TCP Modbus Service

This function is to access CPU data memory with a PC through TCP Modbus protocol.

Transport Layer: TCP/IP
Half-Duplex (TCP/IP)
Service Port: 502

TCP Modbus Command

Command	Description	Remarks
1 (Read Coil)	Accesses the bit device where data can be read and written.	Bit Read
2 (Read Input)	Accesses the bit device where data can be read.	Bit Read
3 (Read Holding)	Accesses the word device where data can be read and written.	Word Read
4 (Read Input)	Accesses the word device where data can be read.	Word Read
5 (Force Single Coil)	Accesses the bit device where data can be read.	Bit Write
6 (Preset Single Register)	Accesses the word device where data can be written.	Word Write
15 (Force Multiple Coils)	Accesses the bit device where data can be written.	Bit Write
16 (Preset Multiple Regs)	Accesses the word device where can be written.	Word Write

Address Map

TCP Modbus can correspond to the device memories of all types.

Bit / Word	Modicon Address	CIMON-PLC Address	Size CIMON-PLC
Bit Read Input	100001 ~ 104096	X 0000 ~	4096 Bits
	104097 ~ 106144	F 0000 ~	2048 Bits
	106145 ~ 107168	T 0000 ~	1024 Bits
	107169 ~ 108192	C 0000 ~	1024 Bits
Bit Read Coil	000001 ~ 004096	Y 0000 ~	4096 Bits
	004097 ~ 012288	M 0000 ~	8192 Bits
	012289 ~ 014336	K 0000 ~	2048 Bits
	014337 ~ 016384	L 0000 ~	2048 Bits
Word Input Register	300001 ~ 300256	X 0000 ~	256 Words
	300257 ~ 300384	F 0000 ~	128 Words
	300385 ~ 301408	TC 0000 ~	1024 Words
	301409 ~ 302432	CC 0000 ~	1024 Words
	302433 ~ 302482	S 0000 ~	50 Words
Word Holding Register	400001 ~ 400256	Y 0000 ~	256 Words
	400257 ~ 400384	K 0000 ~	128 Words
	400385 ~ 401408	TS 0000 ~	1024 Words
	401409 ~ 402432	CS 0000 ~	1024 Words
	402433 ~ 402560	L 0000 ~	128 Words
	402561 ~ 403072	M 0000 ~	512 Words
	403073 ~ 413072	D 0000 ~	10000 Words

Bit (Read Input, Read Coil) occupies the Modicon Address bit by bit.
[Ex.] Read Input -> 100001 : X0000, 100002: X0001, ... , 100017: X0010, ....
[Ex.] Read Coil -> 000001 : Y0000, 000002: Y0001, ..., 000017: Y0010, ....

Word(Input Register, Holding Register) occupies the Modicon address word by word.
[Ex.] Input Register -> 300001 : X0000, 300002->X0010, 300003->X0020, ....
[Ex.] Holding Register -> 402561 : M0000, 402562: M0010, 402563: M0020, ....

[Note] Some MODBUS Master devices can read/write the devices from 1 to 9999 in the range of each data type address. In this case, as the part corresponding to the devices that are greater than Modicon Address 9999 among PLC data cannot access, user programs may need to be processed.