S7-SoftPLC:Configuring CP343/CP443 emulation

From IBHsoftec Wiki English
Jump to: navigation, search

The CP functionality of S7-SoftPLC supports the ISO on TCP (RFC 1006; Port 102) protocol for incoming PU connections. Send/Receive functions are supported for the protocols ISO on TCP, TCP/IP and UDP. Via ISO on TCP and TCP/IP Fetch/Write passive is supported as well.

In the hardware configuration of a S7-SoftPLC 416 CP443 with the purchase order number 6GK7 443-1EX11-0XE0 should be chosen, since it supports the TCP/IP protocol only.

The ISO protocol, that is used by 6GK7 443-1EX11-0XE0 for example, would require special ISO network controller drivers. Therefore a connection via ISO protocol can not be established, this is possible via ISO on TCP only. The selection of the network controller of the PU station has to begin with "TCP/IP -> your network controller".


WARNING: IF "SIMATIC IEPG HELP SERVICE" IS RUNNING, RFC1006 SERVICES VIA CP343/CP443 ARE NOT POSSIBLE, BECAUSE THE PORT 102 IS IN USE BY HELP SERVICE.

Operating mode

At the start of S7-SoftPLC a configuration for the CP343/CP443 emulation is searched. The selected blocks for the communication appear in the block list of the PLC.

The following protocols are supported:

Iso-On-TCP PU-channel
Iso-On-TCP Send/Receive passive
Iso-On-TCP Send/Receive active
Iso-On-TCP Fetch/Write passive
TCP Send/Receive passive
TCP Send/Receive active
TCP Fetch/Write passive
UDP Send/Receive

  Differences to hardware-PLC

  • The local IP-address is taken from the Windows® computer network settings and is not overwritten by system data.
  • FC5 and FC50 both behave like FC50 (AG_LSEND)
  • FC6 and FC60 both behave like FC60 (AG_LRECV)
  • FC10 only supports the commands NOP, CN_STATUS, CN_STATUS_ALL and CN_RESET_ALL.
  • FB55 for configuration via DB must only be called in OB100/OB101.


Modbus TCP Server

The CP emulation also supports the Modbus TCP-protocol per default.

The following Modbus functions are supported:

Function Data area Description
0x01 Out Read bits
0x02 In Read bits
0x03 Out Read words
0x04 In Read words
0x05 Out Write bit
0x06 Out Write word
0x0F Out Write bits
0x10 Out Write words

The Modbus telegram types, normally accessing the input area, are read from a data block, that can be freely defined by the user.

The Modbus telegram types, normally accessing the output area, are read or written from another data block, that can be freely defined by the user.

That provides the possibility to access the process data of S7-SoftPLC with any HMI or Control Panels, which support the Modbus TCP-protocol.

Retrieved from "https://wiki.ibhsoftec.com/en/index.php?title=S7-SoftPLC:Configuring_CP343/CP443_emulation&oldid=1120"