Remarks: The above is the official professional description. It doesn't matter if you don't understand. Just have a general impression. If you are interested, you can buy some professional books online for in-depth study. Let me supplement the description with popular language.
1.RS485 communication protocol
1. 1. Master-slave half-duplex communication, the master calls the slave address and the slave responds. Serial communication, data frame 1 1 bit, 1 start bit, 8 data bits and 2 stop bits.
1.2. The data transmission format adopts standard ASC code.
1.2. 1. Communication data character set
0(30 hours) 1(3 1 hour) 2(32 hours) 3(33 hours) 4(34 hours)
5(35 hours) 6(36 hours) 7(37 hours) 8(38 hours) 9(39 hours)
a(4 1H)B(42H)C(43H)D(44H)E(45H)
F(46 hours). (2EH) -(2DH) +(2BH)
1.2.2. Communication control character set
DC 1( 1 1H): read instantaneous value DC2( 12H): read parameters.
DC3( 13H): write parameter DC4( 14H): read and write FCC5000.
STX(02H): slave start symbol ETX(03H): master end symbol.
ETB( 17H): slave terminal RS (1EH): data separator.
US (1FH): parameter spacer ACK(06H): received correctly.
NAK( 15H): reception error CAN( 18H): communication reset.
SP (20H): blank character
1.3. Communication protocol
1.3. 1. Read instantaneous value.
1.3. 1. 1. Read the instantaneous value of a single channel.
Host sending: DC 1 AAA CC ETX
DC 1( 1 1H): read the instantaneous value.
AAA: slave address code (= 00 1 ~ 254)
Cc: Channel number (=0 1-99)
ETX(03H): Host Terminator
slave return:STX AAA CC US MM US DDDDDDDD US EEEE US SSSSSETB
STX(02H): slave initiator
AAA: slave address code (= 00 1 ~ 254)
Cc: Channel number (=0 1-99)
US( 1FH): parameter delimiter.
MM: phenotype (= 00 ~ 99)
DDDDDDD: Instantaneous value (-32 167 ~ 32767, 32767 = Brock, 16000 = h.ofl, -2000 = l.ofl,
The decimal point is in the actual position)
EEEE: alarm 1 ~ 4 alarm status (E=0: off E= 1: on)
SSSSS: Checksum 5 digits decimal = 00000 ~ 65535, from STX to the last digit US.
Sum of ASC values of characters, divided by the remainder of 65536)
ETB( 17H): Slave Terminator
Example: the host sends:1130h30h31h03h (read the instantaneous value of 0 1 channel in table 0065438).
Dependent return: 02h30h30h31h30h31h1fh30h1fh2dh30h31h32h.
33H 2EH 34H 1FH 3 1H 30H 30H 30H 1FH 30H 3 1H 30H 30H 34H
17h (table 00 1 is XMA5000 series, the instantaneous value of channel is 0 1 =-0 123.4, and alarm 1.
Action, alarm 2 does not act, checksum = 1004)
1.3. 1.2. Read the multichannel instantaneous value.
Host sending: DC 1 AAA CC ETX
DC 1( 1 1H): read the instantaneous value.
AAA: slave address code (= 00 1 ~ 254)
Cc: Channel number (=00)
ETX(03H): Host Terminator
The slave sends back1:stxaaacc us mm us ddddddddus eeee us ssssssetb.
STX(02H): slave initiator
AAA: slave address code (= 00 1 ~ 254)
CC: Channel number (=0 1), which means that multi-channel batch reading is not supported, and the channel number is judged by the table module word.
Read instantaneous values channel by channel)
US( 1FH): parameter delimiter.
MM: phenotype (= 00 ~ 99)
DDDDDDD: Instantaneous value (-32 167 ~ 32767, 32767 = Brock, 16000 = h.ofl, -2000 = l.ofl,
The decimal point is in the actual position)
EEEE: alarm 1 ~ 4 alarm status (E=0: off E= 1: on)
SSSSS: Checksum 5 digits decimal = 00000 ~ 65535, from STX to the last digit US.
Sum of ASC values of characters, divided by the remainder of 65536)
ETB( 17H): Slave Terminator
The slave sends back 2: STX AAA CC US MM US RS FF US GGGGGG US HHHH … US SSSS SETB.
STX(02H): slave initiator
AAA: slave address code (= 00 1 ~ 254)
CC: Channel number (=00, which means multi-channel batch reading is supported)
US( 1FH): parameter delimiter.
MM: phenotype (= 00 ~ 99)
RS: data delimiter
FF: Channel number (= 0 1 ~ 99)
GGGGGGG: Instantaneous value (-32 167 ~ 32767, 32767 = brok, 16000 = h.ofl, -2000 = l.ofl,
The decimal point is in the actual position)
HHHH: Alarm 1 ~ 4 Alarm status (E=0: Off E= 1: On)
SSSSS: Checksum 5 digits decimal = 00000 ~ 65535, from STX to the last digit US.
Sum of ASC values of characters, divided by the remainder of 65536)
ETB( 17H): Slave Terminator
Note: Underline is the channel data format.
1.3.2. Read parameters
Host sending: DC2 AAA CC American PP ETX
DC2( 12H): Read the parameter value.
AAA: slave address code (= 00 1 ~ 254)
Cc: Channel number (=0 1-99)
US( 1FH): parameter delimiter.
PP: parameter number (=0 1-69)
ETX(03H): Host Terminator
slave return:STX AAA CC US PP US DDDDDDDD US SSSSSETB
STX(02H): slave initiator
AAA: slave address code (= 00 1 ~ 254)
Cc: Channel number (=0 1-99)
US( 1FH): parameter delimiter.
PP: parameter number (= 0 1 ~ 69)
DDDDDDD: parameter value (=- 1999 ~ 15999)
SSSSS: checksum 5 digits decimal = 00000 ~ 65535, each from STX to the last US.
Sum of ASC values of characters, divided by the remainder of 65536)
ETB( 17H): Slave Terminator
Example: Host sends:12h30h30h31h30h31h1fh31h32h03h (read table 00 1, channel 0 1
Parameter number 12 range zero)
Slave return: 02h30h30h31h30h31h1h32h1fh2dh30h31h32h.
33H2EH34h1FH 30H30H37H37h17h (00 1 table 01channel
ParameterNo. 12 range null value =-0 123.4, checksum =777)
1.3.3. Write parameters
Host sending: DC3 AAA CC US PP US DDDDDDDDDDUS SSSSSETX
DC3( 13H): Write the parameter value.
AAA: slave address code (= 00 1 ~ 254)
Cc: Channel number (=0 1-99)
US( 1FH): parameter delimiter.
PP: Parameter number (= 1 1-69)
DDDDDDD: parameter value (=- 1999 ~ 15999)
SSSSS: Checksum 5 digits decimal = 00000 ~ 65535, from STX to the last digit US.
Sum of ASC values of characters, divided by the remainder of 65536)
ETX(03H): Host Terminator
Slave response: ACK(06H): correct reception.
NAK( 15H): reception error.
Example: the host sends:13h30h30h31h30h31h1h32h1fh2dh30h31h32h.
33H2EH34h1FH 30H30H39H34h17h (write 00 1 table 0 1 channel
ParameterNo. 12 range null value =-0 123.4, checksum =797)
From loopback: 06H (parameter written successfully)
1.3.4. Read and write FCC downlink data.
1.3.4. 1. Read the instantaneous value of single channel.
Host sending: dc4ffdc1aaccetx
DC4( 14H): read and write FCC5000
FF: FCC 5000 address code (= 0 1 ~ 99)
DC 1( 1 1H): read the instantaneous value of the instrument.
AAA: instrument address code (= 00 1 ~ 254)
Cc: instrument channel number (= 0 1 ~ 99)
ETX(03H): Host command terminator
FCC loopback: dc4ffstx AAA cc us mm us ddddddd us eeee us sssssssetb or DC4 FF NAK.
DC4( 14H): read and write FCC5000
FF: FCC 5000 address code (= 0 1 ~ 99)
STX(02H): Data Initiator
AAA: instrument address code (= 00 1 ~ 254)
Cc: instrument channel number (= 0 1 ~ 99)
US( 1FH): parameter delimiter.
Millimeter: instrument type (= 00 ~ 99)
DDDDDDD: instantaneous value (-32767 ~ 32767, 32767=brok, 16000=H.oFL,
-2000=L.oFL, -32767= instrument failure, actual position decimal point)
EEEE: alarm 1 ~ 4 alarm status (E=0: off E= 1: on)
FFFFF: Checksum with 5 decimal places = 00000 ~ 65535, with each bit from STX to the last US.
Sum of ASC values of characters, divided by the remainder of 65536)
ETB( 17H): data terminator
NAK( 15H): Wrong command or wrong address.
Example: the host sends:14h30h31h1h30h31h03h (read 0 1 FCC for download).
00 1 table 0 1 instantaneous value of channel)
FCC loopback:14h30h31h02h30h30h31h30h31fh30h31fh2dh.
30H 3 1H 32H 33H 2EH 34H 1FH 3 1H 30H 30H 30H 1FH 30H 3 1H
31h32h31h17h (table 00 1 is the instantaneous value of XMA5000 series, channel 0 1
=-0 123.4, alarm 1 action, alarm 2 no action, checksum =11)
1.3.4.2. Read parameters
Host sending: DC4 FF DC2 AAA CC US PP ETX
DC4( 15H): read and write FCC5000
FF: FCC 5000 address code (= 0 1 ~ 99)
DC2( 12H): Read the instrument parameter value.
AAA: instrument address code (= 00 1 ~ 254)
CC: instrument channel number (= 0 1 ~ 32)
PP: Instrument parameter number (= 0 1 ~ 69)
ETX(03H): Host command terminator
FCC loopback: dc4ffstx AAA cc us PP us ddddddddus SSSS SETB or DC4 FF NAK.
DC4( 14H): read and write FCC5000
FF: FCC 5000 address code (= 0 1 ~ 99)
STX(02H): Data Initiator
AAA: instrument address code (= 00 1 ~ 254)
CC: instrument channel number (= 0 1 ~ 32)
US( 1FH): parameter delimiter.
PP: Instrument parameter number (= 00 ~ 69)
DDDDDDD: instrument parameter value
SSSSS: Checksum 5 digits decimal = 00000 ~ 65535, from STX to the last digit US.
Sum of ASC values of characters, divided by the remainder of 65536)
ETB( 17H): data terminator
NAK( 15H): command error or address error or parameter error.
Example: Host sends:14h30h312h30h31h30h31h1fh31h32h03h (read 0 1
The number FCC hangs 00 1 table 0 1 channel, and the parameter number 12 is zero)
FCC loopback:14h30h31h02h30h30h31h30h31fh31h32h1fh2dh.
30h31h32h3332eh341fh30h37h39h14h (No.00 1
Table 0 1 channel, parameter number 12 range zero =-0 123.4, checksum =894)
1.3.4.3. Write parameters
Host sending: dc4ff dc3acc us PP us ddddddddus sssssetx
DC4( 14H): read and write FCC5000
FF: FCC 5000 address code (= 0 1 ~ 99)
DC3( 13H): Write the instrument parameter value.
AAA: instrument address code (= 00 1 ~ 254)
CC: instrument channel number (= 0 1 ~ 32)
PP: Instrument parameter number (= 0 1 ~ 69)
DDDDDDD: instrument parameter value
SSSSS: checksum 5 digits decimal = 00000 ~ 65535, each from STX to the last US.
Sum of ASC values of characters, divided by the remainder of 65536)
ETB( 17H): data terminator
FCC loopback: dc4fack or dc4fnak.
DC4( 14H): read and write FCC5000
FF: FCC 5000 address code (= 0 1 ~ 99)
ACK(06H): Received correctly.
NAK( 15H): reception error.
Example: Host sends:14h30h3130h3130h31fh31fh31fh31fh3.
30h31h32h33h2eh341fh30h39h31h31h17h (write 0 1
No. FCC hangs 00 1 table 0 1 channel, and the parameter number 12 has a range of zero =-0 123.4.
Checksum =9 1 1)
FCC loopback: 14H 30H 3 1H 06H (parameter written successfully)
1.3.4.4.FCC read time
Host sending: dc4ff dc200101us70etx.
FF: FCC 5000 address code (= 0 1 ~ 99)
FCC loopback: dc4ffstx00101us70us yymmdd hhmmss ussssssetb.
Yyymmdd hhmmss: yyyymmdd hhmmss (year, month, day, hour, minute and second)
Example: Host sends:14h30h312h30h30h31h1fh37h30h03h (pronounced 0 1
Number FCC parameter number 70 real-time)
FCC loopback:14h30h31h02h30h30h31h30h31fh37h30h1fh32h.
30H 30H 33H 3 1H 30H 30H 3 1H 30H 38H 30H 30H 30H 30H 30H 1FH
30h3 1 h32h34h34h17h (No.065438 +0 FCC real-time 65438+2003 10/)
8: 00: 00, checksum = 1244)
1.3.4.5. Write the FCC time.
Host sending: dc4ff dc300101us70usyyymmdd hhmmss USSSSETX.
FCC loopback: dc4fack or dc4fnak.
Example: Host sends:14h30h313h30h313h30h31fh37h30h1fh32h65438.
30H 30H 33H 3 1H 30H 30H 3 1H 30H 38H 30H 30H 30H 30H 30H 1FH
30H3 1H32H3 1H03h (write 0 1 FCC real-time 2003 65438+ 10/)
8: 00: 00, checksum = 126 1)
FCC loopback: 14H 30H 3 1H 06H (parameter written successfully)
1.3.4.6. Read the address range of FCC downlink.
Host sending: dc4fffdc200101us71etx.
FCC feedback: dc4ffstx00101us71usaaarsbbb us SSSSSSSSSETB.
AAA: starting address
BBB: End address
1.3.4.7. Read the address of the faulty instrument under FCC.
Host sending: dc4ff dc200101us72etx.
FCC loopback: dc4ffstx00101us72uaaars … usssssetb.
AAA: fault address
Note: Underline is the transmission format of the fault address; Empty data means a fault-free address.
1.3.4.8. Read the instantaneous values of all channels.
Host sending: dc4ff dc200101us73etx.
FCC loopback: DC4 FFSTX00101US73 USA YY MM DD HHMMSS AAA BB USA CCCCCCCCC USA DDDD … USA.
SSSSS ETB
AAA: instrument address code (=00 1)
BB: instrument channel number (=0 1)
US( 1FH): parameter delimiter.
PP: Instrument parameter number (= 00 ~ 99)
CCCCCCC: Instantaneous value (-32767 ~ 32767, 32767=brok, 16000=H.oFL,
-2000=L.oFL, -32767= instrument failure, actual position decimal point)
DDDD: Alarm 1 ~ 4 Alarm status (E=0: Off E= 1: On)
Note: The underline is in channel data format, and the fault instrument data is only sent to channel 0 1.
1.3.4.9. Read the next historical data record of FCC.
Host sending: dc4ff dc200101us74etx.
FCC loopback: DC4 FF STX AAA CC US 74 US YY MM DD HHMMSS AAA BB US CCCCCCCCCCC CCC US DDDD … US
SSSSS ETB
Note: Underline is the channel data format; Empty channel data means that historical data is read as empty.
The sending method is the same as parameter 73, except that the data of the faulty instrument is not sent.
1.3.4. 10. Reread the last historical data record of FCC.
Host sending: dc4ff dc200101us75etx.
FCC loopback: DC4 FF STX AAA CC US 75 US YY MM DD HHMMSS AAA BB US CCCCCCCCCCC CCC US DDDD … US
SSSSS ETB
1.3.4. 1 1. Read the FCC time history data record and read the time point corresponding to the pointer.
Host sending: dc4ff dc200101us76etx.
FCC loopback: dc4ffstx00101us76usyymmdd hhmmss ussssssetb.
1.3.4. 12. Move the time point corresponding to the reading pointer of FCC time history data record.
Host sending: dc4ff dc300101us76usyymmdd hhmmss ussssssetb.
FCC loopback: dc4fack or dc4fnak.
Usage: The reading pointer of FCC historical data record is moved one by one through parameter 74. Reading a large number of historical data records may take a long time. You can use parameter 76 to directly move to the required data time point, and then use parameter 74 to read it. When the time point is later than the current time, delete all historical data records.
1.3.5. Type words of instrument table
00:xmz 5000 0 1:XMT/xmb 5000 02:xmdi 5000
03:xms 5000 04:XML 6000 05:XMD5XX 16( 16)
06:xma 5000 07:xmh 5000 08:XML 5000(3)
09:xmj 5000 10:xmd5 xx08(8) 1 1:XM PHT/xmphb 5000
12:XMD5XX32(32) 13:xme 5000(3) 14:xmdo 5000
15:xmlh 5000(4+ 1) 16:XMD5XX24(24) 17:xmaf 5000(2)
18:xmc 5000(24) 19:xmb 8000(4)20:xmgb 5000
2 1:XMGB7000 (2)
30:xmg 5000 3 1:xmgi 5000 32:xmg 7000(2)
33:xmg 8000(3)34:xmhg 5000 35:xmga 5000/6000(4)
36:xmga F5/6/7000(4)37:xmra 5000/6000(5)38:xmraf 5000/6000(5)
39:xmpa 7000(5)40:xmpaf 7000(5)4 1:xmra 7000(6)
42:xmraf 7000(6)43:xmphga 5000/6000 44:XXS
45:xmrh 5000 46:DFD/DFQ/DFDA/dfdq 5000/dfqa 7000 47:dfqa 6000
50:xmpa 8000(7)5 1:xmpaf 8000(7)52:xmra 8000(8)
53:xmraf 8000(8)54:BBC 5000(7)55:phab 6000
58:xmry 5000/8000(4)59:xmy 5000/8000(4)
60:xmly 5000 6 1:xmly 6000 62:xmlry 5000/8000(4)
63:xmjy 5000/8000(4)64:xmjry 5000/8000(4)
1.3.6. Instrument scale number
00: 0 ~ 10 mA Linear 01:4 ~ 20mA Linear 02: 0 ~ 5 V Linear
03: 1 ~ 5V linear 04: 0 ~ 100 linear 05: 0 ~ 100 milliampere square root
06: 4 ~ 20ma root 07: 0 ~ 5v root 08: 1 ~ 5v root.
09: 0 ~ 100 root10: pt10011:pt100.0.
12:pt 10 13:Cu 100 14:Cu50
15:30 ~ 350ω 16:G53 17:ba 1
18:BA2 19:f 1 20:F2
2 1:B 22:R 23:S
24:N 25:K 26:E
27:J 28:T 29:NiCr-AuFe0.07
30: tungsten rhenium 3- tungsten rhenium 26 3 1: EA2 32: Eu2
33:0~60mV
1.3.7. Instrument parameter number
1.3.7. 1. Read-only parameter number
0 1: function code 02: comprehensive flow value 03: da 1 value.
04: da2 value 05: sp value 06: cumulative time
07: 08: 09: Read PV in batches.
10: read parameters in batch.
7 1: Read the address of the instrument connected to FCC.
72: Read the address of the faulty instrument connected to FCC.
73: Read the instantaneous value (PV) of the instrument connected to FCC.
74: Read the historical value of the instrument connected to FCC.
75: Re-read the historical values of instruments connected to FCC.
1.3.7.2. Reading and writing parameter number
1 1: index number 12: range zero 13: range full scale.
14: square small signal excision 15: DA 1 mode 16: DA2 mode.
17: alarm return difference 18: alarm value19; Alarm binary value
20: alarm ternary value 2 1: alarm quaternary value 22: alarm mode
23: Payment Screen 24: Decimal Point 25: Instrument Clock
26: Output Zero 27: Output Full Scale 28: Working Mode
29: di/do 30: communication given value
3 1: PID P value 32: PID I value 33: PID D value
34: PID upper limiter 35: PID lower limiter 36: PID safety valve position
37: PID change rate 38: PID SP0 value 39: PWM period
40: sp.xx (program starting point) 4 1: t.xx (program time) 42: start-stop program (0= start)
43: Manual automatic switching (0= automatic) 44: PID output value 45: boiler height zero.
46: boiler height fullness 47: operating coefficient K 48: operating small value cutting
49: valve travel time 50: valve adjustment dead zone
5 1: (the numerical range of air-coal ratio coefficient or air-oil ratio coefficient or air-gas ratio coefficient is 000. 1 ~ 9999)
52: (The furnace temperature T0 1 at 70% load ranges from 850 to 1050)
53: (T02 value range of furnace temperature at 20% load is 850 ~ 1050)
54: (oxygen content at 70% load: x 01; Numerical range: 1 ~ 10)
55: (The oxygen content X02 at 20% load ranges from 1 to 10)
56: (the value range of bed temperature adjustment coefficient Kt is 0 ~ 30)
57: (The value range of oxygen content adjustment coefficient Kx is 0 ~ 30)
58: Control Mode 59: Offset Value
60: local/remote given switch (0= local) 6 1: remote given coefficient K 62: remote given offset b.
63: sp.xx (gas separation starting point) 64: t.xx (gas separation time) 65: Select curve number.
66: BBC reserved 67: BBC reserved 68: BBC reserved
70: reading and writing FCC clock
76: Move the historical value time pointer of the instrument connected to FCC
128: parameter lock 129: parameter unlock 130: mailing address.
130: communication baud rate 13 1: old 1 value 132: new 1 value.
133: OID 2 value 134: new 2 value 135: calibrate the room temperature value.
136: calibration input zero 137: calibration input full scale 138: calibration output zero.
139: Calibration output full scale
2 instrument classification description
2. 1. 1.XMZ5000
Phenotypic word = 00
Number of channels = 0 1
Parameter number = 1 1 (parameter value range of index number 00 ~ 99)
Parameter number = 12 (range zero parameter value range -0 1999 ~ 15999 or -0 199.9 ~ 1599.9).
Or–019.99 ~159.99 or–01.999 ~15.999)
Parameter number = 13 (full-scale parameter range -0 1999 ~ 15999 or -0 199.9 ~ 1599.9).
Or–019.99 ~159.99 or–01.999 ~15.999)
Parameter number = 14 (the range of intersection parameters behind small signal is -0 1999 ~ 15999 or -0 199.9 ~ 1599.9).
Or–019.99 ~159.99 or–01.999 ~15.999)
Number of parameters = 24 (decimal parameters range from 00000 to 00003, 0= decimal point in one place, 1= decimal point in ten places, 2= decimal point in hundreds, 3= decimal point in thousands).