Out Out Out

+1 +2 +3 +4 +5

1 2 3 4 .

5

0 .

0

-3 .

7

2 .

0

105

S7-200 Programmable Controller System Manual

Example: ASCII to Hexadecimal Instruction

Network 1

LD I3.2

ATH VB30, VB40, 3

‘3’

33

VB30

‘E’ ‘A’

45 41

ATH

3E

VB40

Ax

Note: The X indicates that the

“nibble” (half of a byte) is unchanged.

Example: Integer to ASCII Instruction

12345

VW2

ITA

‘ ’

20

VB10

‘ ’

20

VB11

‘1’

31

…

Network 1

LD

ITA

//Convert the integer value at VW2

//to 8 ASCII characters starting at VB10,

//using a format of 16#0B

//(a comma for the decimal point,

//followed by 3 digits).

I2.3

VW2, VB10, 16#0B

‘2’

32

‘,’

2C

‘3’

33

‘4’

34

‘5’

35

Example: Real to ASCII Instruction

123.45

VD2

RTA

‘ ’

20

VB10

‘ ’

20

VB11 …

‘ ’

20

Network 1 //Convert the real value at VD2

//to 10 ASCII characters starting at VB10,

//using a format of 16#A3

//(a period for the decimal point,

//followed by 3 digits).

LD I2.3

RTA VD2, VB10, 16#A3

‘1’

31

‘2’

32

‘3’

33

‘.’

2E

‘4’

34

‘5’

35

‘0’

30

106

S7-200 Instruction Set

Chapter 6

String Conversion Instructions

Converting Numerical Values to String

The Integer to String (ITS), Double Integer to String (DTS), and Real to String (RTS) instructions convert integers, double integers, or real number values (IN) to an ASCII string (OUT).

Operation of the Integer to String

The Integer to String instruction (ITS) converts an integer word IN to an ASCII string with a length of 8 characters. The format (FMT) specifies the conversion precision to the right of the decimal, and whether the decimal point is to be shown as a comma or a period. The resulting string is written to 9 consecutive bytes starting at OUT. See the section, format for strings in Chapter 4 for more information.

Error conditions that set ENO = 0

H

0006 (indirect address)

H

0091 (operand out of range)

H

Illegal format (nnn > 5)

Figure 6-18 describes the format operand for the Integer to

String instruction. The length of the output string is always 8 characters. The number of digits to the right of the decimal point in the output buffer is specified by the nnn field. The valid range of the nnn field is 0 to 5. Specifying 0 digits to the right of the decimal point causes the value to be displayed without a decimal point. For values of nnn greater than 5, the output is a string of 8 ASCII space characters.

The c bit specifies the use of either a comma (c=1) or a decimal point (c=0) as the separator between the whole number and the fraction. The upper 4 bits of the format must be zero.

Figure 6-18 also shows examples of values that are formatted using a decimal point (c= 0) with three digits to the right of the decimal point (nnn = 011).The value at OUT is the length of the string.

The output string is formatted according to the following rules:

—

—

—

—

Positive values are written to the output buffer without a sign.

Negative values are written to the output buffer with a leading minus sign (—).

Leading zeros to the left of the decimal point (except the digit adjacent to the decimal point) are suppressed.

Values are right-justified in the output string.

Table 6-19 Valid Operands for the Instructions That Convert Numerical Values to Strings

Inputs/Outputs Data Type Operands

IN

FMT

OUT

INT

DINT

REAL

BYTE

STRING

IW, QW, VW, MW, SMW, SW, T, C, LW, AIW, *VD, *LD, *AC, Constant

ID, QD, VD, MD, SMD, SD, LD, AC, HC, *VD, *LD, *AC, Constant

ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *LD, *AC, Constant

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *LD, *AC, Constant

VB, LB, *VD, *LD, *AC

107

S7-200 Programmable Controller System Manual

FMT

MSB

7

0

6

0

5 4 3

0 0 c

LSB

2 1 0 n n n c = comma (1) or decimal point (0) nnn = digits to right of decimal point in=12 in=—123 in=1234 in = —12345

Out

8

8

8

8

Out Out Out Out Out Out Out

+1 +2 +3 +4 +5 +6 +7

0 .

.

0 1

-1

0 .

1

2

.

.

.

1 2

2

3

3

4

Out

+8

2

3

4

5

Figure 6-18 FMT Operand for the Integer to String Instruction

Operation of the Double Integer to String

The Double Integer to String instruction (DTS) converts a double integer IN to an ASCII string with a length of 12 characters. The format (FMT) specifies the conversion precision to the right of the decimal, and whether the decimal point is to be shown as a comma or a period. The resulting string is written to 13 consecutive bytes starting at

OUT. For more information, see the section that describes the format for strings in Chapter 4.

Error conditions that set ENO = 0

H

0006 (indirect address)

H

0091 (operand out of range)

H

Illegal format (nnn > 5)

Figure 6-19 describes the format operand for the Integer to String instruction. The length of the output string is always 8 characters. The number of digits to the right of the decimal point in the output buffer is specified by the nnn field. The valid range of the nnn field is 0 to 5. Specifying 0 digits to the right of the decimal point causes the value to be displayed without a decimal point.

For values of nnn greater than 5, the output is a string of 12 ASCII space characters. The c bit specifies the use of either a comma (c=1) or a decimal point (c=0) as the separator between the whole number and the fraction. The upper 4 bits of the format must be zero.

Figure 6-19 also shows examples of values that are formatted using a decimal point (c= 0) with four digits to the right of the decimal point (nnn = 100). The value at OUT is the length of the string.

The output string is formatted according to the following rules:

—

—

—

—

Positive values are written to the output buffer without a sign.

Negative values are written to the output buffer with a leading minus sign (—).

Leading zeros to the left of the decimal point (except the digit adjacent to the decimal point) are suppressed.

Values are right-justified in the output string.

FMT

MSB

7

0

6

0

5 4 3

0 0 c

LSB

2 1 0 n n n c = comma (1) or decimal point (0) nnn = digits to right of decimal point in=12 in=—1234567

Out

12

12

Out Out Out Out Out Out Out

+1 +2 +3 +4 +5 +6 +7

.

-0

1 2 3

Out

+8

.

.

Out

+9

0

4

Out

+10

0

5

Out

+11

1

6

Out

+12

2

7

Figure 6-19 FMT Operand for the Double Integer to String Instruction

108

S7-200 Instruction Set

Chapter 6

Operation of the Real to String

The Real to String instruction (RTS) converts a real value IN to an ASCII string. The format (FMT) specifies the conversion precision to the right of the decimal, whether the decimal point is to be shown as a comma or a period and the length of the output string.

The resulting conversion is placed in a string beginning with

OUT. The length of the resulting string is specified in the format and can be 3 to 15 characters. For more information, see the section that describes the format for strings in

Chapter 4.

Error conditions that set ENO = 0

H

0006 (indirect address)

H

0091 (operand out of range)

H

Illegal format: nnn > 5 ssss < 3 ssss < number of characters required

The real-number format used by the S7-200 supports a maximum of 7 significant digits.

Attempting to display more than the 7 significant digits produces a rounding error.

Figure 6-20 describes the format operand for the Real to String instruction. The length of the output string is specified by the ssss field. A size of 0, 1, or 2 bytes is not valid. The number of digits to the right of the decimal point in the output buffer is specified by the nnn field. The valid range of the nnn field is 0 to 5. Specifying 0 digits to the right of the decimal point causes the value to be displayed without a decimal point. The output string is filled with ASCII space characters when nnn is greater than 5 or when the specified length of the output string is too small to store the converted value. The c bit specifies the use of either a comma (c=1) or a decimal point (c=0) as the separator between the whole number and the fraction.

Figure 6-20 also shows examples of values that are formatted using a decimal point (c= 0) with one digit to the right of the decimal point (nnn = 001) and a output string length of 6 characters

(ssss = 0110). The value at OUT is the length of the string. The output string is formatted according to the following rules:

—

—

—

—

—

—

Positive values are written to the output buffer without a sign.

Negative values are written to the output buffer with a leading minus sign (—).

Leading zeros to the left of the decimal point (except the digit adjacent to the decimal point) are suppressed.

Values to the right of the decimal point are rounded to fit in the specified number of digits to the right of the decimal point.

The size of the output string must be a minimum of three bytes more than the number of digits to the right of the decimal point.

Values are right-justified in the output string.

FMT

MSB

7 s

6 s

5 4 3 s s c

LSB

2 1 0 n n n ssss = length of output string c = comma (1) or decimal point (0) nnn = digits to right of decimal point

Figure 6-20 FMT Operand for the Real to String Instruction in=1234.5

in= —0.0004

in= —3.67526

in = 1.95

Out

6

6

6

6

Out Out Out Out Out Out

+1 +2 +3 +4 +5 +6

1 2 3 4 .

5

0 .

.

0

-3

2

.

.

7

0

109

S7-200 Programmable Controller System Manual

Converting Substrings to Numerical Values

The Substring to Integer (STI), Substring to Double Integer

(STD), and Substring to Real (STR) instructions convert a string value IN, starting at the offset INDX, to an integer, double integer or real number value OUT .

Error conditions that set ENO = 0

H

0006 (indirect address)

H

0091 (operand out of range)

H

009B (index = 0)

H

SM1.1 (overflow)

The Substring to Integer and Substring to Double Integer convert strings with the following form:

[spaces] [+ or —] [digits 0 — 9]

The Substring to Real instruction converts strings with the following form: [spaces] [+ or —] [digits 0 — 9] [. or ,] [digits

0 — 9]

The INDX value is normally set to 1, which starts the conversion with the first character of the string. The INDX value can be set to other values to start the conversion at different points within the string. This can be used when the input string contains text that is not part of the number to be converted. For example, if the input string is “Temperature:

77.8”, you set INDX to a value of 13 to skip over the word

“Temperature: ” at the start of the string.

The Substring to Real instruction does not convert strings using scientific notation or exponential forms of real numbers. The instruction does not produce an overflow error (SM1.1) but converts the string to a real number up to the exponential and then terminates the conversion. For example, the string ‘1.234E6’ converts without errors to a real value of 1.234.

The conversion is terminated when the end of the string is reached or when the first invalid character is found. An invalid character is any character which is not a digit (0 — 9).

The overflow error (SM1.1) is set whenever the conversion produces an integer value that is too large for the output value. For example, the Substring to Integer instruction sets the overflow error if the input string produces a value greater than 32767 or less than —32768.

The overflow error (SM1.1) is also set if no conversion is possible when the input string does not contain a valid value. For example, if the input string contains ‘A123’, the conversion instruction sets SM1.1 (overflow) and the output value remains unchanged.

Table 6-20 Valid Operands for the Instructions That Convert Substrings to Numerical Values

Inputs/Outputs Data Type Operands

IN

INDX

OUT

STRING

BYTE

INT

DINT, REAL

IB, QB, VB, MB, SMB, SB, LB, *VD, *LD, *AC, Constant

VB, IB, QB, MB, SMB, SB, LB, AC, *VD, *LD, *AC, Constant

VW, IW, QW, MW, SMW, SW, T, C, LW, AC, AQW, *VD, *LD, *AC

VD, ID, QD, MD, SMD, SD, LD, AC, *VD, *LD, *AC

110

S7-200 Instruction Set

Chapter 6

Valid Input Strings for Integer and Double Integer

Input String

‘123’

‘—00456’

‘123.45’

‘+2345’

‘000000123ABCD’

Output Integer

123

—456

123

2345

123

Figure 6-21 Examples of Valid and Invalid Input Strings

Valid Input Strings for Real Numbers

Input String

‘123’

‘—00456’

‘123.45’

‘+2345’

‘00.000000123’

Output Real

123.0

—456.0

123.45

2345.0

0.000000123

Invalid Input Strings

Input String

‘A123’

‘ ’

‘++123’

‘+—123

‘+ 123’

Example: String Conversion: Substring to Integer, Double Integer and Real

Network 1 //Converts the numeric string to an integer.

//Converts the numeric string to a double integer.

//Converts the numeric string to a real.

LD

STI

I0.0

VB0,7,VW100

STD VB0,7,VD200

STR VB0,7,VD300

VB0

11 ’T’ ’e’ ’m’ ’p’

After executing the network:

VW100 (integer) = 98

VD200 (double integer) = 98

VD300 (real) = 98.6

’ ’ ’ ’ ’9’ ’8’ ’.’ ’6’

VB11

’F’

111

S7-200 Programmable Controller System Manual

Encode and Decode Instructions

Encode

The Encode instruction (ENCO) writes the bit number of the least significant bit set of the input word IN into the least significant “nibble” (4 bits) of the output byte OUT.

Decode

The Decode instruction (DECO) sets the bit in the output word OUT that corresponds to the bit number represented by the least significant “nibble” (4 bits) of the input byte IN.

All other bits of the output word are set to 0.

SM Bits and ENO

For both the Encode and Decode instructions, the following conditions affect ENO.

Error conditions that set ENO = 0

H

0006 (indirect address)

Table 6-21 Valid Operands for the Encode and Decode Instructions

Inputs/Outputs Data Types

IN

OUT

BYTE

WORD

BYTE

WORD

Operands

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *LD, *AC, Constant

IW, QW, VW, MW, SMW, SW, T, C, LW, AC, AIW, *VD, *LD, *AC, Constant

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *LD, *AC

IW, QW, VW, MW, SMW, SW, T, C, LW, AC, AQW, *VD, *LD, *AC

Example: Decode and Encode Instructions

AC2 3

VW40

15

DECO

0000 0000 0000

3 0

1000

Network 1 //AC2 contains error bits.

//1. The DECO instruction sets the bit in VW40

// that corresponds to this error

// code.

//2. The ENCO instruction converts

// the least significant bit set to an

// error code

// that is stored in VB50.

LD I3.1

DECO AC2, VW40

ENCO AC3, VB50

AC3

VB50

15 9 0

1000 0010 0000 0000

ENCO

9

112

Counter Instructions

SIMATIC Counter Instructions

Count Up Counter

The Count Up instruction (CTU) counts up from the current value each time the count up (CU) input makes the transition from off to on. When the current value Cxx is greater than or equal to the preset value PV, the counter bit

Cxx turns on. The counter is reset when the Reset (R) input turns on, or when the Reset instruction is executed. The counter stops counting when it reaches the maximum value

(32,767).

STL operation :

H

Reset input: Top of stack

H

Count Up input: Value loaded in the second stack location

Count Down Counter

The Count Down instruction (CTD) counts down from the current value of that counter each time the count down (CD) input makes the transition from off to on. When the current value Cxx is equal to 0, the counter bit Cxx turns on. The counter resets the counter bit Cxx and loads the current value with the preset value PV when the load input LD turns on. The counter stops upon reaching zero, and the counter bit Cxx turns on.

STL operation:

H

Load input: Top of stack

H

Count Down input: Value loaded in the second stack location.

S7-200 Instruction Set

Chapter 6

113

S7-200 Programmable Controller System Manual

Count Up/Down Counter

The Count Up/Down instruction (CTUD) counts up each time the count up (CU) input makes the transition from off to on, and counts down each time the count down (CD) input makes the transition from off to on. The current value Cxx of the counter maintains the current count. The preset value PV is compared to the current value each time the counter instruction is executed.

Upon reaching maximum value (32,767), the next rising edge at the count up input causes the current count to wrap around to the minimum value (—32,768). On reaching the minimum value

(—32,768), the next rising edge at the count down input causes the current count to wrap around to the maximum value (32,767).

When the current value Cxx is greater than or equal to the preset value PV, the counter bit Cxx turns on. Otherwise, the counter bit turns off. The counter is reset when the Reset (R) input turns on, or when the Reset instruction is executed.

STL operation:

H

Reset input: Top of stack

H

Count Down input: Value loaded in the second stack location

H

Count Up input: Value loaded in the third stack location

Table 6-22 Valid Operands for the SIMATIC Counter Instructions

Inputs/Outputs

Cxx

Data Types

WORD

Operands

Constant (C0 to C255)

CU, CD, LD, R

PV

BOOL

INT

I, Q, V, M, SM, S, T, C, L, Power Flow

IW, QW, VW, MW, SMW, SW, LW, T, C, AC, AIW, *VD, *LD, *AC,

Constant

Tip

Since there is one current value for each counter, do not assign the same number to more than one counter. (Up Counters, Up/Down Counters, and Down counters with the same number access the same current value.)

When you reset a counter using the Reset instruction, the counter bit is reset and the counter current value is set to zero. Use the counter number to reference both the current value and the counter bit of that counter.

Table 6-23 Operations of the Counter Instructions

Type

CTU

Operation

CU increments the current value.

Current value continues to increment until it reaches

32,767.

CTUD CU increments the current value.

CD decrements the current value.

Current value continues to increment or decrement until the counter is reset.

CTD CD decrements the current value until the current value reaches 0.

Counter Bit

The counter bit turns on when:

Current value >= Preset

The counter bit turns on when:

Current value >= Preset

The counter bit turns on when:

Current value = 0

1

Power Cycle/First Scan

Counter bit is off.

Current value can be retained.

1

Counter bit is off.

Current value can be retained.

Counter bit is off.

Current value can be retained.

1

1

You can select that the current value for the counter be retentive. See Chapter 4 for information about memory retention for the S7-200 CPU.

114

S7-200 Instruction Set

Chapter 6

Example: SIMATIC Count Down Counter Instruction

Network 1

LD

LD

CTD

I0.0

I0.1

C1, +3

//Count down counter C1 current value

//counts from 3 to 0

//with I0.1 off,

//I0.0 Off—on decrements C1 current value

//I0.1 On loads countdown preset value 3

Network 2

LD

=

C1

Q0.0

//C1 bit is on when counter C1 current value = 0

Timing Diagram

I0.0 Down

I0.1 Load

C1 (current)

0

C1 (bit) Q0.0

3

2

1

0

3

2

Example: SIMATIC Count Up/Down Counter Instruction

Network 1 //I0.0 counts up

//I0.1 counts down

//I0.2 resets current value to 0

LD

LD

I0.0

I0.1

LD I0.2

CTUD C48, +4

Network 2

LD

=

C48

Q0.0

//Count Up/Down counter C48

//turns on C48 bit when

//current value >= 4

Timing Diagram

I0.0 (up)

I0.1 (down)

I0.2 (reset)

C48 (current)

0

C48 (bit) Q0.0

1

2

3

4

5

4

3

4

5

0

115

S7-200 Programmable Controller System Manual

IEC Counter Instructions

Up Counter

The Count Up instruction (CTU) counts up from the current value to the preset value (PV) on the rising edges of the

Count Up (CU) input. When the current value (CV) is greater than or equal to the preset value, the counter output bit (Q) turns on. The counter resets when the reset input (R) is enabled. The Up Counter stops counting when it reaches the preset value.

Down Counter

The Count Down instruction (CTD) counts down from the preset value (PV) on the rising edges of the Count Down

(CD) input. When the current value (CV) is equal to zero, the counter output bit (Q) turns on. The counter resets and loads the current value with the preset value when the load input (LD) is enabled. The Down Counter stops counting when it reaches zero.

Up/Down Counter

The Count Up/Down instruction (CTUD) counts up or down from the current value (CV) on the rising edges of the Count

Up (CU) or Count Down (CD) input. When the current value is equal to preset, the up output (QU) turns on. When the current value is equal to zero, the down output (QD) turns on. The counter loads the current value with the preset value (PV) when the load (LD) input is enabled. Similarly, the counter resets and loads the current value with 0 when the reset (R) is enabled. The counter stops counting when it reaches preset or 0.

Table 6-24 Valid Operands for the IEC Counter Instructions

Inputs/Outputs Data Types Operands

Cxx

CU, CD, LD, R

PV

CTU, CTD, CTUD

BOOL

INT

Constant (C0 to C255)

I, Q, V, M, SM, S, T, C, L, Power Flow

IW, QW, VW, MW, SMW, SW, LW, AC, AIW, *VD, *LD, *AC,

Constant

Q, QU, QD

CV

BOOL

INT

I, Q, V, M, SM, S, L

IW, QW, VW, MW, SW, LW, AC, *VD, *LD, *AC

Tip

Since there is one current value for each counter, do not assign the same number to more than one counter. (Up Counters, Down Counters, and Up/Down Counters access the same current value.)

116

S7-200 Instruction Set

Chapter 6

Example: IEC Counter Instructions

Timing Diagram

I4.0

CU — Up

I3.0

CD —

Down

I2.0

R —

Reset

I1.0

LD — Load

VW0

CV —

Current

Value

Q0.0

QU — Up

Q0.1

QD — Down

0

1

2

3

4 4

3

2

3

4

0

4

117

S7-200 Programmable Controller System Manual

High-Speed Counter Instructions

High-Speed Counter Definition

The High-Speed Counter Definition instruction (HDEF) selects the operating mode of a specific high-speed counter

(HSCx). The mode selection defines the clock, direction, start, and reset functions of the high-speed counter.

You use one High-Speed Counter Definition instruction for each high-speed counter.

Error conditions that set ENO = 0

H

0003 (input point conflict)

H

0004 (illegal instruction in interrupt)

H

000A (HSC redefinition)

Programming

Tips

High-Speed Counter

The High-Speed Counter (HSC) instruction configures and controls the high-speed counter, based on the state of the

HSC special memory bits. The parameter N specifies the high-speed counter number.

The high-speed counters can be configured for up to twelve different modes of operation. See

Table 6-26.

Each counter has dedicated inputs for clocks, direction control, reset, and start, where these functions are supported. For the two-phase counters, both clocks can run at their maximum rates. In quadrature modes, you can select one times (1x) or four times (4x) the maximum counting rates. All counters run at maximum rates without interfering with one another.

Error conditions that set ENO = 0

H

0001 (HSC before HDEF)

H

0005 (simultaneous HSC/PLS)

Table 6-25 Valid Operands for the High-Speed Counter Instructions

Inputs/Outputs

HSC, MODE

N

Data Types

BYTE

WORD

Operands

Constant

Constant

Refer to the Programming Tips on the documentation CD for programs that use high-speed counters. See Tip 4 and Tip 29.

High-speed counters count high-speed events that cannot be controlled at S7-200 scan rates.

The maximum counting frequency of a high-speed counter depends upon your S7-200 CPU model. Refer to Appendix A for more information.

Tip

CPU 221 and CPU 222 support four high-speed counters: HSC0, HSC3, HSC4, and HSC5.

These CPUs do not support HSC1 and HSC2.

CPU 224, CPU 224XP, and CPU 226 support six high-speed counters: HSC0 to HSC5.

118

S7-200 Instruction Set

Chapter 6

Typically, a high-speed counter is used as the drive for a drum timer, where a shaft rotating at a constant speed is fitted with an incremental shaft encoder. The shaft encoder provides a specified number of counts per revolution and a reset pulse that occurs once per revolution. The clock(s) and the reset pulse from the shaft encoder provide the inputs to the high-speed counter.

The high-speed counter is loaded with the first of several presets, and the desired outputs are activated for the time period where the current count is less than the current preset. The counter is set up to provide an interrupt when the current count is equal to preset and also when reset occurs.

As each current-count-value-equals-preset-value interrupt event occurs, a new preset is loaded and the next state for the outputs is set. When the reset interrupt event occurs, the first preset and the first output states are set, and the cycle is repeated.

Since the interrupts occur at a much lower rate than the counting rates of the high-speed counters, precise control of high-speed operations can be implemented with relatively minor impact to the overall PLC scan cycle. The method of interrupt attachment allows each load of a new preset to be performed in a separate interrupt routine for easy state control. (Alternatively, all interrupt events can be processed in a single interrupt routine.)

Understanding the Different High-Speed Counters

All counters function the same way for the same counter mode of operation. There are four basic types of counters: single-phase counter with internal direction control, single-phase counter with external direction control, two-phase counter with 2 clock inputs, and A/B phase quadrature counter. Note that every mode is not supported by every counter. You can use each type: without reset or start inputs, with reset and without start, or with both start and reset inputs.

—

—

When you activate the reset input, it clears the current value and holds it clear until you deactivate reset.

When you activate the start input, it allows the counter to count. While start is deactivated, the current value of the counter is held constant and clocking events are ignored.

—

If reset is activated while start is inactive, the reset is ignored and the current value is not changed. If the start input becomes active while the reset input is active, the current value is cleared.

Before you use a high-speed counter, you use the HDEF instruction (High-Speed Counter

Definition) to select a counter mode. Use the first scan memory bit, SM0.1 (this bit is turned on for the first scan and is then turned off), to call a subroutine that contains the HDEF instruction.

Instruction

Wizard

Programming a High-Speed Counter

You can use the HSC Instruction Wizard to configure the counter. The wizard uses the following information: type and mode of counter, counter preset value, counter current value, and initial counting direction. To start the HSC Instruction Wizard, select the

Tools > Instruction Wizard

menu command and then select HSC from the Instruction Wizard window.

To program a high-speed counter, you must perform the following basic tasks:

—

—

—

—

—

—

Define the counter and mode.

Set the control byte.

Set the current value (starting value).

Set the preset value (target value).

Assign and enable the interrupt routine.

Activate the high-speed counter.

119

S7-200 Programmable Controller System Manual

Defining Counter Modes and Inputs

Use the High-Speed Counter Definition instruction to define the counter modes and inputs.

Table 6-26 shows the inputs used for the clock, direction control, reset, and start functions associated with the high-speed counters. The same input cannot be used for two different functions, but any input not being used by the present mode of its high-speed counter can be used for another purpose. For example, if HSC0 is being used in mode 1, which uses I0.0 and

I0.2, I0.1 can be used for edge interrupts or for HSC3.

Tip

Note that all modes of HSC0 (except mode 12) always use I0.0 and all modes of HSC4 always use I0.3, so these points are never available for other uses when these counters are in use.

8

9

10

11

12

5

6

7

0

3

4

1

2

Table 6-26 Inputs for the High-Speed Counters

Mode Description

HSC0

HSC1

HSC2

HSC3

HSC4

HSC5

Single-phase counter with internal di ti

Single-phase counter with external di ti

Clock

Clock

Clock

Clock

Clock

Two-phase counter with 2 clock inputs Clock Up

Clock Up

A/B phase quadrature counter

Only HSC0 and HSC3 support mode12.

HSC0 counts the number of pulses going out of Q0.0.

HSC3 counts the number of pulses going out of Q0.1.

Inputs

I0.0

I0.6

I1.2

I0.1

I0.3

I0.4

Clock

Clock Up

Clock A

Clock A

Clock A

I0.1

I0.7

I1.3

I0.4

Reset

Reset

Direction

Direction Reset

Direction

Clock Down

Reset

Clock Down Reset

Clock Down Reset

Clock B

Clock B Reset

Clock B Reset

I0.2

I1.0

I1.4

I0.5

Start

Start

Start

Start

I1.1

I1.5

120

S7-200 Instruction Set

Chapter 6

Examples of HSC Modes

The timing diagrams in Figure 6-22 through Figure 6-26 show how each counter functions according to mode.

Current value loaded to 0, preset loaded to 4, counting direction set to up.

Counter enable bit set to enabled.

PV=CV interrupt generated

Direction changed within interrupt routine

Clock

Internal

Direction

Control

(1 = Up)

1

0

1

0

Counter

Current

Value

0

1

2

3

4

3

2

1

0

—1

Figure 6-22 Operation Example of Modes 0, 1, or 2

Current value loaded to 0, preset loaded to 4, counting direction set to up.

Counter enable bit set to enabled.

PV=CV interrupt generated

PV=CV interrupt generated and

Direction Changed interrupt generated

Clock

External

Direction

Control

(1 = Up)

1

0

1

0

3

Counter

Current

Value

1

2

0

Figure 6-23 Operation Example of Modes 3, 4, or 5

4

5

4

3

2

1

121

S7-200 Programmable Controller System Manual

When you use counting modes 6, 7, or 8, and rising edges on both the up clock and down clock inputs occur within 0.3 microseconds of each other, the high-speed counter could see these events as happening simultaneously. If this happens, the current value is unchanged and no change in counting direction is indicated. As long as the separation between rising edges of the up and down clock inputs is greater than this time period, the high-speed counter captures each event separately. In either case, no error is generated and the counter maintains the correct count value.

Current value loaded to 0, preset loaded to 4, initial counting direction set to up.

Counter enable bit set to enabled.

PV=CV interrupt generated

PV=CV interrupt generated and

Direction Changed interrupt generated

Count

Up

Clock

Count

Down

Clock

1

0

1

0

3

2

Counter

Current

Value

1

0

Figure 6-24 Operation Example of Modes 6, 7, or 8

4

5

4

3

2

1

Current value loaded to 0, preset loaded to 3, initial counting direction set to up.

Counter enable bit set to enabled.

PV=CV interrupt generated

PV=CV interrupt generated and

Direction Changed interrupt generated

Phase A

Clock

1

0

Phase B

Clock

1

0

4

3

3

Counter

Current

Value

0

1

2

Figure 6-25 Operation Example of Modes 9, 10, or 11 (Quadrature 1x Mode)

2

122

S7-200 Instruction Set

Chapter 6

Current value loaded to 0, preset loaded to 9, initial counting direction set to up.

Counter enable bit set to enabled.

PV=CV interrupt generated

Direction Changed interrupt generated

PV=CV interrupt generated

Phase A

Clock

1

0

Phase B

Clock

1

0

12

1

2

3

4

5

6

7

8

9

10

11

Counter Current

Value

0

Figure 6-26 Operation Example of Modes 9, 10, or 11 (Quadrature 4x Mode)

11

10

9

8

7

6

Reset and Start Operation

The operation of the reset and start inputs shown in Figure 6-27 applies to all modes that use reset and start inputs. In the diagrams for the reset and start inputs, both reset and start are shown with the active state programmed to a high level.

Example with Reset and without Start

Example with Reset and Start

Counter disabled

Start

(Active High)

1

0

Reset interrupt generated

Counter enabled

Counter disabled

Reset interrupt generated

Counter enabled

Reset

(Active High)

1

0

+2,147,483,647

Counter

Current Value

0

—2,147,483,648

Reset interrupt generated

Reset

(Active High)

+2,147,483,647

Counter

Current Value

0

—2,147,483,648

Counter value is somewhere in this range.

Figure 6-27 Operation Examples Using Reset with and without Start

1

0

Current value frozen

Current value frozen

Counter value is somewhere in this range.

123

S7-200 Programmable Controller System Manual

Four counters have three control bits that are used to configure the active state of the reset and start inputs and to select 1x or 4x counting modes (quadrature counters only). These bits are located in the control byte for the respective counter and are only used when the HDEF instruction is executed. These bits are defined in Table 6-27.

Tip

You must set these three control bits to the desired state before the HDEF instruction is executed. Otherwise, the counter takes on the default configuration for the counter mode selected.

Once the HDEF instruction has been executed, you cannot change the counter setup unless you first place the S7-200 in STOP mode.

Table 6-27 Active Level for Reset, Start, and 1x/4x Control Bits

HSC0

SM37.0 SM47.0 SM57.0 SM147.0

——

HSC1 HSC2

SM47.1 SM57.1

HSC4

——

Description (used only when HDEF is executed)

Active level control bit for Reset

1

0 = Reset is active high

:

1 = Reset is active low

Active level control bit for Start

1

0 = Start is active high

:

1 = Start is active low

SM37.2 SM47.2 SM57.2 SM147.2

Counting rate selection for quadrature counters:

0 = 4X counting rate 1 = 1X counting rate

1 The default setting of the reset input and the start input are active high, and the quadrature counting rate is 4x

(or four times the input clock frequency).

Example: High-Speed Counter Definition Instruction

I

N

M

A

Network 1 //On the first scan:

//1. Select the start and reset

// inputs to be active high

// and select 4x mode.

//2. Configure HSC1 for

// quadrature mode with reset

// and start inputs

LD SM0.1

MOVB 16#F8, SMB47

HDEF 1, 11

Setting the Control Byte

After you define the counter and the counter mode, you can program the dynamic parameters of the counter. Each high-speed counter has a control byte that allows the following actions:

—

—

—

Enabling or disabling the counter

Controlling the direction (modes 0, 1, and 2 only), or the initial counting direction for all other modes

Loading the current value

—

Loading the preset value

Examination of the control byte and associated current and preset values is invoked by the execution of the HSC instruction. Table 6-28 describes each of these control bits.

124

S7-200 Instruction Set

Chapter 6

Table 6-28 Control Bits for HSC0, HSC1, HSC2, HSC3, HSC4, and HSC5

HSC0 HSC1 HSC2 HSC3 HSC4 HSC5

SM37.3 SM47.3 SM57.3 SM137.3 SM147.3 SM157.3

SM37.4 SM47.4 SM57.4 SM137.4 SM147.4 SM157.4

SM37.5 SM47.5 SM57.5 SM137.5 SM147.5 SM157.5

SM37.6 SM47.6 SM57.6 SM137.6 SM147.6 SM157.6

SM37.7 SM47.7 SM57.7 SM137.7 SM147.7 SM157.7

Description

Counting direction control bit:

0 = Count down 1 = Count up

Write the counting direction to the HSC:

0 = No update 1 = Update direction

Write the new preset value to the HSC:

0 = No update 1 = Update preset

Write the new current value to the HSC:

0 = No update 1 = Update current value

Enable the HSC:

0 = Disable the HSC 1 = Enable the HSC

Reading the Current Value

The current value of each high-speed counter can only be read using the data type HC

(High-Speed-Counter Current) followed by the counter number (0, 1, 2, 3, 4, or 5) as shown in

Table 6-29. Use the HC data type whenever you wish to read the current count, either in a status chart or in the user program. The HC data type is read—only; you cannot write a new current count to the high speed counter using the HC data type.

Table 6-29 Current Values of HSC0, HSC1, HSC2, HSC3, HSC4, and HSC5

Value to be Read

Current value (CV)

HSC0

HC0

HSC1

HC1

HSC2

HC2

HSC3

HC3

HSC4

HC4

HSC5

HC5

Example: Reading and Saving the Current Count

I

N

M

A

Network 1 //Save the value of

//High Speed Counter 0

//into VD200 when I3.0

//transitions from OFF to ON.

LD

EU

I3.0

MOVD HC0, VD200

Setting Current Values and Preset Values

Each high-speed counter has a 32—bit current value (CV) and a 32—bit preset value (PV) stored internally. The current value is the actual count value of the counter, while the preset value is a comparison value optionally used to trigger an interrupt when the current value reaches the preset value. You can read the current value using the HC data type as described in the previous section. You cannot read the preset value directly. To load a new current or preset value into the high-speed counter, you must set up the control byte and the special memory double-word(s) that hold the desired new current and/or new preset values, and also execute the HSC instruction to cause the new values to the transferred to the high-speed counter. Table 6-30 lists the special memory double words used to hold the desired new current and preset values.

125

S7-200 Programmable Controller System Manual

Use the following steps to write a new current value and/or new preset value to the high-speed counter (steps 1 and 2 can be done in either order):

1. Load the value to be written into the appropriate SM new—current value and/or new preset value (Table 6-30). Loading these new values does not affect the high-speed counter yet.

2. Set or clear the appropriate bits in the appropriate control byte (Table 6-28) to indicate whether to update the current and/or preset values (bit x.5 for preset and x.6 for current).

Manipulating these bits does not affect the high-speed counter yet.

3. Execute the HSC instruction referencing the appropriate high-speed counter number.

Executing this instruction causes the control byte to be examined. If the control byte specifies an update for the current, the preset, or both, then the appropriate values are copied from the SM new current value and/or new preset value locations into the high—speed counter internal registers.

Table 6-30 New Current and New Preset Values of HSC0, HSC1, HSC2, HSC3, HSC4, and

HSC5

Value to be Loaded HSC0 HSC1 HSC2 HSC3 HSC4

New current value (new CV) SMD38

New preset value (new PV) SMD42

SMD48

SMD52

SMD58

SMD62

SMD138

SMD142

SMD148

SMD152

HSC5

SMD158

SMD162

Tip

Changes to the control byte and the SM locations for new current value and new preset value will not affect the high-speed counter until the corresponding HSC instruction is executed.

Example: Updating the Current and Preset Values

I

N

M

A

Network 1

LD

EU

MOVD

MOVD

=

=

HSC

//Update the current count to 1000

//and the preset value to 2000

//for High-Speed counter 0 when I2.0

//transitions from OFF to ON

I2.0

1000, SMD38

2000, SMD42

SM37.5

SM37.6

0

126

Assigning Interrupts

All counter modes support an interrupt event when the current value of the HSC is equal to the loaded preset value. Counter modes that use an external reset input support an interrupt on activation of the external reset. All counter modes except modes 0, 1, and 2 support an interrupt on a change in counting direction. Each of these interrupt conditions can be enabled or disabled separately. For a complete discussion on the use of interrupts, see the section on

Communications and Interrupt instructions

.

Notice

A fatal error can occur if you attempt either to load a new current value or to disable and then re-enable the high-speed counter from within the external reset interrupt routine.

Status Byte

A status byte for each high-speed counter provides status memory bits that indicate the current counting direction and whether the current value is greater or equal to the preset value. Table 6-31 defines these status bits for each high-speed counter.

S7-200 Instruction Set

Chapter 6

Tip

Status bits are valid only while the high-speed counter interrupt routine is being executed. The purpose of monitoring the state of the high-speed counter is to enable interrupts for the events that are of consequence to the operation being performed.

Table 6-31 Status Bits for HSC0, HSC1, HSC2, HSC3, HSC4, and HSC5

HSC0 HSC1 HSC2 HSC3 HSC4 HSC5 Description

SM36.0 SM46.0 SM56.0 SM136.0 SM146.0 SM156.0 Not used

SM36.1 SM46.1 SM56.1 SM136.1 SM146.1 SM156.1 Not used

SM36.2 SM46.2 SM56.2 SM136.2 SM146.2 SM156.2 Not used

SM36.3 SM46.3 SM56.3 SM136.3 SM146.3 SM156.3 Not used

SM36.4 SM46.4 SM56.4 SM136.4 SM146.4 SM156.4 Not used

SM36.5 SM46.5 SM56.5 SM136.5 SM146.5 SM156.5 Current counting direction status bit:

0 = Counting down

1 = Counting up

SM36.6 SM46.6 SM56.6 SM136.6 SM146.6 SM156.6 Current value equals preset value status bit:

0 = Not equal

1 = Equal

SM36.7 SM46.7 SM56.7 SM136.7 SM146.7 SM156.7 Current value greater than preset value status bit:

0 = Less than or equal

1 = Greater than

Sample Initialization Sequences for the High-Speed Counters

HSC1 is used as the model counter in the following descriptions of the initialization and operation sequences. The initialization descriptions assume that the S7-200 has just been placed in RUN mode, and for that reason, the first scan memory bit is true. If this is not the case, remember that the HDEF instruction can be executed only one time for each high-speed counter after entering

RUN mode. Executing HDEF for a high-speed counter a second time generates a run-time error and does not change the counter setup from the way it was set up on the first execution of HDEF for that counter.

Tip

Although the following sequences show how to change direction, current value, and preset value individually, you can change all or any combination of them in the same sequence by setting the value of SMB47 appropriately and then executing the HSC instruction.

Initialization Modes 0, 1, or 2

The following steps describe how to initialize HSC1 for Single Phase Up/Down Counter with

Internal Direction (Modes 0, 1, or 2).

1. Use the first scan memory bit to call a subroutine in which the initialization operation is performed. Since you use a subroutine call, subsequent scans do not make the call to the subroutine, which reduces scan time execution and provides a more structured program.

2. In the initialization subroutine, load SMB47 according to the desired control operation. For example:

SMB47 = 16#F8

Produces the following results:

Enables the counter

Writes a new current value

Writes a new preset value

Sets the direction to count up

Sets the start and reset inputs to be active high

127

S7-200 Programmable Controller System Manual

3. Execute the HDEF instruction with the HSC input set to 1 and the MODE input set to one of the following: 0 for no external reset or start, 1 for external reset and no start, or 2 for both external reset and start.

4. Load SMD48 (double-word-sized value) with the desired current value (load with 0 to clear it).

5. Load SMD52 (double-word-sized value) with the desired preset value.

6. In order to capture the current value equal to preset event, program an interrupt by attaching the CV = PV interrupt event (event 13) to an interrupt routine. See the section that discusses the Interrupt Instructions for complete details on interrupt processing.

7. In order to capture an external reset event, program an interrupt by attaching the external reset interrupt event (event 15) to an interrupt routine.

8. Execute the global interrupt enable instruction (ENI) to enable interrupts.

9. Execute the HSC instruction to cause the S7-200 to program HSC1.

10. Exit the subroutine.

Initialization Modes 3, 4, or 5

The following steps describe how to initialize HSC1 for Single Phase Up/Down Counter with

External Direction (Modes 3, 4, or 5):

1. Use the first scan memory bit to call a subroutine in which the initialization operation is performed. Since you use a subroutine call, subsequent scans do not make the call to the subroutine, which reduces scan time execution and provides a more structured program.

2. In the initialization subroutine, load SMB47 according to the desired control operation. For example:

SMB47 = 16#F8

Produces the following results:

Enables the counter

Writes a new current value

Writes a new preset value

Sets the initial direction of the HSC to count up

Sets the start and reset inputs to be active high

3. Execute the HDEF instruction with the HSC input set to 1 and the MODE input set to one of the following: 3 for no external reset or start, 4 for external reset and no start, or 5 for both external reset and start.

4. Load SMD48 (double-word-sized value) with the desired current value (load with 0 to clear it).

5. Load SMD52 (double-word-sized value) with the desired preset value.

6. In order to capture the current-value-equal-to-preset event, program an interrupt by attaching the CV = PV interrupt event (event 13) to an interrupt routine. See the section that discusses the Interrupt Instructions for complete details on interrupt processing.

7. In order to capture direction changes, program an interrupt by attaching the direction changed interrupt event (event 14) to an interrupt routine.

8. In order to capture an external reset event, program an interrupt by attaching the external reset interrupt event (event 15) to an interrupt routine.

9. Execute the global interrupt enable instruction (ENI) to enable interrupts.

10. Execute the HSC instruction to cause the S7-200 to program HSC1.

11. Exit the subroutine.

128

S7-200 Instruction Set

Chapter 6

Initialization Modes 6, 7, or 8

The following steps describe how to initialize HSC1 for Two Phase Up/Down Counter with

Up/Down Clocks (Modes 6, 7, or 8):

1. Use the first scan memory bit to call a subroutine in which the initialization operations are performed. Since you use a subroutine call, subsequent scans do not make the call to the subroutine, which reduces scan time execution and provides a more structured program.

2. In the initialization subroutine, load SMB47 according to the desired control operation. For example:

SMB47 = 16#F8

Produces the following results:

Enables the counter

Writes a new current value

Writes a new preset value

Sets the initial direction of the HSC to count up

Sets the start and reset inputs to be active high

3. Execute the HDEF instruction with the HSC input set to 1 and the MODE set to one of the following: 6 for no external reset or start, 7 for external reset and no start, or 8 for both external reset and start.

4. Load SMD48 (double-word-sized value) with the desired current value (load with 0 to clear it).

5. Load SMD52 (double-word-sized value) with the desired preset value.

6. In order to capture the current-value-equal-to-preset event, program an interrupt by attaching the CV = PV interrupt event (event 13) to an interrupt routine. See the section on interrupts.

7. In order to capture direction changes, program an interrupt by attaching the direction changed interrupt event (event 14) to an interrupt routine.

8. In order to capture an external reset event, program an interrupt by attaching the external reset interrupt event (event 15) to an interrupt routine.

9. Execute the global interrupt enable instruction (ENI) to enable interrupts.

10. Execute the HSC instruction to cause the S7-200 to program HSC1.

11. Exit the subroutine.

Initialization Modes 9, 10, or 11

The following steps describe how to initialize HSC1 for A/B Phase Quadrature Counter (for modes

9, 10, or 11):

1. Use the first scan memory bit to call a subroutine in which the initialization operations are performed. Since you use a subroutine call, subsequent scans do not make the call to the subroutine, which reduces scan time execution and provides a more structured program.

2. In the initialization subroutine, load SMB47 according to the desired control operation.

Example (1x counting mode):

SMB47 = 16#FC

Produces the following results:

Enables the counter

Writes a new current value

Writes a new preset value

Sets the initial direction of the HSC to count up

Sets the start and reset inputs to be active high

Example (4x counting mode):

SMB47 = 16#F8

Produces the following results:

Enables the counter

Writes a new current value

Writes a new preset value

Sets the initial direction of the HSC to count up

Sets the start and reset inputs to be active high

129

S7-200 Programmable Controller System Manual

3. Execute the HDEF instruction with the HSC input set to 1 and the MODE input set to one of the following: 9 for no external reset or start, 10 for external reset and no start, or 11 for both external reset and start.

4. Load SMD48 (double-word-sized value) with the desired current value (load with 0 to clear it).

5. Load SMD52 (double-word-sized value) with the desired preset value.

6. In order to capture the current-value-equal-to-preset event, program an interrupt by attaching the CV = PV interrupt event (event 13) to an interrupt routine. See the section on enabling interrupts (ENI) for complete details on interrupt processing.

7. In order to capture direction changes, program an interrupt by attaching the direction changed interrupt event (event 14) to an interrupt routine.

8. In order to capture an external reset event, program an interrupt by attaching the external reset interrupt event (event 15) to an interrupt routine.

9. Execute the global interrupt enable instruction (ENI) to enable interrupts.

10. Execute the HSC instruction to cause the S7-200 to program HSC1.

11. Exit the subroutine.

Initialization Mode 12

The following steps describe how to initialize HSC0 for counting pulses generated by PTO0

(Mode 12).

1. Use the first scan memory bit to call a subroutine in which the initialization operation is performed. Since you use a subroutine call, subsequent scans do not make the call to the subroutine, which reduces scan time execution and provides a more structured program.

2. In the initialization subroutine, load SMB37 according to the desired control operation. For example:

SMB37 = 16#F8

Produces the following results:

Enables the counter

Writes a new current value

Writes a new preset value

Sets the direction to count up

Sets the start and reset inputs to be active high

3. Execute the HDEF instruction with the HSC input set to 0 and the MODE input set to 12.

4. Load SMD38 (double-word-sized value) with the desired current value (load with 0 to clear it).

5. Load SMD42 (double-word-sized value) with the desired preset value.

6. In order to capture the current value equal to preset event, program an interrupt by attaching the CV = PV interrupt event (event 12) to an interrupt routine. See the section that discusses the Interrupt Instructions for complete details on interrupt processing.

7. Execute the global interrupt enable instruction (ENI) to enable interrupts.

8. Execute the HSC instruction to cause the S7-200 to program HSC0.

9. Exit the subroutine.

Change Direction in Modes 0, 1, 2, or 12

The following steps describe how to configure HSC1 for Change Direction for Single Phase

Counter with Internal Direction (Modes 0, 1, 2, or 12):

1. Load SMB47 to write the desired direction:

SMB47 = 16#90 Enables the counter

Sets the direction of the HSC to count down

SMB47 = 16#98 Enables the counter

Sets the direction of the HSC to count up

2. Execute the HSC instruction to cause the S7-200 to program HSC1.

130

S7-200 Instruction Set

Chapter 6

Loading a New Current Value (Any Mode)

Changing the current value forces the counter to be disabled while the change is made. While the counter is disabled, it does not count or generate interrupts.

The following steps describe how to change the counter current value of HSC1 (any mode):

1. Load SMB47 to write the desired current value:

SMB47 = 16#C0 Enables the counter

Writes the new current value

2. Load SMD48 (double-word-sized value) with the desired current value (load with 0 to clear it).

3. Execute the HSC instruction to cause the S7-200 to program HSC1.

Loading a New Preset Value (Any Mode)

The following steps describe how to change the preset value of HSC1 (any mode):

1. Load SMB47 to write the desired preset value:

SMB47 = 16#A0 Enables the counter

Writes the new preset value

2. Load SMD52 (double-word-sized value) with the desired preset value.

3. Execute the HSC instruction to cause the S7-200 to program HSC1.

Disabling a High-Speed Counter (Any Mode)

The following steps describe how to disable the HSC1 high-speed counter (any mode):

1. Load SMB47 to disable the counter:

SMB47 = 16#00 Disables the counter

2. Execute the HSC instruction to disable the counter.

131

S7-200 Programmable Controller System Manual

S

B

R

0

Example: High-Speed Counter Instruction

I

N

M

A

Network 1

LD

CALL

//On the first scan, call SBR_0.

SM0.1

SBR_0

Network 1 //On the first scan, configure HSC1:

//1. Enable the counter.

// — Write a new current value.

// — Write a new preset value.

// — Set the initial direction to count up.

// — Select the start and reset inputs

// to be active high.

// — Select 4x mode.

//2. Configure HSC1 for quadrature mode

// with reset and start inputs.

//3. Clear the current value of HSC1.

//4. Set the HSC1 preset value to 50.

//5. When HSC1 current value = preset value,

// attach event 13 to interrupt routine INT_0.

//6. Global interrupt enable.

//7. Program HSC1.

LD SM0.1

MOVB 16#F8, SMB47

HDEF 1, 11

MOVD +0, SMD48

MOVD +50, SMD52

ATCH INT_0, 13

ENI

HSC 1

I

N

T

0

Network 1 //Program HSC1:

//1. Clear the current value of HSC1.

//2. Select to write only a new current

// and leave HSC1 enabled.

LD SM0.0

MOVD +0, SMD48

MOVB 16#C0, SMB47

HSC 1

132

S7-200 Instruction Set

Chapter 6

Pulse Output Instruction

Position

Control

The Pulse Output instruction (PLS) is used to control the

Pulse Train Output (PTO) and Pulse Width Modulation

(PWM) functions available on the high-speed outputs (Q0.0

and Q0.1).

The improved Position Control Wizard creates instructions customized to your application that simplify your programming tasks and take advantage of the extra features of the S7-200 CPUs. Refer to Chapter 9 for more information about the Position Control Wizard.

You can continue to use the old PLS instruction to create your own motion application, but the linear ramp on the PTO is only supported by instructions created by the improved

Position Control Wizard.

PTO provides a square wave (50% duty cycle) output with user control of the cycle time and the number of pulses.

PWM provides a continuous, variable duty cycle output with user control of the cycle time and the pulse width.

The S7-200 has two PTO/PWM generators that create either a high-speed pulse train or a pulse width modulated waveform. One generator is assigned to digital output point Q0.0, and the other generator is assigned to digital output point Q0.1. A designated special memory (SM) location stores the following data for each generator: a control byte (8-bit value), a pulse count value (an unsigned 32-bit value), and a cycle time and pulse width value (an unsigned 16-bit value).

The PTO/PWM generators and the process-image register share the use of Q0.0 and Q0.1. When a PTO or PWM function is active on Q0.0 or Q0.1, the PTO/PWM generator has control of the output, and normal use of the output point is inhibited. The output waveform is not affected by the state of the process-image register, the forced value of the point, or the execution of immediate output instructions. When the PTO/PWM generator is inactive, control of the output reverts to the process-image register. The process-image register determines the initial and final state of the output waveform, causing the waveform to start and end at a high or low level.

Table 6-32 Valid Operands for Pulse Output Instruction

Inputs/Outputs

Q0.X

Data Types

WORD

Operands

Constant: 0 (= Q0.0)

or

1 (= Q0.1)

Tip

Before enabling PTO or PWM operation, set the value of the process-image register for Q0.0

and Q0.1 to 0.

Default values for all control bits, cycle time, pulse width, and pulse count values are 0.

The PTO/PWM outputs must have a minimum load of at least 10% of rated load to provide crisp transitions from off to on, and from on to off.

Programming

Tips

Refer to the Programming Tips on the documentation CD for programs that use the PLS instruction for PTO/PWM operation. See Tip 7, Tip 22, Tip 23, Tip 30, and Tip 50.

133

S7-200 Programmable Controller System Manual

Pulse Train Operation (PTO)

PTO provides a square wave (50% duty cycle) output for a specified number of pulses and a specified cycle time. (See Figure 6-28.) PTO can produce either a single train of pulses or multiple trains of pulses (using a pulse profile). You specify the number of pulses and the cycle time (in either microsecond or millisecond increments):

—

Number of pulses: 1 to 4,294,967,295

Cycle Time

—

Cycle time: 10

µ s to 65,535

µ s or

2 ms to 65,535 ms.

50%

Off

50%

On

50%

Off

50%

On

Specifying an odd number of microseconds or milliseconds for the cycle time (such as 75 ms),

Figure 6-28 Pulse Train Output (PTO)

See Table 6-33 for pulse count and cycle time limitations.

Table 6-33 Pulse Count and Cycle Time in the PTO function

Pulse Count/Cycle TIme

Cycle time < 2 time units

Pulse count = 0

Reaction

Cycle time defaults to 2 time units.

Pulse count defaults to 1 pulse.

The PTO function allows the “chaining” or “pipelining” of pulse trains. When the active pulse train is complete, the output of a new pulse train begins immediately. This allows continuity between subsequent output pulse trains.

Using the Position Control Wizard

The Position Control Wizard automatically handles single and multiple segment pipelining of PTO pulses, pulse width modulation, SM Location configuration, and creating a profile table. The information is here for your reference. It is recommended that you use the Position Control

Wizard. For more information about the Position Control Wizard, see Chapter 9.

Single-Segment Pipelining of PTO Pulses

In single-segment pipelining, you are responsible for updating the SM locations for the next pulse train. After the initial PTO segment has been started, you must modify immediately the SM locations as required for the second waveform and execute the PLS instruction again. The attributes of the second pulse train are held in a pipeline until the first pulse train is completed.

Only one entry at a time can be stored in the pipeline. When the first pulse train completes, the output of the second waveform begins, and the pipeline is made available for a new pulse train specification. You can then repeat this process to set up the characteristics of the next pulse train.

Smooth transitions between pulse trains occur unless there is a change in the time base or the active pulse train completes before a new pulse train setup is captured by the execution of the

PLS instruction.

134

S7-200 Instruction Set

Chapter 6

Multiple-Segment Pipelining of PTO Pulses

In multiple-segment pipelining, the S7-200 automatically reads the characteristics of each pulse train segment from a profile table located in V memory. The SM locations used in this mode are the control byte, the status byte, and the starting V memory offset of the profile table (SMW168 or

SMW178). The time base can be either microseconds or milliseconds, but the selection applies to all cycle time values in the profile table, and cannot be changed while the profile is running.

Execution on the PLS instruction starts multiple segment operation.

Each segment entry is 8 bytes in length, and is composed of a 16-bit cycle time value, a 16-bit cycle time delta value, and a 32-bit pulse count value. Table 6-34 shows the format of the profile table. You can increase or decrease the cycle time automatically by programming a specified amount for each pulse. A positive value in the cycle time delta field increases cycle time, a negative value in the cycle time delta field decreases cycle time, and 0 results in an unchanging cycle time.

While the PTO profile is operating, the number of the currently active segment is available in

SMB166 (or SMB176).

Table 6-34 Profile Table Format for Multiple-Segment PTO Operation

Byte Offset

0

1

3

5

9

11

13

(Continues)

Segment

#1

#2

#3

Description of Table Entries

Number of segments: 1 to 255

1

Initial cycle time (2 to 65,535 units of the time base)

Cycle time delta per pulse (signed value) (—32,768 to 32,767 units of the time base)

Pulse count (1 to 4,294,967,295)

Initial cycle time (2 to 65,535 units of the time base)

Cycle time delta per pulse (signed value) (—32,768 to 32,767 units of the time base)

Pulse count (1 to 4,294,967,295)

(Continues)

1 Entering a value of 0 for the number of segments generates a non-fatal error. No PTO output is generated.

Pulse Width Modulation (PWM)

PWM provides a fixed cycle time output with a variable duty cycle. (See Figure 6-29.) You can specify the cycle time and the pulse width in either microsecond or millisecond increments:

Cycle Time

Pulse Width

Time

Pulse Width

Time

10

2

µ s to 65,535

µ s or

Figure 6-29 Pulse Width Modulation (PWM)

—

Pulse width time: 0

µ s to 65,535

µ s or

0 ms to 65,535 ms

As shown in Table 6-35, setting the pulse width equal to the cycle time (which makes the duty cycle 100 percent) turns the output on continuously. Setting the pulse width to 0 (which makes the duty cycle 0 percent) turns the output off.

Table 6-35 Pulse Width Time and Cycle Time and Reactions in the PWM Function

Pulse Width Time/ Cycle Time

Pulse width time >= Cycle time value

Pulse width time = 0

Cycle time < 2 time units

Reaction

The duty cycle is 100%: the output is turned on continuously.

The duty cycle is 0%: the output is turned off.

The cycle time defaults to two time units.

135

S7-200 Programmable Controller System Manual

There are two different ways to change the characteristics of a PWM waveform:

—

—

Synchronous Update: If no time base changes are required, you can use a synchronous update. With a synchronous update, the change in the waveform characteristics occurs on a cycle boundary, providing a smooth transition.

Asynchronous Update: Typically with PWM operation, the pulse width is varied while the cycle time remains constant so time base changes are not required. However, if a change in the time base of the PTO/PWM generator is required, an asynchronous update is used.

An asynchronous update causes the PTO/PWM generator to be disabled momentarily, asynchronous to the PWM waveform. This can cause undesirable jitter in the controlled device. For that reason, synchronous PWM updates are recommended. Choose a time base that you expect to work for all of your anticipated cycle time values.

Tip

The PWM Update Method bit (SM67.4 or SM77.4) in the control byte specifies the update type used when the PLS instruction is executed to invoke changes.

If the time base is changed, an asynchronous update occurs regardless of the state of the PWM

Update Method bit.

Using SM Locations to Configure and Control the PTO/PWM Operation

The PLS instruction reads the data stored in the specified SM memory locations and programs the

PTO/PWM generator accordingly. SMB67 controls PTO 0 or PWM 0, and SMB77 controls PTO 1 or PWM 1. Table 6-36 describes the registers used to control the PTO/PWM operation. You can use Table 6-37 as a quick reference to determine the value to place in the PTO/PWM control register to invoke the desired operation.

You can change the characteristics of a PTO or PWM waveform by modifying the locations in the

SM area (including the control byte) and then executing the PLS instruction. You can disable the generation of a PTO or PWM waveform at any time by writing 0 to the PTO/PWM enable bit of the control byte (SM67.7 or SM77.7) and then executing the PLS instruction.

The PTO Idle bit in the status byte (SM66.7 or SM76.7) is provided to indicate the completion of the programmed pulse train. In addition, an interrupt routine can be invoked upon the completion of a pulse train. (Refer to the descriptions of the Interrupt instructions and the Communications instructions.) If you are using the multiple segment operation, the interrupt routine is invoked upon completion of the profile table.

The following conditions set SM66.4 (or SM76.4) and SM66.5 (or SM76.5):

—

—

—

Specifying a cycle time delta value that results in an illegal cycle time after a number of pulses generates a mathematical overflow condition that terminates the PTO function and sets the Delta Calculation Error bit (SM66.4 or SM76.4) to 1. The output reverts to image register control.

Manually aborting (disabling) a PTO profile in progress sets the User Abort bit (SM66.5 or

SM76.5) to 1.

Attempting to load the pipeline while it is full sets the PTO/PWM overflow bit (SM66.6 or

SM76.6) to 1. You must clear this bit manually after an overflow is detected if you want to detect subsequent overflows. The transition to RUN mode initializes this bit to 0.

Tip

When you load a new pulse count (SMD72 or SMD82), pulse width (SMW70 or SMW80), or cycle time (SMW68 or SMW78), also set the appropriate update bits in the control register before you execute the PLS instruction. For a multiple segment pulse train operation, you must also load the starting offset (SMW168 or SMW178) of the profile table and the profile table values before you execute the PLS instruction.

136

S7-200 Instruction Set

Chapter 6

Table 6-36 SM Locations of the PTO / PWM Control Registers

Q0.0

SM66.4

SM66.5

SM66.6

SM66.7

Q0.0

SM67.0

SM67.1

SM67.2

SM67.3

SM67.4

SM67.5

SM67.6

SM67.7

Q0.1

SM76.4

SM76.5

SM76.6

SM76.7

Q0.1

SM77.0

SM77.1

SM77.2

SM77.3

SM77.4

SM77.5

SM77.6

SM77.7

Status Bits

PTO profile aborted (delta calculation error): 0 = no error

PTO profile aborted due to user command: 0 = no abort

PTO/PWM pipeline overflow/underflow: 0 = no overflow

1 = aborted

1 = aborted

1 = overflow/underflow

PTO idle: 0 = in progress 1 = PTO idle

Control Bits

PTO/PWM update the cycle time:

PWM update the pulse width time:

PTO update the pulse count value:

PTO/PWM time base:

PWM update method:

PTO single/multiple segment operation:

PTO/PWM mode select:

PTO/PWM enable:

Q0.0

SMW68

SMW70

SMD72

Q0.1

SMW78

SMW80

SMD82

Other PTO/PWM Registers

PTO/PWM cycle time value

PWM pulse width value

PTO pulse count value

SMB166 SMB176 Number of the segment in progress

SMW168 SMW178 Starting location of the profile table

(byte offset from V0 )

SMB170 SMB180 Linear profile status byte

SMB171 SMB181 Linear profile result register

SMD172 SMD182 Manual mode frequency register

0 = no update

0 = no update

0 = no update 1 = update pulse count

0 = 1

µ s/tick 1 = 1 ms/tick

0 =asynchronous 1 = synchronous

0 = single

0 = PTO

0 = disable range: 2 to 65,535 range: 0 to 65,535

1 = update cycle time

1 = update pulse width

1 = multiple

1 = PWM

1 = enable range: 1 to 4,294,967,295

Multiple-segment PTO operation only

Multiple-segment PTO operation only

Table 6-37 PTO/PWM Control Byte Reference

Control

Register

(Hex

Value)

16#D1

16#D2

16#D3

16#D9

16#DA

16#DB

16#81

16#84

16#85

16#89

16#8C

16#8D

16#A0

16#A8

Enable

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Result of Executing the PLS Instruction

Select

Mode

PTO

Segment

Operation

PTO Single

PTO Single

PTO Single

PTO Single

PTO Single

PTO Single

PTO Multiple

PTO Multiple

PWM

PWM

PWM

PWM

PWM

PWM

PWM

Update

Method

Synchronous

Synchronous

Synchronous

Synchronous

Synchronous

Synchronous

Time Base

Pulse

Count

1

µ s/cycle

1

µ s/cycle

1

µ s/cycle

1 ms/cycle

Load

Load

1 ms/cycle Load

1 ms/cycle Load

1

µ s/cycle

1 ms/cycle

1

µ s/cycle

1

µ s/cycle

1

µ s/cycle

1 ms/cycle

1 ms/cycle

1 ms/cycle

Pulse

Width

Load

Load

Load

Load

Cycle

Time

Load

Load

Load

Load

Load

Load

Load

Load

137

S7-200 Programmable Controller System Manual

Calculating Profile Table Values

The multiple-segment pipelining capability of the

PTO/PWM generators can be useful in many applications, particularly in stepper motor control.

Frequency

10 kHz

2 kHz

For example, you can use PTO with a pulse profile to control a stepper motor through a simple ramp up, run, and ramp down sequence or more complicated sequences by defining a pulse profile that consists of up to 255 segments, with each segment corresponding to a ramp up, run, or ramp down operation.

Figure 6-30 illustrates sample profile table values required to generate an output waveform that accelerates a stepper motor (segment 1), operates the motor at a constant speed (segment 2), and then decelerates the motor (segment 3).

1

Segment #1

200 pulses

1 2

4,000 pulses

2

Segment #2

3400 pulses

3

3

Segment #3

400 pulses

Figure 6-30 Frequency/Time Diagram

Time

For this example: The starting and final pulse frequency is 2 kHz, the maximum pulse frequency is

10 kHz, and 4000 pulses are required to achieve the desired number of motor revolutions. Since the values for the profile table are expressed in terms of period (cycle time) instead of frequency, you must convert the given frequency values into cycle time values. Therefore, the starting (initial) and final (ending) cycle time is 500

µ s, and the cycle time corresponding to the maximum frequency is 100

µ s. During the acceleration portion of the output profile, the maximum pulse frequency should be reached in approximately 200 pulses. The deceleration portion of the profile should be completed in approximately 400 pulses.

You can use the following formula to determine the delta cycle time value for a given segment that the PTO/PWM generator uses to adjust the cycle time of each pulse:

Delta cycle time for a segment = | End_CT seg

— Init_CT seg

| / Quantity seg

where:

End_CT seg

Init_CT seg

Quantity seg

= Ending cycle time for this segment

= Initial cycle time for this segment

= Quantity of pulses in this segment

Using this formula to calculate the delta cycle time values for the sample application:

Segment 1 (acceleration):

Delta cycle time =

Segment 2 (constant speed):

Delta cycle time =

Segment 3 (deceleration):

Delta cycle time =

—2

0

1

Table 6-38 lists the values for generating the example waveform (assumes that the profile table is located in V memory, starting at V500). You can include instructions in your program to load these values into

V memory, or you can define the values of the profile in the data block.

Table 6-38 Profile Table Values

Address Value Description

VB500 3 Total number of segments

VW501

VW503

VD505

500 Initial cycle time

—2 Initial delta cycle time

Segment 1

200 Number of pulses

VW509

VW511

VD513

100

0

3400

Initial cycle time

Delta cycle time

Number of pulses

VW517

VW519

VD521

100 Initial cycle time

1 Delta cycle time

400 Number of pulses

138

S7-200 Instruction Set

Chapter 6

In order to determine if the transitions between waveform segments are acceptable, you need to determine the cycle time of the last pulse in a segment. Unless the delta cycle time is 0, you must calculate the cycle time of the last pulse of a segment, because this value is not specified in the profile. Use the following formula to calculate the cycle time of the last pulse:

Cycle time of the last pulse for a segment = Init_CT seg

+ ( Delta seg

* ( Quantity seg

— 1 ))

where:

Init_CT seg

= Initial cycle time for this segment

Delta seg

= Delta cycle time for this segment

Quantity seg

= Quantity of pulses in this segment

While the simplified example above is useful as an introduction, real applications can require more complicated waveform profiles. Remember that the delta cycle time can be specified only as an integer number of microseconds or milliseconds, and the cycle time modification is performed on each pulse.

The effect of these two items is that calculation of the delta cycle time value for a given segment could require an iterative approach. Some flexibility in the value of the ending cycle time or the number of pulses for a given segment might be required.

The duration of a given profile segment can be useful in the process of determining correct profile table values. Use the following formula to calculate the length of time for completing a given profile segment:

Duration of segment = Quantity seg

* ( Init_CT + ( ( Delta seg

/2 ) * ( Quantity seg

— 1 ) ) )

where:

Quantity seg

= Quantity of pulses in this segment

Init_CT seg

= Initial cycle time for this segment

Delta seg

= Delta cycle time for this segment

139

S7-200 Programmable Controller System Manual

Math Instructions

Add, Subtract, Multiply, and Divide

Instructions

Add

IN1 + IN2 = OUT

FBD

IN1 + OUT = OUT

Subtract

IN1 — IN2 = OUT

OUT — IN1 = OUT

LAD and

STL

The Add Integer (+I) or Subtract Integer (—I) instructions add or subtract two 16-bit integers to produce a 16-bit result. The

Add Double Integer (+D) or Subtract Double Integer (—D) instructions add or subtract two 32-bit integers to produce a

32-bit result. The Add Real (+R) and Subtract Real (—R) instructions add or subtract two 32-bit real numbers to produce a 32-bit real number result.

Multiply Divide

IN1 * IN2 = OUT

FBD

IN1 * OUT = OUT

IN1 / IN2 = OUT

OUT / IN1 = OUT

LAD and

STL

The Multiply Integer (*I) or Divide Integer (/I) instructions multiply or divide two 16-bit integers to produce a 16-bit result. (For division, no remainder is kept.) The Multiply

Double Integer (*D) or Divide Double Integer (/D) instructions multiply or divide two 32-bit integers to produce a 32-bit result. (For division, no remainder is kept.) The Multiply Real

(*R) or Divide Real (/R) instructions multiply or divide two

32-bit real numbers to produce a 32-bit real number result.

SM Bits and ENO

SM1.1 indicates overflow errors and illegal values. If SM1.1

is set, then the status of SM1.0 and SM1.2 is not valid and the original input operands are not altered. If SM1.1 and

SM1.3 are not set, then the math operation has completed with a valid result and SM1.0 and SM1.2 contain valid status. If SM1.3 is set during a divide operation, then the other math status bits are left unchanged.

Error conditions that set

ENO = 0

H

SM1.1 (overflow)

H

SM1.3 (divide by zero)

H

0006 (indirect address)

Special Memory bits affected

H

SM1.0 (zero)

H

SM1.1 (overflow, illegal value generated during the operation, or illegal input parameter found)

H

SM1.2 (negative)

H

SM1.3 (divide by zero)

Table 6-39 Valid Operands for Add, Subtract, Multiply, and Divide Instructions

Inputs/Outputs Data Types Operands

IN1, IN2

OUT

INT

DINT

REAL

INT

DINT, REAL

IW, QW, VW, MW, SMW, SW, T, C, LW, AC, AIW, *VD, *AC, *LD, Constant

ID, QD, VD, MD, SMD, SD, LD, AC, HC, *VD, *LD, *AC, Constant

ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *LD, *AC, Constant

IW, QW, VW, MW, SMW, SW, LW, T, C, AC, *VD, *AC, *LD

ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *LD, *AC

Real (or floating-point) numbers are represented in the format described in the ANSI/IEEE 754—1985 standard

(single-precision). Refer to that standard for more information.

140

Example: Integer Math Instructions

Network 1

*I

/I

LD

+I

I0.0

AC1, AC0

AC1, VW100

VW10, VW200

S7-200 Instruction Set

Chapter 6

Add

40

AC1

+ 60

AC0

= 100

AC0

Example: Real Math Instructions

Multiply

40

AC1

*

20

VW100

=

800

VW100

Divide

4000

VW200

/

40

VW10

=

100

VW200

Network 1

LD

+R

*R

/R

I0.0

AC1, AC0

AC1, VD100

VD10, VD200

Add

4000.0

AC1

+ 6000.0

AC0

= 10000.0

AC0

Multiply

400.0

AC1

* 200.0

VD100

= 80000.0

VD100

Divide

4000.0

VD200

/ 41.0

VD10

= 97.5609

VD200

141

S7-200 Programmable Controller System Manual

Multiply Integer to Double Integer and Divide Integer with Remainder

Multiply Integer to Double Integer

IN1 * IN2 = OUT

IN1 * OUT = OUT

LAD and FBD

STL

The Multiply Integer to Double Integer instruction (MUL) multiplies two 16-bit integers and produces a 32-bit product.

In the STL MUL instruction, the least-significant word (16 bits) of the 32-bit OUT is used as one of the factors.

Divide Integer with Remainder

IN1 / IN2 = OUT

OUT / IN1 = OUT

LAD and FBD

STL

The Divide Integer with Remainder instruction (DIV) divides two 16-bit integers and produces a 32-bit result consisting of a 16-bit remainder (the most-significant word) and a 16-bit quotient (the least-significant word).

In STL, the least-significant word (16 bits) of the 32-bit OUT is used as the dividend.

SM Bits and ENO

For both of the instructions on this page, Special Memory (SM) bits indicate errors and illegal values. If SM1.3 (divide by zero) is set during a divide operation, then the other math status bits are left unchanged. Otherwise, all supported math status bits contain valid status upon completion of the math operation.

Error conditions that set ENO = 0

H

SM1.1 (overflow)

H

SM1.3 (divide by zero)

H

0006 (indirect address)

Special Memory bits affected

H

SM1.0 (zero)

H

SM1.1 (overflow)

H

SM1.2 (negative)

H

SM1.3 (divide by zero)

Table 6-40 Valid Operands for Multiply Integer to Double Integer and Divide Integer with

Remainder

Inputs/Outputs

IN1, IN2

OUT

Data Types

INT

DINT

Operands

IW, QW, VW, MW, SMW, SW, T, C, LW, AC, AIW, *VD, *LD, *AC,

Constant

ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *LD, *AC

Example: Multiply Integer to Double Integer Instruction and Divide Integer with Remainder Instruction

Network 1

LD I0.0

MUL AC1, VD100

DIV VW10, VD200

Multiply Integer to

Double Integer

400

AC1

* 200

VW102

= 80000

VD100

Divide Integer with Remainder

4000

VW202

/

41

VW10

= rem.

quot.

23 97

VW200 VW202

VD200

Note: VD100 contains: VW100 and VW102, and VD200 contains: VW200 and VW202.

142

S7-200 Instruction Set

Chapter 6

Numeric Functions Instructions

Sine, Cosine, and Tangent

The Sine (SIN), Cosine (COS), and Tangent (TAN) instructions evaluate the trigonometric function of the angle value IN and place the result in OUT. The input angle value is in radians.

SIN (IN) = OUT COS (IN) = OUT TAN (IN) = OUT

To convert an angle from degrees to radians:

Use the MUL_R (*R) instruction to multiply the angle in degrees by 1.745329E—2

(approximately by

π

/180).

Natural Logarithm and Natural Exponential

The Natural Logarithm instruction (LN) performs the natural logarithm of the value in IN and places the result in OUT.

The Natural Exponential instruction (EXP) performs the exponential operation of e raised to the power of the value in IN and places the result in OUT.

LN (IN) = OUT EXP (IN)= OUT

To obtain the base 10 logarithm from the natural logarithm:

Divide the natural logarithm by 2.302585

(approximately the natural logarithm of 10).

To raise any real number to the power of another real number, including fractional exponents:

Combine the

Natural Exponential instruction with the Natural Logarithm instruction. For example, to raise X to the Y power, enter the following instruction: EXP (Y * LN (X)).

Square Root

The Square Root instruction (SQRT) takes the square root of a real number (IN) and produces a real number result OUT.

SQRT (IN)= OUT

To obtain other roots: 5 cubed = 5^3 = EXP(3*LN(5)) = 125

The cube root of 125 = 125^(1/3) = EXP((1/3)*LN(125))= 5

The square root of 5 cubed = 5^(3/2) = EXP(3/2*LN(5)) = 11.18034

SM Bits and ENO for the Numeric Functions Instructions

For all of the instructions that are described on this page, SM1.1 is used to indicate overflow errors and illegal values. If SM1.1 is set, then the status of SM1.0 and SM1.2 is not valid and the original input operands are not altered. If SM1.1 is not set, then the math operation has completed with a valid result and

SM1.0 and SM1.2 contain valid status.

Error conditions that set ENO = 0

H

SM1.1 (overflow)

H

0006 (indirect address)

Special Memory bits affected

H

SM1.0 (zero)

H

SM1.1 (overflow)

H

SM1.2 (negative)

Table 6-41 Valid Operands for Numeric Functions

Inputs/Outputs

IN

Data Types

REAL

Operands

ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *LD, *AC, Constant

OUT REAL ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *LD, *AC

Real (or floating-point) numbers are represented in the format described in the ANSI/IEEE 754—1985 standard

(single-precision). Refer to that standard for more information.

143

S7-200 Programmable Controller System Manual

Increment and Decrement Instructions

Increment

IN + 1 = OUT

OUT + 1 = OUT

LAD and FBD

STL

Decrement

IN — 1 = OUT

OUT — 1 = OUT

LAD and FBD

STL

The Increment and Decrement instructions add or subtract

1 to or from the input IN and place the result into the variable OUT.

Increment Byte (INCB) and Decrement Byte (DECB) operations are unsigned.

Increment Word (INCW) and Decrement Word (DECW) operations are signed.

Increment Double Word (INCD) and Decrement Double

Word (DECD) operations are signed.

Error conditions that set ENO = 0:

H

SM1.1 (overflow)

H

0006 (indirect address)

Special Memory bits affected:

H

SM1.0 (zero)

H

SM1.1 (overflow)

H

SM1.2 (negative) for Word and Double Word operations

Table 6-42 Valid Operands for the Increment and Decrement Instructions

Inputs/Outputs Data Types

IN BYTE

INT

DINT

OUT BYTE

INT

DINT

Operands

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *LD, *AC, Constant

IW, QW, VW, MW, SMW, SW, T, C, LW, AC, AIW, *VD, *LD, *AC, Constant

ID, QD, VD, MD, SMD, SD, LD, AC, HC, *VD, *LD, *AC, Constant

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *AC, *LD

IW, QW, VW, MW, SMW, SW, T, C, LW, AC,*VD, *LD, *AC

ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *LD, *AC

Example: Increment and Decrement Instructions

Network 1

LD

INCW

I4.0

AC0

DECD VD100

Increment Word

Decrement Double Word

AC0

125 + 1 =

128000 — 1 =

VD100

AC0

126

127999

VD100

144

S7-200 Instruction Set

Chapter 6

Proportional/Integral/Derivative (PID) Loop Instruction

The PID Loop instruction (PID) executes a PID loop calculation on the referenced LOOP based on the input and configuration information in Table (TBL).

Error conditions that set ENO = 0:

H

SM1.1 (overflow)

H

0006 (indirect address)

Special Memory bits affected:

H

SM1.1 (overflow)

The PID loop instruction (Proportional, Integral, Derivative

Loop) is provided to perform the PID calculation. The top of the logic stack (TOS) must be ON (power flow) to enable the

PID calculation. The instruction has two operands: a TABLE address which is the starting address of the loop table and a

LOOP number which is a constant from 0 to 7.

Eight PID instructions can be used in a program. If two or more PID instructions are used with the same loop number (even if they have different table addresses), the PID calculations will interfere with one another and the output will be unpredictable.

The loop table stores nine parameters used for controlling and monitoring the loop operation and includes the current and previous value of the process variable, the setpoint, output, gain, sample time, integral time (reset), derivative time (rate), and the integral sum (bias).

To perform the PID calculation at the desired sample rate, the PID instruction must be executed either from within a timed interrupt routine or from within the main program at a rate controlled by a timer. The sample time must be supplied as an input to the PID instruction via the loop table.

Auto-Tune capability has been incorporated into the PID instruction. Refer to Chapter 15 for a detailed description of auto-tuning. The PID Tuning Control Panel only works with PID loops created by the PID wizard..

Table 6-43 Valid Operands for the PID Loop Instruction

Inputs/Outputs Data Types Operands

TBL

LOOP

BYTE

BYTE

VB

Constant (0 to 7)

Instruction

Wizard

STEP 7-Micro/WIN offers the PID Wizard to guide you in defining a PID algorithm for a closed-loop control process. Select the

Tools > Instruction Wizard

menu command and then select

PID

from the Instruction Wizard window.

Tip

The setpoint of the low range and the setpoint of the high range should correspond to the process variable low range and high range.

145

S7-200 Programmable Controller System Manual

Understanding the PID Algorithm

In steady state operation, a PID controller regulates the value of the output so as to drive the error

(e) to zero. A measure of the error is given by the difference between the setpoint (SP) (the desired operating point) and the process variable (PV) (the actual operating point). The principle of PID control is based upon the following equation that expresses the output, M(t), as a function of a proportional term, an integral term, and a differential term:

Output

M(t)

=

=

where:

M

(t)

K e

C

M initial

Proportional term + Integral term + Differential term

K

C

* e +

KC t



e dt

+

M initial

+ K

C

* de/dt

0

is the loop output as a function of time is the loop gain is the loop error (the difference between setpoint and process variable) is the initial value of the loop output

In order to implement this control function in a digital computer, the continuous function must be quantized into periodic samples of the error value with subsequent calculation of the output. The corresponding equation that is the basis for the digital computer solution is:

M n

=

output =

where:

M n

K e

C e n e n — 1

K

M

K x

I initial

D

K c

* e n

+ K

I

*

n

Σ

1

e x

+ M initial

+

proportional term + integral term + is the calculated value of the loop output at sample time n is the loop gain is the value of the loop error at sample time n is the previous value of the loop error (at sample time n — 1) is the value of the loop error at sample time x is the proportional constant of the integral term is the initial value of the loop output is the proportional constant of the differential term

K

D

* (e n

—e n- 1

)

differential term

From this equation, the integral term is shown to be a function of all the error terms from the first sample to the current sample. The differential term is a function of the current sample and the previous sample, while the proportional term is only a function of the current sample. In a digital computer, it is not practical to store all samples of the error term, nor is it necessary.

Since the digital computer must calculate the output value each time the error is sampled beginning with the first sample, it is only necessary to store the previous value of the error and the previous value of the integral term. As a result of the repetitive nature of the digital computer solution, a simplification in the equation that must be solved at any sample time can be made. The simplified equation is:

M n

output

=

= where: M n

K e

C e n

K n — 1

I

MX

K

D

K c

* e n

proportional term

+

+

K

I

* e n

+ MX

integral term

+

+ is the calculated value of the loop output at sample time n is the loop gain is the value of the loop error at sample time n is the previous value of the loop error (at sample time n — 1) is the proportional constant of the integral term is the previous value of the integral term (at sample time n — 1) is the proportional constant of the differential term

K

D

* (e n

—e n- 1

)

differential term

146

S7-200 Instruction Set

Chapter 6

The S7-200 uses a modified form of the above simplified equation when calculating the loop output value. This modified equation is:

M n

output

=

=

where:

Mn

MP n

MI n

MDn

MP n

proportional term

+

+

MI n

integral term

+

+

MD n

differential term is the calculated value of the loop output at sample time n is the value of the proportional term of the loop output at sample time n is the value of the integral term of the loop output at sample time n is the value of the differential term of the loop output at sample time n

Understanding the Proportional Term of the PID Equation

The proportional term MP is the product of the gain (K

C

), which controls the sensitivity of the output calculation, and the error (e), which is the difference between the setpoint (SP) and the process variable (PV) at a given sample time. The equation for the proportional term as solved by the S7-200 is:

MP n

=

where:

MPn

K

C

SP

PV n n

K

C

*

(SP n

— PV n

)

is the value of the proportional term of the loop output at sample time n is the loop gain is the value of the setpoint at sample time n is the value of the process variable at sample time n

Understanding the Integral Term of the PID Equation

The integral term MI is proportional to the sum of the error over time. The equation for the integral term as solved by the S7-200 is:

MI n

= K

C

where:

MI n

K

T

C

T

S

I

SP

PV n

MX n

*

T

S

/ T

I

* (SP n

— PV n

) + MX

is the value of the integral term of the loop output at sample time n is the loop gain is the loop sample time is the integration period of the loop (also called the integral time or reset) is the value of the setpoint at sample time n is the value of the process variable at sample time n is the value of the integral term at sample time n — 1

(also called the integral sum or the bias)

The integral sum or bias (MX) is the running sum of all previous values of the integral term. After each calculation of MI n

, the bias is updated with the value of MI typically set to the output value (M initial n which might be adjusted or clamped (see the section “Variables and Ranges” for details). The initial value of the bias is

) just prior to the first loop output calculation. Several constants are also part of the integral term, the gain (K

C

), the sample time (T

S

), which is the cycle time at which the PID loop recalculates the output value, and the integral time or reset (T is a time used to control the influence of the integral term in the output calculation.

I

), which

147

S7-200 Programmable Controller System Manual

Understanding the Differential Term of the PID Equation

The differential term MD is proportional to the change in the error. The S7-200 uses the following equation for the differential term:

MD n

= K

C

*

T

D

/ T

S

*

((SP n

— PV n

) — (SP n — 1

— PV n — 1

))

To avoid step changes or bumps in the output due to derivative action on setpoint changes, this equation is modified to assume that the setpoint is a constant (SP n

= SP n — 1

). This results in the calculation of the change in the process variable instead of the change in the error as shown:

MD n

or just:

= K

C

*

T

D

/ T

S

*

(SP n

— PV n

— SP n

+ PV n — 1

)

MD n

where:

MD n

K

T

C

T

S

D

SP

SP n

PV n—1

PV n n—1

= K

C

*

T

D

/ T

S

*

(PV n — 1

— PV n

)

is the value of the differential term of the loop output at sample time n is the loop gain is the loop sample time is the differentiation period of the loop (also called the derivative time or rate) is the value of the setpoint at sample time n is the value of the setpoint at sample time n—1 is the value of the process variable at sample time n is the value of the process variable at sample time n—1

The process variable rather than the error must be saved for use in the next calculation of the differential term. At the time of the first sample, the value of PV n — 1 is initialized to be equal to

PV n

.

Selecting the Type of Loop Control

In many control systems, it might be necessary to employ only one or two methods of loop control.

For example, only proportional control or proportional and integral control might be required. The selection of the type of loop control desired is made by setting the value of the constant parameters.

If you do not want integral action (no “I” in the PID calculation), then a value of infinity “INF”, should be specified for the integral time (reset). Even with no integral action, the value of the integral term might not be zero, due to the initial value of the integral sum MX.

If you do not want derivative action (no “D” in the PID calculation), then a value of 0.0 should be specified for the derivative time (rate).

If you do not want proportional action (no “P” in the PID calculation) and you want I or ID control, then a value of 0.0 should be specified for the gain. Since the loop gain is a factor in the equations for calculating the integral and differential terms, setting a value of 0.0 for the loop gain will result in a value of 1.0 being used for the loop gain in the calculation of the integral and differential terms.

Converting and Normalizing the Loop Inputs

A loop has two input variables, the setpoint and the process variable. The setpoint is generally a fixed value such as the speed setting on the cruise control in your automobile. The process variable is a value that is related to loop output and therefore measures the effect that the loop output has on the controlled system. In the example of the cruise control, the process variable would be a tachometer input that measures the rotational speed of the tires.

148

S7-200 Instruction Set

Chapter 6

Both the setpoint and the process variable are real world values whose magnitude, range, and engineering units could be different. Before these real world values can be operated upon by the

PID instruction, the values must be converted to normalized, floating-point representations.

The first step is to convert the real world value from a 16-bit integer value to a floating-point or real number value. The following instruction sequence is provided to show how to convert from an integer value to a real number.

ITD

DTR

AIW0, AC0

AC0, AC0

//Convert an input value to a double word

//Convert the 32-bit integer to a real number

The next step is to convert the real number value representation of the real world value to a normalized value between 0.0 and 1.0. The following equation is used to normalize either the setpoint or process variable value:

R

Norm

=

where: R

Norm

R

Raw

Offset

Span

((R

Raw

/ Span) + Offset)

is the normalized, real number value representation of the real world value is the un-normalized or raw, real number value representation of the real world value is 0.0 for unipolar values is 0.5 for bipolar values is the maximum possible value minus the minimum possible value:

= 32,000 for unipolar values (typical)

= 64,000 for bipolar values (typical)

The following instruction sequence shows how to normalize the bipolar value in AC0 (whose span is 64,000) as a continuation of the previous instruction sequence:

/

R

+R

64000.0, AC0

0.5, AC0

MOVR AC0, VD100

//Normalize the value in the accumulator

//Offset the value to the range from 0.0 to 1.0

//Store the normalized value in the loop TABLE

Converting the Loop Output to a Scaled Integer Value

The loop output is the control variable, such as the throttle setting of the cruise control on an automobile. The loop output is a normalized, real number value between 0.0 and 1.0. Before the loop output can be used to drive an analog output, the loop output must be converted to a 16-bit, scaled integer value. This process is the reverse of converting the PV and SP to a normalized value. The first step is to convert the loop output to a scaled, real number value using the formula given below:

R

Scal

=

w

here: R

Scal

M n

Offset

Span

(M n

— Offset)

*

Span

is the scaled, real number value of the loop output is the normalized, real number value of the loop output is 0.0 for unipolar values is 0.5 for bipolar values is the maximum possible value minus the minimum possible value

= 32,000 for unipolar values (typical)

= 64,000 for bipolar values (typical)

149

S7-200 Programmable Controller System Manual

The following instruction sequence shows how to scale the loop output:

MOVR VD108, AC0

—R

*R

0.5, AC0

64000.0, AC0

//Moves the loop output to the accumulator

//Include this statement only if the value is bipolar

//Scales the value in the accumulator

Next, the scaled, real number value representing the loop output must be converted to a 16-bit integer. The following instruction sequence shows how to do this conversion:

ROUND AC0, AC0

DTI AC0, LW0

MOVW LW0, AQW0

//Converts the real number to a 32-bit integer

//Converts the value to a 16-bit integer

//Writes the value to the analog output

Forward- or Reverse-Acting Loops

The loop is forward-acting if the gain is positive and reverse-acting if the gain is negative. (For I or

ID control, where the gain value is 0.0, specifying positive values for integral and derivative time will result in a forward-acting loop, and specifying negative values will result in a reverse-acting loop.)

Variables and Ranges

The process variable and setpoint are inputs to the PID calculation. Therefore the loop table fields for these variables are read but not altered by the PID instruction.

The output value is generated by the PID calculation, so the output value field in the loop table is updated at the completion of each PID calculation. The output value is clamped between 0.0 and

1.0. The output value field can be used as an input by the user to specify an initial output value when making the transition from manual control to PID instruction (auto) control of the output. (See the discussion in the “Modes” section below).

If integral control is being used, then the bias value is updated by the PID calculation and the updated value is used as an input in the next PID calculation. When the calculated output value goes out of range (output would be less than 0.0 or greater than 1.0), the bias is adjusted according to the following formulas:

MX

or

= 1.0

-(MP n

+ MD n

)

when the calculated output M n

> 1.0

MX

w

here: MX

MP

MD n n

M n

= — (MP n

+ MD n

)

when the calculated output M n

is the value of the adjusted bias is the value of the proportional term of the loop output at sample time n is the value of the differential term of the loop output at sample time n is the value of the loop output at sample time n

< 0.0

By adjusting the bias as described, an improvement in system responsiveness is achieved once the calculated output comes back into the proper range. The calculated bias is also clamped between 0.0 and 1.0 and then is written to the bias field of the loop table at the completion of each

PID calculation. The value stored in the loop table is used in the next PID calculation.

The bias value in the loop table can be modified by the user prior to execution of the PID instruction in order to address bias value problems in certain application situations. Care must be taken when manually adjusting the bias, and any bias value written into the loop table must be a real number between 0.0 and 1.0.

A comparison value of the process variable is maintained in the loop table for use in the derivative action part of the PID calculation. You should not modify this value.

150

S7-200 Instruction Set

Chapter 6

Modes

There is no built-in mode control for S7-200 PID loops. The PID calculation is performed only when power flows to the PID box. Therefore, “automatic” or “auto” mode exists when the PID calculation is performed cyclically. “Manual” mode exists when the PID calculation is not performed.

The PID instruction has a power-flow history bit, similar to a counter instruction. The instruction uses this history bit to detect a 0-to-1 power-flow transition. When the power-flow transition is detected, it will cause the instruction to perform a series of actions to provide a bumpless change from manual control to auto control. In order for change to auto mode control to be bumpless, the value of the output as set by the manual control must be supplied as an input to the PID instruction (written to the loop table entry for M n

) before switching to auto control. The PID instruction performs the following actions to values in the loop table to ensure a bumpless change from manual to auto control when a 0-to-1 power-flow transition is detected:

—

—

Sets setpoint (SP n

) = process variable (PV n

)

Sets old process variable (PV n—1

) = process variable (PV n

)

—

Sets bias (MX) = output value (M n

)

The default state of the PID history bits is “set” and that state is established at startup and on every STOP-to-RUN mode transition of the controller. If power flows to the PID box the first time that it is executed after entering RUN mode, then no power-flow transition is detected and the bumpless mode change actions are not performed.

Alarm Checking and Special Operations

The PID instruction is a simple but powerful instruction that performs the PID calculation. If other processing is required such as alarm checking or special calculations on loop variables, these must be implemented using the basic instructions supported by the S7-200.

Error Conditions

When it is time to compile, the CPU will generate a compile error (range error) and the compilation will fail if the loop table start address or PID loop number operands specified in the instruction are out of range.

Certain loop table input values are not range checked by the PID instruction. You must take care to ensure that the process variable and setpoint (as well as the bias and previous process variable if used as inputs) are real numbers between 0.0 and 1.0.

If any error is encountered while performing the mathematical operations of the PID calculation, then SM1.1 (overflow or illegal value) is set and execution of the PID instruction is terminated.

(Update of the output values in the loop table could be incomplete, so you should disregard these values and correct the input value causing the mathematical error before the next execution of the loop’s PID instruction.)

151

S7-200 Programmable Controller System Manual

Loop Table

The loop table is 80 bytes long and has the format shown in Table 6-44.

Table 6-44 Loop Table

Offset

0

4

8

12

16

20

24

28

32

36 to

79

Field

Process variable

(PV n

)

Setpoint

(SP n

)

Output

(M n

)

Gain

(K

C

)

Format

REAL

REAL

REAL

REAL

Type

In

In

In/Out

In

Description

Contains the process variable, which must be scaled between 0.0 and 1.0.

Contains the setpoint, which must be scaled between 0.0 and 1.0.

Contains the calculated output, scaled between 0.0 and 1.0.

Contains the gain, which is a proportional constant. Can be a positive or negative number.

Sample time

(T

S

)

Integral time or reset

(T

I

)

Derivative time or rate

(T

D

)

Bias

(MX)

REAL

REAL

REAL

REAL

In

In

In

In/Out

Contains the sample time, in seconds. Must be a positive number.

Contains the integral time or reset, in minutes. Must be a positive number.

Contains the derivative time or rate, in minutes. Must be a positive number.

Contains the bias or integral sum value between 0.0 and 1.0.

Previous process variable (PV n—1

)

REAL In/Out Contains the value of the process variable stored from the last execution of the PID instruction.

Reserved for auto-tuning variables. Refer to Table 15-1 for details.

152

S7-200 Instruction Set

Chapter 6

Interrupt Instructions

Enable Interrupt and Disable Interrupt

The Enable Interrupt instruction (ENI) globally enables processing of all attached interrupt events. The Disable

Interrupt instruction (DISI) globally disables processing of all interrupt events.

When you make the transition to RUN mode, interrupts are initially disabled. In RUN mode, you can enable interrupt processing by executing the Enable Interrupt instruction.

Executing the Disable Interrupt instruction inhibits the processing of interrupts; however, active interrupt events will continue to be queued.

Error conditions that set ENO = 0:

H

0004 (attempted execution of ENI, DISI, or HDEF instructions in an interrupt routine)

Conditional Return from Interrupt

The Conditional Return from Interrupt instruction (CRETI) can be used to return from an interrupt, based upon the condition of the preceding logic.

Attach Interrupt

The Attach Interrupt instruction (ATCH) associates an interrupt event EVNT with an interrupt routine number INT and enables the interrupt event.

Error conditions that set ENO = 0:

H

0002 (conflicting assignment of inputs to an HSC)

Detach Interrupt

The Detach Interrupt instruction (DTCH) disassociates an interrupt event EVNT from all interrupt routines and disables the interrupt event.

Clear Interrupt Event

The Clear Interrupt Event instruction removes all interrupt events of type EVNT from the interrupt queue. Use this instruction to clear the interrupt queue of unwanted interrupt events. If this instruction is being used to clear out spurious interrupt events, you should detach the event before clearing the events from the queue. Otherwise new events will be added to the queue after the clear event instruction has been executed.

The example shows a high-speed counter in quadrature mode using the CLR_EVNT instruction to remove interrupts. If a light chopper stepper sensor was stopped in a position that is on the edge of a light to dark transition, then small machine vibrations could generate unwanted interrupts before the new PV can be loaded.

Table 6-45 Valid Operands for the Interrupt Instructions

Inputs/Outputs

INT

EVNT

Data Types

BYTE

BYTE

Operands

Constant (0 to 127)

Constant

CPU 221 and CPU 222:

CPU 224:

0 to 12, 19 to 23, and 27 to 33

0 to 23 and 27 to 33

CPU 224XP and CPU 226:

0 to 33

153

S7-200 Programmable Controller System Manual

Operation of the Attach Interrupt and Detach Interrupt Instructions

Before an interrupt routine can be invoked, an association must be established between the interrupt event and the program segment that you want to execute when the event occurs. Use the Attach Interrupt instruction to associate an interrupt event (specified by the interrupt event number) and the program segment (specified by an interrupt routine number). You can attach multiple interrupt events to one interrupt routine, but one event cannot be concurrently attached to multiple interrupt routines.

When you attach an interrupt event to an interrupt routine, that interrupt is automatically enabled. If you disable all interrupts using the global disable interrupt instruction, each occurrence of the interrupt event is queued until interrupts are re-enabled, using the global enable interrupt instruction, or the interrupt queue overflows.

You can disable individual interrupt events by breaking the association between the interrupt event and the interrupt routine with the Detach Interrupt instruction. The Detach Interrupt instruction returns the interrupt to an inactive or ignored state. Table 6-46 lists the different types of interrupt events.

Table 6-46 Interrupt Events

Event

6

7

4

5

2

3

0

1

10

11

8

9

12

13

14

15

16

17

18

19

20

21

Description

I0.2

I0.2

I0.3

I0.3

I0.0

I0.0

I0.1

I0.1

Rising edge

Falling edge

Rising edge

Falling edge

Rising edge

Falling edge

Rising edge

Falling edge

Port 0

Port 0

Timed interrupt 0 SMB34

Timed interrupt 1 SMB35

HSC0

Receive character

Transmit complete

HSC1

CV=PV

(current value = preset value)

CV=PV

(current value = preset value)

HSC1

HSC1

HSC2

Direction changed

External reset

CV=PV

(current value = preset value)

HSC2

HSC2

PLS0

PLS1

Timer T32

Direction changed

External reset

PTO pulse count complete interrupt

PTO pulse count complete interrupt

CT=PT interrupt

Y

Y

Y

Y

Y

Y

Y

CPU 221

CPU 222

Y

Y

Y

Y

Y

Y

CPU 224

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

CPU 224XP

CPU 226

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

154

S7-200 Instruction Set

Chapter 6

Table 6-46 Interrupt Events, continued

Event

26

27

28

29

22

23

24

25

30

31

32

33

Description

Timer T96

Port 0

Port 1

Port 1

Port 1

HSC0

HSC0

HSC4

HSC4

HSC4

HSC3

HSC5

CT=PT interrupt

Receive message complete

Receive message complete

Receive character

Transmit complete

Direction changed

External reset

CV=PV

(current value = preset value)

Direction changed

External reset

CV=PV

(current value = preset value)

CV=PV

(current value = preset value)

CPU 221

CPU 222

Y

Y

Y

Y

Y

CPU 224

Y

Y

Y

Y

Y

CPU 224XP

CPU 226

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Understanding How the S7-200 Processes Interrupt Routines

The interrupt routine is executed in response to an associated internal or external event. Once the last instruction of the interrupt routine has been executed, control is returned to the main program.

You can exit the routine by executing a Conditional Return from Interrupt instruction (CRETI).

Table 6-47 emphasizes some guidelines and restrictions for using interrupt routines in your program.

Table 6-47 Guidelines and Restrictions for Using Interrupt Routines

Guidelines

Interrupt processing provides quick reaction to special internal or external events. You should optimize interrupt routines to perform a specific task, and then return control to the main routine.

By keeping the interrupt routines short and to the point, execution is quick and other processes are not deferred for long periods of time. If this is not done, unexpected conditions can cause abnormal operation of equipment controlled by the main program. For interrupts, the axiom, ‘‘the shorter, the better,’’ is definitely true.

Restrictions

You cannot use the Disable Interrupt (DISI), Enable Interrupt (ENI), High-Speed Counter Definition (HDEF), and End (END) instructions in an interrupt routine.

System Support for Interrupts

Because contact, coil, and accumulator logic can be affected by interrupts, the system saves and reloads the logic stack, accumulator registers, and the special memory bits (SM) that indicate the status of accumulator and instruction operations. This avoids disruption to the main user program caused by branching to and from an interrupt routine.

Sharing Data Between the Main Program and Interrupt Routines

You can share data between the main program and one or more interrupt routines. Because it is not possible to predict when the S7-200 might generate an interrupt, it is desirable to limit the number of variables that are used by both the interrupt routine and elsewhere in the program.

Problems with the consistency of shared data can result due to the actions of interrupt routines when the execution of instructions in your main program is interrupted by interrupt events. Use the local variable table of the interrupt routine to ensure that your interrupt routine uses only the temporary memory and does not overwrite data used somewhere else in your program.

155

S7-200 Programmable Controller System Manual

There are a number of programming techniques you can use to ensure that data is correctly shared between your main program and interrupt routines. These techniques either restrict the way access is made to shared memory locations or prevent interruption of instruction sequences using shared memory locations.

—

—

—

For an STL program that is sharing a single variable: If the shared data is a single byte, word, or double word variable and your program is written in STL, then correct shared access can be ensured by storing the intermediate values from operations on shared data only in non-shared memory locations or accumulators.

For a LAD program that is sharing a single variable: If the shared data is a single byte, word, or double word variable and your program is written in LAD, then correct shared access can be ensured by establishing the convention that access to shared memory locations be made using only Move instructions (MOVB, MOVW, MOVD, MOVR). While many LAD instructions are composed of interruptible sequences of STL instructions, these

Move instructions are composed of a single STL instruction whose execution cannot be affected by interrupt events.

For an STL or LAD program that is sharing multiple variables: If the shared data is composed of a number of related bytes, words, or double words, then the interrupt disable/enable instructions (DISI and ENI) can be used to control interrupt routine execution. At the point in your main program where operations on shared memory locations are to begin, disable the interrupts. Once all actions affecting the shared locations are complete, re-enable the interrupts. During the time that interrupts are disabled, interrupt routines cannot be executed and therefore cannot access shared memory locations; however, this approach can result in delayed response to interrupt events.

Calling Subroutines from Interrupt Routines

You can call one nesting level of subroutines from an interrupt routine. The accumulators and the logic stack are shared between an interrupt routine and a subroutine that is called.

Types of Interrupts Supported by the S7-200

The S7-200 supports the following types of interrupt routines:

—

—

—

Communications port interrupts: The S7-200 generates events that allow your program to control the communications port.

I/O interrupts: The S7-200 generates events for different changes of state for various I/O.

These events allow your program to respond to the high-speed counters, the pulse outputs, or to rising or falling states of the inputs.

Time-based interrupts: The S7-200 generates events that allow your program to react at specific intervals.

Communications Port Interrupts

The serial communications port of the S7-200 can be controlled by your program. This mode of operating the communications port is called Freeport mode. In Freeport mode, your program defines the baud rate, bits per character, parity, and protocol. The Receive and Transmit interrupts are available to facilitate your program-controlled communications. Refer to the Transmit and

Receive instructions for more information.

I/O Interrupts

I/O interrupts include rising/falling edge interrupts, high-speed counter interrupts, and pulse train output interrupts. The S7-200 can generate an interrupt on rising and/or falling edges of an input

(either I0.0, I0.1, I0.2, or I0.3). The rising edge and the falling edge events can be captured for each of these input points. These rising/falling edge events can be used to signify a condition that must receive immediate attention when the event happens.

The high-speed counter interrupts allow you to respond to conditions such as the current value reaching the preset value, a change in counting direction that might correspond to a reversal in the direction in which a shaft is turning, or an external reset of the counter. Each of these high-speed counter events allows action to be taken in real time in response to high-speed events that cannot be controlled at programmable logic controller scan speeds.

156

S7-200 Instruction Set

Chapter 6

The pulse train output interrupts provide immediate notification of completion of outputting the prescribed number of pulses. A typical use of pulse train outputs is stepper motor control.

You can enable each of the above interrupts by attaching an interrupt routine to the related I/O event.

Time-Based Interrupts

Time-based interrupts include timed interrupts and the timer T32/T96 interrupts. You can specify actions to be taken on a cyclic basis using a timed interrupt. The cycle time is set in 1-ms increments from 1 ms to 255 ms. You must write the cycle time in SMB34 for timed interrupt 0, and in SMB35 for timed interrupt 1.

The timed interrupt event transfers control to the appropriate interrupt routine each time the timer expires. Typically, you use timed interrupts to control the sampling of analog inputs or to execute a

PID loop at regular intervals.

A timed interrupt is enabled and timing begins when you attach an interrupt routine to a timed interrupt event. During the attachment, the system captures the cycle time value, so subsequent changes to SMB34 and SMB35 do not affect the cycle time. To change the cycle time, you must modify the cycle time value, and then re-attach the interrupt routine to the timed interrupt event.

When the re-attachment occurs, the timed interrupt function clears any accumulated time from the previous attachment and begins timing with the new value.

After being enabled, the timed interrupt runs continuously, executing the attached interrupt routine on each expiration of the specified time interval. If you exit RUN mode or detach the timed interrupt, the timed interrupt is disabled. If the global disable interrupt instruction is executed, timed interrupts continue to occur. Each occurrence of the timed interrupt is queued (until either interrupts are enabled or the queue is full).

The timer T32/T96 interrupts allow timely response to the completion of a specified time interval.

These interrupts are only supported for the 1-ms resolution on-delay (TON) and off-delay (TOF) timers T32 and T96. The T32 and T96 timers otherwise behave normally. Once the interrupt is enabled, the attached interrupt routine is executed when the active timer’s current value becomes equal to the preset time value during the normal 1-ms timer update performed in the S7-200. You enable these interrupts by attaching an interrupt routine to the T32/T96 interrupt events.

Interrupt Priority and Queuing

Interrupts are serviced by the S7-200 on a first-come-first-served basis within their respective priority group. Only one user-interrupt routine is ever being executed at any point in time. Once the execution of an interrupt routine begins, the routine is executed to completion. It cannot be pre-empted by another interrupt routine, even by a higher priority routine. Interrupts that occur while another interrupt is being processed are queued for later processing.

Table 6-48 shows the three interrupt queues and the maximum number of interrupts they can store.

Table 6-48 Maximum Number of Entries per Interrupt Queue

Queue

Communications queue

I/O Interrupt queue

Timed Interrupt queue

CPU 221, CPU 222, CPU 224

4

16

8

CPU 224XP and CPU 226

8

16

8

Potentially, more interrupts can occur than the queue can hold. Therefore, queue overflow memory bits (identifying the type of interrupt events that have been lost) are maintained by the system. Table 6-49 shows the interrupt queue overflow bits. You should use these bits only in an interrupt routine because they are reset when the queue is emptied, and control is returned to the main program.

157

S7-200 Programmable Controller System Manual

Table 6-50 shows all interrupt events, with their priority and assigned event number.

Table 6-49 Interrupt Queue Overflow Bits

Description (0 = No Overflow, 1 = Overflow)

Communications queue

I/O Interrupt queue

Timed Interrupt queue

SM Bit

SM4.0

SM4.1

SM4.2

Table 6-50 Priority Order for Interrupt Events

15

16

17

18

28

13

14

7

12

27

1

3

5

2

4

6

19

20

0

Event

8

9

23

24

25

26

31

33

10

32

29

30

11

21

22

HSC0

HSC1

HSC1

HSC1

HSC2

HSC2

HSC2

I0.0

I0.1

I0.2

I0.3

HSC0

HSC0

PLS0

PLS1

I0.0

I0.1

I0.2

I0.3

Description

Port 0

Port 0

Port 0

Port 1

Port 1

Port 1

Receive character

Transmit complete

Receive message complete

Receive message complete

Receive character

Transmit complete

PTO pulse count complete interrupt

PTO pulse count complete interrupt

Rising edge

Rising edge

Rising edge

Rising edge

Falling edge

Falling edge

Falling edge

Falling edge

CV=PV (current value = preset value)

Direction changed

External reset

CV=PV (current value = preset value)

Direction changed

External reset

CV=PV (current value = preset value)

Direction changed

External reset

HSC3

HSC4

HSC4

CV=PV (current value = preset value)

CV=PV (current value = preset value)

Direction changed

HSC4

HSC5

External reset

CV=PV (current value = preset value)

Timed interrupt 0 SMB34

Timed interrupt 1 SMB35

Timer T32 CT=PT interrupt

Timer T96 CT=PT interrupt

Priority Group

Communications

Highest Priority

Discrete

Medium Priority

Timed

L

15

16

17

18

12

13

14

9

10

11

6

7

8

Priority in Group

0

0

0

1

1

1

3

4

5

0

1

2

22

23

0

19

20

21

1

2

3

158

T

0

I

N

S7-200 Instruction Set

Chapter 6

Example: Interrupt Instructions

I

N

M

A

Network 1

LD

ATCH

ENI

Network 2

LD

DTCH

Network 3

LD

DISI

//On the first scan:

//1. Define interrupt routine INT_0 to

// be a falling-edge interrupt for I0.0

//2. Globally enable interrupts.

SM0.1

INT_0, 1

//If an I/O error is detected,

//disable the falling-edge interrupt for I0.0.

//This network is optional.

SM5.0

1

//When M5.0 is on,

//disable all interrupts.

M5.0

T

0

I

N

Network 1

LD

CRETI

//I0.0 falling-edge interrupt routine:

//Conditional return based on an I/O error.

SM5.0

R

0

S

B

Example: Timed Interrupt for Reading the Value of an Analog Input

I

N

M

A

Network 1

LD

CALL

//On the first scan, call subroutine 0.

SM0.1

SBR_0

Network 1 //1. Set the interval for the timed interrupt 0 to 100 ms.

//2. Attach timed interrupt 0 (Event 10) to INT_0.

//3. Global interrupt enable.

LD SM0.0

MOVB 100, SMB34

ATCH

ENI

INT_0, 10

Network 1 //Read the value of AIW4 every 100 ms

LD SM0.0

MOVW AIW4, VW100

159

S7-200 Programmable Controller System Manual

Example: Clear Interrupt Event Instruction

Network 1 // Instruction Wizard HSC

LD SM0.0

MOVB 16#A0, SMB47

//Set control bits:

//write preset;

MOVD +6, SMD52

//PV = 6;

ATCH HSC1_STEP1, 13

//Interrupt HSC1_STEP1: CV = PV for HC1

Network 2 //Clear unwanted interrupts caused

//by machine vibration

LD

CEVNT

SM0.0

13

160

Logical Operations Instructions

Invert Instructions

Invert Byte, Word, and Double Word

The Invert Byte (INVB), Invert Word (INVW), and Invert

Double Word (INVD) instructions form the one’s complement of the input IN and load the result into the memory location

OUT.

Error conditions that set ENO = 0

H

0006 (indirect address)

SM bits affected:

H

SM1.0 (zero)

S7-200 Instruction Set

Chapter 6

Table 6-51 Valid Operands for the Invert Instructions

Inputs/Outputs Data Types Operands

IN

OUT

BYTE

WORD

DWORD

BYTE

WORD

DWORD

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *LD, *AC, Constant

IW, QW, VW, MW, SMW, SW, T, C, LW, AC, AIW, *VD, *LD, *AC, Constant

ID, QD, VD, MD, SMD, SD, LD, AC, HC, *VD, *LD, *AC, Constant

IB, QB, VB, MB, SMB, SB, LB, AC,*VD, *LD, *AC

IW, QW, VW, MW, SMW, SW, T, C, LW, AC, *VD, *LD, *AC

ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *LD, *AC

Example: Invert Instruction

Network 1

LD

INVW

I4.0

AC0

Invert Word

AC0

AC0

1101 0111 1001 0101 complement

0010 1000 0110 1010

161

S7-200 Programmable Controller System Manual

AND, OR, and Exclusive OR Instructions

AND Byte, AND Word, and AND Double Word

The AND Byte (ANDB), AND Word (ANDW), and AND

Double Word (ANDD) instructions AND the corresponding bits of two input values IN1 and IN2 and load the result in a memory location OUT.

OR Byte, OR Word and OR Double Word

The OR Byte (ORB), OR Word instruction (ORW), and OR

Double Word (ORD) instructions OR the corresponding bits of two input values IN1 and IN2 and load the result in a memory location OUT.

Exclusive OR Byte, Exclusive OR Word, and

Exclusive OR Double Word

The Exclusive OR Byte (XROB), Exclusive OR Word

(XORW), and Exclusive OR Double Word (XORD) instruction XOR the corresponding bits of two input values

IN1 and IN2 and load the result in a memory location OUT.

SM Bits and ENO

For all of the instructions described on this page, the following conditions affect SM bits and ENO.

Error conditions that set ENO = 0

H

0006 (indirect address)

SM bits affected:

H

SM1.0 (zero)

Table 6-52 Valid Operands for the AND, OR, and Exclusive OR Instructions

Inputs/Outputs Data Types Operands

IN1, IN2

OUT

BYTE

WORD

DWORD

BYTE

WORD

DWORD

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *LD, *AC, Constant

IW, QW, VW, MW, SMW, SW, T, C, LW, AC, AIW, *VD, *LD, *AC, Constant

ID, QD, VD, MD, SMD, SD, LD, AC, HC, *VD, *LD, *AC, Constant

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *AC, *LD

IW, QW, VW, MW, SMW, SW, T, C, LW, AC, *VD, *AC, *LD

ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *AC, *LD

162

S7-200 Instruction Set

Chapter 6

Example: AND, OR, and Exclusive OR Instructions

Network 1

LD I4.0

ANDW AC1, AC0

ORW AC1, VW100

XORW AC1, AC0

AND Word

AC1

AC0

AC0

0001 1111 0110 1101

AND

1101 0011 1110 0110 equals

0001 0011 0110 0100

OR Word

AC1

VW100

VW100

0001 1111 0110 1101

OR

1101 0011 1010 0000 equals

1101 1111 1110 1101

Exclusive OR Word

AC1

AC0

AC0

0001 1111 0110 1101

XOR

0001 0011 0110 0100 equals

0000 1100 0000 1001

163

S7-200 Programmable Controller System Manual

Move Instructions

Move Byte, Word, Double Word, or Real

The Move Byte (MOVB), Move Word (MOVW), Move

Double Word (MOVD), and Move Real (MOVR) instructions move a value from a memory location IN to a new memory location OUT without changing the original value.

Use the Move Double Word instruction to create a pointer.

For more information, refer to the section on pointers and indirect addressing in Chapter 4.

For the IEC Move instruction, the input and output data types can vary, but must be of the same size.

Error conditions that set ENO = 0

H

0006 (indirect address)

Table 6-53 Valid Operands for the Move Instructions

Inputs/Outputs Data Types Operands

IN

OUT

BYTE

WORD, INT

DWORD, DINT

REAL

BYTE

WORD, INT

DWORD, DINT, REAL

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *LD, *AC, Constant

IW, QW, VW, MW, SMW, SW, T, C, LW, AC, AIW, *VD, *AC, *LD,

Constant

ID, QD, VD, MD, SMD, SD, LD, HC, &VB, &IB, &QB, &MB, &SB,

&T, &C, &SMB, &AIW, &AQW, AC, *VD, *LD, *AC, Constant,

ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *LD, *AC, Constant

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *LD, *AC

IW, QW, VW, MW, SMW, SW, T, C, LW, AC, AQW, *VD, *LD, *AC

ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *LD, *AC

164

S7-200 Instruction Set

Chapter 6

Move Byte Immediate (Read and Write)

The Move Byte Immediate instructions allow you to immediately move a byte between the physical I/O and a memory location.

The Move Byte Immediate Read (BIR) instruction reads physical input (IN) and writes the result to the memory address (OUT), but the process-image register is not updated.

The Move Byte Immediate Write instruction (BIW) reads the data from the memory address (IN) and writes to physical output (OUT), and the corresponding process image location.

Error conditions that set ENO = 0

H

0006 (indirect address)

H

Unable to access expansion module

Table 6-54 Valid Operands for the Move Byte Immediate Read Instruction

Inputs/Outputs Data Types Operands

IN

OUT

BYTE

BYTE

IB, *VD, *LD, *AC

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *LD, *AC

Table 6-55 Valid Operands for the Move Byte Immediate Write Instruction

Inputs/Outputs Data Types Operands

IN

OUT

BYTE

BYTE

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *LD, *AC, Constant

QB, *VD, *LD, *AC

165

S7-200 Programmable Controller System Manual

Block Move Instructions

Block Move Byte, Word, or Double Word

The Block Move Byte (BMB), Block Move Word (BMW), and

Block Move Double Word (BMD) instructions move a specified amount of data to a new memory location by moving the number of bytes, words, or double words N starting at the input address IN to a new block starting at the output address OUT.

N has a range of 1 to 255.

Error conditions that set ENO = 0

H

0006 (indirect address)

H

0091 (operand out of range)

166

Table 6-56 Valid Operands for the Block Move Instructions

Inputs/Outputs Data Types Operands

IN

OUT

N

BYTE

WORD, INT

DWORD, DINT

BYTE

WORD, INT

DWORD, DINT

BYTE

IB, QB, VB, MB, SMB, SB, LB, *VD, *LD, *AC

IW, QW, VW, MW, SMW, SW, T, C, LW, AIW, *VD, *LD, *AC

ID, QD, VD, MD, SMD, SD, LD, *VD, *LD, *AC

IB, QB, VB, MB, SMB, SB, LB, *VD, *LD, *AC

IW, QW, VW, MW, SMW, SW, T, C, LW, AQW, *VD, *LD, *AC

ID, QD, VD, MD, SMD, SD, LD, *VD, *LD, *AC

IB, QB, VB, MB, SMB, SB, LB, AC, Constant, *VD, *LD, *AC

Example: Block Move Instruction

Network 1

LD

BMB

//Move array 1 (VB20 to VB23)

//to array 2 (VB100 to VB103)

I2.1

VB20, VB100, 4

Array 1

VB20

30

VB21

31

VB22

32

Array 2

VB100

30

VB101

31

VB102

32

VB23

33

VB103

33

S7-200 Instruction Set

Chapter 6

Program Control Instructions

Conditional End

The Conditional End instruction (END) terminates the current scan based upon the condition of the preceding logic. You can use the Conditional End instruction in the main program, but you cannot use it in either subroutines or interrupt routines.

Stop

The Stop instruction (STOP) terminates the execution of your program by causing a transition of the S7-200 CPU from RUN to STOP mode.

If the Stop instruction is executed in an interrupt routine, the interrupt routine is terminated immediately, and all pending interrupts are ignored. Remaining actions in the current scan cycle are completed, including execution of the main user program, and the transition from RUN to STOP mode is made at the end of the current scan.

Watchdog Reset

The Watchdog Reset instruction (WDR) retriggers the system watchdog timer of the S7-200 CPU to extend the time that the scan is allowed to take without getting a watchdog error.

You should use the Watchdog Reset instruction carefully. If you use looping instructions either to prevent scan completion or to delay excessively the completion of the scan, the following processes are inhibited until the scan cycle is completed:

—

—

—

—

—

—

—

—

Communications (except Freeport Mode)

I/O updating (except Immediate I/O)

Force updating

SM bit updating (SM0, SM5 to SM29 are not updated)

Run-time diagnostics

10-ms and 100-ms timers will not properly accumulate time for scans exceeding

25 seconds

STOP instruction, when used in an interrupt routine

Expansion modules with discrete outputs also include a watchdog timer that turns off outputs if the module is not written by the S7-200. Use an immediate write to each expansion module with discrete outputs to keep the correct outputs on during extended scan times. Refer to the example that follows this description.

167

S7-200 Programmable Controller System Manual

Tip

If you expect your scan time to exceed 500 ms, or if you expect a burst of interrupt activity that could prevent returning to the main scan for more than 500 ms, you should use the Watchdog

Reset instruction to retrigger the watchdog timer.

Each time you use the Watchdog Reset instruction, you should also use an immediate write to one output byte (QB) in each discrete expansion module to reset each expansion module watchdog.

If you use the Watchdog Reset instruction to allow the execution of a program that requires a long scan time, changing the mode switch to the STOP position causes the S7-200 to transition to STOP mode within 1.4 seconds.

Example: Stop, End, and Watchdog Reset Instructions

Network 1

LD

STOP

//When an I/O error is detected:

//Force the transition to STOP mode.

SM5.0

Network 2

LD

WDR

BIW

M5.6

//When M5.6 is on, allow the scan to

//be extended:

//1. Retrigger the Watchdog Reset for the S7-200.

//2. Retrigger the watchdog for the first output module.

QB2, QB2

Network 3

LD

END

I0.0

//When I0.0 is on, terminate the current scan.

168

S7-200 Instruction Set

Chapter 6

For—Next Loop Instructions

Use the For (FOR) and Next (NEXT) instructions to delineate a loop that is repeated for the specified count.

Each For instruction requires a Next instruction. You can nest For—Next loops (place a For—Next loop within a

For—Next loop) to a depth of eight.

The For instruction executes the instructions between the

For and the Next instructions. You specify the index value or current loop count INDX, the starting value INIT, and the ending value FINAL.

The Next instruction marks the end of the FOR loop.

Error conditions that set ENO = 0

H

0006 (indirect address)

If you enable the For—Next loop, it continues the looping process until it finishes the iterations, unless you change the final value from within the loop itself. You can change the values while the For—Next loop is in the looping process.

When the loop is enabled again, it copies the initial value into the index value (current loop number).

The For—Next instruction resets itself the next time it is enabled.

For example, given an INIT value of 1 and a FINAL value of 10, the instructions between the For instruction and the Next instruction are executed 10 times with the INDX value being incremented:

1, 2, 3, …10.

If the starting value is greater than the final value, the loop is not executed. After each execution of the instructions between the For instruction and the Next instruction, the INDX value is incremented and the result is compared to the final value. If the INDX is greater than the final value, the loop is terminated.

If the top of stack is 1 when your program enters the For—Next loop, then the top of stack will be 1 when your program exits the For—Next loop.

Table 6-57 Valid Operands for the For and Next Instructions

Inputs/Outputs

INDX

INIT, FINAL

Data Types

INT

INT

Operands

IW, QW, VW, MW, SMW, SW, T, C, LW, AC, *VD, *LD, *AC

VW, IW, QW, MW, SMW, SW, T, C, LW, AC, AIW, *VD, *LD, *AC,

Constant

169

S7-200 Programmable Controller System Manual

Example: For—Next Loop Instructions

2

1

Network 1

LD

FOR

//When I2.0 comes on, the outside loop

//(arrow 1) is executed 100 times

I2.0

VW100, +1, +100

Network 2

LD

FOR

//The inside loop (arrow 2)

//is executed twice for each

//execution of the outside loop

//when I2.1 is on.

I2.1

VW225, +1, +2

Network 3

NEXT

//End of Loop 2.

Network 4

NEXT

//End of Loop 1 .

170

S7-200 Instruction Set

Chapter 6

Jump Instructions

The Jump to Label instruction (JMP) performs a branch to the specified label N within the program.

The Label instruction (LBL) marks the location of the jump destination N.

You can use the Jump instruction in the main program, in subroutines, or in interrupt routines. The Jump and its corresponding Label instruction must always be located within the same segment of code (either the main program, a subroutine, or an interrupt routine).

You cannot jump from the main program to a label in either a subroutine or an interrupt routine. Likewise, you cannot jump from a subroutine or interrupt routine to a label outside that subroutine or interrupt routine.

You can use a Jump instruction within an SCR segment, but the corresponding Label instruction must be located within the same SCR segment.

Table 6-58 Valid Operands for the Jump Instructions

Inputs/Outputs Data Types

N WORD

Operands

Constant (0 to 255)

Example: Jump to Label Instruction

Network 1

LDN

JMP

SM0.2

4

//If the retentive data has not been lost,

//Jump to LBL4

Network 2

LBL 4

171

S7-200 Programmable Controller System Manual

Sequence Control Relay (SCR) Instructions

SCR instructions provide you with a simple yet powerful state control programming technique that fits naturally into a

LAD, FBD, or STL program.

Whenever your application consists of a sequence of operations that must be performed repetitively, SCRs can be used to structure your program so that it corresponds directly to your application. As a result, you can program and debug your application more quickly and easily.

The Load SCR instruction (LSCR) loads the SCR and logic stacks with the value of the S bit referenced by the instruction N.

The SCR segment is energized or de-energized by the resulting value of the SCR stack. The value of the SCR stack is copied to the top of the logic stack so that boxes or output coils can be tied directly to the left power rail without an intervening contact.

Restrictions

When using SCRs, be aware of the following restrictions:

—

—

—

You cannot use the same S bit in more than one routine. For example, if you use S0.1 in the main program, do not use it in a subroutine.

You cannot jump into or out of an SCR segment; however, you can use Jump and Label instructions to jump around SCR segments or to jump within an SCR segment.

You cannot use the END instruction in an SCR segment.

Table 6-59 Valid Operands for the Sequence Control Relay Instructions

Inputs/Outputs

S_bit

Data Types

BOOL

Operands

S

172

S7-200 Instruction Set

Chapter 6

Figure 6-31 shows the S stack and the logic stack and the effect of executing the Load SCR instruction. The following is true of Sequence Control Relay instructions:

—

—

The Load SCR instruction (LSCR) marks the beginning of an SCR segment, and the SCR

End instruction (SCRE) marks the end of an SCR segment. All logic between the Load SCR and the SCR End instructions are dependent upon the value of the S stack for its execution.

Logic between the SCR End and the next Load SCR instruction is not dependent on the value of the S stack.

The SCR Transition instruction

(SCRT) provides the means to transfer control from an active SCR segment to another SCR segment.

Execution of the SCR Transition instruction when it has power flow will reset the S bit of the currently active segment and will set the S bit of the referenced segment.

Resetting the S bit of the active segment does not affect the S stack at the time the SCR

Transition instruction executes.

Consequently, the SCR segment t remains energized until it is exited.

Load the value of Sx.y onto the SCR and logic stacks.

S stack ivS

Sx.y

S bit

Logic stack

Before

iv0 iv1 iv2 iv3 iv4 iv5 iv6 iv7 iv8

After

Sx.y

iv1 iv2 iv3 iv4 iv5 iv6 iv7 iv8

Figure 6-31 Effect of LSCR on the Logic Stack

—

The Conditional SCR End instruction (CSCRE) provides a means to exit an active SCR segment without executing the instructions between the Conditional SCR End and the

SCR End instructions. The Conditional SCR End instruction does not affect any S bit nor does it affect the S stack.

In the following example, the first scan bit SM0.1 sets S0.1, which will be the active State 1 on the first scan. After a 2-second delay, T37 causes a transition to State 2. This transition deactivates the State 1 SCR (S0.1) segment and activates the State 2 SCR (S0.2) segment.

173

S7-200 Programmable Controller System Manual

Example: Sequence Control Relay Instruction

Network 1

LD

S

//On the first scan enable State 1.

SM0.1

S0.1, 1

Network 2

LSCR S0.1

//Beginning of State 1 control region.

Network 3

LD

S

R

TON

//Control the signals for Street 1:

//1. Set: Turn on the red light.

//2. Reset: Turn off the yellow and green lights.

//3. Start a 2—second timer.

SM0.0

Q0.4, 1

Q0.5, 2

T37, +20

Network 4

LD T37

SCRT S0.2

//After a 2 second delay, transition to State 2.

Network 5

SCRE

//End of SCR region for State 1.

Network 6

LSCR S0.2

//Beginning of State 2 control region.

Network 7

LD

S

TON

//Control the signals for Street 2:

//1. Set: Turn on the green light.

//2. Start a 25—second timer.

SM0.0

Q0.2, 1

T38, +250

Network 8

LD T38

SCRT S0.3

//After a 25 second delay, transition to State 3.

Network 9

SCRE

//End of SCR region for State 2.

174

S7-200 Instruction Set

Chapter 6

Divergence Control

In many applications, a single stream of sequential states must be split into two or more different streams. When a control stream diverges into multiple streams, all outgoing streams must be activated simultaneously. This is shown in Figure 6-32.

State L

Transition Condition

State M State N

Figure 6-32 Divergence of a Control Stream

The divergence of control streams can be implemented in an SCR program by using multiple

SCRT instructions enabled by the same transition condition, as shown in the following example.

Example: Divergence of Control Streams

Network 1

LSCR S3.4

//Beginning of State L control region.

Network 2

LD

A

M2.3

I2.1

SCRT S3.5

SCRT S6.5

Network 3

SCRE

//Transition to State M

//Transition to State N

//End of the State region for State L.

Convergence Control

A situation similar to divergence control arises when two or more streams of sequential states must be merged into a single stream. When multiple streams merge into a single stream, they are said to converge. When streams converge, all incoming streams must be complete before the next state is executed. Figure 6-33 depicts the convergence of two control streams.

The convergence of control streams can be implemented in an SCR program by making the transition from state L to state L’ and by making the transition from state M to state M’. When both

SCR bits representing L’ and M’ are true, state N can the enabled as shown in the following example.

175

S7-200 Programmable Controller System Manual

State L State M

Transition Condition

State N

Figure 6-33 Convergence of a Control Stream

Example: Convergence of Control Streams

Network 1

LSCR S3.4

//Beginning of State L control region

Network 2

LD

SCRT

//Transition to State L’

V100.5

S3.5

Network 3

SCRE

//End of SCR region for State L

Network 4

LSCR S6.4

//Beginning of State M control region

Network 5

LD

SCRT

C50

S6.5

//Transition to State M’

Network 6

SCRE

//End of SCR region for State M

S

R

LD

A

R

Network 7

S3.5

S6.5

S5.0, 1

S3.5, 1

S6.5, 1

//When both State L’ and State M’

//are activated:

//1. Enable State N (S5.0)

//2. Reset State L’ (S3.5)

//3. Reset State M’ (S6.5)

176

S7-200 Instruction Set

Chapter 6

In other situations, a control stream might be directed into one of several possible control streams, depending upon which transition condition comes true first. Such a situation is depicted in Figure

6-34, which shows an equivalent SCR program.

State L

Transition Condition

State M

Transition Condition

State N

Figure 6-34 Divergence of a Control Stream, Depending on the Transition Condition

Example: Conditional Transitions

Network 1

LSCR S3.4

//Beginning of State L control region

Network 2

LD M2.3

SCRT S3.5

//Transition to State M

Network 3

LD I3.3

SCRT S6.5

//Transition to State N

Network 4

SCRE

//End of SCR region for State L

177

S7-200 Programmable Controller System Manual

Diagnostic LED Instruction

If the input parameter IN has a value of zero, then set the diagnostic LED OFF. If the input parameter IN has a value greater than zero, then set the diagnostic LED ON (yellow).

The CPU light emitting diode (LED) labeled SF/ DIAG can be configured to indicate yellow when either the conditions specified in the System Block are true or when the

DIAG_LED instruction is executed with a non—zero IN parameter.

System Block (Configure LED) check box options:

—

—

SF/ DIAG LED is ON (yellow) when an item is forced in the CPU

SF/ DIAG LED is ON (yellow) when a module has an

I/O error

Uncheck both Configure LED options to give the DIAG_LED instruction sole control over SF/ DIAG yellow illumination. A

CPU System Fault (SF) is indicated with red illumination.

Table 6-60 Valid Operands for the Diagnostic LED Instruction

Inputs/Outputs Data Types Operands

IN BYTE VB, IB, QB, MB, SB, SMB, LB, AC, Constant, *VD, *LD, *AC

Example 1 Diagnostic LED Instruction

Blink the diagnostic LED when an error is detected.

Blink the diagnostic LED any time one of the 5 error conditions is detected.

O

A

O

O

=

Network 1

LD SM1.3

O SM 2.0

SM4.1

SM4.2

SM5.0

SM0.5

V100.0

Network 2

LD SM0.0

DLED VB100

Example 2 Diagnostic LED Instruction

Turn the diagnostic LED ON when an error is returned.

When an error code is reported in VB100, turn on the diagnostic LED

Network 1

LD SM0.0

DLED VB100

178

S7-200 Instruction Set

Chapter 6

Shift and Rotate Instructions

Shift Right and Shift Left Instructions

The Shift instructions shift the input value IN right or left by the shift count N and load the result in the output OUT.

The Shift instructions fill with zeros as each bit is shifted out

.

If the shift count (N) is greater than or equal to the maximum allowed (8 for byte operations, 16 for word operations, and 32 for double word operations), the value is shifted the maximum number of times for the operation. If the shift count is greater than 0, the overflow memory bit

(SM1.1) takes on the value of the last bit shifted out. The zero memory bit (SM1.0) is set if the result of the shift operation is zero.

Byte operations are unsigned. For word and double word operations, the sign bit is shifted when you use signed data types.

Error conditions that set ENO = 0

H

0006 (indirect address)

SM bits affected:

H

SM1.0 (zero)

H

SM1.1 (overflow)

Rotate Right and Rotate Left Instructions

The Rotate instructions rotate the input value (IN) right or left by the shift count (N) and load the result in the memory location (OUT). The rotate is circular.

If the shift count is greater than or equal to the maximum for the operation (8 for a byte operation, 16 for a word operation, or 32 for a double-word operation), the S7-200 performs a modulo operation on the shift count to obtain a valid shift count before the rotation is executed. This result is a shift count of 0 to 7 for byte operations, 0 to 15 for word operations, and 0 to 31 for double-word operations.

If the shift count is 0, a rotate operation is not performed. If the rotate operation is performed, the value of the last bit rotated is copied to the overflow bit (SM1.1).

If the shift count is not an integer multiple of 8 (for byte operations), 16 (for word operations), or

32 (for double-word operations), the last bit rotated out is copied to the overflow memory bit

(SM1.1). The zero memory bit (SM1.0) is set when the value to be rotated is zero.

Byte operations are unsigned. For word and double word operations, the sign bit is shifted when you use signed data types.

Error conditions that set ENO = 0

H

0006 (indirect address)

SM bits affected:

H

SM1.0 (zero)

H

SM1.1 (overflow)

Table 6-61 Valid Operands for the Shift and Rotate Instructions

Inputs/Outputs Data Types

IN

OUT

N

BYTE

WORD

DWORD

BYTE

WORD

DWORD

BYTE

Operands

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *LD, *AC, Constant

IW, QW, VW, MW, SMW, SW, T, C, LW, AC, AIW, *VD, *LD, *AC, Constant

ID, QD, VD, MD, SMD, SD, LD, AC, HC, *VD, *LD, *AC, Constant

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *LD, *AC

IW, QW, VW, MW, SMW, SW, T, C, LW, AC, *VD, *LD, *AC

ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *LD, *AC

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *LD, *AC, Constant

179

S7-200 Programmable Controller System Manual

Example: Shift and Rotate Instructions

Network 1

LD

RRW

SLW

I4.0

AC0, 2

VW200, 3

Rotate

AC0

Before rotate

0100 0000 0000 0001

After first rotate

1010 0000 0000 0000

Overflow x

Overflow

1 AC0

AC0

After second rotate

0101 0000 0000 0000

Zero Memory Bit (SM1.0) = 0

Overflow Memory Bit (SM1.1) = 0

Overflow

0

Shift

VW200

VW200

Before shift

1110 0010 1010 1101

After first shift

1100 0101 0101 1010

Overflow x

Overflow

1

VW200

After second shift

1000 1010 1011 0100

Overflow

1

VW200

After third shift

0001 0101 0110 1000

Zero Memory Bit (SM1.0) = 0

Overflow Memory Bit (SM1.1) = 1

Overflow

1

180

S7-200 Instruction Set

Chapter 6

Shift Register Bit Instruction

The Shift Register Bit instruction shifts a value into the Shift

Register. This instruction provides an easy method for sequencing and controlling product flow or data. Use this instruction to shift the entire register one bit, once per scan.

The Shift Register Bit instruction shifts the value of DATA into the Shift Register. S_BIT specifies the least significant bit of the Shift Register. N specifies the length of the Shift

Register and the direction of the shift (Shift Plus = N, Shift

Minus = —N).

Each bit shifted out by the SHRB instruction is placed in the overflow memory bit (SM1.1).

This instruction is defined by both the least significant bit

(S_BIT) and the number of bits specified by the length (N).

Error conditions that set ENO = 0

H

0006 (indirect address)

H

0091 (operand out of range)

H

0092 (error in count field)

SM bits affected:

H

SM1.1 (overflow)

Table 6-62 Valid Operands for the Shift Register Bit Instruction

Inputs/Outputs Data Types Operands

DATA, S_Bit

N

BOOL

BYTE

I, Q, V, M, SM, S, T, C, L

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *LD, *AC, Constant

181

S7-200 Programmable Controller System Manual

Use the following equation to compute the address of the most significant bit of the Shift Register

(MSB.b):

MSB.b =

[(Byte of S_BIT) + ([N] — 1 + (bit of S_BIT)) / 8]

.

[remainder of the division by 8]

For example: if S_BIT is V33.4 and N is 14, the following calculation shows that the MSB.b is V35.1.

MSB.b

= V33 + ([14] — 1 +4)/8

= V33 + 17/8

= V33 + 2 with a remainder of 1

= V35.1

On a Shift Minus, indicated by a negative value of length (N), the input data shifts into the most significant bit of the Shift Register, and shifts out of the least significant bit (S_BIT). The data shifted out is then placed in the overflow memory bit (SM1.1).

On a Shift Plus, indicated by a positive value of length (N), the input data (DATA) shifts into the least significant bit of the Shift Register, specified by the

S_BIT, and out of the most significant bit of the Shift

Register. The data shifted out is then placed in the overflow memory bit (SM1.1).

f

The maximum length of the shift register is 64 bits, ti g d iti g l f N g

Shift Minus,

Length = —14

V33

Shift Plus,

Length = 14

V34

V35

V33

V34

V35

MSB

7

7

7

MSB

7

7

7

S_BIT

4

LSB

0

1 0

MSB of Shift Register

S_BIT

4

LSB

0

1 0

Figure 6-35 Shift Register Entry and Exit

0

0

MSB of Shift Register

Example: Shift Register Bit Instruction

Network 1

LD

EU

I0.2

SHRB I0.3, V100.0, +4

Timing Diagram

I0.2

Positive transition (P)

I0.3

First shift Second shift

7 (MSB)

Before first shift

V100

0

Overflow (SM1.1) x

1 0

0 (LSB)

1

After first shift

V100 1

Overflow (SM1.1)

0

0

After second shift

V100

Overflow (SM1.1)

0

1

1

1 1

1 0

S_BIT

I0.3

S_BIT

I0.3

S_BIT

I0.3

182

Swap Bytes Instruction

The Swap Bytes instruction exchanges the most significant byte with the least significant byte of the word IN.

Error conditions that set ENO = 0

H

0006 (indirect address)

S7-200 Instruction Set

Chapter 6

Table 6-63 Valid Operands for the Swap Bytes Instruction

Inputs/Outputs Data Types Operands

IN WORD IW, QW, VW, MW, SMW, SW, T, C, LW,AC, *VD, *LD, *AC

Example: Swap Instructions

Network 1

LD I2.1

SWAP VW50

Swap

VW50

D6 C3

VW50 C3 D6

183

S7-200 Programmable Controller System Manual

String Instructions

String Length

The String Length instruction (SLEN) returns the length of the string specified by IN.

Copy String

The Copy String instruction (SCPY) copies the string specified by IN to the string specified by OUT.

Concatenate String

The Concatenate String instruction (SCAT) appends the string specified by IN to the end of the string specified by

OUT.

SM Bits and ENO

For the String Length, Copy String, and Concatenate String instructions, the following conditions affect ENO.

Error conditions that set ENO = 0

H

0006 (indirect address)

H

0091 (range error)

Table 6-64 Valid Operands for the String Length Instruction

Inputs/Outputs Data Types Operands

IN

OUT

STRING

BYTE

VB, LB, *VD, *LD, *AC, Constant String

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *LD, *AC

Table 6-65 Valid Operands for the Copy String and Concatenate String Instructions

Inputs/Outputs Data Types Operands

IN

OUT

STRING

STRING

VB, LB, *VD, *LD, *AC , Constant String

VB, LB, *VD, *AC, *LD

184

S7-200 Instruction Set

Chapter 6

Example: Concatenate String, Copy String, and String Length Instructions

Network 1 //1. Append the string at “WORLD”

// to the string at VB0

//2. Copy the string at VB0

// to a new string at VB100

//3. Get the length of the string

// that starts at VB100

LD

SCAT

I0.0

“WORLD”, VB0

STRCPY VB0, VB100

STRLEN VB100, AC0

Before executing the program

VB0

6 ’H’ ’E’ ’L’

After executing the program

VB0

11 ’H’ ’E’ ’L’

VB100

11 ’H’ ’E’

AC0

11

’L’

’L’

’L’

’L’

’O’

VB6

’ ’

’O’

’O’

’ ’

’ ’

’W’ ’O’ ’R’ ’L’

’W’ ’O’ ’R’ ’L’

VB11

’D’

VB111

’D’

185

S7-200 Programmable Controller System Manual

Copy Substring from String

The Copy Substring from String instruction (SSCPY) copies the specified number of characters N from the string specified by IN, starting at the index INDX, to a new string specified by OUT.

Error conditions that set ENO = 0

H

0006 (indirect address)

H

0091 (range error)

H

009B (index=0)

Table 6-66 Valid Operands for the Copy Substring from String Instructions

Inputs/Outputs Data Types

IN STRING

OUT

INDX, N

STRING

BYTE

Operands

VB, LB, *VD, *LD, *AC, Constant String

VB, LB, *VD, *LD, *AC

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *LD, *AC, Constant

Example: Copy Substring Instruction

Network 1 //Starting at the seventh character in

//the string at VB0, copy 5 characters

//to a new string at VB20

LD I0.0

SSCPY VB0, 7, 5, VB20

Before executing the program

VB0

11 ’H’ ’E’ ’L’ ’L’ ’O’

After executing the program

VB20

5 ’W’ ’O’ ’R’ ’L’

VB25

’D’

’ ’ ’W’ ’O’ ’R’ ’L’

VB11

’D’

186

S7-200 Instruction Set

Chapter 6

Find String Within String

The Find String Within String instruction (SFND) searches for the first occurrence of the string IN2 within the string IN1.

The search begins at the starting position specified by OUT

(which must be in range 1 through the string length). If a sequence of characters is found that matches exactly the string IN2, the position of the first character in the sequence for the string is written to OUT. If the string IN2 was not found in the string IN1, the instruction OUT is set to 0.

Error conditions that set ENO = 0

H

0006 (indirect address)

H

0091 (range error)

H

009B (index=0)

Find First Character Within String

The Find First Character Within String instruction (CFND) searches the string IN1 for the first occurrence of any character from the character set described in the string IN2.

The search begins at starting position OUT (which must be in range 1 through the string length). If a matching character is found, the position of the character is written to OUT. If no matching character is found, OUT is set to 0.

Error conditions that set ENO = 0

H

0006 (indirect address)

H

0091 (range error)

H

009B (index=0)

Table 6-67 Valid Operands for Find String Within String and Find First Character Within String

Instructions

Inputs/Outputs Data Types Operands

IN1, IN2

OUT

STRING

BYTE

VB, LB, *VD, *LD, *AC, Constant String

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *LD, *AC

187

S7-200 Programmable Controller System Manual

Example: Find String Within String Instruction

The following example uses a string stored at VB0 as a command for turning a pump on or off. A string ’On’ is stored at VB20, and a string ’Off’ is stored at VB30. The result of the Find String Within String instruction is stored in AC0 (the OUT parameter). If the result is not 0, then the string ’On’ was found in the command string

(VB12).

Network 1 //1. Set AC0 to 1.

// (AC0 is used as the OUT parameter.)

//2. Search the string at VB0 for the string

// at VB20 (’On’), starting at the first

// position (AC0=1).

LD I0.0

MOVB 1, AC0

SFND VB0, VB20, AC0

VB0

12 ’T’ ’u’

VB20

2

If the string in VB20 is found:

’O’

AC0

VB22

’n’

11

’r’ ’n’ ’ ’ ’P’

VB30

3 ’O’ ’f’

’u’ ’m’ ’p’ ’ ’ ’O’

VB12

’n’

VB33

’f’

If the string in VB20 is not found:

AC0

0

Example: Find Character Within String Instruction

In the following example, a string stored at VB0 contains the temperature. The string at VB20 stores all the numeric characters (and the + and —) that can identify a temperature in a string. The sample program finds the starting position for a number in that string and then converts the numeric characters into a real number.

VD200 stores the real-number value of the temperature.

Network 1 //1. Set AC0 to 1.

// (AC0 is used as the OUT parameter

// and points to the first position of the string.)

//2. Find the numeric character

// in the string at VB0.

//3. Convert the string to a real number.

LD I0.0

MOVB 1, AC0

CFND VB0, VB20, AC0

STR VB0, AC0, VD200

VB0

11 ’T’ ’e’ ’m’ ’p’ ’ ’

VB20

12 ’1’ ’2’ ’3’ ’4’ ’5’

Starting position of the temperature stored in VB0:

AC0

’ ’

’6’

7

’9’

’7’

’8’ ’.’ ’6’

VB11

’F’

’8’ ’9’ ’0’ ’+’

Real-number value of the temperature:

VD200

98.6

VB32

’—’

188

S7-200 Instruction Set

Chapter 6

Table Instructions

Add To Table

The Add To Table instruction adds word values (DATA) to a table (TBL). The first value of the table is the maximum table length (TL). The second value is the entry count (EC), which specifies the number of entries in the table. New data are added to the table after the last entry. Each time new data are added to the table, the entry count is incremented.

A table can have up to 100 data entries.

Error conditions that set ENO = 0

H

SM1.4 (table overflow)

H

0006 (indirect address)

H

0091 (operand out of range)

SM bits affected:

H

SM1.4 is set to 1 if you try to overfill the table

Table 6-68 Valid Operands for the Table Instructions

Inputs/Outputs Data Types Operands

DATA

TBL

INT

WORD

IW, QW, VW, MW, SMW, SW, T, C, LW, AC, AIW, *VD, *LD, *AC, Constant

IW, QW, VW, MW, SMW, SW, T, C, LW, *VD, *LD, *AC

Example: Add to Table Instruction

Network 1 //Load maximum table length

LD SM0.1

MOVW +6, VW200

Network 2

LD

ATT

I0.0

VW100, VW200

Before execution of ATT

VW100 1234

VW200

VW202

VW204

VW206

VW208

VW210

VW212

VW214

0006

0002

5431

8942 xxxx xxxx xxxx xxxx

TL (max. no. of entries)

EC (entry count) d0 (data 0) d1 (data 1)

After execution of ATT

VW200

VW202

VW204

VW206

VW208

VW210

VW212

VW214

0006

0003

5431

8942

1234 xxxx xxxx xxxx

TL (max. no. of entries)

EC (entry count) d0 (data 0) d1 (data 1) d2 (data 2)

189

S7-200 Programmable Controller System Manual

First-In-First-Out and Last-In-First-Out

A table can have up to 100 data entries.

First-In-First-Out

The First-In-First-Out instruction (FIFO) moves the oldest (or first) entry in a table to the output memory address by removing the first entry in the table (TBL) and moving the value to the location specified by DATA. All other entries of the table are shifted up one location. The entry count in the table is decremented for each instruction execution.

Last-In-First-Out

The Last-In-First-Out instruction (LIFO) moves the newest

(or last) entry in the table to the output memory address by removing the last entry in the table (TBL) and moving the value to the location specified by DATA. The entry count in the table is decremented for each instruction execution.

Error conditions that set ENO = 0

H

SM1.5 (empty table)

H

0006 (indirect address)

H

0091 (operand out of range)

SM bits affected:

H

SM1.5 is set to 1 if you try to remove an entry from an empty table

Table 6-69 Valid Operands for the First-In-First-Out and Last-In-First-Out Instructions

Inputs/Outputs Data Types

TBL WORD

DATA INT

Operands

IW, QW, VW, MW, SMW, SW, T, C, LW, *VD, *LD, *AC

IW, QW, VW, MW, SMW, SW, T, C, LW, AC, AQW, *VD, *LD, *AC

Example: First-In-First-Out Instruction

Network 1

LD

FIFO

I4.1

VW200, VW400

Before execution of FIFO

VW200

VW202

VW204

VW206

VW208

VW210

VW212

VW214

0006

0003

5431

8942

1234 xxxx xxxx xxxx

TL (max. no. of entries)

EC (entry count) d0 (data 0) d1 (data 1) d2 (data 2)

VW400

VW200

VW202

VW204

VW206

VW208

VW210

VW212

VW214

5431

0006

0002

8942

1234 xxxx xxxx xxxx xxxx

After execution of FIFO

TL (max. no. of entries)

EC (entry count) d0 (data 0) d1 (data 1)

190

S7-200 Instruction Set

Chapter 6

Example: Last-In-First-Out Instruction

Before execution of LIFO

VW200

VW202

VW204

VW206

VW208

VW210

VW212

VW214

0006

0003

5431

8942

1234 xxxx xxxx xxxx

TL (max. no. of entries)

EC (entry count) d0 (data 0) d1 (data 1) d2 (data 2)

Network 1

LD

LIFO

I0.1

VW200, VW300

VW300

VW200

VW202

VW204

VW206

VW208

VW210

VW212

VW214

1234

0006

0002

5431

8942 xxxx xxxx xxxx xxxx

After execution of LIFO

TL (max. no. of entries)

EC (entry count) d0 (data 0) d1 (data 1)

191

S7-200 Programmable Controller System Manual

Memory Fill

The Memory Fill instruction (FILL) writes N consecutive words, beginning at address OUT, with the word value contained in address IN.

N has a range of 1 to 255.

Error conditions that set ENO = 0

H

0006 (indirect address)

H

0091 (operand out of range)

Table 6-70 Valid Operands for the Memory Fill Instruction

Inputs/Outputs Data Types Operands

IN

N

OUT

INT

BYTE

INT

IW, QW, VW, MW, SMW, SW, T, C, LW, AC, AIW, *VD, *LD, *AC, Constant

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *LD, *AC, Constant

IW, QW, VW, MW, SMW, SW, T, C, LW, AQW, *VD, *LD, *AC

Example: Memory Fill Instruction

Network 1

LD

FILL

I2.1

+0, VW200, 10

IN

0

FILL

VW200

0

VW202

0

. . .

VW218

0

192

S7-200 Instruction Set

Chapter 6

Table Find

The Table Find instruction (FND) searches a table for data that matches certain criteria. The Table Find instruction searches the table TBL, starting with the table entry INDX, for the data value or pattern PTN that matches the search criteria defined by CMD. The command parameter CMD is given a numeric value of 1 to 4 that corresponds to =, <>, <, and >, respectively.

If a match is found, the INDX points to the matching entry in the table. To find the next matching entry, the INDX must be incremented before invoking the Table Find instruction again. If a match is not found, the INDX has a value equal to the entry count.

A table can have up to 100 data entries. The data entries

(area to be searched) are numbered from 0 to a maximum value of 99.

Error conditions that set ENO = 0

H

0006 (indirect address)

H

0091 (operand out of range)

Table 6-71 Valid Operands for the Table Find Instruction

Inputs/Outputs Data Types Operands

TBL

PTN

INDX

CMD

WORD

INT

WORD

BYTE

IW, QW, VW, MW, SMW, T, C, LW, *VD, *LD, *AC

IW, QW, VW, MW, SMW, SW, T, C, LW, AC, AIW, *VD, *LD, *AC, Constant

IW, QW, VW, MW, SMW, SW, T, C, LW, AC, *VD, *LD, *AC

(Constant) 1: Equal (=), 2: Not Equal (<>), 3: Less Than (<),

4: Greater Than (>)

Tip

When you use the Table Find instruction with tables generated with the Add to Table,

Last-In-First-Out, and First-In-First-Out instructions, the entry count and the data entries correspond directly. The maximum-number-of-entries word required for the Add to Table,

Last-In-First-Out, or First-In-First-Out instructions is not required by the Table Find instruction.

See Figure 6-36.

Consequently, you should set the TBL operand of a Find instruction to one-word address (two bytes) higher than the TBL operand of a corresponding the Add to Table, Last-In-First-Out, or

First-In-First-Out instruction.

Table format for ATT, LIFO, and FIFO

VW200

VW202

VW204

VW206

VW208

VW210

VW212

VW214

0006

0006 xxxx xxxx xxxx xxxx xxxx xxxx

TL (max. no. of entries)

EC (entry count) d0 (data 0) d1 (data 1) d2 (data 2) d3 (data 3) d4 (data 4) d5 (data 5)

Table format for TBL_FIND

VW202

VW204

VW206

VW208

VW210

VW212

VW214

0006 xxxx xxxx xxxx xxxx xxxx xxxx

EC (entry count) d0 (data 0) d1 (data 1) d2 (data 2) d3 (data 3) d4 (data 4) d5 (data 5)

Figure 6-36 Different Table Formats between the Table Find Instruction and the ATT, LIFO, and FIFO

Instructions

193

S7-200 Programmable Controller System Manual

Example: Table Find Instruction

Network 1

LD

FND=

I2.1

VW202, 16#3130, AC1

VW202

VW204

VW206

VW208

VW210

VW212

VW214

When I2.1 is on, search the table for a value equal to 3130 HEX.

0006

3133

4142

3130

3030

3130

4541

EC (entry count) d0 (data 0) d1 (data 1) d2 (data 2) d3 (data 3) d4 (data 4) d5 (data 5)

If the table was created using ATT,

LIFO, and FIFO instructions, VW200 contains the maximum number of allowed entries and is not required by the Find instructions.

AC1 0

Execute table search

AC1 2

AC1 must be set to 0 to search from the top of table.

AC1 contains the data entry number corresponding to the first match found in the table (d2).

AC1 3

Execute table search

AC1 4

Increment the INDX by one, before searching the remaining entries of the table.

AC1 contains the data entry number corresponding to the second match found in the table (d4).

AC1

AC1

5

Execute table search

AC1 6

0

Increment the INDX by one, before searching the remaining entries of the table.

AC1 contains a value equal to the entry count. The entire table has been searched without finding another match.

Before the table can be searched again, the INDX value must be reset to 0.

194

S7-200 Instruction Set

Chapter 6

Example: Creating a Table

The following program creates a table with 20 entries. The first memory location of the table contains the length of the table (in this case 20 entries). The second memory location shows the current number of table entries. The other locations contain the entries. A table can have up to 100 entries. It does not include the parameters defining the maximum length of the table or the actual number of entries (here VW0 and VW2).

The actual number of entries in the table (here VW2) is automatically incremented or decremented by the

CPU with every command.

Before you work with a table, assign the maximum number of table entries. Otherwise, you cannot make entries in the table. Also, be sure that all read and write commands are activated with edges.

To search the table, the index (VW106) must set to 0 before doing the find. If a match is found, the index will have the table entry number, but if no match is found, the index will match the current entry count for the table

(VW2).

Network 1

LD

MOVW

Network 2

//Create table with 20 entries starting

//with memory location 4.

//1. On the first scan, define the

//maximum length of the table.

SM0.1

+20, VW0

//Reset table with input I0.0

//On the rising edge of I0.0, fill

//memory locations from VW2 with ”+0” .

LD

EU

FILL

Network 3

I0.0

+0, VW2, 21

//Write value to table with input I0.1

//On the rising edge of I0.1, copy

//value of memory location

//VW100 to table.

LD

EU

ATT

I0.1

VW100, VW0

Network 4 //Read first table value with

//input I0.2. Move the last table

//value to location VW102.

//This reduces the number of entries.

//On the rising edge of I0.2,

//Move last table value to VW102

LD

EU

LIFO

I0.2

VW0, VW102

Network 5 //Read last table value with

//input I0.3. Move the first table

//value to location VW102.

//This reduces the number of entries.

//On the rising edge of I0.0,

//Move first table value to VW104

LD

EU

FIFO

I0.3

VW0, VW104

Network 6 //Search table for the first location

//that has a value of 10.

//1. On the rising edge of I0.4,

// reset index pointer.

//2. Find a table entry that equals 10.

LD

EU

I0.4

MOVW +0, VW106

FND= VW2, +10, VW106

195

S7-200 Programmable Controller System Manual

Timer Instructions

SIMATIC Timer Instructions

On-Delay Timer

Retentive On-Delay Timer

The On-Delay Timer (TON) and Retentive On-Delay Timer

(TONR) instructions count time when the enabling input is on. The timer number (Txx) determines the resolution of the timer, and the resolution is now shown in the instruction box.

Off-Delay Timer

The Off-Delay Timer (TOF) is used to delay turning an output off for a fixed period of time after the input turns off.

The timer number (Txx) determines the resolution of the timer, and the resolution is now shown in the instruction box.

Table 6-72 Valid Operands for the SIMATIC Timer Instructions

Inputs/Outputs Data Types

Txx WORD

IN

PT

BOOL

INT

Operands

Constant (T0 to T255)

I, Q, V, M, SM, S, T, C, L, Power Flow

IW, QW, VW, MW, SMW, SW, T, C, LW, AC, AIW, *VD, *LD, *AC, Constant

Tip

You cannot share the same timer number (Txx) for an off-delay timer (TOF) and an on-delay timer (TON). For example, you cannot have both a TON T32 and a TOF T32.

As shown in Table 6-73, the three types of timers perform different types of timing tasks:

—

—

—

You can use a TON for timing a single interval.

You can use a TONR for accumulating a number of timed intervals.

You can use a TOF for extending time past an off (or false) condition, such as for cooling a motor after it is turned off.

Table 6-73 Operations of the Timer Instructions

Type

TON

TONR

TOF

Current >= Preset

Timer bit on

Current continues counting to 32,767

Timer bit on

Current continues counting to 32,767

Timer bit off

Current = Preset, stops counting

State of the Enabling Input (IN)

ON: Current value counts time

OFF: Timer bit off, current value = 0

ON: Current value counts time

OFF: Timer bit and current value maintain last state

ON: Timer bit on, current value = 0

OFF: Timer counts after on-to-off transition

1

Power Cycle/First Scan

Timer bit off

Current value = 0

Timer bit off

Current value can be maintained

Timer bit off

1

Current value = 0

The retentive timer current value can be selected for retention through a power cycle. See Chapter 4 for information about memory retention for the S7-200 CPU.

196

S7-200 Instruction Set

Chapter 6

Programming

Tips

Refer to the Programming Tips on the documentation CD for a sample program that uses the on-delay timer (TON). See Tip 31

The TON and TONR instructions count time when the enabling input is on. When the current value is equal to or greater than the preset time, the timer bit is on.

—

—

The current value of a TON timer is cleared when the enabling input is off, whereas the current value of the TONR timer is maintained when the input is off.

You can use the TONR timer to accumulate time when the input turns on and off. Use the

Reset instruction (R) to clear the current value of the TONR.

—

Both the TON and the TONR timers continue counting after the preset is reached, and they stop counting at the maximum value of 32,767.

The TOF instruction is used to delay turning an output off for a fixed period of time after the input turns off. When the enabling input turns on, the timer bit turns on immediately, and the current value is set to 0. When the input turns off, the timer counts until the elapsed time reaches the preset time.

—

—

—

When the preset is reached, the timer bit turns off and the current value stops incrementing; however, if the input turns on again before the TOF reaches the preset value, the timer bit remains on.

The enabling input must make an on-to-off transition for the TOF to begin counting time intervals.

If the TOF timer is inside an SCR region and the SCR region is inactive, then the current value is set to 0, the timer bit is turned off, and the current value does not increment.

Tip

You can reset a TONR only by using the Reset (R) instruction. You can also use the Reset instruction to reset any TON or TOF. The Reset instruction performs the following operations:

H

Timer Bit = off

H

Timer Current = 0

After a reset, TOF timers require the enabling input to make the transition from on to off in order for the timer to restart.

Determining the Resolution of the Timer

Timers count time intervals. The resolution (or time base) of the timer determines the amount of time in each interval. For example, a TON with a resolution of 10 ms counts the number of 10-ms intervals that elapse after the TON is enabled: a count of 50 on a 10-ms timer represents 500 ms.

The SIMATIC timers are available in three resolutions: 1 ms, 10 ms, and 100 ms. As shown in

Table 6-74, the timer number determines the resolution of the timer.

197

S7-200 Programmable Controller System Manual

Tip

To guarantee a minimum time interval, increase the preset value (PV) by 1. For example: To ensure a minimum timed interval of at least 2100 ms for a 100-ms timer, set the PV to 22.

Table 6-74 Timer Numbers and Resolutions

(

Timer Type

TONR

(retentive)

TON, TOF

Resolution

1 ms

10 ms

100 ms

1 ms

10 ms

100 ms

Maximum Value

32.767 s

327.67 s

3276.7 s

32.767 s

327.67 s

3276.7 s

(0.546 min.)

(5.46 min.)

(54.6 min.)

(0.546 min.)

(5.46 min.)

(54.6 min.)

Timer Number

T0, T64

T1 to T4, T65 to T68

T5 to T31, T69 to T95

T32, T96

T33 to T36, T97 to T100

T37 to T63, T101 to T255

Understanding How Resolution Affects the Timer Action

For a timer with a resolution of 1 ms, the timer bit and the current value are updated asynchronous to the scan cycle. For scans greater than 1 ms, the timer bit and the current value are updated multiple times throughout the scan.

For a timer with a resolution of 10 ms, the timer bit and the current value are updated at the beginning of each scan cycle. The timer bit and current value remain constant throughout the scan, and the time intervals that accumulate during the scan are added to the current value at the start of each scan.

For a timer with a resolution of 100 ms, the timer bit and current value are updated when the instruction is executed; therefore, ensure that your program executes the instruction for a 100-ms timer only once per scan cycle in order for the timer to maintain the correct timing.

Example: SIMATIC On-Delay Timer

Network 1

LD

TON

//100 ms timer T37 times out after

//(10 x 100 ms = 1s)

//I0.0 ON=T37 enabled,

//I0.0 OFF=disable and reset T37

I0.0

T37, +10

Network 2

LD

=

T37

Q0.0

//T37 bit is controlled by timer T37

Timing Diagram

I0.0

1s

Maximum value = 32767 current = 10

T37 (current)

T37 (bit)

Q0.0

198

S7-200 Instruction Set

Chapter 6

Tip

To guarantee that the output of a self-resetting timer is turned on for one scan each time the timer reaches the preset value, use a normally closed contact instead of the timer bit as the enabling input to the timer.

Example: SIMATIC Self-Resetting On-Delay Timer

Network 1 //10 ms timer T33 times out after

//(100 x 10 ms = 1s)

//M0.0 pulse is too fast to monitor

//with Status view

LDN

TON

Network 2

M0.0

T33, +100

//Comparison becomes true at a

//rate that is visible with Status view.

//Turn on Q0.0 after (40 x 10 ms)

//for a 40% OFF/60% ON waveform

LDW>= T33, +40

= Q0.0

Network 3 //T33 (bit) pulse too fast to monitor

//with Status view

//Reset the timer through M0.0 after

//the (100 x 10 ms) period

LD

=

T33

M0.0

Timing Diagram

current = 100 current = 40

T33 (current)

0.

4s

0.

6s

T33 (bit)

M0.0

Q0.0

Example: SIMATIC Off-Delay Timer

Network 1

LD

TOF

//10-ms timer T33 times out after (100 x 10 ms = 1s)

//I0.0 ON—to—OFF=T33 enabled

//I0.0 OFF—to—ON=disable and reset T33

I0.0

T33, +100

Network 2

LD

=

T33

Q0.0

//Timer T33 controls Q0.0 through timer contact T33

Timing Diagram

I0.0

current = 100

T33 (current)

T33 (bit) Q0.0

1 s 0.8 s

199

S7-200 Programmable Controller System Manual

Example: SIMATIC Retentive On-Delay Timer

Network 1

LD I0.0

TONR T1, +100

//10 ms TONR timer T1 times out at

//PT=(100 x 10 ms=1s)

Network 2

LD

=

T1

Q0.0

//T1 bit is controlled by timer T1.

//Turns Q0.0 on after the timer accumulates a total

//of 1 second

Network 3

LD

R

I0.1

T1, 1

//TONR timers must be reset by a Reset instruction

//with a T address.

//Resets timer T1 (current and bit) when I0.1 is on.

Timing Diagram

I0.0

0.6 s 0.4 s 1 s

100 (Current)

60 (Current)

T1 (Current)

T1 (bit), Q0.0

I0.1(Reset)

200

S7-200 Instruction Set

Chapter 6

IEC Timer Instructions

On-Delay Timer

The On-Delay Timer (TON) instruction counts time when the enabling input is on.

Off-Delay Timer

The Off-Delay Timer (TOF) delays turning an output off for a fixed period of time after the input turns off.

Pulse Timer

The Pulse Timer (TP) generates pulses for a specific duration.

Table 6-75 Valid Operands for the IEC Timer Instructions

Inputs/Outputs Data Types

Txx

IN

PT

Q

ET

Operands

TON, TOF, TP Constant (T32 to T63, T96 to T255)

BOOL

INT

BOOL

INT

I, Q, V, M, SM, S, T, C, L, Power Flow

IW, QW, VW, MW, SMW, SW, LW, AC, AIW, *VD, *LD, *AC, Constant

I, Q, V, M, SM, S, L

IW, QW, VW, MW, SMW, SW, LW, AC, AQW, *VD, *LD, *AC

Tip

You cannot share the same timer numbers for TOF, TON, and TP. For example, you cannot have both a TON T32 and a TOF T32.

—

—

The TON instruction counts time intervals up to the preset value when the enabling input

(IN) becomes true. When the elapsed time (ET) is equal to the Preset Time (PT), the timer output bit (Q) turns on. The output bit resets when the enabling input turns off. When the preset is reached, timing stops and the timer is disabled.

The TOF instruction delays setting an output to off for a fixed period of time after the input turns off. It times up to the preset value when the enabling input (IN) turns off. When the elapsed time (ET) is equal to the preset time (PT), the timer output bit (Q) turns off. When the preset is reached, the timer output bit turns off and the elapsed time is maintained until the enabling input makes the transition to on. If the enabling input sets the transition to off for a period of time shorter than the preset time, the output bit remains on.

—

The TP instruction generates pulses for a specific duration. As the enabling input (IN) turns on, the output bit (Q) turns on. The output bit remains on for the pulse specified within the preset time (PT). When the elapsed time (ET) reaches preset (PT), the output bit turns off.

The elapsed time is maintained until the enabling input turns off. When the output bit turns on, it remains on until the pulse time has elapsed.

Each count of the current value is a multiple of the time base. For example, a count of 50 on a

10-ms timer represents 500 ms. The IEC timers (TON, TOF, and TP) are available in three resolutions. The resolution is determined by the timer number, as shown in Table 6-76.

Table 6-76 Resolution of the IEC Timers

Resolution

1 ms

10 ms

100 ms

Maximum Value

32.767 s

327.67 s

3276.7 s

(0.546 minutes)

(5.46 minutes)

(54.6 minutes)

Timer Number

T32, T96

T33 to T36, T97 to T100

T37 to T63, T101 to T255

201

S7-200 Programmable Controller System Manual

Example: IEC On-Delay Timer Instruction

Timing Diagram

Input

VW100

(current)

Output (Q)

PT = 3

Example: IEC Off-Delay Timer Instruction

Timing Diagram

Input

VW100

(current)

Output (Q)

PT = 3

Example: IEC Pulse Timer Instruction

Timing Diagram

Input

VW100

(current)

Output

PT = 3

PT = 3

PT = 3

202

Interval Timers

Beginning Interval Time

The Beginning Interval Time (BITIM) instruction reads the current value of the built-in 1 millisecond counter and stores the value in OUT. The maximum timed interval for a

DWORD millisecond value is 2 raised to the 32 power or

49.7 days.

Calculate Interval Time

The Calculate Interval Time (CITIM) instruction calculates the time difference between the current time and the time provided in IN. The difference is stored in OUT. The maximum timed interval for a DWORD millisecond value is 2 raised to the 32 power or 49.7 days. CITIM automatically handles the one millisecond timer rollover that occurs within the maximum interval, depending on when the BITIM instruction was executed.

S7-200 Instruction Set

Chapter 6

Table 6-77 Valid Operands for the Interval Timer Instructions

Inputs/Outputs Data Types

IN

OUT

DWORD

DWORD

Operands

VD, ID, QD, MD, SMD, SD, LD, HC, AC, *VD, *LD, *AC

VD, ID, QD, MD, SMD, SD, LD, AC, *VD, *LD, *AC

Example: SIMATIC Beginning Interval Time and Calculate Interval Time

Network 1 //Capture the time that Q0.0 turned on.

LD

EU

Q0.0

BITIM VD0

Network 2 // Calculate time Q0.0 has been on.

LD Q0.0

CITIM VD0, VD4

203

S7-200 Programmable Controller System Manual

Subroutine Instructions

The Call Subroutine instruction (CALL) transfers control to the subroutine SBR_N. You can use a Call Subroutine instruction with or without parameters. After the subroutine completes its execution, control returns to the instruction that follows the Call Subroutine.

The Conditional Return from Subroutine instruction (CRET) terminates the subroutine based upon the preceding logic.

To add a subroutine, select the

Edit > Insert > Subroutine

menu command.

Error conditions that set ENO = 0

H

0008 (maximum subroutine nesting exceeded)

H

0006 (indirect address)

From the main program, you can nest subroutines (place a subroutine call within a subroutine) to a depth of eight. From an interrupt routine, you cannot nest subroutines.

A subroutine call cannot be placed in any subroutine called from an interrupt routine. Recursion (a subroutine that calls itself) is not prohibited, but you should use caution when using recursion with subroutines.

1

2

Table 6-78 Valid Operands for the Subroutine Instruction

Inputs/Output s

Data Types Operands

SBR_N

IN

IN/OUT

OUT

WORD

BOOL

BYTE

WORD, INT

DWORD, DINT

STRING

BOOL

BYTE

WORD, INT

DWORD, DINT

BOOL

BYTE

WORD, INT

DWORD, DINT

Constant

for CPU 221, CPU 222, CPU 224

:

for CPU 224XP and CPU 226

0 to 63

0 to 127

V, I, Q, M, SM, S, T, C, L, Power Flow

VB, IB, QB, MB, SMB, SB, LB, AC, *VD, *LD, *AC

1

, constant

VW, T, C, IW, QW, MW, SMW, SW, LW, AC, AIW, *VD, *LD, *AC

1 constant

VD, ID, QD, MD, SMD, SD, LD, AC, HC, *VD, *LD, *AC

1

,

&VB, &IB, &QB, &MB, &T, &C, &SB, &AI, &AQ, &SMB, constant

,

*VD, *LD, *AC, constant

V, I, Q, M, SM

2

, S, T, C, L

VB, IB, QB, MB, SMB

2

, SB, LB, AC, *VD, *LD, *AC

1

VW, T, C, IW, QW, MW, SMW

2

VD, ID, QD, MD, SMD

2

, SW, LW, AC, *VD, *LD, *AC

1

, SD, LD, AC, *VD, *LD, *AC

1

V, I, Q, M, SM

2

, S, T, C, L

VB, IB, QB, MB, SMB

2

, SB, LB, AC, *VD, *LD, *AC

1

VW, T, C, IW, QW, MW, SMW

2

VD, ID, QD, MD, SMD

2

, SW, LW, AC, AQW, *VD, *LD, *AC

1

, SD, LD, AC, *VD, *LD, *AC

1

Must be offset 1 or above

Must be offset 30 or above

Tip

STEP 7—Micro/WIN automatically adds an unconditional return from each subroutine.

When a subroutine is called, the entire logic stack is saved, the top of stack is set to one, all other stack locations are set to zero, and control is transferred to the called subroutine. When this subroutine is completed, the stack is restored with the values saved at the point of call, and control is returned to the calling routine.

Accumulators are common to subroutines and the calling routine. No save or restore operation is performed on accumulators due to subroutine use.

When a subroutine is called more than once in the same cycle, the edge/up, edge/down, timer and counter instructions should not be used.

204

S7-200 Instruction Set

Chapter 6

Calling a Subroutine With Parameters

Subroutines can contain passed parameters. The parameters are defined in the local variable table of the subroutine. The parameters must have a symbol name (maximum of 23 characters), a variable type, and a data type. Sixteen parameters can be passed to or from a subroutine.

The variable type field in the local variable table defines whether the variable is passed into the subroutine (IN), passed into and out of the subroutine (IN_OUT), or passed out of the subroutine

(OUT). Table 6-79 describes the parameter types for a subroutine. To add a parameter entry, place the cursor on the variable type field of the type (IN, IN_OUT, or OUT) that you want to add.

Click the right mouse button to get a menu of options. Select the Insert option and then the Row

Below option. Another parameter entry of the selected type appears below the current entry.

Table 6-79 Parameter Types for a Subroutine

Parameter

IN

IN_OUT

OUT

TEMP

Description

Parameters are passed into the subroutine. If the parameter is a direct address (such as

VB10), the value at the specified location is passed into the subroutine. If the parameter is an indirect address (such as *AC1), the value at the location pointed to is passed into the subroutine. If the parameter is a data constant (16#1234) or an address (&VB100), the constant or address value is passed into the subroutine.

The value at the specified parameter location is passed into the subroutine, and the result value from the subroutine is returned to the same location. Constants (such as 16#1234) and addresses (such as &VB100) are not allowed for input/output parameters.

The result value from the subroutine is returned to the specified parameter location.

Constants (such as 16#1234) and addresses (such as &VB100) are not allowed as output parameters. Since output parameters do not retain the value assigned by the last execution of the subroutine, you must assign values to outputs each time the subroutine is called. Note that the SET and RESET instructions only affect the value of the Boolean operand(s) when power flow is ON.

Any local memory that is not used for passed parameters can be used for temporary storage within the subroutine.

As shown in Figure 6-37, the data type field in the local variable table defines the size and format of the parameter. The parameter types are listed below:

—

—

—

—

—

—

BOOL: This data type is used for single bit inputs and outputs. IN3 in the following example is a Boolean input.

BYTE, WORD, DWORD: These data types identify an unsigned input or output parameter of 1, 2, or 4 bytes, respectively.

INT, DINT: These data types y g parameters of 2 or 4 bytes, respectively.

p b p

Figure 6-37 Local Variable Table

REAL: This data type identifies a single precision (4 byte) IEEE floating-point value.

STRING: This data type is used as a four-byte pointer to a string.

Power Flow: Boolean power flow is allowed only for bit (Boolean) inputs. This declaration tells STEP 7-Micro/WIN that this input parameter is the result of power flow based on a combination of bit logic instructions. Boolean power flow inputs must appear first in the local variable table before any other type input. Only input parameters are allowed to be used this way. The enable input (EN) and the IN1 inputs in the following example use Boolean logic.

205

S7-200 Programmable Controller System Manual

Example: Subroutine Call

There are two STL examples provided. The first set of STL instructions can be displayed only in the STL editor since the BOOL parameters used as power flow inputs are not saved to L memory.

The second set of STL instructions can be displayed also in the LAD and FBD editors because L memory is used to save the state of the BOOL inputs parameters that are shown as power flow inputs in LAD and FBD.

STL only:

Network 1

LD

CALL

I0.0

SBR_0, I0.1, VB10, I1.0, &VB100, *AC1, VD200

To display correctly in LAD and FBD:

Network 1

LD

=

LD

=

LD

CALL

VD200

I0.0

L60.0

I0.1

L63.7

L60.0

SBR_0, L63.7, VB10, I1.0, &VB100, *AC1,

Address parameters such as IN4 (&VB100) are passed into a subroutine as a DWORD (unsigned double word) value. The type of a constant parameter must be specified for the parameter in the calling routine with a constant descriptor in front of the constant value. For example, to pass an unsigned double word constant with a value of 12,345 as a parameter, the constant parameter must be specified as DW#12345. If the constant describer is omitted from the parameter, the constant can be assumed to be a different type.

There are no automatic data type conversions performed on the input or output parameters. For example, if the local variable table specifies that a parameter has the data type REAL, and in the calling routine a double word (DWORD) is specified for that parameter, the value in the subroutine will be a double word.

When values are passed to a subroutine, they are placed into the local memory of the subroutine.

The left-most column of the local variable table shows the local memory address for each passed parameter. Input parameter values are copied to the subroutine’s local memory when the subroutine is called. Output parameter values are copied from the subroutine’s local memory to the specified output parameter addresses when the subroutine execution is complete.

The data element size and type are represented in the coding of the parameters. Assignment of parameter values to local memory in the subroutine is as follows:

—

—

—

Parameter values are assigned to local memory in the order specified by the call subroutine instruction with parameters starting at L.0.

One to eight consecutive bit parameter values are assigned to a single byte starting with

Lx.0 and continuing to Lx.7.

Byte, word, and double word values are assigned to local memory on byte boundaries (LBx,

LWx, or LDx).

In the Call Subroutine instruction with parameters, parameters must be arranged in order with input parameters first, followed by input/output parameters, and then followed by output parameters.

If you are programming in STL, the format of the CALL instruction is:

CALL subroutine number, parameter 1, parameter 2, … , parameter

206

S7-200 Instruction Set

Chapter 6

R

0

S

B

Example: Subroutine and Return from Subroutine Instructions

I

N

M

A

Network 1

LD

CALL

//On the first scan, call subroutine 0

//for initialization.

SM0.1

SBR_0

Network 1

LD

CRET

//You can use a conditional return to leave

//the subroutine before the last network.

M14.3

Network 2 //This network will be skipped if M14.3 is on.

LD SM0.0

MOVB 10, VB0

R

0

S

B

Example: Subroutine Call with strings

I

N

M

A

This example copies a different string literal to a unique address depending upon the given input. The unique address of this string is saved. The string address is then passed to the subroutine by using an indirect address. The data type of the subroutine input parameter is string. The subroutine then moves the string to a different location.

A string literal can also be passed to the subroutine. The string reference inside the subroutine is always the same.

Network 1 //

LD I0.0

SSCPY “string1”, VB100

AENO

MOVD &VB100, VD0

Network2 //

LD I0.1

SSCPY “string2”, VB200

AENO

MOVD &VB200, VD0

Network3 //

LD

CALL

I0.2

SBR_0, *VD0

Network 1 //

LD SM0.0

SSCPY *LD0, VB300

207

S7-200 Programmable Controller System Manual

208

Communicating over a Network

The S7-200 is designed to solve your communications and networking needs by supporting not only the simplest of networks but also supporting more complex networks. The S7-200 also provides tools that allow you to communicate with other devices, such as printers and weigh scales which use their own communications protocols.

STEP 7—Micro/WIN makes setting up and configuring your network simple and straightforward.

In This Chapter

Understanding the Basics of S7-200 Network Communications . . . . . . . . . . . . . . . . . . . . . . . . .

Selecting the Communications Protocol for Your Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Installing and Removing Communications Interfaces

Building Your Network

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Creating User-Defined Protocols with Freeport Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Using Modems and STEP 7—Micro/WIN with Your Network . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Advanced Topics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Configuring the RS-232/PPI Multi-Master Cable for Remote Operation . . . . . . . . . . . . . . . . . . .

226

228

233

239

210

214

220

221

209

S7-200 Programmable Controller System Manual

Understanding the Basics of S7-200 Network Communications

Selecting the Communication Interface for Your Network

The S7-200 supports many different types of communication networks. The selection of a network is performed within the Set PG/PC Interface property dialog. A selected network is referred to as an Interface. The different types of interfaces available to access these communication networks are:

—

—

PPI Multi-Master cables

CP communication cards

—

Ethernet communication cards

To select the communication interface for

STEP 7—Micro/WIN, you perform the following steps. See Figure 7-1.

1.

2.

1. Double-click the icon in the Communications

Setup window.

2. Select the interface parameter for

STEP 7—Micro/WIN.

PPI Multi-Master Cables

The S7-200 supports communication through two different types of PPI Multi-Master cables. These cable types permit communication through either an

RS-232 or a USB interface.

As shown in Figure 7-2, selecting the PPI

Multi-Master cable type is simple. You perform the following steps:

1. Click the Properties button on the Set PG/PC

Interface property page.

2. Click the Local Connection tab on the

Properties page.

3. Select the USB or the desired COM port .

Figure 7-1 STEP 7—Micro/WIN

Communications Interface

1.

2.

3.

Figure 7-2 PPI Multi-Master Cable Selection

Tip

Please note that only one USB cable can be used at a time.

Tip

Examples in this manual use the RS-232/PPI Multi-Master cable. The RS-232/PPI Multi-Master cable replaces the previous PC/PPI cable. A USB/PPI Multi-Master cable is also available.

Refer to Appendix E for order numbers.

210

Communicating over a Network

Chapter 7

Using Master and Slave Devices on a PROFIBUS Network

The S7-200 supports a master-slave network and can function as either a master or a slave in a

PROFIBUS network, while STEP 7—Micro/WIN is always a master.

Masters

A device that is a master on a network can initiate a request to another device on the network. A master can also respond to requests from other masters on the network. Typical master devices include STEP 7—Micro/WIN, human-machine interface devices such as a TD 200, and S7-300 or

S7-400 PLCs. The S7-200 functions as a master when it is requesting information from another

S7-200 (peer-to-peer communications).

Slaves

A device that is configured as a slave can only respond to requests from a master device; a slave never initiates a request. For most networks, the S7-200 functions as a slave. As a slave device, the S7-200 responds to requests from a network master device, such as an operator panel or

STEP 7—Micro/WIN.

Setting the Baud Rate and Network Address

The speed that data is transmitted across the network is the baud rate, which is typically measured in units of kilobaud (kbaud) or megabaud (Mbaud). The baud rate measures how much data can be transmitted within a given amount of time. For example, a baud rate of 19.2 kbaud describes a transmission rate of 19,200 bits per second.

Every device that communicates over a given network must be configured to transmit data at the same baud rate.

Therefore, the fastest baud rate for the network is determined by the slowest device connected to the network.

Table 7-1 Baud Rates Supported by the

S7-200

Network

Standard Network

Using an EM 277

Freeport Mode

Baud Rate

9.6 kbaud to 187.5 kbaud

9.6 kbaud to 12 Mbaud

1200 baud to 115.2 kbaud

Table 7-1 lists the baud rates supported by the S7-200.

The network address is a unique number that you assign to each device on the network. The unique network address ensures that the data is transferred to or retrieved from the correct device. The

S7-200 supports network addresses from 0 to 126. For an S7-200 with two ports, each port has a network address. Table 7-2 lists the default (factory) settings for the S7-200 devices.

Table 7-2 Default Addresses for S7-200

Devices

S7-200 Device

STEP 7—Micro/WIN

HMI (TD 200, TP, or OP)

S7-200 CPU

Default Address

0

1

2

211

S7-200 Programmable Controller System Manual

Setting the Baud Rate and Network Address for STEP 7—Micro/WIN

You must configure the baud rate and network address for STEP 7—Micro/WIN. The baud rate must be the same as the other devices on the network, and the network address must be unique.

Typically, you do not change the network address (0) for STEP 7—Micro/WIN. If your network includes another programming package, you might need to change the network address for

STEP 7—Micro/WIN.

As shown in Figure 7-3, configuring the baud rate and network address for STEP 7—Micro/WIN is simple. After you click the Communications icon in the Navigation bar, you perform the following steps:

1.

1. Double-click the icon in the Communications

Setup window.

2. Click the Properties button on the Set PG/PC

Interface dialog box.

3. Select the network address for

STEP 7—Micro/WIN.

4. Select the baud rate for STEP 7—Micro/WIN.

2.

3.

4.

Figure 7-3 Configuring STEP 7—Micro/WIN

Setting the Baud Rate and Network Address for the S7-200

You must also configure the baud rate and network address for the S7-200. The system block of the S7-200 stores the baud rate and network address. After you select the parameters for the

S7-200, you must download the system block to the S7-200.

The default baud rate for each S7-200 port is

9.6 kbaud, and the default network address is 2.

As shown in Figure 7-4, use STEP 7—Micro/WIN to set the baud rate and network address for the

S7-200. After you select the System Block icon in the Navigation bar or select the

View > Component

> System Block

menu command, you perform the following steps:

1. Select the network address for the S7-200.

2. Select the baud rate for the S7-200.

Figure 7-4 Configuring the S7-200 CPU

Tip

Selection of all baud rate options is permitted. STEP 7—Micro/WIN validates this selection during the download of the System Block. Baud rate selections that would prevent

STEP 7—Micro/WIN from communicating with the S7-200 are prevented from being downloaded.

212

Communicating over a Network

Chapter 7

Setting the Remote Address

Before you can download the updated settings to the S7-200, you must set both the communications

(COM) port of STEP 7—Micro/WIN (local) and the address of the S7-200 (remote) to match the current setting of the remote S7-200. See Figure 7-5.

After you download the updated settings, you may need to reconfigure the PG/PC Interface baud rate setting (if different from the setting used when downloading to the remote S7-200). Refer to Figure

7-3 to configure the baud rate.

Figure 7-5 Configuring STEP 7—Micro/WIN

Searching for the S7-200 CPUs on a Network

You can search for and identify the S7-200 CPUs that are attached to your network. You can also search the network at a specific baud rate or at all baud rates when looking for S7-200s.

Only PPI Multi-Master cables permit searching of all baud rates. This feature is not available if communicating through a CP card. The search starts at the baud rate that is currently selected.

1.

1. Open the Communications dialog box and double-click the Refresh icon to start the search.

2. To search all baud rates, select the Search All

Baud Rates check box.

2.

Figure 7-6 Searching for CPUs on a Network

213

S7-200 Programmable Controller System Manual

Selecting the Communications Protocol for Your Network

The following information is an overview of the protocols supported by the S7-200 CPUs.

—

—

Point-to-Point Interface (PPI)

Multi-Point Interface (MPI)

—

PROFIBUS

Based on the Open System Interconnection (OSI) seven-layer model of communications architecture, these protocols are implemented on a token ring network which conforms to the

PROFIBUS standard as defined in the European Standard EN 50170. These protocols are asynchronous, character-based protocols with one start bit, eight data bits, even parity, and one stop bit. Communications frames depend upon special start and stop characters, source and destination station addresses, frame length, and a checksum for data integrity. The protocols can run on a network simultaneously without interfering with each other, as long as the baud rate is the same for each protocol.

Ethernet is also available for the S7-200 CPU with expansion modules CP243—1 and CP243—1 IT.

PPI Protocol

PPI is a master-slave protocol: the master devices send requests to the slave devices, and the slave devices respond. See Figure 7-7. Slave devices do not initiate messages, but wait until a master sends them a request or polls them for a response.

STEP 7—Micro/WIN:

Master

S7-200

Masters communicate to slaves by means of a shared connection which is managed by the PPI protocol. PPI does not limit the number of masters that can communicate with any one slave; however, you cannot install more than 32 masters on the network.

Figure 7-7 PPI Network

HMI: Master

S7-200 CPUs can act as master devices while they are in RUN mode, if you enable PPI master mode in the user program. (See the description of SMB30 in Appendix D.) After enabling PPI master mode, you can use the Network Read or the Network Write instructions to read from or write to other S7-200s. While the S7-200 is acting as a PPI master, it still responds as a slave to requests from other masters.

PPI Advanced allows network devices to establish a logical connection between the devices. With

PPI Advanced, there are a limited number of connections supplied by each device. See Table 7-3 for the number of connections supported by the S7-200.

All S7-200 CPUs support both PPI and PPI Advanced protocols, while PPI Advanced is the only

PPI protocol supported by the EM 277 module.

Table 7-3

Module

S7-200 CPU

Number of Connections for the S7-200 CPU and EM 277 Modules

Baud Rate

Port 0 9.6 kbaud, 19.2 kbaud, or 187.5 kbaud

Port 1 9.6 kbaud, 19.2 kbaud, or 187.5 kbaud

EM 277 Module 9.6 kbaud to 12 Mbaud

Connections

4

4

6 per module

214

Communicating over a Network

Chapter 7

MPI Protocol

MPI allows both master-master and master-slave communications. See Figure 7-8. To communicate with an S7-200 CPU, STEP 7—Micro/WIN establishes a master—slave connection. MPI protocol does not communicate with an S7-200

CPU operating as a master.

Network devices communicate by means of separate connections (managed by the MPI protocol) between any two devices. Communication between devices is limited to the number of connections supported by the S7-200 CPU or

EM 277 modules. See Table 7-3 for the number of connections supported by the S7-200.

STEP 7—Micro/WIN:

Master

Figure 7-8 MPI Network

S7-200: Slave

S7-300: Master

For MPI protocol, the S7-300 and S7-400 PLCs use the XGET and XPUT instructions to read and write data to the S7-200 CPU. For information about these instructions, refer to your S7-300 or

S7-400 programming manual.

PROFIBUS Protocol

The PROFIBUS protocol is designed for high-speed communications with distributed I/O devices (remote

I/O). There are many PROFIBUS devices available from a variety of manufacturers. These devices range from simple input or output modules to motor controllers and PLCs.

S7-300: Master

S7-200 (EM 277): Slave

PROFIBUS networks typically have one master and several slave I/O devices. See Figure 7-9. The master device is configured to know what types of

I/O slaves are connected and at what addresses.

The master initializes the network and verifies that the slave devices on the network match the configuration. The master continuously writes output data to the slaves and reads input data from them.

ET 200: Slave

Figure 7-9 PROFIBUS Network

When a DP master configures a slave device successfully, it then owns that slave device. If there is a second master device on the network, it has very limited access to the slaves owned by the first master.

TCP/IP Protocol

The S7-200 can support TCP/IP Ethernet communication through the use of an Ethernet (CP

243—1) or Internet (CP 243—1 IT) expansion module. Table 7-4 shows the baud rate and number of connections supported by these modules.

Table 7-4

Module

Number of Connections for the Ethernet (CP 243—1) and the Internet (CP 243—1 IT) Modules

Baud Rate Connections

Ethernet (CP 243—1) Module

Internet (CP 243—1 IT) Module

8 general purpose connections

1 STEP 7—Micro/WIN connection

Refer to the

SIMATIC NET CP 243—1 Communications Processor for Industrial Ethernet Manua

l or the

SIMATIC NET CP 243—1 IT Communications Processor for Industrial Ethernet and

Information Technology Manua

l for additional information.

215

S7-200 Programmable Controller System Manual

Sample Network Configurations Using Only S7-200 Devices

Single-Master PPI Networks

For a simple single-master network, the programming station and the S7-200 CPU are connected by either a PPI Multi-Master cable or by a communications processor (CP) card installed in the programming station.

In the sample network at the top of Figure 7-10, the programming station (STEP 7—Micro/WIN) is the network master. In the sample network at the bottom of Figure 7-10, a human-machine interface

(HMI) device (such as a TD 200, TP, or OP) is the network master.

STEP 7—Micro/WIN

HMI (such as a TD 200)

S7-200

S7-200

In both sample networks, the S7-200 CPU is a slave that responds to requests from the master.

Figure 7-10 Single-Master PPI Network

For a single-master PPI network, configure STEP 7—Micro/WIN to use PPI protocol. Uncheck the

Multiple Master Network and the PPI Advanced check boxes, if available.

Multi-Master PPI Networks

Figure 7-11 shows a sample network of multiple masters with one slave. The programming station

(STEP 7—Micro/WIN) uses either a CP card or a PPI

Multi-Master cable. STEP 7—Micro/WIN and the HMI device share the network.

S7-200

Both STEP 7—Micro/WIN and the HMI device are masters and must have separate network addresses. When the PPI Multi-Master cable is being used, the cable is a master and uses the network address supplied by STEP 7—Micro/WIN.

The S7-200 CPU is a slave.

STEP 7—Micro/WIN

HMI

Figure 7-11 Multiple Masters with One Slave

Figure 7-12 shows a PPI network with multiple masters communicating with multiple slaves. In this example, both STEP 7—Micro/WIN and the HMI can request data from any S7-200 CPU slave.

STEP 7—Micro/WIN and the HMI device share the network.

S7-200

All devices (masters and slaves) have different network addresses. When the PPI Multi-Master cable is being used, the cable is a master and uses the network address supplied by

STEP 7—Micro/WIN

HMI

S7-200

STEP 7—Micro/WIN. The S7-200 CPUs are slaves.

Figure 7-12 Multiple Masters and Slaves

For a network with multiple masters and one or more slaves, configure STEP 7—Micro/WIN to use

PPI protocol and check the Multiple Master Network and the PPI Advanced check boxes if they are available. If you are using a PPI Multi-Master cable, the Multiple Master Network and PPI

Advanced check boxes are ignored.

216

Communicating over a Network

Chapter 7

Complex PPI Networks

Figure 7-13 shows a sample network that uses multiple masters with peer-to-peer communications.

STEP 7—Micro/WIN and the HMI device read and write over the network to the S7-200 CPUs, and the

S7-200 CPUs use the Network Read and Network

Write instructions to read and write to each other

(peer-to-peer communications).

STEP 7—Micro/WIN

HMI

S7-200

S7-200

Figure 7-13 Peer-to-Peer Communications

Figure 7-14 shows another, example of a complex

PPI network that uses multiple masters with peer-to-peer communications. In this example, each

HMI monitors one S7-200 CPU.

The S7-200 CPUs use the NETR and NETW instructions to read and write to each other

(peer-to-peer communications).

For complex PPI networks configure STEP

7—Micro/WIN to use PPI protocol and check the

Multiple Master Network and the PPI Advanced check boxes if available If you are using a PPI

Multi-Master cable, the Multiple Master Network and

PPI Advanced check boxes are ignored.

STEP 7—Micro/WIN

HMI

S7-200

HMI

S7-200

Figure 7-14 HMI Devices and Peer-to-Peer

Sample Network Configurations Using S7-200, S7-300, and S7-400

Devices

Networks with Baud Rates Up to 187.5 kbaud

In the sample network shown in Figure 7-15, the

S7-300 uses the XPUT and XGET instructions to communicate with an S7-200 CPU. The S7-300 cannot communicate with an S7-200 CPU in master mode.

To communicate with the S7 CPUs, configure

STEP 7—Micro/WIN to use PPI protocol and check the Multiple Master Network and the PPI Advanced check boxes if available. If you are using a PPI

Multi-Master cable, the Multiple Master Network and

PPI Advanced check boxes are ignored.

STEP 7—Micro/WIN

S7-300

S7-200 S7-200

HMI

Figure 7-15 Baud Rates Up to 187.5 Kbaud

217

S7-200 Programmable Controller System Manual

Networks with Baud Rates Above 187.5 kbaud

For baud rates above 187.5 kbaud, the S7-200 CPU must use an EM 277 module for connecting to the network. See Figure 7-16. STEP 7—Micro/WIN must be connected by a communications processor (CP) card.

In this configuration, the S7-300 can communicate with the S7-200s, using the XPUT and XGET instructions, and the HMI can monitor either the

S7-200s or the S7-300.

The EM 277 is always a slave device.

STEP 7—Micro/WIN can program or monitor either

S7-200 CPU through the attached EM 277. To communicate with an EM 277 above 187.5 kbaud, configure STEP 7—Micro/WIN to use MPI protocol with a CP card. The maximum baud rate for the PPI

Multi-Master cables is 187.5 kbaud.

STEP 7—Micro/WIN

S7-300

S7-200 EM 277

HMI

S7-200 EM 277

Figure 7-16 Baud Rates Above 187.5 Kbaud

Sample PROFIBUS-DP Network Configurations

Networks with S7-315—2 DP as PROFIBUS Master and EM 277 as PROFIBUS

Slave

Figure 7-17 shows a sample PROFIBUS network that uses an S7-315—2 DP as the PROFIBUS master. An EM 277 module is a PROFIBUS slave.

S7-315-2 DP

The S7-315—2 DP can read data from or write data to the EM 277, from 1 byte up to 128 bytes. The

S7-315—2 DP reads or writes V memory locations in the S7-200.

This network supports baud rates from 9600 baud to 12 Mbaud.

ET 200

PROFIBUS-DP

ET 200 S7-200 EM 277

Figure 7-17 Network with S7-315—2 DP

Networks with STEP 7—Micro/WIN and HMI

Figure 7-18 shows a sample network with an

S7-315—2 DP as the PROFIBUS master and

EM 277 as a PROFIBUS slave. In this configuration, the HMI monitors the S7-200 through the EM 277.

STEP 7—Micro/WIN programs the S7-200 through the EM 277.

This network supports baud rates from 9600 baud to 12 Mbaud. STEP 7—Micro/WIN requires a CP card for baud rates above 187.5 kbaud.

S7-315—2 DP

PROFIBUS-DP

HMI

ET 200 S7-200 EM 277

STEP 7—Micro/WIN

Figure 7-18 PROFIBUS Network

218

Communicating over a Network

Chapter 7

Configure STEP 7—Micro/WIN to use PROFIBUS protocol for a CP card. Select the DP or

Standard profile if there are only DP devices present on the network. Select the Universal

(DP/FMS) profile for all master devices if there are any non—DP devices on the network, such as

TD 200s. All masters on the network must be set up to use the same PROFIBUS profile (DP,

Standard or Universal) for the network to operate.

The PPI Multi-master cables will function on networks up to 187.5 kbaud only if all master devices are using the Universal (DP/FMS) profile.

Sample Network Configurations Using Ethernet and/or Internet

Devices

In the configuration shown in Figure 7-19, an

Ethernet connection is used to allow

STEP 7—Micro/WIN to communicate with either of the S7-200 CPUs which are using an Ethernet

(CP 243—1) module or an Internet (CP 243—1 IT) module. The S7-200 CPUs can exchange data through the Ethernet connection. A standard browser program running on the PC with

STEP 7—Micro/WIN can be used to access the home page of the Internet (CP 243—1 IT) module.

STEP 7—Micro/WIN

S7-200 CP 243-1 S7-200 CP 243—1 IT

For Ethernet networks, you configure

STEP 7—Micro/WIN to use TCP/IP protocol.

Figure 7-19 10/100 Mbaud Ethernet Network

Tip

In the Set PG/PC Interface dialog, there are at least two TCP/IP choices. The selection

TCP/IP —> NdisWanlp is not supported by the S7-200.

—

—

In the Set PG/PC Interface dialog box, the option(s) depend upon the type of Ethernet interface provided in your PC. Choose the one that connects your computer to the Ethernet network where the CP 243—1 or CP 243—1 IT module is connected.

On the Communications dialog, you must enter the Remote IP address(es) of each of the

Ethernet/Internet modules with which you wish to communicate.

219

S7-200 Programmable Controller System Manual

Installing and Removing Communications Interfaces

From the Set PG/PC Interface dialog box, you use the Installing/Uninstalling Interfaces dialog box to install or remove communications interfaces for your computer

1. In the Set PG/PC Interface dialog box, click Select to access the Installing/Uninstalling

Interfaces dialog box.

The Selection box lists the interfaces that are available, and the Installed box displays the interfaces that have already been installed on your computer.

2.

To add a communications interface:

Select the communications hardware installed on your computer and click Install. When you close the Installing/Uninstallling Interfaces dialog box, the Set PG/PC Interface dialog box displays the interface in the Interface Parameter

Assignment Used box.

3.

To remove a communications interface:

Select the interface to be removed and click

Uninstall. When you close the Installing/Uninstallling Interfaces dialog box, the Set PG/PC

Interface dialog box removes the interface from the Interface Parameter Assignment Used box.

1.

2.

3.

Figure 7-20 Set PG/PC Interface and Installing/Uninstalling Interfaces Dialog Boxes

Adjusting the Port Settings of Your Computer for PPI Multi-Master

If you are using the USB/PPI Multi-Master cable or the RS-232/PPI Multi-Master cable in PPI mode, adjustment of your computer’s port settings is not necessary and operation in multi-master networks is possible with the Windows NT operating system.

If you are using the RS-232/PPI Multi-Master cable in PPI/Freeport mode for communication between an S7-200 CPU and STEP 7—Micro/WIN on an operating system that supports the PPI

Multi-Master configuration (Windows NT does not support the PPI Multi-Master), you might need to adjust the port settings on your computer:

1. Right-click the My Computer icon on the desktop and select the Properties menu command.

2. Select the Device Manager tab. For Windows 2000, select first the Hardware tab and then

Device Manager button.

3. Double-click the Ports (COM & LPT).

4. Select the communications port that you are currently using (for example, COM1).

5. On the Port Settings tab, click the Advanced button.

6. Set the Receive Buffer and the Transmit Buffer controls to the lowest value (1).

7. Click OK to apply the change, close all the windows, and reboot the computer to make the new settings active.

220

Communicating over a Network

Chapter 7

Building Your Network

General Guidelines

Always install appropriate surge suppression devices for any wiring that could be subject to lightning surges.

Avoid placing low-voltage signal wires and communications cables in the same wire tray with AC wires and high-energy, rapidly switched DC wires. Always route wires in pairs, with the neutral or common wire paired with the hot or signal-carrying wire.

The communications port of the S7-200 CPU is not isolated. Consider using an RS-485 repeater or an EM 277 module to provide isolation for your network.

Caution

Interconnecting equipment with different reference potentials can cause unwanted currents to flow through the interconnecting cable.

These unwanted currents can cause communications errors or can damage equipment.

Be sure all equipment that you are about to connect with a communications cable either shares a common circuit reference or is isolated to prevent unwanted current flows. See the information about grounding and circuit reference points for using isolated circuits in Chapter 3.

Determining the Distances, Transmission Rate, and Cable for Your

Network

As shown in Table 7-5, the maximum length of a network segment is determined by two factors: isolation (using an RS-485 repeater) and baud rate.

Isolation is required when you connect devices at different ground potentials. Different ground potentials can exist when grounds are physically separated by a long distance. Even over short distances, load currents of heavy machinery can cause a difference in ground potential.

Table 7-5

Baud Rate

Maximum Length for a Network Cable

Non-Isolated CPU Port

1

9.6 kbaud to 187.5 kbaud

500 kbaud

1 Mbaud to 1.5 Mbaud

3 Mbaud to 12 Mbaud

50 m

Not supported

Not supported

Not supported

1

CPU Port with Repeater or EM 277

1,000 m

400 m

200 m

100 m

The maximum distance allowed without using an isolator or repeater is 50 m. You measure this distance from the first node to the last node in the segment.

221

S7-200 Programmable Controller System Manual

Using Repeaters on the Network

An RS-485 repeater provides bias and termination for the network segment. You can use a repeater for the following purposes:

—

—

—

To increase the length of a network:

Adding a repeater to your network allows you to extend the network another 50 m. If you connect two repeaters with no other nodes in between (as shown in Figure 7-21), you can extend the network to the maximum cable length for the baud rate. You can use up to 9 repeaters in series on a network, but the total length of the network must not exceed 9600 m.

To add devices to a network:

Each segment can have a maximum of 32 devices connected up to 50 m at 9600 baud. Using a repeater allows you to add another segment (32 devices) to the network.

To electrically isolate different network segments:

Isolating the network improves the quality of the transmission by separating the network segments which might be at different ground potentials.

A repeater on your network counts as one of the nodes on a segment, even though it is not assigned a network address.

Segment Segment Segment

RS-485

Repeater

RS-485

Repeater

50 m

Figure 7-21 Sample Network with Repeaters

Up to 1000 m 50 m

Selecting the Network Cable

S7-200 networks use the RS-485 standard on twisted pair cables. Table 7-6 lists the specifications for the network cable. You can connect up to 32 devices on a network segment.

Table 7-6 General Specifications for Network Cable

Specifications Description

Cable type

Loop resistance

Effective capacitance

Nominal impedance

Attenuation

Cross-sectional core area

Cable diameter

Shielded, twisted pair

±

115

Ω

/km

30 pF/m

Approximately 135

Ω to 160

Ω

(frequency =3 MHz to 20 MHz)

0.9 dB/100 m

(frequency=200 kHz)

0.3 mm

2 to 0.5 mm

2

8 mm

±

0.5 mm

222

Communicating over a Network

Chapter 7

Connector Pin Assignments

The communications ports on the S7-200 CPU are RS-485 compatible on a nine-pin subminiature

D connector in accordance with the PROFIBUS standard as defined in the European Standard

EN 50170. Table 7-7 shows the connector that provides the physical connection for the communications port and describes the communications port pin assignments.

Table 7-7

Connector

Pin Assignments for the S7-200 Communications Port

Pin Number PROFIBUS Signal

Pin 1

Pin 5

3

4

5

1

2

Shield

24 V Return

RS-485 Signal B

Request-to-Send

5 V Return

6

7

8

+5 V

+24 V

RS-485 Signal A

9 Not applicable

Connector shell Shield

Port 0/Port 1

Chassis ground

Logic common

RS-485 Signal B

RTS (TTL)

Logic common

+5 V, 100

Ω series resistor

+24 V

RS-485 Signal A

10-bit protocol select (input)

Chassis ground

Biasing and Terminating the Network Cable

Siemens provides two types of network connectors that you can use to easily connect multiple devices to a network: a standard network connector (see Table 7-7 for the pin assignments), and a connector that includes a programming port, which allows you to connect a programming station or an HMI device to the network without disturbing any existing network connections. The programming port connector passes all signals (including the power pins) from the S7-200 through to the programming port, which is especially useful for connecting devices that draw power from the S7-200 (such as a TD 200).

Both connectors have two sets of terminal screws to allow you to attach the incoming and outgoing network cables. Both connectors also have switches to bias and terminate the network selectively. Figure 7-22 shows typical biasing and termination for the cable connectors.

Cable must be terminated and biased at both ends.

Switch position = On

Terminated and biased

On

Switch position = Off

No termination or bias

Off

Switch position = On

Terminated and biased

On

A B A B A B A B A B A B

Bare shielding: approximately 12 mm (1/2 in.) must contact the metal guides of all locations.

Switch position = On:

Terminated and biased

Pin #

6

Switch position = Off:

No termination or bias

B

390

Ω

TxD/RxD +

A

220

Ω

3

Network connector

TxD/RxD 8

390

Ω

Cable shield

5

1

Figure 7-22 Bias and Termination of the Network Cable

TxD/RxD +

TxD/RxD —

Cable shield

TxD/RxD +

TxD/RxD —

Cable shield

B

A

B

A

Pin #

6

3

8

5

1

223

S7-200 Programmable Controller System Manual

224

Choosing a PPI Multi-Master Cable or a CP Card for Your Network

As shown in Table 7-8, STEP 7—Micro/WIN supports the RS-232/PPI Multi-Master cable and the

USB/PPI Multi-Master cable as well as several CP cards that allow the programming station (your computer or SIMATIC programming device) to act as a network master.

For baud rates up to 187.5 kbaud the PPI Multi-Master cables provide the simplest and most cost-effective connection between STEP 7—Micro/WIN and one S7-200 CPU or an S7-200 network. Two types of PPI Multi-Master cables are available and both can be used for local connection between STEP 7—Micro/WIN and an S7-200 network.

The USB/PPI Multi-Master cable is a plug and play device that can be used with PCs that support the USB Version 1.1. It provides isolation between your PC and the S7-200 network while supporting PPI communication at baud rates up to 187.5 kbaud. There are no switches to set; just connect the cable, choose the PC/PPI cable as the interface, select PPI protocol, and set the port to USB in the PC Connection tab. Only one USB/PPI Multi-Master cable can be connected to the

PC at a time for use by STEP 7—Micro/WIN.

The RS-232/PPI Multi-Master cable has eight DIP switches: two of these switches are used to configure the cable for operation with STEP 7—Micro/WIN.

—

—

If you are connecting the cable to the PC, select PPI mode (switch 5 = 1) and Local operation (switch 6 = 0).

If you are connecting the cable to a modem, select PPI mode (switch 5 = 1) and Remote operation (switch 6 = 1).

The cable provides isolation between your PC and the S7-200 network. Choose the PC/PPI cable as the interface and select the RS-232 port that you want to use under the PC Connection tab.

Under the PPI tab, select the station address and the network baud rate. You do not need to make any other selections because protocol selection is automatic with the RS-232/PPI Multi-Master cable.

Both the USB/PPI and the RS-232/PPI Multi-Master cables have LEDs that provide an indication of the communication activity with the PC as well as network communication activity.

—

—

The Tx LED indicates that the cable is transmitting information to the PC.

The Rx LED indicates that the cable is receiving information from the PC.

—

The PPI LED indicates that the cable is transmitting data on the network. Since the

Multi-Master cables are token holders, the PPI LED is on continuously once communication has been initialized by STEP 7—Micro/WIN. The PPI LED is turned off when the connection with STEP 7—Micro/WIN is closed. The PPI LED will also flash at 1 Hz rate while waiting to join the network.

The CP cards contain dedicated hardware to assist the programming station in managing a multi-master network and can support different protocols at several baud rates.

Each CP card provides a single RS-485 port for connection to the network. The CP 5511 PCMCIA card has an adapter that provides the 9-pin D port. You connect one end of the cable to the

RS-485 port of the card and connect the other end to a programming port connector on your network.

If you are using a CP card with PPI communications, STEP 7—Micro/WIN will not support two different applications running on the same CP card at the same time. You must close the other application before connecting STEP 7—Micro/WIN to the network through the CP card. If you are using MPI or PROFIBUS communication, multiple STEP 7—Micro/WIN applications are permitted to communicate over the network at the same time.

Caution

Using a non-isolated RS-485-to-RS-232 converter can damage the RS-232 port of your computer.

The Siemens RS-232/PPI and USB/PPI Multi-Master cables (order number 6ES7

901—3CB30—0XA0 or 6ES7 901—3DB30—0XA0, respectively) provide electrical isolation between the RS-485 port on the S7-200 CPU and the RS-232 or USB port that connects to your computer. If you do not use the Siemens Multi-Master cable, you must provide isolation for the

RS-232 port of your computer.

Communicating over a Network

Chapter 7

Table 7-8 CP Cards and Protocols Supported by STEP 7—Micro/WIN

Configuration

RS-232/PPI Multi-Master or USB/PPI Multi-Master cable

Connected to a port on the programming station

1

PC Adapter USB, V1.1 or later

CP 5512

Type II, PCMCIA card (for a notebook computer)

CP 5611 (version 3 or greater)

PCI card

CP 1613, S7-1613

PCI card

Baud Rate

9.6 kbaud to

187.5 kbaud

9.6 kbaud to

187.5 baud

9.6 kbaud to

12 Mbaud

9.6 kbaud to

12 Mbaud

10 Mbaud or

100 Mbaud

Protocol

PPI

PPI, MPI, and

PROFIBUS

PPI, MPI, and

PROFIBUS

PPI, MPI, and

PROFIBUS

TCP/IP

CP 1612, SoftNet-S7

PCI card

10 Mbaud or

100 Mbaud

TCP/IP

1

CP 1512, SoftNet-S7

PCMCIA card (for a notebook computer)

10 Mbaud or

100 Mbaud

TCP/IP

The Multi-Master cables provide electrical isolation between the RS-485 port (on the S7-200 CPU) and the port that connects to your computer. Using a non-isolated RS-485-to-RS-232 converter could damage the RS-232 port of your computer.

Using HMI Devices on Your Network

The S7-200 CPU supports many types of HMI devices from Siemens and also from other manufacturers. While some of these HMI devices (such as the TD 200) do not allow you to select the communications protocol used by the device, other devices (such as the OP and TP product lines) allow you to select the communications protocol for that device.

If your HMI device allows you to select the communications protocol, consider the following guidelines:

—

—

For an HMI device connected to the communications port of the S7-200 CPU, with no other devices on the network, select either the PPI or the MPI protocol for the HMI device.

For an HMI device connected to an EM 277 PROFIBUS module, select either the MPI or the PROFIBUS protocol.

— If the network with the HMI device includes S7-300 or S7-400 PLCs, select the MPI protocol for the HMI device.

— If the network with the HMI device is a PROFIBUS network, select the PROFIBUS protocol for the HMI device and select a profile consistent with the other masters on the PROFIBUS network.

—

For an HMI device connected to the communications port of the S7-200 CPU which has been configured as a master, select the PPI protocol for the HMI device. Advanced PPI is optimal. The MPI and PROFIBUS protocols do not support the S7-200 CPU as a master.

For more information about how to configure the HMI device, refer to the specific manual for your device (see Table 7-9). These manuals are included in the STEP 7—Micro/WIN documentation

CD.

Table 7-9

HMI

TD 100C

HMI Devices Supported by the S7-200 CPU

Configuration Software Configuration Cable

Text Display Wizard

K

(part of STEP 7—Micro/WIN) no

TD 200

TD 200C

TD400C

TP177micro WinCC flexible micro

OP73micro

WinCC flexible Compact

WinCC flexible Standard

WinCC flexible Advanced

(

S7—200 RS—232 PC—PPI cable,

(6ES7 901—3CB30—0XA0) )

Communications Cable

6ES7 901—3EB10—0XA0

Part of TD 200

Part of TD 200C

Part of TD400C

See SIMATIC HMI catalog

ST80

(http://www.siemens.com

search on ST80)

225

S7-200 Programmable Controller System Manual

Creating User-Defined Protocols with Freeport Mode

Freeport mode allows your program to control the communications port of the S7-200 CPU. You can use Freeport mode to implement user-defined communications protocols to communicate with many types of intelligent devices. Freeport mode supports both ASCII and binary protocols.

To enable Freeport mode, you use special memory bytes SMB30 (for Port 0) and SMB130 (for

Port 1). Your program uses the following to control the operation of the communications port:

—

—

Transmit instruction (XMT) and the transmit interrupt: The Transmit instruction allows the

S7-200 to transmit up to 255 characters from the COM port. The transmit interrupt notifies your program in the S7-200 when the transmission has been completed.

Receive character interrupt: The receive character interrupt notifies the user program that a character has been received on the COM port. Your program can then act on that character, based on the protocol being implemented.

—

Receive instruction (RCV): The Receive instruction receives the entire message from the

COM port and then generates an interrupt for your program when the message has been completely received. You use the SM memory of the S7-200 to configure the Receive instruction for starting and stopping the receiving of messages, based on defined conditions. The Receive instruction allows your program to start or stop a message based on specific characters or time intervals. Most protocols can be implemented with the

Receive instruction.

Freeport mode is active only when the S7-200 is in RUN mode. Setting the S7-200 to STOP mode halts all Freeport communications, and the communications port then reverts to the PPI protocol with the settings which were configured in the system block of the S7-200.

Table 7-10 Using Freeport Mode

Network Configuration

Using Freeport over an RS-232 connection

Scale

PC/PPI

Cable

Using USS protocol

Creating a user program that emulates a slave device on another network

S7-200

S7-200

MicroMaster

MicroMaster

MicroMaster

Modbus Network

S7-200

S7-200

Modbus

Device

Description

Example: Using an S7-200 with an electronic scale that has an RS-232 port.

S

RS-232/PPI Multi-Master cable connects the RS-232 port on the scale to the RS-485 port on the S7-200 CPU. (Set the cable to

PPI/Freeport mode, switch 5=0.)

S

S7-200 CPU uses Freeport to communicate with the scale.

S

Baud rate can be from 1200 baud to

115.2 kbaud.

S

User program defines the protocol.

Example: Using an S7-200 with SIMODRIVE

MicroMaster drives.

S

STEP 7—Micro/WIN provides a USS library.

S

S7-200 CPU is a master, and the drives are slaves.

Programming

Tips

Refer to the Programming Tips on the documentation CD for a sample

USS program. See Tip 28.

Example: Connecting S7-200 CPUs to a

Modbus network.

S

User program in the S7-200 emulates a

Modbus slave.

S

STEP 7—Micro/WIN provides a Modbus library.

Programming

Tips

Refer to the Programming Tips on the documentation CD for a sample

Modbus program. See Tip 41.

226

Communicating over a Network

Chapter 7

Using the RS-232/PPI Multi-Master Cable and Freeport Mode with

RS-232 Devices

You can use the RS-232/PPI Multi-Master cable and the Freeport communications functions to connect the S7-200 CPUs to many devices that are compatible with the RS-232 standard. The cable must be set to PPI/Freeport mode (switch 5 = 0) for Freeport operation. Switch 6 selects either Local mode (DCE) (switch 6 = 0), or Remote mode (DTE) (switch 6 = 1).

The RS-232/PPI Multi-Master cable is in Transmit mode when data is transmitted from the RS-232 port to the RS-485 port. The cable is in Receive mode when it is idle or is transmitting data from the RS-485 port to the RS-232 port. The cable changes from Receive to Transmit mode immediately when it detects characters on the RS-232 transmit line.

The RS-232/PPI Multi-Master cable supports baud rates between 1200 baud and 115.2 kbaud.

Use the DIP switches on the housing of the RS-232/PPI Multi-Master cable to configure the cable for the correct baud rate. Table 7-11 shows the baud rates and switch positions.

The cable switches back to Receive mode when the RS-232 transmit line is in the idle state for a period of time defined as the turnaround time of the cable. The baud rate selection of the cable determines the turnaround time, as shown in Table 7-11.

If you are using the RS-232/PPI

Multi-Master cable in a system where

Freeport communications is used, the program in the S7-200 must comprehend the turnaround time for the following situations:

Table 7-11 Turnaround Time and Settings

Baud Rate Turnaround Time

115200

57600

38400

19200

9600

4800

2400

1200

0.15 ms

0.3 ms

0.5 ms

1.0 ms

2.0 ms

4.0 ms

7.0 ms

14.0 ms

Settings (1 =

Up)

110

111

000

001

010

011

100

101

—

—

The S7-200 responds to messages transmitted by the RS-232 device.

After the S7-200 receives a request message from the RS-232 device, the S7-200 must delay the transmission of a response message for a period of time greater than or equal to the turnaround time of the cable.

The RS-232 device responds to messages transmitted from the S7-200.

After the S7-200 receives a response message from the RS-232 device, the S7-200 must delay the transmission of the next request message for a period of time greater than or equal to the turnaround time of the cable.

In both situations, the delay allows the RS-232/PPI Multi-Master cable sufficient time to switch from Transmit mode to Receive mode so that data can be transmitted from the RS-485 port to the

RS-232 port.

227

S7-200 Programmable Controller System Manual

Using Modems and STEP 7—Micro/WIN with Your Network

STEP 7—Micro/WIN version 3.2 or later uses the standard Windows Phone and Modem Options for selecting and configuring telephone modems. The Phone and Modem Options are under the

Windows Control Panel. Using the Windows setup options for modems allows you to:

—

—

Use most internal and external modems supported by Windows.

Use the standard configurations for most modems supported by

Windows.

—

Use the standard Windows dialing rules for selection of locations, country and area code support, pulse or tone dialing, and calling card support.

—

Use higher baud rates when communicating to the EM 241

Modem module.

Use the Windows control panel to display the Modem Properties dialog box. This dialog box allows you to configure the local modem. You select your modem from the list of modems supported by Windows. If your modem type is not listed in the Windows modem dialog box, select a type that is the closest match for your modem, or contact your modem vendor to acquire the modem configuration files for

Windows.

Figure 7-23 Configuring the Local Modem

STEP 7—Micro/WIN also lets you use radio and cellular modems. These modem types do not appear in the Windows Modem Properties dialog box, but are available when configuring a connection for STEP 7—Micro/WIN.

Configuring a Modem Connection

A connection associates an identifying name with the physical properties of the connection. For a telephone modem these properties include the type of modem, 10 or 11 bit protocol selections, and timeouts. For cellular modems the connection allows setting of a PIN and other parameters.

Radio modem properties include selections for baud rate, parity, flow control and other parameters.

228

Communicating over a Network

Chapter 7

Connection

Wizard

Adding a Connection

Use the Connection wizard to add a new connection, remove, or edit a connection as shown in

Figure 7-24.

1. Double-click the icon in the Communications Setup window.

2. Double-click the PC/PPI cable to open the PG/PC interface. Select the PPI cable and click the Properties button. On the Local Connection tab, check the Modem Connection box.

3. Double-click the modem Connect icon in the Communications dialog.

4. Click the Settings button to display the Modem Connections Settings dialog box.

5. Click the Add button to start the Add Modem Connection wizard.

6. Configure the connection as prompted by the wizard.

4.

5.

6.

Figure 7-24 Adding a Modem Connection

Connecting to the S7-200 with a Modem

After you have added a modem connection, you can connect to an

S7-200 CPU.

1. Open the Communications dialog box and double-click on the

Connect icon to display the

Modem Connection dialog box.

2. In the Modem Connection dialog box, click Connect to dial the modem.

Figure 7-25 Connecting to the S7-200

1.

2.

229

S7-200 Programmable Controller System Manual

Modem

Expansion

Wizard

Configuring a Remote Modem

The remote modem is the modem that is connected to the S7-200. If the remote modem is an EM 241 Modem module, no configuration is required. If you are connecting to a stand-alone modem or cell modem, you must configure the connection.

The Modem Expansion wizard configures the remote modem which is connected to the S7-200 CPU. Special modem configurations are required in order to properly communicate with the

RS-485 half duplex port of the S7-200

CPU. Simply select the type of modem, and enter the information as prompted by the wizard. For more information, refer to the online help.

Figure 7-26 Modem Expansion Wizard

Configuring a PPI Multi-Master Cable to Work with a Remote Modem

The RS-232 PPI Multi-Master cable provides the ability to send modem AT command strings upon power-up of the cable. Please note that this configuration is only required if the default modem settings must be changed. See Figure 7-27.

Modem commands can be specified in the General commands. The auto answer command will be the only default setting.

Cell phone authorization commands and

PIN numbers can be specified in the Cell

Phone Authorization field, for example

+CPIN=1234.

Each command string will be sent separately to the modem. Each string will be preceded with the AT modem attention command.

Th d ill b i iti li d ithi the cable by selecting the Program/Test button.

Figure 7-27 Modem Expansion Wizard — Sending Modem

Commands

Please note that the bitmap will depict the recommended switch settings depending upon the selected parameters.

While configuring the RS-232/PPI Multi-Master cable with STEP 7—Micro/WIN, you must connect the RS-485 connector to an S7-200 CPU. This is the source of the 24V power required for the cable to operate. Be sure to supply power to the S7-200 CPU.

After exiting the STEP 7—Micro/WIN configuration of the RS-232/PPI Multi-Master cable, disconnect the cable from the PC and connect it to the modem. Power cycle both the modem and the cable. You are now ready to use the cable for remote operation in a PPI multi-master network.

Tip

Your modem must be at the factory default settings for use with a PPI Multi-Master cable.

230

Communicating over a Network

Chapter 7

Configuring a PPI Multi-Master Cable to Work with Freeport

The RS-232 PPI Multi-Master cable provides the same ability to send modem

AT command strings with the cable configured for Freeport mode. Please note that this configuration is only required if the default modem settings must be changed.

However, the cable must also be configured to match the S7-200 port’s baud rate, parity, and number of data bits.

This is required since the S7-200 application program will configuration of these parameters.

control

Baud rates can be selected between 1.2

kbaud and 115.2 kbaud.

Seven or eight data bits can be selected.

Even, odd, or no parity can be selected.

Please note that the bitmap will depict the recommended switch settings depending upon the selected parameters.

Figure 7-28 Modem Expansion Wizard — Sending Modem

Command in Freeport Mode

While configuring the RS-232/PPI Multi-Master cable with STEP 7—Micro/WIN, you must connect the RS-485 connector to an S7-200 CPU. This is the source of the 24V power required for the cable to operate. Be sure to supply power to the S7-200 CPU.

After exiting the STEP 7—Micro/WIN configuration of the RS-232/PPI Multi-Master cable, disconnect the cable from the PC and connect it to the modem. Power cycle both the modem and the cable. You are now ready to use the cable for remote operation in a PPI multi-master network.

Tip

Your modem must be at the factory default settings for use with a PPI Multi-Master cable.

Using a Telephone Modem with the RS-232/PPI Multi-Master Cable

You can use an RS-232/PPI Multi-Master cable to connect the RS-232 communications port of a modem to an S7-200 CPU. See Figure 7-29.

1

0

—

—

—

Switches 1, 2, and 3 set the baud rate.

Switch 5 selects PPI or PPI/Freeport mode.

Switch 6 select either Local (equivalent to the

Data Communications Equipment — DCE) or remote (equivalent to Data Terminal q p )

Kbaud 123

115.2K

110

57.6K

111

38.4K

000

19.2K

001

9.6K

010

4.8K

011

2.4K

100

1.2K

101

8 Spare

7 1=10 Bit

0=11 Bit

6 1=Remote

0= Local

5 1=PPI

0=PPI/Freeport

4 Spare

—

Switch 7 selects either 10-bit or 11-bit PPI protocol.

Figure 7-29 Settings for the RS-232/PPI

Multi-Master Cable

Switch 5 selects operation in PPI mode or in PPI/Freeport mode. If you are using STEP

7—Micro/WIN to communicate with the S7-200 through modems, select PPI mode (switch 5 = 1).

Otherwise, select PPI/Freeport mode (switch 5 = 0).

Switch 7 of the RS-232/PPI Multi-Master cable selects either a 10—bit or 11—bit mode for

PPI/Freeport mode. Use switch 7 only when the S7-200 is connected to STEP 7—Micro/WIN with a modem in PPI/Freeport mode. Otherwise, set switch 7 for 11—bit mode to ensure proper operation with other devices.

231

S7-200 Programmable Controller System Manual

Switch 6 of the RS-232/PPI Multi-Master cable allows you to set the RS-232 port of the cable to either Local (DCE) or Remote (DTE) mode.

—

—

If you are using the RS-232/PPI Multi-Master cable with STEP 7—Micro/WIN or if the

RS-232/PPI Multi-Master cable is connected to a computer, set the RS-232/PPI

Multi-Master cable to Local (DCE) mode.

If you are using the RS-232/PPI Multi-Master cable with a modem (which is a DCE device), set the RS-232/PPI Multi-Master cable to

Remote (DTE) mode.

S7-200

RS-485 RS-232

DCE

Modem

9-pin-to-25-pin adapter

9-pin

RD 2

TD 3

RTS 7

GND 5

25-pin

2 TD

(input to DCE)

3 RD

(output from DCE)

4 RTS

7 GND

Figure 7-30 Pin Assignments for Adapters

This eliminates the need to install a null modem adapter between the RS-232/PPI Multi-Master cable and the modem. Depending on the connector on the modem, you might still need to use a

9-pin-to-25-pin adapter.

Figure 7-30 shows the pin assignment for a common modem adapter.

See Appendix A for more information about the RS-232/PPI Multi-Master cable. The pin numbers and functions for the RS-485 and RS-232 ports of the RS-232/PPI Multi-Master cable in Local

(DCE) mode are shown in Table A-69. Table A-70 shows the pin numbers and functions for the

RS-485 and RS-232 ports of the RS-232/PPI Multi-Master cable in Remote (DTE) mode. The

RS-232/PPI Multi-Master cable supplies RTS only when it is in Remote (DTE) mode.

Using a Radio Modem with the RS-232/PPI Multi-Master Cable

You can use an RS-232/PPI Multi-Master cable to connect the RS-232 communications port of a radio modem to an S7-200 CPU. However, operation with radio modems is not the same as it is with telephone modems.

PPI Mode

With the RS-232/PPI Multi-Master cable set for PPI mode (switch 5 = 1), you would normally select remote mode (switch 6 = 1) for operation with a modem. However, selecting the remote mode causes the cable to send the character string ’AT’ and wait for the modem to reply with ’OK’ on each power up. While telephone modems use this sequence to establish the baud rate, radio modems do not generally accept AT commands.

Therefore, for operation with radio modems you must select local mode (switch 6 = 0) and use a null modem adapter between the RS-232 connector of the cable and the RS-232 port on your radio modem. Null modem adapters are available in either 9-pin-to-9 pin or 9-pin-to-25 pin configurations.

Configure the radio modem to operate at 9.6, 19.2, 38.4, 57.6 or 115.2 kbaud. The RS-232/PPI

Multi-Master cable will automatically adjust to any one of these baud rates on the first character transmitted by the radio modem.

PPI/Freeport Mode

With the RS-232/PPI Multi-Master cable set for PPI/Freeport mode (switch 5 = 0), select remote mode (switch 6 = 1) for operation with a radio modem. Configure the cable so that it will not send any AT commands to setup the modem.

Switches 1, 2, and 3 on the RS-232/PPI Multi-Master cable set the baud rate. See Figure 7—29.

Select the baud rate setting that corresponds to the baud rate of the PLC and the radio modem.

232

Communicating over a Network

Chapter 7

Advanced Topics

Optimizing the Network Performance

The following factors affect network performance (with baud rate and number of masters having the greatest effect):

—

—

—

—

—

Baud rate: Operating the network at the highest baud rate supported by all devices has the greatest effect on the network.

Number of masters on the network: Minimizing the number of masters on a network also increases the performance of the network. Each master on the network increases the overhead requirements of the network; having fewer masters lessens the overhead.

Selection of master and slave addresses: The addresses of the master devices should be set so that all of the masters are at sequential addresses with no gaps between addresses.

Whenever there is an address gap between masters, the masters continually check the addresses in the gap to see if there is another master wanting to come online. This checking requires time and increases the overhead of the network. If there is no address gap between masters, no checking is done and so the overhead is minimized. You can set the slave addresses to any value without affecting network performance, as long as the slaves are not between masters. Slaves between masters increase the network overhead in the same way as having address gaps between masters.

Gap update factor (GUF): Used only when an S7-200 CPU is operating as a PPI master, the GUF tells the S7-200 how often to check the address gap for other masters. You use

STEP 7—Micro/WIN to set the GUF in the CPU configuration for a CPU port. This configures the S7-200 to check address gaps only on a periodic basis. For GUF=1, the S7-200 checks the address gap every time it holds the token; for GUF=2, the S7-200 checks the address gap once every two times it holds the token. If there are address gaps between masters, a higher GUF reduces the network overhead. If there are no address gaps between masters, the GUF has no effect on performance. Setting a large number for the GUF causes long delays in bringing masters online, because the addresses are checked less frequently. The default GUF setting is 10.

Highest station address (HSA): Used only when an S7-200 CPU is operating as a PPI master, the HSA defines the highest address at which a master should look for another master. You use STEP 7—Micro/WIN to set the HSA in the CPU configuration for a CPU port. Setting an HSA limits the address gap which must be checked by the last master

(highest address) in the network. Limiting the size of the address gap minimizes the time required to find and bring online another master. The highest station address has no effect on slave addresses: masters can still communicate with slaves which have addresses greater than the HSA. As a general rule, set the highest station address on all masters to the same value. This address should be greater than or equal to the highest master address. The default value for the HSA is 31.

Calculating the Token Rotation Time for a Network

In a token-passing network, the only station that can initiate communications is the station that holds the token. The token rotation time (the time required for the token to be circulated to each of the masters in the logical ring) measures the performance of your network.

Figure 7-31 provides a sample network as an example for calculating the token rotation time for a multiple-master network. In this example, the TD 200 (station 3) communicates with the CPU 222

(station 2), the TD 200 (station 5) communicates with the CPU 222 (station 4), and so on. The two

CPU 224 modules use the Network Read and Network Write instructions to gather data from the other S7-200s: CPU 224 (station 6) sends messages to stations 2, 4, and 8, and the CPU 224

(station sends messages to stations 2, 4, and 6. In this network, there are six master stations

(the four TD 200 units and the two CPU 224 modules) and two slave stations (the two CPU 222 modules).

233

S7-200 Programmable Controller System Manual

Programming

Tips

Refer to the Programming Tips on the documentation CD for a discussion about token rotation.

See Tip 42.

CPU 222

Station 2

CPU 222

Station 4

CPU 224

Station 6

CPU 224

Station 8

TD 200

Station 9

TD 200

Station 7

TD 200

Station 5

TD 200

Station 3

Figure 7-31 Example of a Token-Passing Network

In order for a master to send a message, it must hold the token. For example: When station 3 has the token, it initiates a request message to station 2 and then it passes the token to station 5.

Station 5 then initiates a request message to station 4 and then passes the token to station 6.

Station 6 then initiates a message to station 2, 4, or 8, and passes the token to station 7. This process of initiating a message and passing the token continues around the logical ring from station 3 to station 5, station 6, station 7, station 8, station 9, and finally back to station 3. The token must rotate completely around the logical ring in order for a master to be able to send a request for information. For a logical ring of six stations, sending one request message per token hold to read or write one double-word value (four bytes of data), the token rotation time is approximately 900 ms at 9600 baud. Increasing the number of bytes of data accessed per message or increasing the number of stations increases the token rotation time.

The token rotation time is determined by how long each station holds the token. You can determine the token rotation time for your multiple-master network by adding the times that each master holds the token. If the PPI master mode has been enabled (under the PPI protocol on your network), you can send messages to other S7-200s by using the Network Read and Network

Write instructions with the S7-200. If you send messages using these instructions, you can use the following formula to calculate the approximate token rotation time, based on the following assumptions: each station sends one request per token hold, the request is either a read or write request for consecutive data locations, there is no conflict for use of the one communications buffer in the S7-200, and there is no S7-200 that has a scan time longer than about 10 ms.

Token hold time (T hold

) = (128 overhead +

n

data char) x 11 bits/char x 1/baud rate

Token rotation time (T rot

) = T hold of master 1 + T hold of master 2 + . . . + T hold of master

m where n

is the number of data characters (bytes)

m

is the number of masters

The following equations calculate the rotation times (one “bit time” equals the duration of one signaling period) for the example shown in Figure 7-31:

T (token hold time)

T (token rotation time)

= (128 + 4 char) x 11 bits/char x 1/9600 bit times/s

= 151.25 ms per master

= 151.25 ms per master

= 907.5 ms

≦

6 masters

Tip

SIMATIC NET COM PROFIBUS software provides an analyzer to determine network performance.

234

Communicating over a Network

Chapter 7

Comparing Token Rotation Times

Table 7-12 shows comparisons of the token rotation time versus the number of stations, amount of data, and the baud rate. The times are figured for a case where you use the Network Read and

Network Write instructions with the S7-200 CPU or other master devices.

Table 7-12 Token Rotation Time (in Seconds)

Bytes

Transferred

1

16

1

16

1

16

Number of Masters

2

0.30

0.33

0.15

3

0.44

0.50

0.22

4

0.59

0.66

0.30

5

0.74

0.83

0.37

6

0.89

0.99

0.44

7

1.03

1.16

0.52

8

1.18

1.32

0.59

9

1.33

1.49

0.67

10

1.48

1.65

0.74

0.17

0.25

0.33

0.41

0.50

0.58

0.66

0.74

0.83

0.009

0.013

0.017

0.022

0.026

0.030

0.035

0.039

0.043

0.011

0.016

0.021

0.026

0.031

0.037

0.042

0.047

0.052

Understanding the Connections That Link the Network Devices

Network devices communicate through individual connections, which are private links between the master and slave devices. As shown in Figure 7-32, the communications protocols differ in how the connections are handled:

—

—

The PPI protocol utilizes one shared connection among all of the network devices.

The PPI Advanced, MPI, and PROFIBUS protocols utilize separate connections between any two devices communicating with each other.

When using PPI Advanced, MPI, or PROFIBUS, a second master cannot interfere with a connection that has been established between a master and a slave. S7-200 CPUs and EM 277s always reserve one connection for STEP 7—Micro/WIN and one connection for HMI devices. Other master devices cannot use these reserved connections. This ensures that you can always connect at least one programming station and at least one HMI device to the S7-200 CPU or EM

277 when the master is using a protocol that supports connections, such as PPI Advanced.

PPI

All devices share a common connection

PPI Connection PPI Connection PPI Connection

PPI Advanced

MPI

PROFIBUS

Each device communicates through a separate connection

Connection 1

Figure 7-32 Managing the Communications Connections

Connection 2

Connection 1 Connection 1

235

S7-200 Programmable Controller System Manual

As shown in Table 7-13, the S7-200 CPU or EM 277 provide a specific number of connections.

Each port (Port 0 and Port 1) of an S7-200 CPU supports up to four separate connections. (This allows a maximum of eight connections for the S7-200 CPU.) This is in addition to the shared PPI connection. An EM 277 supports six connections. Each port reserves one connection for a programmer and one connection for an operator panel (OP or TP). The remaining connections are available for general use.

Table 7-13 Capabilities of the S7-200 CPU and EM 277 Modules

Connection Point Baud Rate Connections

STEP 7—Micro/WIN Protocol Profile

Selections

S7-200 CPU Port 0 9.6 kbaud,

19.2 kbaud, or

187.5 kbaud

4 PPI, PPI Advanced, MPI, and PROFIBUS

1

Port 1 9.6 kbaud,

19.2 kbaud, or

187.5 kbaud

4 PPI, PPI Advanced, MPI, and PROFIBUS

1

EM 277 Module 9.6 kbaud to

12 Mbaud

6 per module

2

PPI Advanced, MPI, and PROFIBUS

1

If a CP card is used to connect STEP 7—Micro/WIN to the S7-200 CPU through Port 0 or Port 1, you can select either MPI or DP PROFIBUS profiles only when the S7-200 device is configured as a slave.

2 In addition to the PROFIBUS connection.

Working with Complex Networks

For the S7-200, complex networks typically have multiple S7-200 masters that use the Network

Read (NETR) and Network Write (NETW) instructions to communicate with other devices on a PPI network. Complex networks typically present special problems that can block a master from communicating with a slave.

If the network is running at a lower baud rate (such as 9.6 kbaud or 19.2 kbaud), then each master completes the transaction (read or write) before passing the token. At 187.5 kbaud, however, the master issues a request to a slave and then passes the token, which leaves an outstanding request at the slave.

Figure 7-33 shows a network with potential communications conflicts. In this network, Station 1,

Station 2, and Station 3 are masters, using the Network Read or Network Write instructions to communicate with Station 4. The Network Read and Network Write instructions use PPI protocol so all of the S7-200s share the single PPI connection in Station 4.

In this example, Station 1 issues a request to

Station 4. For baud rates above 19.2 kbaud,

Station 1 then passes the token to Station 2. If

Station 2 attempts to issue a request to Station 4, the request from Station 2 is rejected because the request from Station 1 is still present. All requests to Station 4 will be rejected until Station 4 completes the response to Station 1. Only after the response h b l t d request to Station 4.

th t i

Station 1 Master Station 2 Master Station 3 Master

Station 4 Slave

Figure 7-33 Communications Conflict

To avoid this conflict for the communications port on

Station 4, consider making Station 4 the only master on the network, as shown in Figure 7-34. Station 4 then issues the read/write requests to the other

S7-200s.

Not only does this configuration ensure that there is no conflict in communications, but it also reduces the overhead caused by having multiple masters and allows the network to operate more efficiently.

Station 1 Slave Station 2 Slave

Figure 7-34 Avoiding Conflict

Station 3 Slave

Station 4 Master

236

Communicating over a Network

Chapter 7

For some applications, however, reducing the number of masters on the network is not an option. When there are several masters, you must manage the token rotation time and ensure that the network does not exceed the target token rotation time. (The token rotation time is the amount of time that elapses from when a master passes the token until that master receives the token again.)

Table 7-14 HSA and Target Token Rotation

Time

HSA

HSA=15

HSA=31

HSA=63

HSA=126

9.6 kbaud

0.613 s

1.040 s

1.890 s

3.570 s

19.2 kbaud

0.307 s

0.520 s

0.950 s

1.790 s

187.5 kbaud

31 ms

53 ms

97 ms

183 ms

If the time required for the token to return to the master is greater than a target token rotation time, then the master is not allowed to issue a request. The master can issue a request only when the actual token rotation time is less than the target token rotation time.

The highest station address (HSA) and the baud rate settings for the S7-200 determine the target token rotation time. Table 7-14 lists target rotation times.

For the slower baud rates, such as 9.6 kbaud and 19.2 kbaud, the master waits for the response to its request before passing the token. Because processing the request/response cycle can take a relatively long time in terms of the scan time, there is a high probability that every master on the network can have a request ready to transmit every time it holds the token. The actual token rotation time would then increase, and some masters might not be able to process any requests.

In some situations, a master might only rarely be allowed to process requests.

For example:

Consider a network of 10 masters that transmit 1 byte at 9.6 kbaud that is configured with an HSA of 15. For this example, each of the masters always has a message ready to send. As shown in Table 7-14, the target rotation time for this network is 0.613 s. However, based on the performance data listed in Table 7-12, the actual token rotation time required for this network is 1.48 s. Because the actual token rotation time is greater than the target token rotation time, some of the masters will not be allowed to transmit a message until some later rotation of the token.

You have two basic options for improving a situation where the actual token rotation time is greater than the target token rotation time:

—

—

You can reduce actual token rotation time by reducing the number of masters on your network. Depending on your application, this might not be a feasible solution.

You can increase the target token rotation time by increasing the HSA for all of the master devices on the network.

Increasing the HSA can cause a different problem for your network by affecting the amount of time that it takes for a S7-200 to switch to master mode and enter the network. If you use a timer to ensure that the Network Read or Network Write instruction completes its execution within a specified time, the delay in initializing master mode and adding the S7-200 as a master on the network can cause the instruction to time out. You can minimize the delay in adding masters by reducing the Gap Update Factor (GUF) for all masters on the network.

Because of the manner in which requests are posted to and left at the slave for 187.5 kbaud, you should allow extra time when selecting the target token rotation time. For 187.5 kbaud, the actual token rotation time should be approximately half of the target token rotation time.

To determine the token rotation time, use the performance data in Table 7-12 to determine the time required for completing the Network Read and Network Write operations. To calculate the time required for HMI devices (such as the TD 200), use the performance data for transferring

16 bytes. Calculate the token rotation time by adding the time for each device on the network.

Adding all of the times together describes a worst-case scenario where all devices want to process a request during the same token rotation. This defines the maximum token rotation time required for the network.

237

S7-200 Programmable Controller System Manual

For example:

Consider a network running at 9.6 kbaud with four TD 200s and four S7-200s, with each S7-200 writing 10 bytes of data to another S7-200 every second. Use Table 7-12 to calculate the specific transfer times for the network:

4 TD 200 devices transferring 16 bytes of data =

4 S7-200s transferring 10 bytes of data =

Total token rotation time =

0.66 s

0.63 s

1.29 s

To allow enough time for this network to process all requests during one token rotation, set the

HSA to 63. (See Table 7-14.) Selecting a target token rotation (1.89 s) that is greater than the maximum token rotation time (1.29 s) ensures that every device can transfer data on every rotation of the token.

To help improve the reliability of a multi-master network, you should also consider the following actions:

—

—

—

Change the update rate for the HMI devices to allow more time between updates. For example, change the update rate for a TD 200 from “As fast as possible” to “Once per second.”

Reduce the number of requests (and the network overhead for processing the requests) by combining the operations of Network Read or Network Write operations. For example, instead of using two Network Read operations that read 4 bytes each, use one Network

Read operation that reads 8 bytes. The time to process the two requests of 4 bytes is much greater than the time to process one request for 8 bytes.

Change the update rate of the S7-200 masters so that they do not attempt to update faster than the token rotation time.

238

Communicating over a Network

Chapter 7

Configuring the RS-232/PPI Multi-Master Cable for Remote

Operation

HyperTerminal as a Configuration Tool

If STEP 7—Micro/WIN is not available for you to use to configure the RS-232/PPI Multi-Master cable for remote operation, you can use HyperTerminal or any other dumb terminal package. The

RS-232/PPI Multi-Master cable provides built-in menus to guide you as you configure the cable for remote operation.

While configuring the RS-232/PPI Multi-Master cable with HyperTerminal, you must connect the

RS-485 connector to an S7-200 CPU. This is the source of the 24V power required for the cable to operate. Be sure to supply power to the S7-200 CPU.

To invoke HyperTerminal on your PC, click on

Start > Programs >

Accessories > Communications >

HyperTerminal

.

HyperTerminal application launches and prompts for a Connection Description.

You must supply a name for the connection (for example, Multi-Master).

Click OK. You can select an icon or accept the default icon provided with the new connection. See Figure 7-35.

Figure 7-35 HyperTerminal Connection Description

The Connect To screen is displayed.

Select the communications port that you will be using and click OK. The next screen displayed is COMx Properties.

Accept the default and click OK. See

Figure 7-36.

Figure 7-36 HyperTerminal Connect To Screen and COMx

Properties Screen

After clicking OK, your cursor is placed in the edit window of the HyperTerminal screen as shown in Figure 7-37. Notice that the status bar at the bottom of the

HyperTerminal window indicates that you are connected and a timer is running to indicate the duration of the connection.

From the menu, select

Call >

Disconnec

t. The status bar now indicates you are disconnected.

Select

View > Font

. Select Courier New and click OK.

Figure 7-37 Multi-Master HyperTerminal Edit Window

239

S7-200 Programmable Controller System Manual

Select

File > Properties

. On the

Connect To tab, click the

Configure …

button to display the communication port properties. See Figure 7-38.

In the COMx Properties dialog, select the baud rate from the drop down menu for

Bits per second. You must choose a baud rate from 9600 to115200 bits per second (typically, 9600). Select 8 data bits, no parity, one stop bit and no flow control by using the appropriate drop down menus.

Click OK to return to the Connect To tab.

Figure 7-38 Multi-Master Properties and COMx Properties

Select the Settings tab. In the Emulation drop down menu, select ANSI and click

OK. This will return you to the edit window of the HyperTerminal screen.

The status bar at the bottom of the screen should indicate:

“Disconnected ANSI 9600 8—N—1” as shown in Figure 7-39.

Figure 7-39 HyperTerminal Edit — Disconnect ANSI

To initiate communication with the

RS-232/PPI Multi-Master cable, type

“hhh”. The Rx LED on the cable should blink on for about a second as you type

“hhh”. The TX LED turns on briefly as the cable responds with a choice of languages.

Enter the number that corresponds to your choice of language (use the backspace key to eliminate the default selection) and depress the ENTER key.

Figure 7-40 shows the language selection display and the RS232/PPI

Cable Setup for Remote Operation selection display.

This display also shows the firmware revision of the cable.

Figure 7-40 HyperTerminal Language Selection and

RS-232/PPI Cable Setup

240

Communicating over a Network

Chapter 7

The RS232/PPI Cable Setup for Remote Operation display guides you through the steps required to configure the cable for the type of remote operation you desire.

—

If you have an earlier version of

STEP 7—Micro/WIN, select option

2 “PPI single master network with a modem”.

—

If you are using Freeport communication with a modem, select option 3.

For example, select option 1 for PPI multi-master network with a modem using STEP 7—Micro/WIN 3.2 Service

Pack 4 or later.

The HyperTerminal display shown in

Figure 7-41 indicates the switch settings you need to set on the cable. The switch settings allow STEP 7—Micro/WIN to participate in a remote network via modems with one or more masters and one or more S7-200 PLCs. Such a network is shown in Figure 7-41.

Telephone

Line

Modem

Modem

RS-232 Multi-

Master Cable

STEP 7-Micro/WIN:

Master

HMI: Master

S7-200

Figure 7-41 HyperTerminal — RS-232/PPI Cable Setup

After setting the switches as indicated, select continue. The resulting

HyperTerminal display is shown in

Figure 7-42.

The remote modem (the one connected to the RS-232/PPI Multi-Master cable) should be set to factory defaults. With the remote modem set to factory defaults, enter the AT strings required to program the modem for operation with the RS-232/PPI Multi-Master cable.

Typically, the only string that needs to be sent is ATS0=1, which configures the modem to auto—answer incoming calls on the first ring.

Figure 7-42 HyperTerminal — Remote Modem

If you are using a cell modem that requires a PIN, use the second AT command to supply the PIN

(refer to your modem manual for the AT commands supported by your modem). If you need to modify the AT commands, make the selection and enter the commands required as you are prompted for them. The prompts include example AT command strings to help you with the formatting of the commands.

The RS-232/PPI Multi-Master cable will send these AT strings to the modem each time the cable powers up. Make sure that the modem is powered up before or very close to the same time the cable is powered up. Also, if you power cycle the modem, be sure to power cycle the cable. This allows the cable to properly configure the modem and operate at the highest available baud rate.

241

S7-200 Programmable Controller System Manual

The HyperTerminal displays in Figure

7-43 show how to enter the AT commands. If you do not need to supply a second AT command at the prompt, press the ENTER key. This returns you to the selection for modifying the AT commands or exiting. If you finished entering the AT commands select Exit.

After exiting the HyperTerminal configuration of the RS-232/PPI

Multi-Master cable, disconnect the cable from the PC and connect it to the modem. Power cycle both the modem and the cable. You are now ready to use the cable for remote operation in a PPI multi-master network.

Figure 7-43 HyperTerminal — AT Commands

Freeport Operation with HyperTerminal

Configuring the RS-232/PPI Multi-Master cable for Freeport operation using HyperTerminal is very similar to the example configuration described above. Follow the prompts to configure the cable according to your needs.

242

Hardware Troubleshooting Guide and

Software Debugging Tools

STEP 7—Micro/WIN provides software tools to help you debug and test your program. These features include viewing the status of the program as it is executed by the S7-200, selecting to run the S7-200 for a specified number of scans, and forcing values.

Use Table 8-1 as a guide for determining the cause and possible solution when troubleshooting problems with the S7-200 hardware.

In This Chapter

Features for Debugging Your Program

Displaying the Program Status

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Using a Status Chart to Monitor and Modify the Data in the S7-200 . . . . . . . . . . . . . . . . . . . . . .

Forcing Specific Values . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Running Your Program for a Specified Number of Scans

Hardware Troubleshooting Guide

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

244

246

247

248

248

249

243

S7-200 Programmable Controller System Manual

Features for Debugging Your Program

STEP 7—Micro/WIN provides several features to help you debug your program: bookmarks, cross reference tables, and run mode edits.

Using Bookmarks for Easy Program Access

You can set bookmarks in your program to make it easy to move back and forth between designated (bookmarked) lines of a long program. You can move to the next or the previous bookmarked line of your program.

Using the Cross Reference Table to Check Your Program References

The cross reference table allows you to display the cross references and element usage information for your program.

Cross

Reference

The cross reference table identifies all operands used in the program, and identifies the program block, network or line location, and instruction context of the operand each time it is used.

You can toggle between symbolic and absolute view to change the

Figure 8-1 Cross Reference Table

Tip

Double-clicking on an element in the cross reference table takes you to that part of your program or block.

Editing Your Program in RUN Mode

The S7-200 CPUs Rel. 2.0 (and higher) models support RUN mode edits. The RUN mode edit capability is intended to allow you to make small changes to a user program with minimal disturbance to the process being controlled by the program. However, implementing this capability also allows massive program changes that could be disruptive or even dangerous.

Warning

When you download changes to an S7-200 in RUN mode, the changes immediately affect process operation. Changing the program in RUN mode can result in unexpected system operation, which could cause death or serious injury to personnel, and/or damage to equipment.

Only authorized personnel who understand the effects of RUN mode edits on system operation should perform a RUN mode edit.

To perform a program edit in RUN mode, the online S7-200 CPU must support RUN mode edits and must be in RUN mode.

1. Select the

Debug > Program Edit in RUN

menu command.

2. If the project is different than the program in the S7-200, you are prompted to save it. The

RUN mode edit can be performed only on the program in the S7-200.

3. STEP 7—Micro/WIN alerts you about editing your program in RUN mode and prompts you to either continue or to cancel the operation. If you click Continue, STEP 7—Micro/WIN uploads the program from the S7-200. You can now edit your program in RUN mode. No restrictions on edits are enforced.

244

Hardware Troubleshooting Guide and Software Debugging Tools

Chapter 8

Tip

Positive (EU) and Negative (ED) transition instructions are shown with an operand. To view information about edge instructions, select the Cross Reference icon in the View. The Edge

Usage tab lists numbers for the edge instructions in your program. Be careful not to assign duplicate edge numbers as you edit your program.

Downloading the Program in RUN Mode

RUN-mode editing allows you to download only your program block while the S7-200 is in RUN mode. Before downloading the program block in RUN mode, consider the effect of a RUN-mode modification on the operation of the S7-200 for the following situations:

—

—

—

—

—

—

—

If you deleted the control logic for an output, the S7-200 maintains the last state of the output until the next power cycle or transition to STOP mode.

If you deleted a high-speed counter or pulse output functions which were running, the high-speed counter or pulse output continues to run until the next power cycle or transition to STOP mode.

If you deleted an Attach Interrupt instruction but did not delete the interrupt routine, the

S7-200 continues to execute the interrupt routine until a power cycle or a transition to STOP mode. Likewise, if you deleted a Detach Interrupt instruction, the interrupts are not shut down until the next power cycle or transition to STOP mode.

If you added an Attach Interrupt instruction that is conditional on the first scan bit, the event is not activated until the next power cycle or STOP-to-RUN mode transition.

If you deleted an Enable Interrupt instruction, the interrupts continue to operate until the next power cycle or transition from RUN to STOP mode.

If you modified the table address of a receive box and the receive box is active at the time that the S7-200 switches from the old program to the modified program, the S7-200 continues to write the data received to the old table address. Network Read and Network

Write instructions function in the same manner.

Any logic that is conditional on the state of the first scan bit will not be executed until the next power cycle or transition from STOP to RUN mode. The first scan bit is set only by the transition to RUN mode and is not affected by a RUN-mode edit.

Tip

Before you can download your program in RUN mode, the S7-200 must support RUN mode edits, the program must compile with no errors, and the communications between

STEP 7—Micro/WIN and the S7-200 must be error-free.

You can download only the program block.

To download your program in RUN mode, click on the Download button or select the

File >

Download

menu command. If the program compiles successfully, STEP 7—Micro/WIN downloads the program block to the S7-200.

Exiting RUN-Mode Edit

To exit RUN-mode editing, select the

Debug > Program Edit in RUN

menu command and deselect the checkmark. If you have changes that have not been saved, STEP 7—Micro/WIN prompts you either to continue editing, to download changes and exit RUN-mode editing, or to exit without downloading.

245

S7-200 Programmable Controller System Manual

Displaying the Program Status

STEP 7—Micro/WIN allows you to monitor the status of the user program as it is being executed.

When you monitor the program status, the program editor displays the status of instruction operand values.

To display the status, click the Program Status button or select the

Debug > Program Status

menu command.

Displaying the Status of the Program in LAD and FBD

STEP 7—Micro/WIN provides two options for displaying the status of LAD and FBD programs:

—

—

End of scan status: STEP 7—Micro/WIN acquires the values for the status display across multiple scan cycles and then updates the status screen display. The status display does not reflect the actual status of each element at the time of execution. The end-of-scan status does not show status for L memory or for the accumulators.

For end of scan status, the status values are updated in all of the CPU operating modes.

Execution status: STEP 7—Micro/WIN displays the values of the networks as the elements are executed in the S7-200. For displaying the execution status, select the

Debug > Use

Execution Status

menu command.

For execution status, the status values are updated only when the CPU is in RUN mode.

Tip

STEP 7—Micro/WIN provides a simple method for changing the state of a variable. Simply select the variable and right-click to display a menu of options.

Configuring How the Status is Displayed in the LAD and FBD Program

STEP 7—Micro/WIN provides a variety of options for displaying the status in the program.

To configure the display option for the status screen, select the

Tools >

Options

menu command, select

Program Editor and click on the Program

Editor tab, as shown in Figure 8-2.

Figure 8-2 Options for the Status Display

246

Hardware Troubleshooting Guide and Software Debugging Tools

Chapter 8

Displaying the Status of the Program in STL

You can monitor the execution status of your STL program on an instruction-by-instruction basis.

For an STL program, STEP 7—Micro/WIN displays the status of the instructions that are displayed on the screen.

STEP 7—Micro/WIN gathers status information from the S7-200, beginning from the first STL statement at the top of the editor window. As you scroll down the editor window, new information is gathered from the S7-200.

STEP 7—Micro/WIN continuously updates values on the screen. To halt the screen updates, select the Triggered

Pause button. The current data remains on the screen until you deselect the

Triggered Pause button.

Configuring Which Parameters

Are Displayed in the STL Program

STEP 7—Micro/WIN allows you to display the status of a variety of parameters for the STL instructions. Select the

Tools >

Options

menu command, select

Program Editor, and click on the STL

Status tab. See Figure 8-3.

Figure 8-3 Options for Displaying STL Status

Using a Status Chart to Monitor and Modify the Data in the

S7-200

The Status Chart allows you to read, write, force, and monitor variables while the S7-200 is executing your program.

Select the

View > Component > Status

Chart

menu command to create a status chart. Figure 8-4 shows a sample status chart.

You can create multiple status charts.

STEP 7—Micro/WIN provides toolbar icons for manipulating the status chart:

Sort Ascending, Sort Descending, Single

Read, Write All, Force, Unforce, Unforce

All, and Read All Forced.

To select a format for a cell, select the cell and click the right mouse button to display the context menu.

Figure 8-4 Status Chart

247

S7-200 Programmable Controller System Manual

Forcing Specific Values

The S7-200 allows you to force any or all of the I/O points (I and Q bits). In addition, you can also force up to 16 memory values (V or M) or analog I/O values (AI or AQ). V memory or M memory values can be forced in bytes, words, or double words. Analog values are forced as words only, on even-numbered byte boundaries, such as AIW6 or AQW14. All forced values are stored in the permanent memory of the S7-200.

Because the forced data might be changed during the scan cycle (either by the program, by the

I/O update cycle, or by the communications- processing cycle), the S7-200 reapplies the forced values at various times in the scan cycle.

—

—

—

Reading the inputs:

The S7-200 applies the forced values to the inputs as they are read.

Executing the control logic in the program:

The S7-200 applies the forced values to all immediate I/O accesses. Forced values are applied for up to 16 memory values after the program has been executed.

Writes to the outputs

Perform the CPU Diagnostics

Processing any communications requests:

The S7-200 applies the forced values to all read/write communications accesses.

Process any Communications

Requests

—

Writing to the outputs:

The S7-200 applies the forced values to the outputs as they are written.

You can use the Status Chart to force values. To force a new value, enter the value in the New Value column of the Status Chart, then press the Force button on the toolbar. To force an existing value, highlight the value in the Current Value column, then press the Force button.

Execute the Program

Reads the inputs

Figure 8-5 S7-200 Scan Cycle

Scan Cycle

Tip

The Force function overrides a Read Immediate or Write Immediate instruction. The Force function also overrides the output table that was configured for transition to STOP mode. If the

S7-200 goes to STOP mode, the output reflects the forced value and not the value that was configured in the output table.

Running Your Program for a Specified Number of Scans

To help you debug your program, STEP 7—Micro/WIN allows you to run the program for a specific number of scans.

You can have the S7-200 execute only the first scan. This allows you to monitor the data in the

S7-200 after the first scan. Select the

Debug > First Scan

menu command to run the first scan.

You can have the S7-200 execute your program for a limited number of scans (from 1 scan to

65,535 scans). This allows you to monitor the program as it changes variables. Select the

Debug > Multiple Scans

menu command to specify the number of scans to be executed.

248

Hardware Troubleshooting Guide and Software Debugging Tools

Chapter 8

Hardware Troubleshooting Guide

Table 8-1

Symptom

Intermittent operation associated with high energy devices

Communications network is damaged when connecting to an external device

Either the port on the computer, the port on the

S7-200, or the PC/PPI cable is damaged

Troubleshooting Guide for the S7-200 Hardware

Outputs stop working

SF (System Fault) light on the

S7-200 turns on (Red)

None of the LEDs turn on

Possible Causes

S

The device being controlled has caused an electrical surge that damaged the output

S

User program error

S

Wiring loose or incorrect

S

Excessive load

S

Output point is forced

The following list describes the most common error codes and causes:

S

User programming error

— 0003

— 0011

— 0014

Watchdog error

Indirect addressing

— 0012 Illegal floating-point value

Range error

S

Electrical noise

(0001 through 0009)

S

Component damage

(0001 through 0010)

Possible Solution

S

When connecting to an inductive load

(such as a motor or relay), a proper suppression circuit should be used.

Refer to Chapter 3.

S

Correct user program

S

Check wiring and correct

S

Check load against point ratings

S

Check the S7-200 for forced I/O

Read the fatal error code number and refer to

Appendix C for information about the type of error:

S

For a programming error, check the usage of the FOR, NEXT, JMP, LBL, and

Compare instructions.

S

For electrical noise:

— Refer to the wiring guidelines in

Chapter 3. It is very important that the control panel is connected to a good ground and that high voltage wiring is not run in parallel with low voltage wiring.

— Connect the M terminal on the 24 VDC

Sensor Power Supply to ground.

S

S

S

S

S

Blown fuse

Reversed 24 V power wires

Incorrect voltage

Improper grounding

S

Routing of wiring within the control cabinet

Too short of a delay time for the input filters

Connect a line analyzer to the system to check the magnitude and duration of the over-voltage spikes. Based on this information, add the proper type arrestor device to your system.

Refer to the wiring guidelines in Chapter 3 for information about installing the field wiring.

Refer to the wiring guidelines in Chapter 3.

It is very important that the control panel is connected to a good ground and that high voltage wiring is not run in parallel with low voltage wiring.

Connect the M terminal on the 24 VDC

Sensor Power Supply to ground.

Increase the input filter delay in the system data block.

The communications cable can provide a path for unwanted currents if all non-isolated devices, such as PLCs, computers, or other devices that are connected to the network do not share the same circuit common reference.

The unwanted currents can cause communications errors or damage to the circuits.

S

Refer to the wiring guidelines in

Chapter 3 and to the network guidelines in Chapter 7.

S

Purchase the isolated PC/PPI cable.

S

Purchase the isolated RS-485-to-RS-485 repeater when you connect machines that do not have a common electrical reference.

Refer to Appendix E for information about order numbers for S7-200 equipment.

Refer to Chapter 7 for information about network communications.

Other communications problems (STEP 7—Micro/WIN)

Error handling Refer to Appendix C for information about error codes.

249

S7-200 Programmable Controller System Manual

250

Open Loop Motion Control with the

S7-200

The S7-200 provides three methods of open loop motion control:

—

—

Pulse Width Modulation (PWM) — built into the S7-200 for speed, position or duty cycle control

Pulse Train Output (PTO) — built into the S7-200 for speed and position control

—

EM 253 Position Module — an add on module for speed and position control

To simplify the use of position control in your application, STEP 7—Micro/WIN provides a Position

Control wizard that allows you to completely configure the PWM, PTO or Position module in minutes. The wizard generates position instructions that you can use to provide dynamic control of speed and position in your application. For the Position module STEP 7—Micro/WIN also provides a control panel that allows you to control, monitor and test your motion operations.

In This Chapter

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Using the PWM (Pulse Width Modulation) Output . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Basic Information for Open Loop Position Control Using Steppers or Servos . . . . . . . . . . . . . .

Instructions Created by the Position Control Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Error Codes for the PTO Instructions

Features of the Position Module

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Configuring the Position Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Instructions Created by the Position Control Wizard for the Position Module . . . . . . . . . . . . . .

Sample Programs for the Position Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Monitoring the Position Module with the EM 253 Control Panel . . . . . . . . . . . . . . . . . . . . . . . . .

Error Codes for the Position Module and the Position Instructions . . . . . . . . . . . . . . . . . . . . . . .

Advanced Topics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Understanding the RP Seek Modes Supported by the Position Module . . . . . . . . . . . . . . . . . .

252

253

255

260

264

265

267

273

285

290

292

294

303

251

S7-200 Programmable Controller System Manual

Overview

The S7-200 provides three methods of open loop motion control:

Position

Control

—

—

—

Pulse Width Modulation (PWM) — built into the S7-200 for speed, position or duty cycle control

Pulse Train Output (PTO) — built into the S7-200 for speed and position control

EM 253 Position Module — an add on module for speed and position control

The S7-200 provides two digital outputs (Q0.0 and Q0.1) that can be configured using the Position

Control Wizard for use as either PWM or a PTO outputs. The Position Control Wizard can also be used to configure the EM 253 Position Module.

When an output is configured for PWM operation, the cycle time of the output is fixed and the pulse width or duty cycle of the pulse is controlled by your program. The variations in pulse width can be used to control the speed or position in your application.

When an output is configured for PTO operation, a 50% duty cycle pulse train is generated for open loop control of the speed and position for either stepper motors or servo motors. The built in

PTO function only provides the pulse train output. Direction and limit controls must be supplied by your application program using I/O built into the PLC or provided by expansion modules.

The EM 253 Position Module provides a single pulse train output with integrated direction control, disable and clear outputs. It also includes dedicated inputs which allow the module to be configured for several modes of operation including automatic reference point seek. The module provides a unified solution for open loop control of the speed and position for either stepper motors or servo motors.

To simplify the use of position control in your application, STEP 7—Micro/WIN provides a Position

Control wizard that allows you to completely configure the PWM, PTO or Position module in minutes. The wizard generates position instructions that you can use to provide dynamic control of speed and position in your application. For the Position module STEP 7—Micro/WIN also provides a control panel that allows you to control, monitor and test your motion operations.

252

Open Loop Motion Control with the S7-200

Chapter 9

Using the PWM (Pulse Width Modulation) Output

PWM provides a fixed cycle time output with a variable duty cycle. The PWM output runs continuously after being started at the specified frequence (cycle time). The pulse width is varied as required to effect the desired control. Duty cycle can be expressed as a percentage of the cycle time or as a time value corresponding to pulse width. The pulse width can vary from 0% (no pulse, always off) to 100% (no pulse, always on). See Figure 9-1.

Since the PWM output can be varied from 0% to

100%, it provides a digital output that in many ways is analogous to an analog output. For example the

PWM output can be used to control the speed of a motor from stop to full speed or it can be used to control position of a valve from closed to full open.

Cycle Time

Pulse Width

Time

Pulse Width

Time

Figure 9-1 Pulse Width Modulation (PWM)

Configuring the PWM Output

To configure one of the built-in outputs for PWM control, use the Position Control wizard. To start the Position Control wizard, either click the Tools icon in the navigation bar and then double-click the Position Control Wizard icon, or select the

Tools> Position Control Wizard

menu command.

See Figure 9-2

1. Select the option to configure the onboard PTO/PWM operation for the S7-200 PLC.

2. Choose the output Q0.0 or Q0.1

that you wish to configure as a

PWM output.

3. Next select Pulse Width

Modulation (PWM) from the drop down dialog box, select the time base of microseconds or milliseconds and specify the cycle time.

4 Select Finish to complete the wizard.

Figure 9-2 Configuring the PWM Output

The wizard will generate one instruction for you to use to control the duty cycle of the the PWM output.

253

S7-200 Programmable Controller System Manual

PWMx_RUN Instruction

The PWMx_RUN instruction allows you to control the duty cycle of the output by varying the pulse width from 0 to the pulse width of the cycle time.

The Cycle input is a word value that defines the cycle time for the PWM output. The allowed range is from 2 to 65535 units of the time base (microseconds or milliseconds) that was specified within the wizard.

The Duty_Cycle input is a word value that defines the pulse width for the PWM output. The allowed range of values is from 0.0 to 65535 units of the time base (microseconds or milliseconds) that was specified within the wizard.

The Error is a byte value returned by the PWMx_RUN instruction that indicates the result of execution. See Table for a description of the possible error codes.

Table 9-1

Inputs/Outputs

Cycle, Duty_Cycle

Error

Parameters for the PWMx_RUN Instruction

Data Types

Word

Byte

Operands

IW, QW, VW, MW, SMW, SW, T, C, LW, AC, AIW, *VD, *AC, *LD,

Constant

IB, QB, VB, MBV, SMB, LB, AC, *VD, *AC, *LD, Constant

Table 9-2

Error Code

0

1

PWMx_RUN Instruction Error Codes

Description

No error, normal completion

Immediate STOP issued during move. STOP command completed successfully

254

Open Loop Motion Control with the S7-200

Chapter 9

Basic Information for Open Loop Position Control Using

Steppers or Servos

Both the PTO built-in to the S7-200 PLC and the EM 253 Position Module use a pulse train output to control both the speed and position of a stepper motor or a servo motor.

Using the PTO or the module for open loop position control requires expertise in the field of motion control. This chapter is not meant to educate the novice in this subject. However, it provides fundamental information that will help as you use the Position Control wizard to configure the PTO or module for your application.

Maximum and Start/Stop Speeds

The wizard will prompt you for the maximum speed (MAX_SPEED) and Start/Stop Speed

(SS_SPEED) for your application. See Figure 9-3.

—

—

—

—

MAX_SPEED: Enter the value for the optimum operating speed of your application within the torque capability of your motor. The torque required to drive the load is determined by friction, inertia, and the acceleration/deceleration times.

The Position Control wizard calculates and displays the minimum speed that can be controlled by the Position module based on the MAX_SPEED you specify.

For the PTO output you must specify the desired start/stop speed. Since at least one cycle at the start/stop speed is generated each time a move is executed, use a start/stop speed whose period is less than the acceleration/deceleration time.

Speed SS_SPEED: Enter a value within the capability of your motor to drive your load at low speeds. If the

SS_SPEED value is too low, the motor and load could vibrate or move in short jumps at the beginning and end of travel. If the

SS_SPEED value is too high, the motor could lose pulses on start up and the load could overdrive the motor when attempting to stop.

MAX_SPEED

SS_SPEED

Distance

Figure 9-3 Maximum Speed and Start/Stop Speed

255

S7-200 Programmable Controller System Manual

Motor data sheets have different ways of specifying the start/stop (or pull—in/pull—out ) speed for a motor and given load. Typically, a useful SS_SPEED value is 5% to 15% of the MAX_SPEED value. To help you select the correct speeds for your application, refer to the data sheet for your motor. Figure 9-4 shows a typical motor torque/speed curve.

Torque required to drive the load

Motor torque versus speed characteristic

Motor

Torque

Start/Stop speed

(SS_SPEED) for this load

Start/Stop speed versus torque

This curve moves towards lower speed as the load inertia increases.

Motor Speed

Maximum speed that the motor can drive the load

MAX_SPEED should not exceed this value.

Figure 9-4 Typical Torque-Speed Curve for a Motor

Entering the Acceleration and Deceleration Times

As part of the configuration, you set the acceleration and deceleration times. The default setting for both the acceleration time and the deceleration time is 1 second. Typically, motors can work with less than 1 second. See Figure 9-5. You specify the following times in milliseconds:

—

MAX_SPEED

Speed

—

ACCEL_TIME: Time required for the motor to accelerate from

SS_SPEED to MAX_SPEED.

Default = 1000 ms

DECEL_TIME: Time required for the motor to decelerate from

MAX_SPEED to SS_SPEED.

Default = 1000 ms

SS_SPEED

Distance

ACCEL_TIME DECEL_TIME

Figure 9-5 Acceleration and Deceleration Times

Tip

Motor acceleration and deceleration times are determined by trial and error. You should start by entering a large value. Optimize these settings for the application by gradually reducing the times until the motor starts to stall.

256

Open Loop Motion Control with the S7-200

Chapter 9

Configuring the Motion Profiles

A profile is a pre-defined motion description consisting of one or more speeds of movement that effect a change in position from a starting point to an ending point. You do not have to define a profile in order to use the PTO or the module. The Position Control wizard provides instructions for you to use to control moves without running a profile.

A profile is programmed in steps consisting of an acceleration/deceleration to a target speed followed by a fixed number of pulses at the target speed. In the case of single step moves or the last step in a move there is also a deceleration from the target speed (last target speed) to stop.

The PTO and module support a maximum of 25 profiles.

Defining the Motion Profile

The Position Control wizard guides you through a Motion Profile Definition where you define each motion profile for your application. For each profile, you select the operating mode and define the specifics of each individual step for the profile. The Position Control wizard also allows you to define a symbolic name for each profile by simply entering the symbol name as you define the profile.

Selecting the Mode of Operation for the Profile

You configure the profile according the the mode of operation desired. The PTO supports relative position and single speed continuous rotation. The Position module supports absolute position, relative position, single-speed continuous rotation, and two-speed continuous rotation. Figure 9-6 shows the different modes of operation.

Absolute Position

(Position Module only)

Single-Speed

Continuous Rotation

Single-Speed Continuous Rotation with Triggered Stop

(Position Module only)

Target Speed

Reached

RPS signals

Stop

0

Zero

Position

Starting

Position

Ending

Position

Relative Position

Controlled by your program until another command (such as Abort) is issued

Two-Speed Continuous Rotation

(Position Module only)

Target Speed with

RPS Inactive

Target Speed with

RPS Active

Starting

Position

Ending Position

Measured from the starting point

Figure 9-6 Mode Selections for the Position Module

257

S7-200 Programmable Controller System Manual

Creating the Steps for the Profile

A step is a fixed distance that a tool moves, including the distance covered during acceleration and deceleration times. In the case of the PTO a maximum of 29 steps are allowed in each profile.

The module supports a maximum of 4 steps in each profile.

You specify the target speed and ending position or number of pulses for each step. Additional steps are entered one at a time. Figure 9-7 illustrates a one-step, two-step, three-step and a four-step profile.

Notice that a one-step profile has one constant speed segment, a two-step profile has two constant speed segments, and so on. The number of steps in the profile matches the number of constant speed segments of the

One-Step Profile

Three-Step Profile

Two-Step Profile

Four-Step Profile

Figure 9-7 Sample Motion Profiles

Using the PTO Output

PTO provides a square wave output (50% duty cycle) for a specified number of pulses. The frequency or cycle time of each pulse changes linearly with frequency during acceleration and deceleration and remains fixed during the constant frequency portions of a movement. Once the specified number of pulses have been generated, the PTO output turns off and no further pulses are generated until a new specification is loaded. See

Figure 9-8.

50%

Off

Cycle Time

50%

On

50%

Off

50%

On

Figure 9-8 Pulse Train Output (PTO)

258

Open Loop Motion Control with the S7-200

Chapter 9

Configuring the PTO Output

To configure one of the built in outputs for PTO operation use the Position Control wizard. To start the Position Control wizard, either click the Tools icon in the navigation bar and then double-click the Position Control Wizard icon, or select the

Tools> Position Control Wizard

menu command.

1. Select the option to configure the onboard PTO/PWM operation for the S7-200 PLC.

2. Choose the output Q0.0 or Q0.1 that you wish to configure as a PTO output.

3. Select Linear Pulse Train Output (PTO) from the drop down dialog box.

4. If you wish to monitor the number of pulses generated by the PTO, select the use High

Speed Counter by clicking the check box.

5. Enter the MAX_SPEED and the SS_SPEED in the designated edit boxes.

6. Enter the acceleration and deceleration times in the designated edit boxes.

7. In the motion profile definition screen, click the new profile button to enable defining the profile. Choose the desired mode of operation.

For a relative position profile:

Fill in the target speed and the number of pulses. You may then click the plot step button to see a graphical representation of the move.

If more than one step is needed, click the new step button and fill in the step information as required.

For a single speed, continuous rotation:

Enter the single speed value in the edit box.

If you wish to terminate the single speed, continuous rotation move, click the Program a Subroutine check box and and enter the number of pulses to move after the Stop event.

8. Define as many profiles and steps as you need to perform the desired movement

9. Then select Finish to complete the wizard.

259

S7-200 Programmable Controller System Manual

Instructions Created by the Position Control Wizard

The Position Control wizard makes controlling your built-in PTO easier by creating five unique instruction subroutines. Each position instruction is prefixed with a “PTO

x

_” where

x

is the channel number (x=0 for Q0.0, x=1 for Q0.1).

PTOx_CTRL Subroutine

The PTOx_CTRL subroutine (Control) enables and initializes the PTO output for use with a stepper or servo motor. Use this subroutine only once in your program and ensure that it is executed every scan. Always use SM0.0 as the input for the EN input.

The I_STOP (Immediate STOP) input is a Boolean input.

When this input is low, the PTO function operates normally.

When this input goes high, the PTO terminates the issuance of pulses immediately.

The D_STOP (Decelerated STOP) input is a Boolean input.

When this input is low, the PTO function operates normally.

When this input goes high, the PTO generates a pulse train that decelerates the motor to a stop.

The Done output is a Boolean output. When the Done bit is set high, it indicates the subroutine has been executed by the CPU.

When the Done bit is high, the Error byte reports normal completion with no error or with an error code. See Table 9-7 for definitions of the error codes.

The C_Pos parameter contains the current position of the module as the number of pulses if the

HSC was enabled in the wizard. Otherwise the current position is always 0.

Table 9-3 Parameters for the PTOx_CTRL Instruction

Inputs/Outputs

I_STOP

D_STOP

Done

Error

C_Pos

Data Types

BOOL

BOOL

BOOL

BYTE

DWORD

Operands

I, Q, V, M, SM, S, T, C, L, Power Flow

I, Q, V, M, SM, S, T, C, L, Power Flow

I, Q, V, M, SM, S, T, C, L

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *AC, *LD

ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *AC, *LD

260

Open Loop Motion Control with the S7-200

Chapter 9

PTOx_RUN Subroutine

The PTOx_RUN subroutine (Run Profile) commands the

PLC to execute the motion operation in a specific profile stored in the configuration/profile table.

Turning on the EN bit enables the subroutine. Ensure that the EN bit stays on until the Done bit signals that the execution of the subroutine has completed.

Turning on the START parameter initiates execution of the profile. For each scan when the START parameter is on and the PTO is not currently active, the instruction activates the

PTO. To ensure that only one command is sent, use an edge detection element to pulse the START parameter on.

The Profile parameter contains the number or the symbolic name for the motion profile.

Turning on the Abort parameter commands the Position module to stop the current profile and decelerate until the motor comes to a stop.

The Done parameter turns on when the module completes this instruction.

The Error parameter contains the result of this instruction.

See Table 9-7 for definitions of the error codes.

The C_Profile parameter contains the profile currently being executed by the Position module.

The C_Step parameter contains the step of the profile currently being executed.

The C_Pos parameter contains the current position of the module as the number of pulses if the

HSC was enabled in the wizard. Otherwise the current position is always 0.

Table 9-4

Inputs/Outputs

START

Profile

Abort, Done

Error, C_Profile,

C_Step

C_Pos

Parameters for the PTOx_RUN Instruction

Data Types

BOOL

BYTE

BOOL

BYTE

Operands

I, Q, V, M, SM, S, T, C, L, Power Flow

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *AC, *LD, Constant

I, Q, V, M, SM, S, T, C, L

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *AC, *LD

DINT ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *AC, *LD

261

S7-200 Programmable Controller System Manual

PTOx_MAN Subroutine

The PTOx_MAN subroutine (Manual Mode) puts the PTO output in manual mode. This allows the motor to be started, stopped and run at different speeds within the range from

Start/Stop speed through Maximum speed as specified in the wizard. While the PTOx_MAN subroutine is enabled, no other PTOx_RUN or PTOx_ADV instructions should be executed.

Enabling the RUN (Run/Stop) parameter commands the

PTO to accelerate to the specified speed (Speed parameter). You can change the value for the Speed parameter while the motor is running. Disabling the RUN parameter commands the PTO to decelerate until the motor comes to a stop.

The Speed parameter determines the speed when RUN is enabled. The speed will be clamped to Start/Stop or

Maximum for values of the Speed parameter outside this range. The speed is a DINT value for pulses/second. You can change this parameter while the motor is running.

The Error parameter contains the result of this instruction.

See Table 9-7 for definitions of the error codes.

The C_Pos parameter contains the current position of the module as the number of pulses if the

HSC was enabled in the wizard. Otherwise the current position is always 0.

Table 9-5 Parameters for the PTOx_MAN Instruction

Inputs/Outputs

RUN

SPEED

Error

C_Pos

Data Types

BOOL

DINT

BYTE

DINT

Operands

I, Q, V, M, SM, S, T, C, L, Power Flow

ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *AC, *LD, Constant

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *AC, *LD

ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *AC, *LD

Tip

The PTO may not react to small changes in the Speed parameter, especially if the configured acceleration or deceleration time is short and the difference between the configured maximum speed and start/stop speed is large.

262

Open Loop Motion Control with the S7-200

Chapter 9

PTOx_LDPOS Instruction

The PTOx_LDPOS instruction (Load Position) changes the current position value of the PTO pulse counter to a new value. You can also use this instruction to establish a new zero position for any move command.

Turning on the EN bit enables the instruction. Ensure that the EN bit stays on until the Done bit signals that the execution of the instruction has completed.

Turning on the START parameter loads a new position into the PTO pulse counter. For each scan when the START parameter is on and the PTO is not currently busy, the instruction loads a new position into the PTO pulse counter.

To ensure that only one command is sent, use an edge detection element to pulse the START parameter on.

The New_Pos parameter provides the new value to replace the current position value that is reported. The position value is expressed as a number of pulses.

The Done parameter turns on when the module completes this instruction.

The Error parameter contains the result of this instruction. See Table 9-7 for definitions of the error codes.

The C_Pos parameter contains the current position of the module as the number of pulses if the

HSC was enabled in the wizard. Otherwise the current position is always 0.

Table 9-6 Parameters for the PTOx_LDPOS Instruction

Inputs/Outputs

START

New_Pos, C_Pos

Done

Error

Data Types

BOOL

DINT

BOOL

BYTE

Operands

I, Q, V, M, SM, S, T, C, L, Power Flow

ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *AC, *LD

I, Q, V, M, SM, S, T, C, L

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *AC, *LD

263

S7-200 Programmable Controller System Manual

PTOx_ADV Subroutine

The PTOx_ADV subroutine stops the current continuous motion profile and advances the number of pulses specified in the wizard profile definition. This subroutine is created if you have specified at least one single speed continuous rotation with the PTOx_ADV option enabled in the Position

Control Wizard.

Error Codes for the PTO Instructions

Table 9-7

Error Code

0

1

2

3

127

128

129

130

132

PTO Instruction Error Codes

Description

No error, normal completion

Immediate STOP issued during move. STOP command completed successfully

Decelerated STOP issued during move. STOP command completed successfully

Execution error detected in the pulse generator or in format of the PTO table

An ENO error was encountered. Check PLC information for description on non-fatal error

Busy. Another PTO operation is already in process

Both the Immediate STOP and Decelerated STOP commands were enabled at the same time, resulting in an immediate STOP

The PTO instruction is currently being commanded to STOP

Requested profile number is out of range

264

Open Loop Motion Control with the S7-200

Chapter 9

Features of the Position Module

The Position module provides the functionality and performance that you need for single-axis, open-loop position control:

—

—

—

—

—

—

—

—

Provides high-speed control, with a range from 20 pulses per second up to 200,000 pulses per second

Supports both jerk (S curve) or linear acceleration and deceleration

Provides a configurable measuring system that allows you to enter data either as engineering units (such as inches or centimeters) or as a number of pulses

Provides configurable backlash compensation

Supports absolute, relative, and manual methods of position control

Provides continuous operation

Provides up to 25 motion profiles, with up to 4 speed changes per profile

Provides four different reference-point seek modes, with a choice of the starting seek direction and the final approach direction for each sequence

Provides removable field wiring connectors for easy installation and removal

Figure 9-9 EM 253 Position Module

You use STEP 7—Micro/WIN to create all of the configuration and profile information used by the

Position module. This information is downloaded to the S7-200 with your program blocks.

Because all the information required for position control is stored in the S7-200, you can replace a

Position module without having to reprogram or reconfigure the module.

The S7-200 reserves 8 bits of the process image output register (Q memory) for the interface to the Position module. Your application program in the S7-200 uses these bits to control the operation of the Position module. These 8 output bits are not connected to any of the physical field outputs of the Position module.

The Position module provides five digital inputs and four digital outputs that provide the interface to your motion application. See Table 9-8. These inputs and outputs are local to the Position module. Appendix A provides the detailed specifications for the Position module and also includes wiring diagrams for connecting the Position module to some of the more common motor driver/amplifier units.

Table 9-8

Signal

STP

RPS

ZP

LMT+

LMT—

P0

P1

P0+, P0—

P1+, P1—

DIS

CLR

Inputs and Outputs of the Position Module

Description

The STP input causes the module to stop the motion in progress. You can select the desired operation of STP within the Position Control wizard.

The RPS (Reference Point Switch) input establishes the reference point or home position for absolute move operations.

The ZP (Zero Pulse) input helps establish the reference point or home position. Typically, the motor driver/amplifier pulses ZP once per motor revolution.

LMT+ and LMT— inputs establish the maximum limits for motion travel. The Position Control wizard allows you to configure the operation of LMT+ and LMT— inputs.

P0 and P1 are open drain transistor pulse outputs that control the movement and direction of movement of the motor. P0+, P0— and P1+, P1— are differential pulse outputs that provide the identical functions of P0 and P1, respectively, while providing superior signal quality. The open drain outputs and the differential outputs are all active simultaneously. Based upon the interface requirements of motor driver/amplifier, you choose which set of pulse outputs to use.

DIS is an open drain transistor output used to disable or enable the motor driver/amplifier.

CLR is an open drain transistor output used to clear the servo pulse count register.

265

S7-200 Programmable Controller System Manual

Programming the Position Module

STEP 7—Micro/WIN provides easy-to-use tools for configuring and programming the Position module. Simply follow these steps:

1. Configure the Position module. STEP 7—Micro/WIN provides a Position Control wizard for creating the configuration/profile table and the position instructions. See Configuring the

Position Module on page 270 for information about configuring the Position module.

2. Test the operation of the Position Module. STEP 7—Micro/WIN provides an EM 253 control panel for testing the wiring of the inputs and outputs, the configuration of the Position module, and the operation of the motion profiles. See page 290 for information about the

EM 253 control panel.

3. Create the program to be executed by the S7-200. The Position Control wizard automatically creates the position instructions that you insert into your program. See page 273 for information about the position instructions. Insert the following instructions into your program:

— To enable the Position module, insert a POSx_CTRL instruction. Use SM0.0 (Always

On) to ensure that this instruction is executed every scan.

— To move the motor to a specific location, use a POSx_GOTO or a POSx_RUN instruction. The POSx_GOTO instruction move to a location specified by the inputs from your program. The POSx_RUN instruction executes the motion profiles you configured with the Position Control wizard.

— To use absolute coordinates for your motion, you must establish the zero position for your application. Use the a POSx_RSEEK or a POSx_LDPOS instruction to establish the zero position.

— The other instructions that are created by the Position Control wizard provide functionality for typical applications and are optional for your specific application.

4. Compile your program and download the system block, data block, and program block to the S7-200.

Tip

Refer to Appendix A for information about connecting the Position module to several common stepper motor controllers.

Tip

To match the default settings in the Position Control wizard, set the DIP switches on the stepper motor controller to 10,000 pulses per revolution.

266

Open Loop Motion Control with the S7-200

Chapter 9

Configuring the Position Module

Position

Control

You must create a configuration/profile table for the Position module in order for the module to control your motion application. The Position Control wizard makes the configuration process quick and easy by leading you step-by-step through the configuration process. Refer to the

Advanced Topics on page 294 for detailed information about the configuration/profile table.

The Position Control wizard also allows you to create the configuration/profile table offline. You can create the configuration without being connected to an S7-200 CPU with a Position module installed.

To run the Position Control wizard, your project must have been compiled and set to symbolic addressing mode.

To start the Position Control wizard, either click the Tools icon in the navigation bar and then double-click the

Position Control Wizard icon, or select the

Tools> Position Control Wizard

menu command.

Figure 9-10 Position Control Wizard

To configure the Position Control Module use the Position Control wizard. Select the option to configure the EM 253 Position Control Module.

Enter location of module

Specify the module slot position (module 0 to module 6). If STEP 7—Micro/WIN is connected to the

PLC, you only have to click the Read Modules button. For an S7-200 CPU with firmware prior to version 1.2, the module must be installed next to the CPU.

Select type of measurement

Select the measurement system. You can select either engineering units or pulses. If you select pulses, no other information is required. If you select engineering units, the number of pulses required to produce one revolution of the motor (refer to the data sheet for your motor or drive), the base unit of measurement (such as inch, foot, millimeter, or centimeter), and the distance traveled in one revolution of the motor.

—

—

STEP 7—Micro/WIN provides an EM253 Control Panel that allows you to modify the number of units per revolution after the Position module has been configured.

If you change the measurement system later, you must delete the entire configuration including any instructions generated by the Position Control wizard. You must then enter your selections consistent with the new measurement system.

267

S7-200 Programmable Controller System Manual

P0

Edit default input and output configuration

To change or view the default configuration of the integrated inputs/outputs select the Advanced

Options button.

—

—

—

Use the Input Active Levels tab to select the active level (High or Low). When the level is set to High, a logic 1 is read when current is flowing in the input. When the level is set to

Low, a logic 1 is read when there is no current flow in the input. A logic 1 level is always interpreted as meaning the condition is active. The LEDs are illuminated when current flows in the input, regardless of activation level. (Default = active high)

Use the Input Filter Times tab to select the filter time constant (0.20 ms to 12.80 ms) for the

STP, RPS, LMT+, and LMT— inputs. Increasing the filter time constant eliminates more noise, but it also slows down the response time to a signal state change. (Default = 6.4 ms)

Use the Pulse and Directional Outputs tab to select the polarity of the outputs and to select the direction control method. See Figures 9-11 and 9-12 to see the effects of polarity and direction control method selections.

Positive Rotation Negative Rotation Positive Rotation Negative Rotation

P0

P1 P1 ²

0.5

m s

Figure 9-11 Rotation Options for Positive Polarity

Positive Rotation Negative Rotation

P0

P1

P0

P1

Positive Rotation Negative Rotation

²

0.5

m s

Figure 9-12 Rotation Options for Negative Polarity

Warning

Control devices can fail in unsafe conditions, and can result in unpredictable operation of controlled equipment. Such unpredictable operations could result in death or serious personal injury, and/or equipment failure.

The limit and stop functions in the Position Module are electronic logic implementations that do not provide the level of protection provided by electromechanical controls. Consider using an emergency stop function, electromechanical overrides, or redundant safeguards that are independent of the Position module and the S7-200 CPU.

Configure response of module to physical inputs

Next, select the module response to the LMT+, the LMT—, and the STP inputs. Use the drop down box to select: no action (ignore the input condition), decelerate to a stop (default), or immediate stop.

Enter maximum start and stop speed

Enter the maximum speed (MAX_SPEED) and Start/Stop Speed (SS_SPEED) for your application

268

Open Loop Motion Control with the S7-200

Chapter 9

Enter jog parameters

Next, enter the JOG_SPEED and the JOG_INCREMENT values.

—

JOG_SPEED: The JOG_SPEED (Jog speed for the motor) is the maximum speed that can be obtained while the JOG command remains active.

—

JOG_INCREMENT: Distance that the tool is moved by a momentary JOG command.

Figure 9-13 shows the operation of the Jog command. When the Position module receives a Jog command, it starts a timer. If the Jog command is terminated before 0.5 seconds has elapsed, the

Position module moves the tool the amount specified in the JOG_INCREMENT at the speed defined by SS_SPEED. If the Jog command is still active when the 0.5 seconds have elapsed, the

Position module accelerates to the JOG_SPEED. Motion continues until the Jog command is terminated. The Position module then performs a decelerated stop. You can enable the Jog command either from the EM 253 control panel or with a position instruction.

MAX_SPEED

Speed

JOG command terminated

JOG_SPEED

SS_SPEED

Distance

JOG_INCREMENT

JOG command active for less than 0.5 seconds

Figure 9-13 Representation of a JOG Operation

JOG command active for more than 0.5 seconds

Enter acceleration time

Enter the acceleration and deceleration times in the edit boxes

Enter jerk time

For single step moves enter the jerk time compensation. This provides smoother position control by reducing the jerk (rate of change) in acceleration and deceleration parts of the motion profile.

See Figure 9-14.

Jerk time compensation is also known as ”S curve profiling.” This compensation is applied equally to the beginning and ending portions of both the acceleration and deceleration curve. Jerk compensation is not applied to the initial and final step between zero speed and SS_SPEED.

269

S7-200 Programmable Controller System Manual

You specify the jerk compensation by entering a time value (JERK_TIME). This is the time required for acceleration to change from zero to the maximum acceleration rate. A longer jerk time yields smoother operation with a smaller increase in total cycle time than would be obtained by decreasing the

ACCEL_TIME and DECEL_TIME. A value of zero indicates that no compensation is to be applied.

(Default = 0 ms)

MAX_SPEED

Speed

SS_SPEED

JERK_TIME

Figure 9-14 Jerk Compensation

Tip

A good first value for JERK_TIME is 40% of ACCEL_TIME.

Distance

Configure reference point and seek parameters

Select using a reference point or not using a reference point for your application.

—

—

If your application requires that movements start from or be referenced to an absolute position, you must establish a reference point (RP) or zero position that fixes the position measurements to a known point on the physical system.

If a reference point is used, you will want to define a way to automatically relocate the reference point. The process of automatically locating the reference point is called

Reference Point Seek. Defining the Reference Point Seek process requires two steps in the wizard.

Enter the Reference Point seek speeds (a fast seek speed and a slow seek speed). Define the initial seek direction and the final reference point approach direction. Use the advanced

RP Options button to enter Reference Point Offset and backlash compensation values.

RP_FAST

is the initial speed the module uses when performing an RP seek command.

Typically, the RP_FAST value is approximately 2/3 of the MAX_SPEED value.

RP_SLOW

is the speed of the final approach to the RP. A slower speed is used on approach to the RP, so as not to miss it. Typically, the RP_SLOW value is the SS_SPEED value.

RP_SEEK_DIR

is the initial direction for the RP seek operation. Typically, this is the direction from the work zone to the vicinity of the RP. Limit switches play an important role in defining the region that is searched for the RP. When performing a RP seek operation, encountering a limit switch can result in a reversal of the direction, which allows the search to continue. (Default = Negative)

RP_APPR_DIR

is the direction of the final approach to the RP. To reduce backlash and provide more accuracy, the reference point should be approached in the same direction used to move from the RP to the work zone. (Default = Positive)

270

Open Loop Motion Control with the S7-200

Chapter 9

—

—

The Position Control wizard provides advanced reference point options that allow you to specify an RP offset (RP_OFFSET), which is the distance from the RP to the zero position.

See Figure 9-15.

RP_OFFSET

: Distance from the

RP to the zero position of the physical measuring system.

Default = 0

Backlash compensation

:

Distance that the motor must move to eliminate the slack (backlash) in y

B kl h ti i l g a positive value. Default = 0

RP

Work

Zone

RP_OFFSET

Zero Position

Figure 9-15 Relationship Between RP and Zero Position

Choose a Reference Point search sequence.

The Position module provides a reference point switch (RPS) input that is used when seeking the RP. The RP is identified by a method of locating an exact position with respect to the RPS. The RP can be centered in the RPS Active zone, the RP can be located on the edge of the RPS Active zone, or the RP can be located a specified number of zero pulse

(ZP) input transitions from the edge of the RPS Active zone.

You can configure the sequence that the Position module uses to search for the reference point. Figure 9-16 shows a simplified diagram of the default RP search sequence. You can select the following options for the RP search sequence:

RP Seek mode 0

: Does not perform a RP seek sequence

RP Seek mode 1

: The RP is where the RPS input goes active on the approach from the work zone side. (Default)

RP Seek mode 2

: The RP is centered within the active region of the RPS input.

RP Seek mode 3

: The RP is located outside the active region of the RPS input. RP_Z_CNT specifies how many ZP (Zero

Pulse) input counts should be received after the RPS becomes inactive.

RP Seek mode 4

: The RP is generally within the active region of the RPS input. RP_Z_CNT specifies how many ZP (Zero

Pulse) input counts should be received after the RPS becomes active.

RP Seek Mode 1

LMT—

Active

RPS

Active

RP Seek Direction

RP Approach Direction

Work Zone

Figure 9-16 Default RP Search Sequence (Simplified)

Tip

The RPS Active region (which is the distance that the RPS input remains active) must be greater than the distance required to decelerate from the RP_FAST speed to the RP_SLOW speed. If the distance is too short, the Position module generates an error.

271

S7-200 Programmable Controller System Manual

Command byte

Next enter the Q byte address for the command byte. The command byte is the address of the 8 digital outputs reserved in the process image register for the interface to the Position Module. See

Figure 4-11 in Chapter 4 for a description of the I/O numbering.

Defining the motion profile

In the motion profile definition screen, click the new profile button to enable defining the profile.

Choose the desired mode of operation.

—

—

—

—

For an absolute position profile:

Fill in the target speed and the ending position. You may then click the plot step button to see a graphical representation of the move.

If more than one step is needed, click the new step button and fill in the step information as required.

For a relative position profile:

Fill in the target speed and the ending position. You may then click the plot step button to see a graphical representation of the move.

If more than one step is needed, click the new step button and fill in the step information as required.

For a single-speed, continuous rotation:

Enter the single speed value in the edit box.

Select the direction of rotation

If you wish to terminate the single speed, continuous rotation move using the RPS input, click the check box.

For a two-speed, continuous rotation:

Enter the target speed value when RPS is high in the edit box.

Enter the target speed value when RPS is low in the edit box.

Select the direction of rotation

Define as many profiles and steps as you need to perform the desired movement.

Finish the configuration

After you have configured the operation of the Position module, you simply click Finish, and the

Position Control wizard performs the following tasks:

—

—

Inserts the module configuration and profile table into the data block for your S7-200 program

Creates a global symbol table for the motion parameters

—

Adds the motion instruction subroutines into the project program block for you to use in your application

You can run the Position Control wizard again in order to modify any configuration or profile information.

Tip

Because the Position Control wizard makes changes to the program block, the data block and the system block, be sure to download all three blocks to the S7-200 CPU. Otherwise, the

Position module might not have all the program components that it needs for proper operation.

272

Open Loop Motion Control with the S7-200

Chapter 9

Instructions Created by the Position Control Wizard for the

Position Module

The Position Control wizard makes controlling the Position module easier by creating unique instruction subroutines based on the position of the module and configuration options you selected. Each position instruction is prefixed with a ”POS

x

_” where

x

is the module location.

Because each position instruction is a subroutine, the 11 position instructions use 11 subroutines.

Tip

The position instructions increase the amount of memory required for your program by up to

1700 bytes. You can delete unused position instructions to reduce the amount of memory required. To restore a deleted position instruction, simply run the Position Control wizard again.

Guidelines for Using the Position Instructions

You must ensure that only one position instruction is active at a time.

You can execute the POSx_RUN and POSx_GOTO from an interrupt routine. However, it is very important that you do not attempt to start an instruction in an interrupt routine if the module is busy processing another command. If you start an instruction in an interrupt routine, then you can use the outputs of the POSx_CTRL instruction to monitor when the Position module has completed the movement.

The Position Control wizard automatically configures the values for the speed parameters (Speed and C_Speed) and the position parameters (Pos or C_Pos) according to the measurement system that you selected. For pulses, these parameters are DINT values. For engineering units, the parameters are REAL values for the type of unit that you selected. For example: selecting centimeters (cm) stores the position parameters as REAL values in centimeters and stores the speed parameters as REAL values in centimeters per second (cm/sec).

The following position instructions are required for specific position control tasks:

—

—

—

Insert the POSx_CTRL instruction in your program and use the SM0.0 contact to execute it every scan.

To specify motion to an absolute position, you must first use either an POSx_RSEEK or a

POSx_LDPOS instruction to establish the zero position.

To move to a specific location, based on inputs from your program, use the POSx_GOTO instruction.

—

To run the motion profiles you configured with the Position Control wizard, use the

POSx_RUN instruction.

The other position instructions are optional.

273

S7-200 Programmable Controller System Manual

POSx_CTRL Instruction

The POSx_CTRL instruction (Control) enables and initializes the Position module by automatically commanding the Position module to load the configuration/profile table each time the S7-200 changes to RUN mode.

Use this instruction only once in your project, and ensure that your program calls this instruction every scan. Use

SM0.0 (Always On) as the input for the EN parameter.

The MOD_EN parameter must be on to enable the other position instructions to send commands to the Position module. If the MOD_EN parameter turns off, then the

Position module aborts any command that is in progress.

The output parameters of the POSx_CTRL instruction provide the current status of the Position module.

The Done parameter turns on when the Position module completes any instruction.

The Error parameter contains the result of this instruction.

See Table 9-20 for definitions of the error codes.

The C_Pos parameter is the current position of the module. Based of the units of measurement, the value is either a number of pulses (DINT) or the number of engineering units (REAL).

The C_Speed parameter provides the current speed of the module. If you configured the measurement system for the Position module for pulses, C_Speed is a DINT value containing the number of pulses/second. If you configured the measurement system for engineering units,

C_Speed is a REAL value containing the selected engineering units/second (REAL).

The C_Dir parameter indicates the current direction of the motor.

Table 9-9 Parameters for the POSx_CTRL Instruction

Inputs/Outputs

MOD_EN

Done, C_Dir

Error

C_Pos, C_Speed

Data Type

BOOL

BOOL

BYTE

DINT, REAL

Operands

I, Q, V, M, SM, S, T, C, L, Power Flow

I, Q, V, M, SM, S, T, C, L

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *AC, *LD

ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *AC, *LD

Tip

The Position module reads the configuration/profile table only at power-up or when commanded to load the configuration.

H

If you use the Position Control wizard to modify the configuration, then the POSx_CTRL instruction automatically commands the Position module to load the configuration/profile table every time the S7-200 CPU changes to RUN mode.

H

If you use the EM 253 Control Panel to modify the configuration, clicking the Update

Configuration button commands the Position module to load the new configuration/profile table.

H

If you use another method to modify the configuration, then you must also issue a Reload the Configuration command to the Position module to load the configuration/profile table.

Otherwise, the Position module continues to use the old configuration/profile table.

274

Open Loop Motion Control with the S7-200

Chapter 9

POSx_MAN Instruction

The POSx_MAN instruction (Manual Mode) puts the

Position module into manual mode. This allows the motor to be run at different speeds or to be jogged in a positive or negative direction. While the POSx_MAN instruction is enabled, only the POSx_CTRL and POSx_DIS instructions are allowed.

You can enable only one of the RUN, JOG_P, or JOG_N inputs at a time.

Enabling the RUN (Run/Stop) parameter commands to the

Position module to accelerate to the specified speed

(Speed parameter) and direction (Dir parameter). You can change the value for the Speed parameter while the motor is running, but the Dir parameter must remain constant.

Disabling the RUN parameter commands the Position module to decelerate until the motor comes to a stop.

Enabling the JOG_P (Jog Positive Rotation) or the JOG_N

(Jog Negative Rotation) parameter commands the Position module to jog in either a positive or negative direction. If the

JOG_P or JOG_N parameter remains enabled for less than

0.5 seconds, the Position module issues pulses to travel the distance specified in JOG_INCREMENT. If the JOG_P or

JOG_N parameter remains enabled for 0.5 seconds or longer, the motion module begins to accelerate to the specified JOG_SPEED.

The Speed parameter determines the speed when RUN is enabled. If you configured the measuring system of the Position module for pulses, the speed is a DINT value for pulses/second.

If you configured the measuring system of the Position module for engineering units, the speed is a REAL value for units/second. You can change this parameter while the motor is running.

Tip

The Position module may not react to small changes in the Speed parameter, especially if the configured acceleration or deceleration time is short and the difference between the configured maximum speed and start/stop speed is large.

For more information refer to FAQ 22632118 on the Siemens Internet site at www.siemens.com/S7—200.

The Dir parameter determines the direction to move when RUN is enabled. You cannot change this value when the RUN parameter is enabled.

The Error parameter contains the result of this instruction. See Table 9-20 for definitions of the error codes.

The C_Pos parameter contains the current position of the module. Based of the units of measurement selected, the value is either a number of pulses (DINT) or the number of engineering units (REAL).

The C_Speed parameter contains the current speed of the module. Based of the units of measurement selected, the value is either the number of pulses/second (DINT) or the engineering units/second (REAL).

The C_Dir parameter indicates the current direction of the motor.

Table 9-10 Parameters for the POSx_MAN Instruction

Inputs/Outputs Data Type

RUN, JOG_P, JOG_N BOOL

Speed

Dir, C_Dir

DINT, REAL

BOOL

Error

C_Pos, C_Speed

BYTE

DINT, REAL

Operands

I, Q, V, M, SM, S, T, C, L, Power Flow

ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *AC, *LD, Constant

I, Q, V, M, SM, S, T, C, L

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *AC, *LD

ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *AC, *LD

275

S7-200 Programmable Controller System Manual

POSx_GOTO Instruction

The POSx_GOTO instruction commands the Position

Module to go to a desired location.

Turning on the EN bit enables the instruction. Ensure that the EN bit stays on until the DONE bit signals that the execution of the instruction has completed.

Turning on the START parameter sends a GOTO command to the Position module. For each scan when the START parameter is on and the Position module is not currently busy, the instruction sends a GOTO command to the

Position module. To ensure that only one GOTO command is sent, use an edge detection element to pulse the START parameter on.

The Pos parameter contains a value that signifies either the location to move (for an absolute move) or the distance to move (for a relative move). Based of the units of measurement selected, the value is either a number of pulses (DINT) or the engineering units (REAL).

The Speed parameter determines the maximum speed for this movement. Based of the units of measurement, the value is either a number of pulses/second (DINT) or the engineering units/second (REAL).

The Mode parameter selects the type of move:

0 — Absolute position

1 — Relative position

2 — Single—speed, continuous positive rotation

3 — Single—speed, continuous negative rotation

The Done parameter turns on when the Position module completes this instruction.

Turning on the Abort parameter commands the Position module to stop the current profile and decelerate until the motor comes to a stop.

The Error parameter contains the result of this instruction. See Table 9-20 for definitions of the error codes.

The C_Pos parameter contains current position of the module. Based of the units of measurement, the value is either a number of pulses (DINT) or the number of engineering units

(REAL).

The C_Speed parameter contains the current speed of the module. Based of the units of measurement, the value is either a number of pulses/second (DINT) or the engineering units/second (REAL).

Table 9-11 Parameters for the POSx_GOTO Instruction

Inputs/Outputs

START

Pos, Speed

Mode

Abort, Done

Error

C_Pos, C_Speed

Data Type

BOOL

DINT, REAL

BYTE

BOOL

BYTE

DINT, REAL

Operands

I, Q, V, M, SM, S, T, C, L, Power Flow

ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *AC, *LD, Constant

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *AC, *LD, Constant

I, Q, V, M, SM, S, T, C, L

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *AC, *LD

ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *AC, *LD

276

Open Loop Motion Control with the S7-200

Chapter 9

POSx_RUN Instruction

The POSx_RUN instruction (Run Profile) commands the

Position module to execute the motion operation in a specific profile stored in the configuration/profile table.

Turning on the EN bit enables the instruction. Ensure that the EN bit stays on until the Done bit signals that the execution of the instruction has completed.

Turning on the START parameter sends a RUN command to the Position module. For each scan when the START parameter is on and the Position module is not currently busy, the instruction sends a RUN command to the Position module. To ensure that only one command is sent, use an edge detection element to pulse the START parameter on.

The Profile parameter contains the number or the symbolic name for the motion profile. You can also select the advanced motion commands (118 to 127). For information about the motion commands, see Table 9-26.

Turning on the Abort parameter commands the Position module to stop the current profile and decelerate until the motor comes to a stop.

The Done parameter turns on when the module completes this instruction.

The Error parameter contains the result of this instruction.

See Table 9-20 for definitions of the error codes.

The C_Profile parameter contains the profile currently being executed by the Position module.

The C_Step parameter contains the step of the profile currently being executed.

The C_Pos parameter contains the current position of the module. Based of the units of measurement, the value is either a number of pulses (DINT) or the number of engineering units

(REAL).

The C_Speed parameter contains the current speed of the module. Based of the units of measurement, the value is either a number of pulses/second (DINT) or the engineering units/second (REAL).

Table 9-12 Parameters for the POSx_RUN Instruction

Inputs/Outputs

START

Profile

Abort, Done

Error, C_Profile, C_Step

C_Pos, C_Speed

Data Type

BOOL

BYTE

BOOL

BYTE

DINT, REAL

Operands

I, Q, V, M, SM, S, T, C, L, Power Flow

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *AC, *LD, Constant

I, Q, V, M, SM, S, T, C, L

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *AC, *LD

ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *AC, *LD

277

S7-200 Programmable Controller System Manual

POSx_RSEEK Instruction

The POSx_RSEEK instruction (Seek Reference Point

Position) initiates a reference point seek operation, using the search method in the configuration/profile table. When the Position module locates the reference point and motion has stopped, the Position module loads the RP_OFFSET parameter value into the current position and generates a

50-millisecond pulse on the CLR output.

The default value for RP_OFFSET is 0. You can use the

Position Control wizard, the EM253 Control Panel, or the

POSx_LDOFF (Load Offset) instruction to change the

RP_OFFSET value.

Turning on the EN bit enables the instruction. Ensure that the EN bit stays on until the Done bit signals that the execution of the instruction has completed.

Turning on the START parameter sends a RSEEK command to the Position module. For each scan when the

START parameter is on and the Position module is not currently busy, the instruction sends a RSEEK command to the Position module. To ensure that only one command is sent, use an edge detection element to pulse the START parameter on.

The Done parameter turns on when the module completes this instruction.

The Error parameter contains the result of this instruction. See Table 9-20 for definitions of the error codes.

Table 9-13 Parameters for the POSx_RSEEK Instruction

Inputs/Outputs

START

Done

Error

Data Type

BOOL

BOOL

BYTE

Operands

I, Q, V, M, SM, S, T, C, L, Power Flow

I, Q, V, M, SM, S, T, C, L

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *AC, *LD

278

Open Loop Motion Control with the S7-200

Chapter 9

POSx_LDOFF Instruction

The POSx_LDOFF instruction (Load Reference Point

Offset) establishes a new zero position that is at a different location from the reference point position.

Before executing this instruction, you must first determine the position of the reference point. You must also move the machine to the starting position. When the instruction sends the LDOFF command, the Position module computes the offset between the starting position (the current position) and the reference point position. The Position module then stores the computed offset to the RP_OFFSET parameter and sets the current position to 0. This establishes the starting position as the zero position.

In the event that the motor loses track of its position (such as on loss of power or if the motor is repositioned manually), you can use the POSx_RSEEK instruction to re-establish the zero position automatically.

Turning on the EN bit enables the instruction. Ensure that the EN bit stays on until the Done bit signals that the execution of the instruction has completed.

Turning on the START parameter sends a LDOFF command to the Position module. For each scan when the START parameter is on and the Position module is not currently busy, the instruction sends a LDOFF command to the Position module. To ensure that only one command is sent, use an edge detection element to pulse the START parameter on.

The Done parameter turns on when the module completes this instruction.

The Error parameter contains the result of this instruction. See Table 9-20 on for definitions of the error codes.

Table 9-14 Parameters for the POSx_LDOFF Instruction

Inputs/Outputs

START

Done

Error

Data Type

BOOL

BOOL

BYTE

Operands

I, Q, V, M, SM, S, T, C, L, Power Flow

I, Q, V, M, SM, S, T, C, L

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *AC, *LD

279

S7-200 Programmable Controller System Manual

POSx_LDPOS Instruction

The POSx_LDPOS instruction (Load Position) changes the current position value in the Position module to a new value. You can also use this instruction to establish a new zero position for any absolute move command.

Turning on the EN bit enables the instruction. Ensure that the EN bit stays on until the Done bit signals that the execution of the instruction has completed.

Turning on the START parameter sends a LDPOS command to the Position module. For each scan when the

START parameter is on and the Position module is not currently busy, the instruction sends a LDPOS command to the Position module. To ensure that only one command is sent, use an edge detection element to pulse the START parameter on.

The New_Pos parameter provides the new value to replace the current position value that the Position module reports and uses for absolute moves. Based of the units of measurement, the value is either a number of pulses (DINT) or the engineering units (REAL).

The Done parameter turns on when the module completes this instruction.

The Error parameter contains the result of this instruction. See Table 9-20 for definitions of the error codes.

The C_Pos parameter contains the current position of the module. Based of the units of measurement, the value is either a number of pulses (DINT) or the number of engineering units

(REAL).

Table 9-15 Parameters for the POSx_LDPOS Instruction

Inputs/Outputs

START

New_Pos, C_Pos

Done

Error

Data Type

BOOL

DINT, REAL

BOOL

BYTE

Operands

I, Q, V, M, SM, S, T, C, L, Power Flow

ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *AC, *LD

I, Q, V, M, SM, S, T, C, L

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *AC, *LD

280

Open Loop Motion Control with the S7-200

Chapter 9

POSx_SRATE Instruction

The POSx_SRATE instruction (Set Rate) commands the

Position module to change the acceleration, deceleration, and jerk times.

Turning on the EN bit enables the instruction. Ensure that the EN bit stays on until the Done bit signals that the execution of the instruction has completed.

Turning on the START parameter copies the new time values to the configuration/profile table and sends a SRATE command to the Position module. For each scan when the

START parameter is on and the Position module is not currently busy, the instruction sends a SRATE command to the Position module. To ensure that only one command is sent, use an edge detection element to pulse the START parameter on.

The ACCEL_Time, DECEL_Time, and JERK_Time parameters determine the new acceleration time, deceleration time, and jerk time in milliseconds (ms).

The Done parameter turns on when the module completes this instruction.

The Error parameter contains the result of this instruction.

See Table 9-20 for definitions of the error codes.

Table 9-16 Parameters for the POSx_SRATE Instruction

Inputs/Outputs

START

ACCEL_Time, DECEL_Time,

JERK_Time

Done

Error

Data Type

BOOL

DINT

BOOL

BYTE

Operands

I, Q, V, M, SM, S, T, C, L

ID, QD, VD, MD, SMD, SD, LD, AC, *VD, *AC, *LD,

Constant

I, Q, V, M, SM, S, T, C, L

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *AC, *LD

281

S7-200 Programmable Controller System Manual

POSx_DIS Instruction

The POSx_DIS instruction turns the DIS output of the

Position module on or off. This allows you to use the DIS output for disabling or enabling a motor controller. If you use the DIS output on the Position module, then this instruction can be called every scan or only when you need to change the value of the DIS output.

When the EN bit turns on to enable the instruction, the

DIS_ON parameter controls the DIS output of the Position module. For more information about the DIS output, see

Table 9-8 or refer to the specifications for the Position module in Appendix A.

The Error parameter contains the result of this instruction.

See Table 9-20 for definitions of the error codes.

Table 9-17 Parameters for the POSx_DIS Instruction

Inputs/Outputs

DIS_ON

Error

Data Type

BYTE

BYTE

Operands

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *AC, *LD, Constant

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *AC, *LD

282

Open Loop Motion Control with the S7-200

Chapter 9

POSx_CLR Instruction

The POSx_CLR instruction (Pulse the CLR Output) commands the Position module to generate a 50-ms pulse on the CLR output.

Turning on the EN bit enables the instruction. Ensure that the EN bit stays on until the Done bit signals that the execution of the instruction has completed.

Turning on the START parameter sends a CLR command to the Position module. For each scan when the START parameter is on and the Position module is not currently busy, the instruction sends a CLR command to the Position module. To ensure that only one command is sent, use an edge detection element to pulse the START parameter on.

The Done parameter turns on when the module completes this instruction.

The Error parameter contains the result of this instruction.

See Table 9-20 for definitions of the error codes.

Table 9-18 Parameters for the POSx_CLR Instruction

Inputs/Outputs

START

Done

Error

Data Type

BOOL

BOOL

BYTE

Operands

I, Q, V, M, SM, S, T, C, L, Power Flow

I, Q, V, M, SM, S, T, C, L

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *AC, *LD

283

S7-200 Programmable Controller System Manual

POSx_CFG Instruction

The POSx_CFG instruction (Reload Configuration) commands the Position module to read the configuration block from the location specified by the configuration/profile table pointer. The Position module then compares the new configuration with the existing configuration and performs any required setup changes or recalculations.

Turning on the EN bit enables the instruction. Ensure that the EN bit stays on until the Done bit signals that the execution of the instruction has completed.

Turning on the START parameter sends a CFG command to the Position module. For each scan when the START parameter is on and the Position module is not currently busy, the instruction sends a CFG command to the Position module. To ensure that only one command is sent, use an edge detection element to pulse the START parameter on.

The Done parameter turns on when the module completes this instruction.

The Error parameter contains the result of this instruction. See Table 9-20 for definitions of the error codes.

Table 9-19 Parameters for the POSx_CFG Instruction

Inputs/Outputs

START

Done

Error

Data Type

BOOL

BOOL

BYTE

Operands

I, Q, V, M, SM, S, T, C, L, Power Flow

I, Q, V, M, SM, S, T, C, L

IB, QB, VB, MB, SMB, SB, LB, AC, *VD, *AC, *LD

284

Open Loop Motion Control with the S7-200

Chapter 9

Sample Programs for the Position Module

The first sample program shows a simple relative move that uses the POSx_CTRL and

POSx_GOTO instructions to perform a cut-to-length operation. This program does not require an

RP seek mode or a motion profile, and the length can be measured in either pulses or engineering units. Enter the length (VD500) and target speed (VD504). When I0.0 (Start) turns on, the machine starts. When I0.1 (Stop) turns on, the machine finishes the current operation and stops.

When I0.2 (E_Stop) turns on, the machine aborts any motion and immediately stops.

The second sample program provides an example of the POSx_CTRL, POSx_RUN,

POSx_RSEEK, and POSx_MAN instructions. You must configure the RP seek mode and a motion profile.

Sample Program 1: Simple Relative Move (Cut to Length application)

Network 1 //Control instruction (module in slot 0).

LD

=

SM0.0

L60.0

LDN I0.2

=

LD

L63.7

L60.0

CALL POS0_CTRL, L63.7, M1.0, VB900,

VD902, VD906, V910.0

LD

AN

EU

S

S

Network 2

I0.0

I0.2

Q0.2, 1

M0.1, 1

//Start puts machine into

//automatic mode

Network 3

LD

R

I0.2

Q0.2, 1

//E_Stop: stops immediately and

//turns off automatic mode.

Network 4 //Move to a certain point:

//Enter the length to cut.

//Enter the target speed into Speed.

//Set the mode to 1 (Relative mode).

LD

=

LD

EU

Q0.2

L60.0

M0.1

=

LD

L63.7

L60.0

CALL POS0_GOTO, L63.7, VD500, VD504,

1, I0.2, Q0.4, VB920, VD922, VD926

Network 5 //When in position, turn on the cutter

//for 2 seconds to finish the cut.

LD

A

TON T33, +200

AN

=

Q0.2

Q0.4

T33

Q0.3

285

S7-200 Programmable Controller System Manual

Sample Program 1: Simple Relative Move (Cut to Length application) , continued

Network 6 //When the cut is finished then restart

//unless the Stop is active.

LD

A

LPS

AN

A

R

=

LPP

Q0.2

T33

I0.1

M0.1

I0.1

Q0.2, 1

Sample Program 2: Program with POSx_CTRL, POSx_RUN, POSx_SEEK, and POSx_MAN

Network 1 //Enable the Position module

LD

=

SM0.0

L60.0

LDN I0.1

=

LD

L63.7

L60.0

CALL POS0_CTRL, L63.7, M1.0, VB900,

VD902, VD906, V910.0

Network 2 //Manual mode if not in auto mode

=

LD

=

LD

LD

AN

=

LD

I1.0

M0.0

L60.0

I1.1

L63.7

I1.2

L63.6

I1.4

=

LD

L63.5

L60.0

CALL POS0_MAN, L63.7, L63.6,

L63.5, +100000, 1.5, VB920,

VD902, VD906, V910.0

Network 3

LD

EU

S

S

R

I0.0

M0.0, 2

S0.1, 1

S0.2, 8

//Enable auto mode

286

Open Loop Motion Control with the S7-200

Chapter 9

Sample Program 2: Program with POSx_CTRL, POSx_RUN, POSx_SEEK, and POSx_MAN, continued

R

R

LD

R

Network 4

I0.1

M0.0, 1

S0.1, 9

Q0.3, 3

//Emergency Stop

//Disable the module and auto mode

Network 5

LD

=

M0.0

Q0.1

//When in auto mode:

//Turn on the Running light

Network 6

LSCR S0.1

Network 7 //Find the reference point (RP)

LD

=

LD

=

S0.1

L60.0

S0.1

L63.7

LD L60.0

CALL POS0_RSEEK, L63.7, M1.1, VB930

Network 8

LD

LPS

M1.1

AB= VB930, 0

S Q0.3, 1

SCRT S0.2

LPP

AB<> VB930, 0

SCRT S1.0

//When at reference point (RP):

//Clamp the material and

//Go to the next step.

Network 9

SCRE

Network 10

LSCR S0.2

287

S7-200 Programmable Controller System Manual

Sample Program 2: Program with POSx_CTRL, POSx_RUN, POSx_SEEK, and POSx_MAN, continued

Network 11 //Use profile 1 to move into position.

LD

=

LD

=

S0.2

L60.0

S0.2

L63.7

LD L60.0

CALL POS0_RUN, L63.7, VB228, I0.1,

M1.2, VB940, VB941, VB942,

VD944, VD948

Network 12 //When positioned, turn

//on the cutter and go to

//the next step.

LD

LPS

M1.2

AB= VB940, 0

S

R

Q0.4, 1

T33, 1

SCRT S0.3

LPP

AB<> VB940, 0

SCRT S1.0

Network 13

SCRE

Network 14 //Wait for the cut to finish

LSCR S0.3

Network 15

LD S0.3

TON T33, +200

288

Open Loop Motion Control with the S7-200

Chapter 9

Sample Program 2: Program with POSx_CTRL, POSx_RUN, POSx_SEEK, and POSx_MAN, continued

Network 16 //Unless STOP is on, restart

//when the cut is finished.

R

R

LD

LPS

T33

Q0.3, 1

Q0.4, 1

AN I0.2

SCRT S0.1

LPP

A

R

I0.2

M0.0, 4

Network 17

SCRE

Network 18

LSCR S1.0

Network 19 //Reset the outputs.

LD

R

S1.0

Q0.3, 2

Network 20 //Flash the error light.

LD

=

SM0.5

Q0.5

Network 21 //Exit the error routine if STOP is on.

LD

R

R

I0.2

M0.0, 9

S0.1, 8

Network 22

SCRE

289

S7-200 Programmable Controller System Manual

Monitoring the Position Module with the EM 253 Control Panel

To aid you in the development of your Position Control solution, STEP 7—Micro/WIN provides the

EM 253 Control Panel. The Operation, Configuration and Diagnostics tabs make it easy for you to monitor and control the operation of the Position module during the startup and test phases of your development process.

Use the EM 253 Control Panel to verify that the Position module is wired correctly, to adjust the configuration data, and to test each movement profile.

Displaying and Controlling the Operation of the Position Module

The Operation tab of the control panel allows you to interact with the operations of the Position

Module. The control panel displays the current speed, the current position and the current direction of the Position module. You can also see the status of the input and output LEDs

(excluding the Pulse LEDs).

The control panel allows you to interact with the Position module by changing the speed and direction, by stopping and starting the motion, and by jogging the tool (if the motion is stopped).

You can also generate the following motion commands:

—

—

—

—

—

—

—

—

—

Enable Manual Operation. This command allows you to use the manual controls for positioning the tool.

Run a Motion Profile. This command allows you to select a profile to be executed. The control panel displays the status of the profile which is being executed by the Position module.

Figure 9-17 Operation Tab of the EM 253 Control Panel

Seek to a Reference Point. This command finds the reference point by using the configured search mode.

Load Reference Point Offset. After you use the manual controls to jog the tool to the new zero position, you then load the Reference Point Offset.

Reload Current Position. This command updates the current position value and establishes a new zero position.

Activate the DIS output and Deactivate the DIS output. These commands turn the DIS output of the Position module on and off.

Pulse the CLR output. This command generates a 50 ms pulse on the CLR output of the

Position module.

Teach a Motion Profile. This command allows you to save the target position and speed for a motion profile and step as you manually position the tool. The control panel displays the status of the profile which is being executed by the Position module.

Load Module Configuration. This command loads a new configuration by commanding the

Position module to read the configuration block from the V memory of the S7-200.

290

Open Loop Motion Control with the S7-200

Chapter 9

—

—

—

Move to an Absolute Position. This command allows you to move to a specified position at a target speed. Before using this command, you must have already established the zero position.

Move by a Relative Amount. This command allows you to move a specified distance from the current position at a target speed. You can enter a positive or negative distance.

Reset the Command Interface. This command clears the command byte for the Position module and sets the Done bit. Use this command if the Position module appears to not be responding to commands.

Displaying and Modifying the Configuration of the Position Module

The Configuration tab of the control panel allows you to view and modify the configuration settings for the Position module that are stored in the data block of the S7-200.

After you modify the configuration settings, you simple click a button to update the settings in both the

STEP 7—Micro/Win project and the data block of the S7-200.

Figure 9-18 Configuration Tab of the EM 253 Control Panel

Displaying the Diagnostics Information for the Position Module

The Diagnostics tab of the control panel allows you to view the diagnostic information about the Position module.

You can view specific information about the Position module, such as the position of the module in the I/O chain, the module type and firmware version number, and the output byte used as the command byte for the module.

The control panel displays any error condition that resulted from a commanded operation. Refer to

Table 9-20 for the instruction error conditions.

You can also view any error condition reported by the Position module. Refer to

Table 9 21 for the module error conditions.

Figure 9-19 Diagnostics Tab of the EM 253 Control Panel

291

S7-200 Programmable Controller System Manual

Error Codes for the Position Module and the Position

Instructions

Table 9-20 Instruction Error Codes

Error Code

0

1

2

Description

No error

Aborted by user

Configuration error

Use the EM 253 Control Panel Diagnostics tab to view error codes

Illegal command 3

4

9

10

11

12

7

8

5

6

Aborted due to no valid configuration

Use the EM 253 Control Panel Diagnostics tab to view error codes

Aborted due to no user power

Aborted due to no defined reference point

Aborted due to STP input active

Aborted due to LMT— input active

Aborted due to LMT+ input active

Aborted due to problem executing motion

19

20

21

22

13

14

15

16

17

18

No profile block configured for specified profile

Illegal operation mode

Operation mode not supported for this command

Illegal number of steps in profile block

Illegal direction change

Illegal distance

RPS trigger occurred before target speed reached

Insufficient RPS active region width

Speed out of range

Insufficient distance to perform desired speed change

Illegal position

Zero position unknown

23 to 127 Reserved

128 Position module cannot process this instruction: either the Position module is busy with another instruction, or there was no Start pulse on this instruction

129

130

131

Position module error: Module ID incorrect or module logged out. Refer to SMB8 to SMB21

(I/O Module ID and Error Register) for other error conditions.

Position module is not enabled

132

Position module is not available due to a module error or module not enabled

(See the POSx_CTRL status)

The Q memory address that was configured with the Position Control wizard does not match the memory address for the module at this location.

292

Open Loop Motion Control with the S7-200

Chapter 9

Table 9-21 Module Error Codes

19

20

21

22

15

16

17

18

23

24

25

Error Code

0

1

2

5

6

3

4

11

12

13

14

9

10

7

8

Description

No error

No user power

Configuration block not present

Configuration block pointer error

Size of configuration block exceeds available V memory

Illegal configuration block format

Too many profiles specified

Illegal STP_RSP specification

Illegal LMT—_RPS specification

Illegal LMT+_RPS specification

Illegal FILTER_TIME specification

Illegal MEAS_SYS specification

Illegal RP_CFG specification

Illegal PLS/REV value

Illegal UNITS/REV value

Illegal RP_ZP_CNT value

Illegal JOG_INCREMENT value

Illegal MAX_SPEED value

Illegal SS_SPD value

Illegal RP_FAST value

Illegal RP_SLOW value

Illegal JOG_SPEED value

Illegal ACCEL_TIME value

Illegal DECEL_TIME value

Illegal JERK_TIME value

Illegal BKLSH_COMP value

293

S7-200 Programmable Controller System Manual

Advanced Topics

Understanding the Configuration/Profile Table

The Position Control wizard has been developed to make motion applications easy by automatically generating the configuration and profile information based upon the answers you give about your position control system. Configuration/profile table information is provided for advanced users who want to create their own position control routines.

The configuration/profile table is located in the V memory area of the S7-200. As shown in

Table 9-22, the configuration settings are stored in the following types of information:

—

—

—

The configuration block contains information used to set up the module in preparation for executing motion commands.

The interactive block supports direct setup of motion parameters by the user program.

Each profile block describes a predefined move operation to be performed by the Position module. You can configure up 25 profile blocks.

Tip

To create more than 25 motion profiles, you can exchange configuration/profile tables by changing the value stored in the configuration/profile table pointer.

Table 9-22 Configuration/Profile Table

Offset Name Function Description

Configuration Block

0

5

MOD_ID

CB_LEN

9

10

11

6

7

8

13

IB_LEN

PF_LEN

STP_LEN

STEPS

PROFILES

Reserved

IN_OUT_CFG

Module identification field

The length of the configuration block in bytes (1 byte)

The length of the interactive block in bytes (1 byte)

The length of a single profile in bytes (1 byte)

The length of a single step in bytes (1 byte)

The number of steps allowed per profile (1 byte)

Number of profiles from 0 to 25 (1 byte)

Set to 0x0000

Specifies the use of the module inputs and outputs (1 byte)

MSB

7

P/D

6

POL

5

0

4

0

3

STP

2

RPS

1

LMT—

P/D This bit specifies the use of P0 and P1.

Positive Polarity (POL=0):

0 — P0 pulses for positive rotation

P1 pulses for negative rotation

1 — P0 pulses for rotation

P1 controls rotation direction (0 — positive, 1 — negative)

Negative Polarity (POL=1):

0 — P0 pulses for positive rotation

P1 pulses for negative rotation

1 — P0 pulses for rotation

P1 controls rotation direction (0 — positive, 1 — negative)

POL This bit selects the polarity convention for P0 and P1.

(0 — positive polarity, 1 — negative polarity)

STP This bit controls the active level for the stop input.

RPS This bit controls the active level for the RPS input.

LMT— This bit controls the active level for the negative travel limit input.

LMT+ This bit controls the active level for the positive travel limit input

0 — Active high

1 — Active low

LSB

0

LMT+

Type

—-

—-

—-

—-

—-

—-

—-

—-

—-

294

Open Loop Motion Control with the S7-200

Chapter 9

Table 9-22 Configuration/Profile Table, continued

Offset Name Function Description

14 STP_RSP

15

16

17

LMT—_RSP

LMT+_RSP

FILTER_TIME

Specifies the response of the drive to the STP input (1 byte)

0 No action. Ignore the input condition.

1 Decelerate to a stop and indicate that the STP input is active.

2 Terminate the pulses and indicate STP input

3 to 255 Reserved (error if specified)

Specifies the response of the drive to the negative limit input (1 byte)

0 No action. Ignore the input condition.

1 Decelerate to a stop and indicate that the limit has been reached.

2 Terminate the pulses and indicate that the limit has been reached.

3 to 255 Reserved (error if specified)

Specifies the response of the drive to the positive limit input (1 byte)

0 No action. Ignore the input condition.

1 Decelerate to a stop and indicate that the limit has been reached.

2 Terminate pulses and indicate that the limit has been reached.

3 to 255 Reserved (error if specified)

Specifies the filter time for the STP,

LMT—, LMT+, and

RPS inputs (1 byte)

MSB

7 6 5

STP, LMT—, LMT+

4 3 2

RPS

1

18

19

20

24

28

32

33

34

38

MEAS_SYS

—-

PLS/REV

UNITS/REV

UNITS

RP_CFG

—-

RP_Z_CNT

RP_FAST

LSB

0

’0000’ 200

µ sec

’0001’ 400

µ sec

’0010’ 800

µ sec

’0011’ 1600

µ sec

’0100’ 1600

µ sec

’0101’

’0110’

’0111’

’1000’

3200

µ sec

6400

µ sec

12800

µ sec

No filter

’1001 ’ to ’1111’ Reserved (error if specified)

Specifies the measurement system (1 byte)

0 Pulses (speed is measured in pulses/second, and the position values are measured in pulses). Values are stored as DINT.

1 Engineering units (speed is measured in units/second, and the position values are measured in units). Values are stored as single-precision

REAL.

2 to 255 Reserved (error if specified)

Reserved (Set to 0)

Specifies the number of pulses per revolution of the motor (4 bytes)

Only applicable when MEAS_SYS is set to 1.

Specifies the engineering units per revolution of the motor (4 bytes)

Only applicable when MEAS_SYS is set to 1.

Reserved for STEP 7—Micro/WIN to store a custom units string (4 bytes)

Specifies the reference point search configuration

(1 byte)

MSB

7 6 5

0

4

0

3 2

MODE

1

LSB

0

RP_ADDR_DIR

RP_SEEK_DIR

RP_SEEK_DIR This bit specifies the starting direction for a reference point search.

(0 — positive direction, 1 — negative direction)

RP_APPR_DIR This bit specifies the approach direction for terminating the reference point search.

(0 — positive direction, 1 — negative direction)

MODE Specifies the reference point search method.

’0000’ Reference point search disabled.

’0001’ The reference point is where the RPS input goes active.

’0010’ The reference point is centered within the active region of the

RPS input.

’0011’ The reference point is outside the active region of the RPS input.

’0100’ The reference point is within the active region of the RPS input.

’0101’ to ’1111’ Reserved (error if selected)

Reserved (Set to 0)

Number of pulses of the ZP input used to define the reference point (4 bytes)

Fast speed for the RP seek operation: MAX_SPD or less (4 bytes)

Type

—-

—-

—-

—-

—-

—-

DINT

DINT

REAL

—-

DINT

REAL

—-

—-

295

S7-200 Programmable Controller System Manual

Table 9-22 Configuration/Profile Table, continued

Offset Name Function Description

42 RP_SLOW

46

50

SS_SPEED

MAX_SPEED

Slow speed for the RP seek operation: maximum speed from which the motor can instantly go to a stop or less (4 bytes)

Start/Stop Speed. (4 bytes)

The starting speed is the max. speed to which the motor can instantly go from a stop and the maximum speed from which the motor can instantly go to a stop. Operation below this speed is allowed, but the acceleration and deceleration times do not apply.

Maximum operating speed of the motor (4 bytes)

54

58

62

66

70

74

JOG_SPEED

ACCEL_TIME

Jog speed. MAX_SPEED or less (4 bytes)

JOG_INCREMENT The jog increment value is the distance (or number of pulses) to move in response to a single jog pulse. (4 bytes)

Time required to accelerate from minimum to maximum speed in milliseconds

(4 bytes)

DECEL_TIME

BKLSH_COMP

Time required to decelerate from maximum to minimum speed in milliseconds

(4 bytes)

Backlash compensation: the distance used to compensate for the system backlash on a direction change (4 bytes)

JERK_TIME Time during which jerk compensation is applied to the beginning and ending portions of an acceleration/deceleration curve (S curve). Specifying a value of

0 disables jerk compensation. The jerk time is given in milliseconds. (4 bytes)

Interactive Block

78 MOVE_CMD

79

80

—-

TARGET_POS

Selects the mode of operation (1 byte)

0 Absolute position

1 Relative position

2 Single-speed, continuous operation, positive rotation

3 Single-speed, continuous operation, negative rotation

4 Manual speed control, positive rotation

5 Manual speed control, negative rotation

6 Single-speed, continuous operation, positive rotation with triggered stop

(RPS input signals stop)

7 Single-speed, continuous operation, negative rotation with triggered stop

(RPS input signals stop)

8 to 255 — Reserved (error if specified)

Reserved. Set to 0

Target position to go to in this move (4 bytes)

84

88

TARGET_SPEED

RP_OFFSET

Profile Block 0

92

(+0)

STEPS

93

(+1)

MODE

Target speed for this move (4 bytes)

Absolute position of the reference point (4 bytes)

Number of steps in this move sequence (1 byte)

Selects the mode of operation for this profile block (1 byte)

0 Absolute position

1 Relative position

2 Single-speed, continuous operation, positive rotation

3 Single-speed, continuous operation, negative rotation

4 Reserved (error if specified)

5 Reserved (error if specified)

6 Single-speed, continuous operation, positive rotation with triggered stop

(RPS selects speed)

7 Single-speed, continuous operation, negative rotation with triggered stop (RPS input signals stop)

8 Two-speed, continuous operation, positive rotation (RPS selects speed)

9 Two-speed, continuous operation, negative rotation

(RPS selects speed)

10 to 255 -Reserved (error if specified)

Type

DINT

REAL

DINT

REAL

DINT

REAL

DINT

REAL

DINT

DINT

DINT

REAL

DINT

—-

—-

DINT

REAL

DINT

REAL

DINT

REAL

—-

—-

296

Open Loop Motion Control with the S7-200

Chapter 9

Table 9-22 Configuration/Profile Table, continued

Offset Name Function Description

POS Position to go to in move step 0 (4 bytes) 94

(+2)

98

(+6)

102

(+10)

106

(+14)

110

(+18)

0

1

2

114

(+22)

118

(+26)

3

122

(+30)

Profile Block 1

126

(+34)

127

(+35)

128

(+36)

STEPS

MODE

0

132

(+40)

…

…

SPEED

POS

SPEED

POS

SPEED

POS

SPEED

POS

SPEED

…

Target speed for move step 0 (4 bytes)

Position to go to in move step 1 (4 bytes)

Target speed for move step 1 (4 bytes)

Position to go to in move step 2 (4 bytes)

Target speed for move step 2 (4 bytes)

Position to go to in move step 3 (4 bytes)

Target speed for move step 3 (4 bytes)

Number of steps in this move sequence (1 byte)

Selects the mode of operation for this profile block (1 byte)

Position to go to in move step 0 (4 bytes)

Target speed for move step 0 (4 bytes)

…

—-

—-

DINT

REAL

DINT

REAL

…

Type

DINT

REAL

DINT

REAL

DINT

REAL

DINT

REAL

DINT

REAL

DINT

REAL

DINT

REAL

DINT

REAL

297

S7-200 Programmable Controller System Manual

Special Memory Locations for the Position Module

The S7-200 allocates 50 bytes of special memory (SM) to each intelligent module, based on the physical position of the module in the I/O system. See Table 9-23. When the module detects an error condition or a change in status of the data, the module updates these SM locations. The first module updates SMB200 through SMB249 as required to report the error condition, the second module updates SMB250 through SMB299, and so on.

Table 9-23 Special Memory Bytes SMB200 to SMB549

SM Bytes for an intelligent module in:

Slot 0 Slot 1 Slot 2 Slot 3 Slot 4 Slot 5 Slot 6

SMB200 to

SMB249

SMB250 to

SMB299

SMB300 to

SMB349

SMB350 to

SMB399

SMB400 to

SMB449

SMB450 to

SMB499

SMB500 to

SMB549

Table 9-24 shows the structure of the SM data area allocated for an intelligent module. The definition is given as if this were the intelligent module is located in slot 0 of the I/O system.

Table 9-24 Special Memory Area Definition for the EM 253 Position Module

SM Address Description

Module name (16 ASCII characters). SMB200 is the first character: “EM253 Position” SMB200 to

SMB215

SMB216 to

SMB219

SMW220

SMB222

Software revision number (4 ASCII characters). SMB216 is the first character.

Error code for the module. See Table 9-21 for a description of the error codes.

Input/output status. Reflects the status of the inputs and outputs of the module.

MSB

7

DIS

6

0

5

0

4

STP

3

LMT—

2

LMT+

SMB223

DIS Disable outputs

STP Stop input

LMT— Negative travel limit input

LMT+ Positive travel limit input

RPS Reference point switch input

ZP Zero pulse input

Instantaneous module status. Reflects the status of the module configuration and rotation direction status.

0 = No current flow

0 = No current flow

0 = No current flow

0 = No current flow

0 = No current flow

0 = No current flow

MSB

7 6 5

0 0 0

4

0

1 = Current flow

1 = Current flow

1 = Current flow

1 = Current flow

1 = Current flow

1 = Current flow

3

0

2

OR

1

RPS

LSB

0

ZP

1

R

LSB

0

CFG

SMB224

SMB225

SMD226

SMD230

SMB234

SMB235 to

SMB244

SMB245

SMD246

OR

R

Target speed out of range

Direction of rotation

CFG Module configured

0 = In range

0 = Positive rotation

0 = Not configured

CUR_PF is a byte that indicates the profile currently being executed.

1 = Out of range

1 = Negative rotation

1 = Configured

CUR_STP is a byte that indicates the step currently being executed in the profile.

CUR_POS is a double-word value that indicates the current position of the module.

CUR_SPD is a double-word value that indicates the current speed of the module.

Result of the instruction. See Table 9-20 for descriptions of the error codes. Error conditions above 127 are generated by the instruction subroutines created by the wizard.

MSB

7

D

6

ERROR

D Done bit 0= Operation in progress

1= Operation complete (set by the module during initialization)

Reserved

LSB

0

Offset to the first Q byte used as the command interface to this module. The offset is supplied by the

S7-200 automatically for the convenience of the user and is not needed by the module.

Pointer to the V memory location of the configuration/profile table. A pointer value to an area other than

V memory is not valid. The Position module monitors this location until it receives a non-zero pointer value.

298

Open Loop Motion Control with the S7-200

Chapter 9

Understanding the Command Byte for the Position Module

The Position module provides one byte of discrete outputs which is used as the command byte.

Figure 9-20 shows the command byte definition. Table 9-20 shows the Command_code definitions.

A write to the command byte where the

R bit changes from 0 to 1 is interpreted by the module as a new command.

If the module detects a transition to idle

(R bit changes state to 0) while a command is active, then the operation in progress is aborted and, if a motion is in progress, then a decelerated stop is performed.

QBx

R

MSB

7

R

6 5 4 3 2

Command_code

1

0 = Idle

1 = Execute the command specified in Command_code (See Table 9-25)

Figure 9-20 Definition of the Command Byte

LSB

0

After an operation has completed, the module must see a transition to idle before a new command is accepted. If an operation is aborted, then the module must complete any deceleration before a new command is accepted. Any change in the Command_code value while a command is active is ignored.

The response of the Position module to a change in the operating mode of the

S7-200 or to a fault condition is governed by the effect that the S7-200 exerts over the discrete outputs according to the existing definition of the S7-200 function:

—

—

If the S7-200 changes from STOP to

RUN:

controls the operation of the Position module.

If the S7-200 changes from RUN to

STOP:

the discrete outputs are to go to on a transition to STOP or that the outputs are to retain their last state.

—

The program in the S7-200

You can select the state that

If the R bit is turned off when going to STOP:

The Position module decelerates any motion in progress to a stop

Table 9-25 Command_code Definitions

Command_code Command

000 0000 to

000 1111

100 0000 to

111 0101

111 0110

111 0111

111 1000

111 1001

111 1010

111 1011

111 1100

111 1101

111 1110

111 1111

0 to

24

25 to

117

118

119

120

121

122

123

124

125

126

127

Execute motion specified in

Profile Blocks 0 to 24

Reserved

(Error if specified)

Activate the DIS output

Deactivate the DIS output

Pulse the CLR output

Reload current position

Execute motion specified in the Interactive Block

Capture reference point offset

Jog positive rotation

Jog negative rotation

Seek to reference point position

Reload configuration

—

—

If the R bit is turned on when going to STOP:

The Position module completes any command that is in progress. If no command is in progress, the Position module executes the command which is specified by the Command_code bits.

—

If the R bit is held in its last state:

The Position module completes any motion in progress.

If the S7-200 detects a fatal error and turns off all discrete outputs:

The Position module decelerates any motion in progress to a stop.

The Position module implements a watchdog timer that turns the outputs off if communications with the S7-200 are lost. If the output watchdog timer expires, the Position module decelerates any motion in progress to a stop.

If a fatal error in the hardware or firmware of the module is detected, the Position module sets the

P0, P1, DIS and CLR outputs to the inactive state.

299

S7-200 Programmable Controller System Manual

Table 9-26 Motion Commands

Command

Commands 0 to 24:

Executes the motion specified in profile blocks 0 to 24

Description

When this command is executed, the Position module performs the motion operation specified in the MODE field of the profile block indicated by the

Command_code portion of the command.

S

In Mode 0 (absolute position), the motion profile block defines from one to four steps with each step containing both the position (POS) and speed (SPEED) that describes the move segment. The POS specification represents an absolute location, which is based on the location designated as reference point.

The direction of movement is determined by the relationship between the current position and the position of the first step in the profile. In a multi-step move a reversal of direction of travel is prohibited and results in an error condition being reported.

S

In Mode 1 (relative position), the motion profile block defines from one to four steps with each step containing both the position (POS) and the speed

(SPEED) that describes the move segment. The sign of the position value

(POS) determines the direction of the movement. In a multi-step move, a reversal of direction of travel is prohibited and results in the reporting of an error condition.

S

In Modes 2 and 3 (single-speed, continuous operation modes), the position

(POS) specification is ignored and the module accelerates to the speed specified in the SPEED field of the first step. Mode 2 is used for positive rotation, and Mode 3 is used for negative rotation. Movement stops when the command byte transitions to Idle.

S

In Modes 6 and 7 (single-speed, continuous operation modes with triggered stop), the module accelerates to the speed specified in the SPEED field of the first step. If and when the RPS input becomes active, movement stops after completing the distance specified in the POS field of the first step. (The distance specified in the POS field must include the deceleration distance.) If the POS field is zero when the RPS input becomes active, the Position module decelerates to a stop. Mode 6 is used for positive rotation, and Mode 7 is used for negative rotation.

S

In Modes 8 and 9, the binary value of the RPS input selects one of two speed values as specified by the first two steps in the profile block.

— If the RPS is inactive: Step 0 controls the speed of the drive.

— If the RPS is active: Step 1 controls the speed of the drive.

Mode 8 is used for positive rotation, and Mode 9 is used for negative rotation.

The SPEED value controls the speed of movement. The POS values are ignored in this mode.

When this command is executed, the Position module activates the DIS output.

Command 118

Activates the DIS output

Command 119

Deactivates the DIS output

Command 120

Pulses the CLR output

Command 121

Reloads the Current Position

When this command is executed, the Position module deactivates the DIS output.

When this command is executed, the Position module generates a 50-millisecond pulse on the CLR output.

When this command is executed, the Position module sets the current position to the value found in the TARGET_POS field of the interactive block.

300

Open Loop Motion Control with the S7-200

Chapter 9

Table 9-26 Motion Commands, continued

Command

Command 122

Execute the motion specified in the interactive block

Command 123

Capture the Reference Point offset

Command 124

Jog positive rotation

Command 125

Jog negative rotation

Command 126

Seek to Reference Point position

Command 127

Reload the configuration

Description

When this command is executed, the Position module performs the motion operation specified in the MOVE_CMD field of the interactive block.

S

In Modes 0 and 1 (absolute and relative motion modes), a single step motion is performed based upon the target speed and position information provided in the

TARGET_SPEED and TARGET_POS fields of the interactive block.

S

In Modes 2 and 3 (single-speed, continuous operation modes), the position specification is ignored, and the Position module accelerates to the speed specified in the TARGET_SPEED field of the interactive block. Movement stops when the command byte transitions to Idle.

S

In Modes 4 and 5 (manual speed control modes), the position specification is ignored and your program loads the value of speed changes into the

TARGET_SPEED field of the interactive block. The Position module continuously monitors this location and responds appropriately when the speed value changes.

When this command is executed, the Position module establishes a zero position that is at a different location from the reference point position.

Before issuing this command, you must have determined the position of the reference point and must also have jogged the machine to the work starting position. After receiving this command, the Position module computes the offset between the work starting position (the current position) and the reference point position and writes the computed offset to the RP_OFFSET field of the Interactive

Block. The current position is then set to 0 to establish the work starting position as the zero position.

In the event that the stepper motor loses track of its position (for example, if power is lost or the stepper motor is repositioned manually) the Seek to Reference Point

Position command can be issued to re-establish the zero position automatically.

This command allows you to manually issue pulses for moving the stepper motor in the positive direction.

If the command remains active for less than 0.5 seconds, the Position module issues pulses to travel the distance specified in JOG_INCREMENT.

If the command remains active for 0.5 seconds or longer, the motion module begins to accelerate to the specified JOG_SPEED.

When a transition to idle is detected, the Position module decelerates to a stop.

This command allows you to manually issue pulses for moving the stepper motor in the negative direction.

If the command remains active for less than 0.5 seconds, the Position module issues pulses to travel the distance specified in JOG_INCREMENT.

If the command remains active for 0.5 seconds or longer, the Position module begins to accelerate to the specified JOG_SPEED.

When a transition to idle is detected, the Position module decelerates to a stop.

When this command is executed, the Position module initiates a reference point seek operation using the specified search method. When the reference point has been located and motion has stopped, the Position module loads the value read from the RP_OFFSET field of the interactive block into the current position and pulses the CLR output on for 50 milliseconds.

When this command is executed, the Position module reads the configuration/profile table pointer from the appropriate location in SM memory and then reads the configuration block from the location specified by the configuration/profile table pointer. The Position module compares the configuration data just obtained against the existing module configuration and performs any required setup changes or recalculations. Any cached profiles are discarded.

301

S7-200 Programmable Controller System Manual

Understanding the Profile Cache of the Position Module

The Position module stores the execution data for up to 4 profiles in cache memory. When the

Position module receives a command to execute a profile, it checks to see if the requested profile is stored in the cache memory. If the execution data for the profile is resident in the cache, the

Position module immediately executes the profile. If the the execution data for the profile is not resident in the cache, the Position module reads the profile block information from the configuration/profile table in the S7-200 and calculates the execution data for the profile before executing the profile.

Command 122 (Execute the motion specified in the interactive block ) does not use cache memory to store the execution data, but always reads the interactive block from the configuration/profile table in the S7-200 and calculates the execution data for the motion.

Reconfiguring the Position module deletes all of the execution data stored in the cache memory.

Creating Your Own Position Control Instructions

The Position Control wizard creates the position instructions for controlling the operation of the

Position module; however, you can also create your own instructions. The following STL code segment provides an example of how you might create your own control instructions for the

Position module.

This example uses an S7-200 CPU 224 with a Position module located in slot 0. The Position module is configured on power-up. CMD_STAT is a symbol for SMB234, CMD is a symbol for QB2, and NEW_CMD is a symbol for the profile.

Sample Program: Controlling the Position Module

Network 1

LSCR

//New move command state

State_0

Network 2 //CMD_STAT is a symbol for SMB234

//CMD is a symbol for QB2

//NEW_CMD is a symbol for the profile.

//

//1. Clear the Done bit of the Position module.

//2. Clear the command byte of the Position module.

//3. Issue the new command.

//4. Wait for the command to be executed.

LD SM0.0

MOVB 0, CMD_STAT

BIW

BIW

SCRT

0, CMD

NEW_CMD, CMD

State_1

Network 3

SCRE

Network 4

LSCR

//Wait for the command to be completed.

State_1

Network 5

LDB=

SCRT

//If the command is complete without error, go to the idle state.

CMD_STAT, 16#80

Idle_State

Network 6

LDB>

SCRT

//If the command is complete with an error, go to the error handling state.

CMD_STAT, 16#80

Error_State

Network 7

SCRE

302

Open Loop Motion Control with the S7-200

Chapter 9

Understanding the RP Seek Modes Supported by the Position

Module

The following figures provide diagrams of the different options for each RP seek mode.

—

—

Figure 9-21 shows two of the options for RP seek mode 1. This mode locates the RP where the RPS input goes active on the approach from the work zone side.

Figure 9-22 shows two of the options for RP seek mode 2. This mode locates the RP in the center within the active region of the RPS input.

—

—

Figure 9-23 shows two of the options for RP seek mode 3. This mode locates the RP a specified number of zero pulses (ZP) outside the active region of the RPS input.

Figure 9-24 shows two of the options for RP seek mode 4. This mode locates the RP a specified number of zero pulses (ZP) within the active region of the RPS input.

For each mode, there are four combinations of RP Seek direction and RP Approach direction.

(Only two of the combinations are shown.) These combinations determine the pattern for the RP seek operation. For each of the combinations, there are also four different starting points:

The work zones for each diagram have been located so that moving from the reference point to the work zone requires movement in the same direction as the RP Approach Direction. By selecting the location of the work zone in this way, all the backlash of the mechanical gearing system is removed for the first move to the work zone after a reference point seek.

Default configuration :

RP Seek Direction: Negative

RP Approach Direction: Positive

Positive motion

Negative motion

LMT—

Active

RPS Active

RP

Work Zone

RP Seek Direction: Positive

RP Approach Direction: Positive

Positive motion

Negative motion

Figure 9-21 RP Seek Mode 1

RPS Active

RP

Work Zone

LMT+

Active

303

S7-200 Programmable Controller System Manual

Default configuration :

RP Seek Direction: Negative

RP Approach Direction: Positive

Positive motion

Negative motion

LMT—

Active

RPS Active

RP

Work Zone

RP Seek Direction: Positive

RP Approach Direction: Positive

Positive motion

Negative motion

RPS Active

RP

Work Zone

LMT+

Active

Figure 9-22 RP Seek: Mode 2

Default configuration :

RP Seek Direction: Negative

RP Approach Direction: Positive

Positive motion

Negative motion

LMT—

Active

RP Seek Direction: Positive

RP Approach Direction: Positive

Positive motion

Negative motion

Figure 9-23 RP Seek: Mode 3

304

RPS

Active

RP

Work Zone

Number of ZP pulses

RPS

Active

RP

Work Zone

Number of

ZP pulses

LMT+

Active

Default configuration :

RP Seek Direction: Negative

RP Approach Direction: Positive

LMT—

Active

Positive motion

Negative motion

Open Loop Motion Control with the S7-200

Chapter 9

RPS Active

RP

Work Zone

Number of ZP pulses

RP Seek Direction: Positive

RP Approach Direction: Positive

Positive motion

Negative motion

Figure 9-24 RP Seek: Mode 4

RPS Active

RP

Work Zone

Number of

ZP pulses

LMT+

Active

305

S7-200 Programmable Controller System Manual

Selecting the Location of the Work Zone to Eliminate Backlash

Figure 9-25 shows the work zone in relationship to the reference point (RP), the RPS Active zone, and the limit switches (LMT+ and LMT—) for an approach direction that eliminates the backlash.

The second part of the illustration places the work zone so that the backlash is not eliminated.

Figure 9-25 shows RP seek mode 3. A similar placement of the work zone is possible, although not recommended, for each of the search sequences for each of the other RP seek modes.

Backlash is eliminated

RP Seek Direction: Negative

RP Approach Direction: Negative

LMT—

Active

RP

RPS

Active

Work Zone

Positive motion

Negative motion

Backlash is not eliminated

RP Seek Direction: Negative

RP Approach Direction: Negative

LMT—

Active

Positive motion

Negative motion

RP

RPS

Active

Work Zone

Figure 9-25 Placement of the Work Zone with and without the Elimination of Backlash

306

Creating a Program for the

Modem Module

The EM 241 Modem module allows you to connect your S7-200 directly to an analog telephone line, and supports communications between your S7-200 and STEP 7—Micro/WIN. The Modem module also supports the Modbus slave RTU protocol. Communications between the Modem module and the S7-200 are made over the Expansion I/O bus.

STEP 7—Micro/WIN provides a Modem Expansion wizard to help set up a remote modem or a

Modem module for connecting a local S7-200 to a remote device.

In This Chapter

Features of the Modem Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Using the Modem Expansion Wizard to Configure the Modem Module . . . . . . . . . . . . . . . . . . .

Overview of Modem Instructions and Restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Instructions for the Modem Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Sample Program for the Modem Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

S7-200 CPUs that Support Intelligent Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Special Memory Location for the Modem Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Advanced Topics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Messaging Telephone Number Format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Text Message Format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

CPU Data Transfer Message Format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

308

314

318

319

323

323

323

325

327

328

329

307

S7-200 Programmable Controller System Manual

Features of the Modem Module

The Modem module allows you to connect your S7-200 directly to an analog telephone line and provides the following features:

—

—

—

—

—

—

—

Provides international telephone line interface

Provides a modem interface to

STEP 7—Micro/WIN for programming and troubleshooting (teleservice)

Supports the Modbus RTU protocol

Supports numeric and text paging

Supports SMS messaging

Allows CPU-to-CPU or CPU-to

Modbus data transfers

Provides password protection

Country Code

Switches

—

Figure 10-1

The Modem module configuration is stored in the CPU

EM 241 Modem Module

You can use the STEP 7—Micro/WIN Modem Expansion wizard to configure the Modem module.

Refer to Appendix A for the specifications of the Modem module.

International Telephone Line Interface

The Modem module is a standard V.34

(33.6 kBaud), 10-bit modem, and is compatible with most internal and external PC modems. The Modem module does not communicate with

11-bit modems.

123456

Figure 10-2

You connect the Modem module to the telephone line with the six-position four-wire

RJ11 connector mounted on the front of the module. See Figure 10-2.

An adapter may be required to convert the

RJ11 connector for connection to the standard telephone line termination in the various countries. Refer to the documentation for your adapter connector for more information.

The modem and telephone line interface is powered from an external 24 VDC supply.

This can be connected to the CPU sensor supply or to an external source. Connect the ground terminal on the Modem module to the system earth ground.

The Modem module automatically configures the telephone interface for country-specific operation when power is applied to the module. The two rotary switches on the front of the module select the country code. You must set the switches to the desired country selection before the Modem module is powered up.

Refer to Table 10-1 for switch settings for the countries supported.

Pin

3

4

Description

Ring

Tip

View of RJ11 Jack

Reverse connection is allowed.

Table 10-1 Countries Supported by the EM 241

Switch Setting Country

00

01

Australia

Austria

08

09

10

11

02

05

06

Belgium

Canada

China

Denmark

Finland

France

Germany

35

36

38

27

30

34

39

22

25

26

12

16

18

Greece

Ireland

Italy

Luxembourg

Netherlands

New Zealand

Norway

Portugal

Spain

Sweden

Switzerland

U.K.

U.S.A.

308

Creating a Program for the Modem Module

Chapter 10

STEP 7—Micro/WIN Interface

The Modem module allows you to communicate with STEP 7—Micro/WIN over a telephone line

(teleservice). You do not need to configure or program the S7-200 CPU to use the Modem module as the remote modem when used with STEP 7—Micro/WIN.

Follow these steps to use the Modem module with STEP 7—Micro/WIN:

1. Remove the power from the S7-200 CPU and attach the Modem module to the I/O expansion bus. Do not attach any I/O modules while the S7-200 CPU is powered up.

2. Connect the telephone line to the Modem module. Use an adapter if necessary.

3. Connect 24 volts DC to the Modem module terminal blocks.

4. Connect the Modem module terminal block ground connection to the system ground.

5. Set the country code switches.

6. Power up the S7-200 CPU and the Modem module.

7. Configure STEP 7—Micro/WIN to communicate to a 10-bit modem.

Modbus RTU Protocol

You can configure the Modem module to respond as a Modbus RTU slave. The Modem module receives Modbus requests over the modem interface, interprets those requests and transfers data to or from the CPU. The Modem module then generates a Modbus response and transmits it out over the modem interface.

Tip

If the Modem module is configured to respond as a Modbus RTU slave, STEP 7—Micro/WIN is not able to communicate to the Modem module over the telephone line.

The Modem module supports the Modbus functions shown in Table 10-2.

Modbus functions 4 and 16 allow reading or writing a maximum of 125 holding registers

(250 bytes of V memory) in one request.

Functions 5 and 15 write to the output image register of the CPU. These values can be overwritten by user program.

Modbus addresses are normally written as

5 or 6 character values containing the data type and the offset. The first one or two characters determine the data type, and the last four characters select the proper value within the data type. The Modbus master device maps the addresses to the correct

Modbus functions.

Table 10-2 Modbus Functions Supported by Modem

Module

Function Description

Function 01

Function 02

Read coil (output) status

Read input status

Function 03

Function 04

Function 05

Function 06

Function 15

Function 16

Read holding registers

Read input (analog input) registers

Write single coil (output)

Preset single register

Write multiple coils (outputs)

Preset multiple registers

309

S7-200 Programmable Controller System Manual

Table 10-3 shows the Modbus addresses supported by the Modem module, and the mapping of Modbus addresses to the

S7-200 CPU addresses.

Use the Modem Expansion wizard to create a configuration block in for the Modem module to support Modbus RTU protocol.

The Modem module configuration block must be downloaded to the CPU data block before you can use the Modbus protocol.

Table 10-3 Mapping Modbus Addresses to the S7-200

CPU

Modbus Address S7-200 CPU Address

000001

000002

000003

…

000127

000128

010001

010002

010003

…

010127

010128

030001

030002

030003

…

030032

040001

040002

040003

…

04xxxx

Q0.0

Q0.1

Q0.2

…

Q15.6

Q15.7

I0.0

I0.1

I0.2

…

I15.6

I15.7

AIW0

AIW2

AIW4

…

AIW62

VW0

VW2

VW4

…

VW 2*(xxxx—1)

Paging and SMS Messaging

The Modem module supports sending numeric and text paging messages, and SMS (Short

Message Service) messages to cellular phones (where supported by the cellular provider). The messages and telephone numbers are stored in the Modem module configuration block which must be downloaded to the data block in the S7-200 CPU. You can use the Modem Expansion wizard to create the messages and telephone numbers for the Modem module configuration block. The Modem Expansion wizard also creates the program code to allow your program to initiate the sending of the messages.

Numeric Paging

Numeric paging uses the tones of a touch tone telephone to send numeric values to a pager. The

Modem module dials the requested paging service, waits for the voice message to complete, and then sends the tones corresponding to the digits in the paging message. The digits 0 through 9, asterisk (*), A, B, C and D are allowed in the paging message. The actual characters displayed by a pager for the asterisk and A, B, C, and D characters are not standardized, and are determined by the pager and the paging service provider.

Text Paging

Text paging allows alphanumeric messages to be transmitted to a paging service provider, and from there to a pager. Text paging providers normally have a modem line that accepts text pages.

The Modem module uses Telelocator Alphanumeric Protocol (TAP) to transmit the text messages to the service provider. Many providers of text paging use this protocol to accept messages.

Short Message Service (SMS)

Short Message Service (SMS) messaging is supported by some cellular telephone services, generally those that are GSM compatible. SMS allows the Modem module to send a message over an analog telephone line to an SMS provider. The SMS provider then transmits the message to the cellular telephone, and the message appears on the text display of the telephone. The

Modem module uses the Telelocator Alphanumeric Protocol (TAP) and the Universal Computer

Protocol (UCP) to send messages to the SMS provider. You can send SMS messages only to

SMS providers that support these protocols on a modem line.

310

Creating a Program for the Modem Module

Chapter 10

Embedded Variables in Text and SMS Messages

The Modem module can embed data values from the CPU in the text messages and format the data values based on a specification in the message. You can specify the number of digits to the left and right of the decimal point, and whether the decimal point is a period or a comma. When the user program commands the Modem module to transmit a text message, the Modem module retrieves the message from the CPU, determines what CPU values are needed within the message, retrieves those values from the CPU, and then formats and place the values within the text message before transmitting the message to the service provider.

The telephone number of the messaging provider, the message, and the variables embedded within the message are read from the CPU over multiple CPU scan cycles. Your program should not modify telephone numbers or messages while a message is being sent. The variables embedded within a message can continue to be updated during the sending of a message. If a message contains multiple variables, those variables are read over multiple scan cycles of the

CPU. If you want all of the embedded variables within a message to be consistent, the you must not change any of the embedded variables after you send a message.

Data Transfers

The Modem module allows your program to transfer data to another CPU or to a Modbus device over the telephone line. The data transfers and telephone numbers are configured with the

Modem Expansion wizard, and are stored in the Modem module configuration block. The configuration block is then downloaded to the data block in the S7-200 CPU. The Modem

Expansion wizard also creates program code to allow your program to initiate the data transfers.

A data transfer can be either a request to read data from a remote device, or a request to write data to a remote device. A data transfer can read or write between 1 and 100 words of data. Data transfers move data to or from the V memory of the attached CPU.

The Modem Expansion wizard allows you to create a data transfer consisting of a single read from the remote device, a single write to the remote device, or both a read from and a write to the remote device.

Data transfers use the configured protocol of the Modem module. If the Modem module is configured to support PPI protocol (where it responds to STEP 7—Micro/WIN), the Modem module uses the PPI protocol to transfer data. If the Modem module is configured to support the Modbus

RTU protocol, data transfers are transmitted using the Modbus protocol.

The telephone number of the remote device, the data transfer request and the data being transferred are read from the CPU over multiple CPU scan cycles. Your program should not modify telephone numbers or messages while a message is being sent. Also, you should not modify the data being transferred while a message is being sent.

If the remote device is another Modem module, the password function can be used by the data transfers by entering the password of the remote Modem module in the telephone number configuration. The callback function cannot be used with data transfers.

Password Protection

The password security of the Modem module is optional and is enabled with the Modem

Expansion wizard. The password used by the Modem module is not the same as the CPU password. The Modem module password is a separate 8-character password that the caller must supply to the Modem module before being allowed access to the attached CPU. The password is stored in the V memory of the CPU as part of the Modem module configuration block. The Modem module configuration block must be downloaded to the data block of the attached CPU.

If the CPU has the password security enabled in the System Data Block, the caller must supply the CPU password to gain access to any password protected functions.

311

S7-200 Programmable Controller System Manual

Security Callback

The callback function of the Modem module is optional and is configured with the Modem

Expansion wizard. The callback function provides additional security for the attached CPU by allowing access to the CPU only from predefined telephone numbers. When the callback function is enabled, the Modem module answers any incoming calls, verifies the caller, and then disconnects the line. If the caller is authorized, the Modem module then dials a predefined telephone number for the caller, and allows access to the CPU.

The Modem module supports three callback modes:

—

—

Callback to a single predefined telephone number

Callback to multiple predefined telephone numbers

—

Callback to any telephone number

The callback mode is selected by checking the appropriate option in the Modem Expansion wizard and then defining the callback telephone numbers. The callback telephone numbers are stored in the Modem module configuration block stored in the data block of the attached CPU.

The simplest form of callback is to a single predefined telephone number. If only one callback number is stored in the Modem module configuration block, whenever the Modem module answers an incoming call, it notifies the caller that callback is enabled, disconnects the caller, and then dials the callback number specified in the configuration block.

The Modem module also supports callback for multiple predefined telephone numbers. In this mode the caller is asked for a telephone number. If the supplied number matches one of the predefined telephone numbers in the Modem module configuration block, the Modem module disconnects the caller, and then calls back using the matching telephone number from the configuration block. The user can configure up to 250 callback numbers.

Where there are multiple predefined callback numbers, the callback number supplied when connecting to the Modem module must be an exact match of the number in the configuration block of the Modem module except for the first two digits. For example, if the configured callback is 91(123)4569999 because of a need to dial an outside line (9) and long distance (1), the number supplied for the callback could be any of the following:

—

—

—

91(123)4569999

1(123)4569999

(123)4569999

All of the above telephone number are considered to be a callback match. The Modem module uses the callback telephone number from its configuration block when performing the callback, in this example 91(123)4569999. When configuring multiple callback numbers, make sure that all telephone numbers are unique excluding the first two digits. Only the numeric characters in a telephone number are used when comparing callback numbers. Characters such as commas or parenthesis are ignored when comparing callback numbers.

The callback to any telephone number is set up in the Modem Expansion wizard by selecting the

“Enable callbacks to any phone number” option during the callback configuration. If this option is selected, the Modem module answers an incoming call and requests a callback telephone number. After the telephone number is supplied by the caller, the Modem module disconnects and dials that telephone number. This callback mode only provides a means to allow telephone charges to be billed to the Modem module’s telephone connection and does not provide any security for the S7-200 CPU. The Modem module password should be used for security if this callback mode is used.

The Modem module password and callback functions can be enabled at the same time. The

Modem module requires a caller to supply the correct password before handling the callback.

312

Creating a Program for the Modem Module

Chapter 10

Configuration Table for the Modem Module

All of the text messages, telephone numbers, data transfer information, callback numbers and other options are stored in a Modem module configuration table which must loaded into the V memory of the S7-200 CPU. The Modem Expansion wizard guides you through the creation of a

Modem module configuration table. STEP 7—Micro/WIN then places the Modem module configuration table in the Data Block which is downloaded to the S7-200 CPU.

The Modem module reads this configuration table from the CPU on startup and within five seconds of any STOP-to-RUN transition of the CPU. The Modem module does not read a new configuration table from the CPU as long the Modem module is online with STEP 7—Micro/WIN. If a new configuration table is downloaded while the Modem module is online, the Modem module reads the new configuration table when the online session is ended.

If the Modem module detects an error in the configuration table, the Module Good (MG) LED on the front of the module flashes on and off. Check the PLC Information screen in

STEP 7—Micro/WIN, or read the value in SMW220 (for module slot 0) for information about the configuration error. The Modem module configuration errors are listed in Table 10-4. If you use the

Modem Expansion wizard to create the Modem module configuration table, STEP 7—Micro/WIN checks the data before creating the configuration table.

Table 10-4 EM 241 Configuration Errors (Hexadecimal)

Error Description

0000

0001

0002

0003

0004

No error

No 24 VDC external power

Modem failure

No configuration block ID — The EM 241 identification at the start of the configuration table is not valid for this module.

Configuration block out of range — The configuration table pointer does not point to V memory, or some part of the table is outside the range of V memory for the attached CPU.

0005 Configuration error — Callback is enabled and the number of callback telephone numbers equals 0 or it is greater than 250. The number of messages is greater than 250. The number of messaging telephone numbers is greater than 250, or if length of the messaging telephone numbers is greater than 120 bytes.

0006

0007

Country selection error — The country selection on the two rotary switches is not a supported value.

Phone number too large — Callback is enabled and the callback number length is greater than the maximum.

0008 to 00FF Reserved

01xx

02xx

03xx

Error in callback number xx — There are illegal characters in callback telephone number xx.

The value xx is 1 for the first callback number, 2 for the second, etc.

Error in telephone number xx — One of the fields in a message telephone number xx or a data transfer telephone number xx contains an illegal value. The value xx is 1 for the first telephone number, 2 for the second, etc.

Error in message xx — Message or data transfer number xx exceeds the maximum length.

The value xx is 1 for the first message, 2 for the second, etc.

0400 to FFFF Reserved

313

S7-200 Programmable Controller System Manual

Status LEDs of the Modem Module

The Modem module has 8 status LEDs on the front panel. Table 10-5 describes the status LEDs.

Table 10-5 EM 241 Status LEDs

LED

MF

Description

Module Fail — This LED is on when the module detects a fault condition such as:

S

No 24 VDC external power

S

Timeout of the I/O watchdog

MG

OH

NT

RI

CD

Rx

Tx

S

Modem failure

S

Communications error with the local CPU

Module Good — This LED is on when there is no module fault condition. The Module Good

LED flashes if there is a error in the configuration table, or the user has selected an illegal country setting for the telephone line interface. Check the PLC Information screen in

STEP 7—Micro/WIN or read the value in SMW220 (for module slot 0) for information about the configuration error.

Off Hook — This LED is on when the EM 241 is actively using the telephone line.

No Dial Tone — This LED indicates an error condition and turns on when the EM 241 has been commanded to send a message and there is no dial tone on the telephone line. This is only an error condition if the EM 241 has been configured to check for a dial tone before dialing. The LED remains on for approximately 5 seconds after a failed dial attempt.

Ring Indicator —This LED indicates that the EM 241 is receiving an incoming call.

Carrier Detect — This LED indicates that a connection has been established with a remote modem.

Receive Data — This LED flashes on when the modem is receiving data.

Transmit Data — This LED flashes on when the modem is transmitting data.

Using the Modem Expansion Wizard to Configure the Modem

Module

Start the Modem Expansion wizard from the STEP 7—Micro/WIN Tools menu or from the Tools portion of the Navigation Bar.

Modem

Expansion

To use this wizard, the project must be compiled and set to Symbolic Addressing Mode. If you have not already compiled your program, compile it now.

1. On first screen of the Modem Expansion wizard, select Configure an EM 241 Modem module and click Next>.

2. The Modem Expansion wizard requires the Modem module’s position relative to the S7-200

CPU in order to generate the correct program code. Click the Read Modules button to automatically read the positions of the intelligent modules attached to the CPU. Expansion modules are numbered sequentially starting at zero. Double-click the Modem module that you want to configure, or set the Module Position field to the position of the Modem module.

Click Next>.

For an S7-200 CPU with firmware prior to version 1.2, you must install the intelligent module next to the CPU in order for the Modem Expansion wizard to configure the module.

3. The password protection screen allows you to enable password protection for the Modem module and assign a 1 to 8 character password for the module. This password is independent of the S7-200 CPU password. When the module is password-protected, anyone who attempts to connect with the S7-200 CPU through the Modem module is required to supply the correct password. Select password protection if desired, and enter a password. Click Next>.

314

Creating a Program for the Modem Module

Chapter 10

4. The Modem module supports two communications protocols: PPI protocol (to communicate with STEP 7—Micro/WIN), and Modbus RTU protocol. Protocol selection is dependent on the type of device that is being used as the remote communications partner. This setting controls the communications protocol used when the Modem module answers a call and also when the Modem module initiates a CPU data transfer. Select the appropriate protocol and click Next>.

5. You can configure the module to send numeric and text messages to pagers, or Short

Message Service (SMS) messages to cellular telephones. Check the Enable messaging checkbox and click the Configure Messaging… button to define messages and the recipient’s telephone numbers.

6. When setting up a message to be sent to a pager or cellular phone, you must define the message and the telephone number. Select the Messages tab on the Configure Messaging screen and click the New Message button. Enter the text for the message and specify any

CPU data values to insert into the message. To insert a CPU data value into the message, move the cursor to the position for the data and click the Insert Data… button. Specify the address of the CPU data value (i.e. VW100), the display format (i.e. Signed Integer) and the digits left and right of the decimal point. You can also specify if the decimal point should be a comma or a period.

— Numeric paging messages are limited to the digits 0 to 9, the letters A, B, C and D, and the asterisk (*). The maximum allowed length of a numeric paging message varies by service provider.

— Text messages can be up to 119 characters in length and contain any alphanumeric character.

— Text messages can contain any number of embedded variables.

— Embedded variables can be from V, M, SM, I, Q, S, T, C or AI memory in the attached

CPU.

— Hexadecimal data is displayed with a leading ‘16#’. The number of characters in the value is based on the size of the variable. For example, VW100 displays as 16#0123.

— The number of digits left of the decimal must be large enough to display the expected range of values, including the negative sign, if the data value is a signed integer or floating point value.

— If the data format is integer and the number of digits right of the decimal point is not zero, the integer value is displayed as a scaled integer. For example, if VW100 =

1234 and there are 2 digits right of the decimal point, the data is displayed as ‘12.34’.

— If the data value is greater than can be displayed in the specified field size, the

Modem module places the # character in all character positions of data value.

7. Telephone numbers are configured by selecting the Phone Numbers tab on the Configure

Messaging screen. Click the New Phone Number… button to add a new telephone number.

Once a telephone number has been configured it must be added to the project. Highlight the telephone number in the Available Phone Numbers column and click the right arrow box to add the telephone number to the current project. Once you have added the telephone number to the current project, you can select the telephone number and add a symbolic name for this number to use in your program.

The telephone number consists of several fields which vary based on the type of messaging selected by the user.

— The Messaging Protocol selection tells the Modem module which protocol to use when sending the message to the message service provider. Numeric pagers support only numeric protocol. Text paging services usually require TAP (Telelocator

Alphanumeric Protocol). SMS messaging providers are supported with either TAP or

UCP (Universal Computer Protocol). There are three different UCP services normally used for SMS messaging. Most providers support command 1 or 51. Check with the

SMS provider to determine the protocol and commands required by that provider.

— The Description field allows you to add a text description for the telephone number.

315

S7-200 Programmable Controller System Manual

— The Phone Number field is the telephone number of the messaging service provider.

For text messages this is the telephone number of the modem line the service provider uses to accept text messages. For numeric paging this is the telephone number of the pager itself. The Modem module allows the telephone number field to be a maximum of 40 characters. The following characters are allowed in telephone numbers that the Modem module uses to dial out:

!

,

0 to 9

A B C D * #

@

W

( )-allowed from a telephone keypad

DTMF digits (tone dialing only) pause dialing for 2 seconds commands the modem to generate a hook flash wait for 5 seconds of silence wait for a dial tone before continuing ignored (can be used to format the telephone number)

The dash character (—) is only supported in Version 1.1 of the EM 241 Modem module.

— The Specific Pager ID or Cell Phone Number field is where you enter the pager number or cellular telephone number of the message recipient. This number should not contain any characters except the digits 0 through 9. A maximum of 20 characters is allowed.

— The Password field is optional for TAP message. Some providers require a password but normally this field should be left blank. The Modem module allows the password to be up to 15 characters.

— The Originating Phone Number field allows the Modem module to be identified in the

SMS message. This field is required by some service providers which use UCP commands. Some service providers might require a minimum number of characters in this field. The Modem module allows up to 15 characters.

— The Modem Standard field is provided for use in cases where the Modem module and the service provider modem cannot negotiate the modem standard. The default is V.34 (33.6 kBaud).

— The Data Format fields allow you to adjust the data bits and parity used by the modem when transmitting a message to a service provider. TAP normally used 7 data bits and even parity, but some service providers use 8 data bits and no parity.

UCP always uses 8 data bits with no parity. Check with the service provider to determine which settings to use.

8. You can configure the Modem module to transfer data to another S7-200 CPU (if PPI protocol was selected) or to transfer data to a Modbus device (if Modbus protocol was selected). Check the Enable CPU data transfers checkbox and click the Configure

CPU-to… button to define the data transfers and the telephone numbers of the remote devices.

9. When setting up a CPU-to-CPU or a CPU-to-Modbus data transfer you must define the data to transfer and the telephone number of the remote device. Select the Data Transfers tab on the Configure Data Transfers screen and click the New Transfer button. A data transfer consists of a data read from the remote device, a data write to the remote device, or both a read from and a write to the remote device. If both a read and a write are selected, the read is performed first and then the write.

Up to 100 words can be transferred in each read or write. Data transfers must be to or from the V Memory in the local CPU. The wizard always describes the memory locations in the remote device as if the remote device is an S7-200 CPU. If the remote device is a Modbus device, the transfer is to or from holding registers in the Modbus device (address 04xxxx).

The equivalent Modbus address (xxxx) is determined as follows:

Modbus address = 1 + (V memory address / 2)

V memory address = (Modbus address — 1) * 2

316

Creating a Program for the Modem Module

Chapter 10

10. The Phone Numbers tab on the Configure CPU Data Transfers screen allows you to define the telephone numbers for CPU-to-CPU or a CPU-to-Modbus data transfers. Click the New

Phone Number… button to add a new telephone number. Once a telephone number has been configured it must be added to the project. Highlight the telephone number in the

Available Phone Numbers column and click the right arrow box to add the telephone number to the current project. Once you have added the telephone number to the current project, you can select the telephone number and add a symbolic name for this telephone number to use in your program.

The Description and Phone Number fields are the same as described earlier for messaging.

The Password field is required if the remote device is a Modem module and password protection has been enabled. The Password field in the local Modem module must be set to the password of the remote Modem module. The local Modem module supplies this password when it is requested by the remote Modem module.

11. Callback causes the Modem module to automatically disconnect and dial a predefined telephone number after receiving an incoming call from a remote STEP 7—Micro/WIN.

Select the Enable callback checkbox and click the Configure Callback… button to configure callback telephone numbers. Click Next>.

12. The Configure Callback… screen allows you enter the telephone numbers the Modem module uses when it answers an incoming call. Check the ‘Enable callbacks to only specified phone numbers’ if the callback numbers are to be predefined. If the Modem module is to accept any callback number supplied by the incoming caller (to reverse the connection charges), check the ‘Enable callbacks to any phone number’ selection.

If only specified callback telephone numbers are allowed, click the New Phone Number button to add callback telephone numbers. The Callback Properties screen allows you to enter the predefined callback telephone numbers and a description for the callback number.

The callback number entered here is the telephone number that the Modem module uses to dial when performing the callback. This telephone number should include all digits required to connect to an outside line, pause while waiting for an outside line, connect to long distance, etc.

After entering a new callback telephone number, it must be added to the project. Highlight the telephone number in the Available Callback Phone Numbers column and click the right arrow box to add the telephone number to the current project.

13. You can set the number of dialing attempts that the Modem module makes when sending a message or during a data transfer. The Modem module reports an error to the user program only when all attempts to dial and send the message are unsuccessful.

Some telephone lines do not have a dial tone present when the telephone receiver is lifted.

Normally, the Modem module returns an error to the user program if a dial tone is not present when the Modem module is commanded to send a message or perform a callback.

To allow dialing out on a line with no dial tone, check the box, Enable Dialing Without Dial

Tone Selection.

14. Version 1.1 of the EM 241 Module can be programmed to answer after a specific number of rings. The module will answer on the first ring unless another value is specified. You can select the answering ring number between 0 and 20. Values of 0 and 1 will answer on the first ring. The value of zero provides compatibility with the previous version of the EM 241.

When using Modbus RTU protocol, Version 1.1 of the EM 241 Module allows the user to configure the module to answer only a specific Modbus address. You can specify Modbus addresses between 0 and 247. An address of zero provides compatibility with the previous version of the EM 241 and causes the EM 241 to answer any address.

15. The Modem Expansion wizard creates a configuration block for the Modem module and requires the user to enter the starting memory address where the Modem module configuration data is stored. The Modem module configuration block is stored in V Memory in the CPU. STEP 7—Micro/WIN writes the configuration block to the project Data Block. The size of the configuration block varies based on the number of messages and telephone numbers configured. You can select the V Memory address where you want the configuration block stored, or click the Suggest Address button if you want the wizard to suggest the address of an unused V Memory block of the correct size. Click Next>.

16. The final step in configuring the Modem module is to specify the Q memory address of the command byte for the Modem module. You can determine the Q memory address by counting the output bytes used by any modules with discrete outputs installed on the

317

S7-200 Programmable Controller System Manual

S7-200 before the Modem module. Click Next>.

17. The Modem Expansion wizard now generates the project components for your selected configuration (program block and data block) and makes that code available for use by your program. The final wizard screen displays your requested configuration project components. You must download the Modem module configuration block (Data Block) and the Program Block to the S7-200 CPU.

Overview of Modem Instructions and Restrictions

The Modem Expansion wizard makes controlling the Modem module easier by creating unique instruction subroutines based on the position of the module and configuration options you selected. Each instruction is prefixed with a “MODx_” where x is the module location.

Requirements for Using the EM 241 Modem Module Instructions

Consider these requirements when you use Modem module instructions:

—

—

—

—

—

The Modem module instructions use three subroutines.

The Modem module instructions increase the amount of memory required for your program by up to 370 bytes. If you delete an unused instruction subroutine, you can rerun the

Modem Expansion wizard to recreate the instruction if needed.

You must make sure that only one instruction is active at a time.

The instructions cannot be used in an interrupt routine.

The Modem module reads the configuration table information when it first powers up and after a STOP-to-RUN transition. Any change that your program makes to the configuration table is not seen by the module until a mode change or the next power cycle.

Using the EM 241 Modem Module Instructions

To use the Modem module instructions in your S7-200 program, follow these steps:

1. Use the Modem Expansion wizard to create the Modem module configuration table.

2. Insert the MODx_CTRL instruction in your program and use the SM0.0 contact to execute it every scan.

3. Insert a MODx_MSG instruction for each message you need to send.

4. Insert a MODx_XFR instruction for each data transfer.

318

Creating a Program for the Modem Module

Chapter 10

Instructions for the Modem Module

MODx_CTRL Instruction

The MODx_CTRL (Control) instruction is used to enable and initialize the Modem module. This instruction should be called every scan and should only be used once in the project.

MODx_XFR Instruction

The MODx_XFR (Data Transfer) instruction is used to command the Modem module to read and write data to another S7-200 CPU or a Modbus device. This instruction requires 20 to 30 seconds from the time the START input is triggered until the Done bit is set.

The EN bit must be on to enable a command to the module, and should remain on until the Done bit is set, signaling completion of the process. An XFR command is sent to the

Modem module on each scan when START input is on and the module is not currently busy. The START input can be pulsed on through an edge detection element, which only allows one command to be sent.

Phone is the number of one of the data transfer telephone numbers. You can use the symbolic name you assigned to each data transfer telephone number when the number was defined with the Modem Expansion wizard.

Data is the number of one of the defined data transfers. You can use the symbolic name you assigned to the data transfer when the request was defined using the Modem

Expansion wizard.

Done is a bit that comes on when the Modem module completes the data transfer.

Error is a byte that contains the result of the data transfer. Table 10-4 defines the possible error conditions that could result from executing this instruction.

Table 10-6 Parameters for the MODx_XFR Instruction

Inputs/Outputs

START

Phone, Data

Done

Error

Data Type

BOOL

BYTE

BOOL

BYTE

Operands

I, Q, M, S, SM, T, C, V, L, Power Flow

VB, IB, QB, MB, SB, SMB, LB, AC, Constant, *VD, *AC, *LD

I, Q, M, S, SM, T, C, V, L

VB, IB, QB, MB, SB, SMB, LB, AC, *VD, *AC, *LD

319

S7-200 Programmable Controller System Manual

MODx_MSG Instruction

The MODx_MSG (Send Message) instruction is used to send a paging or SMS message from Modem module. This instruction requires 20 to 30 seconds from the time the

START input is triggered until the Done bit is set.

The EN bit must be on to enable a command to the module, and should remain on until the Done bit is set, signaling completion of the process. A MSG command is sent to the

Modem module on each scan when START input is on and the module is not currently busy. The START input can be pulsed on through an edge detection element, which only allows one command to be sent.

Phone is the number of one of the message telephone numbers. You can use the symbolic name you assigned to each message telephone number the when the number was defined with the Modem Expansion wizard.

Msg is the number of one of the defined messages. You can use the symbolic name you assigned to the message when the message was defined using the Modem

Expansion wizard.

Done is a bit that comes on when the Modem module completes the sending of the message to the service provider.

Error is a byte that contains the result of this request to the module. Table 10-8 defines the possible error conditions that could result from executing this instruction.

Table 10-7 Parameters for the MODx_MSG Instruction

Inputs/Outputs

START

Phone, Msg

Done

Error

Data Type

BOOL

BYTE

BOOL

BYTE

Operands

I, Q, M, S, SM, T, C, V, L, Power Flow

VB, IB, QB, MB, SB, SMB, LB, AC, Constant, *VD, *AC, *LD

I, Q, M, S, SM, T, C, V, L

VB, IB, QB, MB, SB, SMB, LB, AC, *VD, *AC, *LD

320

Creating a Program for the Modem Module

Chapter 10

Table 10-8 Error Values Returned by MODx_MSG and MODx_XFR Instructions

Error

0

Telephone line errors

Description

No error

1

2

No dial tone present

Busy line

5

6

3

4

Dialing error

No answer

Connect timeout (no connection within 1 minute)

Connection aborted or an unknown response

Errors in the command

7 Numeric paging message contains illegal digits

8

9

Telephone number (Phone input) out of range

Message or data transfer (Msg or Data input) out of range

10

11

Error in text message or data transfer message

Error in messaging or data transfer telephone number

12 Operation not allowed (i.e. attempts set to zero)

Service provider errors

13

14

15

No response (timeout) from messaging service

Message service disconnected for unknown reason

User aborted message (disabled command bit)

TAP — Text paging and SMS message errors returned by service provider

16 Remote disconnect received (service provider aborted session)

17

18

Login not accepted by message service (incorrect password)

Block not accepted by message service (checksum or transmission error)

19 Block not accepted by message service (unknown reason)

UCP — SMS message errors returned by service provider

20

21

Unknown error

Checksum error

26

27

28

29

22

23

24

25

Syntax error

Operation not supported by system (illegal command)

Operation not allowed at this time

Call barring active (blacklist)

Caller address invalid

Authentication failure

Legitimization code failure

GA not valid

34

35

36

37

30

31

32

33

Repetition not allowed

Legitimization code for repetition, failure

Priority call not allowed

Legitimization code for priority call, failure

Urgent message not allowed

Legitimization code for urgent message, failure

Reverse charging not allowed

Legitimization code for reverse charging, failure

321

S7-200 Programmable Controller System Manual

Table 10-8 Error Values Returned by MODx_MSG and MODx_XFR Instructions, continued

Error Description

UCP — SMS message errors returned by service provider (continued)

38

39

Deferred delivery not allowed

New AC not valid

40

41

42

43

New legitimization code not allowed

Standard text not valid

Time period not valid

Message type not supported by system

44

45

46

47

Message too long

Requested standard text not valid

Message type not valid for pager type

Message not found in SMSC

48

49

50

51

Reserved

Reserved

Subscriber hang up

Fax group not supported

Fax message type not supported 52

Data transfer errors

53

54

55

56

57

58

59

60 to 127

Message timeout (no response from remote device)

Remote CPU busy with upload or download

Access error (memory out of range, illegal data type)

Communications error (unknown response)

Checksum or CRC error in response

Remote EM 241 set for callback (not allowed)

Remote EM 241 rejected the provided password

Reserved

Instruction use errors

128 Cannot process this request. Either the Modem module is busy with another request, or there was no START pulse on this request.

129 Modem module error:

S

The location of the Modem module or the Q memory address that was configured with the Modem Expansion wizard does not match the actual location or memory address

S

Refer to SMB8 to SMB21 (I/O Module ID and Error Register)

322

Creating a Program for the Modem Module

Chapter 10

Sample Program for the Modem Module

Example: Modem Module

Network 1

LD

CALL

// Call the MOD0_CTRL

// subroutine on every scan.

SM0.0

MOD0_CTRL

Network 2

LD

EU

=

LD

CALL

I0.0

// Send a text message

//to a cell phone.

L63.7

I0.0

MOD0_MSG, L63.7, Cell Phone,

Message1, M0.0, VB10

Network 3

LD

EU

=

LD

CALL

I0.1

// Transfer data to a remote CPU.

L63.7

I0.1

MOD0_XFR

,

L63.7, Remote CPU,

Transfer1, M0.0, VB10

S7-200 CPUs that Support Intelligent Modules

The Modem module is an intelligent expansion module designed to work with the S7-200 CPUs shown in Table 10-9.

Table 10-9 EM 214 Module Compatibility with S7-200 CPUs

CPU

CPU 222 Rel. 1.10 or greater

CPU 224 Rel. 1.10 or greater

CPU 224XP Rel. 2.00 or greater

CPU 226 Rel. 1.00 or greater

Description

CPU 222 DC/DC/DC and CPU 222 AC/DC/Relay

CPU 224 DC/DC/DC and CPU 224 AC/DC/Relay

CPU 224XP DC/DC/DC and CPU 224XP AC/DC/Relay

CPU 226 DC/DC/DC and CPU 226 AC/DC/Relay

Special Memory Location for the Modem Module

Fifty bytes of special memory (SM) are allocated to each intelligent module based on its physical position in the I/O expansion bus. When an error condition or a change in status is detected, the module indicates this by updating the SM locations corresponding to the module’s position. If it is the first module, it updates SMB200 through SMB249 as needed to report status and error information. If it is the second module, it updates SMB250 through SMB299, and so on. See

Table 10-10.

Table 10-10 Special Memory Bytes SMB200 to SMB549

Special Memory Bytes SMB200 to SMB549

Intelligent

Module in

Slot 0

SMB200 to

SMB249

Intelligent

Module in

Slot 1

SMB250 to

SMB299

Intelligent

Module in

Slot 2

SMB300 to

SMB349

Intelligent

Module in

Slot 3

SMB350 to

SMB399

Intelligent

Module in

Slot 4

SMB400 to

SMB449

Intelligent

Module in

Slot 5

SMB450 to

SMB499

Intelligent

Module in

Slot 6

SMB500 to

SMB549

Table10-11 shows the Special Memory data area allocated for the Modem module. This area is defined as if this were the intelligent module located in Slot 0 of the I/O system.

323

S7-200 Programmable Controller System Manual

Table 10-11 SM Locations for the EM 241 Modem Module

SM Address

SMB200 to

SMB215

SMB216 to

SMB219

SMW220

Description

Module name (16 ASCII characters) SMB200 is the first character.

“EM241 Modem”

S/W revision number (4 ASCII characters) SMB216 is the first character.

SMB222

Error code

0000 — No error

0001 — No user power

0002 — Modem failure

0003 — No configuration block ID

0004 — Configuration block out of range

0005 — Configuration error

0006 — Country code selection error

0007 — Phone number too large

0008 — Message too large

0009 to 00FF — Reserved

01xx — Error in callback number xx

02xx — Error in pager number xx

03xx — Error in message number xx

0400 to FFFF — Reserved

Module status — reflects the LED status

MSB

7

F

6

G

5

H

4

T

3

R

2

C

1

0

LSB

0

0

SMB223

SMW224

SMB226

SMB227

SMB228

SMB229 to

SMB244

SMB245

SMD246

F — EM_FAULT

G — EM_GOOD

H — OFF_HOOK

T — NO DIALTONE

R — RING

C — CONNECT

0 — no fault

0 — not good

0 — on hook,

0 — dial tone

0 — not ringing

0 — not connected

1 — fault

1 — good

1 — off hook

1 — no dial tone

1 — phone ringing

1 — connected

Country code as set by switches (decimal value)

Baud rate at which the connection was established (unsigned decimal value).

Result of the user command

MSB

7

D 0

6 5

ERROR

LSB

0

D — Done bit;

0 — operation in progress

1 — operation complete

ERROR : Error Code Description, see Table 10-8

Telephone number selector — This byte specifies which messaging telephone number to use when sending a message. Valid values are 1 through 250.

Message selector — This byte specifies which message to send. Valid values are 1 through

250.

Reserved

Offset to the first Q byte used as the command interface to this module. The offset is supplied by the CPU for the convenience of the user and is not needed by the module.

Pointer to the configuration table for the Modem module in V memory. A pointer value to an area other than V memory is not accepted and the module continues to examine this location, waiting for a non-zero pointer value.

324

Creating a Program for the Modem Module

Chapter 10

Advanced Topics

Understanding the Configuration Table

The Modem Expansion wizard has been developed to make modem applications easy by automatically generating the configuration table based upon the answers you give about your system. Configuration table information is provided for advanced users who want to create their own Modem module control routines and format their own messages.

The configuration table is located in the V memory area of the S7-200. In Table 10-12, the Byte

Offset column of the table is the byte offset from the location pointed to by the configuration area pointer in SM memory. The configuration table information is divided into four sections.

—

—

—

—

The Configuration Block contains information to configure the module.

The Callback Telephone Number Block contains the predefined telephone numbers allowed for callback security.

The Message Telephone Number Block contains the telephone numbers used when dialing messaging services or CPU data transfers.

The Message Block contains the predefined messages to send to the messaging services.

Table 10-12 Configuration Table for the Modem Module

Configuration Block

Byte Offset Description

0 to 4

5

6

7

8

9

10

11

12

13

Module Identification — Five ASCII characters used for association of the configuration table to an intelligent module. Release 1.00 of the EM 241 Modem module expects “M241A”.

The length of the Configuration Block — Currently 24.

Callback telephone number length — Valid values are 0 through 40.

Messaging telephone number length — Valid values are 0 through 120.

Number of callback telephone numbers — Valid values are 0 through 250.

Number of messaging telephone numbers — Valid values are 0 through 250.

Number of messages — Valid values are 0 through 250.

Answer ring number — Valid values are 0 through 20.

Modbus RTU address — Valid values are 0 through 247.

This byte contains the enable bits for the features supported.

MSB

7 6 5 4 3 2 1

LSB

0

PD CB PW MB BD 0 0 0

14

15

16 to 23

PD — 0 = tone dialing

CB — 0 = callback disabled

PW — 0 = password disabled

MB — 0 = PPI protocol enabled

BD — 0 = blind dialing disabled

Bits 2, 1 and 0 are ignored by the module

1 = pulse dialing

1 = callback enabled

1 = password enabled

1 = Modbus protocol enabled

1 = blind dialing enabled

Reserved

Attempts — This value specifies the number of times the modem is to attempt to dial and send a message before returning an error. A value of 0 prevents the modem from dialing out.

Password — Eight ASCII characters

325

S7-200 Programmable Controller System Manual

Table 10-12 Configuration Table for the Modem Module, continued

Callback Telephone Number Block (optional)

Byte Offset Description

24 Callback Telephone Number 1 — A string representing the first telephone number that is authorized for callback access from the EM 241 Modem module. Each callback telephone number must be allocated the same amount of space as specified in the callback telephone number length field (offset 6 in the Configuration Block).

Callback Telephone Number 2 24+ callback number

:

: :

Callback Telephone Number n

Messaging Telephone Number Block (optional)

Byte Offset Description

M Messaging Telephone Number 1 — A string representing a messaging telephone number which includes protocol and dialing options. Each telephone number must be allocated the same amount of space as specified in the messaging telephone number length field (offset 7 in the Configuration Block).

The messaging telephone number format is described below

Messaging Telephone Number 2 M + messaging number length

: :

: Messaging Telephone Number n

Message Block (optional)

Byte Offset

:

:

P

N

N+2

N+3

Description

V memory offset (relative to VB0) for the first message (2 bytes)

Length of message 1

Length of message 2

Length of message n

Message 1 — A string (120 bytes max.) representing the first message. This string includes text and embedded variable specifications or it could specify a CPU data transfer.

See the Text Message Format and the CPU Data Transfer Format described below.

Message 2 P + length of message 1

:

: :

Message n

The Modem module re-reads the configuration table when these events occur:

—

—

—

Within five seconds of each STOP-to-RUN transition of the S7-200 CPU (unless the modem is currently online)

Every five seconds until a valid configuration is found (unless the modem is currently online)

Every time the modem transitions from an online to an offline condition

326

Creating a Program for the Modem Module

Chapter 10

Messaging Telephone Number Format

The Messaging Telephone Number is a structure which contains the information needed by the

Modem module to send a message. The Messaging Telephone Number is an ASCII string with a leading length byte followed by ASCII characters. The maximum length of a Messaging Telephone

Number is 120 bytes (which includes the length byte).

The Messaging Telephone Number contains up to 6 fields separated by a forward slash (/) character. Back-to-back slashes indicate an empty (null) field. Null fields are set to default values in the Modem module.

Format: <Telephone Number>/<ID>/<Password/<Protocol>/<Standard>/<Format>

The Telephone Number field is the telephone number that the Modem module dials when sending a message. If the message being sent is a text or SMS message, this is the telephone number of the service provider. If the message is a numeric page, this field is the pager telephone number. If the message is a CPU data transfer, this is the telephone number of the remote device. The maximum number of characters in this field is 40.

The ID is the pager number or cellular telephone number. This field should consist of the digits 0 to 9 only. If the protocol is a CPU data transfer, this field is used to supply the address of the remote device. Up to 20 characters are allowed in this field.

The Password field is used to supply the a password for messages sent via TAP if a password is required by the service provider. For messages sent via UCP this field is used as the originating address or telephone number. If the message is a CPU data transfer to another Modem module, this field can be used to supply the password of the remote Modem module. The password can be up to 15 characters in length.

The Protocol field consists of one ASCII character which tells the Modem module how it should format and transmit the message. The following values are allowed:

1 — Numeric paging protocol (default)

2 — TAP

3 — UCP command 1

4 — UCP command 30

5 — UCP command 51

6 — CPU data transfer

The Standard field forces the Modem module to use a specific modem standard. The standard field is one ASCII character. The following values are allowed:

1 — Bell 103

2 — Bell 212

3 — V.21

4 — V.22

5 — V.22 bit

6 — V.23c

7 — V.32

8 — V.32 bit

9 — V.34 (default)

The Format field is three ASCII characters which specify the number of data bits and parity to be used when transmitting the message. This field does not apply if the protocol is set to numeric paging. Only the following two settings are allowed:

8N1 — 8 data bits, no parity, one stop bit (default)

7E1 — 7 data bits, even parity, one stop bit

327

S7-200 Programmable Controller System Manual

Text Message Format

The Text Message Format defines the format of text paging or SMS messages. These types of messages can contain text and embedded variables. The text message is an ASCII string with a leading length byte followed by ASCII characters. The maximum length of a text message is 120 bytes (which includes the length byte).

Format: <Text><Variable><Text><Variable>…

The Text field consists of ASCII characters.

The Variable field defines an embedded data value which the Modem module reads from the local

CPU, formats, and places in the message. The percent (%) character is used to mark the start and the end of a variable field. The address and the left fields are separated with a colon. The delimiter between the Left and Right fields can be either a period or a comma and is used as the decimal point in the formatted variable. The syntax for the variable field is:

%Address:Left.Right Format%

The Address field specifies the address, data type and size of the embedded data value (i.e.

VD100, VW50, MB20 or T10). The following data types are allowed: I, Q, M, SM, V, T (word only),

C (word only), and AI (word only). Byte, word and double word sizes are allowed.

The Left field defines the number of digits to display left of the decimal point. This value should be large enough to handle the expected range of the embedded variable including a minus sign if needed. If Left is zero the value is displayed with a leading zero. The valid range for Left is 0 to 10.

The Right field defines the number of digits to display right of the decimal point. Zeros to the right of the decimal point are always displayed. If Right is zero the number is displayed without a decimal point. The valid range for Right is 0 to 10.

The Format field specifies the display format of the embedded value. The following characters are allowed for the format field: i — signed integer u — unsigned integer h — hexadecimal f — floating point/real

Example: “Temperature = %VW100:3.1i% Pressure = %VD200:4.3f%”

328

Creating a Program for the Modem Module

Chapter 10

CPU Data Transfer Message Format

A CPU data transfer, either a CPU-to-CPU or a CPU-to-Modbus data transfer, is specified using the CPU Data Transfer Message Format. A CPU Data Transfer Message is an ASCII string which can specify any number of data transfers between devices, up to the number of specifications that fit in the maximum message length of 120 bytes (119 characters plus a length byte). An ASCII space can be used to separate the data transfer specifications, but is not required. All data transfer specifications are executed within one connection. Data transfers are executed in the order defined in the message. If an error is detected in a data transfer, the connection to the remote device is terminated and subsequent transactions are not processed.

If the operation is specified as a read, Count number of words are read from the remote device starting at the Remote_address, and then written to V Memory in the local CPU starting at the

Local_address.

If the operation is specified as a write, Count number of words are read from the local CPU starting at the Local_address, and then written to the remote device starting at Remote_address.

Format: <Operation>=<Count>,<Local_address>,<Remote_address>

The Operation field consists of one ASCII character and defines the type of transfer.

R — Read data from the remote device

W — Write data to the remote device

The Count field specifies the number of words to be transferred. The valid range for the count field is 1 to 100 words.

The Local_address field specifies the V Memory address in the local CPU for the data transfer

(i.e. VW100).

The Remote_address field specifies the address in the remote device for the data transfer (i.e.

VW500). This address is always specified as a V Memory address even if the data transfer is to a

Modbus device. If the remote device is a Modbus device, the conversion between V Memory address and Modbus address is as follows:

Modbus address = 1 + (V Memory address / 2)

V Memory address = (Modbus address — 1) * 2

Example: R=20,VW100, VW200 W=50,VW500,VW1000 R=100,VW1000,VW2000

329

S7-200 Programmable Controller System Manual

330

Using the USS Protocol Library to

Control a MicroMaster Drive

STEP 7—Micro/WIN Instruction Libraries makes controlling MicroMaster drives easier by including preconfigured subroutines and interrupt routines that are specifically designed for using the USS protocol to communicate with a motor drive. You can control the physical drive and the read/write drive parameters with the USS instructions.

You find these instructions in the Libraries folder of the STEP 7—Micro/WIN instruction tree. When you select a USS instruction, one or more associated subroutines (USS1 through USS7) are added automatically.

Siemens Libraries are sold on a separate CD, STEP 7—Micro/WIN Add-On: Instruction Library, with the order number 6ES7 830—2BC00—0YX0. After version 1.1 of the Siemens Library is purchased and installed, any subsequent STEP 7—Micro/WIN V3.2x and V4.0 upgrade that you install will also upgrade your libraries automatically at no additional cost (when library additions or modifications are made).

In This Chapter

Requirements for Using the USS Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Calculating the Time Required for Communicating with the Drive . . . . . . . . . . . . . . . . . . . . . . .

Using the USS Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Instructions for the USS Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Sample Programs for the USS Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

USS Execution Error Codes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Connecting and Setting Up the MicroMaster Series 3 Drive . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Connecting and Setting Up the MicroMaster Series 4 Drive . . . . . . . . . . . . . . . . . . . . . . . . . . . .

332

332

333

334

341

342

342

345

331

S7-200 Programmable Controller System Manual

Requirements for Using the USS Protocol

The STEP 7—Micro/WIN Instruction Libraries provide subroutines, interrupt routines, and instructions to support the USS protocol. The USS instructions use the following resources in the

S7-200:

—

—

—

—

—

—

—

—

—

USS Protocol is an interrupt driven application. In the worst case the receive message interrupt routine requires up to 2.5ms to execute. During this time all other interrupt events are queued for service after the receive message interrupt routine has been executed. If your application cannot tolerate this worst case delay, then you may want to consider other solutions for controlling drives.

Initializing the USS protocol dedicates an S7-200 port for USS communications.

You use the USS_INIT instruction to select either USS or PPI for port 0. (USS refers to the

USS protocol for SIMOTION MicroMaster drives.) You can also use USS_INIT_P1 to assign port 1 for USS communication. When a port is set to use the USS protocol for communicating with drives, you cannot use the port for any other purpose, including communicating with STEP 7—Micro/WIN.

During the development of the program for an application using the USS protocol, you should use a two port model, CPU 226, CPU 226XM, or EM 277 PROFIBUS_DP module connected to a PROFIBUS CP card in your computer. The second communications port allows STEP 7—Micro/WIN to monitor the control program while USS protocol is running.

The USS instructions affect all of the SM locations that are associated with Freeport communications on the assigned port.

The USS subroutines and interrupt routines are stored in your program.

The USS instructions increase the amount of memory required for your program by up to

3050 bytes. Depending on the specific USS instructions used, the support routines for these instructions can increase the overhead for the control program by at least 2150 bytes, up to 3500 bytes.

The variables for the USS instructions require a 400-byte block of V memory. The starting address for this block is assigned by the user and is reserved for USS variables.

Some of the USS instructions also require a 16-byte communications buffer. As a parameter for the instruction, you provide a starting address in V memory for this buffer. It is recommended that a unique buffer be assigned for each instance of USS instructions.

When performing calculations, the USS instructions use accumulators AC0 to AC3. You can also use the accumulators in your program; however, the values in the accumulators will be changed by the USS instructions.

The USS instructions cannot be used in an interrupt routine.

Tip

To change the operation of a port back to PPI so that you can communicate with

STEP 7—Micro/WIN, use another USS_INIT instruction to reassign the port to PPI operation..

You can also set the mode switch on the S7-200 to STOP mode. This resets the parameters for the port. Be aware that stopping the communications to the drives also stops the drives.

Calculating the Time Required for Communicating with the Drive

Communications with the drive are asynchronous to the S7-200 scan. The S7-200 typically completes several scans before one drive communications transaction is completed. The following factors help determine the amount of time required: the number of drives present, the baud rate, and the scan time of the S7-200.

332

Using the USS Protocol Library to Control a MicroMaster Drive

Chapter 11

Some drives require longer delays when using the parameter access instructions.

The amount of time required for a parameter access is dependent on the drive type and the parameter being accessed.

After a USS_INIT instruction assigns Port 0 to use the USS Protocol (or USS_INIT_P1 for port 1), the S7-200 regularly polls all active drives at the intervals shown in

Table 11-1. You must set the time-out parameter of each drive to allow for this task.

Table 11-1 Communications Times

Baud

Rate

Time Between Polls of Active Drives

(with No Parameter Access Instructions

Active)

1200 240 ms (maximum) times the number of drives

2400 130 ms (maximum) times the number of drives

4800 75 ms (maximum) times the number of drives

9600 50 ms (maximum) times the number of drives

19200 35 ms (maximum) times the number of drives

38400 30 ms (maximum) times the number of drives

57600 25 ms (maximum) times the number of drives

115200 25 ms (maximum) times the number of drives

Tip

Only one USS_RPM_x or USS_WPM_x instruction can be active at a time. The Done output of each instruction should signal completion before user logic initiates a new instruction.

Use only one USS_CTRL instruction for each drive.

Using the USS Instructions

To use the USS protocol instructions in your S7-200 controller program, follow these steps:

1. Insert the USS_INIT instruction in your program and execute the USS_INIT instruction for one scan only. You can use the USS_INIT instruction either to initiate or to change the USS communications parameters.

When you insert the USS_INIT instruction, several hidden subroutines and interrupt routines are automatically added to your program.

2. Place only one USS_CTRL instruction in your program for each active drive.

You can add as many USS_RPM_x and USS_WPM_x instructions as required, but only one of these can be active at a time.

3. Allocate the V memory for the library instructions by right-clicking (to get the menu) on the Program

Block node in the instruction tree.

Select the Library Memory option to display the

Library Memory Allocation dialog box.

4 C fi th d i t t t h th baud rate and address used in the program.

Figure 11-1 Allocating V Memory for the

Instruction Library

5. Connect the communications cable between the S7-200 and the drives.

Ensure that all of the control equipment, such as the S7-200, that is connected to the drive be connected by a short, thick cable to the same ground or star point as the drive.

Caution

Interconnecting equipment with different reference potentials can cause unwanted currents to flow through the interconnecting cable. These unwanted currents can cause communications errors or damage equipment.

Ensure that all equipment that is connected with a communications cable either shares a common circuit reference or is isolated to prevent unwanted current flows.

The shield must be tied to chassis ground or pin 1 on the 9-pin connector. It is recommended that you tie wiring terminal 2—0V on the MicroMaster drive to chassis ground.

333

S7-200 Programmable Controller System Manual

Instructions for the USS Protocol

USS_INIT Instruction

The USS_INIT instruction (port 0) or USS_INIT_P1 (port 1) is used to enable and initialize, or to disable MicroMaster

Drive communications. Before any other USS instruction can be used, the USS_INIT instruction must be executed without errors. The instruction completes and the Done bit is set immediately, before continuing to the next instruction.

The instruction is executed on each scan when the EN input is on.

Execute the USS_INIT instruction only once for each change in communications state. Use an edge detection instruction to pulse the EN input on. To change the initialization parameters, execute a new USS_INIT instruction.

The value for Mode selects the communications protocol: an input value of 1 assigns a port to USS protocol and enables the protocol, and an input value of 0 assigns port 0 to PPI and disables the USS protocol.

Baud sets the baud rate at 1200, 2400, 4800, 9600, 19200, 38400, 57600 or 115200. Baud rates

57600 and 115200 are supported by S7-200 CPUs version 1.2 or later.

Table 11-2 Parameters for the USS_INIT Instruction

Inputs/Outputs

Mode

Baud, Active

Done

Error

Data Type

BYTE

DWORD

BOOL

BYTE

Operands

VB, IB, QB, MB, SB, SMB, LB, AC, Constant, *VD, *AC, *LD

VD, ID, QD, MD, SD, SMD, LD, Constant, AC *VD, *AC, *LD

I, Q, M, S, SM, T, C, V, L

VB, IB, QB, MB, SB, SMB, LB, AC, *VD, *AC, *LD

Active indicates which drives are active.

Some drives only support addresses 0 through 30.

MSB

31

D31

30

D30

29

D29

28 3 2

D2

1

D1

LSB

0

D0

Figure 11-2 shows the description and format of the active drive input

.

Any drive that is marked as Active is automatically polled in the background to control the drive, collect status, and prevent serial link time-outs in the drive.

D0 Drive 0 active bit; 0 — drive not active, 1 — drive active

D1 Drive 1 active bit; 0 — drive not active, 1 — drive active

…

Figure 11-2 Format for the Active Drive Parameter

Refer to Table 11-1 to compute the time between status polls.

When the USS_INIT instruction completes, the Done output is turned on. The Error output byte contains the result of executing the instruction. Table 11-6 defines the error conditions that could result from executing the instruction.

Example: USS_INIT Subroutine

Network 1

LD

EU

CALL

I0.0

USS_INIT, 1, 9600, 16#00000001,

M0.0, VB10

334

Using the USS Protocol Library to Control a MicroMaster Drive

Chapter 11

USS_CTRL Instruction

The USS_CTRL (port 0) or USS_CTRL_P1 (port 1) instruction is used to control an active MicroMaster drive.

The USS_CTRL instruction places the selected commands in a communications buffer, which is then sent to the addressed drive (Drive parameter), if that drive has been selected in the Active parameter of the USS_INIT instruction.

Only one USS_CTRL instruction should be assigned to each drive.

Some drives report speed only as a positive value. If the speed is negative, the drive reports the speed as positive but reverses the D_Dir (direction) bit.

The EN bit must be on to enable the USS_CTRL instruction. This instruction should always be enabled.

RUN (RUN/STOP) indicates whether the drive is on (1) or off (0). When the RUN bit is on, the MicroMaster drive receives a command to start running at the specified speed and direction. In order for the drive to run, the following must be true:

—

—

—

Drive must be selected as Active in USS_INIT.

OFF2 and OFF3 must be set to 0.

Fault and Inhibit must be 0.

When RUN is off, a command is sent to the MicroMaster drive to ramp the speed down until the motor comes to a stop. The OFF2 bit is used to allow the MicroMaster drive to coast to a stop. The OFF3 bit is used to command the

MicroMaster drive to stop quickly.

The Resp_R (response received) bit acknowledges a response from the drive. All the Active drives are polled for the latest drive status information. Each time the S7-200 receives a response from the drive, the Resp_R bit is turned on for one scan and all the following values are updated.

The F_ACK (fault acknowledge) bit is used to acknowledge a fault in the drive. The drive clears the fault (Fault) when F_ACK goes from 0 to 1.

The DIR (direction) bit indicates in which direction the drive should move.

Table 11-3 Parameters of the USS_CTRL Instruction

Inputs/Outputs Data Types Operands

RUN, OFF 2, OFF 3, F_ACK, DIR BOOL I, Q, M, S, SM, T, C, V, L, Power Flow

BOOL I, Q, M, S, SM, T, C, V, L Resp_R, Run_EN, D_Dir, Inhibit,

Fault

Drive, Type BYTE

Error

Status

BYTE

WORD

VB, IB, QB, MB, SB, SMB, LB, AC, *VD, *AC, *LD,

Constant

VB, IB, QB, MB, SB, SMB, LB, AC, *VD, *AC, *LD

Speed_SP

Speed

REAL

REAL

VW, T, C, IW, QW, SW, MW, SMW, LW, AC, AQW, *VD,

*AC, *LD

VD, ID, QD, MD, SD, SMD, LD, AC, *VD, *AC, *LD,

Constant

VD, ID, QD, MD, SD, SMD, LD, AC, *VD, *AC, *LD

335

S7-200 Programmable Controller System Manual

The Drive (drive address) input is the address of the MicroMaster drive to which the USS_CTRL command is to be sent. Valid addresses: 0 to 31

The Type (drive type) input selects the type of drive. For a MicroMaster 3 (or earlier) drive, set

Type to 0. For a MicroMaster 4 drive, set Type to 1.

Speed_SP (speed setpoint) is drive speed as a percentage of full speed. Negative values of

Speed_SP cause the drive to reverse its direction of rotation. Range: —200.0% to 200.0%

Error is an error byte that contains the result of the latest communications request to the drive.

Table 11-6 defines the error conditions that could result from executing the instruction.

Status is the raw value of the status word returned by the drive. Figure 11-3 shows the status bits for Standard Status Word and Main Feedback.

Speed is drive speed as a percentage of full speed. Range: —200.0% to 200.0%

Run_EN (RUN enable) indicates whether the drive is running (1) or stopped (0).

D_Dir indicates the drive’s direction of rotation.

Inhibit indicates the state of the inhibit bit on the drive (0 — not inhibited, 1 — inhibited). To clear the inhibit bit, the Fault bit must be off, and the RUN, OFF2, and OFF3 inputs must also be off.

Fault indicates the state of the fault bit (0 — no fault, 1 — fault). The drive displays the fault code.

(Refer to the manual for your drive). To clear the Fault bit, correct the cause of the fault and turn on the F_ACK bit.

High byte Low byte

15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0

1 = Ready to start

1 = Ready to operate

1 = Operation enabled

1 = Drive fault present

0 = OFF2 (Coast stop command present)

0 = OFF3 (Quick stop command present)

1 = Switch-on inhibit

1 = Drive warning present

1 = Not used (always 1)

1 = Serial operation allowed

0 = Serial operation blocked — local operation only

1 = Frequency reached

0 = Frequency not reached

1 = Converter output is clockwise

1 = Converter output is counter-clockwise

Reserved for future use: These bits might not always be zero

Figure 11-3 Status Bits for Standard Status Word for MicroMaster 3 and Main Feedback

336

Using the USS Protocol Library to Control a MicroMaster Drive

Chapter 11

High byte Low byte

15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0

1 = Ready to start

1 = Ready to operate

1 = Operation enabled

1 = Drive fault present

0 = OFF2 (Coast stop command present)

0 = OFF3 (Quick stop command present)

1 = Switch-on inhibit

1 = Drive warning present

1 = Not used (always 1)

1 = Serial operation allowed

0 = Serial operation blocked — local operation only

1 = Frequency reached

0 = Frequency not reached

0= Warning: Motor current limit

0= Motor holding brake active

0= Motor overload

1 = Motor running direction right

0= Inverter overload

Figure 11-4 Status Bits for Standard Status Word for MicroMaster 4 and Main Feedback

Example: USS_CTRL Subroutine

To display in STL only:

Network 1

LD

CALL

//Control box for drive 0

SM0.0

USS_CTRL, I0.0, I0.1, I0.2, I0.3,

I0.4, 0, 1, 100.0, M0.0, VB2, VW4,

VD6, Q0.0, Q0.1, Q0.2, Q0.3

To display in LAD or FBD:

Network 1

LD

=

LD

=

LD

=

LD

=

LD

=

LD

=

LD

CALL

//Control box for drive 0

SM0.0

L60.0

I0.0

L63.7

I0.1

L63.6

I0.2

L63.5

I0.3

L63.4

I0.4

L63.3

L60.0

USS_CTRL, L63.7, L63.6, L63.5,

L63.4, L63.3, 0, 1, 100.0, M0.0,

VB2, VW4, VD6, Q0.0, Q0.1, Q0.2,

Q0.3

337

S7-200 Programmable Controller System Manual

USS_RPM_x Instruction

There are three read instructions for the USS protocol:

—

—

USS_RPM_W (port 0) or USS_RPM_W_P1 (port 1) instruction reads an unsigned word parameter.

USS_RPM_D (port 0) or USS_RPM_D_P1 (port 1) instruction reads an unsigned double word parameter.

—

USS_RPM_R (port 0) or USS_RPM_R_P1 (port 1) instruction reads a floating-point parameter.

Only one read (USS_RPM_x) or write (USS_WPM_x) instruction can be active at a time.

The USS_RPM_x transactions complete when the

MicroMaster drive acknowledges receipt of the command, or when an error condition is posted. The logic scan continues to execute while this process awaits a response.

The EN bit must be on to enable transmission of a request, and should remain on until the Done bit is set, signaling completion of the process. For example, a USS_RPM_x request is transmitted to the MicroMaster drive on each scan when XMT_REQ input is on. Therefore, the XMT_REQ input should be pulsed on through an edge detection element which causes one request to be transmitted for each positive transition of the EN input.

The Drive input is the address of the MicroMaster drive to which the USS_RPM_x command is to be sent. Valid addresses of individual drives are 0 to 31.

Param is the parameter number. Index is the index value of the parameter that is to be read. Value is the parameter value returned. The address of a 16-byte buffer must be supplied to the DB_Ptr input. This buffer is used by the USS_RPM_x instruction to store the results of the command issued to the MicroMaster drive.

When the USS_RPM_x instruction completes, the Done output is turned on and the Error output byte and the Value output contain the results of executing the instruction. Table 11-6 defines the error conditions that could result from executing the instruction. The Error and Value outputs are not valid until the Done output turns on.

Table 11-4 Valid Operands for the USS_RPM_x

Inputs/Outputs Data Type

XMT_REQ BOOL

Drive

Param, Index

DB_Ptr

Value

Done

Error

BYTE

WORD

DWORD

WORD

DWORD, REAL

BOOL

BYTE

Operands

I, Q, M, S, SM, T, C, V, L, Power Flow conditioned by a rising edge detection element

VB, IB, QB, MB, SB, SMB, LB, AC, *VD, *AC, *LD, Constant

VW, IW, QW, MW, SW, SMW, LW, T, C, AC, AIW, *VD, *AC, *LD,

Constant

&VB

VW, IW, QW, MW, SW, SMW, LW, T, C, AC, AQW, *VD, *AC, *LD

VD, ID, QD, MD, SD, SMD, LD, *VD, *AC, *LD

I, Q, M, S, SM, T, C, V, L

VB, IB, QB, MB, SB, SMB, LB, AC. *VD, *AC, *LD

338

Using the USS Protocol Library to Control a MicroMaster Drive

Chapter 11

USS_WPM_x Instruction

There are three write instructions for the USS protocol:

—

USS_WPM_W (port 0) or USS_WPM_W_P1 (port 1) instruction writes an unsigned word parameter.

—

—

USS_WPM_D (port 0) or USS_WPM_D_P1 (port 1) instruction writes an unsigned double word parameter.

USS_WPM_R (port 0) or USS_WPM_R_P1 (port 1) instruction writes a floating-point parameter.

Only one read (USS_RPM_x) or write (USS_WPM_x) instruction can be active at a time.

The USS_WPM_x transactions complete when the

MicroMaster drive acknowledges receipt of the command, or when an error condition is posted. The logic scan continues to execute while this process awaits a response.

The EN bit must be on to enable transmission of a request, and should remain on until the Done bit is set, signaling completion of the process. For example, a USS_WPM_x request is transmitted to the MicroMaster drive on each scan when XMT_REQ input is on. Therefore, the XMT_REQ input should be pulsed on through an edge detection element which causes one request to be transmitted for each positive transition of the EN input.

The EEPROM input enables writing to both RAM and

EEPROM of the drive when it is on and only to the RAM when it is off. Note that this function is not supported by

MM3 drives, so this input must be off.

The Drive input is the address of the MicroMaster drive to which the USS_WPM_x command is to be sent. Valid addresses of individual drives are 0 to 31.

Param is the parameter number. Index is the index value of the parameter that is to be written. Value is the parameter value to be written to the RAM in the drive. For MicroMaster

3 drives, you can also write this value to the EEPROM of the drive, based on how you have configured P971 (EEPROM

Storage Control).

The address of a 16-byte buffer must be supplied to the DB_Ptr input. This buffer is used by the

USS_WPM_x instruction to store the results of the command issued to the MicroMaster drive.

When the USS_WPM_x instruction completes, the Done output is turned on and the Error output byte contains the result of executing the instruction. Table 11-6 defines the error conditions that could result from executing the instruction.

When the EEPROM input is turned on, the instruction writes to both the RAM and the EEPROM of the drive. When the the input is turned off, the instruction writes only to the RAM of the drive.

Because the MicroMaster 3 drive does not support this function, you must ensure that this input is off in order to use this instruction with a MicroMaster 3 drive.

Table 11-5 Valid Operands for the USS_WPM_x Instructions

Inputs/Outputs Data Type

XMT_REQ

EEPROM

Drive

Param, Index

DB_Ptr

Value

BOOL

BOOL

BYTE

WORD

DWORD

WORD

DWORD, REAL

Operands

I, Q, M, S,SM,T,C,V,L, Power Flow conditioned by a rising edge detection element

I, Q, M, S, SM, T, C, V, L, Power Flow

VB, IB, QB, MB, SB, SMB, LB, AC, *VD, *AC, *LD, Constant

VW, IW, QW, MW, SW, SMW, LW, T, C, AC, AIW, *VD, *AC, *LD, Constant

&VB

VW, IW, QW, MW, SW, SMW, LW, T, C, AC, AQW, *VD, *AC, *LD

VD, ID, QD, MD, SD, SMD, LD, *VD, *AC, *LD

339

S7-200 Programmable Controller System Manual

Table 11-5 Valid Operands for the USS_WPM_x Instructions, continued

Inputs/Outputs

Done

Error

Data Type

BOOL

BYTE

Operands

I, Q, M, S, SM, T, C, V, L

VB, IB, QB, MB, SB, SMB, LB, AC. *VD, *AC, *LD

Caution

When you use an USS_WPM_x instruction to update the parameter set stored in drive

EEPROM, you must ensure that the maximum number of write cycles (approximately 50,000) to the EEPROM is not exceeded.

Exceeding the maximum number of write cycles will result in corruption of the stored data and subsequent data loss. The number of read cycles is unlimited.

If frequent writes to the drive parameters are required, then you should first set the EEPROM storage control parameter in the drive to zero (for MicroMaster 3 drives) and turn off the

EEPROM input for MicroMaster 4 drives.

Example: USS_RPM_x and USS_WPM_x

LD

=

LD

EU

Network 1

I0.0

L60.0

I0.0

//The two contacts must have the

//same address.

=

LD

CALL

L63.7

L60.0

USS_RPM_W, L63.7, 0, 3, 0, &VB100,

M0.0, VB10, VW200

LD

=

LD

EU

Network 2

I0.1

L60.0

I0.1

//The two contacts must have the same address

=

LDN

=

LD

CALL

L63.7

SM0.0

L63.6

L60.0

USS_WPM_W, L63.7, L63.6, 0, 971, 0, 1,

&VB120, M0.1, VB11

340

Using the USS Protocol Library to Control a MicroMaster Drive

Chapter 11

Sample Programs for the USS Protocol

Example: USS Instructions Sample Program that Correctly Displays in STL

Network 1

LD

CALL

//Initialize USS Protocol:

//On the first scan, enable USS

//protocol for port 0 at 19200

//with drive address

//”0” active.

SM0.1

USS_INIT, 1, 19200, 16#00000001, Q0.0,

VB1

Network 2

LD

CALL

//Control parameters for Drive 0

SM0.0

USS_CTRL, I0.0, I0.1, I0.2, I0.3, I0.4, 0, 1,

100.0, M0.0, VB2, VW4, VD6, Q0.1, Q0.2,

Q0.3, Q0.4

LD

=

LD

EU

=

LD

CALL

Network 3

I0.5

L60.0

I0.5

//Read a Word parameter from Drive 0.

//Read parameter 5 index 0.

//1. Save the state of I0.5 to a

// temporary location so that this

// network displays in LAD.

//2. Save the rising edge pulse of I0.5

// to a temporary L location so that

// it can be passed to the subroutine.

L63.7

L60.0

USS_RPM_W, L63.7, 0, 5, 0, &VB20, M0.1,

VB10, VW12

LD

=

LD

EU

Network 4

I0.6

L60.0

I0.6

//Write a Word parameter to Drive 0.

//Write parameter 2000 index 0.

=

LDN

=

LD

CALL

L63.7

SM0.0

L63.6

L60.0

USS_WPM_R, L63.7, L63.6, 0, 2000, 0, 50.0,

&VB40, M0.2, VB14

Note: This STL code does not compile to LAD or FBD.

341

S7-200 Programmable Controller System Manual

USS Execution Error Codes

Table 11-6 Execution Error Codes for the USS Instructions

Error Codes

0

1

2

5

6

3

4

11

12

13

14

9

10

7

8

19

20

21

22

15

16

17

18

Description

No error

Drive did not respond

A checksum error in the response from the drive was detected

A parity error in the response from the drive was detected

An error was caused by interference from the user program

An illegal command was attempted

An illegal drive address was supplied

The communications port was not set up for USS protocol

The communications port is busy processing an instruction

The drive speed input is out of range

The length of the drive response is incorrect

The first character of the drive response is incorrect

The length character in the drive response is not supported by USS instructions

The wrong drive responded

The DB_Ptr address supplied is incorrect

The parameter number supplied is incorrect

An invalid protocol was selected

USS is active; change is not allowed

An illegal baud rate was specified

No communications: the drive is not ACTIVE

The parameter or value in the drive response is incorrect or contains an error code

A double word value was returned instead of the word value requested

A word value was returned instead of the double word value requested

Connecting and Setting Up the MicroMaster Series 3 Drive

Connecting the MicroMaster 3 Drive

You can use the standard PROFIBUS cable and connectors to connect the S7-200 to the

MicroMaster Series 3 (MM3) drive. See Figure 11-5 for the proper cable bias and termination of the interconnecting cable.

Caution

Interconnecting equipment with different reference potentials can cause unwanted currents to flow through the interconnecting cable.

These unwanted currents can cause communications errors or damage equipment.

Be sure all equipment that you are about to connect with a communications cable either shares a common circuit reference or is isolated to prevent unwanted current flows.

The shield must be tied to chassis ground or pin 1 on the 9-pin connector. It is recommended that you tie wiring terminal 2—0V on the MicroMaster drive to chassis ground.

342

Using the USS Protocol Library to Control a MicroMaster Drive

Chapter 11

Cable must be terminated and biased at both ends.

Switch position = On

Terminated and biased

On

A B A B

Switch position = Off

No termination or bias

Off

A B A B

Switch position = On

Terminated and biased

On

A B A B

Switch position = On: Terminated and biased

Pin #

6

390

Ω

TxD/RxD +

TxD/RxD —

Cable shield

B

A

220

390

Ω

Ω

3

8

5

1

Network connector

Bare shielding: approximately 12 mm (1/2 in.) must contact the metal guides of all locations.

Switch position = Off: No termination or bias

TxD/RxD +

TxD/RxD —

B

A

Pin #

6

Cable shield

TxD/RxD +

B

3

TxD/RxD —

A

8

Network connector

Cable shield

5

1

Figure 11-5 Bias and Termination of the Network Cable

Setting Up the MicroMaster 3 Drive

Before you connect a drive to the S7-200, you must ensure that the drive has the following system parameters. Use the keypad on the drive to set the parameters:

1. Reset the drive to factory settings (optional). Press the P key: P000 is displayed. Press the up or down arrow key until the display shows the P944. Press P to enter the parameter.

P944=1

2. Enable the read/write access to all parameters. Press the P key. Press the up or down arrow key until the display shows P009. Press P to enter the parameter.

P009=3

3. Check motor settings for your drive. The settings will vary according to the motor(s) being used. Press the P key. Press the up or down arrow key until the display shows the motor setting for your drive. Press P to enter the parameter.

P081=Nominal frequency of motor (Hz)

P082=Nominal speed of motor (RPM)

P083=Nominal current of motor (A)

P084=Nominal voltage of motor (V)

P085=Nominal power of motor (kW/HP)

4. Set the Local/Remote control mode. Press the P key. Press the up or down arrow key until the display shows P910. Press P to enter the parameter.

P910=1 Remote control mode

343

S7-200 Programmable Controller System Manual

5. Set the Baud Rate of the RS—485 serial interface. Press the P key. Press the up or down arrow key until P092 appears. Press P to enter the parameter. Press the up or down arrow key until the display shows the number that corresponds to the baud rate of your RS—485 serial interface. Press P to enter.

P092 3 (1200 baud)

4 (2400 baud)

5 (4800 baud)

6 (9600 baud — default)

7 (19200 baud)

6. Enter the Slave address. Each drive (a maximum of 31) can be operated over the bus.

Press the P key. Press the up or down arrow key until P091 appears. Press P to enter the parameter. Press the up or down arrow key until the display shows the slave address you want. Press P to enter.

P091=0 through 31.

7. Ramp up time (optional). This is the time in seconds that it takes the motor to accelerate to maximum frequency. Press the P key. Press the up or down arrow key until P002 appears.

Press P to enter the parameter. Press the up or down arrow key until the display shows the ramp up time you want. Press P to enter.

P002=0—650.00

8. Ramp down time (optional). This is the time in seconds that it takes the motor to decelerate to a complete stop. Press the P key. Press the up or down arrow key until P003 appears.

Press P to enter the parameter. Press the up or down arrow key until the display shows the ramp down time you want. Press P to enter.

P003=0—650.00

9. Serial Link Time-out. This is the maximum permissible period between two incoming data telegrams. This feature is used to turn off the inverter in the event of a communications failure.

Timing starts after a valid data telegram has been received. If a further data telegram is not received within the specified time period, the inverter will trip and display fault code F008.

Setting the value to zero switches off the control. Use Table 11-1 to calculate the time between the status polls to the drive.

Press the P key. Press the up or down arrow key until P093 appears. Press P to enter the parameter. Press the up or down arrow key until the display shows the serial link time-out you want. Press P to enter.

P093=0—240 (0 is default; time is in seconds)

10. Serial Link Nominal System Setpoint. This value can vary, but will typically correspond to 50

Hz or 60 Hz, which defines the corresponding 100% value for PVs or SPs. Press the P key.

Press the up or down arrow key until P094 appears. Press P to enter the parameter. Press the up or down arrow key until the display shows the serial link nominal system setpoint you want. Press P to enter.

P094=0—400.00

11. USS Compatibility (optional). Press the P key. Press the up or down arrow key until P095 appears. Press P to enter the parameter. Press the up or down arrow key until the display shows the number that corresponds to the USS compatibility you want. Press P to enter.

P095 = 0 0.1 Hz resolution (default)

1 0.01 Hz resolution

12. EEPROM storage control (optional). Press the P key. Press the up or down arrow key until

P971 appears. Press P to enter the parameter. Press the up or down arrow key until the display shows the number that corresponds to the EEPROM storage control you want.

Press P to enter.

P971 = 0 Changes to parameter settings (including P971) are lost when power is removed.

1 (default) Changes to parameter settings are retained during periods when power is removed.

13. Operating display. Press P to exit out of parameter mode.

344

Using the USS Protocol Library to Control a MicroMaster Drive

Chapter 11

Connecting and Setting Up the MicroMaster Series 4 Drive

Connecting the MicroMaster 4 Drive

To make the connection to the MicroMaster Series 4 (MM4) drive, insert the ends of the RS-485 cable into the two caged clamp, screwless terminals provided for USS operation. The standard

PROFIBUS cable and connectors can be used to connect the S7-200.

Caution

Interconnecting equipment with different reference potentials can cause unwanted currents to flow through the interconnecting cable.

These unwanted currents can cause communications errors or damage equipment.

Be sure all equipment that you are about to connect with a communications cable either shares a common circuit reference or is isolated to prevent unwanted current flows.

The shield must be tied to chassis ground or pin 1 on the 9-pin connector. It is recommended that you tie wiring terminal 2—0V on the MicroMaster drive to chassis ground.

As shown in Figure 11-6, the two wires at the opposite end of the RS-485 cable must be inserted into the MM4 drive terminal blocks. To make the cable connection on a MM4 drive, remove the drive cover(s) to access the terminal blocks. See the MM4 user manual for details about how to remove the covers(s) of your specific drive.

The terminal block connections are labeled numerically. Using a PROFIBUS connector on the S7-200 side, connect the A terminal of the cable to the drive terminal 15 (for an MM420) or terminal

30 (MM440). Connect the B terminal of the cable connector to terminal 14

(MM420) or terminal 29 (MM440).

B (P)

A (N)

Figure 11-6 Connecting to the MM420 Terminal Block

If the S7-200 is a terminating node in the network, or if the connection is point-to-point, it is necessary to use terminals A1 and B1 (not A2 and B2) of the connector since they allow the termination settings to be set (for example, with DP connector type 6ES7 972—0BA40—0X40).

Caution

Make sure the drive covers are replaced properly before supplying power to the unit.

If the drive is configured as the terminating node in the network, then termination and bias resistors must also be wired to the appropriate terminal connections. For example, Figure 11-7 shows an example of the connections necessary for termination and bias for the MM4 drive.

0V

+10 V

P

N

MM420

14

15

120 ohm

470 ohm

2

1.5K ohm

1

MM440

P

29

120 ohm

N 30

470 ohm

1.5K ohm

0V

2

+10 V

1

Figure 11-7 Sample Termination and Bias

345

S7-200 Programmable Controller System Manual

Setting Up the MM4 Drive

Before you connect a drive to the S7-200, you must ensure that the drive has the following system parameters. Use the keypad on the drive to set the parameters:

1. Reset the drive to factory settings (optional): P0010=30

P0970=1

If you skip this step, ensure that the following parameters are set to these values:

USS PZD length:

USS PKW length:

P2012 Index 0=2

P2013 Index 0=127

2. Enable the read/write access to all parameters (Expert mode):

3. Check motor settings for your drive:

P0003=3

P0304=Rated motor voltage (V)

P0305=Rated motor current (A)

P0307=Rated motor power (W)

P0310=Rated motor frequency (Hz)

P0311=Rated motor speed (RPM)

The settings will vary according to the motor(s) being used.

In order to set the parameters P304, P305, P307, P310, and P311, you must first set parameter P010 to 1 (quick commissioning mode). When you are finished setting the parameters, set parameter P010 to 0. Parameters P304, P305, P307, P310, and P311 can only be changed in the quick commissioning mode.

4. Set the local/remote control mode: P0700 Index 0=5

5. Set selection of frequency setpoint to USS on COM Link:

6. Ramp up time (optional): P1120=0 to 650.00

P1000 Index 0=5

This is the time in seconds that it takes the motor to accelerate to maximum frequency.

7. Ramp down time (optional): P1121=0 to 650.00

This is the time in seconds that it takes the motor to decelerate to a complete stop.

8. Set the serial link reference frequency: P2000=1 to 650 Hz

9. Set the USS normalization:

10. Set the baud rate of the RS—485 serial interface:

P2009 Index 0=0

P2010 Index 0= 4 (2400 baud)

5 (4800 baud)

6 (9600 baud)

7 (19200 baud

8 (38400 baud)

9 (57600 baud)

12 (115200 baud)

11. Enter the Slave address: P2011 Index 0=0 to 31

Each drive (a maximum of 31) can be operated over the bus.

12. Set the serial link timeout: P2014 Index 0=0 to 65,535 ms

(0=timeout disabled)

This is the maximum permissible period between two incoming data telegrams. This feature is used to turn off the inverter in the event of a communications failure. Timing starts after a valid data telegram has been received. If a further data telegram is not received within the specified time period, the inverter will trip and display fault code F0070. Setting the value to zero switches off the control. Use Table 11-1 to calculate the time between the status polls to the drive.

13. Transfer the data from RAM to EEPROM:

P0971=1 (Start transfer) Save the changes to the parameter settings to EEPROM

346

Using the Modbus Protocol Library

The STEP 7—Micro/WIN Instruction Libraries make communicating to Modbus devices easier by including pre-configured subroutines and interrupt routines that are specifically designed for

Modbus communications. With the Modbus Protocol Instructions, you can configure the S7-200 to act as a Modbus master or slave device.

You find these instructions in the Libraries folder of the STEP 7—Micro/WIN instruction tree. When you put a Modbus instruction in your program, one or more associated subroutines are automatically added to your project.

Siemens Libraries are sold on a separate CD, STEP 7—Micro/WIN Add-On: Instruction Library, with the order number 6ES7 830—2BC00—0YX0. After version 1.1 of the Siemens Library is purchased and installed, any subsequent STEP 7—Micro/WIN V3.2x and V4.0 upgrade that you install will also upgrade your libraries automatically at no additional cost (when library additions or modifications are made).

In This Chapter

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Requirements for Using Modbus Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Initialization and Execution Time for Modbus Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Modbus Addressing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Using the Modbus Master Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Using the Modbus Slave Instructions

Instructions for the Modbus Protocol

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Advanced Topics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

348

348

349

350

351

352

353

362

347

S7-200 Programmable Controller System Manual

Overview

STEP 7—Micro/WIN Instruction Libraries make communicating to Modbus master and slave devices easier by including pre-configured subroutines and interrupt routines that are specifically designed for Modbus communications.

Modbus slave instructions can configure the S7-200 to act as a Modbus RTU slave device and communicate to Modbus master devices.

Modbus master instructions can configure the S7-200 to act as a Modbus RTU master device and communicate to one or more Modbus slave devices.

The Modbus instructions are installed into the libraries folder in the STEP 7—Micro/WIN instruction tree. These instructions enable the S7-200 to act as a Modbus device. When you place a Modbus instruction in your program, one or more associated subroutines are automatically added to your project.

There are two versions of the Modbus master protocol library. One version uses port 0 of the CPU and the other uses port 1 of the CPU. The port 1 library has a _P1 appended to the POU names

(for example, MBUS_CTRL_P1) to denote that the POU utilizes port 1 on the CPU. The two

Modbus master libraries are identical in all other respects.

The Modbus slave library only supports port 0 communication.

Requirements for Using Modbus Protocol

The

Modbus Master Protocol

instructions use the following resources from the S7-200:

—

—

—

—

—

—

—

Initializing the Modbus Slave Protocol dedicates the specific CPU port for Modbus Master

Protocol communications.

When the CPU port is being used for Modbus Master Protocol communications, it cannot be used for any other purpose, including communications with STEP 7—Micro/WIN. The

MBUS_CTRL instruction controls assignment of Port 0 to Modbus Master Protocol or PPI.

The MBUS_CTRL_P1 instruction (from the port 1 library) controls assignment of Port 1 to

Modbus Master Protocol or PPI

The Modbus Master Protocol instructions affect all of the SM locations associated with

Freeport communications port in use

The Modbus Master Protocol instructions use 3 subroutines and 1 interrupt routine.

The Modbus Master Protocol instructions require about 1620 bytes of program space for the two Modbus Master instructions and the support routines.

The variables for the Modbus Master Protocol instructions require a 284 byte block of V memory. The starting address for this block is assigned by the user and is reserved for

Modbus variables.

The S7-200 CPU must be firmware revision 2.00 or greater to support the Modbus Master

Protocol Library (CPU MLFB 21x—2xx23—0XB0)

The Modbus Master Library uses the user interrupts for some functions. The user interrupts must not be disabled by the user program.

Tip

To change the operation of the CPU communications port back to PPI so that you can communicate with STEP 7-Micro/WIN, you can do one of the following:

— Set the Mode parameter of the MBUS_CTRL instruction to a zero (0).

— Set the mode switch on the S7-200 to STOP mode position.

Either of these methods will set the CPU communications port to communicate with

STEP 7—Micro/WIN.

348

Using the Modbus Protocol Library

Chapter 12

The

Modbus Slave Protocol

instructions use the following resources from the S7-200:

—

—

—

—

—

Initializing the Modbus Slave Protocol dedicates Port 0 for Modbus Slave Protocol communications.

When Port 0 is being used for Modbus Slave Protocol communications, it cannot be used for any other purpose, including communications with STEP 7—Micro/WIN. The MBUS_INIT instruction controls assignment of Port 0 to Modbus Slave Protocol or PPI.

The Modbus Slave Protocol instructions affect all of the SM locations associated with

Freeport communications on Port 0.

The Modbus Slave Protocol instructions use 3 subroutines and 2 interrupts.

The Modbus Slave Protocol instructions require 1857 bytes of program space for the two

Modbus Slave instructions and the support routines.

The variables for the Modbus Slave Protocol instructions require a 779-byte block of V memory. The starting address for this block is assigned by the user and is reserved for

Modbus variables.

Tip

To change the operation of Port 0 back to PPI so that you can communicate with

STEP 7-Micro/WIN, you can do one of the following:

— Use another MBUS_INIT instruction to reassign Port 0.

— Set the mode switch on the S7-200 to STOP mode.

Either of these methods will set the parameters for Port 0 so that you can communicate with

STEP 7—Micro/WIN.

Initialization and Execution Time for Modbus Protocol

Modbus Master Protocol

— The Modbus Master Protocol requires a small amount of time every scan to execute the MBUS_CTRL instruction. The time will be about 1.11 milliseconds when the

MBUS_CTRL is initializing the Modbus Master (first scan), and about 0.41 milliseconds on subsequent scans.

The scan time is extended when the MBUS_MSB subroutine executes a request. Most of the time is spent calculating the Modbus CRC for the request and the response. The CRC (Cyclic

Redundancy Check) insures the integrity of the communications message. The scan time is extended by about 1.85 milliseconds for each word in request and in the response. A maximum request/response (read or write of 120 words) extends the scan time to approximately 222 milliseconds. A read request extends the scan mainly when the response is received from the slave, and to a lesser extent when the request is sent. A write request extends the scan mainly when the data is sent to the slave, and to a lesser extent when the response is received.

Modbus Slave Protocol

— Modbus communications utilize a CRC (cyclic redundancy check) to insure the integrity of the communications messages. The Modbus Slave Protocol uses a table of precalculated values to decrease the time required to process a message. The initialization of this

CRC table requires about 240 milliseconds. This initialization is done inside the MBUS_INIT subroutine and is normally done in the first scan of the user program after entering RUN mode.

You are responsible for resetting the watchdog timer and keeping the outputs enabled (if required for expansion modules) if the time required by the MBUS_INIT subroutine and any other user initialization exceeds the 500 millisecond scan watchdog. The output module watchdog timer is reset by writing to the outputs of the module. See the Watchdog Reset Instruction in Chapter 6.

The scan time is extended when the MBUS_SLAVE subroutine services a request. Since most of the time is spent calculating the Modbus CRC, the scan time is extended by about 420 microseconds for every byte in the request and in the response. A maximum request/response

(read or write of 120 words) extends the scan time by approximately 100 milliseconds.

349

S7-200 Programmable Controller System Manual

Modbus Addressing

Modbus addresses are normally written as 5 character values containing the data type and the offset. The first character determines the data type, and the last four characters select the proper value within the data type.

Modbus Master Addressing

— The Modbus Master instructions then map the address to the correct functions to send to the slave device. The following Modbus addresses are supported by the Modbus Master instructions:

—

—

—

—

00001 to 09999 are discrete outputs (coils)

10001 to 19999 are discrete inputs (contacts)

30001 to 39999 are input registers (generally analog inputs)

40001 to 49999 are holding registers

All Modbus addresses are one-based, meaning that the first data value starts at address one. The range of valid addresses will depend on the slave device. Different slave devices will support different data types and address ranges.

Modbus Slave Addressing

—The Modbus Master device then maps the addresses to the correct functions. The following addresses are supported by the Modbus Slave instructions:

—

—

—

—

00001 to 00128 are discrete outputs mapped to Q0.0 — Q15.7

10001 to 10128 are discrete inputs mapped to I0.0 — I15.7

Table 12-1 Mapping Modbus Addresses to the S7-200

30001 to 30032 are analog input registers mapped to AIW0 to AIW62

40001 to 04xxxx are holding registers mapped to V memory.

All Modbus addresses are one-based.

Table 12-1 shows the mapping of Modbus addresses to the S7-200 addresses.

The Modbus Slave Protocol allows you to limit the amount of inputs, outputs, analog inputs, and holding registers (V memory) accessible to a Modbus master.

The MaxIQ parameter of the MBUS_INIT instruction specifies the maximum number of discrete inputs or outputs (Is or Qs) the

Modbus master is allowed to access.

The MaxAI parameter of the MBUS_INIT instruction specifies the maximum number of input registers (AIWs) the Modbus master is allowed to access.

The MaxHold parameter of the MBUS_INIT instruction specifies the maximum number of holding registers (V memory words) the

Modbus master is allowed to access.

See the description of the MBUS_INIT instruction for more information on setting up the memory restrictions for the Modbus slave.

Modbus Address

00001

00002

00003

…

00127

00128

10001

10002

10003

…

10127

10128

30001

30002

30003

…

30032

40001

40002

40003

…

4xxxx

S7-200 Address

Q0.0

Q0.1

Q0.2

…

Q15.6

Q15.7

I0.0

I0.1

I0.2

…

I15.6

I15.7

AIW0

AIW2

AIW4

…

AIW62

HoldStart

HoldStart+2

HoldStart+4

…

HoldStart+2 x (xxxx—1)

350

Using the Modbus Protocol Library

Chapter 12

Configuring the Symbol Table

After you enter an address for the first symbol, the table automatically calculates and assigns the remainder of the symbols in the table.

You should assign a starting V location for the table which occupies 779 bytes. Be sure that the assignment of the Modbus Slave symbols do not overlap with the V memory assigned to the

Modbus holding registers with the HoldStart and MaxHold parameters on the MBUS_INIT instruction. If there is any overlap of the memory areas, the MBUS_INIT instruction returns an error.

Using the Modbus Master Instructions

To use the Modbus Master instructions in your S7-200 program, follow these steps:

1. Insert the MBUS_CTRL instruction in your program and execute the MBUS_CTRL on every scan. You can use the MBUS_CTRL instruction either to initiate or to change the Modbus communications parameters.

When you insert the MBUS_CTRL instruction, several hidden subroutines and interrupt routines are automatically added to your program.

2. Use the Library Memory command to assign a starting address for the V memory required for Modbus Master Protocol instructions.

3. Place one or more MBUS_MSG instructions in your program. You can add as many

MBUS_MSG instructions to your program as you require, but only one of these instructions can be active at a time.

4. Connect the communications cable between Port 0 on the S7-200 CPU (or Port 1 for the

Port 1 library), and the Modbus slave devices.

Caution

Interconnecting equipment with different reference potentials can cause unwanted currents to flow through the interconnecting cable. These unwanted currents can cause communications errors or damage equipment.

Ensure that all equipment that is connected with a communications cable either shares a common circuit reference or is isolated to prevent unwanted current flows.

The Modbus Master instructions use the Modbus functions shown below to read or write a specific

Modbus address. The Modbus slave device must support the Modbus function(s) required to read or write a particular Modbus address.

Table 12-2 Required Modbus Slave Function Support

Modbus Address

00001 to 09999 discrete outputs

10001 to 19999 discrete inputs

30001 to 39999 input registers

40001 to 49999 holding registers

Read or Write

Read

Write

Read

Write

Read

Write

Read

Write

Modbus Slave Function Required

Function 1

Function 5 for a single output point

Function 15 for multiple output points

Function 2

Not possible

Function 4

Not possible

Function 3

Function 6 for a single register

Function 16 for multiple registers

351

S7-200 Programmable Controller System Manual

Using the Modbus Slave Instructions

To use the Modbus Slave instructions in your S7-200 program, follow these steps:

1. Insert the MBUS_INIT instruction in your program and execute the MBUS_INIT instruction for one scan only. You can use the MBUS_INIT instruction either to initiate or to change the

Modbus communications parameters.

When you insert the MBUS_INIT instruction, several hidden subroutines and interrupt routines are automatically added to your program.

2. Use the Library Memory command to assign a starting address for the V memory required for Modbus Slave Protocol instructions.

3. Place only one MBUS_SLAVE instruction in your program. This instruction is called every scan to service any requests that have been received.

4. Connect the communications cable between Port 0 on the S7-200 and the Modbus master device.

Caution

Interconnecting equipment with different reference potentials can cause unwanted currents to flow through the interconnecting cable. These unwanted currents can cause communications errors or damage equipment.

Ensure that all equipment that is connected with a communications cable either shares a common circuit reference or is isolated to prevent unwanted current flows.

The accumulators (AC0, AC1, AC2, AC3) are utilized by the Modbus slave instructions and appear in the Cross Reference listing. Prior to execution, the values in the accumulators of a

Modbus Slave instruction are saved and restored to the accumulators before the Modbus Slave instruction is complete, ensuring that all user data in the accumulators is preserved while executing a Modbus Slave instruction.

The Modbus Slave Protocol instructions support the Modbus RTU protocol. These instructions utilize the Freeport utilities of the S7-200 to support the most common Modbus functions. The following Modbus functions are supported:

Table 12-3 Modbus Slave Protocol Functions Supported

Function Description

1 Read single/multiple coil (discrete output) status. Function 1 returns the on/off status of any number of output points (Qs).

2

3

4

5

Read single/multiple contact (discrete input) status. Function 2 returns the on/off status of any number of input points (Is).

Read single/multiple holding registers. Function 3 returns the contents of V memory. Holding registers are word values under Modbus and allow you to read up to 120 words in one request.

Read single/multiple input registers. Function 4 returns Analog Input values.

6

Write single coil (discrete output). Function 5 sets a discrete output point to the specified value.

The point is not forced and the program can overwrite the value written by the Modbus request.

Write single holding register. Function 6 writes a single holding register value to the V memory of the S7-200.

15

16

Write multiple coils (discrete outputs). Function 15 writes the multiple discrete output values to the

Q image register of the S7-200. The starting output point must begin on a byte boundary (for example, Q0.0 or Q2.0) and the number of outputs written must be a multiple of eight. This is a restriction for the Modbus Slave Protocol instructions. The points are not forced and the program can overwrite the values written by the Modbus request.

Write multiple holding registers. Function 16 writes multiple holding registers to the V memory of the S7-200. There can be up to 120 words written in one request.

352

Using the Modbus Protocol Library

Chapter 12

Instructions for the Modbus Protocol

MBUS_INIT Instruction (Initialize Slave)

The MBUS_INIT instruction is used to enable and initialize, or to disable Modbus communications. Before the

MBUS_SLAVE instruction can be used, the MBUS_INIT instruction must be executed without errors. The instruction completes and the Done bit is set immediately, before continuing to the next instruction.

The instruction is executed on each scan when the EN input is on.

The MBUS_INIT instruction should be executed exactly once for each change in communications state. Therefore, the EN input should be pulsed on through an edge detection element, or executed only on the first scan.

The value for the Mode input selects the communications protocol: an input value of 1 assigns port 0 to Modbus protocol and enables the protocol, and an input value of 0 assigns port 0 to PPI and disables Modbus protocol.

The parameter Baud sets the baud rate at 1200, 2400,

4800, 9600, 19200, 38400, 57600, or 115200. Baud rates

57600 and 115200 are supported by S7-200 CPUs version

1.2 or later.

The parameter Addr sets the address at inclusive values between 1 and 247.

Table 12-4 Parameters for the MBUS_INIT Instruction

Inputs/Outputs

Mode, Addr, Parity

Baud, HoldStart

Delay, MaxIQ, MaxAI, MaxHold

Done

Error

Data Type

BYTE

DWORD

WORD

BOOL

BYTE

Operands

VB, IB, QB, MB, SB, SMB, LB, AC, Constant, *VD, *AC,

*LD

VD, ID, QD, MD, SD, SMD, LD, AC, Constant, *VD, *AC,

*LD

VW, IW, QW, MW, SW, SMW, LW, AC, Constant, *VD,

*AC, *LD

I, Q, M, S, SM, T, C, V, L

VB, IB, QB, MB, SB, SMB, LB, AC, *VD, *AC, *LD

The parameter Parity is set to match the parity of the Modbus master. All settings use one stop bit.

The accepted values are:

—

—

0-no parity

1-odd parity

—

2-even parity

The parameter Delay extends the standard Modbus end-of-message timeout condition by adding the specified number of milliseconds to the standard Modbus message timeout. The typical value for this parameter should be 0 when operating on a wired network. If you are using modems with error correction, set the delay to a value of 50 to 100 milliseconds. If you are using spread spectrum radios, set the delay to a value of 10 to 100 milliseconds. The Delay value can be 0 to

32767 milliseconds.

The parameter MaxIQ sets the number of I and Q points available to Modbus addresses 0xxxx and 1xxxx at values of 0 to 128. A value of 0 disables all reads and writes to the inputs and outputs. The suggested value for MaxIQ is 128, which allows access to all I and Q points in the

S7-200.

353

S7-200 Programmable Controller System Manual

354

The parameter MaxAI sets the number of word input (AI) registers available to Modbus address

3xxxx at values of 0 to 32. A value of 0 disables reads of the analog inputs. The suggested value for MaxAI to allow access to all of the S7-200 analog inputs, is as follows:

—

—

0 for CPU 221

16 for CPU 222

—

32 for CPU 224, CPU 224XP, and CPU 226

The parameter MaxHold sets the number of word holding registers in V memory available to

Modbus address 4xxxx. For example, to allow the master to access 2000 bytes of V memory, set

MaxHold to a value of 1000 words (holding registers).

The parameter HoldStart is the address of the start of the holding registers in V memory. This value is generally set to VB0, so the parameter HoldStart is set to &VB0 (address of VB0). Other V memory addresses can be specified as the starting address for the holding registers to allow VB0 to be used elsewhere in the project. The Modbus master has access to MaxHold number of words of V memory starting at HoldStart.

When the MBUS_INIT instruction completes, the Done output is turned on. The Error output byte contains the result of executing the instruction. Table 12-6 defines the error conditions that could result from executing the instruction.

MBUS_SLAVE Instruction

The MBUS_SLAVE instruction is used to service a request from the Modbus master and must be executed every scan to allow it to check for and respond to Modbus requests.

The instruction is executed on each scan when the EN input is on.

The MBUS_SLAVE instruction has no input parameters.

The Done output is on when the MBUS_SLAVE instruction responds to a Modbus request. The Done output is turned off if there was no request serviced.

The Error output contains the result of executing the instruction. This output is only valid if Done is on. If Done is off, the error parameter is not changed. Table 12-6 defines the error conditions that could result from executing the instruction.

Table 12-5 Parameters for the MBUS_SLAVE Instruction

Parameter

Done

Error

Data Type

BOOL

BYTE

Operands

I, Q, M, S, SM, T, C, V, L

VB, IB, QB, MB, SB, SMB, LB, AC, *VD, *AC, *LD

Table 12-6 Modbus Slave Protocol Execution Error Codes

Error Codes

0

1

2

5

6

3

4

9

10

7

8

Description

No Error

Memory range error

Illegal baud rate or parity

Illegal slave address

Illegal value for Modbus parameter

Holding registers overlap Modbus Slave symbols

Receive parity error

Receive CRC error

Illegal function request/function not supported

Illegal memory address in request

Slave function not enabled

Using the Modbus Protocol Library

Chapter 12

Example of Programming the Modbus Slave Protocol

Network 1

LD

CALL

//Initialize the Modbus Slave Protocol on the

//first scan. Set the slave address to 1, set

// port 0 to 9600 baud with even parity, all

//access to all I, Q and AI values, allow

//access to 1000 holding registers (2000

// bytes) starting at VB0.

SM0.1

MBUS_INIT,1,1,9600,2,0,128,32,1000,

&VB0,M0.1,MB1

Network 2

LD

CALL

//Execute the Modbus Slave Protocol on

//every scan.

SM0.0

MBUS_SLAVE,M0.2,MB2

355

S7-200 Programmable Controller System Manual

MBUS_CTRL Instruction (Initialize Master)

The MBUS_CTRL instruction for S7-200 port 0 (or

MBUS_CTRL_P1 for port 1) is used to initialize, monitor, or to disable Modbus communications. Before the

MBUS_MSG instruction can be used, the MBUS_CTRL instruction must be executed without errors. The instruction completes and the Done bit is set immediately before continuing to the next instruction. This instruction is executed on each scan when the EN input is on.

The MBUS_CTRL instruction must be called every scan

(including the first scan) to allow it to monitor the progress of any outstanding messages initiated with the MBUS_MSG instruction. The Modbus Master Protocol will not operate correctly unless MBUS_CTRL is called every scan.

The value for the Mode input selects the communications protocol. An input value of 1 assigns the CPU port to

Modbus protocol and enables the protocol. An input value of 0 assigns the CPU port to PPI system protocol and disables Modbus protocol.

The parameter Parity is set to match the parity of the

Modbus slave device. All settings use one start bit and one stop bit. The allowed values are:

—

—

0 — no parity

1 — odd parity

—

2 — even parity

The parameter Timeout is set to the number of milliseconds to wait for the response from the slave. The Timeout value can be set anywhere in the range of 1 millisecond through 32767 milliseconds. A typical value would be 1000 milliseconds (1 second). The Timeout parameter should be set to a value large enough so that the slave device has time to respond at the selected baud rate.

The Timeout parameter is used to determine if the Modbus slave device is responding to a request. The Timeout value determines how long the Modbus Master will wait for the first character of the response after the last character of the request has been sent. The Modbus

Master will receive the entire response from the Modbus slave device if at least one character of the response is received within the Timeout time.

When the MBUS_CTRL instruction completes, the Done output is turned on.

The Error output contains the result of executing the instruction. Table 12-8 defines the error conditions that could result from executing the MBUS_CTRL instruction.

Table 12-7 Parameters for the MBUS_CTRL Instruction

Parameter

Mode

Baud

Parity

Timeout

Done

Error

Data Type

BOOL

DWORD

BYTE

WORD

BOOL

BYTE

Operands

I, Q, M, S, SM, T, C, V, L

VD, ID, QD, MD, SD, SMD, LD, AC, Constant, *VD, *AC, *LD

VB, IB, QB, MB, SB, SMB, LB, AC, Constant, *VD, *AC, *LD

VW, IW, QW, MW, SW, SMW, LW, AC, Constant, *VD, *AC, *LD

I, Q, M, S, SM, T, C, V, L

VB, IB, QB, MB, SB, SMB, LB, AC, *VD, *AC, *LD

356

Using the Modbus Protocol Library

Chapter 12

Table 12-8 Modbus Slave Protocol Execution Error Codes

Error Codes

0

1

2

3

4

Description

No Error

Parity selection is not valid

Baud rate selection is not valid

Timeout selection is not valid

Mode selection is not valid

MBUS_MSG Instruction

The MBUS_MSG instruction (or MBUS_MSG_P1 for port 1) is used to initiate a request to a Modbus slave and process the response.

The MBUS_MSG instruction initiates a request to a Modbus slave when both the EN input and the First inputs are on.

Sending the request, waiting for the response, and processing the response usually requires several scans.

The EN input must be on to enable the sending of the request, and should remain on until the Done bit is set.

Note: Only one MBUS_MSG instruction can be active at a time. If there is more than one MBUS_MSG instruction enabled, the first MBUS_MSG instruction executed will be processed and all subsequent MBUS_MSG instructions will abort with an error code 6.

The parameter First should be on for only one scan when there is a new request to send. The First input should be pulsed on through an edge detection element (i.e. Positive

Edge) which will cause the request to be transmitted one time. See the example program.

The parameter Slave is the address of the Modbus slave device. The allowed range is 0 through 247. Address 0 is the broadcast address and can only be used for write requests. There is no response to a broadcast request to address 0. Not all slave devices will support the broadcast address. The S7-200 Modbus Slave Library does not support the broadcast address.

The parameter RW specifies if this message is to be a read or a write. The following two values are allowed for RW.

—

—

0 — Read

1 — Write

Discrete outputs (coils) and holding registers support both read and write requests. Discrete inputs (contacts) and input registers only support read requests. The parameter Addr is the starting Modbus address. The following ranges of values are allowed:

—

—

—

—

00001 to 09999 for discrete outputs (coils)

10001 to 19999 for discrete inputs (contacts)

30001 to 39999 for input registers

40001 to 49999 for holding registers

The specific range of values for Addr are based on the addresses that the Modbus slave device supports.

357

S7-200 Programmable Controller System Manual

The parameter Count specifies the number of data elements to read or write in this request. The

Count will be the number of bits for the bit data types, and the number of words for the word data types.

—

—

—

—

Address 0xxxx

ٛ

Count is the number of bits to read or write

Address 1xxxx

ٛ

Count is the number of bits to read

Address 3xxxx

ٛ

Count is the number of input register words to read

Address 4xxxx

ٛ

Count is the number of holding register words to read or write

The MBUS_MSG instruction will read or write a maximum of 120 words or 1920 bits (240 bytes of data). The actual limit on the value of Count will depend upon the limits in the Modbus slave device.

The parameter DataPtr is an indirect address pointer which points to the V memory in the S7-200

CPU for the data associated with the read or write request. For a read request, DataPtr should point to the first CPU memory location used to store the data read from the Modbus slave. For a write request, DataPtr should point to the first CPU memory location of the data to be sent to the

Modbus slave.

The DataPtr value is passed into MBUS_MSG as an indirect address pointer. For example, if the data to be written to a Modbus slave device starts at address VW200 in the S7-200 CPU, the value for the DataPtr would be &VB200 (address of VB200). Pointers must always be a type VB even if they point to word data.

Table 12-9 Parameters for the MBUS_MSG Instruction

Parameter

First

Slave

RW

Addr

Count

DataPtr

Done

Error

Data Type

BOOL

BYTE

BYTE

DWORD

INT

DWORD

BOOL

BYTE

Operands

I, Q, M, S, SM, T, C, V, L (Power flow conditioned by a positive edge detection element)

VB, IB, QB, MB, SB, SMB, LB, AC, Constant, *VD, *AC, *LD

VB, IB, QB, MB, SB, SMB, LB, AC, Constant, *VD, *AC, *LD

VD, ID, QD, MD, SD, SMD, LD, AC, Constant, *VD, *AC, *LD

VW, IW, QW, MW, SW, SMW, LW, AC, Constant, *VD, *AC, *LD

&VB

I, Q, M, S, SM, T, C, V, L

VB, IB, QB, MB, SB, SMB, LB, AC, *VD, *AC, *LD

Holding registers (address 4xxxx) and input registers (address 3xxxx) are word values (2 bytes or

16 bits). S7-200 CPU words are formatted the same as Modbus registers. The lower numbered

V-memory address is the most significant byte of the register. The higher numbered V—memory address is the least significant byte of the register. The table below shows how the S7-200 byte and word addressing corresponds to the Modbus register format.

Table 12-10 Modbus Holding Register

S7-200 CPU Memory

Byte Address

Address

VB200

VB201

VB202

VB203

VB204

VB205

Hex Data

12

34

56

78

9A

BC

S7-200 CPU Memory

Word Address

Address

VW200

Hex Data

12 34

VW202

VW204

56 78

9A BC

Modbus

Holding Register Address

Address

4001

Hex Data

12 34

4002

4003

56 78

9A BC

The bit data (addresses 0xxxx and 1xxxx) areas are read and written as packed bytes, that is, 8 bits are packed into each byte of data. The least significant bit of the first data byte is the addressed bit number (the parameter Addr). If only a single bit is written then the bit must be in the least significant bit of the byte pointed to by DataPtr.

358

Using the Modbus Protocol Library

Chapter 12

Vx.7

Vx.0

10008

10007

10006

10005

10003

10004

Figure 12-1 Format for Packed Bytes (Discrete Input Addresses)

10001

10002

For bit data addresses that do not start on even byte boundaries, the bit corresponding to the starting address must be in the least significant bit of the byte. See below for an example of the packed byte format for 3 bits starting at Modbus address 10004.

Vx.7

Vx.0

10004

10005

10005

Figure 12-2 Format for Packed Bytes (Discrete input starting at address 10004)

When writing to the discrete output data type (coils), the user is responsible for placing the bits in the correct bit positions within the packed byte before the data is passed to the MBUS_MSG instruction via DataPtr.

The Done output is off while a request is being sent and the response is being received. The

Done output is on when the response is complete or when the MBUS_MSG instruction was aborted because of an error.

The Error output is valid only when the Done output is on. See the Modbus Master MBUS_MSG

Execution Errors returned by the MBUS_MSG instruction.

The low numbered error codes (1 through are errors that are detected by the MBUS_MSG instruction. These error codes generally indicate a problem with the input parameters of the

MBUS_MSG instruction, or a problem receiving the response from the slave. Parity and CRC errors indicate that there was a response but that the data was not received correctly. This is usually caused by an electrical problem such as a bad connection or electrical noise.

The high numbered error codes (starting with 101) are errors that are returned by the Modbus slave device. These errors indicate that the slave does not support the requested function or that the requested address (either data type or range of addresses) is not supported by the Modbus slave device.

Table 12-11 Modbus Master MBUS_MSG Execution Error Codes

Error Codes

0

1

2

3

4

5

Description

No Error

Parity error in response: This is only possible if even or odd parity is used. The transmission was disturbed and possibly incorrect data was received. This error is usually caused by an electrical problem such as incorrect wiring or electrical noise affecting the communication.

Not used

Receive timeout: There was no response from the slave within the Timeout time.

Some possible causes are bad electrical connection to the slave device, master and slave are set to a different baud rate / parity setting, and incorrect slave address.

Error in request parameter: One or more of the input parameters (Slave, RW, Addr, or Count ) is set to an illegal value. Check the documentation for allowed values for the input parameters.

Modbus master not enabled: Call MBUS_CTRL on every scan prior to calling

MBUS_MSG.

359

S7-200 Programmable Controller System Manual

Table 12-11 Modbus Master MBUS_MSG Execution Error Codes, continued

Error Codes

6

7

8

101

102

103

105

106

107

108

Description

Modbus is busy with another request: Only one MBUS_MSG instruction can be active at a time.

Error in response: The response received does not correspond to the request. This indicates some problem in the slave device or that the wrong slave device answered the request.

CRC error in response: The transmission was disturbed and possibly incorrect data was received. This error is usually caused by an electrical problem such as incorrect wiring or electrical noise affecting the communication.

Slave does not support the requested function at this address: See the required

Modbus slave function support table in the ”Using the Modbus master Instructions” help topic.

Slave does not support the data address: The requested address range of Addr plus

Count is outside the allowed address range of the slave.

Slave does not support the data type: The Addr type is not supported by the slave device.

Slave accepted the message but the response is delayed:: This is an error for

MBUS_MSG and the user program should resend the request at a later time.

Slave accepted the message but the response is delayed:: This is an error for

MBUS_MSG and the user program should resend the request at a later time. Slave is busy and rejected the message: You can try the same request again to get a response.

Slave rejected the message for an unknown reason

Slave memory parity error: There is an error in the slave device.

Program Example

This example program shows how to use the Modbus Master instructions to write and then read 4 holding registers to and from a Modbus slave each time input I0.0 is turned on.

The S7-200 CPU will write 4 words starting at VW100 to the Modbus slave. The data will be written to 4 holding registers in the slave starting at address 40001.

The S7-200 CPU will then read 4 holding registers from the Modbus slave. The data will come from holding registers 40010 — 40013 and be placed into the V—memory of the S7-200 CPU starting at VW200.

S7-200 CPU

Memory

….

VW100

VW102

VW104

VW106

….

….

VW200

VW202

VW204

VW206

….

Modbus Slave

Holding Registers

….

40001

40002

40003

40004

….

….

40010

40011

40012

40013

….

Figure 12-3 Example Program Data Transfers

360

Using the Modbus Protocol Library

Chapter 12

Example of Programming the Modbus Master Protocol

The program will turn on outputs Q0.1 and Q0.2 if there is an error returned from the MBUS_MSG instruction.

Network 1

// Initialize and monitor the Modbus

// Master by calling MBUS_CTRL on

// every scan.

// The Modbus Master is set for 9600 baud

// and no parity. The slave is allowed 1000

// milliseconds (1 second) to respond.

Network 2

// On the first scan, reset the enable flags

// (M2.0 and M2.1) used for the two

// MBUS_MSG instructions.

Network 3

// When I0.0 changes from OFF to ON, set

// the enable flag for the first MBUS_MSG

// instruction (M2.0).

Network 4

// Call the MBUS_MSG instruction when the

// first enable flag (M2.0) is ON. The First

// parameter must be set for only the first

// scan that the instruction is enabled.

//This instruction writes (RW = 1) 4 holding

// registers to slave 2. The write data is taken

// from VB100

ٛ

VB107 (4 words) in the CPU

// and written to address 40001 — 40004 in

// the Modbus slave.

Network 5

//When the first MBUS_MSG instruction is

// complete (Done goes from 0 to 1), clear

// the enable for the first MBUS_MSG and set

// the enable for the second MBUS_MSG

// instruction.

//If Error (MB1) is not zero then set Q0.1 to

// show the error.

Network 6

// Call the second MBUS_MSG instruction

// when the second enable flag (M2.1) is ON.

// The First parameter must be set for only

// the first scan that the instruction is

// enabled.

//This instruction reads (RW = 0) 4 holding

// registers from slave 2. The data is read

// from address 40010 — 40013 in the Modbus

// slave and copied to VB200 — VB207

(4 words) in the CPU.

Network 7

//When the second MBUS_MSG instruction

// is complete (Done goes from 0 to 1), clear

// the enable for the second MBUS_MSG

// instruction.

//If Error (MB1) is not zero then set Q0.2 to

// show the error.

361

S7-200 Programmable Controller System Manual

Advanced Topics

This topic contains information for advanced users of the Modbus Master Protocol Library. Most users of the Modbus Master Protocol Library should not need this information and should not modify the default operation of the Modbus Master Protocol Library.

Retries

The Modbus Master instructions will automatically resend the request to the slave device if one of the following errors is detected:

—

—

—

—

There is no response within the response timeout time (parameter Timeout on the

MBUS_CTRL) instruction (Error code 3).

The time between characters of the response exceeded the allowed value (Error code 3).

There is a parity error in the response from the slave (Error code 1).

There is a CRC error in the response from the slave (Error code 8).

—

The returned function did not match the request (Error code 7).

The Modbus Master will resend the request two additional times before setting the Done and Error output parameters.

The number of retries can be changed by finding the symbol mModbusRetries in the Modbus

Master symbol table and changing this value after MBUS_CTRL has been executed. The mModbusRetries value is a BYTE with a range of 0 to 255 retries.

Inter—character timeout

The Modbus Master will abort a response from a slave device if the time between characters in the response exceeds a specified time limit. The default time is set to 100 milliseconds which should allow the Modbus Master Protocol to work with most slave devices over wire or telephone modems. If this error is detected, the MBUS CTRL Error parameter will be set to error code 3.

There may be cases where a longer time between characters is required, either because of the transmission medium (i.e. telephone modem) or because the slave device itself requires more time. This timeout can be lengthened by finding the symbol mModbusCharTimeout in the

Modbus Master symbol table and changing this value after MBUS_CTRL has been executed.

The mModbusCharTimeout value is an INT with a range of 1 to 30000 milliseconds.

Single vs. Multiple Bit/Word Write Functions

Some Modbus slave devices do not support the Modbus functions to write a single discrete output bit (Modbus function 5) or to write a single holding register (Modbus function 6). These devices only support the multiple bit write (Modbus function 15) or multiple register write (Modbus function

16) instead. The MBUS_MSG instruction will return an error code 101 if the slave device does not support the single bit/word Modbus functions.

The Modbus Master Protocol allows you to force the MBUS_MSG instruction to use the multiple bit/word Modbus functions instead of the single bit/word Modbus functions. You can force the multiple bit/word instructions by finding the symbol mModbusForceMulti in the Modbus Master symbol table and changing this value after MBUS_CTRL has been executed. The mModbusForceMulti value is a data type BOOL value and should be set to a

ٛ

1

ٛ to force the use of the multiple bit/word functions when a single bit/register is written.

362

Using the Modbus Protocol Library

Chapter 12

Accumulator Usage

The accumulators (AC0, AC1, AC2, AC3) are utilized by the Modbus Master instructions and appear in the Cross Reference listing. The values in the accumulators are saved and restored by the Modbus Master instructions. All user data in the accumulators is preserved while executing the Modbus Master instructions.

Holding Registers Addresses Greater Than 9999

Modbus holding addresses are generally within the range of 40001 through 49999. This range is adequate for most applications but there are some Modbus slave devices with data mapped into holding registers with addresses greater than 9999. These devices do not fit the normal Modbus addressing scheme.

The Modbus Master instructions support addressing holding registers greater than 9999 via an alternate addressing method. The MBUS_MSG instruction allows an additional range for the parameter Addr to support an extended range of holding register addresses.

400001 to 465536 for holding registers

For example: to access holding register 16768, the Addr parameter of MBUS_MSG should be set to 416768.

The extended addressing allows access to the full range of 65536 possible addresses supported by the Modbus protocol. This extended addressing is only supported for holding registers.

363

S7-200 Programmable Controller System Manual

364

Using Recipes

STEP 7—Micro/Win provides the Recipe Wizard to help you organize recipes and recipe definitions. Recipes are stored in the memory cartridge instead of the PLC.

In This Chapter

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Recipe Definition and Terminology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Using the Recipe Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Instructions Created by the Recipe Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

366

367

367

371

365

S7-200 Programmable Controller System Manual

Overview

Recipe

Support for recipes has been incorporated into STEP 7—Micro/WIN and the S7-200 PLC.

STEP 7—Micro/Win provides the Recipe Wizard to help you organize recipes and recipe definitions.

All recipes are stored in the memory cartridge. Therefore, to use the recipe feature, an optional

64kB or 256kB memory cartridge must be installed in the PLC. See Appendix A for more information about the memory cartridges.

All recipes are stored in the memory cartridge. However, a single recipe is read into PLC memory when the user program is processing this individual recipe. For example, if you are making cookies, there may be recipes for chocolate chip, sugar, and oatmeal cookies. Only one type of cookie can be made at a time, so the proper recipe must be selected and read into PLC memory.

Figure 13-1 illustrates a process for making multiple types of cookies using recipes. The recipe for each type of cookie is stored in the memory cartridge. Using a TD 200C text display, the operator selects the type of cookie to be made, and the user program loads that recipe into memory.

Memory Cartridge

Recipe Definition: Donuts

Recipe Definition: Cookies

.

.

Butter

White sugar

.

Cook Time

Oatmeal

Sugar

Chocolate Chip

.

.

Butter 8 oz.

White sugar 6 oz.

.

Cook Time 9 minutes

Get Recipe

S7-200 CPU

Chocolate_Chip

8, 6, … 9

Cookies buffer in V Memory

Request Recipe

TD 200C

Figure 13-1 Example of Recipe Application

366

Using Recipes

Chapter 13

Recipe Definition and Terminology

To help you understand the Recipe Wizard, the following definitions and terms are explained.

—

—

A recipe configuration is the set of project components generated by the Recipe Wizard.

These components include instruction subroutines, data block tabs, and symbol tables.

A recipe definition is a collection of recipes that have the same set of parameters. However, the values for the parameters can vary depending upon the recipe.

—

A recipe is the set of parameters and parameter values that provides the information needed to produce a product or control a process.

For example, different recipe definitions can be created, such as donuts and cookies. The cookie recipe definition may contain many different recipes, such as chocolate chip and sugar cookies.

Example fields and values are shown in Table 13-1.

Table 13-1 Example of Recipe Definition — Cookies

Field Name

Butter

White_Sugar

Brown_Sugar

Eggs

Vanilla

Flour

Baking_Soda

Baking_Powder

Salt

Chocolate_Chips

Lemon_Peel

Cook_Time

Data Type

Byte

Byte

Byte

Byte

Byte

Byte

Real

Real

Real

Real

Real

Real

1.0

0

1.0

16

0.0

9.0

6

2

1

18

8

6

Chocolate_Chip

(Recipe 0)

0.5

1.0

0.5

0.0

1.0

10.0

0

1

1

32

Sugar

(Recipe 1)

8

12

Comment

Ounces

Ounces

Ounces each

Teaspoon

Ounces

Teaspoon

Teaspoon

Teaspoon

Ounces

Tablespoon

Minutes

Using the Recipe Wizard

Use the Recipe Wizard to create recipes and recipe definitions. Recipes are stored in the memory cartridge. Recipes and recipe definitions can be entered directly in the Recipe Wizard. Later changes to individual recipes can be made by running the Recipe Wizard again or by programming with the RCPx_WRITE instruction subroutine.

The Recipe Wizard creates a recipe configuration that includes the following:

—

—

—

—

A symbol table for each recipe definition. Each table includes symbol names that are the same as the recipe field names. These symbols define the V memory addresses needed to access the recipe values currently loaded in memory. Each table also includes a symbolic constant to reference each recipe.

A data block tab for each recipe definition. This tab defines the initial values for each V memory address represented within the symbol table.

A RCPx_READ instruction subroutine. This instruction is used to read the specified recipe from the memory cartridge to V memory.

A RCPx_WRITE instruction subroutine. This instruction is used to write recipe values from

V memory to the memory cartridge.

367

S7-200 Programmable Controller System Manual

Defining Recipes

To create a recipe using the Recipe Wizard, select the

Tools > Recipe Wizard

menu command.

The first screen is an introductory screen defining the basic operations of the recipe wizard. Click on the Next button to begin configuring your recipes.

To create a recipe definition, follow the steps below. See Figure 13-2.

1. Specify the field names for the recipe definition. Each name will become a symbol in your project as previously defined.

2. Select a data type from the drop down list.

3. Enter a default value and comment for each name. All new recipes specified within this definition will begin with these default values.

4. Click Next to create and edit recipes for this recipe definition

Figure 13-2 Defining Recipes

Use as many rows as necessary to define all data fields in the recipe. You can have up to four different recipe definitions. The number of recipes for each definition is limited only by the available space within the memory cartridge.

Creating and Editing Recipes

The Create and Edit Recipes screen allows you to create individual recipes and specify values for these recipes. Each editable column represents a unique recipe.

Recipes can be created by pressing the New button. Each recipe is initialized with the default values specified during the creation of the recipe definition.

Recipes can also be created from the right mouse context menu by copying and pasting existing recipes. New columns will be inserted to the left of the current cursor position including the comment field.

Each new recipe will be given a default name that includes a reference to the recipe definition and recipe number. This name will be in the form of DEFx_RCPy.

To create and edit recipes, follow the steps below. See Figure 13-3.

1. Click on the Next button to get to the Create and Edit Recipe window.

2. Select the New button to insert a new recipe as needed.

3. Rename the recipe name to an appropriate non-default name.

4. Change the values in each recipe data set as needed.

5. Click OK.

Figure 13-3 Creating and Editing Recipes

368

Using Recipes

Chapter 13

Allocating Memory

The Allocate Memory screen specifies the starting address of the V memory area that will store the recipe loaded from the memory cartridge. You can either select the V memory address or let the Recipe wizard to suggest the address of an unused V memory block of the correct size.

To allocate memory, follow the steps below. See Figure 13-4.

1. To select the V memory address where you want the recipe to be stored, click in the window and enter the address.

2. To let the Recipe Wizard select an unused V memory block of the correct size, click the Suggest

Address button.

3. Click the Next button.

Project Components

The project components screen lists the different components that will be added to your project. See Figure 13-5.

Click Finish to complete the Recipe

Wizard and add these components.

Each recipe configuration can be given a unique name. This name will be shown in the project tree with each wizard configuration. The recipe definition

(RCPx) will be appended to the end of this name.

Figure 13-4 Allocating Memory

Using the Symbol Table

A symbol table is created for each recipe definition. Each table defines constant values that represent each recipe. These symbols can be used as parameters for the RCPx_READ and RCPx_WRITE instructions to indicate the desired recipe

See Figure 13-6.

Each table also creates symbol names for each field of the recipe. You can use these symbols to access the values of the recipe in V memory.

Figure 13-5 Project Components

Figure 13-6 Symbol Table

369

S7-200 Programmable Controller System Manual

Downloading the Project with a Recipe Configuration

To download a project that contains a recipe configuration, follow the steps below. See

Figure 13-7.

1. Select

File > Download

.

2. In the dialog, under Options, ensure that the Program Block,

Data Block, and Recipes boxes are checked.

3. Click the Download button.

Figure 13-7 Downloading a Project with Recipe

Configuration

Edit Existing Recipe Configurations

To edit existing recipe configurations follow the steps below. See Figure 13-8.

1. Click on the configuration drop down list and select an existing recipe configuration.

2. To delete an existing recipe configuration, click on the Delete

Configuration button.

Figure 13-8 Editing Existing Recipe Configurations

370

Using Recipes

Chapter 13

Instructions Created by the Recipe Wizard

RCPx_Read Subroutine

The Subroutine RCPx_READ is created by the Recipe

Wizard and is used to read an individual recipe from the memory cartridge to the specified area in V memory.

The x in the RCPx_READ instruction corresponds to the recipe definition that contains the recipe that you wish to read.

The EN input enables the execution of the instruction when this input is high.

The Rcp input identifies the recipe that will be loaded from the memory cartridge

The Error output returns the result of the execution of this instruction. See Table 13-3 for definitions of the error codes.

RCPx_Write Subroutine

The Subroutine RCPx_WRITE is created by the Recipe

Wizard and is used to replace a recipe in the memory cartridge with the contents of the recipe contained in

V memory.

The x in the RCPx_WRITE instruction corresponds to the recipe definition that contains the recipe that you wish to replace.

The EN input enables the execution of the instruction when this input is high.

The Rcp input identifies the recipe that will be replaced in the memory cartridge.

The Error output returns the result of the execution of this instruction. See Table 13-3 for definitions of the error codes.

Table 13-2 Valid Operands for the Recipe Subroutine

Inputs/Outputs

Rcp

Error

Data Type

Word

Byte

Operands

VW, IW, QW, MW, SW, SMW, LW, AC, *VD, *AC, *LD, Constant

VB, IB, QB, MB, SB, SMB, LB, AC, *VD, *AC, *LD

Table 13-3 Error Codes for the Recipe Instructions

Error Code

0

132

Description

No error

Access to the memory cartridge failed

Tip

The EEPROM used in the memory cartridge will support a limited number of write operations.

Typically, this is one million write cycles. Once this limit has been reached, the EEPROM will not operate properly.

Make sure that you do not enable the RCPx_WRITE instruction on every scan. Enabling this instruction on every scan will wear out the memory cartridge in a relatively short period of time.

371

S7-200 Programmable Controller System Manual

372

Using Data Logs

STEP 7—Micro/Win provides the Data Log Wizard to store process measurement data in the memory cartridge. Moving process data to the memory cartridge frees V memory addresses that would otherwise be required to store this data.

In This Chapter

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Using the Data Log Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Instruction Created by the Data Log Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

374

375

379

373

S7-200 Programmable Controller System Manual

Overview

Support for data logs have been incorporated into STEP 7—Micro/WIN and the S7-200 PLC. With this feature, you can permanently store records containing process data under program control.

These records can optionally contain a time and date stamp. You can configure up to four independent data logs. The data log record format is defined using the new Data Log Wizard

All data logs are stored in the memory cartridge. To use the data log feature, you must have installed an optional 64K or 256K memory cartridge in your PLC. See Appendix A for information about the memory cartridges.

You must use the S7-200 Explorer to upload the contents of your data logs to your computer.

An example of a Data Log application is shown in Figure 14-1.

Memory Cartridge

Data Log: “Grain Bin Capacity”

Data Log: “Morning Milking”

03/22/2004 05:25:04 4

03/22/2004 05:21:04 7

.

.

.

03/22/2004 05:17:04 2

27.7

97.5

30.8

97.3

25.1

97.6

13.2

12.7

14.1

Upload Data

Log Daily

S7-200 Explorer

Write Data Log Record

(with date and time stamp added)

S7-200 CPU

Cow #5

5, 35.2, 98.1, 14.5

Morning milking data buffer in V memory

Cow #5 Milking Complete

TD 200C

For this cow:

H

Record unique ID

H

Record amount of milk obtained

H

Record cow temperature

H

Record milking time

Figure 14-1 Example of Data Log Application

Data Log Definition and Terminology

To help you understand the Data Log Wizard, the following definitions and terms are explained.

—

—

A data log is a set of records usually ordered by date and time. Each record represents some process event that records a set of process data. The organization of this data is defined with the data log wizard.

A data log record is a single row of data written to the data log.

374

Using Data Logs

Chapter 14

Using the Data Log Wizard

Use the Data Log Wizard to configure up to four data logs. The Data Log Wizard is used to:

Data Log

—

—

—

—

Define the format of the data log record

Select data log options such as time stamp, date stamp, and clear data log on upload

Specify the maximum number of records that can be stored in the data log

Create project code used to store records in the data log.

The Data Log Wizard creates a data log configuration that includes the following:

—

—

—

A symbol table for each data log configuration. Each table includes symbol names that are the same as the data log field names. Each symbol defines the V memory addresses needed to store the current data log. Each table also includes a symbolic constant to reference each data log.

A data block tab for each data log record that assigns V memory addresses for each data log field. Your program uses these V memory addresses to accumulate the current log data set.

A DATx_WRITE subroutine. This instruction copies the specified data log record from V memory to the memory cartridge. Each execution of DATx_WRITE adds a new data record to the log data stored in the memory cartridge.

Data Log Options

You can configure the following optional behaviors for the data log. See Figure 14-2.

Time Stamp

You can include a Time Stamp with each data log record. When selected, the CPU automatically includes a time stamp with each record when the user program commands a data log write.

Date Stamp

You can add a Date Stamp to each data log record. When selected, the CPU automatically includes a date stamp with each record when the user program commands a data log write.

Clear Data Log

Clear Data Log — You can clear all records from the data log whenever it is uploaded. If you set the Clear Data Log option, the data log will be cleared each time it is uploaded.

Figure 14-2 Data Log Options

Data logs are implemented as a circular queue (when the log is full, a new record replaces the oldest record). You must specify the maximum number of records to store in the data log. The maximum number of records allowed in a data log is 65,535. The default value for the number of records is 1000.

375

S7-200 Programmable Controller System Manual

Defining the Data Log

You specify the fields for the data log and each field becomes a symbol in your project. You must specify a data type for each field. A data log record can contain between 4 and 203 bytes of data.

To define the data fields in the data log, follow the steps below. See Figure 14-3.

1. Click on the Field Name cell to enter the name. The name becomes the symbol referenced by the user program.

2. Click on the Data Type cell and select a data type from the drop down list.

3. To enter a comment, click on the

Comment cell.

4. Use as many rows as necessary to define a record.

5. Click OK .

Figure 14-3 Defining the Data Log Record

Edit Existing Data Log Configuration

To edit an existing data log configuration, follow the steps below:

1. Click on the configuration dropdown list and select an existing data log configuration as shown in Figure 14-4.

2. To delete an existing data log configuration, click on the Delete

Configuration button.

You can have up to four different data logs.

Figure 14-4 Edit Existing Data Log Configurations

376

Using Data Logs

Chapter 14

Allocating Memory

The Data Log Wizard creates a block in the V memory area of the PLC. This block is the memory address where a data log record will be constructed before it is written to the memory cartridge.

You specify a starting V memory address where you want the configuration to be placed. You can either select the V memory address or let the Data Log wizard suggest the address of an unused

V memory block of the correct size. The size of the block varies based on the specific choices you have made in the Data Log wizard. See Figure 14-5.

To allocate memory, follow the steps below:

1. To select the V memory address where the data log record will be constructed, click in the Suggested

Address area and enter the address.

2. To let the Data Log Wizard select an unused V memory block of the correct size, click the Suggest

Address button.

3. Click the Next button.

Project Components

The project components screen lists the different components that will be added to your project. See Figure 14-6.

Click Finish to complete the Data Log

Wizard and add these components.

Each data log configuration can be given a unique name. This name will be shown in the project tree with each wizard configuration. The data log definition

(DATx) will be appended to the end of this name.

Figure 14-5 Allocating Memory

Figure 14-6 Project Components

Using the Symbol Table

A symbol table is created for each data log configuration. Each table defines constant values that represent each data log. These symbols can be used as parameters for the DATx_WRITE instructions.

Each table also creates symbol names for each field of the data log. You can use these symbols to access the values of the data log in V memory.

Figure 14-7 Symbol Table

377

S7-200 Programmable Controller System Manual

Downloading a Project that contains a Data Log Configuration

You must download a project that contains a data log configuration to an S7-200 CPU before the data log can be used. If a project has a data log configuration, then the download window has the

Data Log Configurations option checked by default.

Tip

When you download a project that contains data log configurations, any data log records currently stored on the memory cartridge will be lost.

To download a project that contains data log configurations, follow the steps below. See

Figure 14-8.

1. Select

File > Download

.

2. In the dialog, under Options, ensure that the Data Log

Configuration box is checked.

3. Click the Download button.

Figure 14-8 Downloading a Project with a Data Log

Configuration

Using the S7-200 Explorer

The S7-200 Explorer is the application used to read a data log from the memory cartridge, and then store the data log in a Comma separated Values (CSV) file.

Each time a data log is read, a new file is created. This file is saved in the Data Log directory. The file name is formatted as follows: PLC Address, data log name, date, and time.

You can choose whether the application associated with the CSV extension is automatically launched when the data log has successfully been read. This selection is available from the right mouse menu of the data log file.

The Data Log directory will be below the directory specified during installation. The default installation directory is c:program filessiemensMicrosystems (if STEP 7 is not installed). The default installation is c:siemensMicrosystems (if STEP 7 is installed).

To read a data log, follow the steps below:

1. Open Windows Explorer. The My

S7-200 Network folder should automatically become visible.

2. Select the My S7-200 Network folder.

folder.

Figure 14-9 Using the S7-200 Explorer

4. Select the memory cartridge folder

5. Find the correct data log configuration file. These files will be named DAT Configuration x

(DATx).

6. Select the right mouse context menu, and then select Upload.

378

Using Data Logs

Chapter 14

Instruction Created by the Data Log Wizard

The Data Log Wizard adds one instruction subroutine to your project.

DATx_WRITE Subroutine

The Subroutine DATx_WRITE is used to log the current values of the data log fields to the memory cartridge.

DATxWRITE adds one record to the logged data in the memory cartridge. A call to this subroutine appears as follows.

Error 132 is returned when this instruction fails to correctly access the memory cartridge.

Table 14-1 Parameters for the DATAx_WRITE Subroutine

Inputs/Outputs

Error

Data Type

Byte

Operands

VB, IB, QB, MB, SB, SMB, LB, AC, *VD, *AC, *LD

Tip

The EEPROM used in the memory cartridge will support a limited number of write operations.

Typically, this is one million write cycles. Once this limit has been reached, the EEPROM will not operate properly.

Make sure that you do not enable the DATx_WRITE instruction on every scan. Enabling this instruction on every scan will wear out the memory cartridge in a relatively short period of time.

379

S7-200 Programmable Controller System Manual

380

PID Auto-Tune and the PID Tuning

Control Panel

PID Auto-Tune capability has been incorporated into the S7-200 PLCs and STEP 7—Micro/WIN has added a PID Tuning Control Panel. Together, these two features greatly enhance the utility and ease of use of the PID function provided in the S7-200 Micro PLC line.

Auto-tune can be initiated by the user program from an operator panel or by the PID Tuning

Control Panel. PID loops can be auto-tuned one at a time or all eight loops can be auto-tuned at the same time if necessary. The PID Auto-Tune computes suggested (near optimum) values for the gain, integral time (reset) and derivative time (rate) tuning values. It also allows you to select tuning for fast, medium, slow or very slow response of your loop.

With the PID Tuning Control Panel you can initiate the auto-tuning process, abort the auto-tuning process and monitor the results in a graphical form. The control panel displays any error conditions or warnings that might be generated. It also allows you to apply the gain, reset and rate values computed by auto-tune.

In This Chapter

Understanding the PID Auto-Tune . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Expanded Loop Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Auto-Hysteresis and Auto-Deviation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Auto-Tune Sequence . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Exception Conditions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Notes Concerning PV Out-of-Range (Result Code 3) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

PID Tuning Control Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

386

387

387

388

382

382

385

385

381

S7-200 Programmable Controller System Manual

Understanding the PID Auto-Tune

Introduction

The auto-tuning algorithm used in the S7-200 is based upon a technique called relay feedback suggested by K. J. Åström and T. Hägglund in 1984. Over the past twenty years relay feedback has been used across a wide variety of industries.

The concept of relay feedback is to produce a small, but sustained oscillation in an otherwise stable process. Based upon the period of the oscillations and the amplitude changes observed in the process variable, the ultimate frequency and the ultimate gain of the process are determined.

Then, using the ultimate gain and ultimate frequency values, the PID Auto-tuner suggests a value for the gain, reset and rate tuning values.

The values suggested depend upon your selection for speed of response of the loop for your process. You can select fast, medium, slow or very slow response. Depending upon your process a fast response may have overshoot and would correspond to an underdamped tuning condition.

A medium speed response may be on the verge of having overshoot and would correspond to a critically damped tuning condition. A slow response may not have any overshoot and would correspond to an overdamped tuning condition. A very slow response may not have overshoot and would correspond to a heavily overdamped tuning condition.

In addition to suggesting tuning values the PID Auto-tuner can automatically determine the values for hysteresis and peak PV deviation. These parameters are used to reduce the effect of the process noise while limiting the amplitude of the sustained oscillations set up by the PID

Auto-Tuner.

The PID Auto-Tuner is capable of determining suggested tuning values for both direct-acting and reverse-acting P, PI, PD, and PID loops.

The purpose of the PID Auto-Tuner is to determine a set of tuning parameters that provide a reasonable approximation to the optimum values for your loop. Starting with the suggested tuning values will allow you to make fine tuning adjustments and truly optimize your process.

Expanded Loop Table

The PID instruction for the S7-200 references a loop table that contains the loop parameters. This table was originally 36 bytes long. With the addition of PID Auto-Tuning the loop table has been expanded and is now 80 bytes long. The expanded loop table is shown in Table 15-1 and

Table 15-2.

If you use the PID Tuning Control Panel, all interaction with the PID loop table is handled for you by the control panel. If you need to provide auto-tuning capability from an operator panel, your program must provide the interaction between the operator and the PID loop table to initiate, and monitor the auto-tuning process, and then apply the suggested tuning values.

382

PID Auto-Tune and the PID Tuning Control Panel

Chapter 15

36

40

41

42

43

44

Table 15-1 Loop Table

Offset Field

0

4

8

12

Process variable

(PV n

)

Setpoint

(SP n

)

Output

(M n

)

Gain

(K

C

)

16

20

24

28

32

Format

REAL

REAL

REAL

REAL

Sample time

(T

S

)

Integral time or reset

(T

I

)

Derivative time or rate

(T

D

)

Bias

(MX)

Previous process variable (PV n—1

)

REAL

REAL

REAL

REAL

REAL

PID Extended Table ID ASCII

AT Control (ACNTL)

AT Status (ASTAT)

AT Result (ARES)

AT Config (ACNFG)

Deviation (DEV)

BYTE

BYTE

BYTE

BYTE

REAL

48 Hysteresis (HYS) REAL

52

64

68

56

60

72

76

Initial Output Step

(STEP)

REAL

Watchdog Time

(WDOG)

Suggested Gain

(AT_K

C

)

Suggested Integral Time

(AT_T

I

)

Suggested Derivative

Time (AT_T

D

)

Actual Step size

(ASTEP)

Actual Hysteresis

(AHYS)

REAL

REAL

REAL

REAL

REAL

REAL

Type

In

In

In/Out

In

In

In

In

In/Out

Description

Contains the process variable, which must be scaled between 0.0 and 1.0.

Contains the setpoint, which must be scaled between 0.0 and 1.0.

Contains the calculated output, scaled between 0.0 and 1.0.

Contains the gain, which is a proportional constant. Can be a positive or negative number.

Contains the sample time, in seconds. Must be a positive number.

Contains the integral time or reset, in minutes.

Contains the derivative time or rate, in minutes.

Contains the bias or integral sum value between 0.0 and 1.0.

In/Out Contains the value of the process variable stored from the last execution of the PID instruction.

Constant ‘PIDA’ (PID Extended Table, Version A):

ASCII constant

In

Out

In/Out

In

In

In

See Table 15-2

See Table 15-2

See Table 15-2

See Table 15-2

Normalized value of the maximum PV oscillation amplitude (range: 0.025 to 0.25).

Normalized value of the PV hysteresis used to determine zero crossings (range: 0.005 to

0.1). If the ratio of DEV to HYS is less than

4, a warning will be indicated during auto-tune.

In

In

Out

Out

Out

Out

Out

Normalized size of the step change in the output value used to induce oscillations in the PV (range: 0.05 to 0.4)

Maximum time allowed between zero crossings in seconds (range: 60 to 7200)

Suggested loop gain as determined by the auto-tune process.

Suggested integral time as determined by the auto-tune process.

Suggested derivative time as determined by the auto-tune process.

Normalized output step size value as determined by the auto-tune process.

Normalized PV hysteresis value as determined by the auto-tune process.

383

S7-200 Programmable Controller System Manual

Table 15-2 Expanded Description of Control and Status Fields

Field

AT Control (ACNTL)

Input — Byte

Description

MSB

7

0 0 0 0 0 0

EN — Set to 1 to start auto-tune; set to 0 to abort auto-tune

AT Status (ASTAT)

Output — Byte

MSB

7

W0 W1 W2 0 AH 0

0

0

AT Result (ARES)

Input/Output — Byte

LSB

0

EN

LSB

0

IP

W0 — Warning: The deviation setting is not four times greater than the hysteresis setting.

W1 — Warning: Inconsistent process deviations may result in incorrect adjustment of the output step value.

W2 — Warning: Actual average deviation is not four times greater than the hysteresis setting.

AH — Auto-hysteresis calculation in progress:

0 — not in progress

1 — in progress

IP — Auto-tune in progress:

0 — not in progress

1 — in progress

Each time an auto-tune sequence is started the PLC clears the warning bits and sets the in progress bit. Upon completion of auto-tune, the PLC clears the in progress bit.

MSB

7

D Result Code

LSB

0

D — Done bit:

0 — auto-tune not complete

1 — auto-tune complete

Must be set to 0 before auto-tune can start

Result Code:

00 — completed normally (suggested tuning values available)

01 — aborted by the user

02 — aborted, watchdog timed out waiting for a zero crossing

03 — aborted, process (PV) out-of-range

04 — aborted, maximum hysteresis value exceeded

05 — aborted, illegal configuration value detected

06 — aborted, numeric error detected

07 — aborted, PID instruction executed without having power flow (loop in manual mode)

08 — aborted, auto-tuning allowed only for P, PI, PD, or PID loops

09 to 7F — reserved

AT Config (ACNFG)

Input — Byte

LSB

0

DS HS

MSB

7

0 0 0 0 R1

R1 R0 Dynamic response

0 0

0

1

1

1

0

1

Fast response

Medium response

Slow response

Very slow response

DS — Deviation setting:

0 — use deviation value from loop table

1 — determine deviation value automatically

HS — Hysteresis setting:

0 — use hysteresis value from loop table

1 — determine hysteresis value automatically

R0

384

PID Auto-Tune and the PID Tuning Control Panel

Chapter 15

Prerequisites

The loop that you want to auto-tune must be in automatic mode. The loop output must be controlled by the execution of the PID instruction. Auto-tune will fail if the loop is in manual mode.

Before initiating an auto-tune operation your process must be brought to a stable state which means that the PV has reached setpoint (or for a P type loop, a constant difference between PV and setpoint) and the output is not changing erratically.

Ideally, the loop output value needs to be near the center of the control range when auto-tuning is started. The auto-tune procedure sets up an oscillation in the process by making small step changes in the loop output. If the loop output is close to either extreme of its control range, the step changes introduced in the auto-tune procedure may cause the output value to attempt to exceed the minimum or the maximum range limit.

If this were to happen, it may result in the generation of an auto-tune error condition, and it will certainly result in the determination of less than near optimal suggested values.

Auto-Hysteresis and Auto-Deviation

The hysteresis parameter specifies the excursion (plus or minus) from setpoint that the PV

(process variable) is allowed to make without causing the relay controller to change the output.

This value is used to minimize the effect of noise in the PV signal to more accurately determine the natural oscillation frequency of the process.

If you select to automatically determine the hysteresis value, the PID Auto-Tuner will enter a hysteresis determination sequence. This sequence involves sampling the process variable for a period of time and then performing a standard deviation calculation on the sample results.

In order to have a statistically meaningful sample, a set of at least 100 samples must be acquired.

For a loop with a sample time of 200 msec, acquiring 100 samples takes 20 seconds. For loops with a longer sample time it will take longer. Even though 100 samples can be acquired in less than 20 seconds for loops with sample times less than 200 msec, the hysteresis determination sequence always acquires samples for at least 20 seconds.

Once all the samples have been acquired, the standard deviation for the sample set is calculated.

The hysteresis value is defined to be two times the standard deviation. The calculated hysteresis value is written into the actual hysteresis field (AHYS) of the loop table.

Tip

While the auto-hysteresis sequence is in progress, the normal PID calculation is not performed.

Therefore, it is imperative that the process be in a stable state prior to initiating an auto-tune sequence. This will yield a better result for the hysteresis value and it will ensure that the process does not go out of control during the auto-hysteresis determination sequence.

The deviation parameter specifies the desired peak-to-peak swing of the PV around the setpoint.

If you select to automatically determine this value, the desired deviation of the PV is computed by multiplying the hysteresis value by 4.5. The output will be driven proportionally to induce this magnitude of oscillation in the process during auto-tuning.

385

S7-200 Programmable Controller System Manual

Auto-Tune Sequence

The auto-tuning sequence begins after the hysteresis and deviation values have been determined. The tuning process begins when the initial output step is applied to the loop output.

This change in output value should cause a corresponding change in the value of the process variable. When the output change drives the PV away from setpoint far enough to exceed the hysteresis boundary a zero-crossing event is detected by the auto-tuner. Upon each zero crossing event the auto-tuner drives the output in the opposite direction.

The tuner continues to sample the PV and waits for the next zero crossing event. A total of twelve zero-crossings are required to complete the sequence. The magnitude of the observed peak-to-peak PV values (peak error) and the rate at which zero-crossings occur are directly related to the dynamics of the process.

Early in the auto-tuning process, the output step value is proportionally adjusted once to induce subsequent peak-to-peak swings of the PV to more closely match the desired deviation amount.

Once the adjustment is made, the new output step amount is written into the Actual Step Size field

(ASTEP) of the loop table.

The auto-tuning sequence will be terminated with an error, if the time between zero crossings exceeds the zero crossing watchdog interval time. The default value for the zero crossing watchdog interval time is two hours.

Figure 15-1 shows the output and process variable behaviors during an auto-tuning sequence on a direct acting loop. The PID Tuning Control Panel was used to initiate and monitor the tuning sequence.

Notice how the auto-tuner switches the output to cause the process (as evidenced by the PV value) to undergo small oscillations. The frequency and the amplitude of the PV oscillations are indicative of the process gain and natural frequency.

Figure 15-1 Auto-Tuning Sequence on a Direct Acting Loop

Based upon the information collected about the frequency and gain of the process during the auto-tune process, the ultimate gain and ultimate frequency values are calculated. From these values the suggested values for gain (loop gain), reset (integral time) and rate (derivative time) are calculated.

Tip

Your loop type determines which tuning values are calculated by the auto-tuner. For example, for a PI loop, the auto-tuner will calculate gain and integral time values, but the suggested derivative time will be 0.0 (no derivative action).

Once the auto-tune sequence has completed, the output of the loop is returned to its initial value.

The next time the loop is executed, the normal PID calculation will be performed.

386

PID Auto-Tune and the PID Tuning Control Panel

Chapter 15

Exception Conditions

Three warning conditions can be generated during tuning execution. These warnings are reported in three bits of the ASTAT field of the loop table and, once set, these bits remain set until the next auto-tune sequence is initiated.

—

—

—

Warning 0 is generated if the deviation value is not at least 4X greater than the hysteresis value. This check is performed when the hysteresis value is actually known, which depends upon the auto-hysteresis setting.

Warning 1 is generated if there is more than an 8X difference between the two peak error values gathered during the first 2.5 cycles of the auto-tune procedure.

Warning 2 is generated if the measured average peak error is not at least 4X greater than the hysteresis value.

In addition to the warning conditions several error conditions are possible. Table 15-3 lists the error conditions along with a description of the cause of each error.

Table 15-3 Error Conditions during Tuning Execution

Result Code (in ARES)

01 aborted by user

02 aborted due to a zero-crossing watchdog timeout

03 aborted due to the process out-of-range

04 aborted due to hysteresis value exceeding maximum

05 aborted due to illegal configuration value

06 aborted due to a numeric error

07 PID instruction was executed with no power flow (manual mode)

08 auto-tuning allowed only for P, PI, PD, or

PID loops

Condition

EN bit cleared while tuning is in progress

Half-cycle elapsed time exceeds zero-crossing watchdog interval

PV goes out-of-range:

S during the auto-hysteresis sequence, or

S twice before the fourth zero-crossing, or

S after the fourth zero crossing

User-specified hysteresis value, or automatically determined hysteresis value > maximum

The following range checking errors:

S

Initial loop output value is < 0.0 or > 1.0

S

User-specified deviation value is <= hysteresis value , or is > maximum

S

Initial output step is <= 0.0 or is > maximum

S

Zero-crossing watchdog interval time is < minimum

S

Sample time value in loop table is negative

Illegal floating point number or divide by zero encountered

PID instruction executed with no power flow while auto-tuning is in progress or is requested

Loop type is not P, PI, PD, or PID

Notes Concerning PV Out-of-Range (Result Code 3)

The process variable is considered to be in-range by the auto-tuner if its value is greater than 0.0

and less than 1.0.

If the PV is detected to be out-of-range during the auto-hysteresis sequence, then the tuning is immediately aborted with a process out-of-range error result.

If the PV is detected to be out-of-range between the starting point of the tuning sequence and the fourth zero-crossing, then the output step value is cut in half and the tuning sequence is restarted from the beginning. If a second PV out-of-range event is detected after the first zero-crossing following the restart, then the tuning is aborted with a process out-of-range error result.

Any PV out-of-range event occurring after the fourth zero-crossing results in an immediate abort of the tuning and a generation of a process out-of-range error result.

387

S7-200 Programmable Controller System Manual

PID Tuning Control Panel

STEP 7—Micro/WIN includes a PID

Tuning Control Panel that allows you to graphically monitor the behavior of your

PID loops. In addition, the control panel allows you to initiate the auto-tune sequence, abort the sequence, and apply the suggested tuning values or your own tuning values.

To use the control panel, you must be communicating with an S7-200 PLC and a wizard-generated configuration for a

PID loop must exist in the PLC. The PLC l must be in RUN mode for the control panel to display the operation of a PID

Fi 15 2 h th d f lt screen for the control panel.

Figure 15-2 PID Tuning Control Panel

The control panel displays the station address (Remote Address) of the target PLC at the top left-hand side of the screen. At the top right-hand side of the screen, the PLC type and version number are displayed. Underneath the Remote Address field is a bar chart representation of the process variable value along with both it’s scaled and unscaled values. Just to the right of the PV bar chart is a Current Values region.

In the Current Values region, the values of the Setpoint, Sample Time, Gain, Integral time, and

Derivative time are displayed. The value of the Output is displayed in a horizontal bar chart along with its numerical value. To the right of the Current Values region is a graphical display.

The graphical display shows color coded plots of the PV, SP, and Output as a function of time.

The PV and SP share the same vertical scale which is located at the left hand side of the graph while the vertical scale for the output is located on the right hand side of the graph.

At the bottom left hand side of the screen is the Tuning Parameters (Minutes) region. Inside this region, the Gain, Integral Time and Derivative Time values are displayed. Radio buttons indicate whether the Current, Suggested or Manual values for Gain, Integral Time and Derivative Time are being displayed. You may click on the radio button to display any one of the three sources for these values. To modify the tuning parameters, click the manual radio button.

You can use the Update PLC button to transfer the displayed Gain, Integral Time and Derivative

Time values to the PLC for the PID loop that is being monitored. You can use the Start Auto Tune button to initiate an auto-tuning sequence. Once an auto-tuning sequence has started, the Start

Auto Tune button becomes a Stop Auto Tune button.

Directly underneath the graphical display is a Current PID selection region with a pull down menu that allows you to select the PID loop that you wish to monitor with the control panel.

In the Sampling Rate region you can select the graphical display sampling rate from 1 to 480 seconds per sample. You can edit the sampling rate, then use the Set Time button to apply the change. The time scale of the graph is automatically adjusted to best display the data at the new rate.

You can freeze the graph by pressing the Pause button. Press the Resume button to resume sampling data at the selected rate. To clear the graph, select Clear from the right-mouse button within the graph.

388

PID Auto-Tune and the PID Tuning Control Panel

Chapter 15

To the right of the Chart Options region is a Legend that identifies the colors used to plot the PV,

SP, and Output values.

Directly beneath the Current PID selection region is an area that is used to display information pertinent to the operation being performed.

The Advanced … button in the Tuning

Parameters region allows you to further configure parameters for the auto-tuning process. The advanced screen is shown below in Figure 15-3.

From the advanced screen you can check the box that will cause the auto-tuner to automatically determine the values for the Hysteresis and Deviation

(default setting) or you can enter the values for these fields that minimize the disturbance to your process during the auto-tune procedure.

In the Other Options region you can specify the initial output step size and enter the zero crossing watchdog timeout period.

Figure 15-3 Advanced Parameters

In the Dynamic Response Options region click the radio button that corresponds to the type of loop response that you wish to have for your process. Depending upon your process a fast response may have overshoot and would correspond to an underdamped tuning condition. A medium speed response may be on the verge of having overshoot and would correspond to a critically damped tuning condition. A slow response may not have any overshoot and would correspond to an overdamped tuning condition. A very slow response may not have overshoot and would correspond to a heavily overdamped tuning condition.

Once you have made the desired selections, click OK to return to the main screen of the PID

Tuning Control Panel.

Once you have completed the auto-tune sequence and have transferred the suggested tuning parameters to the

PLC, you can use the control panel to monitor your loop’s response to a step change in the setpoint. Figure 15-4 shows the loop’s response to a setpoint change (12000 to 14000) with the original tuning parameters (before running auto-tune).

Notice the overshoot and the long, damped ringing behavior of the process using the original tuning parameters.

Figure 15-4 Response to a Setpoint Change

389

S7-200 Programmable Controller System Manual

Figure 15-5 shows the loop’s response to the same setpoint change (12000 to

14000) after applying the values determined by the auto-tune process using the selection for a fast response.

Notice that for this process there is no overshoot, but there is just a little bit of ringing. If you wish to eliminate the ringing at the expense of the speed of response, you need to select a medium or a slow response and re-run the auto-tuning process.

Once you have a good starting point for the tuning parameters for your loop, you can use the control panel to tweak the parameters. Then you can monitor the loop’s response to a setpoint change. In this way you can fine tune your process for an optimum response in your application.

Figure 15-5 Response after Auto-Tune Process

390

Technical Specifications

In This Chapter

General Technical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

CPU Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Digital Expansion Modules Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Analog Expansion Modules Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Thermocouple and RTD Expansion Modules Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . .

EM 277 PROFIBUS—DP Module Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

EM 241 Modem Module Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

EM 253 Position Module Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(CP 243—1) Ethernet Module Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(CP 243—1 IT) Internet Module Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(CP 243—2) AS—Interface Module Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Optional Cartridges

I/O Expansion Cable

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

RS-232/PPI Multi-Master Cable and USB/PPI Multi-Master Cable

Input Simulators

. . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

392

396

405

412

424

438

450

452

458

460

463

465

466

467

471

391

S7-200 Programmable Controller System Manual

General Technical Specifications

Standards Compliance

The national and international standards listed below were used to determine appropriate performance specifications and testing for the S7-200 family of products. Table A-1 defines the specific adherence to these standards.

—

—

European Community (CE) Low Voltage Directive 73/23/EEC

EN 61131—2:2003 Programmable controllers — Equipment requirements

European Community (CE) EMC Directive 89/336/EEC

Electromagnetic emission standard

EN 61000—6—3:2001 residential, commercial, and light industry

EN 61000—6—4:2001 industrial environment

Electromagnetic immunity standards

EN 61000—6—2:2001 industrial environment

—

European Community ATEX Directive 94/9/EC

EN 60079—15 Type of protection ‘n’

ATEX Directive applies to CPUs and expansion modules with a rated voltage of 24 VDC. It does not apply to modules with AC power systems or Relay outputs.

After July 2009, the following applies:

—

—

EC Directive 2006/95EC (Low Voltage Directive) “Electrical Equipment Designed for Use within Certain Voltage Limits”

EN 61131—2:2007 Programmable controllers — Equipment requirements and tests

EC Directive 2004/108/EC (EMC Directive) “Electromagnetic Compatibility”

—

EN 61000—6—4:2007: Industrial Environment

EN 61131—2:2007: Programmable controllers — Equipment requirements and tests

EC Directive 94/9/EC (ATEX) “Equipment and Protective Systems Intending for Use in

Potential Explosive Atmospheres”

EN 60079—15:2005 Type of protection ‘n’

The CE Declaration of Conformity is held on file available to competent authorities at:

—

—

—

Siemens AG

IA AS RD ST PLC Amberg

Werner—von—Siemens—Str. 50

D92224 Amberg

Germany

Underwriters Laboratories, Inc.: UL 508 Listed (Industrial Control Equipment),

Registration number E75310

Canadian Standards Association: CSA C22.2 Number 142 (Process Control Equipment)

Factory Mutual Research: Class Number 3600, Class Number 3611, FM Class I, Division 2,

Groups A, B, C, & D Hazardous Locations, T4A and Class I, Zone 2, IIC, T4.

Tip

The SIMATIC S7-200 series meets the CSA standard.

The cULus logo indicates that the S7-200 has been examined and certified by Underwriters

Laboratories (UL) to standards UL 508 and CSA 22.2 No. 142.

392

Technical Specifications

Appendix A

Maritime Approvals

Agency Certificate Number

The S7-200 products are periodically submitted for special agency approvals related to specific markets and applications.

This table identifies the agency and certificate number that the S7-200 products have been approved for. Most S7-200 products in this manual have been approved for these special agency approvals. Consult your local Siemens representative if you need additional information related to the latest listing of exact approvals by part number.

Relay Electrical Service Life

Lloyds Register of Shipping

(LRS)

American Bureau of Shipping

(ABS)

Germanischer Lloyd (GL)

Det Norske Veritas (DNV)

Bureau Veritas (BV)

Nippon Kaiji Kyokai (NK)

Polski Rejestr

99 / 20018(E1)

01—HG20020—PDA

12 045 — 98 HH

A—8862

09051 / B0BV

A—534

TE/1246/883241/99

The typical performance data supplied by relay vendors is shown in Figure A-1. Actual performance may vary depending upon your specific application.

An external protection circuit that is adapted to the load will enhance the service life of the contacts.

2A Rating

10A Rating

4000

100,000

1000

500

300

250 VAC resistive load

30 VDC resistive load

10,000

1,000

230 VAC Inductive load according to

IEC 947—5—1 AC15 from 0A to 3A

24 VDC Inductive load according to

IEC 947—5—1 DC13 from 0A to 2A

Resistive 230 VAC load

Resistive 24 VDC load

100

100

250 VAC inductive load (p.f.=0.4)

30 VDC inductive load (L/R=7ms)

10

0 1 2 3 4 5

Rated Operating Current (A)

6

Figure A-1 Relay Electrical Service Life

7

Rated Operating Current (A)

Technical Specifications

All S7-200 CPUs and expansion modules conform to the technical specifications listed in

Table A-1.

Notice

When a mechanical contact turns on output power to the S7-200 CPU, or any digital expansion module, it sends a “1” signal to the digital outputs for approximately 50 microseconds. You must plan for this, especially if you are using devices which respond to short duration pulses.

393

S7-200 Programmable Controller System Manual

Table A-1 Technical Specifications

EN 60068—2—2, Test Bb, Dry heat and

EN 60068—2—1, Test Ab, Cold

EN 60068—2—30, Test Db, Damp heat

Environmental Conditions — Transport and Storage

—40

°

C to +70

°

C

25

°

C to 55

°

C, 95% humidity

EN 60068—2—14, Test Na, Temperature Shock —40

°

C to +70

°

C dwell time 3 hours, 2 cycles

EN 60068—2—32, Free fall 0.3 m, 5 times, product packaging

Ambient Temperature Range

(Inlet Air 25 mm below unit)

Atmospheric pressure

Concentration of contaminants

EN 60068—2—14, Test Nb, Temperature change

EN 60068—2—27 Mechanical shock

EN 60068—2—6 Sinusoidal vibration

Environmental Conditions — Operating

0

°

C to 55

°

C horizontal mounting, 0

°

C to 45

°

C vertical mounting

95% non-condensing humidity

1080 to 795 hPa (Corresponding to an altitude of —1000 to 2000 m)

S0

2

: < 0.5 ppm; H

2

S: < 0.1 ppm; RH < 60% non-condensing

5

°

C to 55

°

C, 3

°

C/minute

15 G, 11 ms pulse, 6 shocks in each of 3 axis

Panel mount:

DIN rail mount:

7.0 mm from 5 to 9 Hz; 2 G from 9 to 150 Hz

3.5 mm from 5 to 9 Hz; 1 G from 9 to 150 Hz

10 sweeps each axis, 1 octave/minute

EN 60529, IP20 Mechanical protection

Electromagnetic Compatibility — Immunity per EN61000—6—2

1

EN 61000—4—2 Electrostatic discharge 8 kV air discharge to all surfaces and communications port,

4 kV contact discharge to exposed conductive surfaces

EN 61000—4—3 Radiated electromagnetic field 10 V/m from 80—1000 MHz, 80% AM at 1kHz

3 V/m from 1.4—2.0 GHz, 80% AM at 1kHz

3

1 V/m from 2.0—2.7 GHz, 80% AM at 1kHz

3

EN 61000—4—4 Fast transient bursts

Protects against finger contact with high voltage as tested by standard probes.

External protection is required for dust, dirt, water, and foreign objects of < 12.5 mm in diameter.

EN 61000—4—5 Surge immunity

2 kV, 5 kHz with coupling network to AC and DC system power

2 kV, 5 kHz with coupling clamp to I/O

1 kV, 5 kHz with coupling clamp to communications

Power supply: 2 kV asymmetrical, 1 kV symmetrical

I/O 1 kV symmetrical

(24 VDC circuits require external surge protection)

EN 61000—4—6 Conducted disturbances

EN 61000—4—11 Voltage dips, short interruptions and voltage variations

VDE 0160 Non-periodic overvoltage

0.15 to 80 MHz, 10 V RMS, 80% AM at 1kHz

Residual voltage: 0% for 1 cycle, 40% for 12 cycles and 70% for 30 cycles @ 60Hz voltage jump at zero crossing

At 85 VAC line, 90

° phase angle, apply 390 V peak, 1.3 ms pulse

At 180 VAC line, 90

° phase angle, apply 750 V peak, 1.3 ms pulse

394

Technical Specifications

Appendix A

Table A-1 Technical Specifications, continued

Electromagnetic Compatibility — Conducted and Radiated Emissions per EN 61000—6—3

2 and EN 61000—6—4

EN 55011, Class A, Group 1, conducted

1

0.15 MHz to 0.5 MHz

0.5 MHz to 5 MHz

5 MHz to 30 MHz

< 79 dB (

< 73 dB (

< 73 dB (

µ

µ

µ

V) Quasi-peak; < 66 dB (

V) Quasi-peak; < 60 dB (

V) Quasi-peak; < 60 dB (

µ

µ

µ

V) Average

V) Average

V) Average

EN 55011, Class A, Group 1, radiated

1

30 MHz to 230 MHz

230 MHz to 1 GHz

40 dB (

47 dB (

µ

µ

V/m) Quasi-peak; measured at 10 m

V/m) Quasi-peak; measured at 10 m

EN 55011, Class B, Group 1, conducted

2

0.15 to 0.5 MHz

0.5 MHz to 5 MHz

5 MHz to 30 MHz

EN 55011, Class B, Group 1, radiated

2

30 MHz to 230 kHz

230 MHz to 1 GHz

< 66 dB (

µ

V) Quasi-peak decreasing with log frequency to 56 dB (

µ

V);

< 56 dB (

µ

V) Average decreasing with log frequency to 46 dB (

µ

V)

< 56 dB (

µ

V) Quasi-peak; < 46 dB (

µ

V) Average

< 60 dB (

µ

V) Quasi-peak; < 50 dB (

µ

V) Average

30 dB (

37 dB (

µ

µ

V/m) Quasi-peak; measured at 10 m

V/m) Quasi-peak; measured at 10 m

24 V/5 V nominal circuits

115/230 V circuits to ground

115/230 V circuits to 115/230 V circuits

115/230 V circuits to 24 V/5 V circuits

High Potential Isolation Test

500 VAC (type test of optical isolation boundaries)

1500 VAC routine test / 2500 VDC type test

1500 VAC routine test / 2500 VDC type test

1500 VAC routine test / 4242 VDC type test

1

2

3

Unit must be mounted on a grounded metallic frame with the S7-200 ground connection made directly to the mounting metal. Cables are routed along metallic supports.

Unit must be mounted in a grounded metal enclosure. AC input power line must be equipped with a EPCOS B84115—E—A30 filter or equivalent, 25 cm max.

wire length from filters to the S7-200. The 24 VDC supply and sensor supply wiring must be shielded.

Requirements apply after July 2009

395

S7-200 Programmable Controller System Manual

CPU Specifications

Table A-2 CPU Order Numbers

Order Number

6ES7 211—0AA23—0XB0

6ES7 211—0BA23—0XB0

6ES7 212—1AB23—0XB0

6ES7 212—1BB23—0XB0

6ES7 214—1AD23—0XB0

6ES7 214—1BD23—0XB0

6ES7 214—2AD23—0XB0

6ES7 214—2AS23—0XB0

6ES7 214—2BD23—0XB0

6ES7 216—2AD23—0XB0

6ES7 216—2BD23—0XB0

CPU Model

CPU 221

CPU 221

CPU 222

CPU 222

CPU 224

CPU 224

CPU 224XP

Power Supply

(Nominal)

24 VDC

120 to 240 VAC

24 VDC

120 to 240 VAC

24 VDC

120 to 240 VAC

24 VDC

CPU 224XPsi 24 VDC

CPU 224XP 120 to 240 VAC

CPU 226 24 VDC

CPU 226 120 to 240 VAC

Digital

Inputs

6 x 24 VDC

6 x 24 VDC

8 x 24 VDC

Digital

Outputs

4 x 24 VDC

4 x Relay

6 x 24 VDC

8 x 24 VDC 6 x Relay

14 x 24 VDC 10 x 24 VDC

14 x 24 VDC 10 x Relay

14 x 24 VDC 10 x 24 VDC

14 x 24 VDC 10 x 24 VDC

14 x 24 VDC 10 x Relay

24 x 24 VDC 16 x 24 VDC

24 x 24 VDC 16 x Relay

2

2

2

2

1

2

1

1

Comm

Ports

1

1

1

Analog

Inputs

No

No

No

No

No

No

2

2

2

No

No

Analog

Outputs

No

No

No

No

No

No

1

1

1

No

No

Table A-3 CPU General Specifications

Order Number Module Name and Description

6ES7 211—0AA23—0XB0

6ES7 211—0BA23—0XB0

CPU 221 DC/DC/DC 6 Inputs/ 4 Outputs

CPU 221 AC/DC/Relay 6 Inputs/ 4 Relays

6ES7 212—1AB23—0XB0 CPU 222 DC/DC/DC 8 Inputs/ 6 Outputs

6ES7 212—1BB23—0XB0 CPU 222 AC/DC/Relay 8 Inputs/ 6 Relays

6ES7 214—1AD23—0XB0 CPU 224 DC/DC/DC 14 Inputs/ 10 Outputs

6ES7 214—1BD23—0XB0 CPU 224 AC/DC/Relay14 Inputs/ 10 Relays

6ES7 214—2AD23—0XB0 CPU 224XP DC/DC/DC 14 Inputs/10 Outputs

6ES7 214—2AS23—0XB0 CPU 224XPsi DC/DC/DC 14 Inputs/10 Outputs

6ES7 214—2BD23—0XB0 CPU 224XP AC/DC/Relay 14 Inputs/10 Relays

6ES7 216—2AD23—0XB0 CPU 226 DC/DC/DC 24 Inputs/16 Outputs

6ES7 216—2BD23—0XB0 CPU 226 AC/DC/Relay 24 Inputs/16 Relays

Dimensions (mm)

(W x H x D)

90 x 80 x 62

90 x 80 x 62

90 x 80 x 62

90 x 80 x 62

120.5 x 80 x 62

120.5 x 80 x 62

140 x 80 x 62

140 x 80 x 62

140 x 80 x 62

196 x 80 x 62

196 x 80 x 62

Weight

270 g

310 g

270 g

310 g

360 g

410 g

390 g

390 g

440 g

550 g

660 g

Dissipation

3 W

6 W

5 W

7 W

7 W

10 W

8 W

8 W

11 W

11 W

17 W

VDC Available

+5 VDC +24 VDC

1

0 mA

0 mA

340 mA

180 mA

180 mA

180 mA

340 mA

660 mA

660 mA

660 mA

180 mA

280 mA

280 mA

280 mA

660 mA

660 mA

1000 mA

1000 mA

280 mA

280 mA

400 mA

400 mA

1

This is the 24 VDC sensor power that is available after the internal relay coil power and 24 VDC comm port power requirements have been accounted for.

Removable

Connector

No

No

No

No

Yes

Yes

Yes

Yes

Yes

Yes

Yes

396

Technical Specifications

Appendix A

Table A-4 CPU Specifications

CPU 221 CPU 222 CPU 224 CPU 224XP

CPU 224XPsi

CPU 226

Memory

User program size with run mode edit without run mode edit

User data

4096 bytes

4096 bytes

2048 bytes

8192 bytes

12288 bytes

8192 bytes

12288 bytes

16384 bytes

10240 bytes

16384 bytes

24576 bytes

10240 bytes

Backup (super cap)

(optional battery)

I/O

Digital I/O

Analog I/O

Digital I/O image size

Analog I/O image size

Max. expansion modules allowed

Max. intelligent modules allowed

Pulse Catch inputs

High-Speed Counters

Single phase

Two phase

Pulse outputs

50 hours typical (8 hours min. at 40

200 days typical

2 at 20 kHz

2 at 20 kHz (DC outputs only)

°

C)

6 inputs/4outputs 8 inputs/6 outputs none

256 (128 In/128 Out)

None

None

None

32 (16 In/16 Out)

2 modules

1

2 modules

1

8 6

4 counters total

4 at 30 kHz

100 hours typical (70 hours min. at 40

°

C)

200 days typical

14 inputs/10 outputs

64 (32 In/32 Out)

7 modules

1

7 modules

1

14

6 counters total

6 at 30 kHz

4 at 20 kHz

100 hours typical (70 hours min. at 40

200 days typical

14 inputs/10 outputs

2 inputs/1 output

6 counters total

4 at 30 kHz

2 at 200 kHz

3 at 20 kHz

1 at 100 kHz

2 at 100 kHz

(DC outputs only)

°

C)

24 inputs/16 outputs none

24

6 counters total

6 at 30 kHz

4 at 20 kHz

2 at 20 kHz

(DC outputs only)

General

Timers

Counters

Internal memory bits

Stored on power down

Timed interrupts

Edge interrupts

256 total timers; 4 timers (1 ms); 16 timers (10 ms); 236 timers (100 ms)

256 (backed by super capacitor or battery)

256 (backed by super capacitor or battery)

112 (stored to EEPROM)

2 with 1 ms resolution

4 up and/or 4 down

Analog adjustment

Boolean execution speed

Real Time Clock

Cartridge options

Communications Built-in

Ports (Limited Power)

PPI, MPI (slave) baud rates

Freeport baud rates

Max. cable length per segment

1 with 8 bit resolution

0.22

µ s per instruction

Optional cartridge

Memory, Battery, and Real Time Clock

2 with 8 bit resolution

Built-in

Memory and battery

1 RS—485 port

9.6, 19.2, 187.5 kbaud

1.2 kbaud to 115.2 kbaud

2 RS—485 ports

With isolated repeater: 1000 m up to 187.5 kbaud, 1200 m up to 38.4 kbaud

Without isolated repeater: 50 m

32 per segment, 126 per network Max. number of stations

Max. number of masters

Peer to Peer (PPI Master Mode)

32

Yes (NETR/NETW)

1

MPI connections 4 total, 2 reserved (1 for a PG and 1 for an OP)

You must calculate your power budget to determine how much power (or current) the S7-200 CPU can provide for your configuration. If the CPU power budget is exceeded, you may not be able to connect the maximum number of modules. See Appendix A for CPU and expansion module power requirements, and

Appendix B to calculate your power budget.

397

S7-200 Programmable Controller System Manual

Table A-5 CPU Power Specifications

Input Power

Input voltage

Input current

CPU 221

CPU 222

CPU 224

CPU 224XP

CPU 224XPsi

CPU 226

Inrush current

Isolation (field to logic)

Hold up time (loss of power)

Fuse (non-replaceable)

24 VDC Sensor Power

Sensor voltage (Limited Power)

Current limit

Ripple noise

Isolation (sensor to logic)

DC AC

20.4 to 28.8 VDC

CPU only at 24 VDC

80 mA

85 mA

110 mA

120 mA

120 mA

150 mA

12 A at 28.8 VDC

Not isolated

10 ms at 24 VDC

3 A, 250 V Slow Blow

Max. load at 24 VDC

450 mA

500 mA

700 mA

900 mA

900 mA

1050 mA

85 to 264 VAC (47 to 63 Hz)

CPU only

30/15 mA at 120/240 VAC

40/20 mA at 120/240 VAC

60/30 mA at 120/240 VAC

70/35 mA at 120/240 VAC

—

80/40 mA at 120/240 VAC

20 A at 264 VAC

1500 VAC

20/80 ms at 120/240 VAC

2 A, 250 V Slow Blow

Max. load

120/60 mA at120/240 VAC

140/70 mA at 120/240 VAC

200/100 mA at 120/240VAC

220/100 mA at 120/240 VAC

—

320/160 mA at 120/240VAC

L+ minus 5 V 20.4 to 28.8 VDC

1.5 A peak, thermal limit non-destructive (See Table A-3 for rated load.)

Derived from input power Less than 1 V peak-to-peak

Not isolated

Table A-6 CPU Digital Input Specifications

General 24 VDC Input (CPU 221, CPU 222,

CPU 224, CPU 226)

Sink/Source (IEC Type 1 Sink) Type

Rated voltage

Max. continuous permissible voltage

Surge voltage

Logic 1 (min.)

24 VDC at 4 mA typical

30 VDC

35 VDC for 0.5 s

15 VDC at 2.5 mA

24 VDC Input (CPU 224XP, CPU 224XPsi)

Sink/Source (IEC Type 1 Sink, except I0.3 to I0.5)

24 VDC at 4 mA typical

Logic 0 (max.) 5 VDC at 1 mA

15 VDC at 2.5 mA (I0.0 to I0.2 and I0.6 to I1.5)

4 VDC at 8 mA (I0.3 to I0.5)

5 VDC at 1 mA (I0.0 to I0.2 and I0.6 to I1.5)

1 VDC at 1 mA (I0.3 to I0.5)

Input delay

Connection of 2 wire proximity sensor (Bero)

Permissible leakage current (max.)

Isolation (field to logic)

Optical (galvanic)

Isolation groups

High Speed Counter (HSC) input rate

HSC Inputs

All HSC

All HSC

HC4, HC5 on CPU 224XP and CPU 224XPsi only

Inputs on simultaneously

Selectable (0.2 to 12.8 ms)

1 mA

Yes

500 VAC for 1 minute

See wiring diagram

Logic 1 Level

15 to 30 VDC

15 to 26 VDC

>

4 VDC

Single phase

20 kHz

30 kHz

200 kHz

Two phase

10 kHz

20 kHz

100 kHz

All

1

Cable length (max.)

Shielded

Unshielded

500 m normal inputs, 50 m HSC inputs

1

300 m normal inputs

Shielded twisted pair is recommended for HSC inputs.

All

CPU 224XP AC/DC/RELAY only:

All at 55

°

C with DC inputs at 26 VDC max.

All at 50

°

C with DC inputs at 30 VDC max.

398

Technical Specifications

Appendix A

Table A-7 CPU Digital Output Specifications

General 24 VDC Output

(CPU 221, CPU 222,

CPU 224, CPU 226)

Solid State-MOSFET (Sourcing)

24 VDC Output

(CPU 224XP)

24 VDC Output

(CPU 224XPsi)

Relay Output

Type

Rated voltage

Voltage range

24 VDC

20.4 to 28.8 VDC

24 VDC

5 to 28.8 VDC (Q0.0 to

Q0.4)

20.4 to 28.8 VDC (Q0.5 to

Q1.1)

Solid State-MOSFET

(Sinking)

24 VDC

5 to 28.8 VDC

Dry contact

24 VDC or 250 VAC

5 to 30 VDC or 5 to 250

VAC

Surge current (max.) 8 A for 100 ms 5 A for 4 s @ 10% duty cycle

-Logic 1 (min.) 20 VDC at maximum current

L+ minus 0.4 V at max.

current

External Voltage Rail minus 0.4V with 10K pullup to External Voltage

Rail

1M + 0.4V at max. load Logic 0 (max.)

Rated current per point (max.)

Rated current per common (max.)

Leakage current (max.)

Lamp load (max.)

Inductive clamp voltage

0.1 VDC with 10 K

Ω

Load

0.75 A

6 A 3.75 A

10

µ

A

5 W

L+ minus 48 VDC, 1 W dissipation

7.5 A

—

2.0 A

10 A

—

30 W DC; 200 W AC

2, 3

-1M +48 VDC, 1 W dissipation

1

2

3

On State resistance (contact)

Isolation

Optical (galvanic, field to logic)

Logic to contact

Resistance (logic to contact)

Isolation groups

Delay (max.)

Off to on (

µ s)

On to off (

µ s)

0.3

Ω typical (

0.6 Ω

500 VAC for 1 minute

—

—

See wiring diagram max.) 0.2

—

Ω

(max. when new)

1500 VAC for 1 minute

100 M

Ω

See wiring diagram

Switching

Pulse frequency (max.)

Lifetime mechanical cycles

Lifetime contacts

Outputs on simultaneously

Connecting two outputs in parallel

Cable length (max.)

Shielded

Unshielded

2

µ s (Q0.0, Q0.1),

15

µ s (all other)

10

µ s (Q0.0, Q0.1), 130

µ s

(all other)

—

20 kHz

—

1

(Q0.0 and Q0.1)

0.5

1.5

µ

µ s (Q0.0, Q0.1), 15

µ s (Q0.0, Q0.1), 130 s (all other)

µ s (all other)

—

—

—

10 ms

100 kHz

1

(Q0.0 and Q0.1) 100 kHz

1

(Q0.0 and Q0.1) 1 Hz

—10,000,000 (no load)

—

All at 55

°

C (horizontal), All at 45

°

C (vertical)

Yes, only outputs in same group

-100,000 (rated load)

No

500 m

150 m

Depending on your pulse receiver and cable, an additional external load resistor (at least 10% of rated current) may improve pulse signal quality and noise immunity.

Relay lifetime with a lamp load will be reduced by 75% unless steps are taken to reduce the turn-on surge below the surge current rating of the output.

Lamp load wattage rating is for rated voltage. Reduce the wattage rating proportionally for voltage being switched (for example 120 VAC — 100 W).

Warning

When a mechanical contact turns on output power to the S7-200 CPU, or any digital expansion module, it sends a “1” signal to the digital outputs for approximately 50 microseconds.

This could cause unexpected machine or process operation which could result in death or serious injury to personnel, and/or damage to equipment.

You must plan for this, especially if you are using devices which respond to short duration pulses.

399

S7-200 Programmable Controller System Manual

Table A-8 CPU 224XP and CPU 224XPsi Analog Input Specifications

General

Number of inputs

Analog input type

Voltage range

Data word format, full scale range

DC Input impedance

Maximum input voltage

Resolution

LSB value

Isolation

Accuracy

1

Worst case 0

° to 55

°

C

Typical 25

°

C

Repeatability

Analog to digital conversion time

Conversion type

Step response

Noise rejection

2 points

Single-ended

±

10 V

—32,000 to +32,000

> 100

K

Ω

30 VDC

11 bits plus 1 sign bit

4.88 mV

None

±

2.5% of full scale

±

1.0% of full scale

±

0.05% of full scale

125 msec

Sigma Delta

250 ms max.

—20 dB @ 50 Hz typical

Analog Input (CPU 224XP, CPU 224XPsi)

1

Analog input accuracy may deviate up to +/—10% of full scale when subjected to severe RF interferences such as specified in the product standard

EN 61131—2:2007.

Table A-9 CPU 224XP and CPU 224XPsi Analog Output Specifications

General

Number of outputs

Signal range

Voltage

Current

Data word format, full range

Date word format, full scale

Resolution, full range

LSB value

Voltage

Current

Isolation

Accuracy

Worst case, 0

° to 55

°

C

Voltage output

Current output

Typical 25

°

C

Voltage output

Current output

Settling time

Voltage output

Current output

Maximum output drive

Voltage output

Current output

1 point

0 to 10 V (Limited Power)

0 to 20 mA (Limited Power)

0 to +32767

0 to +32000

12 bits

2.44 mV

4.88

µ

A none

±

2% of full-scale

±

3% of full-scale

±

1% of full-scale

±

1% of full-scale

<

50

µ

S

<

100

µ

S

≥

5000

Ω minimum

≤

500

Ω maximum

Analog Output (CPU 224XP, CPU 224XPsi)

400

Technical Specifications

Appendix A

Wiring Diagrams

24 VDC Input

Used as Sinking Inputs

+

1M .0

.1 .2 .3

24 VDC Output

(Sourcing)

+

1M 1L+ .0

.1

.2

+

24 VDC Input

Used as Sourcing Inputs

1M .0

.1 .2 .3

+

24 VDC Output

(Sinking)

1M .0

.1

.2

CPU 224 XP and CPU 224XPsi

Analog Input/Output

—

+

+

—

M I V M A+ B+

Output Inputs

Relay Output

N(—)

L(+)

1L .0 .1 .2

Figure A-2 CPU Inputs and Outputs

+

CPU 221 DC/DC/DC

(6ES7 211—0AA23—0XB0)

24 VDC Power

+

N(—)

L(+)

M L+ 0.0 0.1 0.2 0.3

1M 0.0 0.1 0.2 0.3 2M 0.4 0.5

M L+ DC

M L+

CPU 221 AC/DC/Relay

(6ES7 211—0BA23—0XB0)

120/240 VAC Power

N(—)

L(+)

1L 0.0 0.1 0.2

2L 0.3

1M 0.0

0.1 0.2 0.3 2M 0.4 0.5

N L1 AC

M L+

+ +

Figure A-3 CPU 221 Wiring Diagrams

24 VDC

Sensor

Power

Output

+ +

24 VDC

Sensor

Power

Output

401

S7-200 Programmable Controller System Manual

+

+

CPU 222 DC/DC/DC

(6ES7 212—1AB23—0XB0)

24 VDC Power

+

M L+ 0.0 0.1 0.2 0.3

0.4 0.5

M L+ DC

1M 0.0 0.1 0.2 0.3 2M 0.4 0.5

0.6 0.7

M L+

N(—)

L(+)

CPU 222 AC/DC/Relay

(6ES7 212—1BB23—0XB0)

N(—)

120/240 VAC Power

L(+)

1L 0.0 0.1 0.2

2L 0.3 0.4

0.5

N L1

1M 0.0

0.1 0.2 0.3 2M 0.4 0.5 0.6 0.7

M L+

AC

+

+

24 VDC

Sensor

Power

Output

+

CPU 224 DC/DC/DC

(6ES7 214—1AD23—0XB0)

+

+

24 VDC Power

+

24 VDC

Sensor

Power

Output

1M 1L+ 0.0 0.1 0.2 0.3

0.4 2M 2L+ 0.5 0.6 0.7 1.0 1.1

M L+ DC

1M 0.0 0.1 0.2 0.3 0.4 0.5

0.6 0.7

2M 1.0 1.1 1.2 1.3 1.4 1.5

M L+

N(—)

L(+)

+

+

N(—)

CPU 224 AC/DC/Relay

(6ES7 214—1BD23—0XB0)

N(—)

L(+) L(+)

24 VDC Sensor

Power Output

120/240 VAC Power

1L 0.0 0.1 0.2 0.3

2L 0.4

0.5 0.6

3L 0.7 1.0 1.1

N L1 AC

1M 0.0 0.1 0.2 0.3 0.4 0.5

0.6 0.7

2M 1.0 1.1 1.2 1.3 1.4 1.5

M L+

+

Figure A-4 CPU 222 and CPU 224 Wiring Diagrams

+ 24 VDC Sensor

Power Output

402

Technical Specifications

Appendix A

CPU 224XP Analog I/O

—

+

+

—

+

CPU 224XP DC/DC/DC (6ES7 214—2AD23—0XB0)

24 VDC Power

+ +

M I V M A+ B+

1M 1L+ 0.0 0.1 0.2 0.3

0.4 2M

2L+ 0.5 0.6 0.7 1.0 1.1

M L+ DC

1M 0.0 0.1 0.2 0.3 0.4 0.5

0.6 0.7

2M 1.0 1.1 1.2 1.3 1.4 1.5

M L+

+ +

24 VDC Sensor

Power Output

CPU 224XPsi Analog I/O

—

+

+

—

+

CPU 224XPsi DC/DC/DC (6ES7 214—2AS23—0XB0)

24 VDC Power

+

M I V M A+ B+

1M 0.0 0.1 0.2 0.3

0.4

0.5 0.6 0.7 1.0 1.1

M L+ DC

1M 0.0 0.1 0.2 0.3 0.4 0.5

0.6 0.7

2M 1.0 1.1 1.2 1.3 1.4 1.5

M L+

+

+

24 VDC Sensor

Power Output

CPU 224XP Analog I/O

—

+

+

—

N(—)

L(+)

CPU 224XP AC/DC/Relay (6ES7 214—2BD23—0XB0)

N(—)

L(+)

N(—)

L(+)

120/240 VAC Power

M I V M A+ B+

1L 0.0 0.1 0.2 0.3

2L 0.4

0.5 0.6

3L 0.7 1.0 1.1

N L1 AC

1M 0.0 0.1 0.2 0.3 0.4 0.5

0.6 0.7

2M 1.0 1.1 1.2 1.3 1.4 1.5

M L+

+

Figure A-5 CPU 224XP Wiring Diagrams

+ 24 VDC Sensor

Power Output

403

S7-200 Programmable Controller System Manual

+

CPU 226 DC/DC/DC (6ES7 216—2AD23—0XB0)

+ +

1.1

1.2 1.3 1.4

+ + + +

CPU 226 AC/DC/Relay (6ES7 216—2BD23—0XB0)

N(—)

L(+)

120/240 VAC

Power

1L 0.0 0.1 0.2 0.3

2L 0.4 0.5 0.6

0.7 1.0

3L 1.1 1.2 1.3 1.4 1.5 1.6 1.7

N L1 AC

1M 0.0 0.1 0.2 0.3 0.4 0.5 0.6 0.7

1.0 1.1 1.2 1.3 1.4

2M 1.5 1.6 1.7 2.0 2.1 2.2 2.3 2.4

2.5 2.6 2.7 M L+

24 VDC

Power

Output

+ +

Figure A-6 CPU 226 Wiring Diagrams

Table A-10 Pin Assignments for the S7-200 Communications Port (Limited Power)

Connector Pin Number PROFIBUS Signal Port 0/Port 1

1 Shield Chassis ground

Pin 1

Pin 5

5

6

7

2

3

4

24 V Return

RS-485 Signal B

Request-to-Send

5 V Return

+5 V

+24 V

8

9

RS-485 Signal A

Not applicable

Connector shell Shield

Logic common

RS-485 Signal B

RTS (TTL)

Logic common

+5 V, 100

Ω series resistor

+24 V

RS-485 Signal A

10-bit protocol select (input)

Chassis ground

24 VDC

Sensor

Power

Output

404

Technical Specifications

Appendix A

Digital Expansion Modules Specifications

Table A-11 Digital Expansion Modules Order Numbers

Order Number Expansion Model

6ES7 221—1BF22—0XA0

6ES7 221—1EF22—0XA0

6ES7 221—1BH22—0XA0

6ES7 222—1BD22—0XA0

6ES7 222—1HD22—0XA0

6ES7 222—1BF22—0XA0

6ES7 222—1HF22—0XA0

6ES7 222—1EF22—0XA0

6ES7 223—1BF22—0XA0

6ES7 223—1HF22—0XA0

6ES7 223—1BH22—0XA0

6ES7 223—1PH22—0XA0

6ES7 223—1BL22—0XA0

6ES7 223—1PL22—0XA0

6ES7 223—1BM22—0XA0

6ES7 223—1PM22—0XA0

EM 221 Digital Input 8 x 24 VDC

EM 221 Digital Input 8 x 120/230 VAC

EM 221 Digital Input 16 x 24 VDC

EM 222 Digital Output 4 x 24 VDC—5A

EM 222 Digital Output 4 x Relays—10A

EM 222 Digital Output 8 x 24 VDC

EM 222 Digital Output 8 x Relays

EM 222 Digital Output 8 x 120/230 VAC

EM 223 24 VDC Digital Comb 4 Inputs/4 Outputs

EM 223 24 VDC Digital Comb 4 Inputs/4 Relay Outputs

EM 223 24 VDC Digital Comb 8 Inputs/8 Outputs

EM 223 24 VDC Digital Comb 8 Inputs/8 Relay Outputs

EM 223 24 VDC Digital Comb 16 Inputs/16 Outputs

EM 223 24 VDC Digital Comb 16 Inputs/16 Relay Outputs

EM 223 24 VDC Digital Comb 32 Inputs/32 Outputs

EM 223 24 VDC Digital Comb 32 Inputs/32 Relay Outputs

Digital Inputs

—

—

—

—

8 x 24 VDC

8 x 120/230 VAC

16 x 24 VDC

—

4 x 24 VDC

4 x 24 VDC

8 x 24 VDC

8 x 24 VDC

16 x 24 VDC

16 x 24 VDC

32 x 24 VDC

32 x 24 VDC

Digital Outputs

—

—

—

4 x 24 VDC—5A

4 x Relay—10A

8 x 24 VDC—0.75A

8 x Relay—2A

8 x 120/230 VAC

4 x 24 VDC—0.75A

4 x Relay—2A

8 x 24 VDC—0.75A

8 x Relay—2A

16 x 24 VDC—0.75A

16 x Relay—2A

32 x 24 VDC—0.75 A

32 x Relay—2 A

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Removable

Connector

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Table A-12 Digital Expansion Modules General Specifications

Order Number Module Name and Description

Dimensions (mm)

(W x H x D)

6ES7 221—1BF22—0XA0 EM 221 DI 8 x 24 VDC 46 x 80 x 62

6ES7 221—1EF22—0XA0 EM 221 DI 8 x 120/230 VAC 71.2 x 80 x 62

6ES7 221—1BH22—0XA0

6ES7 222—1BD22—0XA0

6ES7 222—1HD22—0XA0

6ES7 222—1BF22—0XA0

6ES7 222—1HF22—0XA0

6ES7 222—1EF22—0XA0

6ES7 223—1BF22—0XA0

6ES7 223—1HF22—0XA0

EM 221 DI 16 x 24 VDC

EM 222 DO 4 x 24 VDC—5A

EM 222 DO 4 x Relays—10A

EM 222 DO 8 x 24 VDC

EM 222 DO 8 x Relays

EM 222 DO 8 x 120/230 VAC

EM 223 24 VDC 4 In/4 Out

EM 223 24 VDC 4 In/4 Relays

71.2 x 80 x 62

46 x 80 x 62

46 x 80 x 62

46 x 80 x 62

46 x 80 x 62

71.2 x 80 x 62

46 x 80 x 62

46 x 80 x 62

6ES7 223—1BH22—0AX0

6ES7 223—1PH22—0XA0

6ES7 223—1BL22—0XA0

6ES7 223—1PL22—0XA0

EM 223 24 VDC 8 In/8 Out

EM 223 24 VDC 8 In/8 Relays

EM 223 24 VDC 16 In/16 Out

EM 223 24 VDC 16 In/16 Relays

6ES7 223—1BM22—0XA0

6ES7 223—1PM22—0XA0

EM 223 24 VDC 32 In/32 Out

EM 223 24 VDC 32 In/32 Relay

71.2 x 80 x 62

71.2 x 80 x 62

137.3 x 80 x 62

137.3 x 80 x 62

196 x 80 x 62

196 x 80 x 62

Weight

150 g

160 g

160 g

120 g

150 g

150 g

170 g

165 g

160 g

170 g

200 g

300 g

360 g

400 g

500 g

580 g

Dissipation

2 W

4 W

2 W

2 W

2 W

3 W

3 W

3 W

4 W

2 W

3 W

3 W

6 W

6 W

9 W

13 W

VDC Requirements

+5 VDC +24 VDC

30 mA ON: 4 mA/input

30 mA —

70 mA

40 mA

30 mA

50 mA

ON: 4 mA/input

—

ON: 20 mA/output

—

40 mA

110 mA

40 mA

ON: 9 mA/output

—

ON: 4 mA/input

40 mA

80 mA

ON: 9 mA/output,

4 mA/input

ON: 4 mA/input

80 mA ON: 9 mA/output,

4 mA/input

160 mA ON: 4 mA/input

150 mA ON: 9 mA/output,

4 mA/input

240 mA ON: 4 mA/input

205 mA ON: 9 mA/output

4 mA/input

405

S7-200 Programmable Controller System Manual

Table A-13 Digital Expansion Modules Input Specifications

General

Type

Rated voltage

Maximum continuous permissible voltage

Surge voltage (max.)

Logic 1 (min.)

Logic 0 (max.)

Input delay (max.)

Connection of 2 wire proximity sensor

(Bero)

Permissible leakage current (max.)

Isolation

Optical (galvanic, field to logic)

Isolation groups

Inputs on simultaneously

Cable length (max.)

Shielded

Unshielded

24 VDC Input

Sink/Source (IEC Type 1 sink)

24 VDC at 4 mA

30 VDC

35 VDC for 0.5 s

15 VDC at 2.5 mA

5 VDC at 1 mA

4.5 ms

1 mA

500 VAC for 1 minute

See wiring diagram

All at 55

°

C (horizontal), All on at 45

°

C (vertical)

500 m

300 m

IEC Type I

120/230 VAC Input (47 to 63 HZ)

120 VAC at 6 mA or 230 VAC at 9 mA nominal

264 VAC

—

79 VAC at 2.5 mA

20 VAC or 1 mA AC

15 ms

1 mA AC

1500 VAC for 1 minute

1 point

500 m

300 m

+

24 VDC Input

Used as Sinking Inputs

+

24 VDC Input

Used as Sourcing Inputs

120/230 AC Input

L1

N

1M .0

.1 .2 .3

1M .0

.1 .2

.3

0N 0N .0

Figure A-7 S7-200 Digital Expansion Modules Inputs

406

Technical Specifications

Appendix A

Table A-14 Digital Expansion Modules Output Specifications

24 VDC Output Relay Output

Type

Rated voltage

Voltage range

24 VDC coil power voltage range

Surge current (max.)

—

0.75 A

24 VDC

20.4 to 28.8 VDC

8 A for 100 ms 30 A

5 A

Solid state-MOSFET (Sourcing)

2 A

Dry contact

24 VDC or 250 VAC

5 to 30 VDC or

5 to 250 VAC

20.4 to 28.8 VDC

—

—

5 A for 4 s @ 10% duty cycle

10 A

12 to 30 VDC or

12 to 250 VAC

15 A for 4 s @

10% duty cycle

Triac, zero-cross turn-on

120/230 VAC

40 to 264 VAC

(47 to 63 Hz)

—

5 A rms for 2 AC cycles

Logic 1 (min.)

Logic 0 (max.)

20 VDC

0.1 VDC with

10 K

Ω

Load

0.75 A

0.2 VDC with 5 K

Ω

Load

5 A

L1 (—0.9 V rms)

—

Rated current per point (max.)

Rated current per common (max.)

Leakage current (max.)

10 A

10

µ

A

5 A

30

µ

A

2.00 A

10 A

—

10 A resistive;

2 A DC inductive;

3 A AC inductive

10 A

0.5 A AC

1

0.5 A AC

1.1 mA rms at 132 VAC and 1.8 mA rrms at 264

VAC

60 W Lamp load (max.)

Inductive clamp voltage

On state resistance (contact)

5 W

L+ minus 48 V

0.3

Ω typical

(0.6

Ω max.)

50 W

L+ minus 47 V

0.05

Ω max.

2

30 W DC/

200 W AC

4,5

—

0.2

Ω max. when new

100 W DC/

1000 W AC

0.1

Ω max.

when new

—

410

Ω max. when load current is less than

0.05A

Isolation

Optical (galvanic, field to logic)

Coil to logic

Coil to contact

Resistance (coil to contact)

Isolation groups

Delay Off to On/On to Off (max.)

Switching (max.)

—

—

500 VAC for 1 minute

—

See wiring diagram

50

µ s / 200

µ s

—

500

µ s

—

—

None

1500 VAC for 1 minute

100 M

Ω min. when new

See wiring diagram

—

10 ms

—

15 ms

—

—

1500 VAC for 1minute

—

1 point

0.2 ms + 1/2 AC cycle

—

Switching frequency (max.)

Lifetime mechanical cycles

Lifetime contacts

Output on simultaneously

—

—

—

All at 55

°

C (horizontal), All at 45

°

1 Hz

10,000,000 (no load)

100,000 (rated load)

C (vertical)

30,000,000

(no load)

30,000

(rated load)

All at 55

°

C

(horizontal) with

20A max. module current. All at

45

°

C (vertical) with

20A max. module current

5.

All at 40

°

C (horizontal) with

10A per point

10 Hz

—

—

All at 55

All at 45

°

°

C (horizontal),

C (vertical)

4

5

1

Connecting two outputs in parallel

Cable length (max.)

Shielded

Unshielded

2

3

Yes, only outputs in same group

500 m

150 m

No

500 m

150 m

No

500 m

150 m

Load current must be full wave AC and must not be half-wave because of the zero-cross circuitry. Minimum load current is 0.05 A AC. With a load current between 5 mA and 50 mA AC, the current can be controlled, but there is an additional voltage drop due to series resistance of 410 Ohms.

If the output overheats due to excessive inductive switching or abnormal conditions, the output point may turn off or be damaged. The output could overheat or be damaged if the output is subjected to more than 0.7 J of energy switching an inductive load off. To eliminate the need for this limitation, a suppression circuit as described in Chapter 3 can be added in parallel with the load. These components need to be sized properly for the given application.

The EM 222 DO 4 x Relay has a different FM rating than the rest of the S7-200. This module has a T4 rating, instead of T4A for FM Class I, Division Groups

A, B, C, and D Hazardous Locations.

Relay lifetime with a lamp load will be reduced by 75% unless steps are taken to reduce the turn-on surge below the surge current rating of the output.

Lamp load wattage rating is for rated voltage. Reduce the wattage rating proportionally for voltage being switched (for example 120 VAC — 100 W).

Warning

When a mechanical contact turns on output power to the S7-200 CPU, or any digital expansion module, it sends a “1” signal to the digital outputs for approximately 50 microseconds.

This could cause unexpected machine or process operation which could result in death or serious injury to personnel, and/or damage to equipment.

You must plan for this, especially if you are using devices which respond to short duration pulses.

407

S7-200 Programmable Controller System Manual

24 VDC Output

+

1M 1L+ .0

.1

.2

N(—)

L(+)

Relay Output

1L .0 .1 .2

120/230 AC Output

N

L1

0L 0L .0

Figure A-8 S7-200 Digital Expansion Modules Outputs

Wiring Diagrams

EM 223 24 VDC

Digital Combination

4 Inputs/ 4 Outputs

(6ES7 223—1BF22—0AX0)

+

EM 223 24 VDC

Digital Combination

4 Inputs/4 Relay Outputs

(6ES7 223—1HF22—0XA0)

N(—)

L(+)

EM 222

Digital Output

4 x Relays—10A

(6ES7 222 1HD22—0XA0)

N(—)

L(+)

N(—)

L(+)

1M 1L+ .0

.1

.2

.3

1M .0

.1

.2

.3

1L .0

.1

.2

.3

M L+ 1M .0

.1

.2

.3

+

24 VDC

Coil

Power

+ +

Figure A-9 Wiring Diagrams for EM 222 and EM 223 Expansion Modules

24 VDC

Coil

Power

+

M L+

0L .0

1L .1

2L .2

3L .3

L

(+)

N

(—)

L

(+)

N

(—)

408

EM 221 Digital Input 8 x 24 VDC

(6ES7 221—1BF22—0XA0)

+

1M .0

.1

.2

.3

2M .4

.5

.6

.7

+

EM 221 Digital Input 8 x AC 120//230 V

(6ES7 221—1EF22—0XA0)

0N 0N .0

1N 1N .1 2N 2N .2

3N 3N .3

4N .4

5N 5N .5

6N 6N .6

7N 7N .7

Technical Specifications

Appendix A

EM 221 Digital Input 16 x 24 VDC (6ES7 221—1BH22—0XA0)

+ +

1M .0

.1

.2

.3

2M .4

.5

.6

.7

3M .0

.1

.2

.3

4M .4

.5

.6

.7

+

+

N

EM 222 Digital Output 8 x AC 120/230 V

(6ES7 222—1EF22—0AX0)

L1

0L 0L .0

1L 1L .1

2L 2L .2

3L 3L .3

4L .4

5L 5L .5

6L 6L .6

7L 7L .7

EM 222 Digital Output 8 x 24 VDC

(6ES7 222—1BF22—0XA0)

+

1M 1L+ .0 .1 .2 .3

2M 2L+ .4 .5 .6 .7

EM 222 Digital Output 8 x Relays

(6ES7 222 1HF22—0XA0)

N(—)

L(+)

EM 222 Digital Output 4 x 24 VDC—5A

(6ES7 222—1BD22—0XA0)

+

+

1L .0

.1

.2

.3

M L+ 2L .4

.5

.6

.7

+

24 VDC Coil power

+

L

(+)

N

(—)

Figure A-10 Wiring Diagrams for EM 221 and EM 222 Expansion Modules

0M 0L+ .0

1M 1L+ .1

2M 2L+ .2 3M 3L+ .3

+

+

409

S7-200 Programmable Controller System Manual

EM 223 24 VDC Digital Combination 8 Inputs/8 Outputs

(6ES7 223—1BH22—0XA0)

+ +

EM 223 24 VDC Digital Combination 8 Inputs/8 Relay Outputs (6ES7 223—1PH22—0XA0)

N(—)

N(—)

L(+)

L(+)

1M 1L+ .0

.1

.2

.3 2M 2L+ .4

.5

.6

.7

1M .0

.1

.2

.3 2M .4

.5

.6

.7

+

1L .0

.1

.2

.3 2L .4

.5

.6

.7

M L+ 1M .0

.1

.2

.3 2M .4

.5

.6

.7

+

+

24VDC

Coil

Power

+ +

EM 223 24 VDC Digital Combination 16 Inputs/16 Outputs

(6ES7 223—1BL22—0XA0)

+

+

+

1M 1L+ .0

.1

.2

.3

2M 2L+ .4

.5

.6

.7

1M .0

.1

.2

.3

.4

.5

.6

.7

3M 3L+ .0

.1

.2

.3

.4

.5

.6

.7

2M .0

.1

.2

.3

.4

.5

.6

.7

+ +

N(—)

L(+)

EM 223 24 VDC Digital Combination 16 Inputs/16 Relay Outputs

(6ES7 223—1PL22—0XA0)

N(—) N(—) N(—)

L(+) L(+) L(+)

1L .0

.1 .2 .3

M L+

2L .4 .5 .6 .7

1M .0 .1 .2 .3 .4 .5 .6 .7

3L .0

.1 .2 .3

4L .4 .5 .6 .7

2M .0

.1 .2 .3 .4 .5 .6 .7

24VDC

Coil

Power

+ +

Figure A-11 Wiring Diagrams for EM 223 Expansion Modules

+

410

Technical Specifications

Appendix A

+

EM 223 24 VDC Digital Combination 32 Inputs/32 Outputs

(6ES7 223—1BM22—0XA0)

+

1M 1L+ 0.0 0.1 0.2 0.3

0.4 0.5

0.6 0.7 1.0 1.1

1.2 1.3 1.4

1.5

1.6

1.7

2M 2L+ 2.0

2.1 2.2

2.3 2.4 2.5 2.6 2.7 3.0 3.1 3.2

3.3

3.4 3.5

3.6 3.7

1M 0.0

0.1 0.2 0.3

0.4

0.5

0.6 0.7

1.0

1.1 1.2 1.3

1.4

1.5 1.6

1.7

2M 2.0 2.1 2.2 2.3

2.4 2.5 2.6

2.7 3.0

3.1 3.2

3.3

3.4 3.5

3.6 3.7

+

N(-)

L(+)

+

EM 223 24 VDC Digital Combination 32 Inputs/32 Relay Outputs

(6ES7 223—1PM22—0XA0)

N(-)

N(-)

L(+)

L(+)

1L 0.0 0.1 0.2 0.3

0.4 0.5

0.6 0.7 1.0 1.1

1.2 2L 1.3

1.4

1.5

1.6

1.7

2.0

2.1

2.2 2.3

2.4 2.5 3L 2.6 2.7 3.0 3.1 3.2

3.3

3.4 3.5

3.6 3.7

M L+ 1M 0.0

0.1 0.2 0.3

0.4

0.5

0.6 0.7

1.0

1.1 1.2 1.3

1.4

1.5 1.6

1.7 2M 2.0 2.1 2.2 2.3

2.4 2.5 2.6

2.7 3.0

3.1 3.2

3.3

3.4 3.5

3.6 3.7

+

+ +

Figure A-12 Wiring Diagrams for EM 223 Expansion Modules

411

S7-200 Programmable Controller System Manual

Analog Expansion Modules Specifications

Table A-15 Analog Expansion Modules Order Numbers

Order Number Expansion Model

6ES7 231—0HC22—0XA0

6ES7 231—0HF22—0XA0

6ES7 232—0HB22—0XA0

EM 231 Analog Input, 4 Inputs

EM 231 Analog Input, 8 Inputs

EM 232 Analog Output, 2 Outputs

6ES7 232—0HD22—0XA0

6ES7 235—0KD22—0XA0

EM 232 Analog Output, 4 Outputs

EM 235 Analog Combination 4 Inputs/1 Output

1

The CPU reserves 2 analog output points for this module.

EM Inputs

4

8

—

—

4

EM Outputs

—

—

2

4

1

1

Removable

Connector

No

No

No

No

No

Table A-16 Analog Expansion Modules General Specifications

Order Number

Module Name and

Description

Dimensions (mm)

(W x H x D)

6ES7 231—0HC22—0XA0 EM 231 Analog Input, 4 Inputs 71.2 x 80 x 62

6ES7 231—0HF22—0XA0

6ES7 232—0HB22—0XA0

6327 232—0HD22—0XA0

6ES7 235—0KD22—0XA0

EM 231 Analog Input, 8 Inputs 71.2 x 80 x 62

EM 232 Analog Output,

2 Outputs

46 x 80 x 62

EM 232 Analog Output, 4

Outputs

EM 235 Analog Combination

4 Inputs/1 Output

71.2 x 80 x 62

71.2 x 80 x 62

Weight

183 g

190 g

148 g

190 g

186 g

Dissipation

2 W

2 W

2 W

2 W

2 W

+5 VDC

VDC Requirements

+24 VDC

20 mA 60 mA

20 mA

20 mA

20 mA

30 mA

60 mA

70 mA (with both outputs at 20 mA)

100 MA (with all outputs at 20 mA)

60 mA (with output at 20 mA)

Table A-17 Analog Expansion Modules Input Specifications

Data word format

Bipolar, full-scale range

Unipolar, full-scale range

DC Input impedance

Input filter attenuation

Maximum input voltage

Maximum input current

Resolution

Bipolar

Unipolar

Isolation (field to logic)

Input type

General 6ES7 231—0HC22—0XA0

6ES7 235—0KD22—0XA0

(See Figure A-16)

—32000 to +32000

0 to 32000

≥

2 M

Ω voltage input

250

Ω current input

—3 db at 3.1 Khz

30 VDC

32 mA

11 bits plus 1 sign bit

12 bits

None

Differential

Input ranges

Input resolution

Analog to digital conversion time

Analog input step response

Common mode rejection

Common mode voltage

24 VDC supply voltage range

6ES7 231—0HF22—0XA0

> 2 M

Ω voltage input

250

Ω current input

Differential voltage, two channels selectable for current

Voltage:

Selectable, see Table A-20 for available ranges

Current:

0 to 20 mA

See Table A-20

< 250

µ s

1.5 ms to 95%

Voltage:

Channels 0 to 7

0 to +10V, 0 to +5V and +/—2.5

Current:

Channels 6 and 7

0 to 20mA

See Table A-22

< 250

µ s

1.5 ms to 95%

40 dB, DC to 60 Hz 40 dB, DC to 60 Hz

Signal voltage plus common mode voltage must be

≤ ±

12 V

Signal voltage plus common mode voltage must be

≤ ±

12 V

20.4 to 28.8 VDC (Class 2, Limited Power, or sensor power from PLC)

412

Technical Specifications

Appendix A

Table A-18 Analog Expansion Modules Output Specifications

General 6ES7 232—0HB22—0XA0

6ES7 232—0HD22—0XA0

6ES7 235—0KD22—0XA0

None Isolation (field to logic)

Signal range

Voltage output

Current output

Resolution, full-scale

Voltage

Current

Data word format

Voltage

Current

Accuracy

Worst case, 0

° to 55

Voltage output

°

Current output

Typical, 25

°

C

Voltage output

C

Current output

Setting time

Voltage output

Current output

Maximum drive

Voltage output

Current output

24 VDC supply voltage range

±

10 V

0 to 20 mA

11 bits

11 bits

—32000 to +32000

0 to +32000

±

2% of full-scale

±

2% of full-scale

±

0.5% of full-scale

±

0.5% of full-scale

100

µ

S

2 mS

5000

Ω minimum

500

Ω maximum

20.4 to 28.8 VDC (Class 2, Limited Power, or sensor power from PLC)

413

S7-200 Programmable Controller System Manual

EM 231 Analog Input, 4 Inputs

(6ES7 231—0HC22—0XA0)

Current

PS PS

Voltage

+

L+ M

+—

Unused

+

0—20mA

—

4—20mA

—

M

RA A+ A— RB B+ B— RC C+ C— RD D+ D—

M L+

250 Ohms (built-in)

Gain Configuration

+

24

VDC

Power

EM 232 Analog Output, 2 Outputs

(6ES7 232—0HB22—0XA0)

EM 231 Analog Input, 8 Inputs

(6ES7 231—0HF22—0XA0)

Normal voltage input

Short unused inputs

+ 24 VDC

Power

Supply

Current inputs

(switch 1 and 2 closed

EM 232 Analog Output, 4 Outputs

(6ES7 232—0HD22—0XA0)

M0 V0 I0 M1 V1 I1

M L+

+

24

VDC

Power

Figure A-13 Wiring Diagrams for Analog Expansion Modules

414

Technical Specifications

Appendix A

EM 235 Analog Combination 4 Inputs/1 Output

(6ES7 235—0KD22—0XA0)

Voltage

+—

Unused

Current

PS PS L+ M

+

0—20mA

—

M

4—20mA

—

RA A+ A— RB B+ B— RC C+ C— RD D+ D—

M L+ M0

250 Ohms (built-in)

V0 I0

Gain Offset

Configuration

+

24

VDC

Power

Figure A-14 Wiring Diagrams for Analog Expansion Modules

Analog LED Indicators

The LED indicators for the analog modules are shown in Table A-19.

Table A-19 Analog LED Indicators

LED Indicator

24 VDC Power Supply Good No faults

ON

No 24 VDC power

OFF

Tip

The state of user power is also reported in Special Memory (SM) bits. For more information, see

Appendix D, SMB8 to SMB21 I/O Module ID and Error Registers.

415

S7-200 Programmable Controller System Manual

Input Calibration

The calibration adjustments affect the instrumentation amplifier stage that follows the analog multiplexer (see the Input Block Diagram for the EM 231 in Figure A-17 and EM 235 in Figure

A-19). Therefore, calibration affects all user input channels. Even after calibration, variations in the component values of each input circuit preceding the analog multiplexer will cause slight differences in the readings between channels connected to the same input signal.

To meet the specifications, you should enable analog input filters for all inputs of the module.

Select 64 or more samples to calculate the average value.

To calibrate the input, use the following steps.

1. Turn off the power to the module. Select the desired input range.

2. Turn on the power to the CPU and module. Allow the module to stabilize for 15 minutes.

3. Using a transmitter, a voltage source, or a current source, apply a zero value signal to one of the input terminals.

4. Read the value reported to the CPU by the appropriate input channel.

5. Adjust the OFFSET potentiometer until the reading is zero, or the desired digital data value.

6. Connect a full-scale value signal to one of the input terminals. Read the value reported to the CPU.

7. Adjust the GAIN potentiometer until the reading is 32000, or the desired digital data value.

8. Repeat OFFSET and GAIN calibration as required.

Calibration and Configuration Location for EM 231 and EM 235

Figure A-15 shows the calibration potentiometer and configuration DIP switches located on the right of the bottom terminal block of the module.

EM 231 EM 235

↑

On

↓

Off

Fixed Terminal Block Gain Configuration

Fixed Terminal Block Gain Offset Configuration

Figure A-15 Calibration Potentiometer and Configuration DIP Switch Location for the EM 231 and EM 235

↑

On

↓

Off

416

Technical Specifications

Appendix A

Configuration for EM 231

Table A-20 and Table A-21show how to configure the the EM 231 modules using the configuration

DIP switches. All inputs are set to the same analog input range. In these tables, ON is closed, and OFF is open. The switch settings are read only when the power is turned on.

For the EM 231 Analog Input, 4 Inputs module, switches 1, 2, and 3 select the analog input range

(Table A-20).

Table A-20 Configuration Switch Table to Select Analog Input Range for the EM 231 Analog Input,

4 Inputs

SW1

Unipolar

SW2

OFF

SW3

ON 0 to 10 V

0 to 5 V

0 to 20 mA

2.5 mV

1.25 mV

5

µ

A

SW1

Bipolar

SW2

OFF

ON

SW3

ON

OFF

±

5 V

±

2.5 V

2.5 mV

1.25 mV

For the EM 231 Analog Input, 8 Inputs module, switches 3, 4, and 5 select the analog input range.

Use Switch 1 and 2 to select the current mode input (Table A-21). Switch 1 ON selects current mode input for Channel 6; OFF selects voltage mode. Switch 2 ON selects current mode input for

Channel 7; OFF selects voltage mode.

Table A-21 EM 231 Configuration Switch Table to Select Analog Input Range for the EM 231

Analog Input, 8 Inputs

SW3

Unipolar

SW4

OFF

SW5

ON 0 to 10 V

0 to 5 V

0 to 20 mA

SW3

Bipolar

SW4

OFF

ON

SW5

ON

OFF

±

5 V

±

2.5 V

2.5 mV

1.25 mV

5

µ

A

2.5 mV

1.25 mV

417

S7-200 Programmable Controller System Manual

Configuration for EM 235

Table A-22 shows how to configure the EM 235 module using the configuration DIP switches.

Switches 1 through 6 select the analog input range and resolution. All inputs are set to the same analog input range and format. Table A-22 shows how to select for unipolar/bipolar (switch 6), gain

(switches 4 and 5), and attenuation (switches 1, 2, and 3). In these tables, ON is closed, and OFF is open. The switch settings are read only when the power is turned on.

SW1

ON

OFF

OFF

ON

OFF

OFF

ON

OFF

OFF

Table A-22 EM 235 Configuration Switch Table to Select Analog Range and Resolution

SW1

ON

OFF

ON

OFF

ON

ON

OFF

SW2

OFF

ON

OFF

ON

OFF

OFF

ON

Unipolar

SW3 SW4

OFF

OFF

ON

ON

OFF

OFF

OFF

OFF

OFF

OFF

OFF

OFF

OFF

Bipolar

OFF

SW5

OFF

OFF

ON

ON

OFF

OFF

OFF

ON

ON

ON

ON

SW6

ON

ON

ON

0 to 50 mV

0 to 100 mV

0 to 500 mV

0 to 1 V

0 to 5 V

0 to 20 mA

0 to 10 V

SW2

OFF

ON

OFF

OFF

ON

OFF

OFF

ON

OFF

SW3

OFF

OFF

ON

OFF

OFF

ON

OFF

OFF

ON

SW4

ON

ON

ON

OFF

OFF

OFF

OFF

OFF

OFF

SW5

OFF

OFF

OFF

ON

ON

ON

OFF

OFF

OFF

SW6

OFF

OFF

OFF

OFF

OFF

OFF

OFF

OFF

OFF

+25 mV

+50 mV

+100 mV

+250 mV

+500 mV

+1 V

+2.5 V

+5 V

+10 V

12.5

m

V

25 m

V

125 m

V

250 m

V

1.25 mV

5 m

A

2.5 mV

12.5

m V

25 m V

50 m V

125 m V

250 m V

500 m

V

1.25 mV

2.5 mV

5 mV

418

Technical Specifications

Appendix A

Input Data Word Format for EM 231 and EM 235

Figure A-16 shows where the 12-bit data value is placed within the analog input word of the CPU.

AIW XX

MSB

15 14

0

Data value 12 Bits

Unipolar data

MSB

15

AIW XX Data value 12 Bits

Bipolar data

Figure A-16 Input Data Word Format for EM 231 and EM 235

3

LSB

2

0 0 0

0

4 3

0

LSB

0

0 0 0

Tip

The 12 bits of the analog-to-digital converter (ADC) readings are left-justified in the data word format. The MSB is the sign bit: zero indicates a positive data word value.

In the unipolar format, the three trailing zeros cause the data word to change by a count of eight for each one-count change in the ADC value.

In the bipolar format, the four trailing zeros cause the data word to change by a count of sixteen for each one count change in the ADC value.

Input Block Diagrams for EM 231 and 235

EM 231Analog Input, 4 Inputs

A+

RA

Rloop

A—

R

C

C

C

R

A=1

B+

RB

Rloop

B—

R

C

C

C

+

Instrumentation

AMP

—

R

A=2

C+

RC

Rloop

C—

R

C

C

C

R

A=3

D+

RD

R

Rloop

D—

Input filter

R

C

C

C

A=4

MUX 4 to 1

Figure A-17 Input Block Diagram for the EM 231 Analog Input, 4 Inputs

GAIN ADJUST

BUFFER

A/D Converter

11 0

419

S7-200 Programmable Controller System Manual

EM 231 Analog Input, 8 Inputs

Instrumentation

AMP

GAIN ADJUST

BUFFER

A/D Converter

Input filter

MUX 8 to 1

Figure A-18 Input Block Diagram for the EM231 Analog Input, 8 Inputs

A+

RA

Rloop

A—

R

R

B+

RB

Rloop

B—

R

R

C+

RC

Rloop

C—

R

R

D+

RD

R

Rloop

D—

R

Input filter

C

C

C

A=1

C

C

C

A=2

C

C

C

A=3

C

C

C

A=4

MUX 4 to 1

EM 235

+

Instrumentation

AMP

—

REF_VOLT

Offset Adjust

+

Buffer

—

Figure A-19 Input Block Diagram for the EM 235

GAIN ADJUST

BUFFER

A/D Converter

11 0

DATA

Output Data Word Format for EM 232 and EM 235

Figure A-20 shows where the 12-bit data value is placed within the analog output word of the

CPU.

420

Technical Specifications

Appendix A

AQW XX

AQW XX

MSB

15

0

MSB

15

14

4

Data value 11 Bits

Current output data format

Data value 12 Bits

Voltage output data format

4 3

0

3

0

LSB

0

0 0 0

LSB

0

0 0 0

Figure A-20 Output Data Word Format for EM 232 and EM 235

Tip

The 12 bits of the digital-to-analog converter (DAC) readings are left-justified in the output data word format. The MSB is the sign bit: zero indicates a positive data word value. The four trailing zeros are truncated before being loaded into the DAC registers. These bits have no effect on the output signal value.

Output Block Diagram for EM 232 and EM 235

+24 Volt

R

100

—

+

+

—

R

Voltage-to-current converter

Vref

D/A converter

DATA

11 0

Digital-to-analog converter

+/— 2V

+

—

R

1/4 R

M

Figure A-21 Output Block Diagram for the EM 232 and EM 235

Voltage output buffer

Iout

0..20 mA

Vout

—10.. +10 Volts

421

S7-200 Programmable Controller System Manual

Installation Guidelines

Use the following guidelines to ensure accuracy and repeatability:

—

—

—

—

—

—

—

—

—

—

Ensure that the 24-VDC Sensor Supply is free of noise and is stable.

Use the shortest possible sensor wires.

Use shielded twisted pair wiring for sensor wires.

Use a braided shield for best noise immunity.

Terminate the shield at the Sensor location only.

Short the inputs for any unused channels, as shown in Figure A-21.

Avoid bending the wires into sharp angles.

Use wireways for wire routing.

Avoid placing signal wires parallel to high-energy wires. If the two wires must meet, cross them at right angles.

Ensure that the input signals are within the common mode voltage specification by isolating the input signals or referencing them to the external 24V common of the analog module.

Tip

The EM 231 and EM 235 expansion modules are not recommended for use with thermocouples.

Understanding the Analog Input Module: Accuracy and Repeatability

The EM 231 and EM 235 analog input modules are low-cost, high-speed 12 bit analog input modules. The modules can convert an analog signal input to its corresponding digital value in

149

µ sec. The analog signal input is converted each time your program accesses the analog point. These conversion times must be added to the basic execution time of the instruction used to access the analog input.

The EM 231 and EM 235 provide an unprocessed digital value (no linearization or filtering) that corresponds to the analog voltage or current presented at the module’s input terminals. Since the modules are high-speed modules, they can follow rapid changes in the analog input signal (including internal and external noise).

You can minimize reading-to-reading variations caused by noise for a constant or slowly changing analog input signal by averaging a number of readings. Note that increasing the number of readings used in computing the average value results in a correspondingly slower response time to changes in the input signal.

Average Value Signal Input

Repeatability limits

(99% of all readings fall within these limits)

Figure A-22 Accuracy Definitions

Mean

(average)

Accuracy

Figure A-22 shows the 99% repeatability limits, the mean or average value of the individual readings, and the mean accuracy in a graphical form.

The specifications for repeatability describe the reading-to-reading variations of the module for an input signal that is not changing. The repeatability specification defines the limits within which 99% of the readings will fall. The repeatability is described in this figure by the bell curve.

The mean accuracy specification describes the average value of the error (the difference between the average value of individual readings and the exact value of the actual analog input signal).

Table A-23 gives the repeatability specifications and the mean accuracy as they relate to each of the configurable ranges.

422

Technical Specifications

Appendix A

Definitions of the Analog Specifications

—

Accuracy: deviation from the expected value on a given point

—

Resolution: the effect of an LSB change reflected on the output.

Table A-23 EM 231 and EM 235 Specifications

4

5

1

2

3

Full Scale Input

Range

Repeatability

1

% of Full Scale Counts

EM 231 Specifications

Mean (average) Accuracy

% of Full Scale

1,2,3,4,5

Counts

0 to 5 V

0 to 20 mA

0 to 10 V

±

2.5 V

±

5 V

±

0.075%

±

±

24

48

±

±

0.1%

0 05%

±

32

EM 235 Specifications

0 to 50 mV

0 to 100 mV

0 to 500 mV

0 to 1 V

0 to 5 V

0 to 20 mA

0 to 10 V

±

25 mV

±

50 mV

±

100 mV

±

250 mV

±

500 mV

±

1 V

±

2.5 V

±

5 V

±

10 V

±

±

0.075%

0.075%

±

±

24

48

±

±

±

±

±

±

±

0.25%

0.2%

0.05%

0.25%

0.2%

0.1%

0 05%

±

±

±

±

±

±

±

80

64

16

160

128

64

32

Measurements made after the selected input range has been calibrated.

The offset error in the signal near zero analog input is not corrected, and is not included in the accuracy specifications.

There is a channel-to-channel carryover conversion error, due to the finite settling time of the analog multiplexer. The maximum carryover error is 0.1% of the difference between channels.

Mean accuracy includes effects of non-linearity and drift from 0 to 55 degrees C.

Analog input accuracy may deviate up to +/—10% of full scale when subjected to severe RF interferences such as specified in the product standard EN 61131—2:2007. Following the recommended installation guidelines on the previous page can minimize unintended disturbances on analog inputs. For high frequency immunity it is recommended that the cable shield be terminated at both ends.

423

S7-200 Programmable Controller System Manual

Thermocouple and RTD Expansion Modules Specifications

Table A-24 Thermocouple and RTD Modules Order Numbers

Order Number Expansion Model

6ES7 231—7PD22—0XA0

6ES7 231—7PF22—0XA0

6ES7 231—7PB22—0XA0

6ES7 231—7PC22—0XA0

EM 231 Analog Input Thermocouple, 4 Inputs

EM 231 Analog Input Thermocouple, 8 Inputs

EM 231 Analog Input RTD, 2 Inputs

EM 231 Analog Input RTD, 4 Inputs

EM Inputs

4 Thermocouple

8 Thermocouple

2 RTD

4 RTD

—

—

—

—

EM Outputs

No

No

No

No

Removable

Connector

Table A-25 Thermocouple and RTD Modules General Specifications

Order Number

6ES7 231—7PD22—0XA0

6ES7 231—7PF22—0XA0

6ES7 231—7PB22—0XA0

6ES7 231—7PC22—0XA0

Module Name and Description

EM 231 Analog Input Thermocouple,

4 Inputs

EM 231 Analog Input Thermocouple,

8 Inputs

EM 231 Analog Input RTD, 2 Inputs

EM 231 Analog Input RTD, 4 Inputs

Dimensions (mm)

(W x H x D)

71.2 x 80 x 62

71.2 x 80 x 62

71.2 x 80 x 62

71.2 x 80 x 62

Weight

210 g

Dissipation

1.8 W

VDC Requirements

+5 VDC +24 VDC

87 mA 60 mA

210 g

210 g

210 g

1.8 W

1.8 W

1.8 W

87 mA

87 mA

87 mA

60 mA

60 mA

60 mA

Table A-26 Thermocouple and RTD Modules Specifications

1

General

6ES7 231—7PD22—0XA0

Thermocouple, 4 Inputs

6ES7 231—7PF22—0XA0

Thermocouple, 8 Inputs

6ES7 231—7PB22—0XA0

RTD, 2 Inputs

6ES7 231—7PC22—0XA0

RTD, 4 Inputs

Isolation

Field to logic

Field to 24 VDC

24 VDC to logic

Common mode input range

(input channel to input channel)

Common mode rejection

Input type

Input ranges

Input resolution

Temperature

Voltage

Resistance

Measuring Principle Sigma-delta

Module update time: All channels 405 ms

Wire length

Wire loop resistance

Suppression of interference

Data word format

Maximum sensor dissipation

Input impedance

Maximum input voltage

Input filter attenuation

Basic error

1

Repeatability

Cold junction error

LED indicator

24 VDC supply voltage range

500 VAC

500 VAC

500 VAC

120 VAC

> 120 dB at 120 VAC

Floating TC

TC types (select one per module)

S, T, R, E, N, K, J

Voltage range : +/— 80 mV

0.1

°

C / 0.1

°

F

15 bits plus sign

—

100 meters to sensor max.

100

Ω max.

85 dB at 50 Hz/60 Hz/ 400 Hz

Voltage: —27648 to + 27648

—

≥

1 M

Ω

30 VDC

—3 db at 21 kHz

0.1% FS (voltage)

0.05% FS

810 ms

500 VAC

500 VAC

500 VAC

0

> 120 dB at 120 VAC

Module ground referenced RTD (2, 3, or 4 wire connections)

RTD types (select one per module): platinum (Pt), copper (Cu), nickel (Ni), or Resistance

See Table A-31 or A-32 for available RTD types.

0.1

°

C / 0.1

°

F

—

15 bits plus sign resistive

Sigma-delta

405 ms

(700 ms for Pt10000)

100 meters to sensor max

.

20

Ω

, 2.7

Ω for Cu max.

85 dB at 50 Hz/60 Hz/400 Hz

810 ms

(1400 ms for Pt10000)

20

Ω

, 2.7

Ω for 10

Ω

RTDs

Resistance: 0 to +27648

1m W

≥

10 M

Ω

30 VDC (sense), 5 VDC

(source)

—3 db at 3.6 kHz

0.1% FS (resistance)

0.05% FS

±

1.5

°

C

2 (External 24 VDC present and System Fail)

—

20.4 to 28.8 VDC (Class 2, Limited Power, or sensor power from PLC)

30 VDC

—3 db at 21 kHz

The input range selection (temperature, voltage on resistance) applies to all channels on the module.

424

EM 231 Analog Input Thermocouple, 4 Inputs

(6ES7 231—7PD22—0XA0)

+ -+ -+ -+ —

A+ A — B+ B— C+ C— D+

EM 231

AI 4

D—

M L+

Configuration

+

—

24 VDC power

EM 231 Analog Input RTD, 2 Inputs

(6ES7 231—7PB22—0XA0)

Technical Specifications

Appendix A

EM 231 Analog Input Thermocouple, 8 Inputs

(6ES7 231—7PF22—0XA0)

EM 231 Analog Input RTD, 4 Inputs

(6ES7 231—7PC22—0XA0)

A+ A — a+ a— B+ B— b+ b—

EM 231

AI 2 x RTD

M L+

Configuration

+

—

24 VDC power

Figure A-23 Connector Terminal Identification for EM 231 Thermocouple and EM 231 RTD Modules

Compatibility

The RTD and Thermocouple modules are designed to work with the CPU 222, CPU 224,

CPU 224XP and CPU 226.

425

S7-200 Programmable Controller System Manual

Tip

The RTD and Thermocouple modules are designed to give maximum performance when installed in a stable temperature environment.

The EM 231 Thermocouple module, for example, has special cold junction compensation circuitry that measures the temperature at the module connectors and makes necessary changes to the measurement to compensate for temperature differences between the reference temperature and the temperature at the module. If the ambient temperature is changing rapidly in the area where the EM 231 Thermocouple module is installed, additional errors are introduced.

To achieve maximum accuracy and repeatability, Siemens recommends that the S7-200 RTD and Thermocouple modules be mounted in locations that have stable ambient temperature.

Noise Immunity

Use shielded wires for best noise immunity. If a thermocouple input channel is not used, short the unused channel inputs, or connect them in parallel to another channel.

EM 231 Thermocouple Module

The EM 231 Thermocouple module provides a convenient, isolated interface for the S7-200 family to seven thermocouple types: J, K, E, N, S, T, and R. It allows the S7-200 to connect to low level analog signals,

±

80mV range. All thermocouples attached to the module must be of the same type.

Thermocouple Basics

Thermocouples are formed whenever two dissimilar metals are electrically bonded to each other.

A voltage is generated that is proportional to the junction temperature. This voltage is small; one microvolt could represent many degrees. Measuring the voltage from a thermocouple, compensating for extra junctions, and then linearizing the result forms the basis of temperature measurement using thermocouples.

When you connect a thermocouple to the EM 231 Thermocouple Module, the two dissimilar metal wires are attached to the module at the module signal connector. The place where the two dissimilar wires are attached to each other forms the sensor thermocouple.

Two more thermocouples are formed where the two dissimilar wires are attached to the signal connector. The connector temperature causes a voltage that adds to the voltage from the sensor thermocouple. If this voltage is not corrected, then the temperature reported will deviate from the sensor temperature.

Cold junction compensation is used to compensate for the connector thermocouple.

Thermocouple tables are based on a reference junction temperature, usually zero degrees

Celsius. The cold junction compensation compensates the connector to zero degrees Celsius.

The cold junction compensation restores the voltage added by the connector thermocouples. The temperature of the module is measured internally, then converted to a value to be added to the sensor conversion. The corrected sensor conversion is then linearized using the thermocouple tables.

Configuring the EM 231 Thermocouple Module

Configuration DIP switches located on the bottom of the module allow you to select the thermocouple type, open wire detect, temperature scale, and cold junction compensation. For the

DIP switch settings to take effect, you need to power cycle the PLC and/or the user 24V power supply.

DIP switch 4 is reserved for future use. Set DIP switch 4 to the 0 (down or off) position. Table A-27 shows other DIP switch settings.

426

Technical Specifications

Appendix A

Table A-27 Configuring the Thermocouple Module DIP Switches

1 2 3 4* 5 6 7 8

* S t DIP

Switches 1,2,3

it h 4

Switch 5

SW5

1 2 3 4 5 6 7 8

Configuration

↑

1 On

↓

0 — Off

S

N

E

R

K

T

Thermocouple Type

J (Default)

+/—80mV

Open Wire Detect

Direction

Upscale

(+3276.7 degrees)

Co gu at o

↑

1 — On

↓

0 — Off

Downscale

(—3276.8 degrees)

011

100

101

110

Setting

000

001

010

111

Setting

0

1

Description

Switches 1 to 3 select the thermocouple type

(or mV operation) for all channels on the module. For example, for an E type,

S yp ,

S

Description

0 indicates positive on open wire

1 indicates negative on open wire

Switch 6

SW6

1 2 3 4 5 6 7 8

Open Wire Detect

Enable

Enable

Configuration

↑

1 — On

↓

0 — Off

Disable

Switch 7

SW7

1 2 3 4 5 6 7 8

Temperature Scale

Celsius (

_

C)

Configuration

↑

1 — On

↓

0 — Off

Fahrenheit (

_

F)

Switch 8

SW8

Cold Junction

Cold junction compensation enabled

Configuration

↑

1 — On

↓

0 — Off

Cold junction compensation disabled

Setting Description

0

1

0

Setting

1

Open wire detection is performed by injecting a 25

µ

A current onto the input terminals. The open wire enable switch enables or disables the current source. The open wire range check is always performed, even when the current source is disabled The EM 231

Thermocouple module detects open wire if the input signal exceeds approximately

±

200mV.

When an open wire is detected, the module reading is set to the value selected by the

Open Wire Detect.

Description

The EM 231 Thermocouple module can report temperatures in Celsius or Fahrenheit. The

Celsius to Fahrenheit conversion is performed i id th p

0

Setting

1

Description

Cold junction compensation must be enabled when you are using thermocouples. If cold junction compensation is not enabled, the conversions from the module will be in error because of the voltage that is created when the thermocouple wire is connected to the module connector. Cold junction is automatically disabled when you select the

±

80mV range.

427

S7-200 Programmable Controller System Manual

Tip

H

The open wire current source could interfere with signals from some low level sources such as thermocouple simulators.

H

Input voltages exceeding approximately

±

200mV will trigger open wire detection even when the open wire current source is disabled.

Tip

H

Module error could exceed specifications while the ambient temperature is changing.

H

Exceeding the module ambient temperature range specification could cause the module cold junction to be in error.

Using the Thermocouple: Status Indicators

The EM 231 Thermocouple module provides the PLC with data words that indicate temperatures or error conditions. Status bits indicate range error and user supply/module failure. LEDs indicate the status of the module. Your program should have logic to detect error conditions and respond appropriately for the application. Table A-28 shows the EM 231 Thermocouple status indicators.

1

2

3

Table A-28 EM 231Thermocouple Status Indicators

No errors

Error Condition Channel Data

SF LED

Red

Conversion data OFF

24 V missing 32766

Open wire and current source enabled —32768/32767

Out of range input —32768/32767

Diagnostic error

3

0000

OFF

BLINK

BLINK

ON

24 V LED

Green

ON

OFF

ON

ON

OFF

Range Status Bit

1

1

1

0

0

0

24 VDC User

Power Bad

2

0

1

0

0 note

3

Range status bit is bit 3 in module error register byte (SMB9 for Module 1, SMB11 for Module 2, etc.)

User Power Bad status bit is bit 2 in module error register byte (SMB 9, SMB 11, etc., refer to Appendix D)

Diagnostic errors cause a module configuration error. The User Power Bad status bit may or may not be set before the module configuration error.

Tip

The channel data format is two’s complement, 16-bit words. Temperature is presented in 0.1

degree units. For example, if the measured temperature is 100.2 degrees, the reported data is

1002. Voltage data are scaled to 27648. For example, —60.0mV is reported as —20736

(=—60mV/80mV * 27648).

If the PLC has read the data:

—

—

All 4 channels in the EM 231 Analog Input Thermocouple 4 Inputs are updated every 405 milliseconds.

All channels in the EM 231 Analog Input Thermocouple 8 Inputs are updated every 810 milliseconds.

If the PLC does not read the data within one update time, the module reports old data until the next module update after the PLC read. To keep channel data current, it is recommended that the

PLC program read data at least as often as the module update rate.

Tip

When you are using the EM 231 Thermocouple module, you should disable analog filtering in the PLC. Analog filtering can prevent error conditions from being detected in a timely manner.

428

Technical Specifications

Appendix A

Table A-29 Temperature Ranges (

°

C) and Accuracy for Thermocouple Types

Data Word (1 digit = 0.1

_

C)

Dec

32767

↑

32511

:

27649

27648

:

17680

7FFF

Hex

↑

7EFF

:

6C01

6C00

:

4510

>1200.0

_

C >1372.0

_

C >400.0

_

C >1000.0

_

C >1768.0

_

C

↑

>1300.0

_

C

¦

80mV

>94.071mV

↑

80.0029mV

80mV

↑

1768.0

_

C

:

13720

:

13000

:

3598

:

32C8

1372.0

_

C overrange

↑

↑

1300.0

_

C 1300.0

_

C

:

12000

:

10000

:

2EE0

:

2710

1200.0

_

C

↑

↑

1000.0

_

C

1

0

—1

:

:

4000

:

—500

—1500

:

:

—2000

:

—2100

:

—2400

:

—2550

:

:

0FA0

0001

0000

FFFF

:

FE0C

FA24

:

:

F830

:

F7CC

:

F6A0

:

F60A

0.1

_

C

0.0

_

C

—0.1

_

C

—150.0

_

C underrange

—210.0

_

C

0.1

_

C

0.0

_

C

—0.1

_

C

—200.0

_

C underrange

400.0

_

C

0.1

_

C

0.0

_

C

—0.1

_

C

0.1

_

C

0.0

_

C

—0.1

_

C

—240.0

_

C underrange

400.0

_

C

0.1

_

C

0.0

_

C

—0.1

_

C underrange

—50.0

_

C

#

0.1

_

C

0.0

_

C

—0.1

_

C

0.0029mV

0.0mV

—0.0029mV

—255.0

_

C underrange

—270.0

_

C

:

—2700

—27648

—27649

:

F574

9400

93FF

#

—270.0

_

C

# #

—270.0

_

C

#

—270.0

_

C

#

—80.mV

—80.0029mV

: :

—32512 8100

# #

—94.071mV

#

—32768 8000

Accuracy over full span

Accuracy (normal range without cold junction)

<—210.0

_

C

±

0.1%

±

1.5

_

C

<—270.0

_

C

±

0.3%

±

1.7

_

C

<—270.0

_

C

±

0.6%

±

1.4

_

C

<—270.0

_

C

±

0.3%

±

1.3

_

C

Cold junction error

±

1.5

_

C

±

1.5

_

C

±

1.5

_

C

±

1.5

_

C

*OF = Overflow; OR = Overrange; NR = Normal range; UR = Underrange; UF = Underflow

<—50.0

_

C

±

0.6%

±

3.7

_

C

±

1.5

_

C

<—270.0

_

C

±

0.4%

±

1.6

_

C

±

1.5

_

C

<—94.071mV

±

0.1%

±

0.10%

N/A

↑ indicates that all analog values greater than this and below the open wire threshold report the overflow data value, 32767 (0x7FFF).

# indicates that all analog values less than this and greater than the open wire threshold report the underflow data value, —32768 (0x8000).

UR

#

UF

OF

↑

OR

429

S7-200 Programmable Controller System Manual

:

1

0

—1

:

—580

Table A-30 Temperature Ranges (

°

F) for Thermocouple Types

Data Word

(1 digit = 0.1

°

F)

Dec Hex

32767 7FFF >2192.0

_

F >2502.0

_

F >752.0

_

F >1832.0

_

F

↑

32511

↑

7EFF

32140 7D90

27649

27648

:

25020

6C01

6C00

:

61B8

↑

2502.0

_

F

:

23720

:

5CA8

↑ overrange

2372.0

_

F

:

21920

:

18320

:

55A0

:

4790

2192.0

_

F

↑

↑

1832.0

_

F

:

7520

:

1D60

752.0

_

F

:

:

320

:

:

0140

:

0001

0000

FFFF

:

FDBC

0.1

_

F

0.0

_

F

—0.1

_

F

0.1

_

F

0.0

_

F

—0.1

_

F

0.1

_

F

0.0

_

F

—0.1

_

F

0.1

_

F

0.0

_

F

—0.1

_

F

:

—2380

:

F6B4

—238.0

_

F

:

—3280

:

F330 underrange —328.0

_

F

>3214.0

_

F

↑

3214.0

_

F

2764.8

_

F

752.0

_

F underrange

0.1

_

F

0.0

_

F

—0.1

_

F

—58.0

_

F

>2372.0

_

F

↑

2372.0

_

F

32.0

_

F

0.1

_

F

0.0

_

F

—0.1

_

F underrange

¦

80 mV

>94.071mV

↑

80.0029mV

80mV

0.0029mV

0.0mV

—0.0029mV

:

:

—3460

:

—4000

—4270

:

—4540

—27648

—27649

:

:

F27C

:

F060

EF52

:

EE44

9400

93FF

—346.0

#

_

F underrange

—454.0

_

F

—427.0

—454.0

_ underrange

_

F

F

—400.0

_

F underrange

—454.0

_

F

#

—454.0

_

F

# # # #

—80mV

—80.0029mV

:

—32512

:

8100

—94.071mV

# # #

—3268 8000 <—346.0

°

F <—454.0

°

F <—454.0

°

F <—454.0

°

F <—58.0

°

F <—454.0

°

F <—94.07 mV

*OF = Overflow; OR = Overrange; NR = Normal range; UR = Underrange; UF = Underflow

↑ indicates that all analog values greater than this and below the open wire threshold report the overflow data value, 32767 (0x7FFF).

# indicates that all analog values less than this and greater than the open wire threshold report the underflow data value, —32768 (0x8000).

OF

↑

OR

NR

OR

#

UF

430

Technical Specifications

Appendix A

EM 231 RTD Module

The EM 231 RTD module provides a convenient interface for the S7-200 family to several different

RTDs. It also allows the S7-200 to measure three different resistance ranges. All RTDs attached to the module must be of the same type.

Configuring the EM 231 RTD Module

DIP switches enable you to select RTD type, wiring configuration, temperature scale, and burnout direction. The DIP switches are located on the bottom of the module as shown in Figure A-24. For the DIP switch settings to take effect, you need to power cycle the PLC and/or the user 24V power supply.

Select RTD type by setting DIP switches 1, 2, 3, 4, 5 and 6 to correspond to the RTD as shown in Table

A-31 and Table A-32. Refer to Table A-33 for other

DIP switch settings.

Figure A-24

Configuration

↑

1 — On

↓

0 — Off

1 2 3 4 5 6 7 8

DIP Switches for the EM 231

RTD Module

Table A-31 Selecting the RTD Type: DIP Switches 1 to 6 for the EM 231 Analog Input RTD 4 Inputs

RTD Type and

Alpha

1

SW1 SW2 SW3 SW4 SW5 SW6 RTD Type and

Alpha

1

SW1 SW2 SW3 SW4 SW5 SW6

0 0 0 0 0 0 100

Ω

Pt 0.003902

1 0 0 0 0 0 100

Ω

Pt 0.003850

(Default)

200

Ω

Pt 0.003850

500

Ω

Pt 0.003850

0

0

0

0

0

0

0

1

1

0

0

0

200

Ω

Pt 0.003902

500

Ω

Pt 0.003902

1

1

0

0

0

0

0

1

1

0

0

0

1000

Ω

Pt 0.003850

100

Ω

Pt 0.003920

200

Ω

Pt 0.003920

500

Ω

Pt 0.003920

1000

Ω

Pt 0.003920

100

Ω

Pt 0.00385055

200

Ω

Pt 0.00385055

500

Ω

Pt 0.00385055

1000

Ω

Pt

0.00385055

100

Ω

Pt 0.003916

200

Ω

Pt 0.003916

500

Ω

Pt 0.003916

1000

Ω

Pt 0.003916

GOST 50

Ω

Pt

0.00385055

GOST 100

Ω

Pt

0.00385055

GOST 500

Ω

Pt

0.00385055

GOST 10

Ω

Pt

0.003910

GOST 500

Ω

Pt

0.003910

GOST 100

Ω

Pt

0.003910

GOST 500

Ω

Pt

0.003910

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

1

1

1

1

1

0

0

0

0

0

1

1

1

0

0

0

0

0

0

0

0

0

0

1

1

1

1

0

1

1

0

1

1

0

0

0

1

1

1

1

0

1

1

0

0

0

1

1

0

1

0

1

1

0

1

1

0

0

1

1

1

0

1

0

1

1

0

1

0

1

0

0

1

1

0

1

0

1

0

1

0

0

0

0

0

0

0

0

0

0

0

0

0

1

1

1

1

1

1

1

1000

Ω

Pt 0.003902

SPARE

100

Ω

Ni

0

.00672

120

Ω

Ni 0.00672

1000

Ω

Ni 0.00672

100

Ω

Ni

0

.006178

120

Ω

Ni 0.006178

1000

Ω

Ni 0.006178

10000

Ω

Pt

0.003850

10

Ω

Cu 0.004270

150

Ω

FS

Resistance

300

Ω

FS

Resistance

600

Ω

FS

Resistance

GOST Cu 50

Ω

0.00426

GOST Cu 100

Ω

0.00426

GOST Cu 500

Ω

0.00426

GOST Cu 10

Ω

0.00428

GOST Cu 50

Ω

0.00428

GOST Cu 100

Ω

0.00428

GOST Cu 500

Ω

0.00428

1

1

1

1

1

1

1

1

1

1

1

1

1

0

0

0

0

0

1

1

1

1

1

1

1

0

0

0

0

0

1

1

1

1

1

1

1

1

0

0

0

0

0

1

1

1

1

0

1

1

0

1

1

0

1

1

1

1

0

0

0

1

1

0

0

0

1

1

0

1

0

1

1

1

0

0

1

1

0

0

1

0

1

0

1

1

0

1

0

1

0

0

1

1

0

1

0

1

0

1

0

0

0

0

0

0

0

0

0

0

0

0

0

1

1

1

1

1

1

1

431

S7-200 Programmable Controller System Manual

1

Table A-31 Selecting the RTD Type: DIP Switches 1 to 6 for the EM 231 Analog Input RTD 4 Inputs

RTD Type and

Alpha

1

SW1 SW2 SW3 SW4 SW5 SW6 RTD Type and

Alpha

1

SW1 SW2 SW3

GOST 10

Ω

Pt

0.003910

0 1 0 0 0 1 Spare 1 0 0

LG—Ni 1000

Ω

Pt

0.005000

0 1 0 0 1 1

All RTDs represent 0

°

C. at the listed resistance except for Cu 10 ohm. Cu 10 ohm is 25

°

C. at 10 ohm and 0

°

C. at 9.035 ohm.

SW4

1

SW5 SW6

0 1

1

Table A-32 Selecting the RTD Type: DIP Switches 1 to 5 for the EM 231 Analog Input RTD 2 Inputs

RTD Type and Alpha

1

SW1 SW2 SW3 SW4 SW5 RTD Type and

Alpha

1

SW1 SW2 SW3

0 0 0 0 0 100

Ω

Pt 0.003902

1 0 0 100

Ω

Pt 0.003850

(Default)

200

Ω

Pt 0.003850

0 0 0 0 1 200

Ω

Pt 0.003902

1 0 0

500

Ω

Pt 0.003850

1000

Ω

Pt 0.003850

100

Ω

Pt 0.003920

200

Ω

Pt 0.003920

500

Ω

Pt 0.003920

1000

Ω

Pt 0.003920

100

Ω

Pt 0.00385055

200

Ω

Pt 0.00385055

500

Ω

Pt 0.00385055

1000

Ω

Pt 0.00385055

100

Ω

Pt 0.003916

200

Ω

Pt 0.003916

500

Ω

Pt 0.003916

1000

Ω

Pt 0.003916

0

0

0

0

0

0

0

0

0

0

0

0

0

0

1

1

1

1

1

1

0

0

1

1

0

0

0

0

1

1

1

1

0

0

1

1

0

0

1

1

0

0

1

1

0

0

0

0

1

1

1

1

0

0

1

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

500

Ω

Pt 0.003902

1000

Ω

Pt 0.003902

SPARE

100

Ω

Ni

0

.00672

120

Ω

Ni 0.00672

1000

Ω

Ni 0.00672

100

Ω

Ni

0

.006178

120

Ω

Ni 0.006178

1000

Ω

Ni 0.006178

10000

Ω

Pt 0.003850

10

Ω

Cu 0.004270

150

Ω

FS Resistance

300

Ω

FS Resistance

600

Ω

FS Resistance

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

0

0

1

1

0

0

0

0

1

1

1

1

0

0

1

1

0

0

1

1

0

0

All RTDs represent 0

°

C. at the listed resistance except for Cu 10 ohm. Cu 10 ohm is 25

°

C. at 10 ohm and 0

°

C. at 9.035 ohm.

SW4

0

0

0

1

1

1

1

1

0

0

1

0

1

1

0

0

SW5

0

0

1

0

1

0

1

1

0

1

0

1

0

1

0

1

432

Technical Specifications

Appendix A

Table A-33 Setting RTD DIP Switches for the EM 231 Analog Input RTD Module

Switch 6

(2 Channel Module Only)

Open Wire Detect/

Out of Range

Setting

SW6 Upscale

(+3276.7 degrees)

0

Description

Indicates positive on open wire or out of range

1 2 3 4 5 6 7 8

Configuration

↑

1 — On

↓

0 — Off

Downscale

(—3276.8 degrees)

1 Indicates negative on open wire or out of range

Switch 7 (Both Modules)

SW7

1 2 3 4 5 6 7 8

Temperature Scale

Celsius (

_

C)

Configuration

↑

1 On

↓

0 — Off

Fahrenheit (

_

F)

0

Setting

1

Description

The RTD module can report temperatures in

Celsius or Fahrenheit. The Celsius to

Fahrenheit conversion is performed inside the module.

p

Switch 8 (Both Modules)

SW8

1 2 3 4 5 6 7 8

Configuration

↑

1 — On

↓

0 — Off

3-wire

Wiring Scheme

2-wire or 4-wire

0

Setting

1

Description

You can wire the RTD module to the sensor in three ways (shown in the figure). The most accurate is 4 wire). The least accurate is 2 i hi h i l

) d d if d to wiring can be ignored in your application.

RTD 4 Wire

(most accurate)

A+ Sense +

A+ Sense +

RTD 3 Wire

A— Sense —

A— Sense -a+ Source + a— Source —

R

R

L1

L2

RTD a+ Source +

R

L1

R

L2

RTD a— Source —

If R

L1=

R

L2

, error is minimal.

Note: R

L1

R

L2

= Lead resistance from a+ terminal to the RTD

= Lead resistance from a— terminal to the RTD

Figure A-25 Wiring the RTD to the Sensor by 4, 3, and 2 Wire

A+ Sense +

RTD 2 Wire

Set switch to

4-wire mode.

A— Sense -a+ Source +

R

L1 a— Source —

R

L2

R

L1

+R

L2

=Error

RTD

433

S7-200 Programmable Controller System Manual

EM 231 RTD Status Indicators

The RTD module provides the PLC with data words that indicate temperatures or error conditions.

Status bits indicate range error and user supply/module failure. LEDs indicate the status of the module. Your program should have logic to detect error conditions and respond appropriately for the application. Table A-34 shows the status indicators provided by the EM 231 RTD module.

Tip

The channel data format is twos complement, 16-bit words. Temperature is presented in 0.1

degree units. (For example, if the measured temperature is 100.2 degrees, the reported data is

1002.) Resistance data are scaled to 27648. For example, 75% of full scale resistance is reported as 20736.

(225

Ω

/ 300

Ω

* 27648 = 20736)

Table A-34 EM 231 RTD Status Indicators

Error Condition

No errors

24 V missing

SW detects open wire

Out of range input

Diagnostic error

3

Channel Data

Conversion data

32766

—32768/32767

—32768/32767

0000

SF LED

Red

OFF

OFF

BLINK

BLINK

ON

24 V LED

Green

ON

OFF

ON

ON

OFF

Range Status Bit

0

0

1

1

0

1

24 VDC User Power

Bad

2

0

1

0

0 note

3

1

Range status bit is bit 3 in module error register byte (SMB9 for Module 1, SMB11 for Module 2, etc.)

2 User Power Bad status bit is bit 2 in module error register byte (such as SMB 9, SMB 11, refer to Appendix D.)

3 Diagnostic errors cause a module configuration error. The User Power Bad status bit may or may not be set before the module configuration error.

If the PLC has read the data:

—

All 4 channels in the EM 231 Analog Input RTD 2 Inputs are updated every 405 milliseconds.

—

All channels in the EM 231 Analog Input RTD 4 Inputs are updated every 810 milliseconds.

If the PLC does not read the data within one update time, the module reports old data until the next module update after the PLC read. To keep channel data current, it is recommended that the

PLC program read data at least as often as the module update rate.

Tip

When you are using the RTD module, be sure to disable analog filtering in the PLC. Analog filtering can prevent error conditions from being detected in a timely manner.

Open wire detection is performed by software internal to the RTD module. Out of range inputs and detected open wire conditions are signaled by setting the range status bit in the SMB and by setting the channel data up or down scale per the switch settings. Open wire detection takes a minimum of three module scan cycles and can take longer, depending on which wire(s) are open.

Open Source+ and/or Source— wires are detected in the minimum time. Open Sense+ and/or

Sense— wires can take 5 seconds or more to detect. Open sense lines can randomly present valid data, with open wire detected intermittently, especially in electrically noisy environments. Electrical noise can also extend the time it takes to detect the open wire condition. It is recommended that open wire/out of range indications be latched in the application program after valid data has been reported.

Tip

If you have an unused channel, you can wire the that channel with a resistor in place of the RTD to prevent open wire detection from causing the SF LED to blink. The resistor must be the nominal value of the RTD. For example, use 100 ohms for PT100 RTD .

434

Technical Specifications

Appendix A

EM 231 RTD Module Ranges

EM 231 RTD temperature ranges and accuracy for each type of RTD module are shown in Tables

A-35 and A-36.

1

Table A-35 Temperature Ranges (

°

C) and Accuracy for the RTD Module

Decimal Hex Pt10000

Pt100,

Pt200,

Pt500,

Pt1000,

& GOST

0.003850

GOST

0.003910

Pt10,

Pt50,

Pt100,

Pt500

Ni100,

Ni120,

Ni1000

LG-Ni1000

Ni100

GOST

0.006170

32767

32766

32511

27649

27648

25000

18000

7FFF

7FFE

7EFF

6C01

6C00

61A8

4650

Cu 10

0.00427

GOST

0.00426

Cu 10

Cu 50

Cu 100

Cu 500

15000

12950

11000

10000

8500

6000

3120

2950

2600

2500

2400

2124

2000

1800

1

0

—1

500

—600

3A98

3296

2AF8

2710

2134

1770

0C30

0B86

0A28

09C4

960

84C

7D0

708

0001

0000

FFFF

FE0C

FDA8

600.0

↑

1000.0

°

°

C

C

850.0

↑

1000.0

°

°

C

C

↑

1295.0

1100.0

°

°

C

C

295.0

250.0

↑

°

°

C

C

212.4

↑

°

C

312.0

260.0

↑

°

°

C

C

240.0

200.0

↑

°

°

C

C

0.1

°

C

0.0

°

C

—0.1

°

C

0.1

°

C

0.0

°

C

—0.1

°

C

0.1

°

C

0.0

°

C

—0.1

°

C

0.1

°

0.0

°

C

—0.1

°

C

—60.0

C

°

C

180.0

°

C

0.1

°

—60.0

C

0.0

°

C

—0.1

°

C

°

C

0.1

°

C

0.0

°

C

—0.1

°

C

—1050 FBE6 —105.0

°

C

#

—105.0

°

#

C

—2000

—2400

—2430

—2600

—273.2

—6000

F830

F6A0

F682

F5D8

F554

E890

—200.0

—243.0

#

—10500

—12000

D6FC

D120

—32767

—32768

8001

8000

ACCURACY OVER FULL

SPAN

ACCURACY IN

NOMINAL RANGE

±

0.4%

±

4

°

C

°

°

C

C

—200.0

—243.0

#

±

0.1%

±

1

°

C

°

°

C

C

—260.0

°

C

—273.2

°

C

±

0.5%

±

1

°

C

1

±

0.2%

±

0.6

°

C

±

±

0.5%

42.8

°

C

—200.0

—240.0

#

±

0.2%

±

1

°

C

°

°

C

C

±

0.3%

±

1

°

C

0.1

°

C

0.0

°

C

—0.1

°

C

—50.0

°

C

—60.0

°

C

#

2

GOST

0.00428

Cu 10

Cu 50

Cu 100

Cu 500

↑

240.0

°

C

200.0

°

C

0.1

°

C

0.0

°

C

—0.1

°

C

—200.0

°

C

—240.0

°

C

#

±

0.3%

±

1

°

C

I

N

A

L

N

O

M

R

A

N

G

E

↑

Over-range

Under-range

#

OF = Overflow; OR = Over range; NR = Nominal range; UR = Under range; UF = Underflow

↑ or

#

: All analog values exceeding the limits will report the out of range value, 32767 (0x7FFF).

1

Accuracy decreases below —250

ٛ

C to as great as 7

ٛ

C.

Accuracy may deviate up to +/— 1.5% of full-scale when subjected to severe RF interferences such as specified in the generic immunity standard

EN 61000—6—2.

435

S7-200 Programmable Controller System Manual

Table A-36 Temperature Ranges (

°

F) and Accuracy for the RTD Module

Decimal Hex Pt10000

Pt100,

Pt200,

Pt500,

Pt1000,

& GOST

0.003850

GOST

0.003910

Pt10,

Pt50,

Pt100,

Pt500

Ni100,

Ni120,

Ni1000

LG-Ni1000

Ni100

GOST

0.006170

32767

32766

7FFF

7FFE

Cu 10

0.00427

GOST

0.00426

Cu 10

Cu 50

Cu 100

Cu 500

GOST

0.00428

Cu 10

Cu 50

Cu 100

Cu 500

5000

4820

4640

4143

3920

3560

1

0

—1

—580

—760

23630

20120

18320

15620

11120

5936

5630

—1570

—3280

—4000

—4054

—4360

—459.8

1388

12D4

1220

102F

F50

DE8

0001

0000

FFFF

FDBC

FD08

5C4E

4E98

4790

3D04

2B70

1730

15FE

F9DE

F330

F060

F02A

EEF8

EE0A

↑

Over-range

↑

1832.0

°

F

↑

1832.0

°

F

1562.0

°

F

↑

2363.0

°

F

2012.0

°

F

1112.0

°

F

563.0

↑

°

F

↑

593.6

°

F

500.0

°

F

482.0

°

F

414.3

↑

°

F

↑

464.0

°

F

392.0

°

F

0.1

0.0

°

°

—0.1

°

F

F

F

0.1

0.0

°

°

—0.1

°

F

F

F

0.1

0.0

°

°

—0.1

°

F

F

F

—328.0

°

F —328.0

°

F

—405.4

°

F

#

—405.4

°

F

#

—436.0

°

F

—459.8

°

F

0.1

°

F

0.0

°

F

—0.1

°

F

—76.0

°

F

356.0

°

F

0.1

°

F

0.0

°

F

—0.1

°

—76.0

°

F

F

—157.0

°

F

#

—157.0

°

F

#

0.1

°

F

0.0

°

F

—0.1

°

F

—328.0

°

F

—400.0

°

F

#

0.1

°

F

0.0

°

F

—0.1

°

F

—58.0

°

F

—76.0

°

F

#

↑

464.0

°

F

392.0

°

F

0.1

°

F

0.0

°

F

—0.1

°

F

—328.0

—400.0

#

°

°

F

F

M

I

N

A

L

N

O

G

E

R

A

N

Under-range

#

—32767

—32768

8001

8000

OF =Overflow; OR = Over range; NR = Nominal range; UR = Under range; UF = Underflow

↑ or

#

: All analog values exceeding the limits will report the out of range value, 32767 (0x7FFF).

436

Technical Specifications

Appendix A

Table A-37 Representation of the analog values from 150

Ω to 600

Ω resistive transducers

System Resistive transducer range

Decimal

32767

32512

32511

27649

27648

20736

1

0

Hexadecimal

7FFF

7F00

7EFF

6C01

6C00

5100

1

0

150

Ω

177.77

Ω

176.39

Ω

176.38

Ω

150.01

150 Ω

112.5

Ω

Ω

355.54

Ω

352.78

Ω

352.77

Ω

300.01

300

Ω

Ω

300 Ω

225 Ω

10.85m

Ω 5.43m

Ω

0 Ω 0 Ω

Negative values are physically impossible

600

Ω

711.09

Ω

705.55

Ω

705.53

Ω

600.02

Ω

600 Ω

450 Ω

21.70m

Ω

0 Ω

Overflow

Overshoot range

Nominal range

Undershoot range

437

S7-200 Programmable Controller System Manual

EM 277 PROFIBUS—DP Module Specifications

Table A-38 EM 277 PROFIBUS—DP Module Order Number

Order Number

6ES7 277—0AA22—0XA0

Expansion Model

EM 277 PROFIBUS—DP —

EM Inputs

—

EM Outputs Removable Connector

No

Table A-39 EM 277 PROFIBUS—DP Module General Specifications

Order Number

Module Name and

Description

Dimensions (mm)

(W x H x D)

6ES7 277—0AA22—0XA0 EM 277 PROFIBUS—DP 71 x 80 x 62

Weight

175 g

Dissipation

2.5 W

+5 VDC

VDC Requirements

+24 VDC

150mA See below

Table A-40

EM 277 PROFIBUS—DP Module Specifications

Number of Ports (Limited Power)

Electrical interface

PROFIBUS—DP/MPI baud rates

(set automatically)

Protocols

Cable Length

Up to 93.75 kbaud

187.5 kbaud

500 kbaud

1 to 1.5 Mbaud

3 to 12 Mbaud

Voltage range

Maximum current per port

Current limit

Isolation

General

Network Capabilities

Station address settings

Maximum stations per segment

Maximum stations per network

MPI Connections

24 VDC Input Power Requirements

Voltage range

Maximum current

Module only with port active

Add 90 mA of 5V port load

Add 120 mA of 24V port load

Ripple noise (<10 MHz)

Isolation (field to logic)

1

5 VDC Power on Communications Port

Maximum current per port

Isolation (24 VDC to logic)

24 VDC Power on Communications Port

1

RS—485

6ES7 277—0AA22—0XA0

9.6, 19.2, 45.45, 93.75, 187.5, and 500 kbaud; 1, 1.5, 3, 6, and

12 Mbaud

PROFIBUS—DP slave and MPI slave

1200 m

1000 m

400 m

200 m

100 m

0 to 99 (set by rotary switches)

32

126, up to 99 EM 277 stations

6 total, 2 reserved (1 for PG and 1 for OP)

20.4 to 28.8 VDC (Class 2, Limited Power, or sensor power from PLC)

30 mA

60 mA

180 mA

<1 V peak to peak (maximum)

500 VAC for 1 minute

90 mA

500 VAC for 1 minute

20.4 to 28.8 VDC

120 mA

0.7 to 2.4 A

Not isolated, same circuit as input 24 VDC

1

No power is supplied to module logic by the 24 VDC supply. 24 VDC supplies power for the communications port.

438

Technical Specifications

Appendix A

S7-200 CPUs that Support Intelligent Modules

The EM 277 PROFIBUS—DP slave module is an intelligent expansion module designed to work with the S7-200 CPUs shown in Table A-41.

Table A-41 EM 277 PROFIBUS—DP Module Compatibility with S7-200 CPUs

CPU Description

CPU 222 Rel. 1.10 or greater CPU 222 DC/DC/DC and CPU 222 AC/DC/Relay

CPU 224 Rel. 1.10 or greater

CPU 224XP Rel. 2.0 or greater

CPU 226 Rel. 1.00 or greater

CPU 224 DC/DC/DC and CPU 224 AC/DC/Relay

CPU 224XP DC/DC/DC and CPU 224XP AC/DC/Relay

CPU 226 DC/DC/DC and CPU 226 AC/DC/Relay

Address Switches and LEDs

The address switches and status LEDs are located on the front of the module as shown in Figure

A-26. The pin-out for the DP slave port connector is also shown. See Table A-45 for a description of the status LEDs.

Front View of EM 277 PROFIBUS—DP

Address Switches: x10=sets the most significant digit of the address x1= sets the least significant digit of the address

9-Pin Sub D Connector Pin-out

9

6

9-pin D

Female

Connector

5

1

Pin # Description

1 Chassis ground, tied to the connector shell

2 24V Return (same as M on terminal block)

3 Isolated Signal B (RxD/TxD+)

4 Isolated Request to Send (TTL level)

5 Isolated +5V Return

6 Isolated +5V (90 mA maximum)

7 +24V (120 mA maximum, with reverse voltage protection diode)

8 Isolated Signal A (RxD/TxD—)

9 No Connection

Note: Isolated means 500V of isolation from digital logic and 24V input power.

DP Slave Port Connector

Figure A-26 EM 277 PROFIBUS—DP

439

S7-200 Programmable Controller System Manual

Distributed Peripheral (DP) Standard Communications

PROFIBUS—DP (or DP Standard) is a remote I/O communications protocol defined by the

European Standard EN 50170. Devices that adhere to this standard are compatible even though they are manufactured by different companies. DP stands for distributed peripherals, that is, remote I/O. PROFIBUS stands for Process Field Bus.

The EM 277 PROFIBUS—DP module has implemented the DP Standard protocol as defined for slave devices in the following communications protocol standards:

—

—

EN 50 170 (PROFIBUS) describes the bus access and transfer protocol and specifies the properties of the data transfer medium.

EN 50 170 (DP Standard) describes the high-speed cyclic exchange of data between DP masters and DP slaves. This standard defines the procedures for configuration and parameter assignment, explains how cyclic data exchange with distributed I/O functions, and lists the diagnostic options which are supported.

A DP master is configured to know the addresses, slave device types, and any parameter assignment information that the slaves require. The master is also told where to place data that is read from the slaves (inputs) and where to get the data to write to the slaves (outputs). The DP master establishes the network and then initializes its DP slave devices. The master writes the parameter assignment information and I/O configuration to the slave. The master then reads the diagnostics from the slave to verify that the DP slave accepted the parameters and the I/O configuration. The master then begins to exchange I/O data with the slave. Each transaction with the slave writes outputs and reads inputs. The data exchange mode continues indefinitely. The slave devices can notify the master if there is an exception condition and the master then reads the diagnostic information from the slave.

Once a DP master has written the parameters and I/O configuration to a DP slave, and the slave has accepted the parameters and configuration from the master, the master owns that slave. The slave only accepts write requests from the master that owns it. Other masters on the network can read the slave’s inputs and outputs, but they cannot write anything to the slave.

Using the EM 277 to Connect an S7-200 as a DP Slave

The S7-200 CPU can be connected to a PROFIBUS—DP network through the EM 277

PROFIBUS—DP expansion slave module. The EM 277 is connected to the S7-200 CPU through the serial I/O bus. The PROFIBUS network is connected to the EM 277 PROFIBUS—DP module through its DP communications port. This port operates at any PROFIBUS baud rate between

9600 baud and 12 Mbaud. See the Specifications for EM 277 PROFIBUS—DP Module for the baud rates supported.

As a DP slave device, the EM 277 module accepts several different I/O configurations from the master, allowing you to tailor the amount of data transferred to meet the requirements of the application. Unlike many DP devices, the EM 277 module does not transfer only I/O data. Inputs, counter values, timer values, or other calculated values can be transferred to the master by first moving the data to the variable memory in the S7-200 CPU. Likewise, data from the master is stored in variable memory in the S7-200 CPU and can be moved to other data areas.

440

Technical Specifications

Appendix A

The DP port of the EM 277 PROFIBUS—DP module can be attached to a DP master on the network and still communicate as an MPI slave with other master devices such as SIMATIC programming devices or S7-300/S7-400 CPUs on the same network

.

Figure A-27 shows a

PROFIBUS network with a CPU 224 and an EM 277 PROFIBUS—DP module.

—

—

—

The CPU 315—2 is the DP master and has been configured by a

SIMATIC programming device with

STEP 7 programming software.

The CPU 224 is a DP slave owned by the CPU 315—2. The ET 200

I/O module is also a slave owned by the CPU 315—2.

The S7-400 CPU is attached to the PROFIBUS network and is reading data from the CPU 224 by means of XGET instructions in the

S7-400 CPU user program.

SIMATIC programming device

CPU 400

S7-300 with

CPU 315-2 DP

ET 200B

CPU 224

EM 277

PROFIBUS—DP

Figure A-27 EM 277 PROFIBUS—DP Module and CPU

224 on a PROFIBUS Network

Configuration

To use the EM 277 PROFIBUS—DP as a

DP slave, you must set the station address of the DP port to match the address in the configuration of the master. The station address is set with the rotary switches on the EM 277 module. You must power cycle the CPU after you have made a switch change in order for the new slave address to take effect.

The master device exchanges data with each of its slaves by sending information from its output area to the slave’s output buffer (called a “Receive mailbox”). The slave responds to the message from the master by returning an input buffer

(called a “Send mailbox”) which the master stores in an input area.

VB0

VB4999

VB5000

VB5015

VB5016

VB5031

VB5032

VB5119

CPU 224

V memory

Offset:

5000 bytes

Output buffer

(Receive mailbox):16 bytes

Input buffer

(Send mailbox):

16 bytes

EM 277

P000

PROFIBUS—DP

Module

CPU 315-2 DP

I/O address areas

PI256

I/O input area:

16 bytes

PI271

I/O output area:

16 bytes

PQ256

PQ271

VB: variable memory byte

Figure A-28

P: peripheral

PI: peripheral input

PQ: peripheral output

V Memory and I/O Address Area

Figure A-28 shows an example of the V memory and I/O address area of a PROFIBUS—DP

Master.

The EM 277 PROFIBUS—DP can be configured by the DP master to accept output data from the master and return input data to the master. The output and input data buffers reside in the variable memory (V memory) of the S7-200 CPU. When you configure the DP master, you define the byte location in V memory where the output data buffer should start as part of the parameter assignment information for the EM 277. You also define the I/O configuration as the amount of output data to be written to the S7-200 CPU and amount of input data to be returned from the

S7-200 CPU. The EM 277 determines the size of the input and output buffers from the I/O configuration. The DP master writes the parameter assignment and I/O configuration information to the EM 277 PROFIBUS DP module. The EM 277 then transfers the V memory address and input and output data lengths to the S7-200 CPU.

Figure A-28 shows a memory model of the V memory in a CPU 224 and the I/O address areas of a DP master CPU. In this example, the DP master has defined an I/O configuration of 16 output bytes and 16 input bytes, and a V memory offset of 5000. The output buffer and input buffer lengths in the CPU 224 (determined from the I/O configuration) are both 16 bytes long. The output data buffer starts at V5000; the input buffer immediately follows the output buffer and begins at

V5016. The output data (from the master) is placed in V memory at V5000. The input data (to the master) is taken from the V memory at V5016.

441

S7-200 Programmable Controller System Manual

Tip

If you are working with a data unit (consistent data) of three bytes or data units greater than four bytes, you must use SFC14 to read the inputs of the DP slave and SFC15 to address the outputs of the DP slave. For more information, see the S

ystem Software for S7-300 and S7-400

System and Standard Functions Reference Manual

.

Table A-42 lists the configurations that are supported by the EM 277 PROFIBUS—DP module. The default configuration for the EM 277 module is two words of input and two words of output.

Table A-42 EM 277 Configuration Options

Configuration Inputs to Master

1 1 word

8

9

6

7

4

5

2

3

10

11

12

2 words

4 words

8 words

16 words

32 words

8 words

16 words

32 words

2 words

4 words

8 words

17

18

19

20

13

14

15

16

2 bytes

8 bytes

32 bytes

64 bytes

4 bytes

8 bytes

12 bytes

16 bytes

Outputs from Master

1 word

2 words

4 words

8 words

16 words

32 words

2 words

4 words

8 words

8 words

16 words

32 words

2 bytes

8 bytes

32 bytes

64 bytes

4 bytes

8 bytes

12 bytes

16 bytes

Data Consistency

You can configure the location of the input and output buffers to be anywhere in the V memory of the S7-200 CPU. The default address for the input and output buffers is VB0. The location of the input and output buffers is part of the parameter assignment information that the master writes to the S7-200 CPU. You configure the master to recognize its slaves and to write the required parameters and I/O configuration to each of its slaves.

Use the following tools to configure the DP master:

—

—

For SIMATIC S5 masters, use COM PROFIBUS Windows software

For SIMATIC S7 masters, use STEP 7 programming software

—

For SIMATIC 505 masters, use COM PROFIBUS and either TISOFT2 or SoftShop

For detailed information about using these configuration and programming software packages, refer to the manuals for these devices. For detailed information about the PROFIBUS network and its components, refer to the

ET 200 Distributed I/O System Manual

.

442

Technical Specifications

Appendix A

Data Consistency

PROFIBUS supports three types of data consistency:

—

—

Byte consistency ensures that bytes are transferred as whole units.

Word consistency ensures that word transfers cannot be interrupted by other processes in the CPU (the two bytes composing the word are always moved together and cannot be split). Use

Word consistency if the data values being transferred are integers.

Master

Byte 0

Byte 1

Byte 2

Byte 3

Byte 0

Byte 1

Byte 2

Byte 3

Byte 0

Byte 1

Byte 2

Byte 3

Byte 4

Byte 5

Byte 6

Byte 7

Slave

Byte 0

Byte 1

Byte 2

Byte 3

Byte 0

Byte 1

Byte 2

Byte 3

Byte 0

Byte 1

Byte 2

Byte 3

Byte 4

Byte 5

Byte 6

Byte 7

Byte consistency

Word consistency

Buffer consistency

Figure A-29 Byte, Word, and Buffer Data Consistency

—

Buffer consistency ensures that the entire buffer of data is transferred as a single unit, uninterrupted by any other process in the CPU. Buffer consistency should be used if the data values are double words or floating point values or when a group of values all relate to one calculation or item.

You set the data consistency as part of the I/O configuration in the master. The data consistency selection is written to the DP slave as part of the initialization of the slave. Both the DP master and the DP slave use the data consistency selection to be sure that data values (bytes, words, or buffers) are transferred uninterrupted within master and slave. The different types of consistency are shown in Figure A-29.

User Program Considerations

Once the EM 277 PROFIBUS—DP module has been successfully configured by a DP master, the

EM 277 and the DP master enter data exchange mode. In data exchange mode, the master writes output data to the EM 277 PROFIBUS—DP module, the EM 277 module then responds with most current S7-200 CPU input data. The EM 277 module continuously updates its inputs from the

S7-200 CPU in order to provide the most recent input data to the DP Master. The module then transfers the output data to the S7-200 CPU. The output data from the master is placed into V memory (the output buffer) starting at the address that the DP master supplied during initialization.

The input data to the master is taken from the V memory locations (the input buffer) immediately following the output data.

The output data from the master must be moved by the user program in the S7-200 CPU from the output buffer to the data areas where it is to be used. Likewise, the input data to the master must be moved from the various data areas to the input buffer for transfer to the master.

Output data from the DP master is placed into V memory immediately after the user program portion of the scan has been executed. Input data (to the master) is copied from V memory to the

EM 277 for transfer to the master at the same time.

Output data from the master is only written into V memory when there is new data available from the master.

Input data to the master are transmitted to the master on the next data exchange with the master.

The starting address of the data buffers in V memory and the size of the buffers must be known at the time the user program for the S7-200 CPU is created.

443

S7-200 Programmable Controller System Manual

Status Information

There are 50 bytes of special memory (SM) allocated to each intelligent module based on its physical position. The module updates the SM locations corresponding to the modules’ relative position to the CPU (with respect to other modules). If it is the first module, it updates SMB200 through SMB249. If it is the second module, it updates SMB250 through SMB299, and so on. See

Table A-43.

Table A-43 Special Memory Bytes SMB200 to SMB549

Special Memory Bytes SMB200 to SMB549

Intelligent

Module in

Slot 0

SMB200 to

SMB249

Intelligent

Module in

Slot 1

SMB250 to

SMB299

Intelligent

Module in

Slot 2

SMB300 to

SMB349

Intelligent

Module in

Slot 3

SMB350 to

SMB399

Intelligent

Module in

Slot 4

SMB400 to

SMB449

Intelligent

Module in

Slot 5

SMB450 to

SMB499

Intelligent

Module in

Slot 6

SMB500 to

SMB549

These SM locations show default values if DP communications have not been established with a master. After a master has written parameters and I/O configuration to the EM 277

PROFIBUS—DP module, these SM locations show the configuration set by the DP master. You should check the protocol status byte (for example SMB224 for slot 0) to be sure that the EM 277 is currently in data exchange mode with the master before using the information in the SM locations shown in Table A-44, or data in the V memory buffer.

Tip

You cannot configure the EM 277 PROFIBUS—DP I/O buffer sizes or buffer location by writing to

SM memory locations. Only the DP master can configure the EM 277 PROFIBUS—DP module for DP operation.

Table A-44 Special Memory Bytes for the EM 277 PROFIBUS—DP

Intelligent

Module in

Slot 0

…

Intelligent

Module in

Slot 6

SMB200 to

SMB215

SMB216 to

SMB219

SMW220

SMB222

SMB223

SMB224

…

SMB500 to

SMB515

…

SMB516 to

SMB519

…

SMW520

…

SMB522

…

SMB523

…

SMB524

Description

Module name (16 ASCII characters)

“EM277 ProfibusDP”

S/W revision number (4 ASCII characters) xxxx

Error code

16#0000

16#0001

No error

No user power

16#0002 to 16#FFFF Reserved

DP slave module’s station address as set by address switches (0 — 99 decimal)

Reserved

DP standard protocol status byte

MSB

0 0 0 0 0 0 S1

LSB

S0

SMB225

SMW226

SMB228

SMB229

SMB230 to

SMB249

…

SMB525

…

SMW526

…

SMB528

…

SMB529

…

SMB530 to

SMB549

0

1

S1

0

1

S0

0

1

0

1

DP Standard status byte description

DP communications not initiated since power on

Configuration/parameterization error detected

Currently in data exchange mode

Dropped out of data exchange mode

DP standard protocol — address of the slave’s master (0 to 126)

DP standard protocol — V memory address of the output buffer as an offset from VB0.

DP standard protocol — number of bytes of output data

DP standard protocol — number of bytes of input data

Reserved — cleared on power up

Note: SM locations are updated each time the DP slave module accepts configuration/ parameterization information. These locations are updated even if a configuration/parameterization error is detected. The locations are cleared on each power up.

444

Technical Specifications

Appendix A

LED Status Indicators for the EM 277 PROFIBUS—DP

The EM 277 PROFIBUS—DP module has four status LEDs on the front panel to indicate the operational state of the DP port:

—

—

After the S7-200 CPU is turned on, the DX MODE LED remains off as long as DP communications are not attempted.

Once DP communications have been successfully initiated (the EM 277 PROFIBUS—DP module has entered data exchange mode with the master), the DX MODE LED turns green and remains on until data exchange mode is exited.

—

—

If DP communications are lost, which forces the EM 277 module to exit data exchange mode, the DX MODE LED turns OFF and the DP ERROR LED turns red. This condition persists until the S7-200 CPU is powered off or data exchange is resumed.

If there is an error in the I/O configuration or parameter information that the DP master is writing to the EM 277 module, the DP ERROR LED flashes red.

—

If user 24 VDC is not provided, the POWER LED will be off.

Table A-45 summarizes the status indications signified by the EM 277 status LEDs.

Table A-45 EM 277 PROFIBUS—DP Module Status LEDs

LED OFF RED

CPU FAULT

POWER

Module is good

No 24 VDC User Power

Internal Module

Failure

—-

—-

FLASHING RED

—-

GREEN

—24 VDC User Power

Good

DP ERROR

DX MODE

No Error

Not in Data Exchange Mode

Left Data Exchange

Mode

—-

Parameterization/

Configuration Error

—-

—-

In Data Exchange

Mode

Note: When the EM 277 PROFIBUS—DP module is used exclusively as an MPI slave, only the green Power LED is on.

Additional Configuration Features

The EM 277 PROFIBUS—DP module can be used as a communications interface to other MPI masters, whether or not it is being used as a PROFIBUS—DP slave. The module can provide a connection from the S7-300/400 to the S7-200 using the XGET/XPUT functions of the

S7-300/400. STEP 7—Micro/WIN and a network card (such as the CP5611) using the MPI or

PROFIBUS parameter set, an OP device or the TD 200 (Rel. 2.0 or greater, order number 6ES7

272—0AA20—0YA0) can be used to communicate with the S7-200 through the EM 277

PROFIBUS—DP module.

A maximum of six connections (six devices) in addition to the DP master can be connected to the

EM 277 PROFIBUS—DP module. One connection is reserved for a programming device (PG) and one is reserved for an operator panel (OP). The other four connections can be used by any MPI master. In order for the EM 277 PROFIBUS—DP module to communicate with multiple masters, all masters must be operating at the same baud rate. See the Figure A-30 for one possible network configuration.

When the EM 277 PROFIBUS—DP module is used for MPI communications, the MPI master must use the station address of the module for all messages that are sent to the S7-200 to which the module is connected. MPI messages sent to the EM 277 PROFIBUS—DP module are passed on to the S7-200.

The EM 277 PROFIBUS—DP module is a slave module and cannot be used for communications between S7-200 PLCs using the NETR and NETW functions. The EM 277 PROFIBUS—DP module cannot be used for Freeport communications.

445

S7-200 Programmable Controller System Manual

PROFIBUS—DP

Master

S7-300

XPUTS/XGETS

Functions

PROFIBUS—DP

STEP 7—Micro/WIN

1

TD 200

1,2

MPI MPI MPI

PROFIBUS—DP/MPI

PROFIBUS—DP

MPI

EM 277

PROFIBUS—DP

Module

1) Communications are possible only to the

S7-200 CPUs and the EM 277.

2) TD 200 must be Rel 2.0 or greater.

S7-22x CPU

Figure A-30 PROFIBUS—DP/MPI Network

Device Database File: GSD

Different PROFIBUS devices have different performance characteristics. These characteristics differ with respect to functionality (for example, the number of I/O signals and diagnostic messages) or bus parameters, such as transmission speed and time monitoring. These parameters vary for each device type and vendor, and are usually documented in a technical manual. To help you achieve a simple configuration of PROFIBUS, the performance characteristics of a particular device are specified in an electronic data sheet called a device database file, or GSD file. Configuration tools based on GSD files allow simple integration of devices from different vendors in a single network.

The device database file provides a comprehensive description of the characteristics of a device in a precisely defined format. These GSD files are prepared by the vendor for each type of device and made available to the PROFIBUS user. The GSD file allows the configuration system to read in the characteristics of a PROFIBUS device and use this information when configuring the network.

The latest versions of the COM PROFIBUS or STEP 7 software include configuration files for the

EM 277 PROFIBUS—DP Module. If your version of software does not include a configuration file for the EM 277, you can access the latest GSD file (SIEM089D.GSD) at website www.profibus.com.

If you are using a non-Siemens master device, refer to the documentation provided by the manufacturer on how to configure the master device by using the GSD file.

446

Technical Specifications

Appendix A

;================================================

; GSD File for the EM 277 PROFIBUS-DP with a DPC31

; MLFB : 6ES7 277-0AA2.-0XA0

; DATE : 26-March-2001

;================================================

#Profibus_DP

;General parameters

GSD_Revision

Vendor_Name

Model_Name

Revision

Ident_Number

Protocol_Ident

Station_Type

FMS_supp

Hardware_Release

Software_Release

9.6_supp

19.2_supp

45.45_supp

93.75_supp

187.5_supp

500_supp

1.5M_supp

3M_supp

6M_supp

12M_supp

MaxTsdr_9.6

MaxTsdr_19.2

MaxTsdr_45.45

MaxTsdr_93.75

MaxTsdr_187.5

MaxTsdr_500

MaxTsdr_1.5M

MaxTsdr_3M

MaxTsdr_6M

MaxTsdr_12M

Redundancy

Repeater_Ctrl_Sig

24V_Pins

= 1

= ”Siemens”

= ”EM 277 PROFIBUS-DP”

= ”V1.02”

= 0x089D

= 0

= 0

= 0

= ”1.00”

= ”1.02”

= 1

= 1

= 1

= 1

= 1

= 1

= 1

= 1

= 1

= 1

= 60

= 60

= 250

= 60

= 60

= 100

= 150

= 250

= 450

= 800

= 0

= 2

= 2

; Slave-Specification:

OrderNumber=”6ES7 277-0AA2.-0XA0”

Periphery=”SIMATIC S5”

[email protected]@SIMATIC

Freeze_Mode_supp

Sync_Mode_supp

Set_Slave_Add_Supp

Auto_Baud_supp

Min_Slave_Intervall = 1

Fail_Safe

Max_Diag_Data_Len

Modul_Offset

Modular_Station

Max_Module

Max_Input_len

Max_Output_len

Max_Data_len

= 1

= 1

= 0

= 1

= 0

= 6

= 0

= 1

= 1

= 128

= 128

= 256

; UserPrmData-Definition

ExtUserPrmData=1 ”I/O Offset in the V-memory”

Unsigned16 0 0-10239

EndExtUserPrmData

; UserPrmData: Length and Preset:

User_Prm_Data_Len=3

User_Prm_Data= 0,0,0

Max_User_Prm_Data_Len=3

Ext_User_Prm_Data_Const(0)=0x00,0x00,0x00

Ext_User_Prm_Data_Ref(1)=1

;================================================

; Continuation of GSD File

;================================================

; Module Definition List

Module = ”2 Bytes Out/ 2 Bytes In

EndModule

Module = ”8 Bytes Out/ 8 Bytes In

-” 0x31

-” 0x37

EndModule

Module = ”32 Bytes Out/ 32 Bytes In

0xC0,0x1F,0x1F

EndModule

Module = ”64 Bytes Out/ 64 Bytes In

0xC0,0x3F,0x3F

EndModule

Module = ”1 Word Out/ 1 Word In

EndModule

Module = ”2 Word Out/ 2 Word In

-” 0x70

-” 0x71

EndModule

Module = ”4 Word Out/ 4 Word In

EndModule

Module = ”8 Word Out/ 8 Word In

EndModule

Module = ”16 Word Out/ 16 Word In

EndModule

Module = ”32 Word Out/ 32 Word In

0xC0,0x5F,0x5F

EndModule

Module = ”2 Word Out/ 8 Word In

0xC0,0x41,0x47

EndModule

Module = ”4 Word Out/ 16 Word In

0xC0,0x43,0x4F

EndModule

Module = ”8 Word Out/ 32 Word In

0xC0,0x47,0x5F

EndModule

Module = ”8 Word Out/ 2 Word In

0xC0,0x47,0x41

EndModule

Module = ”16 Word Out/ 4 Word In

0xC0,0x4F,0x43

EndModule

Module = ”32 Word Out/ 8 Word In

0xC0,0x5F,0x47

EndModule

Module = ”4 Byte buffer I/O

EndModule

Module = ”8 Byte buffer I/O

EndModule

Module = ”12 Byte buffer I/O

EndModule

Module = ”16 Byte buffer I/O

EndModule

-” 0x73

-” 0x77

-” 0x7F

-” 0xB3

-” 0xB7

-” 0xBB

-” 0xBF

-”

-”

-”

-”

-”

-”

-”

-”

-”

Figure A-31 Listing of the GSD File for the EM 277 PROFIBUS Module

447

S7-200 Programmable Controller System Manual

Sample Program for DP Communications to a CPU

A sample program in Statement List for the PROFIBUS—DP module in slot 0 for a CPU that uses the DP port information in SM memory is shown below. The program determines the location of the DP buffers from SMW226 and the sizes of the buffers from SMB228 and SMB229. This information is used to copy the data in the DP output buffer to the process-image output register of the CPU. Similarly, the data in the process-image input register of the CPU are copied into the V memory input buffer.

In the following sample program for a DP module in position 0, the DP configuration data in the

SM memory area provides the configuration of the DP slave. The program uses the following data:

SMW220

SMB224

SMB225

SMW226

SMB228

SMB229

VD1000

VD1004

DP Module Error Status

DP Status

Master Address

V memory offset of outputs

Number of bytes of output data

Number of bytes of input data

Output Data Pointer

Input Data Pointer

448

Technical Specifications

Appendix A

Example of DP Communications to a CPU

Network 1

LDB= SMB224, 2

MOVD &VB0, VD1000

ITD

+D

SMW226, AC0

AC0, VD1000

Network 2

//Calculate the Output data pointer.

//If in data exchange mode:

//1. Output buffer is an offset from VB0

//2. Convert Vmem offset to double integer

//3. Add to VB0 address to get output data

// pointer.

//Calculate the Input data pointer.

//If in data exchange mode:

//1. Copy the output data pointer

//2. Get the number of output bytes

//3. Add to output data pointer to get

// starting input data pointer.

LDB= SMB224, 2

MOVD VD1000, VD1004

BTI

ITD

+D

SMB228, AC0

AC0, AC0

AC0, VD1004

Network 3 //Set amount of data to be copied.

//If in data exchange mode:

//1. Get number of output bytes to copy

//2. Get number of input bytes to copy

LDB= SMB224, 2

MOVB SMB228, VB1008

MOVB SMB229, VB1009

Network 4 //Transfer Master outputs to CPU

//outputs. Copy CPU inputs to the

//Master inputs. If in data exchange mode:

//1. Copy Master outputs to CPU outputs

//2. Copy CPU inputs to Master inputs

LDB=

BMB

BMB

SMB224, 2

*VD1000, QB0, VB1008

IB0, *VD1004, VB1009

449

S7-200 Programmable Controller System Manual

EM 241 Modem Module Specifications

Table A-46 EM 241 Modem Module Order Number

Order Number Expansion Model EM Inputs

6ES7 241—1AA22—0XA0 EM 241 Modem Module —

1 Eight Q outputs are used as logical controls of the modem function and do not directly control any external signals.

8

1

EM Outputs Removable Connector

No

Table A-47 EM 241 Modem Module General Specifications

Order Number

6ES7 241—1AA22—0XA0

Module Name and

Description

EM 241 Modem Module

Dimensions (mm)

(W x H x D)

71.2 x 80 x 62

Weight

190 g

Dissipation

2.1 W

+5 VDC

VDC Requirements

+24 VDC

80 mA 70 mA

Table A-48 EM 241 Modem Module Specifications

General

T elephone Connection

Isolation

(phone line to logic and field power)

Physical connection

Modem standards

Security features

Dialing

Messaging Protocols

Industrial Protocols

24 VDC Input Power Requirements

Voltage range

Isolation (field power to logic)

6ES7 241—1AA22—0XA0

1500 VAC (Galvanic)

RJ11 (6 position, 4 wire)

Bell 103, Bell 212, V.21, V.22, V.22 bis, V.23c, V.32, V.32 bis,

V.34 (default)

Password

Callback

Pulse or Tone

Numeric

TAP (alphanumeric)

UCP commands 1, 30, 51

Modbus

PPI

20.4 to 28.8 VDC

500 VAC for 1 minute

Modem

Expansion

The EM 241 Modem Module replaces the function of an external modem connected to the communications port of the CPU. With an

EM 241 installed in your S7-200 system, all you need to communicate with your CPU from a remote location is a personal computer with an external modem and STEP 7—Micro/WIN.

See Chapter 7, Communicating over a

Network, for information on configuring. See

Chapter 10, Creating a Program for the Modem

Module for programming and advanced features of the module.

You can use the STEP 7—Micro/WIN Modem

Expansion Wizard to configure an EM 241

Modem Module. See Chapter 10 for more information about the Modem Expansion

Wizard.

Country Code Switch

Figure A-32 EM 241 Modem Module Terminal Block

Diagram

450

Technical Specifications

Appendix A

S7-200 CPUs that Support Intelligent Modules

The EM 241 Modem module is an intelligent expansion module designed to work with the S7-200

CPUs shown in Table A-49.

Table A-49 EM 241 Modem Module Compatibility with S7-200 CPUs

CPU Description

CPU 222 Rel. 1.10 or greater CPU 222 DC/DC/DC and CPU 222 AC/DC/Relay

CPU 224 Rel. 1.10 or greater

CPU 224XP Rel 2.0 or greater

CPU 226 Rel. 1.00 or greater

CPU 224 DC/DC/DC and CPU 224 AC/DC/Relay

CPU 224XP DC/DC/DC and CPU 224XP DC/DC/Relay

CPU 226 DC/DC/DC and CPU 226 AC/DC/Relay

Installing the EM 241

Follow these steps to install the EM 241:

1. Snap the EM 241 on the DIN rail and plug in the ribbon cable.

2. Connect 24 VDC from the CPU sensor supply or external source, and connect the ground terminal to your system earth ground.

3. Plug the phone line into the RJ11 jack.

4. Set the country code switches according to Table A-50. You must set the switches before power is applied to the CPU for the correct country code to be read.

5. Power the CPU. The green MG

(Module Good) light should come on.

Your EM 241 is now ready to communicate.

35

36

38

39

27

30

34

22

25

26

Table A-50

Country Codes Supported by EM 241

Code Country Telecom Standard

00

01

02

05

06

Australia

Austria

Belgium

Canada

China

ACA TS—002

CTR21

CTR21

IC CS03

GB3482

12

16

18

08

09

10

11

Denmark

Finland

France

Germany

Greece

Ireland

Italy

CTR21

CTR21

CTR21

CTR21

CTR21

CTR21

CTR21

Luxembourg

Netherlands

New Zealand

Norway

Portugal

Spain

Sweden

Switzerland

U.K.

U.S.A.

CTR21

CTR21

PTC 200

CTR21

CTR21

CTR21

CTR21

CTR21

CTR21

FCC Part 68

RJ11 Jack

Figure A-33 shows the details of the

RJ11 Jack. You can use adaptors to other standard telephone connectors.

Refer to your adaptor connector documentation for more information.

Figure A-33

1 2 3 4 5 6

Pin

3

4

Description

Ring

Tip

Reverse connection is allowed.

View of RJ11 Jack

Caution

Lightning surges or other unexpected high voltages on the telephone line can damage your EM

241 Modem Module.

Use a commercially available telephone line surge protector, such as are commonly sold for protection of personal computer modems. Surge protectors can be damaged as they protect your EM 241 Modem Module. Choose a surge protector with a positive indicator that shows it is functional.

Check your surge protector regularly to ensure that your EM 241 Modem Module continues to be protected.

451

S7-200 Programmable Controller System Manual

EM 253 Position Module Specifications

Table A-51 EM 253 Position Module Order Number

Order Number

6ES7 253—1AA22—0XA0

Expansion Model

EM 253 Position Module —

EM Inputs

8

1

EM Outputs

1

Eight Q outputs are used as logical controls of the motion function and do not directly control any external signals.

Removable Connector

Yes

Table A-52 EM 253 Position Module General Specifications

Order Number

6ES7 253—1AA22—0XA0

Module Name and

Description

EM 253 Position Module

Dimensions (mm)

(W x H x D)

71.2 x 80 x 62

Weight

0.190 kg

Dissipation

2.5 W

+5 VDC

VDC Requirements

+24 VDC

190 mA See below

Table A-53 EM 253 Position Module Specifications

General

Input Features

Number of inputs

Input type

All except ZP

ZP

Input Voltage

Maximum Continuous permissible

STP, RPS, LMT+, LMT—

ZP

Surge (all inputs)

Rated Value

STP, RPS, LMT+, LMT—

ZP

Logic “1” signal (minimum)

STP, RPS, LMT+, LMT—

ZP

Logic “0” signal (maximum)

STP, RPS, LMT+, LMT—

ZP

Isolation (field to logic)

Optical Isolation (Galvanic)

Isolation groups of

5 points

30 VDC

30 VDC at 20 mA, maximum

35 VDC for 0.5 sec.

24 VDC at 4 mA, nominal

24 VDC at 15 mA, nominal

15 VDC at 2.5 mA, minimum

3 VDC at 8.0 mA, minimum

5 VDC at 1 mA, maximum

1 VDC at 1 mA, maximum

500 VAC for 1 minute

1 point for STP, RPS, and ZP

2 points for LMT+ and LMT—

6ES7 253—1AA22—0XA0

Sink/Source (IEC Type 1 sink, except ZP)

Sink only, current limiting for wide voltage range

Input Delay Times

STP, RPS, LMT+, LMT—

ZP (countable pulse width)

Connection of 2 Wire Proximity Sensor (Bero)

Permissible leakage current

Cable Length

Unshielded

STP, RPS, LMT+, LMT—

ZP

Shielded

STP, RPS, LMT+, LMT—

ZP

Number of inputs on simultaneously

0.2 ms to 12.8 ms, user selectable

2

µ sec minimum

1 mA, maximum

30 meters

Not recommended

100 meters

10 meters

All at 55

°

C (horizontal), All at 45

°

C (vertical)

452

Technical Specifications

Appendix A

Table A-53 EM 253 Position Module Specifications, continued

General

Output Features

Number of integrated outputs

Output type

P0+, P0—, P1+, P1—

P0, P1, DIS, CLR

Output voltage

P0, P1, RS—422 drivers, differential output voltage

Open circuit

Into optocoupler diode with 200

Ω

100

Ω load

54

Ω load series resistance

P0, P1, DIS, CLR open drain recommended voltage, open circuit permissible voltage, open circuit

Sink current

On state resistance

Off state leakage current, 30 VDC

Internal Pull up resistor, output drain to T1

Output current

Number of output groups

Outputs on simultaneously

Leakage current per point

P0, P1, DIS, CLR

Overload Protection

Isolation (field to logic)

Optical Isolation (Galvanic)

Output delay

DIS, CLR: Off to On / On to Off

Pulse distortion

P0, P1, outputs, RS—422 drivers, 100

Ω external load

P0, P1 outputs, open drain, 5 V / 470

Ω external load

Switching frequency

P0+, P0—, P1+, P1—, P0 and P1

Cable length

Unshielded

Shielded

Power Supply

L+ supply voltage

Logic supply output l t

Load current

5 VDC l d

0 mA (no load)

200 mA (rated load)

6 points (4 signals)

RS422/485 driver

Open drain

3.5 V typical

2.8 V minimum

1.5 V minimum

1.0 V minimum

5 VDC, available from module

30 VDC

1

50 mA maximum

15

Ω maximum

10

µ

A maximum

3.3K

Ω

2

1

All at 55

°

C (horizontal), All at 45

°

C (vertical)

10

µ

A maximum

No

500 VAC for 1 minute

30

µ s, maximum

75 ns maximum

300 ns maximum

200 kHz

Not recommended

10 meters

11 to 30 VDC (Class 2, Limited Power, or sensor power from PLC)

+5 VDC +/— 10%, 200 mA maximum

12 VDC Input

120 mA

300 mA

6ES7 253—1AA22—0XA0

24 VDC Input

70 mA

130 mA

Isolation

L+ power to logic

L+ power to inputs

L+ power to outputs

Reverse Polarity

500 VAC for 1 minute

500 VAC for 1 minute

None

L+ input and +5V output are diode-protected. Placing a positive voltage on any M terminal with respect to output point connections can result in potentially damaging current flow.

1

2

Operation of open drain outputs above 5 VDC may increase radio frequency emissions above permissible limits. Radio frequency containment measures may be required for your system or wiring.

Depending on your pulse receiver and cable, an additional external pull up resistor may improve pulse signal quality and noise immunity.

453

S7-200 Programmable Controller System Manual

S7-200 CPUs that Support Intelligent Modules

The EM 253 Position module is an intelligent expansion module designed to work with the S7-200

CPUs shown in Table A-54.

Table A-54 EM 253 Position Module Compatibility with S7-200 CPUs

CPU Description

CPU 222 Rel. 1.10 or greater CPU 222 DC/DC/DC and CPU 222 AC/DC/Relay

CPU 224 Rel. 1.10 or greater

CPU 224XP Rel 2.0 or greater

CPU 226 Rel. 1.00 or greater

CPU 224 DC/DC/DC and CPU 224 AC/DC/Relay

CPU 224XP DC/DC/DC and CPU 224XP DC/DC/Relay

CPU 226 DC/DC/DC and CPU 226 AC/DC/Relay

EM 253 Position Module Status LEDs

The Status LEDs for the Position Modules are shown in Table A-55.

Table A-55 Position Module Status LEDs

Local I/O LED Color

—

—

—

Input

MF

MG

Function Description

Red Illuminated when module detects a fatal error

Green Illuminated when there is no module fault, and flashes at 1 Hz rate when a configuration error is detected

PWR Green Illuminated when 24 VDC is supplied on the L+ and M terminals of the module

STP Green Illuminated when the stop input is on

Input

Input

Input

Input

Output

Output

Output

Output

RPS

ZP

Green

LMT-Green Illuminated when the negative limit input is on

LMT + Green Illuminated when the positive limit input is on

P0 Green Illuminated when the P0 output is pulsing

P1

DIS

CLR

Green

Green

Illuminated when the reference point switch input is on

Illuminated when the zero pulse input is on

Illuminated when the P1 output is pulsing or when this output indicates positive motion

Green Illuminated when the DIS output is active

Green Illuminated when the clear deviation counter output is active

454

Figure A-34 EM 253 Position Module

Technical Specifications

Appendix A

Wiring Diagrams

In the following schematic figures, the terminals are not in order. See Figure A-34 for terminal arrangement.

L+

M

STOP5.6K

1K

1M

RPS 5.6K

1K

2M

ZP

3M

LMT+

5.6K

1K

LMT—

5.6K

1K

4M

P/S 3.3K

+5VDC

T1

P0

3.3K

3.3K

3.3K

P1

DIS

CLR

P0+

P0—

P1+

P1—

M

M

Figure A-35 Internal Schematic for the Inputs and Outputs of the EM 253 Position Module

+24V

24V_RTN

L+

M

STOP

EM253 Motion Module

P/S 3.3K

+5VDC

T1

P0

3.3K

P1

1M

RPS

3.3K

DIS

2M

ZP 3.3K

CLR

3M

LMT+

LMT— 5.6K

1K

4M

P0+

P0—

P1+

P1—

M

M

+24V

FM Step Drive

GATE_N

24V_RTN

GND

ENABLE

ENABLE_N

PULSE

PULSE_N

DIR

DIR_N

GND

GND

Figure A-36 Connecting an EM 253 Position Module to a SIMATIC FM Step Drive

Terminals are not in order. See Figure

A-34 for terminal arrangement.

455

S7-200 Programmable Controller System Manual

+24V

24V_RTN

L+

M

STOP

EM253 Motion Module

P/S 3.3K

+5VDC

T1

P0

3.3K

P1

1M

RPS

3.3K

DIS

2M

ZP 3.3K

CLR

3M

LMT+

P0+

P0—

P1+

LMT—

4M

P1—

M

M

Industrial Devices Corp. (Next Step)

SD

STP

DIR

+

+

+

Terminals are not in order. See Figure

A-34 for terminal arrangement.

Figure A-37 Connecting an EM 253 Position Module to a Industrial Devices Corp. (Next Step)

+24V

24V_RTN

L+

M

STOP

EM253 Motion Module

P/S 3.3K

+5VDC

T1

P0

3.3K

P1

1M

RPS

3.3K

DIS

2M

ZP 3.3K

CLR

3M

LMT+

P0+

P0—

P1+

LMT—

4M

P1—

M

M

Oriental Motor UPK Standard

+

Pulse

—

+

CW/CCW

—

+

SD

—

Figure A-38 Connecting an EM 253 Position Module to an Oriental Motor UPK Standard

Terminals are not in order. See

Figure A-34 for terminal arrangement.

456

Technical Specifications

Appendix A

+24V

24V_RTN

L+

M

STOP

EM253 Motion Module

P/S 3.3K

+5VDC

T1

P0

3.3K

P1

1M

RPS

3.3K

DIS

2M

ZP 3.3K

CLR

3M

LMT+

P0+

LMT—

4M

P0—

P1+

P1—

M

M

Parker/Compumotor OEM 750

Step

Figure A-39 Connecting an EM 253 Position Module to a Parker/Compumotor OEM 750

Terminals are not in order. See Figure

A-34 for terminal arrangement.

457

S7-200 Programmable Controller System Manual

(CP 243—1) Ethernet Module Specifications

Table A-56 (CP 243—1) Ethernet Module Order Number

Order Number

6GK7 243—1EX00—OXE0

Expansion Module

(CP 243—1) Ethernet Module —

EM Inputs

8

1

EM Outputs

1

Eight Q outputs are used as logical controls of Ethernet function and do not directly control any external signals.

Table A-57 (CP 243—1) Ethernet Module General Specifications

Order Number

6GK7 243—1EX00—OXE0

Module Name and

Description

(CP 243—1) Ethernet

Module

Dimensions (mm)

(W x H x D)

71.2 x 80 x 62

Weight

approx.

150 g

Dissipation

1.75 W

Removable Connector

No

+5 VDC

VDC Requirement

+24 VDC

55 mA 60 mA

Table A-58 (CP 243—1) Ethernet Module Specifications

Transmission Rate

Flash memory size

SDRAM memory size

Input voltage

Maximum connections

General

Interface

Connection to Industrial Ethernet (10/100 Mbit/s)

1 Mbyte

8 Mbyte

6GK7 243—1EX00—0XE0

10 Mbits/s and 100 Mbits/s

Starting time or restart time after a reset

User data quantities

8-pin RJ45 socket

20.4 to 28.8 VDC

Maximum of 8 S7 connections (XPUT/XGET and READ/WRITE) plus 1 connection to

STEP 7—Micro/WIN per (CP 243—1) Ethernet Module

2

Approx. 10 seconds

As client: up to 212 bytes for XPUT/XGET

As server: up to 222 bytes for XGET or READ up to 212 bytes for XPUT or WRITE

2

Only one (CP 243—1) Ethernet module should be connected per S7—200 CPU.

The (CP 243—1) Ethernet module is a communications processor used for connecting the S7-200 system to Industrial Ethernet (IE). The S7-200 can be remotely configured, programmed and diagnosed via Ethernet using STEP 7 Micro/WIN. The S7-200 can communicate with another

S7—200, S7-300, or S7-400 controller via Ethernet. It can also communicate with an OPC server.

Industrial Ethernet is designed for industry. It can be used with either noise-free industrial twisted pair (ITP) technology, or the Industry-standard twisted pair (TP) technology. Industrial Ethernet can be implemented to offer a wide range of application specific uses, such as switching, high-speed redundancy, fast connects, and redundant networks. Using the (CP 243—1) Ethernet module, the

S7-200 PLC is made compatible with a wide range of existing products that support Ethernet.

458

Technical Specifications

Appendix A

Ethernet

S7-200 CPUs that Support Intelligent Modules

The (CP 243—1) Ethernet module is an intelligent expansion module designed to work with the

S7-200 CPUs shown in Table A-49.

Table A-59 (CP 243—1) Ethernet Module Compatibility with S7-200 CPUs

CPU Description

CPU 222 Rel. 1.10 or greater CPU 222 DC/DC/DC and CPU 222 AC/DC/Relay

CPU 224 Rel. 1.10 or greater

CPU 224XP Rel. 2.00 or greater

CPU 226 Rel. 1.00 or greater

CPU 224 DC/DC/DC and CPU 224 AC/DC/Relay

CPU 224XP DC/DC/DC and CPU 224XP AC/DC/Relay

CPU 226 DC/DC/DC and CPU 226 AC/DC/Relay

The (CP 243—1) Ethernet module is delivered with a preset, unique worldwide MAC address that cannot be changed.

Functions

The (CP 243—1) Ethernet module independently handles data traffic over the Industrial Ethernet.

—

—

—

—

Communication is based on TCP/IP

For communication between S7-200 CPUs and other S7 control systems or PCs via

Ethernet, communication services are available as Client and Server. Up to eight connects can be operated.

The implementation of PC applications is possible by integration of the S7-OPC Server

The (CP 243—1) Ethernet module allows direct access of the S7-200 programming software, STEP 7—Micro/WIN to S7-200 via Ethernet

Configuration

You can use the STEP 7—Micro/WIN Ethernet Wizard to configure the (CP 243—1) Ethernet module to connect an S7-200 PLC to an Ethernet network. The Ethernet wizard helps you define the parameters for the (CP 243—1) Ethernet module and then places the configuration instructions in your project instruction folder. To start the Ethernet Wizard, select the

Tools > Ethernet Wizard

menu command. The wizard uses the following information: IP Address, Subnet Mask, Gateway

Address, and communications connection type.

Connections

The (CP 243—1) Ethernet module has the following connections. The connections are located under the covers of the front doors.

Integrated ribbon cable with socket for I/O bus

Connector for I/O bus

—

—

—

—

Terminal block for 24 VDC supply voltage and ground connection

8-in RJ45 socket for Ethernet connection

Plug connector for I/O bus

Integrated ribbon cable with socket for

I/O bus

8-pin RJ45 socket for

Ethernet connection

Figure A-40

Terminal block for 24

VDC supply voltage and ground connection

Connecting the (CP 243—1) Ethernet

Module

Additional Information

For more information about the (CP 243—1) Ethernet module, refer to the

SIMATIC NET CP 243—1 Communications Processor for Industrial Ethernet Technical Manual.

459

S7-200 Programmable Controller System Manual

(CP 243—1 IT) Internet Module Specifications

Table A-60 (CP 243—1 IT) Internet Module Order Number

Order Number

6GK7 243—1GX00—OXE0

Expansion Module

(CP 243—1 IT) Internet Module —

EM Inputs

8

1

1

Eight Q outputs are used as logical controls of the IT function and do not directly control any external signals.

EM Outputs Removable Connector

No

Table A-61 (CP 243—1 IT) Internet Module General Specifications

Order Number

6GK7 243—1GX00—OXE0

Module Name and Description

(CP 243—1 IT) Internet Module

Dimensions (mm)

(W x H x D)

71.2 x 80 x 62

Weight

approx. 150 g

Dissipation

1.75 W

VDC Requirements

+5 VDC +24 VDC

55 mA 60 mA

Table A-62 (CP 243—1 IT) Internet Module Specifications

Transmission speed

Flash memory size

General

SDRAM memory size

Guaranteed life of flash memory for the file system

Interface

Connection to Industrial Ethernet (10/100 Mbit/s)

Input voltage

Maximum connections

Maximum number of IT connections

Starting time or restart time after a reset

User data quantities

10 Mbit/s and 100 Mbits/s

16 Mbyte

6GK7 243—1GX00—0XE0

8 Mbytes as ROM for firmware of the (CP 243—1 IT) Internet module,

8 Mbytes as RAM for the file system

1 million write or delete operations

8-pin RJ45 socket

20.4 to 28.8 VDC

Maximum of 8 S7 connections (XPUT/XGET and READ/WRITE) plus 1 connection to

STEP 7—Micro/WIN per (CP 243—1 IT) Internet module

1

1 for FTP server

1 for FTP client

1 for e-mail client

4 for HTTP connections

Approx. 10 seconds

Client:

Server: up to 212 bytes for XPUT/XGET up to 222 bytes for XGET or READ up to 212 bytes for XPUT or WRITE

1024 characters E—mail size, maximum

File system:

Path length including file size and drive names

File name length

Directory nesting depth

Server ports available:

HTTP

FTP command channel

FTP data channels for FTP server

S7 connection establishment

S7 server

254 characters maximum

99 characters maximum

49 maximum

80

21

3100 to 3199

102

3000 to 3008

1

Only one (CP 243—1 IT) Internet module should be connected per S7—200 CPU.

460

Technical Specifications

Appendix A

The (CP 243—1 IT) Internet module is a communications processor used for connecting the

S7-200 system to Industrial Ethernet (IE). The S7-200 can be remotely configured, programmed and diagnosed via Ethernet using STEP 7 Micro/WIN. The S7-200 can communicate with another

S7—200, S7-300, or S7-400 controller via Ethernet. It can also communicate with an OPC server.

The IT functions of the (CP 243—1 IT) Internet module form the basis for monitoring and, if necessary, also manipulating automation systems with a WEB browser from a networked PC.

Diagnostic messages can be e-mailed from a system. Using the IT functions, it is easy to exchange entire files with other computer and controller systems.

Industrial Ethernet is the network for the process control level and the cell level of the SIMATIC

NET open communication system. Physically, Industrial Ethernet is an electrical network based on shielded, coaxial lines, twisted pair cables and an optical network of fiber optic conductors.

Industrial Ethernet is defined by the International Standard IEEE 802.3.

S7-200 CPUs that Support Intelligent Modules

The (CP 243—1 IT) Internet module is an intelligent expansion module designed to work with the

S7-200 CPUs shown in Table A-63.

Table A-63 (CP 243—1 IT) Internet Module Compatibility with S7-200 CPUs

CPU Description

CPU 222 Rel. 1.10 or greater

CPU 224 Rel. 1.10 or greater

CPU 224XP Rel. 2.00 or greater

CPU 226 Rel. 1.00 or greater

CPU 222 DC/DC/DC and CPU 222 AC/DC/Relay

CPU 224 DC/DC/DC and CPU 224 AC/DC/Relay

CPU 224XP DC/DC/DC and CPU 224XP AC/DC/Relay

CPU 226 DC/DC/DC and CPU 226 AC/DC/Relay

The (CP 243—1 IT) Internet module has the following features:

—

The (CPU 243—1 IT) Internet module is fully compatible with the (CP 243—1) Ethernet module. User programs written for the (CP 243—1) Ethernet module can also be run on the

(CP 243—1 IT) Internet module.

The (CP 243—1 1T) Internet module is delivered with a preset, unique worldwide MAC address that cannot be changed.

Tip

Only one (CP 243—1 IT) Internet module should be connected per S7-200 CPU. If more than one (CP 243—1 IT) Internet module is connected, the S7-200 CPU may not operate properly.

Functions

The (CP 243—1 IT) Internet module offers the following functions:

—

—

—

—

—

S7 Communication is based on TCP/IP

IT communication

Configuration

Watchdog timer

Ability of preset MAC addresses (48—bit value) to be addressed

461

S7-200 Programmable Controller System Manual

Internet

Configuration

You can use the STEP 7—Micro/WIN Internet Wizard to configure the (CP 243—1 IT) Internet module to connect an S7-200 PLC to an Ethernet/Internet network. The (CP 243—1 IT) Internet module has additional web server functionality that can be configured with the Internet Wizard. To start the Internet Wizard, select the

Tools > Internet Wizard

menu command.

Connections

The (CP 243—1 IT) Internet module has the following connections. The connections are located under the covers of the front doors.

Integrated ribbon cable with socket for I/O bus

Connector for I/O bus

—

—

—

—

Terminal block for 24 VDC supply voltage and ground connection

8-in RJ45 socket for Ethernet connection

Plug connector for I/O bus

Integrated ribbon cable with socket for

I/O bus

8-pin RJ45 socket for

Ethernet connection

Terminal block for 24

VDC supply voltage and ground connection

Figure A-41 Connecting the (CP 243—1 IT) Internet

Module

Additional Information

For more information about the (CP 243—1 IT) Internet module, refer to the

SIMATIC NET CP 243—1 IT Communications Processor for Industrial Ethernet and Information

Technology Technical Manual.

462

Technical Specifications

Appendix A

(CP 243—2) AS—Interface Module Specifications

Table A-64 (CP 243—2) AS-Interface Module Order Number

Order Number

6GK7 243—2AX01—0XA0

Expansion Model

(CP 243—2) AS—Interface Module

EM Inputs

8 Digital and 8 Analog

EM Outputs

8 Digital and8 Analog

Removable Connector

Yes

Table A-65 (CP 243—2) AS-Interface Module General Specifications

Order Number

6GK7 243—2AX01—0XA0

Module Name and

Description

(CP 243—2) AS—Interface

Module

Dimensions (mm)

(W x H x D)

71 x 80 x 62

Weight

approx.

250 g

Dissipation

3.7 W

+5 VDC

VDC Requirements

From

AS—Interface

220 mA 100 mA

Table A-66 (CP 243—2) AS-Interface Module Specifications

General

Cycle time

Configuration

AS—I master profiles supported

Attachment to the AS—I cable

Address range

6GK7 243—2AX01—0XA0

5 ms with 31 slaves

10 ms with 62 AS—I slaves using the extended addressing mode

Set button on the front panel, or use the total configuration command (refer to the description of the AS—I commands in the

CP 243—2 AS—I Interface Maste

r manual)

M1e

Via an S7-200 terminal block. Permitted current loading from terminal 1 to 3 or from terminal 2 to 4 maximum 3 A.

One digital module with 8 digital inputs and 8 digital outputs, and

One analog module with 8 analog inputs and 8 analog outputs

AS-i

Features

You can operate up to two AS—Interface modules on the S7-200 at the same time, significantly increasing the number of available digital and analog inputs/outputs (maximum 124 digital input/124 digital output on AS—Interface per CP). Setup times are reduced because of the ability to configure at the touch of a button. LEDs reduce downtime in the event of an error by displaying status of the CP and of all connected slaves, and by monitoring AS—Interface main voltage.

The AS—Interface Module has the following features:

—

—

—

Supports analog modules

Supports all master functions and allows connections for up to 62 AS—Interface slaves

LEDs in the front plate display operating status and availability of connected slaves.

—

—

LEDs in the front plate display errors (including AS—Interface voltage error, configuration error)

Two terminals allow direct connection of the AS—Interface cable.

—

Two buttons display the status information of the slaves, switch operating mode, and adopt the existing configuration as the SET configuration.

You can use the STEP 7—Micro/WIN AS-i Wizard to configure the (CP 243—2) AS—Interface module. The AS—Interface Wizard helps you use the data from an AS-Interface network in your configuration. To start the AS—i Wizard, select the

Tools > AS—i Wizard

menu command.

463

S7-200 Programmable Controller System Manual

Operation

In the process image of the S7-200, the AS—Interface Module occupies a digital input byte (status byte), a digital output byte (control byte), 8 analog input and 8 analog output words. The

AS—Interface Module uses two logical module positions. You can use the status and the control byte to set the mode of the AS—Interface Module using a user program. Depending on its mode, the AS—Interface stores either the I/O data of the AS—Interface slave, diagnostics values, or enables master calls (for example, changing a slave address) in the analog address area of the

S7-200.

All the connected AS—Interface slaves can be configured at the touch of a button. Further configuration of the CP is not necessary.

Caution

When you use the AS—Interface Module, you must disable analog filtering in the CPU.

If analog filtering is not disabled in the CPU, the digital point data will be destroyed, and error conditions will not be returned as bit values in the analog word.

Ensure that analog filtering in the CPU is disabled.

Functions

The CP 243—2 is the AS—Interface master for the M1e master class, which means that it supports all the specified functions. This makes it possible to operate up to 31 digital slaves on the

AS—Interface by means of double address assignment (A—B). The CP 243—2 can be set to two different modes:

—

—

Standard mode: access to the I/O data of the AS—Interface slave

Extended mode: master calls (for example, write parameters) or diagnostic value request

Connections

The AS—Interface Module has the following connections:

—

—

Two connections to the AS—Interface

Module cable (bridged internally)

One connection for functional ground

The terminals are located under the cover of h f h i Fi A

Figure A-42

Functional Ground

+ —

+ —

AS—I Cables

Connecting the AS—Interface Module

Cable

Caution

The load capacity of the AS—Interface Module contacts is a maximum of 3 A. If this value is exceeded on the AS—Interface Module cable, the AS—Interface must not be looped into the AS—I cable, but must be connected by a separate cable (in this case, only one pair of terminals of the

AS—Interface Module is used). The AS—Interface must be connected to the grounding conductor via the ground terminal.

Tip

The AS—Interface Module has a connection for functional ground. This connector should be connected to the PE conductor with as little resistance as possible.

Additional Information

For more information about the CP 243—2 AS—Interface Master, refer to the

SIMATIC NET CP

243—2 AS-Interface Master manual.

464

Technical Specifications

Appendix A

Optional Cartridges

Cartridge

Memory cartridge

Memory cartridge

Real-Time Clock with battery

Battery cartridge

Description

Memory cartridge, 64K (user program, recipe, and data logging)

Memory cartridge, 256K (user program, recipe, and data logging)

Clock cartridge accuracy:

2 minutes/month at 25

°

C,

7 minutes/month at 0

°

C to 55

°

C

Battery cartridge

Data retention time: 200 days typical

Shelf life: 5 years

Order Number

6ES7 291—8GF23—0XA0

6ES7 291—8GH23—0XA0

6ES7 297—1AA23—0XA0

6ES7 291—8BA20—0XA0

Battery

Size

Type

General Features

3 V, 30 mA hour, Renata CR 1025

9.9 mm x 2.5 mm

Lithium < 0.6 g

Dimensions

18 mm

10 mm

18 mm

Memory Cartridge

There are restrictions for using memory cartridges between CPUs of a different model. Memory cartridges programmed in a particular model number CPU can be read by CPUs with the same or higher model number as shown in Table A-67:

Table A-67 Memory Cartridge Model Number Read Restrictions

Memory Cartridge

Programmed In A …

Can Be Read By A …

CPU 221

CPU 222

CPU 224

CPU 224XP

CPU 226

CPU 221, CPU 222, CPU 224, CPU 224XP, CPU 224XPsi, and CPU 226

CPU 222, CPU 224, CPU 224XP, CPU 224XPsi, and CPU 226

CPU 224, CPU 224XP, CPU 224XPsi, and CPU 226

CPU 224XP, CPU 224XPsi, and CPU 226

CPU 226

The 64K and 256K memory cartridges are designed to work only with the new CPUs that have the order number as shown here: 6ES7 21x—xx23—0XB0. Each “x” means that this digit is a don’t care.

You may have user programs stored on 32K memory cartridges originally programmed by older

CPUs (version “20”, “21”, or “22”). These cartridges can be read by the new CPUs, subject to the model number restrictions in Table A-67.

Real Time Clock Cartridge

The Real Time Clock cartridge (6ES7 297—1AA23—0XA0) is designed to work only with the “23”

CPUs. The earlier version of the Real Time Clock cartridge (6ES7 297—1AA20—0XA0) is not physically or electrically compatible with the “23” CPUs.

465

S7-200 Programmable Controller System Manual

I/O Expansion Cable

Cable length

Weight

Connector type

General Features (6ES7 290—6AA20—0XA0)

0.8 m

25 g

10 pin ribbon

Female Connector

Male Connector

Figure A-43 Typical Installation of the I/O Expansion Cable

Tip

Only one expansion cable is allowed in a CPU/expansion module chain.

466

Technical Specifications

Appendix A

RS-232/PPI Multi-Master Cable and USB/PPI Multi-Master Cable

Table A-68 RS-232/PPI Multi-Master Cable and USB/PPI Multi-Master Cable Specifications

Description

Order Number

General Characteristics

Supply voltage

Supply current at 24 V nominal supply

Direction change delay: RS-232 stop bit edge received to RS-485 transmission disabled

Isolation

RS-485 Side Electrical Characteristics

14.4 to 28.8 VDC

60 mA RMS max.

—

S7-200 RS-232/PPI Multi-Master Cable

6ES7 901—3CB30—0XA0

RS-485 to RS-232: 500 VDC

Common mode voltage range

Receiver input impedance

Termination/bias

Receiver threshold/sensitivity

Transmitter differential output voltage

—7 V to +12 V, 1 second, 3 V RMS continuous

5.4 K

Ω min. including termination

10K

Ω to +5 V on B, PROFIBUS pin 3

10K

Ω to GND on A, PROFIBUS pin 8

+/—0.2 V, 60 mV typical hysteresis

2 V min. at R

L

=100

Ω

,

1.5 V min. at R

L

=54

Ω

RS-232 Side Electrical Characteristics

Receiver input impedance

Receiver threshold/sensitivity

Transmitter output voltage

USB Side Electrical Characteristics

Full speed (12 MB/s), Human Interface Device (HID)

Supply current at 5V —

Power down current —

3K

Ω min.

0.8 V min. low, 2.4 V max. high

0.5 V typical hysteresis

+/— 5 V min. at R

L

=3K

Ω

14.4 to 28.8 VDC

50 mA RMS max.

—

RS-485 to USB: 500 VDC

—

—

S7-200 USB/PPI Multi-Master Cable

6ES7—901—3DB30—0XA0

—7 V to +12 V, 1 second, 3 V RMS continuous

5.4 K

Ω min. including termination

10K

Ω to +5 V on B, PROFIBUS pin 3

10K

Ω to GND on A, PROFIBUS pin 8

+/—0.2 V, 60 mV typical hysteresis

2 V min. at R

L

1.5 V min. at R

=100

Ω

,

L

=54

Ω

—

50 mA max.

400 uA max.

Features

The S7-200 RS-232/PPI Multi-Master Cable comes factory set for optimal performance with the

STEP 7—Micro/WIN 3.2 Service Pack 4 (or later) programming package. The factory setting for this cable is different than for the PC/PPI cables. Refer to Figure 1 to configure the cable for your application.

You can configure the S7-200 RS-232/PPI Multi-Master Cable to operate the same as the PC/PPI cable and to be compatible with any version of a STEP 7—Micro/WIN programming package by setting Switch 5 to the PPI/Freeport setting and then selecting your required baud rate.

The USB cable requires STEP 7—Micro/WIN 3.2 Service Pack 4 (or later) programming package for operation.

Tip

For more information about using these cables, refer to Chapter 7, Communicating over a

Network.

467

S7-200 Programmable Controller System Manual

S7-200 RS-232/PPI Multi-Master Cable

Table A-69 S7-200 RS-232/PPI Multi—Master Cable — Pin-outs for RS-485 to RS-232 Local Mode Connector

Pin Number

1

2

3

6

7

4

5

8

9

RS-485 Connector Pin-out

Signal Description

No connect

24 V Return (RS-485 logic ground)

Signal B (RxD/TxD+)

RTS (TTL level)

No connect

No connect

24 V Supply

Signal A (RxD/TxD—)

Protocol select

3

4

5

6

7

8

9

RS-232 Local Connector Pin-out

Pin Number

1

2

Signal Description

Data Carrier Detect (DCD) (not used)

Receive Data (RD) (output from PC/PPI cable)

Transmit Data (TD) (input to PC/PPI cable)

Data Terminal Ready (DTR)

1

Ground (RS-232 logic ground)

Data Set Ready (DSR)

1

Request To Send (RTS) (not used)

Clear To Send (CTS) (not used)

Ring Indicator (RI) (not used)

1

Pins 4 and 6 are connected internally.

Table A-70 S7-200 RS-232/PPI Multi—Master Cable — Pin-outs for RS-485 to RS-232 Remote Mode

Connector

Pin Number

1

2

3

6

7

4

5

8

9

RS-485 Connector Pin-out

No connect

Signal Description

24 V Return (RS-485 logic ground)

Signal B (RxD/TxD+)

RTS (TTL level)

No connect

No connect

24 V Supply

Signal A (RxD/TxD—)

Protocol select

3

4

5

6

7

8

9

RS-232 Remote Connector Pin-out

1

Pin Number

1

2

Signal Description

Data Carrier Detect (DCD) (not used)

Receive Data (RD) (input to PC/PPI cable)

Transmit Data (TD) (output from PC/PPI cable)

Data Terminal Ready (DTR)

2

Ground (RS-232 logic ground)

Data Set Ready (DSR)

2

Request To Send (RTS)

(output from PC/PPI cable)

Clear To Send (CTS) (not used)

Ring Indicator (RI) (not used)

1

2

A conversion from female to male, and a conversion from 9-pin to 25-pin is required for modems.

Pins 4 and 6 are connected internally.

Use the S7-200 RS-232/PPI Multi-Master Cable with STEP 7—Micro/WIN as a replacement for the PC/PPI cable or for Freeport operation

For connection directly to your personal computer:

—

—

Set the PPI/Freeport mode (Switch 5=0)

Set the baud rate (Switches 1, 2, and 3)

—

—

Set Local (Switch 6=0). The Local setting is the same as setting the PC/PPI cable to DCE.

Set the 11 Bit (Switch 7=0)

For connection to a modem:

—

—

—

—

Set the PPI/Freeport mode (Switch 5=0)

Set the baud rate (Switches 1, 2, and 3)

Set Remote (Switch 6=1). The Remote setting is the same as setting the PC/PPI cable to

DTE.

Set the 10 Bit or 11 Bit (Switch 7) to match the number of bits per character setting of your modem.

468

Technical Specifications

Appendix A

Use the S7-200 RS-232/PPI Multi-Master Cable with STEP 7—Micro/WIN 3.2

Service Pack 4 (or later)

For connection directly to your personal computer:

—

—

Set the PPI mode (Switch 5=1)

Set Local (Switch 6=0)

—

Set 11—bit mode (Switch 7=0)

For connection to a modem:

—

—

—

Set the PPI mode (Switch 5=1)

Set Remote (Switch 6=1)

Set 11—bit mode (Switch 7=0)

Tip

All other switches other than those noted above do not matter when using PPI mode.

Figure A-44 shows the S7-200 RS-232/PPI Multi-Master Cable dimensions, label and LEDs.

130 mm

0.8 m 4.7 m

51 mm

RS-232 COMM RS-485 COMM

LED

Tx

Rx

PPI

1 2 3 4 5 6 7 8 8

Kbaud 123

115.2

110

57.6

111

38.4

000

19.2

001

9.6

010

4.8

011

2.4

100

1.2

101

8 Spare

7 1=10 Bit

0=11 Bit

6 1=Remote / DTE

0= Local / DCE

5 1=PPI (M Master)

0=PPI/Freeport

4 Spare

Color

Green

Green

Green

Description

RS-232 transmit indicator

RS-232 receive indicator

RS—485 transmit indicator

Figure A-44 S7-200 RS-232/PPI Multi-Master Cable Dimensions, Label and LEDs

469

S7-200 Programmable Controller System Manual

S7-200 USB/PPI Multi-Master Cable

To use the USB cable, you must have STEP 7—Micro/WIN 3.2 Service Pack 4 (or later) installed. It is recommended that you use the USB cable only with an S7-200 CPU22x or later. The USB cable does not support Freeport communications or downloading the TP Designer to the TP070.

Table A-71 S7-200 USB/PPI Multi-Master Cable — Pin-outs for the RS-485 to USB Series “A” Connector

Pin Number

1

2

3

6

7

8

9

4

5

RS-485 Connector Pin-out

Signal Description

No connect

24 V Return (RS-485 logic ground)

Signal B (RxD/TxD+)

RTS (TTL level)

No connect

No connect

24 V Supply

Signal A (RxD/TxD—)

Protocol select (low = 10 bit)

Pin Number

1

2

3

4

USB Connector Pin-out

Signal Description

USB — DataP

USB — DataM

USB 5V

USB logic ground

Figure A-45 shows the S7-200 USB/PPI Multi-Master Cable dimensions and LEDs.

130 mm

0.8 m 4.7 m

51 mm

USB COMM RS-485 COMM

LED

Tx

Rx

PPI

Color

Green

Green

Green

Description

USB transmit indicator

USB receive indicator

RS-485 transmit indicator

Figure A-45 S7-200 USB/PPI Multi-Master Cable Dimensions and LEDs

470

Technical Specifications

Appendix A

Input Simulators

Order Number

Size (L x W x D)

Weight

Points

61 x 33.5 x 22 mm

0.02 Kg

8

8 Position Simulator

6ES7 274—1XF00—0XA0

91.5 x 35.5 x 22 mm

0.03 Kg

14

14 Position Simulator

6ES7 274—1XH00—0XA0

148.3 x 35.5 x 22 mm

0.04 Kg

24

24 Position Simulator

6ES7 274—1XK00—0XA0

26 mm

Figure A-46 Installation of the Input Simulator

Warning

These input simulators are not approved for use in Class I DIV 2 or Class I Zone 2 hazardous locations. The switches present a potential spark hazard.

Do not use input simulators in Class I DIV 2 or Class I Zone 2 hazardous locations.

471

S7-200 Programmable Controller System Manual

472

Calculating a Power Budget

The S7-200 CPU has an internal power supply that provides power for the CPU itself, for any expansion modules, and for other 24 VDC user power requirements. Use the following information as a guide for determining how much power (or current) the S7-200 CPU can provide for your configuration.

Power Requirements

Each S7-200 CPU supplies both 5 VDC and 24 VDC power:

—

Each CPU has a 24 VDC sensor supply that can supply 24 VDC for local input points or for relay coils on the expansion modules. If the power requirement for 24 VDC exceeds the power budget of the CPU, you can add an external 24 VDC power supply to provide

24 VDC to the expansion modules. You must manually connect the 24 VDC supply to the input points or relay coils.

—

The CPU also provides 5 VDC power for the expansion modules when an expansion module is connected. If the 5 VDC power requirements for expansion modules exceeds the power budget of the CPU, you must remove expansion modules until the requirement is within the power budget.

The specifications in Appendix A provide information about the power budgets of the CPUs and the power requirements of the expansion modules.

Tip

If the CPU power budget is exceeded, you may not be able to connect the maximum number of modules allowed for your CPU.

Warning

Connecting an external 24 VDC power supply in parallel with the S7-200 DC Sensor Supply can result in a conflict between the two supplies as each seeks to establish its own preferred output voltage level.

The result of this conflict can be shortened lifetime or immediate failure of one or both power supplies, with consequent unpredictable operation of the PLC system. Unpredictable operation could result in death or serious injury to personnel, and/or damage to equipment.

The S7-200 DC Sensor Supply and any external power supply should provide power to different points. A single connection of the commons is allowed.

473

S7-200 Programmable Controller System Manual

Calculating a Sample Power Requirement

Table B-1 shows a sample calculation of the power requirements for an S7-200 that includes the following:

—

—

S7-200 CPU 224 AC/DC/Relay

3 each EM 223 8 DC In/8 Relay Out

—

1 each EM 221 8 DC In

This installation has a total of 46 inputs and 34 outputs.

Tip

The CPU has already allocated the power required to drive the internal relay coils. You do not need to include the internal relay coil power requirements in a power budget calculation.

The S7-200 CPU in this example provides sufficient 5 VDC current for the expansion modules, but does not provide enough 24 VDC current from the sensor supply for all of the inputs and expansion relay coils. The I/O requires 400 mA and the S7-200 CPU provides only 280 mA. This installation requires an additional source of at least 120 mA at 24 VDC power to operate all the included 24 VDC inputs and outputs.

Table B-1 Power Budget Calculations for a Sample Configuration

CPU Power Budget

CPU 224 AC/DC/Relay

5 VDC

660 mA

minus

5 VDC System Requirements

CPU 224, 14 inputs

3 EM 223, 5 V power required

1 EM 221, 5V power required

3 EM 223, 8 inputs each

3 EM 223, 8 relay coils each

1 EM 221, 8 inputs each

Total Requirements

3 * 80 mA =

1 * 30 mA =

240 mA

30 mA

270 mA

24 VDC

280 mA

24 VDC

14 * 4 mA =

3 * 8 * 4 mA =

3 * 8 * 9 mA =

8 * 4 mA =

Current Balance

Current Balance Total

equals

5 VDC

390 mA

24 VDC

56 mA

96 mA

216 mA

32 mA

400 mA

[120 mA]

474

Calculating a Power Budget

Appendix B

Calculating Your Power Requirement

Use the table below to determine how much power (or current) the S7-200 CPU can provide for your configuration. Refer to Appendix A for the power budgets of your CPU model and the power requirements of your expansion modules.

Power Budget 5 VDC 24 VDC

System Requirements

minus

5 VDC 24 VDC

Total Requirements

Current Balance

Current Balance Total

equals

5 VDC 24 VDC

475

S7-200 Programmable Controller System Manual

476

Error Codes

The information about error codes is provided to help you identify problems with your S7-200

CPU.

In This Chapter

Fatal Error Codes and Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Run-Time Programming Problems

Compile Rule Violations

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

478

479

480

477

S7-200 Programmable Controller System Manual

Fatal Error Codes and Messages

Fatal errors cause the S7-200 to stop the execution of your program. Depending on the severity of the error, a fatal error can render the S7-200 incapable of performing any or all functions. The objective for handling fatal errors is to bring the S7-200 to a safe state from which the S7-200 can respond to interrogations about the existing error conditions.

The S7—200 performs the following tasks when a fatal error is detected:

—

—

Changes to STOP mode

Turns on both the SF/DIAG (Red) LED and the Stop LED

—

Turns off the outputs

The S7-200 remains in this condition until the fatal error is corrected. To view the error codes, select the

PLC > Information

menu command from the main menu bar. Table C-1 provides a list with descriptions for the fatal error codes that can be read from the S7-200.

Table C-1 Fatal Error Codes and Messages Read from the S7—200

Error Code Description

0008

0009

000A

000B

000C

000D

000E

000F

0010

0011

1

0012

1

0013

0014

1

0000

0001

0002

0003

0004

0005

0006

0007

No fatal errors present

User program checksum error

Compiled ladder program checksum error

Scan watchdog time-out error

Permanent memory failed

Permanent memory checksum error on user program

Permanent memory checksum error on configuration (SDB0) parameters

Permanent memory checksum error on force data

Permanent memory checksum error on default output table values

Permanent memory checksum error on user data, DB1

Memory cartridge failed

Memory cartridge checksum error on user program.

Memory cartridge checksum error on configuration (SDB0) parameters

Memory cartridge checksum error on force data

Memory cartridge checksum error on default output table values

Memory cartridge checksum error on user data, DB1

Internal software error

Compare contact indirect addressing error

Compare contact illegal floating point value

Program is not understood by this S7-200

Compare contact range error

1

The compare contact errors are the only errors that generate both fatal and non-fatal error conditions. The reason for the generation of the non-fatal error condition is to save the program address of the error.

478

Error Codes

Appendix C

Run-Time Programming Problems

Your program can create non-fatal error conditions (such as addressing errors) during the normal execution of the program. In this case, the S7-200 generates a non-fatal run-time error code.

Table C-2 lists the descriptions of the non-fatal error codes.

000E

000F

0010

0011

0012

0013

0091

0092

0006

0007

0008

0009

000A

000B

000C

000D

0094

009A

009B

009F

Table C-2

Error Code

0000

0001

0002

0003

0004

0005

Run-Time Programming Problems

Description

No fatal errors present; no error

HSC box enabled before executing HDEF box

Conflicting assignment of input interrupt to a point already assigned to a HSC

Conflicting assignment of inputs to an HSC already assigned to input interrupt or other HSC

Attempted execution of an instruction that is not allowed in an interrupt routine

Attempted execution of a second HSC/PLS with the same number before completing the first

(HSC/PLS in an interrupt routine conflicts with HSC/PLS in main program)

Indirect addressing error

TODW (Time-of-Day Write) or TODR (Time-of-Day Read) data error

Maximum user subroutine nesting level exceeded

Simultaneous execution of XMT/RCV instructions on Port 0

Attempt to redefine a HSC by executing another HDEF instruction for the same HSC

Simultaneous execution of XMT/RCV instructions on Port 1

Clock cartridge not present for access by TODR, TODW, or communications

Attempt to redefine pulse output while it is active

Number of PTO profile segment was set to 0

Illegal numeric value in compare contact instruction

Command is not allowed in current PTO mode of operation

Illegal PTO command code

Illegal PTO profile table

Illegal PID loop table

Range error (with address information): check the operand ranges

Error in count field of an instruction (with count information): verify the maximum count size

Range error writing to non-volatile memory with address information

Attempt to switch to Freeport mode while in a user interrupt

Illegal index (string operation in which a starting position value of 0 is specified)

Memory cartridge missing or not responding

479

S7-200 Programmable Controller System Manual

Compile Rule Violations

When you download a program, the S7-200 compiles the program. If the S7-200 detects that the program violates a compile rule (such as an illegal instruction), the S7-200 aborts the download and generates a non-fatal, compile-rule error code. Table C-3 lists the descriptions of the error codes that are generated by violations of the compile rules.

Table C-3

Error Code

0080

Compile Rule Violations

Compile Errors (Non-Fatal)

Program too large to compile; reduce program size

0081

0082

0083

0084

0085

0086

0087

0088

0089

008A

008B

008C

008D

0090

0091

0092

Stack underflow; split network into multiple networks.

Illegal instruction; check instruction mnemonics.

Missing MEND or instruction not allowed in main program: add MEND instruction, or remove incorrect instruction.

Reserved

Missing FOR; add FOR instruction or delete NEXT instruction.

Missing NEXT; add NEXT instruction or delete FOR instruction.

Missing label (LBL, INT, SBR); add the appropriate label.

Missing RET or instruction not allowed in a subroutine: add RET to the end of the subroutine or remove incorrect instruction.

Missing RETI or instruction not allowed in an interrupt routine: add RETI to the end of the interrupt routine or remove incorrect instruction.

Reserved

Illegal JMP to or from an SCR segment

Duplicate label (LBL, INT, SBR); rename one of the labels.

Illegal label (LBL, INT, SBR); ensure the number of labels allowed was not exceeded.

Illegal parameter; verify the allowed parameters for the instruction.

Range error (with address information); check the operand ranges.

Error in the count field of an instruction (with count information); verify the maximum count size.

0093

0095

0096

0097

FOR/NEXT nesting level exceeded.

Missing LSCR instruction (Load SCR)

Missing SCRE instruction (SCR End) or disallowed instruction before the SCRE instruction

User program contains both unnumbered and numbered EV/ED instructions

0098

0099

009B

009C

Illegal edit in RUN mode (edit attempted on program with unnumbered EV/ED instructions)

Too many hidden program segments (HIDE instructions)

Illegal index (string operation in which a starting position value of 0 is specified)

Maximum instruction length exceeded

009D Illegal parameter detected in SDB0

009E Too many PCALL strings

009F to 00FF Reserved

480

Special Memory (SM) Bits

Special memory bits provide a variety of status and control functions, and also serve as a means of communicating information between the S7-200 and your program. Special memory bits can be used as bits, bytes, words, or double words.

In This Chapter

SMB0: Status Bits

SMB1: Status Bits

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB2: Freeport Receive Character

SMB3: Freeport Parity Error

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB4: Queue Overflow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB5: I/O Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB6: CPU ID Register . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB7: Reserved . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB8 to SMB21: I/O Module ID and Error Registers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMW22 to SMW26: Scan Times . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB28 and SMB29: Analog Adjustment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB30 and SMB130: Freeport Control Registers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB31 and SMW32: Permanent Memory (EEPROM) Write Control

SMB34 and SMB35: Time Interval Registers for Timed Interrupts

. . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . .

SMB36 to SMB65: HSC0, HSC1, and HSC2 Register

SMB66 to SMB85: PTO/PWM Registers

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB86 to SMB94, and SMB186 to SMB194: Receive Message Control

SMW98: Errors on the Expansion I/O Bus

. . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB130: Freeport Control Register (see SMB30) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB131 to SMB165: HSC3, HSC4, and HSC5 Register . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB166 to SMB185: PTO0, PTO1 Profile Definition Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SMB186 to SMB194: Receive Message Control (see SMB86 to SMB94) . . . . . . . . . . . . . . . . .

SMB200 to SMB549: Intelligent Module Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

486

486

486

487

487

487

489

490

491

491

491

492

492

493

483

484

484

484

485

482

482

483

483

481

S7-200 Programmable Controller System Manual

SMB0: Status Bits

As described in Table D-1, SMB0 contains eight status bits that are updated by the S7-200 at the end of each scan cycle.

Table D-1

SM Bits

SM0.0

SM0.1

SM0.2

SM0.3

SM0.4

SM0.5

SM0.6

SM0.7

Special Memory Byte SMB0 (SM0.0 to SM0.7)

Description (Read Only)

This bit is always on.

This bit is on for the first scan cycle. One use is to call an initialization subroutine.

This bit is turned on for one scan cycle if retentive data was lost. This bit can be used as either an error memory bit or as a mechanism to invoke a special startup sequence.

This bit is turned on for one scan cycle when RUN mode is entered from a power-up condition.

This bit can be used to provide machine warm-up time before starting an operation.

This bit provides a clock pulse that is on for 30 seconds and off for 30 seconds, for a duty cycle time of 1 minute. It provides an easy-to-use delay, or a 1-minute clock pulse.

This bit provides a clock pulse that is on for 0.5 seconds and then off for 0.5 seconds, for a duty cycle time of 1 second. It provides an easy-to-use delay or a 1-second clock pulse.

This bit is a scan cycle clock which is on for one scan cycle and then off for the next scan cycle. This bit can be used as a scan counter input.

This bit reflects the position of the Mode switch (off is TERM position, and on is RUN position).

If you use this bit to enable Freeport mode when the switch is in the RUN position, normal communications with the programming device can be enabled by switching to the TERM position.

SMB1: Status Bits

As described in Table D-2, SMB1 contains various potential error indicators. These bits are set and reset by instructions at execution time.

Table D-2

SM Bits

SM1.0

SM1.1

SM1.2

SM1.3

SM1.4

SM1.5

SM1.6

SM1.7

Special Memory Byte SMB1 (SM1.0 to SM1.7)

Description (Read Only)

This bit is turned on by the execution of certain instructions when the result of the operation is zero.

This bit is turned on by the execution of certain instructions either when an overflow results or when an illegal numeric value is detected.

This bit is turned on when a negative result is produced by a math operation.

This bit is turned on when division by zero is attempted.

This bit is turned on when the Add to Table instruction attempts to overfill the table.

This bit is turned on when either LIFO or FIFO instructions attempt to read from an empty table.

This bit is turned on when an attempt to convert a non-BCD value to binary is made.

This bit is turned on when an ASCII value cannot be converted to a valid hexadecimal value.

482

Special Memory (SM) Bits

Appendix D

SMB2: Freeport Receive Character

SMB2 is the Freeport receive character buffer. As described in Table D-3, each character received while in Freeport mode is placed in this location for easy access from the ladder logic program.

Tip

SMB2 and SMB3 are shared between Port 0 and Port 1. When the reception of a character on

Port 0 results in the execution of the interrupt routine attached to that event (interrupt event 8),

SMB2 contains the character received on Port 0, and SMB3 contains the parity status of that character. When the reception of a character on Port 1 results in the execution of the interrupt routine attached to that event (interrupt event 25), SMB2 contains the character received on

Port 1 and SMB3 contains the parity status of that character.

Table D-3

SM Byte

SMB2

Special Memory Byte SMB2

Description (Read Only)

This byte contains each character that is received from Port 0 or Port 1 during Freeport communications.

SMB3: Freeport Parity Error

SMB3 is used for Freeport mode and contains a parity error bit that is set when a parity error is detected on a received character. As shown in Table D-4, SM3.0 turns on when a parity error is detected. Use this bit to discard the message.

Table D-4

SM Bits

SM3.0

SM3.1 to

SM3.7

Special Memory Byte SMB3 (SM3.0 to SM3.7)

Description (Read Only)

Parity error from Port 0 or Port 1 (0 = no error; 1 = error was detected)

Reserved

SMB4: Queue Overflow

As described in Table D-5, SMB4 contains the interrupt queue overflow bits, a status indicator showing whether interrupts are enabled or disabled, and a transmitter-idle memory bit. The queue overflow bits indicate either that interrupts are happening at a rate greater than can be processed, or that interrupts were disabled with the global interrupt disable instruction.

Table D-5

SM Bits

SM4.0

1

SM4.1

SM4.2

SM4.3

SM4.4

SM4.5

SM4.6

1

1

Special Memory Byte SMB4 (SM4.0 to SM4.7)

Description (Read Only)

This bit is turned on when the communications interrupt queue has overflowed.

This bit is turned on when the input interrupt queue has overflowed.

This bit is turned on when the timed interrupt queue has overflowed.

This bit is turned on when a run-time programming problem is detected.

This bit reflects the global interrupt enable state. It is turned on when interrupts are enabled.

This bit is turned on when the transmitter is idle (Port 0).

This bit is turned on when the transmitter is idle (Port 1).

SM4.7

1

This bit is turned on when something is forced.

Use status bits 4.0, 4.1, and 4.2 only in an interrupt routine. These status bits are reset when the queue is emptied, and control is returned to the main program.

483

S7-200 Programmable Controller System Manual

SMB5: I/O Status

As described in Table D-6, SMB5 contains status bits about error conditions that were detected in the I/O system. These bits provide an overview of the I/O errors detected.

Table D-6

SM Bits

SM5.0

SM5.1

SM5.2

SM5.3

SM5.4 to

SM5.7

Special Memory Byte SMB5 (SM5.0 to SM5.7)

Description (Read Only)

This bit is turned on if any I/O errors are present.

This bit is turned on if too many digital I/O points have been connected to the I/O bus.

This bit is turned on if too many analog I/O points have been connected to the I/O bus.

This bit is turned on if too many intelligent I/O modules have been connected to the I/O bus.

Reserved.

SMB6: CPU ID Register

As described in Table D-7, SMB6 is the identification register for the S7-200 CPU. SM6.4 to SM6.7

identify the type of S7-200 CPU. SM6.0 to SM6.3 are reserved for future use.

Table D-7

SM Bits

Format

SM6.0 to

SM6.3

SM6.4 to

SM6.7

Special Memory Byte SMB6

Description (Read Only)

MSB

7 x x x x r r r

LSB

0 r

Reserved xxxx = 0000 =

0010 =

0110 =

1001 =

CPU 222

CPU ID register

CPU 224 / CPU 224XP

CPU 221

CPU 226

SMB7: Reserved

SMB7 is reserved for future use.

484

Special Memory (SM) Bits

Appendix D

SMB8 to SMB21: I/O Module ID and Error Registers

SMB8 through SMB21 are organized in byte pairs for expansion modules 0 to 6. As described in

Table D-8, the even-numbered byte of each pair is the module-identification register. These bytes identify the module type, the I/O type, and the number of inputs and outputs. The odd-numbered byte of each pair is the module error register. These bytes provide an indication of any errors detected in the I/O for that module.

Table D-8

SM Byte

Format

SMB8

SMB9

SMB10

SMB11

SMB12

SMB13

SMB14

SMB15

SMB16

SMB17

SMB18

SMB19

SMB20

SMB21

Special Memory Bytes SMB8 to SMB21

Description (Read Only)

Even-Number Byte: Module ID Register

MSB

7

LSB

0 m t t a i i q q m: Module present 0 = Present

1 = Not present tt: Module type

00 Non-intelligent I/O module

01 Intelligent module

10 Reserved

11 Reserved a: I/O type 0 = Discrete

1 = Analog ii: Inputs

00 No inputs

01 2 AI or 8 DI

10 4 AI or 16 DI

11 8 AI or 32 DI qq: Outputs

00 No outputs

01 2 AQ or 8 DQ

10 4 AQ or 16 DQ

11 8 AQ or 32 DQ

Module 0 ID register

Module 0 error register

Module 1 ID register

Module 1 error register

Module 2 ID register

Module 2 error register

Module 3 ID register

Module 3 error register

Module 4 ID register

Module 4 error register

Module 5 ID register

Module 5 error register

Module 6 ID register

Module 6 error register

Odd-Number Byte: Module Error Register

MSB

7

LSB

0 c 0 0 b r p f t c: b:

Configuration error

Bus fault or parity error r: Out-of-range error p: No user power error f: Blown fuse error t: Terminal block loose error

0 = no error

1 = error

485

S7-200 Programmable Controller System Manual

SMW22 to SMW26: Scan Times

As described in Table D-9, SMW22

,

SMW24, and SMW26 provide scan time information: minimum scan time, maximum scan time, and last scan time in milliseconds.

Table D-9

SM Word

SMW22

SMW24

SMW26

Special Memory Words SMW22 to SMW26

Description (Read Only)

Scan time of the last scan cycle in milliseconds

Minimum scan time in milliseconds recorded since entering the RUN mode

Maximum scan time in milliseconds recorded since entering the RUN mode

SMB28 and SMB29: Analog Adjustment

As described in Table D-10, SMB28 holds the digital value that represents the position of analog adjustment 0. SMB29 holds the digital value that represents the position of analog adjustment 1.

Table D-10 Special Memory Bytes SMB28 and SMB29

SM Byte Description (Read Only)

SMB28

SMB29

This byte stores the value entered with analog adjustment 0. This value is updated once per scan in STOP/RUN.

This byte stores the value entered with analog adjustment 1. This value is updated once per scan in STOP/RUN.

SMB30 and SMB130: Freeport Control Registers

SMB30 controls the Freeport communications for port 0; SMB130 controls the Freeport communications for port 1. You can read and write to SMB30 and SMB130. As described in

Table D-11, these bytes configure the respective communications ports for Freeport operation and provide selection of either Freeport or system protocol support.

Table D-11 Special Memory Byte SMB30

Port 0 Port 1 Description

Format of

SMB30

Format of

SMB130

Freeport mode control byte

MSB

7

LSB

0 p p d b b b m m

SM30.0 and

SM30.1

SM30.2 to

SM30.4

SM30.5

SM30.6 and

SM30.7

SM130.0 and

SM130.1

SM130.2 to

SM130.4

SM130.5

SM130.6 and

SM130.7

mm: Protocol selection 00 =Point-to-Point Interface protocol

(PPI/slave mode)

01 =Freeport protocol

10 =PPI/master mode

11 =Reserved (defaults to PPI/slave mode)

Note: When you select code mm = 10 (PPI master), the S7-200 will become a master on the network and allow the NETR and NETW instructions to be executed. Bits 2 through 7 are ignored in PPI modes.

bbb: Freeport Baud rate 000 =38,400 baud

001 =19,200 baud

010 =9,600 baud

011 =4,800 baud d: Data bits per character 0 =8 bits per character

1 =7 bits per character

100 =2,400 baud

101 =1,200 baud

110 =115,200 baud

111 =57,600 baud pp: Parity select 00 =no parity

01 =even parity

10 =no parity

11 =odd parity

486

Special Memory (SM) Bits

Appendix D

SMB31 and SMW32: Permanent Memory (EEPROM) Write

Control

You can save a value stored in V memory to permanent memory under the control of your program. To do this, load the address of the location to be saved in SMW32. Then, load SMB31 with the command to save the value. Once you have loaded the command to save the value, you do not change the value in V memory until the S7-200 resets SM31.7, indicating that the save operation is complete.

At the end of each scan, the S7-200 checks to see if a command to save a value to permanent memory was issued. If the command was issued, the specified value is saved to permanent memory.

As described in Table D-12, SMB31 defines the size of the data to be saved to permanent memory and provides the command that initiates a save operation. SMW32 stores the starting address in V memory for the data to be saved to permanent memory.

Table D-12 Special Memory Byte SMB31 and Special Memory Word SMW32

SM Byte Description

Format

SMB31:

Software command

MSB

7

LSB

0 c 0 0 0 0 0 s s

SM31.0 and

SM31.1

SM31.7

SMW32

SMW32:

V memory address

MSB

15

V memory address

LSB

0 ss: Size of the data 00 =byte

01 =byte

10 =word

11 =double word c: Save to permanent memory 0 =No request for a save operation to be performed

1 =User program requests to save data

The S7-200 resets this bit after each save operation.

The V memory address for the data to be saved is stored in SMW32. This value is entered as an offset from V0. When a save operation is executed, the value in this V memory address is saved to the corresponding V memory location in the permanent memory.

SMB34 and SMB35: Time Interval Registers for Timed Interrupts

As described in Table D-13, SMB34 specifies the time interval for timed interrupt 0, and SMB35 specifies the time interval for timed interrupt 1. You can specify the time interval (in 1-ms increments) from 1 ms to 255 ms. The time-interval value is captured by the S7-200 at the time the corresponding timed interrupt event is attached to an interrupt routine. To change the time interval, you must reattach the timed interrupt event to the same or to a different interrupt routine.

You can terminate the timed interrupt event by detaching the event.

Table D-13 Special Memory Bytes SMB34 and SMB35

SM Byte Description

SMB34

SMB35

This byte specifies the time interval (in 1-ms increments from 1 ms to 255 ms) for timed interrupt 0.

This byte specifies the time interval (in 1-ms increments from 1 ms to 255 ms) for timed interrupt 1.

SMB36 to SMB65: HSC0, HSC1, and HSC2 Register

As described in Table D-14, SMB36 through SM65 are used to monitor and control the operation of high-speed counters HSC0, HSC1, and HSC2.

487

S7-200 Programmable Controller System Manual

SM57.2

SM57.3

SM57.4

SM57.5

SM57.6

SM57.7

SMD58

SMD62

SM46.6

SM46.7

SM47.0

SM47.1

SM47.2

SM47.3

SM47.4

SM47.5

SM47.6

SM47.7

SMD48

SMD52

SM56.0 to SM56.4

SM56.5

SM56.6

SM56.7

SM57.0

SM57.1

Table D-14 Special Memory Bytes SMB36 to SMD62

SM Byte Description

SM36.0 to SM36.4

Reserved

SM36.5

SM36.6

SM36.7

SM37.0

SM37.1

SM37.2

SM37.3

SM37.4

HSC0 current counting direction status bit: 1 = counting up

HSC0 current value equals preset value status bit: 1 = equal

HSC0 current value is greater than preset value status bit: 1 = greater than

Active level control bit for Reset: 0= Reset is active high, 1 = Reset is active low

Reserved

Counting rate selection for quadrature counters:0=4x counting rate; 1=1 x counting rate

HSC0 direction control bit: 1 = count up

HSC0 update the direction: 1 = update direction

SM37.5

SM37.6

SM37.7

SMD38

SMD42

SM46.0 to SM46.4

SM46.5

HSC0 update the preset value: 1 = write new preset value to HSC0 preset

HSC0 update the current value: 1 = write new current value to HSC0 current

HSC0 enable bit: 1 = enable

HSC0 new current value

HSC0 new preset value

Reserved

HSC1 current counting direction status bit: 1 = counting up

HSC1 current value equals preset value status bit: 1 = equal

HSC1 current value is greater than preset value status bit: 1 = greater than

HSC1 active level control bit for reset: 0 = active high, 1 = active low

HSC1 active level control bit for start: 0 = active high, 1 = active low

HSC1 quadrature counter rate selection: 0 = 4x rate, 1 = 1x rate

HSC1 direction control bit: 1 = count up

HSC1 update the direction: 1 = update direction

HSC1 update the preset value: 1 = write new preset value to HSC1 preset

HSC1 update the current value: 1 = write new current value to HSC1 current

HSC1 enable bit: 1 = enable

HSC1 new current value

HSC1 new preset value

Reserved

HSC2 current counting direction status bit: 1 = counting up

HSC2 current value equals preset value status bit: 1 = equal

HSC2 current value is greater than preset value status bit: 1 = greater than

HSC2 active level control bit for reset: 0 = active high, 1 = active low

HSC2 active level control bit for start: 0 = active high, 1 = active low

HSC2 quadrature counter rate selection: 0 = 4x rate, 1 = 1x rate

HSC2 direction control bit: 1 = count up

HSC2 update the direction: 1 = update direction

HSC2 update the preset value: 1 = write new preset value to HSC2 preset

HSC2 update the current value: 1 = write new current value to HSC2 current

HSC2 enable bit: 1 = enable

HSC2 new current value

HSC2 new preset value

488

Special Memory (SM) Bits

Appendix D

SMB66 to SMB85: PTO/PWM Registers

As described in Table D-15, SMB66 through SMB85 are used to monitor and control the pulse train output and pulse width modulation functions. See the information on pulse output high-speed output instructions in Chapter 6 for a complete description of these bits.

Table D-15 Special Memory Bytes SMB66 to SMB85

SM Byte Description

SM66.0 to SM66.3

Reserved

SM66.4

SM66.5

SM66.6

SM66.7

SM67.0

SM67.1

PTO0 profile aborted: 0 = no error, 1 = aborted due to a delta calculation error

PTO0 profile aborted: 0 = not aborted by user command, 1 = aborted by user command

PTO0/PWM pipeline overflow (cleared by the system when using external profiles, otherwise must be reset by user): 0 = no overflow, 1 = pipeline overflow

PTO0 idle bit: 0 = PTO in progress, 1 = PTO idle

PTO0/PWM0 update the cycle time value: 1 = write new cycle time

PWM0 update the pulse width value: 1 = write new pulse width

SM67.2

SM67.3

SM67.4

SM67.5

SM67.6

SM67.7

SMW68

SMW70

SMD72

SM76.0 to SM76.3

SM76.4

SM76.5

PTO0 update the pulse count value: 1 = write new pulse count

PTO0/PWM0 time base: 0 = 1

µ s/tick, 1 = 1 ms/tick

Update PWM0 synchronously: 0 = asynchronous update, 1 = synchronous update

PTO0 operation: 0 = single segment operation (cycle time and pulse count stored in

SM memory), 1 = multiple segment operation (profile table stored in V memory)

PTO0/PWM0 mode select: 0 = PTO, 1 = PWM

PTO0/PWM0 enable bit: 1 = enable

PTO0/PWM0 cycle time value (2 to 65,535 units of time base);

PWM0 pulse width value (0 to 65,535 units of the time base);

PTO0 pulse count value (1 to 2

32

—1);

Reserved

SM76.6

SM76.7

SM77.0

SM77.1

SM77.2

SM77.3

SM77.4

SM77.5

SM77.6

SM77.7

SMW78

SMW80

SMD82

PTO1 profile aborted: 0 = no error, 1 = aborted because of delta calculation error

PTO1 profile aborted: 0 = not aborted by user command, 1 = aborted by user command

PTO1/PWM pipeline overflow (cleared by the system when using external profiles, otherwise must be reset by the user): 0 = no overflow, 1 = pipeline overflow

PTO1 idle bit: 0 = PTO in progress, 1 = PTO idle

PTO1/PWM1 update the cycle time value: 1 = write new cycle time

PWM1 update the pulse width value: 1 = write new pulse width

PTO1 update the pulse count value: 1 = write new pulse count

PTO1/PWM1 time base: 0 = 1

µ s/tick, 1 = 1 ms/tick

Update PWM1 synchronously: 0 = asynchronous update, 1 = synchronous update

PTO1 operation: 0 = single segment operation (cycle time and pulse count stored in

SM memory), 1 = multiple segment operation (profile table stored in V memory)

PTO1/PWM1 mode select: 0 = PTO, 1 = PWM

PTO1/PWM1 enable bit: 1 = enable

PTO1/PWM1 cycle time value (2 to 65,535 units of the time base);

PWM1 pulse width value (0 to 65,535 units of the time base);

PTO1 pulse count value (1 to 2

32

—1);

489

S7-200 Programmable Controller System Manual

SMB86 to SMB94, and SMB186 to SMB194: Receive Message

Control

As described in Table D-16, SMB86 through SMB94 and SMB186 through SMB194 are used to control and read the status of the Receive Message instruction.

Table D-16 Special Memory Bytes SMB86 to SMB94, and SMB186 to SMB194

Port 0 Port 1 Description

SMB86 SMB186 Receive Message status byte

MSB

7 n r e 0 0 t c

SMB87

SMB88

SMB89

SMW90

SMW92

SMB94

LSB

0 p n: 1 = Receive message terminated by user disable command r: 1 = Receive message terminated: error in input parameters or missing start or end condition e: 1 = End character received t: 1 = Receive message terminated: timer expired c: 1 = Receive message terminated: maximum character count achieved p 1 = Receive message terminated because of a parity error

SMB187 Receive Message control byte

MSB

7 en sc ec il c/m tmr bk

LSB

0

0 en: 0 =Receive Message function is disabled.

1 =Receive Message function is enabled.

The enable/disable receive message bit is checked each time the RCV instruction is executed.

sc: 0 =Ignore SMB88 or SMB188.

1 =Use the value of SMB88 or SMB188 to detect start of message.

ec: 0 =Ignore SMB89 or SMB189.

1 =Use the value of SMB89 or SMB189 to detect end of message.

il: 0 =Ignore SMW90 or SMW190.

1 =Use the value of SMW90 or SMW190 to detect an idle line condition.

c/m: 0 =Timer is an inter-character timer.

1 =Timer is a message timer.

tmr: 0 =Ignore SMW92 or SMW192.

1 =Terminate receive if the time period in SMW92 or SMW192 is exceeded.

bk: 0 =Ignore break conditions.

1 =Use break condition as start of message detection.

SMB188 Start of message character

SMB189 End of message character

SMW190 Idle line time period given in milliseconds. The first character received after idle line time has expired is the start of a new message.

SMW192 Inter-character/message timer time-out value (in milliseconds). If the time period is exceeded, the receive message is terminated.

SMB194 Maximum number of characters to be received (1 to 255 bytes).

Note: This range must be set to the expected maximum buffer size, even if the character count message termination is not used.

490

Special Memory (SM) Bits

Appendix D

SMW98: Errors on the Expansion I/O Bus

As described in Table D-17, SMW98 gives you information about the number of errors on the expansion I/O bus.

Table D-17 Special Memory Bytes SMW98

SM Byte Description

SMW98 This location is incremented each time a parity error is detected on the expansion I/O bus. It is cleared upon power up, and can be cleared by the user.

SMB130: Freeport Control Register

(see SMB30)

Refer to Table D-11.

SMB131 to SMB165: HSC3, HSC4, and HSC5 Register

As described in Table D-18, SMB131 through SMB165 are used to monitor and control the operation of high-speed counters HSC3, HSC4, and HSC5.

Table D-18 Special Memory Bytes SMB131 to SMB165

SM Byte Description

SMB131 to SMB135 Reserved

SM136.0 to SM136.4

Reserved

SM136.5

HSC3 current counting direction status bit: 1 = counting up

SM136.6

HSC3 current value equals preset value status bit: 1 = equal

SM136.7

HSC3 current value is greater than preset value status bit: 1 = greater than

SM137.0 to SM137.2

Reserved

SM137.3

HSC3 direction control bit: 1 = count up

SM137.4

SM137.5

SM137.6

SM137.7

HSC3 update direction: 1 = update direction

HSC3 update preset value: 1 = write new preset value to HSC3 preset

HSC3 update current value: 1 = write new current value to HSC3 current

HSC3 enable bit: 1 = enable

SMD138

SMD142

HSC3 new current value

HSC3 new preset value

SM146.0 to SM146.4

Reserved

SM146.5

SM146.6

SM146.7

SM147.0

HSC4 current counting direction status bit: 1 = counting up

HSC4 current value equals preset value status bit: 1 = equal

HSC4 current value is greater than preset value status bit: 1 = greater than

Active level control bit for Reset: 0 = Reset is active high, 1 = Reset is active low

SM147.1

SM147.2

Reserved

Counting rate selection for quadrature counters: 0 = 4x counting rate, 1 = 1x counting rate

HSC4 direction control bit: 1 = count up SM147.3

SM147.4

SM147.5

SM147.6

SM147.7

SMD148

SMD152

HSC4 update direction: 1 = update direction

HSC4 update preset value: 1 = write new preset value to HSC4 preset

HSC4 update current value: 1 = write new current value to HSC4 current

HSC4 enable bit: 1 = enable

HSC4 new current value

HSC4 new preset value

SM156.0 to SM156.4

Reserved

491

S7-200 Programmable Controller System Manual

Table D-18 Special Memory Bytes SMB131 to SMB165, continued

SM Byte Description

SM156.5

SM156.6

HSC5 current counting direction status bit: 1 = counting up

HSC5 current value equals preset value status bit: 1 = equal

SM156.7

HSC5 current value is greater than preset value status bit: 1 = greater than

SM157.0 to SM157.2

Reserved

SM157.3

SM157.4

HSC5 direction control bit: 1 = count up

HSC5 update direction: 1 = update direction

SM157.5

SM157.6

SM157.7

SMD158

SMD162

HSC5 update preset value: 1 = write new preset value to HSC5 preset

HSC5 update current value: 1 = write new current value to HSC5 current

HSC5 enable bit: 1 = enable

HSC5 new current value

HSC5 new preset value

SMB166 to SMB185: PTO0, PTO1 Profile Definition Table

As described in Table D-19, SMB166 through SMB185 are used to show the number of active profile steps and the address of the profile table in V memory.

Table D-19 Special Memory Bytes SMB166 to SMB185

SM Byte Description

SMB166

SMB167

SMW168

SMB170

SMB171

SMD172

SMB176

SMB177

SMW178

SMB180

SMB181

SMD182

Current entry number of the active profile step for PTO0

Reserved

V memory address of the profile table for PTO0 given as an offset from V0.

Linear PTO0 status byte

Linear PTO0 result byte

Specifies the frequency to be generated when the Linear PTO0 generator is operated in manual mode. The frequency is specified as a double integer value in Hz. SMB172 is MSB and SMB175 is LSB

Current entry number of the active profile step for PTO1

Reserved

V memory address of the profile table for PTO1 given as an offset from V0.

Linear PTO1 status byte

Linear PTO1 result byte

Specifies the frequency to be generated when the Linear PTO1 generator is operated in manual mode. The frequency is specified as a double integer value in Hz. SMB182 is MSB and SMB178 is LSB

SMB186 to SMB194: Receive Message Control

(see SMB86 to

SMB94)

Refer to Table D-16.

492

Special Memory (SM) Bits

Appendix D

SMB200 to SMB549: Intelligent Module Status

As shown in Table D-20, SMB200 through SMB549 are reserved for information provided by intelligent expansion modules, such as the EM 277 PROFIBUS—DP module. For information about how your module uses SMB200 through SMB549, refer to Appendix A for the specifications of your specific module.

For an S7-200 CPU with firmware prior to version 1.2, you must install the intelligent module next to the CPU in order to ensure compatibility.

Table D-20 Special Memory Bytes SMB200 to SMB549

Special Memory Bytes SMB200 to SMB549

Intelligent

Module in

Slot 0

SMB200 to

SMB215

SMB216 to

SMB219

SMW220

Intelligent

Module in

Slot 1

SMB250 to

SMB265

SMB266 to

SMB269

SMW270

Intelligent

Module in

Slot 2

SMB300 to

SMB315

SMB316 to

SMB319

SMW320

Intelligent

Module in

Slot 3

SMB350 to

SMB365

SMB366 to

SMB369

SMW370

Intelligent

Module in

Slot 4

SMB400 to

SMB415

SMB416 to

SMB419

SMW420

Intelligent

Module in

Slot 5

SMB450 to

SMB465

SMB466 to

SMB469

SMW470

SMB222 to

SMB249

SMB272 to

SMB299

SMB322 to

SMB349

SMB372 to

SMB399

SMB422 to

SMB449

SMB472 to

SMB499

Intelligent

Module in

Slot 6

SMB500 to

SMB515

SMB516 to

SMB519

SMW520

SMB522 to

SMB549

Description

Module name (16

ASCII characters)

S/W revision number

(4 ASCII characters)

Error code

Information specific to the particular module type

493

S7-200 Programmable Controller System Manual

494

SIMATIC S7-200 Order Numbers

CPUs

CPU 221 DC/DC/DC 6 Inputs/4 Outputs

CPU 221 AC/DC/Relay 6 Inputs/4 Relays

CPU 222 DC/DC/DC 8 Inputs/6 Outputs

CPU 222 AC/DC/Relay 8 Inputs/6 Relays

CPU 224 DC/DC/DC 14 Inputs/10 Outputs

CPU 224 AC/DC/Relay 14 Inputs/10 Relays

CPU 224XP DC/DC/DC 14 Inputs/10 Outputs

CPU 224XP AC/DC/Relay 14 Inputs/10 Relays

CPU 224XPsi DC/DC/DC 14 Inputs/10 Outputs

CPU 226 DC/DC/DC 24 Inputs/16 Outputs

CPU 226 AC/DC/Relay 24 Inputs/16 Relays

Expansion Modules

EM 221 24 VDC Digital 8 Inputs

EM 221 Digital 8 AC Inputs (8 x 120/230 VAC)

EM 221 Digital Input 16 x 24 VDC

EM 222 24 VDC Digital 8 Outputs

EM 222 Digital Output 8 x Relay

EM 222 Digital 8 AC Outputs (8 x 120/230 VAC)

EM 222 Digital Output 4 x 24 VDC — 5A

EM 222 Digital Output 4 x Relays —10A

EM 223 24 VDC Digital Combination 4 Inputs/4 Outputs

EM 223 24 VDC Digital Combination 4 Inputs/4 Relay Outputs

EM 223 24 VDC Digital Combination 8 Inputs/8 Outputs

EM 223 24 VDC Digital Combination 8 Inputs/8 Relay Outputs

EM 223 24 VDC Digital Combination 16 Inputs/16 Outputs

EM 223 24 VDC Digital Combination 16 Inputs/16 Relay Outputs

EM 223 24 VDC Digital Combination 32 Inputs/32 Outputs

EM 223 24 VDC Digital Combination 32 Inputs/32 Relay Outputs

EM 231 Analog Input, 4 Inputs

EM 231 Analog Input, 8 Inputs

EM 231 Analog Input RTD, 2 Inputs

EM 231 Analog Input RTD, 4 Inputs

EM 231 Analog Input Thermocouple, 4 Inputs

EM 231 Analog Input Thermocouple, 8 Inputs

EM 232 Analog Output, 2 Outputs

EM 232 Analog Output, 4 Outputs

EM 235 Analog Combination 4 Inputs/1 Output

EM 241 Modem Module

EM 253 Position Module

Order Number

6ES7 211—0AA23—0XB0

6ES7 211—0BA23—0XB0

6ES7 212—1AB23—0XB0

6ES7 212—1BB23—0XB0

6ES7 214—1AD23—0XB0

6ES7 214—1BD23—0XB0

6ES7 214—2AD23—0XB0

6ES7 214—2BD23—0XB0

6ES7 214—2AS23—0XB0

6ES7 216—2AD23—0XB0

6ES7 216—2BD23—0XB0

Order Number

6ES7 221—1BF22—0XA0

6ES7 221—1EF22—0XA0

6ES7 221—1BH22—0XA0

6ES7 222—1BF22—0XA0

6ES7 222—1HF22—0XA0

6ES7 222—1EF22—0XA0

6ES7 222—1BD22—0XA0

6ES7 222—1HD22—0XA0

6ES7 223—1BF22—0XA0

6ES7 223—1HF22—0XA0

6ES7 223—1BH22—0XA0

6ES7 223—1PH22—0XA0

6ES7 223—1BL22—0XA0

6ES7 223—1PL22—0XA0

6ES7 223—1BM22—0XA0

6ES7 223—1PM22—0XA0

6ES7 231—0HC22—0XA0

6ES7 231—0HF22—0XA0

6ES7 231—7PB22—0XA0

6ES7 231—7PC22—0XA0

6ES7 231—7PD22—0XA0

6ES7 231—7PF22—0XA0

6ES7 232—0HB22—0XA0

6ES7 232—0HD22—0XA0

6ES7 235—0KD22—0XA0

6ES7 241—1AA22—0XA0

6ES7 253—1AA22—0XA0

495

S7-200 Programmable Controller System Manual

Expansion Modules

SIWAREX MS Micro Scale Module (includes manual)

SINAUT MD720—3 GSM/GPRS Modem

SINAUT ANT 794—4MR Antenna GSM Quadband AMD UMTS

Communications Modules

EM 277 PROFIBUS—DP Module

CP 243—2 AS Interface Module

CP 243—1 Ethernet Module (with electronic documentation on CD)

CP 243—1 IT Internet Module (with electronic documentation on CD)

Cartridges and Cables

Memory Cartridge, 64K (user program, recipe, and data logging)

Memory Cartridge, 256K (user program, recipe, and data logging)

Real-Time Clock with battery Cartridge (CPU 221 and CPU 222)

Battery Cartridge

I/O Bus Extension Cable, 0.8 meters

Programming Cable, RS-232/PPI Multi-Master

Programming Cable, USB/PPI Multi-Master

P/C Adapter, USB

SIWAREX MS — SIWATOOL MS Cable

Software

STEP 7—Micro/WIN (V4.0) Individual License (CD-ROM)

STEP 7—Micro/WIN (V4.0) Upgrade License (CD-ROM)

STEP 7—Micro/WIN Add-on: STEP 7—Micro/WIN 32 Instruction Library, V1.1 (CD-ROM)

S7-200 PC Access V1.0 (OPC Server) Individual License

S7-200 PC Access V1.0 (OPC Server) Multi-copy License

WinCC flexible 2007 Micro Individual License (DVD—ROM without license key)

WinCC flexible 2007 Micro Upgrade License (DVD—ROM without license key)

WinCC flexible 2007 Compact Individual License (DVD—ROM with license key)

WinCC flexible 2007 Compact Upgrade License (DVD—ROM with license key)

SIWATOOL MS Configuration software or SIWAREX MS Micro Scale

SINAUT MICRO SC 8 Single License for 1 Installation

SINAUT MICRO SC 64 Single License for 1 Installation

SINAUT MICRO SC 256 Single License for 1 Installation

Communications Cards

CP 5411: Short AT ISA

CP 5512: PCMCIA Type II

CP 5611: PCI card (version 3.0 or greater)

Order Number

7MH4 930—0AA01

6NH9 720—3AA00

6NH9 860—1AA00

Order Number

6ES7 277—0AA22—0XA0

6GK7 243—2AX01—0XA0

6GK7 243—1EX00—0XE0

6GK7 243—1GX00—0XE0

Order Number

6ES7 291—8GF23—0XA0

6ES7 291—8GH23—0XA0

6ES7 297—1AA23—0XA0

6ES7 291—8BA20—0XA0

6ES7 290—6AA20—0XA0

6ES7 901—3CB30—0XA0

6ES7 901—3DB30—0XA0

6ES7 972—0CB20—0XA0

7MH4 702—8CB

Order Number

6ES7 810—2CC03—0YX0

6ES7 810—2CC03—0YX3

6ES7 830—2BC00—0YX0

6ES7 840—2CC01—0YX0

6ES7 840—2CC01—0YX1

6AV6 610—0AA01—2CA8

6AV6 610—0AA01—2CE8

6AV6 611—0AA51—2CA5

6AV6 611—0AA51—2CE5

7MH4 930—0AK01

6NH9 910—0AA10—0AA3

6NH9 910—0AA10—0AA6

6NH9 910—0AA10—0AA8

Order Number

6GK1 541—1AA00

6GK1 551—2AA00

6GK1 561—1AA00

496

SIMATIC S7-200 Order Numbers

Appendix E

Manuals

S7-200 Programmable Controller System Manual (German)

S7-200 Programmable Controller System Manual (English)

S7-200 Programmable Controller System Manual (French)

S7-200 Programmable Controller System Manual (Spanish)

S7-200 Programmable Controller System Manual (Italian)

S7—200 Programmable Controller System Manual (Chinese)

S7—200 Programmable Controller System Manual (Korean)

S7-200 Point-to-Point Interface Communication Manual (English/German)

CP 243—2 AS-Interface Master Manual (English)

OP 73micro and TP 177micro User Manual (English)

WinCC flexible 2005 Micro User’s Manual

SIMATIC HMI Manual Collection

Cables, Network Connectors, and Repeaters

MPI Cable

PROFIBUS Network Cable

Network Bus Connector with Programming Port Connector, Vertical Cable Outlet

Network Bus Connector (no programming port connector), Vertical Cable Outlet

RS-485 Bus Connector with 35

°

Cable Outlet (no programming port connector)

RS-485 Bus Connector with 35

°

Cable Outlet (with programming port connector)

Terminal Block (7 position)

Terminal Block (12 position)

Terminal Block (14 position)

Terminal Block (18 position)

RS-485 IP 20 Repeater, Isolated

TD/CPU Connecting Cable

Human Machine Interface

TD 100C Operator Interface

1

TD 200 Operator Interface

TD 200C Operator Interface

1

TD400C Operator Interface

1

TD 100C Blank faceplate material, A4 size (10 sheets/package)

TD 200C Blank faceplate material, A4 size (10 sheets/package)

TD400C Blank faceplate material, A4 size (10 sheets/package)

OP 73micro Operator Panel

TP177micro Touch Panel

Miscellaneous

12-Position Fan Out Connector of CPU 221 and CPU 222 (package of 10)

Front Door Spare Part Kit for 22x CPU and EM, (4 pieces of each type)

Simulator Module, 8 DI Switches, DC Input, for CPU 221 and 222

Simulator Module, 14 DI Switches, DC Input, for CPU 224 and 224XP

Simulator Module, 24 DI Switches, DC Input, for CPU 226

Order Number

6ES7 298—8FA24—8AH0

6ES7 298—8FA24—8BH0

6ES7 298—8FA24—8CH0

6ES7 298—8FA24—8DH0

6ES7 298—8FA24—8EH0

6ES7 298—8FA24—8FH0

6ES7 298—8FA24—8GH0

6ES7 298—8GA00—8XH0

6GK7 243—2AX00—8BA0

6AV6 691—1DF01—0AB0

6AV6 691—1AA01—0AB0

6AV6 691—1SA01—0AX0

Order Number

6ES7 901—0BF00—0AA0

6XV1 830—0AH10

6ES7 972—0BB11—0XA0

6ES7 972—0BA11—0XA0

6ES7 972—0BA40—0XA0

6ES7 972—0BB40—0XA0

6ES7 292—1AD20—0AA0

6ES7 292—1AE20—0AA0

6ES7 292—1AF20—0AA0

6ES7 292—1AG20—0AA0

6ES7 972—0AA00—0XA0

6ES7 901—3EB10—0XA0

Order Number

6ES7 272—1BA10—0YA1

6ES7 272—0AA30—0YA1

6ES7 272—1AA10—0YA1

6AV6 640—0AA00—0AX1

6ES7 272—1BF00—7AA0

6ES7 272—1AF00—7AA0

6AV6 671—0AP00—0AX0

6AV6 640—0BA11—0AX0

6AV6 640—0CA11—0AX0

Order Number

6ES7 290—2AA00—0XA0

6ES7 291—3AX20—0XA0

6ES7 274 1XF00—0XA0

6ES7 274 1XH00—0XA0

6ES7 274 1XK00—0XA0

1 Includes one blank faceplate overlay for customization. For additional blank faceplate overlays, order the blank faceplate material for your TD device.

497

S7-200 Programmable Controller System Manual

498

Execution Times for STL Instructions

Instruction execution times are very important if your application has time-critical functions. The instruction execution times are shown in Table F-2.

Tip

When you use the execution times in Table F-2, you should consider the effect of power flow to the instruction, the effect of indirect addressing, and the use of certain memory areas on these execution times. These factors can directly effect the listed execution times.

Effect of Power Flow

Table F-2 shows the time required for executing the logic or function of the instruction when power flow is present (Top of Stack = 1 or ON) for that instruction.

When power flow is not present, then the execution time for that instruction is

1

µ s.

Effect of Indirect Addressing

Table F-2 shows the time required for executing the logic, or function, of the instruction when you use direct addressing of the operands and constants.

When instructions use indirectly addressed operands, the execution time for the instruction increases by 14

µ s for each indirectly addressed operand used in the instruction.

Effect of Accessing Certain Memory Areas

Accessing certain memory areas, such as

AI, AQ, L, and accumulators require additional execution time.

Table F-1

Table F-1 shows the additional time that must be added to an instruction’s execution time when these memory areas are specified in an operand.

Adder for Accessing Memory

Areas

Memory Area

Local Analog Input (AI) filtering disabled filtering enabled

Expansion Analog Input (AI) filtering disabled filtering enabled

Execution Time

Adder

9.4

µ s

8.4

µ s

134

µ s

8.4

µ s

Local Analog Output (AQ)

Expansion Analog Output (AQ)

Local memory (L)

Accumulators (AC)

92

µ s

48

µ s

2.8

µ s

2.8

µ s

499

S7-200 Programmable Controller System Manual

/I

=I

+D

—D

+I

—I

*D

/D

*I

Table F-2

Instruction

Instruction Execution Times

= Using: I

SM, T, C, V, S, Q, M

L

Using: Local outputs

Expansion outputs

+R

—R

*R

/R

A Using: I

SM, T, C, V, S, Q, M

L

AB <=, =, >=, >, <, <>

AD <=, =, >=, >, <, <>

AENO

AI Using: Local inputs

Expansion inputs

ALD

AN Using: I

SM, T, C, V, S, Q, M

L

ANDB

ANDD

ANDW

ANI Using: Local inputs

Expansion inputs

AR <=, =, >=, >, <, <>

AS=, <> Time = Base + (LM

Base

∗

N)

Length multiplier (LM)

N is the number of characters compared

ATCH

ATH Time = Base + (length

∗

LM)

Base (constant length)

Base (variable length)

Length multiplier (LM)

ATT

AW <=, =, >=, >, <, <>

BCDI

33

6.3

12

23

31

10.2

36

23

35

µ

s

0.24

1.3

10.5

29

29

47

250

25

25

37

25

15

21

29

0.4

15

21

0.22

0.22

0.72

6.1

19

30

64

16

24

71 Typ

99 Max

72 Typ

100 Max

56 Typ

166 Max

177 Typ

230 Max

0.22

0.72

6.1

18

27

Instruction

BITIM

BIR

BIW

BMB

BMD

BMW

Using: Local inputs

Expansion inputs

Using: Local outputs

Expansion outputs

Time = Base + (length

∗

LM)

Base (constant length)

Base (variable length)

Length multiplier (LM)

Time= Base + (length

∗

LM)

Base (constant length)

Base (variable length)

Length multiplier (LM)

Time= Base + (length

∗

LM)

Base (constant length)

Base (variable length)

Length multiplier (LM)

BTI

CALL Using no parameters:

Using parameters:

Time = Base +

Σ

(operand time)

Base

Operand time bit (input, output) byte (input, output) word (input, output)

Dword (input, output)

Note: processing of output operands occurs during the return from the subroutine

CEVNT

CFND Maximum Time =

Base + N1

∗

((LM1

∗

N2) + LM2)

Base

Length multiplier 1 (LM1)

Length multiplier 2 (LM2)

N1 is length of the source string

N2 is the length of the character set string

CITIM

COS

CRET Power flow present

Power flow not present

CRETI Power flow not present

CSCRE

CTD

CTU

On transition of count input

Otherwise

On transition of count input

Otherwise

CTUD On transition of count input

Otherwise

DECB

DECD

DECO

DECW

DISI

DIV

µ

s

16

23

30

24

32

10

28

5.7

11

29

10.6

10

28

8.6

16

9

14

10, 11

8, 7

10, 9

12, 10

24

35

8.6

9.5

20

9

67

37

24

16

27

19

31

19

22

19

23

900 Typ

1070 Max

16

0.8

0.2

3.1

500

Execution Times for STL Instructions

Appendix F

Instruction

DLED

DTA

DTI

DTCH

DTR

DTS

ED

ENCO

END

ENI

EU

EXP

Power flow not present

ITA

ITB

ITD

ITS

JMP

LBL

INCB

INCD

INCW

INT

INVB

INVD

INVW

FIFO

FILL

FND <, =, >, <>

Time = Base+(length

∗

LM)

Base

Length multiplier (LM)

FOR Time = Base+(Number of loops

Base

Loop multiplier (LM)

∗

LM)

GPA

HDEF

Time = Base + (length

∗

LM)

Base

Length multiplier (LM)

Time= Base + (length

∗

LM)

Base (constant length)

Base (variable length)

Length multiplier (LM)

HSC

HTA Time= Base+ (length

∗

LM)

Base (constant length)

Base (variable length)

Length multiplier (LM)

IBCD

Typical with 1 interrupt

39

6.5

35

28

16

18

30

16

22

20

15

22

20

24

20

28

5.2

52

136

17

20

139

1.8

0.22

30

7

15

29

3.2

µ

s

14

302

21

12

35 Typ

40 Max

305

8

24 Max

0.2

11

8

720 Typ

860 Max

Instruction

LD Using: I

SM, T, C, V, S, Q, M

L

LDB <=, =, >=, >, <, <>

LDD <=, =, >=, >, <, <>

LDI

LDN

Using: Local inputs

Expansion inputs

Using: I

SM, T, C, V, S, Q, M

L

LDNI Using: Local inputs

Expansion inputs

LDR<=, =, >=, >, <, <>

LDS

LDS=, <> Time = Base + (LM

∗

N)

Base

Length multiplier (LM)

N is the number of characters compared

LDW <=, =, >=, >, <, <>

LIFO

LN

LPP

LPS

LRD

LSCR

MOVB

MOVD

MOVR

MOVW

MUL

NETR

NETW Time = Base + (LM

∗

N)

Base

Length multiplier (LM)

N is the number of bytes to send

NEXT

NOP

NOT

O Using: I

SM, T, C, V, S, Q, M

L

OB <=, =, >=, >, <, <>

OD <=, =, >=, >, <, <>

OI Using: Local inputs

Expansion inputs

OLD

ON Using: I

SM, T, C, V, S, Q, M

L

µ

s

0.22

0.8

6

18

27

15

21

29

15

21

0.3

0.9

6.1

0.22

33

6.3

20

20

18

0.24

0.22

7.3

15

24

37

680 Typ

820 Max

0.22

37

99

95

4

0

0.22

0.22

0.22

0.72

6.4

18

26

15

21

0.22

0.22

0.72

6.4

501

S7-200 Programmable Controller System Manual

Instruction

ONI Using: Local inputs

Expansion inputs

OR<=, =, >=, >, <, <>

ORB

ORD

ORW

OS=, < >Time + Base + (LM

∗

N)

Base

Length multiplier (LM)

N is the number of characters compared

OW <=, =, >=, >, <, <>

PID Typical

Manual-to-auto transition

Coefficient recalculation

Auto-tune

PLS:

R

Using: PWM

PTO single segment

PTO multiple segment

Length=1 and specified as a constant

Base for Counters (C)

Base for Timers (T)

Base for all others

Otherwise: Time = Base + (length

∗

LM)

Base for Counters

Base for Timers (T)

Base for all others

Length multiplier (LM) for operand C

Length multiplier (LM) for operand T

Length multiplier (LM) for all others

If length stored as variable, add to base

RCV

RET

RI

RLB

RLD

RLW

Time = Base + (length

∗

LM)

Base

Length multiplier (LM) using local outputs

Length multiplier (LM) using expansion outputs

If length stored as a variable, add to Base

Time = Base + (LM

Base

∗

Length multiplier (LM)

N is the shift count

N)

Time = Base + (LM

∗

N)

Base

Length multiplier (LM)

N is the shift count

Time = Base + (LM

∗

N)

Base

Length multiplier (LM)

N is the shift count

ROUND

8.9

13

21

17

µ

s

15

21

29

19

29

25

33

6.3

8.6

8.3

14

5.1

9.9

0.5

17

51

16

24

400

800 Max

770 Max

650 Max

31

36

50

9.3

16

2.9

23

0.2

28

1.4

27

0.9

56 Typ

110 Max

RRB

RRD

Time = Base + (LM

∗

N)

Base

Length multiplier (LM)

N is the shift count

Time = Base + (LM

∗

N)

Base

Length multiplier (LM))

N is the shift count

22

0.5

28

1.7

Instruction

RRW Time = Base + (LM

∗

N)

Base

Length multiplier (LM)

N is the shift count

RTA

RTS

S

Time = Base + (LM

∗

N)

Base (for first digit in result)

Length multiplier (LM)

N is the number of additional digits in result

Time = Base + (LM

∗

N)

Base (for first digit in result x)

Length multiplier (LM)

N is the number of additional digits in result

For length = 1 and specified as a constant

Otherwise:

Time = Base + (length

∗

LM)

Base

Length multiplier (LM)

If length is stored as a variable, add to

Base

SCAT Time = Base + (LM

∗

N)

Base

Length multiplier (LM)

N is the number of appended characters

SCPY Time = Base + (LM

∗

N)

Base

Length multiplier (LM)

N is the number of copied characters

SCRE

SCRT

SEG

SFND Maximum Time =

Base +((N1—N2)

∗

LM2) +(N2

∗

LM1)

Base

Length multiplier 1 (LM1)

Length multiplier 2 (LM2)

N1 is the length of the source string

N2 is the length of the search string

SHRB Time = Base + (length

∗

LM1) +

((length /8)

∗

LM2)

Base (constant length)

Base (variable length)

Length multiplier 1 (LM1)

Length multiplier 2 (LM2)

SI Time = Base + (length

∗

LM)

Base

LM using local output

LM using expansion output

If length is stored as a variable, add to

Base

SIN

SLB

SLD

Time = Base + (LM

∗

N)

Base

Length multiplier (LM)

N is the shift count

Time = Base + (LM

∗

N)

Base

Length multiplier (LM)

N is the shift count

154

96

2.9

µ

s

26

1.2

149

96

14

0.5

17

30

5.3

27

4.6

0.24

10

15

39

7.6

6.8

8.9

13

21

17

48

52

1.0

1.5

900 Typ

1070 Max

23

0.2

29

1.1

502

Execution Times for STL Instructions

Appendix F

Instruction

SLEN

SLW Time = Base + (LM + N)

Base

Length multiplier (LM))

N is the shift count

SPA

SQRT

SRB

SRD

Time = Base + (LM + N)

Base

Length multiplier (LM))

N is the shift count

Time = Base + (LM + N)

Base

Length multiplier (LM))

N is the shift count

SRW Time = Base + (LM + N)

Base

Length multiplier (LM))

N is the shift count

SSCPY Time = Base + (LM

∗

N)

Base

Length multiplier (LM)

N is the number of copied characters

STD

STI

Time = Base + (LM

∗

N)

Base (for 1st source character)

Length multiplier (LM)

N is the number of additional source characters

Time = Base + (LM

∗

N)

Base (for 1st source character)

Length multiplier (LM)

N is the number of additional source characters

28

1.5

27

1

42

5.3

69

27

µ

s

21

27

0.6

371

460 Typ

550 Max

22

0.6

Instruction

STOP Power flow not present

STR Time = Base + (LM

Base (for 1st source character)

Length multiplier (LM)

N is the number of additional source characters

∗

N)

SWAP

TAN

TODR

TODRX

Daylight Saving Time correction

TODW

TODWX

TOF

TON

TONR

TRUNC

WDR

XMT

XORB

XORD

XORW

58

27

µ

s

4

51

81

36

33

32

53 Typ

106 Max

7

42

19

17

1080 Typ

1300 Max

331

391 Typ

783 Typ

436

554

29

25

503

S7-200 Programmable Controller System Manual

504

S7-200 Quick Reference Information

To help you find information more easily, this section summarizes the following information:

—

—

—

—

—

Special Memory Bits

Descriptions of Interrupt Events

Summary of S7-200 CPU Memory Ranges and Features

High-Speed Counters HSC0, HSC1, HSC2, HSC3, HSC4, HSC5

S7-200 Instructions

Table G-1 Special Memory Bits

Special Memory Bits

SM0.0

SM0.1

SM0.2

SM0.3

SM0.4

SM0.5

SM0.6

SM0.7

Always On

First Scan

Retentive data lost

Power up

30 s off / 30 s on

0.5 s off / 0.5 s on

Off 1 scan / on 1 scan

Switch in RUN position

SM1.0

SM1.1

SM1.2

SM1.3

SM1.4

SM1.5

SM1.6

SM1.7

Result of operation = 0

Overflow or illegal value

Negative result

Division by 0

Table full

Table empty

BCD to binary conversion error

ASCII to hex conversion error

505

S7-200 Programmable Controller System Manual

Table G-2 Interrupt Events in Priority Order

Event Number Interrupt Description

8

9

Port 0: Receive character

Port 0: Transmit complete

17

18

32

14

15

16

27

28

13

5

7

12

10

11

21

29

30

31

33

22

6

1

3

2

4

20

0

23

24

25

26

19

Port 0: Receive message complete

Port 1: Receive message complete

Port 1: Receive character

Port 1: Transmit complete

PTO 0 complete interrupt

PTO 1 complete interrupt

I0.0, Rising edge

I0.1, Rising edge

I0.2, Rising edge

I0.3, Rising edge

I0.0, Falling edge

I0.1, Falling edge

I0.2, Falling edge

I0.3, Falling edge

HSC0 CV=PV (current value = preset value)

HSC0 direction changed

HSC0 external reset

HSC1 CV=PV (current value = preset value)

HSC1 direction input changed

HSC1 external reset

HSC2 CV=PV

HSC2 direction changed

HSC2 external reset

HSC3 CV=PV (current value = preset value)

HSC4 CV=PV (current value = preset value)

HSC4 direction changed

HSC4 external reset

HSC5 CV=PV (current value = preset value)

Timed interrupt 0

Timed interrupt 1

Timer T32 CT=PT interrupt

Timer T96 CT=PT interrupt

Priority Group

Communications

(highest)

Priority in Group

0

1

1

0

0

0

1

11

12

13

8

9

10

5

6

7

3

4

1

2

0

1

2

20

21

22

23

3

17

18

19

14

15

16

506

S7-200 Quick Reference Information

Appendix G

Table G-3 Memory Ranges and Features for the S7-200 CPUs

Description CPU 221 CPU 222 CPU 224

CPU 224XP

CPU 224XPsi

CPU 226

User program size with run mode edit without run mode edit

User data size

Process-image input register

Process-image output register

Analog inputs (read only)

4096 bytes

4096 bytes

2048 bytes

I0.0 to I15.7

Q0.0 to Q15.7

AIW0 to AIW30

4096 bytes

4096 bytes

2048 bytes

I0.0 to I15.7

Q0.0 to Q15.7

AIW0 to AIW30

8192 bytes

12288 bytes

8192 bytes

I0.0 to I15.7

Q0.0 to Q15.7

AIW0 to AIW62

12288 bytes

16384 bytes

10240 bytes

I0.0 to I15.7

Q0.0 to Q15.7

AIW0 to AIW62

16384 bytes

24576 bytes

10240 bytes

I0.0 to I15.7

Q0.0 to Q15.7

AIW0 to AIW62

Analog outputs (write only)

Variable memory (V)

Local memory (L)

Bit memory (M)

1

Special Memory (SM)

Read only

Timers

Retentive on-delay

On/Off delay

1 ms

10 ms

100 ms

1 ms

10 ms

100 ms

AQW0 to AQW30 AQW0 to AQW30 AQW0 to AQW62 AQW0 to AQW62 AQW0 to AQW62

VB0 to VB2047 VB0 to VB2047 VB0 to VB8191 VB0 to VB10239 VB0 to VB10239

LB0 to LB63 LB0 to LB63 LB0 to LB63 LB0 to LB63 LB0 to LB63

M0.0 to M31.7

SM0.0 to

SM179.7

SM0.0 to SM29.7

256 (T0 to T255)

T0, T64

T1 to T4, and

T65 to T68

T5 to T31, and

T69 to T95

T32, T96

T33 to T36, and

T97 to T100

T37 to T63, and

T101 to T255

C0 to C255

M0.0 to M31.7

SM0.0 to

SM299.7

SM0.0 to SM29.7

256 (T0 to T255)

T0, T64

T1 to T4, and

T65 to T68

T5 to T31, and

T69 to T95

T32, T96

T33 to T36, and

T97 to T100

T37 to T63, and

T101 to T255

C0 to C255

M0.0 to M31.7

SM0.0 to

SM549.7

SM0.0 to SM29.7

256 (T0 to T255)

T0, T64

T1 to T4, and

T65 to T68

T5 to T31, and

T69 to T95

T32, T96

T33 to T36, and

T97 to T100

T37 to T63, and

T101 to T255

C0 to C255

M0.0 to M31.7

SM0.0 to

SM549.7

SM0.0 to SM29.7

256 (T0 to T255)

T0, T64

T1 to T4, and

T65 to T68

T5 to T31, and

T69 to T95

T32, T96

T33 to T36, and

T97 to T100

T37 to T63, and

T101 to T255

C0 to C255

M0.0 to M31.7

SM0.0 to

SM549.7

SM0.0 to SM29.7

256 (T0 to T255)

T0, T64

T1 to T4, and

T65 to T68

T5 to T31, and

T69 to T95

T32, T96

T33 to T36, and

T97 to T100

T37 to T63, and

T101 to T255

C0 to C255 Counters

High-speed counters

Sequential control relays (S)

Accumulator registers

Jumps/Labels

Call/Subroutine

HC0 to HC5

S0.0 to S31.7

AC0 to AC3

0 to 255

0 to 63

HC0 to HC5

S0.0 to S31.7

AC0 to AC3

0 to 255

0 to 63

1

Interrupt routines

Positive/negative transitions

PID loops

Ports

0 to 127

256

0 to 7

Port 0

0 to 127

256

0 to 7

Port 0

LB60 to LB63 are reserved by STEP 7—Micro/WIN, version 3.0 or later.

HC0 to HC5

S0.0 to S31.7

AC0 to AC3

0 to 255

0 to 63

0 to 127

256

0 to 7

Port 0

HC0 to HC5

S0.0 to S31.7

AC0 to AC3

0 to 255

0 to 63

0 to 127

256

0 to 7

Port 0, Port 1

HC0 to HC5

S0.0 to S31.7

AC0 to AC3

0 to 255

0 to 127

0 to 127

256

0 to 7

Port 0, Port 1

507

S7-200 Programmable Controller System Manual

Table G-4

0

1

2

3

4

5

High-Speed Counters HSC0, HSC3, HSC4, and HSC5

HSC0

Clk

I0.0

I0.0

Direction Reset

I0.2

HSC3

Clk

I0.1

HSC4

Clk

I0.3

I0.3

I0.0

I0.0

I0.1

I0.1

I0.2

I0.3

I0.3

6

7

8

HSC0

Clk Up

I0.0

I0.0

Clk Down

I0.1

I0.1

Reset

I0.2

HSC4

Clk Up

I0.3

I0.3

9

10

11

HSC0

Phase A

I0.0

I0.0

Phase B

I0.1

I0.1

Reset

I0.2

HSC4

Phase A

I0.3

I0.3

12

HSC0

Clk

Q0.0

HSC3

Clk

Q0.1

Direction Reset

I0.4

I0.4

I0.5

I0.5

Clk Down Reset

I0.4

I0.4

I0.5

Phase B

I0.4

I0.4

Reset

I0.5

HSC5

Clk

I0.4

Table G-5

Mode

0

1

2

3

4

5

6

7

8

9

10

11

High-Speed Counters HSC1 and HSC2

HSC1

Clk Down Reset Clk

I0.6

I0.6

I0.6

I0.6

I0.6

I0.6

I0.7

I0.7

I0.7

I1.0

I1.0

I1.0

I1.0

HSC1

Clk Up

I0.6

I0.6

I0.6

Clk Down Reset

I0.7

I0.7

I0.7

Phase A Phase B

I0.6

I0.6

I0.6

I0.7

I0.7

I0.7

I1.0

I1.0

I1.0

Reset

I1.0

I1.0

Start

I1.1

I1.1

Start

I1.1

Start

I1.1

HSC2

Clk

I1.2

I1.2

I1.2

I1.2

I1.2

I1.2

Direction Reset

I1.4

I1.4

I1.3

I1.3

I1.3

I1.4

I1.4

HSC2

Clk Up

I1.2

I1.2

I1.2

Clk Down Reset

I1.3

I1.3

I1.3

I1.4

I1.4

Reset Phase A Phase B

I1.2

I1.2

I1.2

I1.3

I1.3

I1.3

I1.4

I1.4

Start

I1.5

I1.5

Start

I1.5

Start

I1.5

508

S7-200 Quick Reference Information

Appendix G

=

=I

S

R

SI

RI

NOT

EU

ED

LDSx

ABx

OBx

LDWx IN1, IN2

AWx

OWx

LDDx IN1, IN2

ADx

ODx

LDRx IN1, IN2

ARx

ORx

ASx

OSx

ALD

OLD

LPS

LRD

LPP

LDS

AENO

A

AI

AN

ANI

Boolean Instructions

LD

LDI

LDN

LDNI

Bit

Bit

Bit

Bit

Bit

Bit

Bit

Bit

O

OI

ON

ONI

LDBx

Bit

Bit

Bit

Bit

IN1, IN2

IN1, IN2

IN1, IN2

IN1, IN2

IN1, IN2

IN1, IN2

IN1, IN2

IN1, IN2

IN1, IN2

Bit

Bit

Bit, N

Bit, N

Bit, N

Bit, N

IN1, IN2

IN1, IN2

IN1, IN2

N

Load

Load Immediate

Load Not

Load Not Immediate

AND

AND Immediate

AND Not

AND Not Immediate

OR

OR Immediate

OR Not

OR Not Immediate

Load result of Byte Compare

IN1 (x:<, <=,=, >=, >, <>I) IN2

AND result of Byte Compare

IN1 (x:<, <=,=, >=, >, <>) IN2

OR result of Byte Compare

IN1 (x:<, <=,=, >=, >, <>) IN2

Load result of Word Compare

IN1 (x:<, <=,=, >=, >, <>) IN2

AND result of Word Compare

IN1 (x:<, <=,=, >=, >, <>)I N2

OR result of Word Compare

IN1 (x:<, <=,=, >=, >, <>) IN2

Load result of DWord Compare

IN1 (x:<, <=,=, >=, >, <>) IN2

AND result of DWord Compare

IN1 (x:<, <=,=, >=, >, <>)IN2

OR result of DWord Compare

IN1 (x:<, <=,=, >=, >, <>) IN2

Load result of Real Compare

IN1 (x:<, <=,=, >=, >, <>) IN2

AND result of Real Compare

IN1 (x:<, <=,=, >=, >, <>) IN2

OR result of Real Compare

IN1 (x:<, <=,=, >=, >, <>) IN2

Stack Negation

Detection of Rising Edge

Detection of Falling Edge

Assign Value

Assign Value Immediate

Set bit Range

Reset bit Range

Set bit Range Immediate

Reset bit Range Immediate

Load result of String Compare

IN1 (x: =, <>) IN2

AND result of String Compare

IN1 (x: =, <>) IN2

OR result of String Compare

IN1 (x: =, <>) IN2

And Load

Or Load

Logic Push (stack control)

Logic Read (stack control)

Logic Pop (stack control)

Load Stack (stack control)

And ENO

Math, Increment, and Decrement instructions

+I

+D

+R

IN1, OUT

IN1, OUT

IN1, OUT

Add Integer, Double Integer or Real

IN1+OUT=OUT

—I

—D

—R

MUL

*I

*D

*R

IN1, OUT

IN1, OUT

IN1, OUT

IN1, OUT

IN1, OUT

IN1, OUT

IN1, IN2

DIV

/I

/D,

/R

IN1, OUT

IN1, OUT

IN1, OUT

IN1, OUT

SQRT IN, OUT

LN

EXP

SIN

COS

TAN

IN, OUT

IN, OUT

IN, OUT

IN, OUT

IN, OUT

Subtract Integer, Double Integer, or

Real

OUT—IN1=OUT

Multiply Integer (16*16—>32)

Multiply Integer, Double Integer, or Real

IN1 * OUT = OUT

Divide Integer (16/16—>32)

Divide Integer, Double Integer, or Real

OUT / IN1 = OUT

Square Root

Natural Logarithm

Natural Exponential

Sine

Cosine

Tangent

INCB OUT

INCW OUT

INCD OUT

DECB OUT

DECW OUT

DECD OUT

PID TBL, LOOP

Increment Byte, Word or DWord

Decrement Byte, Word, or DWord

PID Loop

Timer and Counter Instructions

TON

TOF

Txxx, PT

Txxx, PT

TONR Txxx, PT

BITIM OUT

CITIM IN, OUT

On-Delay Timer

Off-Delay Timer

Retentive On-Delay Timer

Beginning Interval Timer

Calculate Interval Timer

CTU

CTD

Cxxx, PV

Cxxx, PV

CTUD Cxxx, PV

Count Up

Count Down

Count Up/Down

Real Time Clock Instructions

TODR T

TODW T

TODRX T

TODWX T

Read Time of Day clock

Write Time of Day clock

Read Real Time Clock Extended

Set Real Time Clock Extended

Program Control Instructions

END Conditional End of Program

STOP

WDR

JMP

LBL

N

N

CALL N [N1,…]

Transition to STOP Mode

WatchDog Reset (300 ms)

Jump to defined Label

Define a Label to Jump to

Call a Subroutine [N1, … up to 16 optional parameters]

Conditional Return from SBR CRET

FOR

NEXT

INDX,INIT,FINAL

LSCR N

SCRT N

CSCRE

SCRE

DLED IN

For/Next Loop

Load, Transition, Conditional End, and

End Sequence Control Relay

Diagnostic LED

509

S7-200 Programmable Controller System Manual

Move, Shift, and Rotate Instructions

MOVB IN, OUT

MOVW IN, OUT

MOVD IN, OUT

MOVR IN, OUT

Move Byte, Word, DWord, Real

Move Byte Immediate Read

Move Byte Immediate Write

BIR

BIW

IN, OUT

IN, OUT

BMB

BMW

BMD

SWAP IN

IN, OUT, N

IN, OUT, N

IN, OUT, N

SHRB DATA, S_BIT, N

SRB

SRW

SRD

SLB

SLW

SLD

OUT, N

OUT, N

OUT, N

OUT, N

OUT, N

OUT, N

RRB

RRW

RRD

OUT, N

OUT, N

OUT, N

Block Move Byte, Word, DWord

Swap Bytes

Shift Register Bit

Shift Right Byte, Word, DWord

Shift Left Byte, Word, DWord

Rotate Right Byte, Word, DWord

RLB

RLW

RLD

OUT, N

OUT, N

OUT, N

Logical Instructions

ANDB IN1, OUT

ANDW IN1, OUT

ANDD IN1, OUT

ORB

ORW

ORD

IN1, OUT

IN1, OUT

IN1, OUT

Rotate Left Byte, Word, DWord

Logical AND of Byte, Word, and DWord

Logical OR of Byte, Word, and DWord

XORB IN1, OUT

XORW IN1, OUT

XORD IN1, OUT

INVB OUT

INVW OUT

INVD OUT

String Instructions

SLEN IN, OUT

SCAT IN, OUT

SCPY IN, OUT

SSCPY IN, INDX, N, OUT

CFND IN1, IN2, OUT

SFND IN1, IN2, OUT

Logical XOR of Byte, Word, and DWord

Invert Byte, Word and DWord

(1’s complement)

String Length

Concatenate String

Copy String

Copy Substring from String

Find First Character within String

Find String within String

Table, Find, and Conversion Instructions

ATT DATA, TBL Add data to table

LIFO

FIFO

TBL, DATA

TBL, DATA

FND= TBL, PTN, INDX

FND<> TBL, PTN, INDX

FND< TBL, PTN, INDX

FND> TBL, PTN, INDX

FILL

BCDI

IBCD

IN, OUT, N

OUT

OUT

BTI

ITB

ITD

DTI

IN, OUT

IN, OUT

IN, OUT

IN, OUT

DTR IN, OUT

TRUNC IN, OUT

ROUND IN, OUT

ATH

HTA

ITA

DTA

RTA

IN, OUT, LEN

IN, OUT, LEN

IN, OUT, FMT

IN, OUT, FM

IN, OUT, FM

DECO IN, OUT

ENCO IN, OUT

SEG

ITS

DTS

RTS

IN, OUT

IN, FMT, OUT

IN, FMT, OUT

IN, FMT, OUT

Get data from table

Find data value in table that matches comparison

Fill memory space with pattern

Convert BCD to Integer

Convert Integer to BCD

Convert Byte to Integer

Convert Integer to Byte

Convert Integer to Double Integer

Convert Double Integer to Integer

Convert DWord to Real

Convert Real to Double Integer

Convert Real to Double Integer

Convert ASCII to Hex

Convert Hex to ASCII

Convert Integer to ASCII

Convert Double Integer to ASCII

Convert Real to ASCII

Decode

Encode

Generate 7—segment pattern

Convert Integer to String

Convert Double Integer to String

Convert Real to String

STI

STD

STR

Interrupt Instructions

CRETI

ENI

DISI

STR, INDX, OUT

STR, INDX, OUT

STR, INDX, OUT

Convert Substring to Integer

Convert Substring to Double Integer

Convert Substring to Real

Conditional Return from Interrupt

Enable Interrupts

Disable Interrupts

ATCH INT, EVNT

DTCH EVNT

Attach Interrupt routine to event

Detach event

Communications Instructions

XMT

RCV

TBL, PORT

TBL, PORT

Freeport transmission

Freeport receive message

NETR TBL, PORT

NETW TBL, PORT

Network Read

Network Write

GPA

SPA

ADDR, PORT

ADDR, PORT

Get Port Address

Set Port Address

High-Speed Instructions

HDEF HSC, MODE Define High-Speed Counter mode

HSC

PLS

N

Q

Activate High-Speed Counter

Pulse Output

510

S7-200CN Products

In This Chapter

Certifications and Approvals for S7-200CN Products . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

S7-200CN Products . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

512

513

511

S7-200 Programmable Controller System Manual

Certifications and Approvals for S7-200CN Products

CE Labeling of S7-200CN Products

The S7-200CN products fulfill the requirements and protection guidelines of the following EU directives.

—

—

EC Directive 73/23/EEC “Low—voltage directive”

EC Directive 89/336/EEC “EMC directive”

After July 2009 the following applies:

—

EC Directive 2004/108/EC (EMC Directive) “Electromagnetic Compatibility”

Standards of S7-200CN Products

The S7-200CN products fulfill the requirement and criteria of IEC 61131—2, Programmable controllers — Equipment requirements. Check the markings on the actual S7-200CN product for the specific Agency approvals and Certifications.

512

S7-200CN Products

Appendix H

S7-200CN Products

A cross-reference of SIMATIC S7-200 products to S7-200CN products is shown in the following table. For wiring and performance specifications, refer to the cross-referenced SIMATIC S7-200 product in Appendix A. Check the markings on the actual S7-200CN product for the specific

Agency approvals and Certifications.

Table H-1 Cross Reference for SIMATIC S7-200 Products to S7-200CN Products

Model Name and Description S7-200 SIMATIC Product

CPU 222 DC/DC/DC, 8 Inputs/6 Outputs

CPU 222 AC/DC/Relay 8 Inputs/ 6 Relays

6ES7 212—1AB23—0XB0

6ES7 212—1BB23—0XB0

CPU 224 DC/DC/DC 14 Inputs/ 10 Outputs

CPU 224 AC/DC/Relay14 Inputs/ 10 Relays

CPU 224XP DC/DC/DC 14 Inputs/10 Outputs

CPU 224XPsi DC/DC/DC 14 Inputs/10 Outputs

CPU 224XP AC/DC/Relay 14 Inputs/10 Relays

CPU 226 DC/DC/DC 24 Inputs/16 Outputs

CPU 226 AC/DC/Relay 24 Inputs/16 Relays

EM 221 Digital Input 8 x 24 VDC

EM 221 Digital Input 16 x 24 VDC

EM 222 Digital Output 8 x 24 VDC

EM 222 Digital Output 8 x Relays

EM 223 24 VDC Digital Comb 4 Inputs/4 Outputs

EM 223 24 VDC Digital Comb 4 Inputs/4 Relay Outputs

EM 223 24 VDC Digital Comb 8 Inputs/8 Outputs

EM 223 24 VDC Digital Comb 8 Inputs/8 Relay Outputs

EM 223 24 VDC Digital Comb 16 Inputs/16 Outputs

EM 223 24 VDC Digital Comb 16 Inputs/16 Relay Outputs

EM 223 24 VDC Digital Comb 32 Inputs/32 Outputs

EM 223 24 VDC Digital Comb 32 Inputs/32 Relay Outputs

EM 231 Analog Input, 4 Inputs

EM 235 Analog Combination 4 Inputs/1 Output

EM 232 Analog Output, 2 Outputs

EM 231 Analog Input RTD, 2 Inputs

EM 231 Analog Input Thermocouple, 4 Inputs

6ES7 214—1AD23—0XB0

6ES7 214—1BD23—0XB0

6ES7 214—2AD23—0XB0

6ES7 214—2AS23—0XB0

6ES7 214—2BD23—0XB0

6ES7 216—2AD23—0XB0

6ES7 216—2BD23—0XB0

6ES7 221—1BF22—0XA0

6ES7 221—1BH22—0XA0

6ES7 222—1BF22—0XA0

6ES7 222—1HF22—0XA0

6ES7 223—1BF22—0XA0

6ES7 223—1HF22—0XA0

6ES7 223—1BH22—0XA0

6ES7 223—1PH22—0XA0

6ES7 223—1BL22—0XA0

6ES7 223—1PL22—0XA0

6ES7 223—1BM22—0XA0

6ES7 223—1PM22—0XA0

6ES7 231—0HC22—0XA0

6ES7 235—0KD22—0XA0

6ES7 232—0HB22—0XA0

6ES7 231—7PB22—0XA0

6ES7 231—7PD22—0XA0

S7-200CN Product

6ES7 212—1AB23—0XB8

6ES7 212—1BB23—0XB8

6ES7 214—1AD23—0XB8

6ES7 214—1BD23—0XB8

6ES7 214—2AD23—0XB8

6ES7 214—2AS23—0XB8

6ES7 214—2BD23—0XB8

6ES7 216—2AD23—0XB8

6ES7 216—2BD23—0XB8

6ES7 221—1BF22—0XA8

6ES7 221—1BH22—0XA8

6ES7 222—1BF22—0XA8

6ES7 222—1HF22—0XA8

6ES7 223—1BF22—0XA8

6ES7 223—1HF22—0XA8

6ES7 223—1BH22—0XA8

6ES7 223—1PH22—0XA8

6ES7 223—1BL22—0XA8

6ES7 223—1PL22—0XA8

6ES7 223—1BM22—0XA8

6ES7 223—1PM22—0XA8

6ES7 231—0HC22—0XA8

6ES7 235—0KD22—0XA8

6ES7 232—0HB22—0XA8

6ES7 231—7PB22—0XA8

6ES7 231—7PD22—0XA8

513

S7-200 Programmable Controller System Manual

514

Index

&, 34

*, 34

Symbols

A

AC installation guidelines, 21

AC outputs and relays, 22

ACCEL_TIME (Acceleration Time), EM 253 Position

Module, 256

Access restriction, 48

Accessing direct addressing, 27

S7—200 data, 27, 34 status chart, 63

Accumulators, 30

Add instruction, 140

Add to table instruction, 189 example, 189

Address assigning, 62

Modbus, 350 network, 211 setting remote, 213 symbolic, 62

Address switches, EM 277 PROFIBUS—DP, 439

Addressing accumulators, 30 analog inputs, 31 analog outputs, 32 bit memory, 28 byte:bit, 27 counter memory, 29 direct, 27 expansion I/O, 33 high—speed counters, 30 indirect (pointers), 34 local I/O, 33 local memory, 31 memory areas, 28–31 process—image input register, 28 process—image output register, 28

S7—200 memory, 27 sequence control relay (SCR) memory, 32 special memory (SM) bits, 31 timer memory, 29 variable memory, 28

AENO instruction, 75

Agency approvals, 392

AI.

See

Analog input (AI)

Alarm checking, PID loop, 151

Allocating memory, Data Log Wizard, 377

American Bureau of Shipping (ABS) Maritime

Agency, 393

Analog adjustment potentiometers, 50

SMB28 and SMB29, 486

Analog input (AI) addressing, 31 filtering, 45

Analog modules, 4

EM 231 analog input, 417

EM 231 RTD, 424

EM 231 thermocouple, 424

EM 232 analog output, 421

EM 235 analog input/output, 418

Analog output (AQ), addressing, 32

Analog outputs, configuring values, 43

AND instruction, 162 example, 163

AND load instruction, 75

AQ.

See

Analog output (AQ)

AS—i Wizard, 463

AS—interface modules, order numbers for manuals,

496

ASCII conversion instructions, 103

ASCII to hex instruction, 103 example, 106

Assigning addresses, 62 initial values, 62 interrupts to HSC, 126 network addresses, 211

Asynchronous updates, PWM instruction, 136

Attach interrupt instruction, 153

Auto—hysteresis, 385

Auto—Tune, PID, 382

Automatic mode, PID loop, 151

Avoiding, network conflicts, 236

B

Backlash, selecting work zone, 306

Battery cartridge, 465 order number, 496

Baud rates network, 221 optimal, 233 setting, 211 switch selections

Multi—Master cable, 9

PPI Multi—Master cable, 213, 225, 227, 231,

232

BCD to integer instruction, 100

Biasing network cable, 223

PID loop, 145, 147

Bit logic instructions coil instructions, 73 contact instructions, 70 logic stack instructions, 75 reset dominant bistable, 77 set/reset bistable, 77

Bit memory area (M), 28 saving on power loss, 39

Block diagram, EM 241 modem, 450

Block move byte instruction, 166

Block move double word instruction, 166

Block move instructions, example, 166

Block move word instruction, 166

Bookmarks, 244

515

S7-200 Programmable Controller System Manual

Boolean instructions coils, 73 contacts, 70 logic stack, 75 set/reset bistable, 77

Break detection, 90

Buffer consistency, PROFIBUS, 443

Building, network, 221

Bureau Veritas (BV) Maritime Agency, 393

Byte address format, 27

Byte and integer range, 27

Byte consistency, PROFIBUS, 443

Byte to integer instruction, 100

C

C memory, 29

Cables biasing, 223 configuring

Freeport, 231 remote modem, 230

I/O expansion, 466 network, 221, 222 order numbers, 496

RS—232/PPI Multi—Master, 467 selecting, 210 terminating, 223

USB/PPI Multi—Master, 467

Calculating power requirements, 473–475 token rotation time, 233

Calibration

EM 231, 416

EM 235, 416 inputs, 416

Call subroutine instruction, 204 example, 205

Callback, EM 241 Modem module, 312

Cartridges memory, 465 order numbers, 496

Changing current value in HSC, 131 high—speed counter direction, 130 preset value in HSC, 131

Character interrupt control, 92

Clear interrupt event instruction, 153

Clearance requirements, 16

Clock cartridge, 465 status bits, 482

Clock instructions read real—time clock, 78 read real—time clock extended, 79 set real—time clock, 78 set real—time clock extended, 79

Coil instructions no operation, 73 output, 73 output immediate, 73 reset, 73

516 reset immediate, 73 set, 73 set immediate, 73

Command Byte, EM 253 Position Module, 299

Communication

S7—200, 10 with MicroMaster drives, 332

Communication processors

CP 243—1 Ethernet module, 459

CP 243—1 IT Internet module, 461

CP 243—2 AS—Interface, 463

Communication protocol multi—point interface (MPI), 215, 235 point—to—point interface (PPI), 235

PROFIBUS, 235 selecting, 214 user—defined, 226

Communication requests, processing, 27

Communication settings, STEP 7—Micro/WIN, 10

Communications, 210 background time, 42 baud rate, 231, 232 conflicts, 236

Interface, selecting, 210

Modbus Master Protocol, 348

Modbus Slave Protocol, 349 modem, 231–232 protocols supported, 214 radio modem, 232–233

Communications cards, order numbers, 496

Communications instructions get port address, 95 network read, 81 network write, 81 receive, 86 set port address, 95 transmit, 86

Communications modules, order numbers, 496

Communications port connector pin assignments, 223

Freeport mode, 226 interrupts, 156

Communications processors.

See

CP cards

Communications protocol point—to—point interface (PPI), 214

PROFIBUS, 215

TCP/IP, 215

Communications queue, 157

Compare byte instruction, 96

Compare double word instruction, 96

Compare instructions, 59 compare byte, 96 compare double word, 96 compare integer, 96 compare real, 96 compare string, 98 example, 96

Compare integer instruction, 96

Compare real instruction, 96

Compare string instruction, 98

Comparing, token rotation times, 235

Compatibility

EM 231 RTD, 425

Index

EM 231 thermocouple, 425

EM 241 Modem, 451

EM 253 Position, 454

EM 277 PROFIBUS—DP, 439

Compile errors, 60

Compile rule violations, 480

Complex PPI network, 217

Concatenate string instruction, 184

Conditional end instruction, 167 example, 168

Conditional inputs, 59

Conditional return from interrupt instruction, 153

Conditional return from subroutine instruction, 204

Conditional sequence control relay end instruction,

172

Conditional transitions, example, 177

Configuration analog output values, 43

CP 243—1 Ethernet module, 459

CP 243—1 IT Internet module, 462 digital output states, 43

EM 231, 417

EM 231 RTD, 431

EM 231 thermocouple, 426

EM 235, 418

EM 253 Position Module, 291

EM 277 PROFIBUS—DP, 441–442 retentive ranges of memory, 43 symbol table for Modbus, 351

Configuration drawings, 53

Configuration table, EM 241 Modem module, 313,

325

Configuration/Profile table, EM 253 Position Module,

294

Configuring

FBD and LAD status display, 246

HyperTerminal, 239–483 network, 221 password, 49

PTO/PWM operation, 136

STL status display, 247

Conflicts, avoiding network, 236

Connecting

MM3 drive, 342

MM4 drive, 345 modem to S7—200, 231

Multi—Master cable, 9 network devices, 235 radio modem to S7—200, 232 with S7—200, 10

Connections

CP 243—1 Ethernet module, 459

CP 243—1 IT Internet module, 462

CP 243—2, 464

Connector pins, communications port assignments,

223

Connector terminals

CPU 221 AC/DC/Relay, 401

CPU 221 DC/DC/DC, 401

CPU 222 AC/DC/Relay, 402, 403

CPU 222 DC/DC/DC, 402, 403

CPU 224 AC/DC/Relay, 402, 403

CPU 224 DC/DC/DC, 402, 403

CPU 226 AC/DC/Relay, 404

CPU 226 DC/DC/DC, 404

EM 221 DI 8 x AC, 409

EM 221 DI 8×24 VDC, 409

EM 222 DO 8 x Relay, 409

EM 222 DO 8×24 VDC, 409

EM 223 4×24 VDC In/4×24 VDC Out, 408

EM 223 DI 16/DO 16 x DC 24V, 410

EM 223 DI 16/DO 16 x 24 VDC Relay, 410

EM 223 DI 32/DO 32x DC 24V, 411

EM 223 DI 32/DO 32 x 24 VDC Relay, 411

EM 223 DI 4/DO 4 x DC 24V/Relay, 408, 409

EM 223 DI 8/ DO 8 x 24 VDC/Relay, 410

EM 223 DI 8/DO 8 x 24 VDC, 410

EM 231 RTD, 425

EM 231 thermocouple, 425

Connectors, order numbers, 496

Constant values, 33

Contact instructions, 70 example, 72

Control byte, setting for HSC, 124

Control logic, 24

Conventions program editors, 58

S7—200 programming, 59

Convergence control example, 176 sequence control relay instructions, 175

Conversion instructions

ASCII, 103

ASCII to hex, 103 decode, 112 encode, 112 example, 101 hex to ASCII, 103 round, 101 segment, 102 standard, 99 string, 107, 110 truncate, 101

Convert double integer to string instruction, 107, 110

Convert integer to string instruction, 107, 110

Convert real to string instruction, 107, 110

Convert substring to double integer instruction, 107,

110

Convert substring to integer instruction, 107, 110

Convert substring to real instruction, 107, 110

Converting loop inputs, 148 loop outputs to scaled integer, 149

Copy string instruction, 184

Copy substring from string instruction, 186

Cosine instruction, 143

Count down counter instruction, 113 example, 115

Count up counter instruction, 113

Count up/down counter instruction, 114 example, 115

Counter instructions high—speed counter (HSC), 118 high—speed counter definition (HDEF), 118

517

S7-200 Programmable Controller System Manual

IEC down counter, 116 up counter, 116 up/down counter, 116

SIMATIC count down counter, 113 count up counter, 113 count up/down counter, 114

Counter memory area (C), 29

Counters, high—speed, 50

Country codes, supported by EM 241, 308

CP 243—1 Ethernet module communication processors, 459 configuration, 459 connections, 459 functions, 459 number of connections, 215 order number, 458 specifications, 458 wizard, 459

CP 243—1 IT Internet module communication processors, 461 configuration, 462 connections, 462 functions, 461

Internet wizard, 462 number of connections, 215 order number, 461 specifications, 461

CP 243—2 AS—I Interface, specifications, 463

CP 243—2 AS—Interface Module features, 463 order number, 463

CP 243—2 communications processor connections, 464 functions, 464 operation, 464 wizard, 463

CP Cards, supported by STEP 7 Micro/WIN, 225

CP cards order numbers, 496 selecting, 224

CP5411, 496

CP5512, 496

CP5611, 496

CPU backup, 2 comm ports, 2 digital I/O, 2 dimensions, 2 error handling, 60 execution speed, 2 expansion modules, 2

ID register (SMB6), 484 input simulators, 471 memory, 2 number of connections, 214 password protection, 48 power requirements, 17, 473 real—time clock, 2 scan cycle, 24 screw sizes for installation, 18 searching for on network, 213

518

CPU 224, sample DP program, 448

CPU Data Transfer Message Format, EM 241

Modem module, 329

CPU events, history log, 47

CPU modules features, 68 input specifications, 398 installing, 18 memory ranges, 68, 507 order numbers, 396, 495 output specifications, 399 power specifications, 398 removing, 19 self—test diagnostics, 27 specifications, 396, 397 wiring diagrams, 401–403

CPUs, supporting intelligent modules, 323

CRC table

Modbus Master Protocol, 349

Modbus Slave Protocol, 349

Creating configuration drawings, 53 program, 10 program with Micro/WIN, 55 symbolic name list, 53 user—defined protocols, 226

Cross reference table, 244

Current value changing in HSC, 131 setting for HSC, 126

Cycle time (PTO function), 133

D

Data receiving, 87, 92 saving and restoring, 36 transmitting, 87

Data block, 54

Data block editor assigning addresses, 62 assigning initial values, 62

Data consistency, PROFIBUS, 443

Data exchange mode, EM 277 PROFIBUS—DP, 443

Data Log Wizard allocating memory, 377 application example, 374

DATx_WRITE subroutine, 379 downloading the project, 378 overview, 374

S7—200 cpus that support, 374

S7—200 Explorer, 378 terminology, 374 using the, 375

Data transfers, EM 241 Modem module, 311

Data types, subroutine parameters, 205

Date, setting, 78

DATx_WRITE, Data Log subroutine, 379

DC installation guidelines, 21

DC outputs and relays, 22

DC transistor, protecting, 22

Index

Debugging editing in RUN mode, 244 features, 244 forcing values, 248 multiple scans, 248

DECEL_TIME (Deceleration Time), EM 253 Position

Module, 256

Decode instruction, 112 example, 112

Decrement instruction, 144 example, 144

Designing

Micro PLC system, 52 safety circuits, 52

Det Norske Veritas (DNV) Maritime Agency, 393

Detach interrupt instruction, 153

Deviation, 385

Device database file (GSD), EM 277

PROFIBUS—DP, 446–447

Diagnostic LED, 47

Diagnostics, CPU self—test, 27

Diagnostics information, EM 253 Position Module,

291

Differential term, PID algorithm, 148

Digital expansion module, addressing, 33

Digital input circuit, 46

Digital inputs filtering, 44 pulse catch, 44 reading, 41 writing to, 27

Digital outputs, configuring states, 43

Dimensions, CPU, 2

DIN rail mounting, 18

Diode suppression, 22

DIP switch settings, PPI Multi—Master cable, 9

DIP switch settings, PPI Multi—Master cable, 227

DIP switches

RS—232/PPI Multi—Master Cable, 469

RTD, 431–432 thermocouple, 427

Direction, changing in HSC, 130

Disable interrupt instruction, 153

Disabling, high—speed counters, 131

Discrete modules, 4

Display panels, Text Display, 6

Displaying program elements, 55 program status, 246

Divergence control example, 175 sequence control relay instructions, 175

Divide instruction, 140

Divide integer with remainder instruction (DIV), 142 example, 142

Double integer to ASCII instruction, 104

Double integer to integer instruction, 100

Double integer to real instruction, 100

Down counter instruction, 116

Downloading data log configurations, 37 program, 14, 37 recipes, 37

Drawings, creating configuration, 53

Drive communication, calculating time requirement,

332

Drives.

See

MicroMaster drives

Dumb terminal, configuring the RS—232/PPI

Multi—Master cable, 239–483

E

Editing, in RUN mode, 244

Editors

Function Block Diagram (FBD), 56

Ladder Logic (LAD), 56

Statement List (STL), 55

EEPROM error codes, 478 saving bit memory (M), 39 saving variable memory (V), 39, 487

Electric service life, 393

Electromagnetic compatibility, S7—200, 394 emission standards, 394 immunity standards, 394

EM 231 analog input module accuracy and repeatablity, 422 calibration, 416 input block diagram, 419 input data word format, 419 installation, 422 specifications, 423

EM 231 RTD module configuring, 431 connector terminals, 425

CPU compatibility, 425 selecting DIP switches, 431–432 specifications, 424 status indicators, 434 temperature ranges and accuracy, 435–436

EM 231 thermocouple module basics, 426 configuring, 426 connector terminals, 425

CPU compatibility, 425 selecting DIP switches, 427 specifications, 424 status indicators, 428 temperature ranges and accuracy, 429–430

EM 232 analog output module output block diagram, 421 output data word format, 420

EM 235 analog input/output module accuracy and repeatablity, 422 calibration, 416 configuration, 418 input block diagram, 420 input data word format, 419 installation, 422 output block diagram, 421 output data word format, 420 specifications, 423

EM 241 Modem Module block diagram, 450

519

S7-200 Programmable Controller System Manual configuration table, 313, 325 countries supported, 308

CPU compatibility, 451

CPU Data Transfer Message Format, 329

Data transfers, 311 errors from instructions, 321 example, 323 features, 308 installing, 451 instructions, 318

International telephone line interface, 308

Messaging Telephone Number, 327

MOD_XFR instruction, 319

Modbus addresses, 310

Modbus RTU protocol, 309

Modem Expansion wizard, 314

MODx_CTRL instruction, 319

MODx_MSG instruction, 320 numeric paging, 310 paging, 310 password protection, 311

RJ11 jack, 308 security callback, 312

Short Message Service (SMS), 310 special memory locations, 323 specifications, 450 status LEDs, 314

STEP 7—Micro/WIN Interface, 309 text paging, 310

EM 253 Control Panel, 290–292

EM 253 Position Module

ACCEL_TIME, 256 command byte, 299 configuration, 291

Configuration/Profile table, 294 configuring, 267

CPU compatibility, 454 creating instructions, 302

DECEL_TIME, 256 diagnostics information, 291 displaying and controlling operation, 290 eliminating backlash, 306

EM 253 Control Panel, 290–292 error codes, 292

Features, 265 inputs and outputs, 265 instruction error codes, 292 instruction guidelines, 273 instructions, 273 module error codes, 293 motion commands, 300

Position Control wizard, 267

POSx_CFG, 284

POSx_CLR, 283

POSx_CTRL, 274

POSx_DIS, 282

POSx_GOTO, 276

POSx_LDOFF, 279

POSx_LDPOS, 280

POSx_MAN, 275

POSx_RSEEK, 278

POSx_RUN, 277

POSx_SRATE, 281

520 programming, 266

RP seek modes, 303–307 sample program to control module, 302 examples, 285–289 special memory, 298 wiring diagram, 456–457

EM 277 PROFIBUS—DP module additional features, 445 address switches, 439 as DP slave, 440 configuration file, 446–447 configuration options, 442 configuring, 441–442

CPU compatibility, 439 data exchange mode, 443

DP protocol, 440

LED status indicators, 445 number of connections, 214 on PROFIBUS network, 441 special memory bytes, 444 specifications, 438 status LEDs, 439

Embeded variables, in text and SMS messages, 311

EN, 59, 67

Enable in (EN), 59

Enable interrupt instruction, 153

Enable out (ENO), 59

Encode instruction, 112 example, 112

End character detection, 91

End instruction, 167

ENO, 59, 67

Entering, instruction, 12

Environmental specifications operating, 394 transport and storage, 394

Equipment requirements, 5

Error codes, 478 compile rule violations, 480

EM 253 Position module, 292 fatal errors, 478 instructions for EM 253 Position Module, 292 module errors for EM 253 Position Module, 293

PTO instructions, 264

PWMxRUN instruction, 254 run—time programming problems, 479

USS protocol instructions, 342

Errors

EM 241 Modem module configuration, 313

EM 241 Modem module instructions, 321 fatal, 61 handling, 60

I/O, 60

Modbus Slave Protocol execution, 354 network read and write instructions, 82 non—fatal, 60

PID auto—tune, 387

PID loop, 151 program compile, 60 program execution, 61 run—time, 60

SMB1, execution errors, 482 viewing, 60

Index

Ethernet, 214

TCP/IP, 215

Ethernet Module, wizard, 459

Ethernet network, CP 243—1, 219

Examples add to table instruction, 189

AND instruction, 163

ASCII to hex instruction, 106 block move instruction, 166 calculating power requirements, 473 compare instructions, 96 conditional end instruction, 168 conditional transitions, 177 contact instructions, 72 convergence of control streams, 176 count down counter instruction, 115 count up/down counter instruction, 115 decode instructions, 112 decrement instruction, 144

DIV instruction, 142 divergence of control streams, 175

EM 241 Modem module, 323 encode instructions, 112 first—in—first—out instruction, 190 for—next loop instructions, 170

Freeport mode, 226 high—speed counter instructions, 132 high—speed counter modes, 121

IEC counter instructions, 116

IEC timers, 201 increment instruction, 144 integer math instructions, 141 integer to ASCII instruction, 106 interrupt instructions, 159 interrupt routines, 53 invert instructions, 161 jump to label instruction, 171 last—in—first—out instruction, 191 logic stack instructions, 76 memory fill instruction, 192

Modbus Slave Protocol, programming, 355, 361 move instructions, 183

MUL instruction, 142 network read/write instructions, 84 off—delay timer instruction, 199 on—delay timer instruction, 198

OR instruction, 163

Position module, 285–289 real math instructions, 141 real to ASCII instruction, 106 receive instructions, 93 reset instruction, 73 retentive on—delay timer instruction, 200 return from subroutine instructions, 207 rotate instructions, 180 segment instruction, 102 sequence control relay instructions, 172 set instruction, 73 shift instructions, 180 shift register bit instruction, 182

SIMATIC counters, 115

SIMATIC timers, 198, 199, 200 standard conversion instructions, 101 stop instruction, 168 subroutine, 53 subroutine call, 205 subroutine instructions, 207 swap instructions, 183 table find instruction, 195 timed interrupt routine, 159 token—passing network, 234 transmit instructions, 93

USS protocol program, 341 watchdog reset instruction, 168

XOR instruction, 163

Exception conditions, PID auto—tune, 387

Exclusive OR instruction, 162 example, 163

Executing control logic, 24 instructions, 25

Execution error codes, USS protocol instructions,

342

Execution errors, 61

Execution status, 42

Execution times, STL instructions, 499

Expansion cable, 466

Expansion I/O, 33 bus errors (SMW98), 491

Expansion modules, 4 addressing I/O points, 33 analog input specifications, 412 order numbers, 412, 424 output specifications, 413 specifications, 412 digital, order numbers, 405 dimensions, 18 discrete general specifications, 405 input specifications, 406 output specifications, 407 wiring diagrams, 408–410

ID and error register, 485 installing, 18 order numbers, 495 power requirements, 17, 473 removing, 19

F

Faceplate Overlays, blank, Text displays, 497

Fan Out Connector, order number, 497

Fatal errors, 61 viewing, 478

FBD editor conventions, 58 description, 56 features, 56

Features

CPU modules, 68

EM 241 Modem module, 308

EM 253 Position Module, 265

Fill instruction, 192

521

S7-200 Programmable Controller System Manual

Filtering analog inputs, 45 digital inputs, 44

Find first character within string instruction, 187

Find instruction, 193

Find string within string instruction, 187

First—in—first—out instruction, 190 example, 190

Floating point values, 32, 149

For—next loop instructions example, 170 for, 169 next, 169

Forcing values, 247, 248

Forward—acting loops, 150

Freeport, configuring, PPI Multi—Master cable, 231

Freeport communication, 483

SMB30 and SMB130, 486

Freeport control registers (SMB30 and SMB130),

486

Freeport mode changing from PPI, 87 character interrupt control, 92 definition, 156 enabling, 86 example, 226 parity error (SMB3), 483 receive character (SMB2), 483

RS—232 standard, 227 transmit and receive instructions, 86 user—defined protocols, 226

Function Block Diagram.

See

FBD editor

Functions, Modbus, 351, 352

G

Gap update factor (GUF), 233

Germanisher Lloyd (GL) Maritime Agency, 393

Get port address instruction, 95

Global variable table, 62

Grounding, 20, 21

GSD file, EM 277 PROFIBUS—DP, 446–447

Guidelines designing a Micro PLC system, 52 grounding and circuit, 20 grounding and wiring, 21 high—vibration environment, 19

Inductive loads, 22 installation, 16 instructions for EM 253 Position Module, 273 interrupt routines, 54, 155 lamp loads, 22 modifying pointers for indirect addressing, 35 network configuration, 221 subroutines, 54 suppression circuits, 22 vertical installation, 19 wiring, 20

H

Handling complex communications, 236 errors, 60

Hardware, troubleshooting, 249

Hex to ASCII instruction, 103

High potential isolation test, 394

High—speed counter (HSC) instruction, 118 example, 132

High—speed counter definition (HDEF) instruction,

118

High—speed counters, 50 assigning interrupts, 126 changing current value, 131 changing direction, 130 changing preset value, 131 control byte, 119 defining modes and inputs, 120 disabling, 131 initialization sequence, 127 interrupts, 120 memory area, addressing, 30 modes, 121, 508 programming, 119 reset and start operations, 123 selecting active state, 124 setting control byte, 124 setting current and preset values, 126

SMB36—SMB65, 487 status byte, 126 timing diagrams, 121–123 understanding, 119

High—speed pulse output operation, 133

SMB66—SMB85, 489

High—speed pulse outputs, 50

Highest station address (HSA), 233

History log , CPU events, 47

HMI devices, 225

Holding Registers, MBUS_MSG, 358

HSC, 50

Instruction wizard, 119

HSC0, HSC1, HSC2 register (SMB36 to SMB65),

487

HSC3, HSC4, HSC5 register (SMB131 to SMB165),

491

Human Machine Interfaces, order number, 497

HyperTerminal, configuring RS—232/PPI

Multi—Master cable, 239–483

I

I memory, 28

I/O, reading and writing, 41

I/O addressing, 33

I/O errors, 60

I/O expansion cable, installation, 466

522

Index

I/O interrupt queue, 157

I/O interrupts, 156

I/O module identification and error register, 485

I/O status (SMB5), 484

Idle line detection, 89

IEC 1131—3 instruction set, 57

IEC counter instructions down counter, 116 example, 116 up counter, 116 up/down counter, 116

IEC timer instructions, 201 example, 201

Immediate contact instruction, 70

Increase program memory, disable run mode edit, 47

Increment instruction, 144 example, 144

Incrementing pointers, 35

Indirect addressing, 34

& and *, 34 modifying pointers, 35

Inductive Loads, 22

Initial values, assigning, 62

Initializing high—speed counters, 127

Modbus Protocol, 349

Input block diagram

EM 231, 419

EM 235, 420

Input data word format

EM 231, 419

EM 235, 419

Input image register, 25

Input simulators, 471

Input specifications analog expansion module, 412

CPU modules, 398 discrete expansion module, 406

Inputs, 24, 25 calibration, 416 conditional/unconditional, 59

CPU module, 401 discrete expansion module, 406

EM 253 Position Module, 265 filtering analog, 45 filtering digital, 44 high—speed counters, 120 start and reset (HSC), 123

Installation clearance requirements, 16

CPU module, 18 electrical noise, 16

EM 231, 422

EM 235, 422 expansion module, 18 guidelines, 16 heat—generating devices, 16 high voltage devices, 16

I/O expansion cable, 466 mounting requirements, 18 power supply, 17

S7—200, 17

STEP 7—Micro/WIN, 5

Instruction, entering, 12

Instruction error codes, EM 253 Position Module,

292

Instruction Libraries, 64

Instruction sets

IEC 1131—3, 57 selecting, 57

SIMATIC, 57

Instruction tree, 11, 55

Instruction Wizard

HSC, 119

NETR, NETW, 81

Instructions add, 140 add to table, 189

AENO, 75

AND, 162

AND load, 75

ASCII to hex, 103 attach interrupt, 153

BCD to integer, 100 bit logic, 70 block move byte, 166 block move double word, 166 block move word, 166 byte to integer, 100 call subroutine, 204 clear interrupt event, 153 compare, 59 concatenate string, 184 conditional end, 167 conditional return from interrupt, 153 conditional return from subroutine, 204 conditional sequence control relay end, 172 convert double integer to string, 107, 110 convert integer to string, 107, 110 convert real to string, 107, 110 convert substring to double integer, 107, 110 convert substring to integer, 107, 110 convert substring to real, 107, 110 copy string, 184 copy substring from string, 186 cosine, 143 count down counter, 113 count up counter, 113 count up/down counter, 114 creating motion, 302 decode, 112 decrement, 144 detach interrupt, 153 disable interrupt, 153 divide, 140 divide integer with remainder (DIV), 142 double integer to ASCII, 104 double integer to integer, 100 double integer to real, 100 down counter, 116

EM 241 Modem module, 318

EM 253 Position Module, 273 enable interrupt, 153 encode, 112

End, 167 exclusive OR, 162

523

S7-200 Programmable Controller System Manual

524 executing, 25 find first character within string, 187 find string within string, 187 first—in—first—out, 190 for, 169 get port address, 95 hex to ASCII, 103 high—speed counter (HSC), 118 high—speed counter definition (HDEF), 118 high—speed pulse output (PLS), 133 immediate contact, 70 increment, 144 integer to ASCII, 103 integer to BCD, 100 integer to byte, 100 integer to double integer, 100 interrupt, 153–159 invert byte, 161 invert double word, 161 invert word, 161 jump to label, 171 label, 171 last—in—first—out, 190 load sequence control relay, 172 load stack, 75 logic pop, 75 logic push, 75 logic read, 75 loop control (PID), 145

MBUS_CTRL, 356

MBUS_INIT, 353

MBUS_SLAVE, 354 memory fill, 192

Modbus Slave Protocol, 351, 352

MODx_CTRL, 319

MODx_MSG, 320

MODx_XFR, 319 move byte, 164 move byte immediate read, 165 move byte immediate write, 165 move double word, 164 move real, 164 move word, 164 multiply, 140 multiply integer to double integer (MUL), 142 natural exponential, 143 natural logarithm, 143 negative transition, 70 network read, 81 network write, 81 next, 169 no operation, 73

NOT, 70 off—delay timer (TOF), 196, 201 on—delay timer (TON), 196, 201

OR, 162

OR load, 75 output, 73 output immediate, 73

PID loop, 145 positive transition, 70

POSx_CFG, 284

POSx_CLR, 283

POSx_CTRL, 274

POSx_DIS, 282

POSx_GOTO, 276

POSx_LDOFF, 279

POSx_LDPOS, 280

POSx_MAN, 275

POSx_RSEEK, 278

POSx_RUN, 277

POSx_SRATE, 281

PTOx_ADV, 264

PTOx_CTRL, 260

PTOx_LDPOS, 263

PTOx_MAN, 262

PTOx_RUN, 261 pulse output (PLS), 133 pulse timer (TP), 201 pulse train output (PTO), 133 pulse width modulation (PWM), 133

PWMx_RUN, 254 read real—time clock, 78 read real—time clock extended, 79 real to ASCII, 105 real—time clock, 78 receive, 86 reset, 73 reset dominant bistable, 77 reset immediate, 73 retentive on—delay timer (TONR), 196 return from interrupt, 153 return from subroutine, 204 rotate left byte, 179 rotate left double word, 179 rotate left word, 179 rotate right byte, 179 rotate right double word, 179 rotate right word, 179 round, 101 segment, 102 sequence control relay end, 172 sequence control relay transition, 172 set, 73 set dominant bistable, 77 set immediate, 73 set port address, 95 set real—time clock, 78 set real—time clock extended, 79 shift left byte, 179 shift left double word, 179 shift left word, 179 shift register bit, 181 shift right byte, 179 shift right double word, 179 shift right word, 179 sine, 143 square root, 143 standard contact, 70 stop, 167 string length, 184 subtract, 140 swap bytes, 183 table, 190–195 table find, 193 tangent, 143

transmit, 86 truncate, 101 up counter, 116 up/down counter, 116

USS protocol, 333 watchdog reset, 167 without outputs, 59

Instructions, quick reference guide, 509

Integer math instructions, example, 141

Integer to ASCII instruction, 103 example, 106

Integer to BCD instruction, 100

Integer to byte instruction, 100

Integer to double integer instruction, 100

Integral term, PID algorithm, 147

Intelligent modules, 4

CPUs that support, 323 status (SMB200 to SMB549), 493

Intercharacter timer, 91

Interface, selecting communications, 210

International standards, 392

Internet Devices, CP 243—1 IT, 219

Internet module, wizard, 462

Interrupt events priority, 158 quick reference, 506 types, 154

Interrupt instructions attach interrupt, 153 clear interrupt event , 153 conditional return from interrupt, 153 detach interrupt, 153 disable interrupt, 153 enable interrupt, 153 example, 159

Interrupt routines, 25, 42 calling subroutines from, 156 communication port, 156 example, 53 guidelines, 54, 155

I/O, 156 priority, 157 queues, 157 rising/falling edge, 156 sharing data with main program, 155 system support, 155 time—based, 156 types supported by S7—200, 156 understanding, 155

Interrupts assigning to HSC, 126 high—speed counters, 120

Invert byte instruction, 161

Invert double word instruction, 161

Invert instructions, example, 161

Invert word instruction, 161

Isolation, network, 221

J

Jump instructions jump to label, 171

Index

label, 171

Jump to label instruction, 171 example, 171

L

L memory, 31

Label instruction, 171

LAD editor conventions, 58 description, 56 features, 56

Ladder Logic.

See

LAD editor

Lamp loads, guidelines, 22

Last—in—first—out instruction, 190 example, 191

LEDs diagnostic, 47

EM 241 Modem module, 314

Libraries, Instruction, 64

Lloyds Register of Shipping (LRS) Maritime Agency,

393

Load sequence control relay instruction, 172

Load stack instruction, 75

Loading new current value in HSC, 131 new preset value in HSC, 131

Local I/O, 33

Local memory area (L), 31

Local variable table, 55, 63

Logic pop instruction, 75

Logic push instruction, 75

Logic read instruction, 75

Logic stack instructions

AENO, 75

AND load, 75 example, 76 load stack, 75 logic pop, 75 logic push, 75 logic read, 75

OR load, 75

Logic, control, 24

Logical connections

MPI, 215

PPI, 214

Logical operations instructions

AND, OR, XOR, 162 invert, 161

Loop control

(PID) instructions, 145–156 adjusting bias, 150 converting inputs, 148 converting outputs, 149 error conditions, 151 forward/reverse, 150 modes, 151 ranges/variables, 150 selecting type, 148

Loop inputs converting, 148 normalizing, 148

525

S7-200 Programmable Controller System Manual

Loop outputs, converting to scaled integer, 149

Loop table, 152

PID, 382

Lost password, 49

M

M memory, 28

Manual mode, PID loop, 151

Manuals, order numbers, 496

Mapping address to S7—200, Modbus, 350

Maritime Agency approvals, 393

Master devices, 211

Math instructions add, 140 decrement, 144 divide, 140 divide integer with remainder (DIV), 142 increment, 144 multiply, 140 multiply integer to double integer (MUL), 142 subtract, 140

Maximum and start/stop speeds, position control wizard, 255

Maximum character count, 92

MBUS_CTRL instruction, 356

MBUS_INIT instruction, 353

MBUS_MSG, Holding registers, 358

MBUS_SLAVE instruction, 354

Memory accessing, 27

CPU, 2 retentive, 43

Memory areas clearing, 49 operand ranges, 69

Memory Cartridge, restoring program from, 38

Memory cartridge, 36, 465 electrostatic discharge, 36 error codes, 478 storing program, 38

Memory cartridges, order numbers, 496

Memory fill instruction, 192 example, 192

Memory functions block move instructions, 166 move instructions, 164 rotate instructions, 179 shift instructions, 179 shift register bit instruction, 181 swap instructions, 183

Memory ranges

CPU modules, 68 quick reference, 507

Memory retention, 36–39 ranges, 43

Message timer, 91

Messages, token—passing network, 234

Messaging Telephone Number Format, EM 241

Modem module, 327

Micro PLC system, designing, 52

MicroMaster drive communication, 332 connecting, 342 controlling, 331 reading and writing, 338, 339

MM3 drive connecting, 342 setup, 343

MM4 drive connecting, 345 setup, 346

Modbus Master MBUS_MSG, execution error codes,

359

Modbus Master, special memory, 348

Modbus Master Protocol

CRC table, 349 execution error codes, 357 execution time, 349 functions supported, 351 initialization, 349 resources used, 348

Modbus Protocol Library, 347

Modbus RTU Protocol, 351, 352

EM 241 Modem module, 309 functions supported by Modem module, 309 mapping addresses, 310

Modbus Slave Protocol addresses, 350 configuring symbol table, 351

CRC table, 349 example of programming, 355, 361 execution error codes, 354 execution time, 349 functions supported, 352 initialization, 349 instructions, 351, 352 mapping aadresses to S7—200, 350

MBUS_INIT, 353

MBUS_SLAVE, 354, 356 resources used, 349 special memory, 349

Mode switch, 40

Modem remote, PPI Multi—Master cable, 230 with PPI Multi—Master cable, 231

Modem Expansion Wizard, EM 241 Modem module,

314

Modem Expansion wizard, 230

Modem module configuration table, 313

CPU Data Transfer Message Format, 329 data transfers, 311 errors from instructions, 321 example, 323 features, 308 instructions, 318

International telephone line interface, 308

Messaging Telephone Number, 327

Modem Expansion wizard, 314

MODx_CTRL instruction, 319

MODx_MSG instruction, 320

MODx_XFR instruction, 319

526

Index

numeric paging, 310 paging, 310 password protection, 311

RJ11 jack, 308 security callback, 312

Short Message Service, 310

SMS messaging, 310 status LEDs, 314

Text Message Format, 328 text paging, 310

Modem module, 450

Modes high—speed counters, 120

PID loop, 151

Modifying, pointers, 35

Module error codes, EM 253 Position Module, 293

MODx_CTRL instruction, EM 241 Modem module,

319

MODx_XFR instruction, EM 241 Modem module,

319

MODx_MSG instruction, EM 241 Modem module,

320

Monitoring, 14 process variables, 63 program status, 246 variables with status chart, 247

Motion commands, EM 253 Position Module, 300

Mode of operation, motion profile, 257

Motion profile creating steps, 258 defining, 257 position module, 257

Mounting clearance requirements, 18 dimensions, 18

DIN rail, 18 panel, 18

Move byte immediate read instruction, 165

Move byte immediate write instruction, 165

Move byte instruction, 164

Move double word instruction, 164

Move instructions, example, 183

Move real instruction, 164

Move word instruction, 164

MPI network greater than 187.5 Kbaud, 218 less than 187.5 Kbaud, 217

MPI protocol, 215, 235

Multi—Master cable, 9

Multi—master PPI network, 216

Multiply instruction, 140

Multiply integer to double integer instruction (MUL),

142 example, 142

N

National standards, 392

Natural exponential instruction, 143

Natural logarithm instruction, 143

Navigation bar, 55

Negative transition instruction, 70, 71

Nesting, subroutines, 204

NETR, NETW, Instruction Wizard, 81

Network addresses, 211 baud rate, 221 biasing cable, 223 building, 221 cable, 221, 222 calculating distances, 221 communications port, 223 communications setup, 210–433 complex, 236 complex PPI, 217 components, 221–224 configuration guidelines, 221

CP card, 224 device addresses, 214 gap update factor (GUF), 233 highest station address (HSA), 233

HMI devices, 225 isolation, 221 master devices, 211 modem, 231

MPI, greater than 187.5 Kbaud, 218

MPI, less than 187.5 Kbaud, 217 multi—master PPI, 216 optimizing performance, 233

PPI Multi—Master cable, 224

PROFIBUS, 211

PROFIBUS—DP, 218 radio modem, 232 repeaters, 222 sample configurations, 216, 217, 218 searching for CPU, 213 single—master PPI, 216 slave devices, 211 terminating cable, 223 token rotation time, 233 transmission rate, 221

Network connectors, order numbers, 497

Network read instruction, 81, 82 error codes, 82 example, 84

Network write instruction, 81, 82 error codes, 82 example, 84

Next instruction, 169 example, 170

Nippon Kaiji Kyokai (NK) Maritime Agency, 393

No operation instruction, 73

Noise rejection, input filter, 44

Non—fatal errors, 60

Normalizing, loop inputs, 148

NOT instruction, 70

Null modem adapter, 231

Number, representation, 32

Numbers, representation, 27, 33

Numeric instructions cosine, 143 natural exponential, 143 natural logarithm, 143 sine, 143 square root, 143

527

S7-200 Programmable Controller System Manual tangent, 143

Numeric paging, EM 241 Modem module, 310

O

Off—delay timer instruction (TOF), 196, 201 example, 199

On—delay timer instruction (TON), 196, 201 example, 198

OP73, order number, 497

Open Loop Control, 252

Open loop position control, using steppers or servos,

255

Open Type Controllers, installing, 16

Opening, program editor, 11

Operand ranges, 69

Operation modes, CPU changing, 40

Freeport protocol, 226 status bits, 482

Operator stations, specifying, 52

Optimizing, network performance, 233

OR instruction, 162 example, 163

OR load instruction, 75

Order, of interrupt events, 158

Order numbers, 495–938

CP 243—2 AS—Interface Module, 463

CPU modules, 396 digital expansion module, 405 analog expansion module, 412, 424 input simulators, 471

PPI Multi—Master cables, 467

Output block diagram

EM 232, 421

EM 235, 421

Output data word format

EM 232, 420

EM 235, 420

Output image register, 24

Output immediate instruction, 73

Output instruction, 73

Output specifications analog expansion module, 413

CPU modules, 399 discrete expansion module, 407

Outputs, 24

CPU module, 401 discrete expansion module, 408

EM 253 Position Module, 265 instructions without, 59

Outputs and relays, 22

Outputs, analog, configuring values, 43

Outputs, Digital, configuring states, 43

Overview, open loop control, 252

P

Paging, Modem module, 310

Panel mounting, 18

Parameters in subroutines, 205 types for subroutines, 205

Parity errors

SMB3, 483

SMB30 and SMB130, 92

Password clearing, 49 configuring, 49

CPU functions, 48 recovering lost, 49 restricting access, 49

Password protection, EM 241 Modem module, 311

Peer—to—peer communications, 217–218

Performance, optimizing network, 233

Permanent Memory, copying V memory, 39

Permanent memory, 36, 39

Permanent program storage, 39

PID , loop table, expanded, 382

PID Auto—Tune auto—hysteresis, 385 deviation, 385 error conditions, 387 exception conditions, 387 prerequisites, 385

PV out of range, 387 sequence, 386 understanding, 382

PID Tuning Control Panel, 388

PID loop instruction, 145 alarm checking, 151 automatic mode, 151 converting loop inputs, 148 converting loop outputs to scaled integer, 149 derivative term, 148 error conditions, 151 forward—acting, 150 integral term, 147 loop control, 148 loop control types, 148 loop table, 152 manual mode, 151 modes, 151 normalizing loop inputs, 148 proportional term, 147 ranges, 150 reverse—acting, 150 understanding, 146 variables, 150 wizard, 145

Pin assignment, communications port, 223

Pipelining, PTO pulses, 134

PLC Information dialog box, 60

Pointers, indirect addressing, 34

Port, settings, PPI Multi—Master cables, 220

Position Control Wizard, 267

PTOx_ADV, 264

PTOx_CTRL, 260

PTOx_LDPOS, 263

PTOx_MAN, 262

PTOx_RUN, 261

Position Control wizard, 133

528

Index

Position module

ACCEL_TIME, 256 configuration, 291

Configuration/Profile table, 294 configuring, 267 configuring motion profiles, 257 creating instructions, 302

DECEL_TIME, 256 diagnostics information, 291 displaying and controlling operation, 290 eliminating backlash, 306

EM 253 Control Panel, 290–292 error codes, 292

Features, 265 inputs and outputs, 265 instruction error codes, 292 instruction guidelines, 273 instructions, 273 module error codes, 293 motion commands, 300

Position Control wizard, 267

POSx_CFG, 284

POSx_CLR, 283

POSx_CTRL, 274

POSx_DIS, 282

POSx_GOTO, 276

POSx_LDOFF, 279

POSx_LDPOS, 280

POSx_MAN, 275

POSx_RSEEK, 278

POSx_RUN, 277

POSx_SRATE, 281 programming, 266

RP seek modes, 303–307 sample program to control, 302 special memory, 298

Positive transition instruction, 70, 71

POSx_CFG, 284

POSx_CLR, 283

POSx_CTRL, 274

POSx_DIS, 282

POSx_GOTO, 276

POSx_LDOFF, 279

POSx_LDPOS, 280

POSx_MAN, 275

POSx_RSEEK, 278

POSx_RUN, 277

POSx_SRATE, 281

Potientiometers, analog adjustment, 50

Power flow, subroutine parameter, 205

Power loss, retentive memory, 39, 43

Power requirements, 17 calculating, 473, 475

CPU, 473 expansion module, 473 sample, 474 table for calculating, 475

Power specifications, CPU modules, 398

Power supply, 8, 17

PPI communications, changing to Freeport mode, 87

PPI mode, radio modem, 232

PPI Multi—Master cable, 5 baud rate switch selections, 231 radio modem, 232 configuring, 230 configuring for Freeport, 231

Freeport mode, 227

RS—232 standard, 227 selecting, 210, 224 with modem, 231 with radio modem, 232

PPI protocol, 214, 235 complex network, 217 multi—master network, 216 single—master network, 216

PPI/Freeport mode, radio modem, 232

Preset value changing in HSC, 131 setting for HSC, 126

Priority interrupt events, 158 interrupt routines, 157

Process image register, 41

Process—image input register (I), 28

Process—image output register (Q), 28

Processing, communication requests, 27

PROFIBUS, master and slave devices on, 211

PROFIBUS protocol, 215, 235

PROFIBUS—DP data consistency, 443 module (EM 277), 441 sample program, 448 standard communications, 440

PROFIBUS—DP network cable specifications, 221 pin assignments, 223 repeaters, 222

S7—315—2 and EM 277, 218

STEP 7—Micro/WIN and HMI, 218

Profile table, EM 253 Position Module, 294

Profile table values, PTO/PWM generators, 138

Program analog inputs, 25 basic elements, 53 compile errors, 60 creating, 10 creating with STEP 7—Micro/WIN, 55 debugging features, 244 downloading, 14, 37 editing in RUN mode, 244 execution errors, 61 monitoring, 14 monitoring status, 246 running, 14 saving, 13 sharing data with interrupt routines, 155 specifying number of scans, 248 status chart, 63 storage, 36–40 structuring, 53 subroutines, 54

529

S7-200 Programmable Controller System Manual

Program control instructions basic program control, 167 conditional end, 167 for—next loop, 169 jump instructions, 171 sequence control relay (SCR), 172 stop, 167 watchdog reset, 167

Program editors, 55 conventions, 58

Function Block Diagram (FBD), 55

Ladder Logic (LAD), 55 opening, 11 selecting, 55

Statement List (STL), 55

Program memory, increase, 47

Program, sample, controlling Position module, 302

Programming

EM 253 Position Module, 266 high—speed counters, 119

Programming cable, 5

Programming software, order numbers, 496

Proportional term, PID algorithm, 147

Protection circuit, 393

Protocol, communication selecting, 214 user—defined, 226

Protocols

PROFIBUS—DP, 440 supported by STEP 7—Micro/WIN, 225

PTO instructions, error codes, 264

PTO Output, 258

PTO/PWM functions, registers (WMB66 to SMB85),

489

PTO_CTRL, 260

PTO0, PTO1 Profile Definition Table (SMB166 to

SMB185), 492

PTOx_CTRL, 260

PTOx_LDPOS, 263

PTOx_MAN, 262

PTOx_RUN, 261

Pulse catch, 44

Pulse catch feature, 45

Pulse Output instruction (PLS), 133

Pulse outputs high—speed, 50 pulse output instruction (PLS), 133 pulse train output instruction (PTO), 133 pulse width modulation instruction (PWM), 133

Pulse timer instruction (TP), 201

Pulse Train Output

PTOx_ADV, 264

PTOx_CTRL, 260

PTOx_LDPOS, 263

PTOx_MAN, 262

PTOx_RUN, 261

Pulse train output instruction (PTO), 50, 133 configuring with SM memory, 136 cycle time, 134 multiple—segment pipelining, 135

Position Control wizard, 133 profile table values, 138 single—segment pipelining, 134 stepper motor control, 138 understanding, 134

Pulse Width Modulation, 253 configuring PWM output, 253

Pulse width modulation instruction (PWM), 50, 133 configuring with SM memory, 136 cycle time, 135

Position Control wizard, 133 profile table values, 138 stepper motor control, 138 understanding, 135 update methods, 136

Pulse Width Modulation Output, PWMx_RUN, 254

PV out of range, PID auto—tune, 387

PWM Output, configuring, 253

PWMx_RUN, 254 pulse width modulation instruction, 254

PWMx_RUN instruction, error codes, 254

Q

Q memory, 28

Queue overflow (SMB4), 483

Queues, interrupt routines, 157

Quick reference information, 505

R

Radio modem

PPI mode, 232

PPI/Freeport mode, 232 with PPI Multi—Master cable, 232

Rail dimensions, 18 mounting, 18

Ranges, PID loop, 150

RCPx_Read subroutine, recipe instruction, 371

Read real—time clock extended instruction, 79

Read real—time clock instruction, 78

Reading data from inputs, 24, 25

Real math instructions, example, 141

Real number values, 27, 32

Real to ASCII instruction, 105 example, 106

Real—time clock instructions, 78

Receive instruction, 86 break detection, 90 end character detection, 91 end conditions, 89 example, 93

Freeport mode, 86 idle line detection, 89 intercharacter timer, 91 maximum character count, 92 message timer, 91 parity errors, 92 receiving data, 87

SMB86 to SMB94, SMB186 to SMB194, 490 start character detection, 89 start conditions, 89 user termination, 92

530

Index

Receiving data, 92

Recipes, uploading and downloading, 37

Recipe Wizard, 367 allocating memory, 369 downloading, 370 instructions, 371 terms, 367

Recovering, lost password, 49

Reinstalling, terminal block connector, 19

Relays, 22 service life, 393

Remote address, setting for S7—200, 213

Removing

CPU module, 19 expansion module, 19 terminal block connector, 19

Repeaters network, 222 order numbers, 497

Requirements

Modbus Master Protocol, 348

Modbus Slave Protocol, 349

Reset, high—speed counter, 123

Reset dominant bistable instruction, 77

Reset immediate instruction, 73

Reset instruction, 73 example, 73

Resolution, timer, 197, 198

Restarting, after fatal error, 61

Restoring Data, after power on, 39

Restoring program, from memory cartridge, 38

Retentive bit memory, 39

Retentive data memory, 36

Retentive memory, 43

Retentive on—delay timer instruction (TONR), 196 example, 200

Return from interrupt instruction, 153

Return from subroutine instruction, 204 example, 207

Reverse—acting loops, 150

RJ11 jack, EM 241 Modem module, 308, 451

Rotate instructions, 179 example, 180 types, 179

Rotate left byte instruction, 179

Rotate left double word instruction, 179

Rotate left word instruction, 179

Rotate right byte instruction, 179

Rotate right double word instruction, 179

Rotate right word instruction, 179

Round instruction, 101

RP Seek mode options, 303–307

EM 253 Position Module, 303–307

RP Seek modes, 303

RS—232 standard

Freeport mode, 227

PPI Multi—Master cable, 227

RS—232/PPI Multi—Master cable configuring for HyperTerminal, 239–483

DIP switch settings, 469 port settings, 220 specifications, 467

RS—485 standard, 222

RTD module (EM 231), 431

RUN mode, 14, 40 editing program, 244

Run mode edit, 42 disable , 47

Run—time errors, 60

Run—time programming, error codes, 479

Running, program, 14

S

S memory, 32

S7—200 accessing data, 27 accumulators, 30 addressing, 27 analog inputs (AI), 31 analog outputs (AQ), 32 as slave device, 211, 440 baud rates, 211, 212–214 bit memory area (M), 28

C memory, 29 connecting with STEP 7—Micro/WIN, 10 constant values, 33 counter memory area (C), 29

CPU modules, 2 dimensions, 2 downloading, 37 electromagnetic compatibility, 394 environmental conditions, 394 error codes, 478 error handling, 60 executing control logic, 24 expansion modules, 4 grounding guidelines, 21 hardware troubleshooting, 249 high—speed counters, 30

I memory, 28 installation guidelines, 16 installing, 17 interrupt routines, 155

L memory, 31 local memory area (L), 31

M memory, 28 memory, 27 memory ranges, 68 modem, 231 network address, 212–214 password protection, 48 power supply, 8 process image register, 41 process—image input register (I), 28 process—image output register (Q), 28 programming conventions, 59 pulse catch feature, 45

Q memory, 28 radio modem, 232 reading and writing data, 24 response to fatal error, 478 retentive memory, 43

RS—232 standard, 227

RUN mode, 14, 40

531

S7-200 Programmable Controller System Manual

S memory, 32 sample network configurations, 216, 217, 218,

219 saving data, 36 scan cycle, 24, 42 sequence control relay memory area (S), 32

SM memory, 31 special features, 41 special memory area (SM), 31 status chart, 247

STOP mode, 14, 40 supported interrupt routines, 156 system components, 2

T memory, 29 technical specifications, 394 timer memory area (T), 29 troubleshooting, 249 uploading, 37

V memory, 28 variable memory area (V), 28 wiring diagrams, 401–403 wiring guidelines, 21

S7—200 Explorer, 36, 41

Data Log Wizard, 378

S7—200 Programmable Controller System Manual, order numbers, 496

S7—200CN products, 511–514

S7—300, sample network configurations, 217

S7—400, sample network configurations, 217

Safety circuits, designing, 52

Sample program, 10

Saving bit memory (M) to EEPROM, 39 program, 13

S7—200 program data, 36 value to EEPROM, 487 variable memory (V) to EEPROM, 39

Scaled integer, converting loop outputs, 149

Scan cycle, 24 specifying number, 248 timers, 198

Scan times: SMW22 to SMW26, 486

Security, passwords, 48

Security callback, EM 241 Modem module, 312

Segment instruction, 102 example, 102

Selecting communication protocol, 214

CP card, 224 instruction sets, 57

PPI Multi—Master cable, 224 program editor, 55

RTD DIP switches, 431–432

S7—200 operating mode, 40 thermocouple DIP switches, 427

Sequence control relay end instruction, 172

Sequence control relay instructions conditional sequence control relay end, 172 convergence control, 175 divergence control, 175 example, 172 load sequence control relay, 172 restrictions, 172

532 sequence control relay end, 172 sequence control relay transition, 172

Sequence control relay memory area (S), 32

Sequence control relay transition instruction, 172

Servos, open loop position control, 255

Set dominant bistable instruction, 77

Set immediate instruction, 73

Set instruction, 73 example, 73

Set port address instruction, 95

Set real—time clock extended instruction, 79

Set real—time clock instruction, 78

Setting baud rate, 211 control byte (HSC), 124 current and preset values for HSC, 126 date, 78 remote address for S7—200, 213 time, 78

Setting up

MM3 drive, 343

MM4 drive, 346

Seven—segment display, 102

Shift instructions example, 180 types, 179

Shift left byte instruction, 179

Shift left double word instruction, 179

Shift register bit instruction, 181 example, 182

Shift right byte instruction, 179

Shift right double word instruction, 179

Shift right word instruction, 179

Short Message Service, EM 241 Modem module,

310

SIMATIC counter instructions count down, 113 count up, 113 count up/down, 114 examples, 115

SIMATIC instruction set, 57

SIMATIC timer instructions, 196 example, 198, 199, 200

Simulators, order numbers, 497

Simulators, input, 471

Sine instruction, 143

Single—master PPI network, 216

Slave device, 211

EM 277 PROFIBUS—DP, 440

S7—200, 440

SM memory, 31

Modbus Master Protocol, 348

Modbus Slave Protocol, 349

PTO/PWM operation, 136

SMB0: status bits, 482

SMB1: status bits, 482

SMB130: freeport control registers, 486

SMB131 to SMB165: HSC3, HSC4, HSC5 register,

491

SMB166 to SMB185: PTO0, PTO1 Profile Definition

Table, 492

SMB186 to SMB194: receive message control, 490

SMB2: freeport receive character, 483

Index

SMB200 to SMB549: intelligent module status, 493

SMB28, SMB29 analog adjustment, 50, 486

SMB3: freeport parity error, 483

SMB30 and SMB130: freeport control registers, 486

SMB31 and SMW32: EEPROM write control, 487

SMB34 and SMB35: timed interrupt registers, 487

SMB36 to SMB65: HSC0, HSC1, HSC2 register, 487

SMB4: queue overflow, 483

SMB5: I/O status, 484

SMB6: CPU ID register, 484

SMB66 to SMB85: PTO/PWM registers, 489

SMB7: reserved, 484

SMB8 to SMB21: I/O module identification and error registers, 485

SMB86 to SMB94, SMB186 to SMB194: receive message control, 490

SMS, Modem module, 310

SMW22 to SMW26: scan times, 486

SMW98: expansion I/O bus errors, 491

Software debugging, 243

Spare door spare kit, order number, 497

Special memory

EM 241 Modem module, 323

Modbus Master Protocol, 348

Modbus Slave Protocol, 349

Special memory area (SM), 31 analog adjustment potentiometers, 50

Special memory bits, 482–490 quick reference, 505

Special memory bytes, EM 277 PROFIBUS—DP, 444

Special memory locations, EM 253 Position Module,

298

Specifications analog expansion module, 412

CP 243—1 Ethernet module, 458

CP 243—1 IT Internet module, 461

CP 243—2 AS—Interface module, 463

CPU module, 396, 397 discrete expansion module, 405

EM 231 RTD, 424

EM 231 thermocouple, 424

EM 241 modem, 450

EM 277 PROFIBUS—DP, 438

Micro PLC system, 52

RS—232/PPI Multi—Master Cable, 467

Square root instruction, 143

Standard contact instruction, 70

Standard conversion instructions, 99

Standard DIN rail, 17

Standards, national and international, 392

Start, high—speed counter, 123

Start character detection, 89

Starting, STEP 7—Micro/WIN, 9

Statement List.

See

STL Editor

Status displaying in LAD and FBD, 246 displaying in STL, 247 end of scan, 246 execution, 246 monitoring program, 246

Status byte, high—speed counter, 126

Status chart, 63 forcing values, 248 monitoring values, 247

Status LEDs

EM 231 RTD, 434

EM 231 thermocouple, 428

EM 253 position module, 454

EM 277 PROFIBUS—DP, 439, 445

STEP 7—Micro/WIN as master device, 211 baud rate, 212–214 communication settings, 10 computer requirements, 5 connecting with S7—200, 10

CP card, 225 creating programs, 55 debugging tools, 243 equipment requirements, 5 installation, 5 instruction sets

IEC 1131—3, 57 selecting, 57

SIMATIC, 57

Interface for EM 241, 309 network address, 212–214 opening, 55 order numbers, 496

PPI Multi—Master cable, 225 program editors, 55 programming package, 5 sample network configurations, 216–219 starting, 9

STEP 7—Micro/WIN 32 Instruction Libraries, 496

Stepper motor control, PTO/PWM generators, 138

Steppers, open loop position control, 255

Steps, creating for motion profile, 258

STL editor description, 55 features, 55

STL instructions execution times, 499 quick reference, 509

Stop instruction, 167 example, 168

STOP mode, 14, 40

Storing program on memory cartridge, 38

S7—200 program data, 36

String, representation, 33

String constant, 32

String instructions concatenate string, 184 copy string, 184 copy substring from string, 186 find first character within string, 187 find string within string, 187 string length, 184

String length instruction, 184

Strings, format, 32

Structuring, program, 53

Subroutine instructions call subroutine, 204 conditional return from subroutine, 204 example, 207

533

S7-200 Programmable Controller System Manual

Subroutines calling from interrupt routines, 156 data types, 205 example, 53 guidelines, 54 nesting, 204 parameter types, 205 power flow parameter, 205 with parameters, 205

Subtract instruction, 140

Suppression circuits, 22

Surge suppression, 22

Swap bytes instruction, 183 example, 183

Symbol table, 62 addressing, 62 configure for Modbus, 351

Symbolic addressing, 62

Symbolic names, creating list, 53

Synchronous updates, PWM instruction, 136

System block, 54

System design, Micro PLC, 52

System support, for interrupt routines, 155

T

T memory, 29

Table find instruction, 193 example, 195

Table instructions add to table, 189 first—in—first—out, 190 last—in—first—out, 190 memory fill, 192 table find, 193

Tangent instruction, 143

TC/IP, communications protocol, 215

TCP/IP , protocol, 215

Telephone line interface, international, EM 241

Modem module, 308

Teleservice, 309

Temperature ranges

EM 231 RTD, 435–436

EM 231 thermocouple, 429–430

Terminal block connector reinstalling, 19 removing, 19

Terminating, network cable, 223

Text Display, Wizard, 6

Text Display devices, 6

Text displays faceplate overlays, 497 order number, 497

Text Message Format, EM 241 Modem module, 328

Text paging, EM 241 Modem module, 310

Thermocouple module (EM 231) basics, 426 configuring, 426 status indicators, 428 temperature ranges, 429–430

Time, setting, 78

Time—based interrupts, 156

Time—of—Day (TOD) clock, 78

Time—stamp, history log, 47

Timed interrupt queue, 157

Timed interrupt routine, example, 159

Timed interrupts, time interval registers (SMB34,

SMB35), 487

Timer instructions

IEC off—delay timer (TOF), 201 on—delay timer (TON), 201 pulse timer (TP), 201 interrupts, 157

SIMATIC off—delay timer (TOF), 196 on—delay timer (TON), 196 retentive on—delay timer (TONR), 196

Timer memory area (T), 29

Timer resolution, 197, 198

TOD clock, 78

Token rotation time, 233 comparing, 235

Token—passing network, example, 234

Toolbars, 55

TP177micro touch panel unit, order number, 497

Transition instructions, 70

Transmission rate, network, 221

Transmit instruction, 86 example, 93

Freeport mode, 86 transmitting data, 87

Troubleshooting error codes, 478 fatal errors, 61 guide, 249 non—fatal errors, 60

S7—200 hardware, 249

Truncate instruction, 101

U

Unconditional inputs, 59

Up counter instruction, 116

Up/down counter instruction, 116

Updating, PWM waveform, 136

Uploading, program, 37

USB/PPI Multi—Master cable order number, 467 port settings, 220 selecting, 210

User Libraries, 64

User termination, 92

User—defined protocol, Freeport mode, 226

USS protocol, requirements, 332

USS protocol instructions execution errror codes, 342 guidelines for using, 333 sample program, 341

USS4_DRV_CTRL, 335

USS4_INIT, 334

USS4_RPM_x and USS4_WPM_x, 338, 339

USS Protocol Library, controlling MicroMaster drives,

331

534

USS4_DRV_CTRL instruction, 335

USS4_INIT instruction, 334

USS4_RPM_x instruction, 338, 339

USS4_WPM_x instruction, 338, 339

V

V memory, 28 assigning addresses, 62 copying to permanent memory, 39 saving to EEPROM, 39

Variable memory area (V), 28

Variables monitoring, 63 monitoring with status chart, 247

PID loop, 150 symbolic addressing, 62

Viewing, errors, 60

W

Watchdog reset instruction, 167 example, 168

Index

Wiring, 20, 21

Wiring diagrams

CPU inputs and outputs, 401

CPU modules, 401–403 discrete expansion modules, 408–410

EM 253 Position Module, 456–457

Wizards

AS—i, 463

Ethernet, 459

Instruction, HSC, 119

Instruction, NETR, NETW, 81

Internet, 462

Modem Expansion, 230, 314

PID, 145

Position Control, 267

Text Display, 6

Word access, 27

Word consistency, PROFIBUS, 443

Work zone location, EM 253 Position Module, 306

535

S7-200 Programmable Controller System Manual

536

To

SIEMENS ENERGY & AUTOMATION INC

ATTN: TECHNICAL COMMUNICATIONS

ONE INTERNET PLAZA

PO BOX 4991

JOHNSON CITY TN USA 37602—4991

From

Name:

Job Title:

Company Name:

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

Street: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

City and State: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

Country:

Telephone:

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

Please check any industry that applies to you:

U

Automotive

U

Chemical

U

Electrical Machinery

U

Food

U

Instrument and Control

U

Non-electrical Machinery

U

Petrochemical

U

Pharmaceutical

U

Plastic

U

Pulp and Paper

U

Textiles

U

Transportation

U

Other ___________________________

S7-200 Programmable Controller System Manual

Remarks Form

Your comments and recommendations will help us to improve the quality and usefulness of our publications. Please take the first available opportunity to fill out this questionnaire and return it to Siemens.

Please give each of the following questions your own personal mark within a range from 1 (very good) to 5 (very poor).

1.

Do the contents meet your requirements?

2.

Is the information you need easy to find?

3.

Is the text easy to understand?

4.

Does the level of technical detail meet your requirements?

5.

Please rate the quality of the graphics and tables.

Additional comments:

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

S7-200 Programmable Controller System Manual

S7-200 Memory Ranges and Features

Description CPU 221 CPU 222 CPU 224

CPU 224XP

CPU 224XPsi

CPU 226

1

User program size with run mode edit without run mode edit

User data size

4096 bytes

4096 bytes

2048 bytes

4096 bytes

4096 bytes

2048 bytes

Process-image input register I0.0 to I15.7

Process-image output register Q0.0 to Q15.7

Analog inputs (read only)

Analog outputs (write only)

AIW0 to AIW30

I0.0 to I15.7

Q0.0 to Q15.7

AIW0 to AIW30

AQW0 to AQW30 AQW0 to AQW30

Variable memory (V)

Local memory (L)

1

Bit memory (M)

Special Memory (SM)

Read only

Timers

Retentive on-delay 1 ms

10 ms

On/Off delay

100 ms

1 ms

10 ms

100 ms

VB0 to VB2047

LB0 to LB63

M0.0 to M31.7

SM0.0 to SM179.7

SM0.0 to SM29.7

256 (T0 to T255)

T0, T64

T1 to T4, and

T65 to T68

T5 to T31, and

T69 to T95

T32, T96

T33 to T36, and

T97 to T100

T37 to T63, and

T101 to T255

C0 to C255 Counters

High-speed counters

Sequential control relays (S)

Accumulator registers

Jumps/Labels

Call/Subroutine

Interrupt routines

HC0 to HC5

S0.0 to S31.7

AC0 to AC3

0 to 255

0 to 63

0 to 127

VB0 to VB2047

LB0 to LB63

M0.0 to M31.7

SM0.0 to SM299.7

SM0.0 to SM29.7

256 (T0 to T255)

T0, T64

T1 to T4, and

T65 to T68

T5 to T31, and

T69 to T95

T32, T96

T33 to T36, and

T97 to T100

T37 to T63, and

T101 to T255

C0 to C255

HC0 to HC5

S0.0 to S31.7

AC0 to AC3

0 to 255

0 to 63

0 to 127

Positive/negative transitions

PID loops

Ports

256

0 to 7

Port 0

256

0 to 7

Port 0

LB60 to LB63 are reserved by STEP 7—Micro/WIN, version 3.0 or later.

8192 bytes

12288 bytes

8192 bytes

12288 bytes

16384 bytes

10240 bytes

I0.0 to I15.7

Q0.0 to Q15.7

I0.0 to I15.7

Q0.0 to Q15.7

AIW0 to AIW62 AIW0 to AIW62

AQW0 to AQW62 AQW0 to AQW62

VB0 to VB8191 VB0 to VB10239

LB0 to LB63

M0.0 to M31.7

SM0.0 to SM549.7

SM0.0 to SM29.7

256 (T0 to T255)

T0, T64

T1 to T4, and

T65 to T68

T5 to T31, and

T69 to T95

T32, T96

T33 to T36, and

T97 to T100

T37 to T63, and

T101 to T255

C0 to C255

LB0 to LB63

M0.0 to M31.7

SM0.0 to SM549.7

SM0.0 to SM29.7

256 (T0 to T255)

T0, T64

T1 to T4, and

T65 to T68

T5 to T31, and

T69 to T95

T32, T96

T33 to T36, and

T97 to T100

T37 to T63, and

T101 to T255

C0 to C255

HC0 to HC5

S0.0 to S31.7

AC0 to AC3

0 to 255

0 to 63

0 to 127

256

0 to 7

Port 0

HC0 to HC5

S0.0 to S31.7

AC0 to AC3

0 to 255

0 to 63

0 to 127

256

0 to 7

Port 0, Port 1

16384 bytes

24576 bytes

10240 bytes

I0.0 to I15.7

Q0.0 to Q15.7

AIW0 to AIW62

AQW0 to AQW62

VB0 to VB10239

LB0 to LB63

M0.0 to M31.7

SM0.0 to SM549.7

SM0.0 to SM29.7

256 (T0 to T255)

T0, T64

T1 to T4, and

T65 to T68

T5 to T31, and

T69 to T95

T32, T96

T33 to T36, and

T97 to T100

T37 to T63, and

T101 to T255

C0 to C255

HC0 to HC5

S0.0 to S31.7

AC0 to AC3

0 to 255

0 to 127

0 to 127

256

0 to 7

Port 0, Port 1

96

96

98

96

96

96

96

75

70

162

162

96

96

75

70

162

70

98

153

103

189

96

96

96

96

96

96

96

96

96

96

96

96

96

96

140

140

70

140

140

73

140

140

140

140

Page

73

140

140

140

140

AR=

AR <

AR<=

AR >

AR>=

AR <>

AS=

AD > =

AD <>

AENO

AI

ALD

AN

ANDB

ANDD

ANDW

ANI

AS<>

ATCH

ATH

ATT

AW <

AW < =

AW=

AW >

*R

/R

A

AB < =

AB =

AB >

AB<

AB > =

AB <>

AD <

AD < =

AD =

AD >

/ I

+R

—R

+I

—I

=I

* I

STL

=

+D

—D

* D

/ D

96

96

96

75

98

98

96

96

96

96

96

96

70

70

70

96

96

96

96

190

143

75

75

75

172

96

96

96

96

96

96

96

96

96

96

171

70

96

161

161

103

99

99

107

171

Page

99

144

144

144

161

LDD <>

LDI

LDN

LDNI

LDR=

LDR <

LDR<=

LDR >

LDR>=

LDR <>

LDS

LDS=

LDS<>

LDW <=

LDW <

LDW =

LDW >

LDW >=

LDW <>

LIFO

LN

LPP

LPS

LRD

LSCR

LBL

LD

LDB <=

LDB =

LDB >=

LDB >

LDB <

LDB <>

LDD >=

LDD <

LDD <=

LDD =

LDD >

INVD

INVW

ITA

ITB

ITD

ITS

JMP

STL

IBCD

INCB

INCD

INCW

INVB

167

153

70

143

190

192

193

153

99

99

107

153

142

178

103

70

112

193

193

193

169

95

118

118

103

113

113

144

144

112

144

187

196

143

204

153

172

113

165

166

166

166

99

204

153

Page

96

96

99

165

196

END

ENI

EU

EXP

FIFO

FILL

FND <

DISI

DIV

DLED

DTA

DTCH

DTI

DTR

DTS

ED

ENCO

FND <>

FND =

FND >

FOR

GPA

HDEF

HSC

HTA

CFND

CITIM

COS

CRET

CRETI

CSCRE

CTD

CTU

CTUD

DECB

DECD

DECO

DECW

STL

AW > =

AW <>

BCDI

BIR

BITIM

BIW

BMB

BMD

BMW

BTI

CALL

CEVNT

96

96

96

98

98

96

96

96

96

96

162

70

96

96

96

162

162

96

145

133

73

86

73

179

179

70

75

70

96

96

96

96

96

96

96

96

96

96

70

96

96

169

81

81

70

Page

164

164

164

164

142

OS=

OS<>

OW <

OW < =

OW =

OW >

OW > =

ONI

OR=

OR <

OR<=

OR >

OR >=

OR <>

ORB

ORD

ORW

OW <>

PID

PLS

R

RCV

RI

RLB

RLD

OB >

OB <

OB < =

OB <>

OD <

OD < =

OD =

OD >

OD > =

OD <>

OI

OLD

ON

STL

MOVB

MOVD

MOVR

MOVW

MUL

NEXT

NETR

NETW

NOT

O

OB =

OB > =

184

179

95

143

179

179

99

187

181

73

143

179

179

103

107

73

184

184

172

172

Page

179

99

179

179

179

78

78

196

196

196

99

167

167

110

183

143

179

186

110

110

78

78

86

162

162

SLEN

SLW

SPA

SQRT

SRB

SRD

SEG

SFND

SHRB

SI

SIN

SLB

SLD

RTA

RTS

S

SCAT

SCPY

SCRE

SCRT

STL

RLW

ROUND

RRB

RRD

RRW

SRW

SSCPY

STD

STI

STOP

STR

SWAP

TAN

TODR

TODRX

TODW

TODWX

TOF

TON

TONR

TRUNC

WDR

XMT

XORB

XORD