HI107355-310/20控制卡件
（字13-14）远程PLC-存储器起始地址：字13和14确定远程PLC中读取数据的起始地址。输入的值是从Word 12中指定的存储器类型和模式的PLC存储器开始的32位偏移量（从1开始）。字13包含偏移量的最低有效16位；字14包含偏移的最高有效16位。根据指定的模式，此偏移量将以位、字节或字为单位。有效值取决于远程PLC的内存范围。（字15）远程PLC-存储单元数：字15指定要传输的数据量。输入的值是要传输的存储器单元数，其中远程PLC存储器类型（位、字节或字）的大小在字12中指定。对于读取PLC内存，最大长度为11200位、1400字节或700字数据，或PLC中所选内存类型的可用内存量，以较小者为准。（字16）远程PLC-网络地址类型：字16指定远程PLC地址的格式。单词16必须包含值1。这表示使用每个十进制数字的单独寄存器表示的虚线十进制IP地址。（字17）远程PLC-网络地址长度：字17指定此COMMREQ命令块中远程PLC IP地址的字长度。单词17必须包含4。（字18-21）远程PLC-IP地址：字18-21指定要访问的远程PLC的虚线十进制IP地址的四个整数，每个字一个整数。PAC系统™ RX3i和RSTi EP TCP/IP以太网通信用户手册第6节GFK-2224Y 2019年8月编程EGD命令116 6.5.1.1 Word 9内存类型Word 9的可用有效值如下所示。要传输的数据量由从远程PLC读取的数据的存储单元的数量指定（字15）。类型值（十进制）描述%W 18 196字存储器（字模式）%R 8寄存器存储器（字模）%AI 10模拟输入存储器（字方式）%AQ 12模拟输出存储器（字式）%I 16 70离散输入存储器（字节方式）离散输入存储器存储器（位模式）%M 22 76离散瞬时内部存储器（字节模式）离散瞬时内部内存（位模式（位模式）%S 19 30 84离散系统内存（字节模式）离散系统内存。19只读存储器，无法写入。PACSystems™ RX3i和RSTi EP TCP/IP以太网通信用户手册第6节GFK-2224Y 2019年8月编程EGD命令117 6.6写入PLC存储器（4001）写入PLC存储器命令可用于将存储器位置写入一个远程PACSystems PLC。使用此命令不需要在PLC中配置生产/消耗交换。6.6.1写入PLC存储器命令块字偏移值描述字1命令数据块长度总是16字2 0总是0（无等待模式请求）字3（见第112页表格）COMMREQ状态字4的存储器类型0基于COMMREQ的状态字5 0保留字6 0保留字7 4001（fa1H）写入PLC存储器指令号。Word 8重试时间，以毫秒为单位命令传输重试之间的时间。默认值为1000ms。字9本地写入缓冲存储器类型本地PLC中要写入的数据的存储器类型。字10本地写入缓冲区引用表启动
(Words 13-14) Remote PLC - Memory Starting Address: Words 13 & 14 determine the starting address in the remote PLC from which the data is to be read. The value entered is the 32-bit offset (1-based) from the beginning of PLC memory for the memory type and mode specified in Word 12. Word 13 contains the least significant 16 bits of the offset; word 14 contains the most significant 16 bits of the offset. This offset will be either in bits, bytes, or words depending on the mode specified. Valid values depend on the remote PLC’s memory ranges. (Word 15) Remote PLC - Number of Memory Units: Word 15 specifies the amount of data to be transferred. The value entered is the number of memory units to be transferred, where the size of the remote PLC memory type (bit, byte, or word) is specified in Word 12. For Read PLC Memory, the maximum length is 11200 bits, 1400 bytes, or 700 words of data, or the amount of memory available in the PLC for the selected memory type, whichever is less. (Word 16) Remote PLC - Network Address Type: Word 16 specifies the format of the remote PLC address. Word 16 must contain the value 1. This indicates a dotted-decimal IP address expressed using a separate register for each decimal digit. (Word 17) Remote PLC -Network Address Length: Word 17 specifies the length in words of the remote PLC IP address in this COMMREQ Command Block. Word 17 must contain 4. (Words 18-21) Remote PLC - IP Address: Words 18 – 21 specify the four integers, one integer per word, of the dotted-decimal IP address of the remote PLC to be accessed. PACSystems™ RX3i and RSTi-EP TCP/IP Ethernet Communications User Manual Section 6 GFK-2224Y August 2019 Programming EGD Commands 116 6.5.1.1 Word 9 Memory Types Available Valid values for Word 9 are listed below. The amount of data to be transferred is specified by the number of memory units of the data read from the remote PLC (Word 15). Type Value (Decimal) Description %W 18 196 Word memory (word mode) %R 8 Register memory (word mode) %AI 10 Analog input memory (word mode) %AQ 12 Analog output memory (word mode) %I 16 70 Discrete input memory (byte mode) Discrete input memory (bit mode) %Q 18 72 Discrete output memory (byte mode) Discrete output memory (bit mode) %T 20 74 Discrete temporary memory (byte mode) Discrete temporary memory (bit mode) %M 22 76 Discrete momentary internal memory (byte mode) Discrete momentary internal memory (bit mode) %SA 24 78 Discrete system memory group A (byte mode) Discrete system memory group A (bit mode) %SB 26 80 Discrete system memory group B (byte mode) Discrete system memory group B (bit mode) %SC 28 82 Discrete system memory group C (byte mode) Discrete system memory group C (bit mode) %S 19 30 84 Discrete system memory (byte mode) Discrete system memory (bit mode) %G 56 86 Discrete global data table (byte mode) Discrete global data table (bit mode) 18 %W memory is supported on PACSystems clients and servers only. 19 Read-only memory, cannot be written to. PACSystems™ RX3i and RSTi-EP TCP/IP Ethernet Communications User Manual Section 6 GFK-2224Y August 2019 Programming EGD Commands 117 6.6 Write PLC Memory (4001) The Write PLC Memory command can be used to write memory locations to one remote PACSystems PLC. Use of this command does not require a configured produced / consumed exchange in the PLCs. 6.6.1 Write PLC Memory Command Block Word Offset Value Description Word 1 Length of command data block Always 16 Word 2 0 Always 0 (no-wait mode request) Word 3 (See table on page 112) Memory type of COMMREQ Status Word Word 4 0-based Offset of COMMREQ Status Word Word 5 0 Reserved Word 6 0 Reserved Word 7 4001 (fa1H) Write PLC Memory command number. Word 8 Retry time, in milliseconds The time between retries of command transfers. Default is 1000ms. Word 9 Local write buffer memory type Memory type for the data that will be written, in the local PLC. Word 10 Local write buffer reference table starting
