View source for S7-SoftPLC:Configuring CP343/CP443 emulation

The CP functionality of ''S7-SoftPLC'' supports the ISO on TCP (RFC 1006; Port 102) protocol for incoming PU connections. Send/Receive functions are supported for the protocols ISO on TCP, TCP/IP and UDP. Via ISO on TCP and TCP/IP Fetch/Write passive is supported as well.

In the hardware configuration of a ''S7-SoftPLC 416'' CP443 with the purchase order number 6GK7 443-1EX11-0XE0 should be chosen, since it supports the TCP/IP protocol only.

The ISO protocol, that is used by 6GK7 443-1EX11-0XE0 for example, would require special ISO network controller drivers. Therefore a connection via ISO protocol can not be established, this is possible via ISO on TCP only. The selection of the network controller of the PU station has to begin with &quot;TCP/IP -&gt; your network controller&quot;.


WARNING: IF &quot;SIMATIC IEPG HELP SERVICE&quot; IS RUNNING, RFC1006 SERVICES VIA CP343/CP443 ARE NOT POSSIBLE, BECAUSE THE PORT 102 IS IN USE BY HELP SERVICE.

=== Operating mode ===

At the start of ''S7-SoftPLC'' a configuration for the CP343/CP443 emulation is searched. The selected blocks for the communication appear in the block list of the PLC.

The following protocols are supported:

{| class="wikitable"
|-
| Iso-On-TCP || PU-channel || 
|-
| Iso-On-TCP || Send/Receive || passive
|-
| Iso-On-TCP || Send/Receive || active
|-
| Iso-On-TCP || Fetch/Write || passive
|-
| TCP || Send/Receive || passive
|-
| TCP || Send/Receive || active
|-
| TCP || Fetch/Write || passive
|-
| UDP || Send/Receive || 
|}

 
'''Differences to hardware-PLC'''
* The local IP-address is taken from the Windows<sup>®</sup> computer network settings and is not overwritten by system data.
* FC5 and FC50 both behave like FC50 (AG_LSEND)
* FC6 and FC60 both behave like FC60 (AG_LRECV)
* FC10 only supports the commands NOP, CN_STATUS, CN_STATUS_ALL and CN_RESET_ALL.
* FB55 for configuration via DB must only be called in OB100/OB101.


=== Modbus TCP Server ===

The CP emulation also supports the Modbus TCP-protocol per default.

The following Modbus functions are supported:

{| class="wikitable"
|-
! Function !! Data area !! Description
|-
| 0x01 || Out || Read bits
|-
| 0x02 || In || Read bits
|-
| 0x03 || Out || Read words
|-
| 0x04 || In || Read words
|-
| 0x05 || Out || Write bit
|-
| 0x06 || Out || Write word
|-
| 0x0F || Out || Write bits
|-
| 0x10 || Out || Write words
|}

The Modbus telegram types, normally accessing the input area, are read from a data block, that can be freely defined by the user.

The Modbus telegram types, normally accessing the output area, are read or written from another data block, that can be freely defined by the user.

That provides the possibility to access the process data of ''S7-SoftPLC'' with any HMI or Control Panels, which support the Modbus TCP-protocol.