RTU560

Remote Terminal Unit

Subdevice Communication Interface

with Modbus Protocol

Contents: This manual gives an overview of the RTU560

Subdevice Communication Interface with the Modbus
protocol
RTU560 Subdevice Communication Interface Modbus Revision

Revision

Document identity: 1KGT 150 486 V013 1

Revision: 0 Date: 05/2001

Revision: 1 Date: 2001-08-17

- Transmission settings introduced
- Text of address-parameter changed
- Explanations for address parameter added
- Additional data type parameter changed
- Interoperability list updated
- RCO added
Date: 2001-10-05
- Scaling of ASO and DSO added
- Parameter Block start changed into Query range
- Query auto-packing mode introduced

Revision: 2 Date: 2002-03-14

Revision: 3 Date: 2002-06-11

- Chapter 1.1 updated
- Range of STI corrected

Revision: 4 Date: 2004-07-13

- New data type MFI introduced
(Transmitted in 2 consecutive Modbus register)
Available with FW Release 6.1

Revision: 5 Date: 2004-11-15

Chapter 2 Link Layer, UART-Mode corrected

Revision: 6 Date: 2005-02-02

Query auto-packing Mode explained
Revision: 7 Date: 2007-06-05
Expansion new, chapter: Modbus TCP/IP based
communication
Threshold supervision for MFI’s added
(Available with FW Release 8.1 Build 0)
Revision: 8 Date: 2008-03-18
Chapter 6.1 Value of Force Single Coil corrected
Revision: 9 Date: 2009-06-22
Deadband/Value Range MFI corrected
Transparent Data Telegrams added
Chapter ‘Physical Layer’ extended.

ABB AG 1KGT 150 486 V013 1 iii

Revision RTU560 Subdevice Communication Interface Modbus

Revision: 10 Date: 2009-07-14

Added parameter format at data type ITI
Chapter time synchronization extended
Chapter Event handling added
Added parameters for time synchronization and event
handling

Revision: 11 Date: 2010-02-01

Transparent data channel included
Chapter physical layer updated
Value range ITI and BSI corrected

Revision: 12 Date: 2010-05-31

Added/changed parameter value format for data types
BSI, ITI, AMI and MFI

Revision: 13 Date: 2011-05-30

Included FSO data type
Added Command handling for ABB SACE devices
Corrected unipolar and bipoloar DMI and AMI value
ranges.
Configurable bitposition for SPI and DPI

We reserve all rights in this document and in the information contained therein.
Reproduction, use or disclosure to third parties without express authority is strictly
forbidden.

© Copyright 2011 ABB AG

iv 1KGT 150 486 V013 1 ABB AG

RTU560 Subdevice Communication Interface Modbus Abbreviations

Contents

SUBDEVICE COMMUNICATION INTERFACE WITH MODBUS

PROTOCOL................................................................................................ I

REVISION ................................................................................................. III

CONTENTS ...............................................................................................V

ABBREVIATIONS.....................................................................................IX

INTRODUCTION.......................................................................................XI
Preface ...................................................................................................................xi
References .............................................................................................................xi
Conventions............................................................................................................xi

1 PHYSICAL LAYER ..........................................................................1-1

1.1 General Information.................................................................................... 1-1
1.2 Serial based Communication ...................................................................... 1-1
1.3 IP- based Communication .......................................................................... 1-2

2 LINK LAYER ....................................................................................2-1

2.1 General ...................................................................................................... 2-1
2.2 Serial Communication ................................................................................ 2-1
2.2.1 Check of Link................................................................................. 2-3
2.2.2 Station Specific Items.................................................................... 2-4
2.2.3 Response Times............................................................................ 2-4
2.3 Ethernet Communication ............................................................................ 2-5
2.3.1 Ethernet Link ................................................................................. 2-5
2.3.2 Station Specific Items.................................................................... 2-6
2.4 Monitoring Direction.................................................................................... 2-7
2.5 Command Direction.................................................................................... 2-7
2.6 Restrictions................................................................................................. 2-7

3 APPLICATION LAYER ....................................................................3-1

4 ADDRESSING..................................................................................4-1

5 DATA TYPES – MONITORING DIRECTION ...................................5-1

5.1 SPI – Single Point Information.................................................................... 5-1
5.2 DPI – Double Point Information .................................................................. 5-3
5.3 EPI – Protection Event Information............................................................. 5-4

ABB AG 1KGT 150 486 V013 1 v

Abbreviations RTU560 Subdevice Communication Interface Modbus

5.4 STI – Step Position Information .................................................................. 5-4

5.5 BSI – Bit String Information ........................................................................ 5-5
5.6 ITI – Integrated Totals Information.............................................................. 5-7
5.7 DMI – Digital Measured Information............................................................ 5-9
5.8 AMI – Analogue Measured Information......................................................5-11
5.9 MFI – Measured Float Information.............................................................5-13

6 DATA TYPES – CONTROL DIRECTION ........................................6-1

6.1 SCO – Single Command Output................................................................. 6-1
6.2 DCO – Double Command Output ............................................................... 6-3
6.3 RCO – Regulation Command Output.......................................................... 6-5
6.4 ASO – Analog Setpoint Output ................................................................... 6-7
6.5 DSO – Digital Setpoint Output .................................................................... 6-9
6.6 BSO – Bit String Output.............................................................................6-11
6.7 FSO – Floating point Setpoint Output ........................................................6-12

7 TRANSPARENT DATA MESSAGES...............................................7-1

7.1 Modbus ASCII Mode................................................................................... 7-1
7.2 Modbus RTU Mode..................................................................................... 7-1
7.3 Modbus TCP/IP .......................................................................................... 7-2
7.4 Configuration.............................................................................................. 7-3

8 FILE TRANSFER .............................................................................8-1

9 INTERNAL FUNCTIONS .................................................................9-1

9.1 General Interrogation.................................................................................. 9-1
9.2 Time Synchronization ................................................................................. 9-1
9.2.1 Sepam........................................................................................... 9-1
9.2.2 MiCOM .......................................................................................... 9-2
9.2.3 REF 542+ ...................................................................................... 9-3
9.3 Event handling ........................................................................................... 9-5
9.3.1 General ......................................................................................... 9-5
9.3.2 Sepam........................................................................................... 9-5
9.3.3 MiCOM .......................................................................................... 9-6
9.3.4 REF 542+ ...................................................................................... 9-7
9.4 System Events ........................................................................................... 9-9
9.4.1 Change Offline to Online ............................................................... 9-9
9.4.2 Change Online to Offline ............................................................... 9-9

10 INTEROPERABILITY LIST ..........................................................10-10

10.1 Network Configuration .............................................................................10-11
10.2 Physical Layer .........................................................................................10-11
10.2.2 Transmission Speed ...................................................................10-11
10.2.3 Transmission Settings (only serial)..............................................10-11
10.3 Link Layer................................................................................................10-12
10.4 Application Layer.....................................................................................10-12

vi 1KGT 150 486 V013 1 ABB AG

 10.4.1 Function Codes...........................................................................10-12
10.4.2 Basic Application Functions ........................................................10-13

ABB AG 1KGT 150 486 V013 1 vii

RTU560 Subdevice Communication Interface Modbus Abbreviations

Abbreviations
CMU Communication and Data Processing Unit

AMI Analog Measured value Input

ASO Analog Setpoint command Output

BCU Bus Connection Unit

BSI Bit String Input (8, 16 bit)

CS Control System

CSC Command Supervision Channel

CS-Command Clock Synch Command

DCO Double Command Output

DMI Digital Measured value Input (8, 16 bit)

DPI Double Point Input

DSO Digital Setpoint command Output (8, 16 bit)

EPI Event of Protection equipment Input (1bit)

GCD General Configuration Data

HCI Host Communication Interface

IED Intelligent Electronic Device

IOC I/O Controller (Controller on I/O Board)

IOD Input Output Data

IOM I/O Bus Master (Function of SLC)

ITI Integrated Totals Input

MFI Analog Measured value Floating Input

MPU Main Processing Unit

NCC Network Control Center

PB Peripheral Bus

ABB AG 1KGT 150 486 V013 1 ix

Abbreviations RTU560 Subdevice Communication Interface Modbus

PBP Peripheral Bus Processor

PDP Process Data Processing

PLC Programmable Logic Control

PPP Point to Point Protocol

PSU Power Supply Unit

RCE Read and Clear of extended Events

RCO Regulation step Command Output

RTC Real Time Clock

SBO Select before Operate

SCADA Supervision, Control and Data Acquisition

SCI Sub-Device Communication Interface

SCO Single Command Output

SEV System Events

SLC Serial Line Controller

SOC Strobe Output Channel

SPI Single Point Input

STI Step position Input (8 bit)

TSI Time Synch Input

TSO Time Synch Output

x 1KGT 150 486 V013 1 ABB AG

RTU560 Subdevice Communication Interface Modbus Introduction

Introduction

Preface
This document describes the functions of the subdevice interface in RTU560 according
to Modbus communication protocol for serial line, and Ethernet based communication.

References
[1] Modicon
Modbus Protocol Reference Guide Revision Y June 1996

[2] Modicon
Modbus Application Protocol Specification Version 1.1a June 2004

[3] Modicon
Modbus Messaging on TCP/IP Guideline Version 1.0a June 2004

[4] Jbus / Sepam

Protection and control - Sepam 2000 - Jbus / Modbus communication
3140751A-G, December 1999, Schneider Electric

[5] MiCOM
MiCOM P127 Dierctional / Non-Directional Overcurrent & Earth Fault Relay
Technical Instructions, Alstom

[6] REF 542plus

Modbus RTU REF 542plus, Technical Reference, 1MRS755868, 2006, ABB Oy

[7] Interfaces and Protocols

ABB AG, 1KGT 150 714

[8] Instruction manual for ABB SACE devices

PR122-3/P + PR120/D-M
PR332-3/P + PR330/D-M
PR222DS/PD
PR223EF
PR223DS

Conventions
The Modbus communication protocol as described in Modicon’s documentation is called
Modbus or Modbus protocol in this document. This convention encloses Modbus TCP.

In this document function codes of data types according to the Modbus protocol are put
in angle brackets:

<Function code>

ABB AG 1KGT 150 486 V013 1 xi

Introduction RTU560 Subdevice Communication Interface Modbus

Italic fonts with the heading Parameter are references to configuration parameter in
RTUtil560. The parameter is followed by definitions in parentheses indicating where this
parameter can be found in RTUtil560.

Example:

Parameter: Link address (RTU560 – line parameter)

In this document references to elements of the Modbus protocol reference guide will be
printed bold and put in brackets: [1]

The tables in the next chapters include lists of functions, options and message types
supported according to the protocol structure given in IEC 60870-5 (EPA three-layer
model) for
the physical layer
the link layer
the application layer
This layered model does not exactly apply to the protocol [2], but is adapted to the
current structure of the subdevice communication interface of RTU560.

xii 1KGT 150 486 V013 1 ABB AG

 1 Physical Layer

1.1 General Information

The protocol ‘Modbus serial’ is a serial protocol, running on a serial communication line
of a communication unit (CMU). For the protocol ‘Modbus TCP/IP’ a communication unit
(CMU) with Ethernet Interface(s) is needed. For more details see the documentation [7]

1.2 Serial based Communication

In case of using a serial interface without RS485 mode, an external electrical conversion
is necessary, e.g. by using 23OK24-board.

For optical interfaces opto-electrical conversion is needed. In this case fiber optic coupler
23OK24 is recommended. If more than one IED should be connected, 23OK24-fibre
optic couplers can be configured as star.

For possible connection diagrams see description ‘RTU560 - 23OK24 Connections and
settings’ (1KGT150 568).

Communication settings according to Table 1-1.

Options / Parameter Range of Values / Explanations Default
Interface type See [7]
Baud rate 50, 75, 100, 110, 200, 300, 600, 1200, 1500, 9600
2400, 4800, 9600, 19200, 38400
Modem control - depends on the interface type used -
Transmit delay time Enabled / Disabled Disabled
If enabled:
1 ... 10000 milliseconds 30
Delay before transmitting information.
Only available with specific modem controls.
Dial-up connection - Not supported -

Table 1-1: Communication settings

ABB AG 1KGT 150 486 V013 1 1-1

Physical Layer RTU560 Subdevice Communication Interface Modbus

1.3 IP- based Communication

For the master, the subdevice communication interface, there are 3 parameter available
which are used for all stations on the line.

Option / Parameters Range of Values / Explanations

IP Address [Link] .. [Link]
IP address of the RTU560

Subnet Mask [Link] .. [Link]

Mask for specification of the own network

Default Gateway [Link] .. [Link]

IP address of the gateway for IP addresses not in the own
network.

Table 1-2: Line Parameter of the subdevice communication interface

Using the IP- based communication the master (subdevice communication interface)
tries to connect a slave with a given IP address and port number. The slave (subdevice)
should be prepared to accept a connection on the given port. If a connection is
established the connection will be maintained until an error occurs. If the master
recognizes an error it will close the active connection and tries to establish a new one.

The parameter IP address and port number used for this connection type can be
specified for each station on a line

The maximum number of substations per line is 32.

Option / Parameters Range of Values / Explanations

IP Address [Link] .. [Link]
IP address of the substation

Port Number 0 .. 65535

Port number of the substation

Table 1-3: Station Parameter for TCP/IP connections

1-2 1KGT 150 486 V013 1 ABB AG

 2 Link Layer

2.1 General

Modbus does not define a Link Layer, but the Link Layer depends on the different
implementations of the protocol. Therefore, a separated description of this Layer is given
for serial- and IP-based communication.

2.2 Serial Communication

For serial communication only global parameters have to be configured for the
communication lines.

These parameters could be configured in the line folder of RTUtil560 separately for
every line. Parameter: General parameter (RTU560 – General parameter)

Communication primitives like the framing of messages and parity checks are handled
by the telecontrol protocol. Data polling and retransmissions are handled by the
subdevice communication interface of RTU560. These tasks are executed in the link
layer that connects RTUs and Modbus-IEDs.

The selectable parameters have to be calculated regarding the real communication

technology.

Options / Parameter Range of Values / Explanations Default

Modbus mode RTU / ASCII RTU
UART mode 1 stop bit, even parity 1 stop bit,
1 stop bit, odd parity even parity
1 stop bit, no parity
2 stop bits, no parity (CP1 / CP2 only)
Offline cycle time 0 ... 255 sec 5
Time, a slave device offline marked is not polled.
Communication retries 0 ... 255 3
Maximum number of queries before a subdevice
is marked “Offline”
Timeout acknowledgement 10 ... 65535 ms 1000
Within this timeout time a response of a query
has to be received, otherwise the query is
repeated
Time interval of clock Enabled / disabled Disabled
synchronization commands This parameter enables / disables the
mechanism of time synchronization for all IEDs
on this line
If enabled: 60 s
1 …300 s
Interval the IEDs on this line are time
synchronized
Table 2-1: Line parameter – Modbus

ABB AG 1KGT 150 486 V013 1 2-1

Link Layer RTU560 Subdevice Communication Interface Modbus

2-2 1KGT 150 486 V013 1 ABB AG

RTU560 Subdevice Communication Interface Modbus Link Layer

ASCII mode
1 start-bit, 7 data bits, 1/2 stop bit(s) and 1 parity bit (even / odd) or no
parity.

RTU mode
1 start-bit, 8 data bits, 1/2 stop bit(s) and 1 parity bit (even / odd) or no
parity.

The difference between these two framing modes, is that in the RTU mode 8 bits are
represented by one 8-bit character and in the ASCII mode by two 7-bit ASCII character.
The start characters and error checking are different in both modes as described in [1].

2.2.1 Check of Link

Modbus does not support a defined link handling. Therefore the link is checked by
sending a query for a configured data point. If query auto-packing mode is enabled, only
the data point with the lowest function code and the lowest address index of a
slave/server device is polled. Otherwise if disabled, the complete query range configured
for that data point is polled.
If a response is received, the slave device is marked online and all data points of this
slave device will be polled in the next polling cycle.

ABB AG 1KGT 150 486 V013 1 2-3

Link Layer RTU560 Subdevice Communication Interface Modbus

2.2.2 Station Specific Items

These parameters can be configured in the IED folder of RTUtil560 separately for each
IED.

Options / Parameter Range of Values / Explanations Default

Slave address Integer Range 1 ... 255 1
Modbus slave address for RTU560

Parameter: Slave address

(IED Parameter Modbus)
Query auto-packing mode Enabled / disabled Enabled
If query auto-packing mode is enabled,
registers with the same function code will be
queried within one query, if there is no gap in
their address index.
The address parameter query range is not used
if the query auto-packing mode is enabled.
Maximum size of a packed query is 20
registers in one query.

Parameter: Query auto-packing mode

(IED parameter – Modbus)
Type Generic device / Sepam / MiCOM / REF542+ Generic
This parameter describes the device type, device/ ABB
according to it the methods of time SACE devices
synchronization and event handling are chosen (no time sync
Parameter: Type and event
(IED parameter – Modbus) handling)

Restrictions for slave address:

Slave address 0 is reserved for broadcast.

2.2.3 Response Times

Because of the fact that all data of Modbus devices is polled, the response time of data
changes in a slave device depends on the following factors:
Value of offline cycle
Value of communication retries
Transmission rate
Framing type
Number of slave devices on physical link
Number of configured data to poll per physical link

2-4 1KGT 150 486 V013 1 ABB AG

RTU560 Subdevice Communication Interface Modbus Link Layer

2.3 Ethernet Communication

The IP-based communication is based in part upon reference RFC1122. One of the main
functions of the messaging service is to manage communication establishment and
ending, and to manage the data flow on established TCP connections.

No communication parameters are required for this implementation since the TCP/IP
stack is responsible of the management of communication. (speed, duplex, time-to-live,
number of hops, time-outs, window-size, three-way-handshaking, etc).

Options / Parameter Range of Values / Explanations Default

Time interval of clock Enabled / disabled Disabled
synchronization commands This parameter enables / disables the
mechanism of time synchronization for all
IEDs on this line
If enabled: 60 s
1 …300 s
Interval the IEDs on this line are time
synchronized

2.3.1 Ethernet Link

The Link in Ethernet communication is based on the TCP/IP stack. Once the stack
connects a target device, the connection is monitored by the stack and remains
connected until a reset or a close request is received.

In Ethernet networks the time of a reset could take up to 2 hours. Therefore the activity
sends permanent queries in order to monitor the connection with the device.

ABB AG 1KGT 150 486 V013 1 2-5

Link Layer RTU560 Subdevice Communication Interface Modbus

2.3.2 Station Specific Items

These parameters can be configured in the IED folder of RTUtil560 separately for each
IED.

Options / Parameter Range of Values / Explanations Default

IP Address String Range [Link] to [Link] -
Modbus IP address for RTU560

Parameter:
IP address (IED Parameter Modbus)
TCP Port: Integer Range 0…65535 502
Destination TCP Port Number to connect
Modbus Server.

Parameter: TCP Port

Size of Tx Buffer Integer Range 1…16 5
Quantity of queries allowed to transmit without
waiting for a response.

Parameter: Size of Tx Buffer

Cycle Time Integer Range 1….500 10
Polling time to request monitoring information
in steps of 10 ms.

Parameter: Cycle Time

Timeout Integer Range 1…50 10
Time (in seconds) before a query that has not
been replied is discarded

Parameter: Timeout
Query auto-packing mode Enabled / disabled Enabled
See serial mode
Type Generic device / Sepam /MiCOM / REF542+/ Generic
This parameter describes the device type, device/ ABB
according to it the methods of time SACE devices
synchronization and event handling are chosen (no time sync
and event
Parameter: Type handling)

Sepam: The Jbus protocol used by Sepam 2000 devices (Schneider electric) is a
compatible sub-group of the Modbus protocol. [4]
MiCOM: The MiCOM devices (Alstom) are using the standard MODBUS
implementation
REF542+: The REF 542+ devices are using the standard MODBUS implementation
ABB SACE devices: The ABB SACE devices such as
PR12x/33x/222DS/223DS/223EF are using the standard MODBUS implementation.

2-6 1KGT 150 486 V013 1 ABB AG

RTU560 Subdevice Communication Interface Modbus Link Layer

2.4 Monitoring Direction

All data in monitoring direction is polled by the subdevice communication interface.

2.5 Command Direction

Data in command direction is written directly into the registers or coils of the slave
devices.

Modbus does not support select before operate mechanisms, therefore this is handled in
the subdevice communication interface. If a select command is received, the subdevice
communication interface will check, if the corresponding slave device is offline or online
and select will be confirmed according to the result of this check, negative or positive.
The following execute command will be sent directly to the slave device.

2.6 Restrictions

A maximum number of 32 slave devices are supported per line.

ABB AG 1KGT 150 486 V013 1 2-7

 3 Application Layer

Overview of function codes of the application layer defined in [1].

The column RTU560 Type shows the type of data which can be configured in RTUtil560.

Table of function codes in monitoring direction

Function Description RTU560 Type
Code
01 Read Coil Status SPI
02 Read Input status
03 Read Holding Register DPI, ITI, STI, DMI8/16,
04 Read Input registers BSI8/16/32, AMI, MFI

Table of function codes in control direction

Functio Description RTU560 Type
n Code
05 Force Single Coil SCO
06 Preset Single Register DCO, RCO, ASO,
DSO8/16, BSO1/2/8/16

ABB AG 1KGT 150 486 V013 1 3-1

 4 Addressing

Selection according to [1][2]. The sizes of the addressing fields are fixed.

Options / Parameter Range of Values / Explanations

Function code Integer Range: 1 ... 255

Modbus function code

Parameter:
Function code (Data point parameter – Modbus)
Index Integer Range: 0 ... 65535

Address index of Modbus.

The index can be identical for different function codes.

Parameter:
Index (Data point parameter – Modbus)
Query range Integer Range: 1 ... 32

Note:
This parameter will be ignored, if the IED-parameter query auto-
packing mode is enabled (see chapter 2.3).

1 ... 20: Range of registers requested in one query

started with this index.
If two ranges overlap, the range of the one started first
will be decreased.

Parameter:
Query range (Data point parameter – Modbus)

Table 4-1: General parameter

Restrictions for function code:

Only function codes listed in Chapter 3 are supported.

Restrictions for Index:

The register index of every function code starts with 0.

Restrictions for query range:

A value of 16 is recommended.

ABB AG 1KGT 150 486 V013 1 4-1

 5 Data Types – Monitoring Direction

5.1 SPI – Single Point Information

Binary process information indicated by one bit.

Supported <01> Read Coil Status

function codes <02> Read Input Status

<03> Read Holding Registers

<04> Read Input Registers

Parameter:
Function Code (SPI - Protocol address and parameter)
Index (SPI - Protocol address and parameter)
Query Range (SPI - Protocol address and parameter)
(if auto-packing mode is disabled)

Bit Position (SPI - Protocol address and parameter)

Additional Bit position range from 0 to 15

Combination of function code, index and bit position should be

unique

Event messages with time tag see chapter 9

Conversion of value
RTU560 internal communication Protocol-specific
Off 0
On 1

Conversion of quality descriptors

RTU560 internal communication Protocol-specific
BL Blocked -
SB Substituted -
NT Not Topical -
IV Invalid Exception response (all codes)
TIV Time invalid -

Conversion of cause of transmission

RTU560 internal communication Protocol-specific
T Test -

ABB AG 1KGT 150 486 V013 1 5-1

Data Types – Monitoring Direction RTU560 Subdevice Communication Interface Modbus

P/N Positive/negative confirmation - Irrelevant -

Cause Spontaneous Received query response
Interrogated -

5-2 1KGT 150 486 V013 1 ABB AG

RTU560 Subdevice Communication Interface Modbus Data Types – Monitoring Direction

5.2 DPI – Double Point Information

Binary process information indicated by two bits.

Supported <03> Read Holding Registers

function codes <04> Read Input Registers

Parameter:
Function Code (DPI - Protocol address and parameter)
Index (DPI - Protocol address and parameter)
Query Range (DPI - Protocol address and parameter)
(if auto-packing mode is disabled)

Bit Position (DPI - Protocol address and parameter)

Additional Bit position range from 0 to 14

Combination of function code, index and bit position should be

unique

Event messages with time tag see chapter 9

Conversion of value
RTU560 internal communication Protocol-specific
intermediate 00
off 01
on 10
indeterminate 11

Conversion of quality descriptors

RTU560 internal communication Protocol-specific
BL Blocked -
SB Substituted -
NT Not Topical -
IV Invalid Exception response (all codes)
TIV Time invalid -

Conversion of cause of transmission

RTU560 internal communication Protocol-specific
T Test -
P/N Positive/negative confirmation - Irrelevant -
Cause Spontaneous Received query response
Interrogated -

ABB AG 1KGT 150 486 V013 1 5-3

Data Types – Monitoring Direction RTU560 Subdevice Communication Interface Modbus

5.3 EPI – Protection Event Information

Binary process information indicated by two bits and a relative time tag (used by
protection relays). EPI is not supported.

5.4 STI – Step Position Information

Binary process information indicated by 8 bits.

Supported <03> Read Holding Registers

function codes <04> Read Input Registers

Parameter:
Function Code (STI - Protocol address and parameter)
Index (STI - Protocol address and parameter)
Query Range (STI - Protocol address and parameter)
(if auto-packing mode is disabled)

Additional None

Conversion of value
RTU560 internal communication Protocol-specific
Range min. -63 -63
... ...
Range max. +63 +63

Conversion of quality descriptors

RTU560 internal communication Protocol-specific
OV Overflow -
BL Blocked -
SB Substituted -
NT Not Topical -
IV Invalid Exception response (all codes)
T Transient Bit -
TIV Time invalid -

Conversion of cause of transmission

RTU560 internal communication Protocol-specific
T Test -
P/N Positive/negative confirmation - Irrelevant -
Cause Spontaneous Received query response
Requested -
Interrogated -

5-4 1KGT 150 486 V013 1 ABB AG

RTU560 Subdevice Communication Interface Modbus Data Types – Monitoring Direction

5.5 BSI – Bit String Information

Binary process information indicated by 8, 16 or 32 bits.

Supported <03> Read Holding Registers

function codes <04> Read Input Registers

Parameter:
Function Code (BSI - Protocol address and parameter)
Index (BSI - Protocol address and parameter)
Query Range (BSI - Protocol address and parameter)
(if auto-packing mode is disabled)

BSI32 only:
The parameter ‘Query Range’ (see also chapter 4) is automatically
set to min. ‘2’

Additional BSI8 only:

Position
- Low: Low Byte of register is value

- High: High Byte of register is value

BSI32 only:
The 32 bit value is transmitted in two consecutive registers

Value format
-32 bit binary value (High word in first register)
Range: 0 – 4294967295

-32 bit binary value (High word in second register)

Range: 0 – 4294967295

Parameter:
Sub parameters (BSI - Protocol address and parameter)

Conversion of value
RTU560 internal communication Protocol-specific
Range min. 0 0
... ...
Range max. BSI08: Bit mask of 8 bits; 255
range ... 255
BSI16: Bit mask of 16 bits; 65.535
range ... 65.535
BSI32: Bit mask of 32 bits, [Link]
range … [Link]

Conversion of quality descriptors

RTU560 internal communication Protocol-specific
OV Overflow -

ABB AG 1KGT 150 486 V013 1 5-5

Data Types – Monitoring Direction RTU560 Subdevice Communication Interface Modbus

BL Blocked -
SB Substituted -
NT Not Topical -
IV Invalid Exception response (all codes)
TIV Time invalid -

Conversion of cause of transmission

RTU560 internal communication Protocol-specific
T Test -
P/N Positive/negative confirmation - Irrelevant -
Cause Spontaneous Received query response
Requested -
Interrogated -

5-6 1KGT 150 486 V013 1 ABB AG

RTU560 Subdevice Communication Interface Modbus Data Types – Monitoring Direction

5.6 ITI – Integrated Totals Information

Binary process information indicated by 32 bits as a count value.

Supported <03> Read Holding Registers

function codes <04> Read Input Registers

Parameter:
Function Code (ITI - Protocol address and parameter)
Index (ITI - Protocol address and parameter)
Query Range (ITI - Protocol address and parameter)
(if auto-packing mode is disabled)
ITI (32bit only):
The parameter ‘Query Range’ (see also chapter 4) is automatically
set to min. ‘2’

Additional Value format

- 16 bit unsigned int value
Range: 0 - 65535

- 32 bit unsigned int (High word in first register)

Range: 0 – 2147483647

- 32 bit unsigned int (High word in second register)

Range: 0 - 2147483647

- 32 bit signed int (High word in first register)

Range: -2147483647 +2147483647

- 32 bit signed int (High word in second register)

Range: -2147483647 +2147483647

Parameter:
Sub parameters (ITI - Protocol address and parameter)

Conversion of value
RTU560 internal communication Protocol-specific
Range min. 0 (16/31 bit unsigned) 0
-[Link] (32 bit signed) -[Link]
... ...
Range max. +65.535 (16 bit unsigned) +65.535
+2. 147.483.647 +[Link]
(31 bit unsigned, 32 signed)

Conversion of quality descriptors

RTU560 internal communication Protocol-specific
SEQ Sequence number -
CY Carry -
CA Adjusted -
IV Invalid Exception response (all codes)

ABB AG 1KGT 150 486 V013 1 5-7

Data Types – Monitoring Direction RTU560 Subdevice Communication Interface Modbus

TIV Time invalid -

Conversion of cause of transmission

RTU560 internal communication Protocol-specific
T Test -
P/N Positive/negative confirmation - Irrelevant -
Cause Spontaneous Received query response
Requested -
Interrogated -

5-8 1KGT 150 486 V013 1 ABB AG

RTU560 Subdevice Communication Interface Modbus Data Types – Monitoring Direction

5.7 DMI – Digital Measured Information

Binary process information indicated by 8 or 16 bits used as a measured value from the
digital inputs in normalized format.

Supported <03> Read Holding Registers

function codes <04> Read Input Registers

Parameter:
Function Code (DMI - Protocol address and parameter)
Index (DMI - Protocol address and parameter)
Query Range (DMI - Protocol address and parameter)

Value type Signed normalized (F16)

Additional Maximum value

Range (8 bit): 0 … 255 (unipolar)

-128 … 127 (bipolar)

Range (16 bit): 0 … 65535 (unipolar)

-32768 … 32767 (bipolar)

Note:
Value 32767 (8 bit: 255) unipolar means that the value is
expected to be in normalized format without scaling (see
value range above).

All other values outside the ranges will be marked as invalid.

Measurand value Unipolar / Bipolar

Position (DMI8 only) Low: Low: Byte of register is value

High: High Byte of register is value

Parameter:
Sub parameters (DMI - Protocol Address and Parameter)

Conversion of value
RTU560 internal communication Protocol-specific
Range min. -100% -32.768
... ...
Range max. +100% +32.767

Conversion of quality descriptors

RTU560 internal communication Protocol-specific
OV Overflow -

ABB AG 1KGT 150 486 V013 1 5-9

Data Types – Monitoring Direction RTU560 Subdevice Communication Interface Modbus

BL Blocked -
SB Substituted -
NT Not Topical -
IV Invalid Exception Response (all Codes)
TIV Time invalid -

Conversion of cause of transmission

RTU560 internal communication Protocol-specific
T Test -
P/N Positive/negative confirmation - Irrelevant -
Cause Spontaneous Received query response
Requested -
Interrogated -

5-10 1KGT 150 486 V013 1 ABB AG

RTU560 Subdevice Communication Interface Modbus Data Types – Monitoring Direction

5.8 AMI – Analogue Measured Information

Analogue process information used as a measured value from the analog inputs in
normalized or scaled format.

Supported <03> Read Holding Registers

function codes <04> Read Input Registers

Parameter:
Function Code (AMI - Protocol address and parameter)
Index (AMI - Protocol address and parameter)
Query Range (AMI - Protocol address and parameter)
(if auto-packing mode is disabled)

Value type Signed normalized (F16)

Additional Maximum value

Range (16 bit): 0 … 65535 (unipolar)
-32768 … 32767 (bipolar)

Range (32 bit): 0 ... 2147483647 (unipolar)

-2147483648 … 2147483647 (bipolar)

Note:
Value 32767 (32 bit: 2147483647) means that the value is
expected to be in normalized format without scaling (see
value range above).

All other values outside the ranges will be marked as

invalid.

Measurand value unipolar / bipolar

Threshold supervision Yes / No

Threshold supervision type Integrated / Absolute

Deadband in % 0 ... 100%

Deadband value for threshold
supervision
Note:
0 means that every change is
transmitted

Value format
- 16 bit scaled value
Range: 0 - 65535

- 32 bit scaled value (High word in first register)

Range: 0 – 4294967295

- 32 bit scaled value (High word in second register)

ABB AG 1KGT 150 486 V013 1 5-11

Data Types – Monitoring Direction RTU560 Subdevice Communication Interface Modbus

Range: 0 - 4294967295

- 32 bit floating value (High word in first register)

Range: -3,4 1038 ... +3,4 1038

- 32 bit floating value (High word in second register)

Range: -3,4 1038 ... +3,4 1038

Parameter:
Sub parameters (AMI - Protocol Address and Parameter)

Conversion of value
RTU560 internal communication Protocol-specific
Range min. -100% - Max. Value +1
... ...
Range max. +100% + Max. Value

Conversion of quality descriptors

RTU560 internal communication Protocol-specific
OV Overflow -
BL Blocked -
SB Substituted -
NT Not Topical -
IV Invalid Exception response (all codes)
TIV Time invalid -

Conversion of cause of transmission

RTU560 internal communication Protocol-specific
T Test -
P/N Positive/negative confirmation - Irrelevant -
Cause Periodic / Cyclic -
Spontaneous Received query response
Requested -
Interrogated -

5-12 1KGT 150 486 V013 1 ABB AG

RTU560 Subdevice Communication Interface Modbus Data Types – Monitoring Direction

5.9 MFI – Measured Float Information

32 bit analog process information used as a measured value in float format

Supported <03> Read Holding Registers

function codes <04> Read Input Registers

Parameter:
Function Code (MFI - Protocol address and parameter)
Index (MFI - Protocol address and parameter)
Query Range (MFI - Protocol address and parameter)
(if auto-packing mode is disabled)

The Query Range (see also chapter 4) is automatically set to ‚2’ by

RTU560 firmware.

Value type R32-IEEE STD 754; range –3,4 1038 ... +3,4 1038

Additional Threshold supervision Yes / No

Threshold supervision type Integrated / absolute

Deadband 0 .. +3,4 1038

Note:
0 means that every change is
transmitted

Remarks The 32 bit value is transmitted in two consecutive Modbus registers.

The position of sign, exponent and fraction is a parameter.

Value format
- 16 bit scaled value

- 32 bit scaled value (High word in first register)

- 32 bit scaled value (High word in second register)

Parameters used for scaling:

- Min. raw value:
- Max. raw value
- Min. float value
- Max. float value

- 32 bit floating value (High word in first register)

Range: -3,4 1038 ... +3,4 1038

- 32 bit floating value (High word in second register)

Range: -3,4 1038 ... +3,4 1038

Parameter:
Sub parameters (MFI – Protocol address and parameter)

ABB AG 1KGT 150 486 V013 1 5-13

Data Types – Monitoring Direction RTU560 Subdevice Communication Interface Modbus

Conversion of value
RTU560 internal communication Protocol-specific
38 38
Range min. -3,4 10 -3,4 10
... ...
Range max. +3,4 1038 +3,4 1038

Conversion of quality descriptors

RTU560 internal communication Protocol-specific
OV Overflow -
BL Blocked -
SB Substituted -
NT Not Topical -
IV Invalid Exception response (all codes)
TIV Time invalid -

Conversion of cause of transmission

RTU560 internal communication Protocol-specific
T Test -
P/N Positive/negative confirmation - Irrelevant -
Cause Periodic / Cyclic -
Spontaneous Received query response
Requested -
Interrogated -

Transmission of 32 bit float value in the Modbus protocol

Sequence of transmission

Byte 1 Byte 2 Byte 3 Byte 4

8 7 6 5 4 3 2 1 8 7 6 5 4 3 2 1 8 7 6 5 4 3 2 1 8 7 6 5 4 3 2 1

s exponent fraction high fraction low

Value format with high word in first register

Sequence of transmission

Byte 1 Byte 2 Byte 3 Byte 4

8 7 6 5 4 3 2 1 8 7 6 5 4 3 2 1 8 7 6 5 4 3 2 1 8 7 6 5 4 3 2 1

fraction low s exponent fraction high

Value format with high word in second register

5-14 1KGT 150 486 V013 1 ABB AG

 6 Data Types – Control Direction

6.1 SCO – Single Command Output

Binary process command (one bit)

Supported <05> Force Single Coil

function codes

Parameter:
Function Code (SCO - Protocol address and parameter)
Index (SCO - Protocol address and parameter)
Query Range (SCO - Protocol address and parameter)
(if auto-packing mode is disabled)

Command None
authority

Additional None

Supported <16> Preset Multiple Registers

function code
for ABB SACE Parameter:
PR12x/33x Function Code (SCO - Protocol address and parameter)
Index (SCO - Protocol address and parameter)
Query Range (SCO - Protocol address and parameter)
(if auto-packing mode is disabled)

Command None
authority

Additional Value for On/Raise

Range: 0 – 15

Value for Off/Lower

Range: 0 – 15

Parameter:
Sub parameters (SCO – Protocol address and parameter)

Remarks Index is always fixed at 40001 and 40002

ABB AG 1KGT 150 486 V013 1 6-1

Data Types – Control Direction RTU560 Subdevice Communication Interface Modbus

Supported <06> Preset Single Registers

function codes <16> Preset Multiple Registers
for ABB SACE
PR 223DS/223EF Parameter:
devices Function Code (SCO - Protocol address and parameter)
Index for On/Raise (SCO - Protocol address and parameter)
Index for Off/Lower (SCO - Protocol address and parameter)
Query Range (SCO - Protocol address and parameter)
(if auto-packing mode is disabled)

Command None
authority

Additional None

Conversion of value
RTU560 internal communication Protocol-specific
Off 0x0000
On 0xFF00

Conversion of quality descriptors

RTU560 internal communication Protocol-specific
SE Select / Execute Simulated by SCI

Conversion of cause of transmission

RTU560 internal communication Protocol-specific
T Test -
P/N Positive/negative confirmation Relevant for activation confirmation
only
Cause Activation -
Activation confirmation Simulated by SCI
Deactivation -
Deactivation confirmation Simulated by SCI
Activation termination Received echo of write query

6-2 1KGT 150 486 V013 1 ABB AG

RTU560 Subdevice Communication Interface Modbus Data Types – Control Direction

6.2 DCO – Double Command Output

Binary process command (two bits)

Supported <06> Preset Single Registers

function codes

Parameter:
Function Code (DCO - Protocol address and parameter)
Index (DCO - Protocol address and parameter)
Query Range (DCO - Protocol address and parameter)
(if auto-packing mode is disabled)

Command None
authority

Additional None

Supported <16> Preset Multiple Registers

function code
for ABB SACE Parameter:
PR12x/33x Function Code (DCO - Protocol address and parameter)
Index (DCO - Protocol address and parameter)
Query Range (DCO - Protocol address and parameter)
(if auto-packing mode is disabled)

Command None
authority

Additional Value for On/Raise

Range: 0 – 15

Value for Off/Lower

Range: 0 – 15

Parameter:
Sub parameters (DCO – Protocol address and parameter)

Remarks Index is always fixed at 40001 and 40002

ABB AG 1KGT 150 486 V013 1 6-3

Data Types – Control Direction RTU560 Subdevice Communication Interface Modbus

Supported <06> Preset Single Registers

function codes <16> Preset Multiple Registers
for ABB SACE
PR 223DS/223EF Parameter:
devices Function Code (DCO - Protocol address and parameter)
Index for On/Raise (DCO - Protocol address and parameter)
Index for Off/Lower (DCO - Protocol address and parameter)
Query Range (DCO - Protocol address and parameter)
(if auto-packing mode is disabled)

Command None
authority

Additional None

Conversion of value
RTU560 internal communication Protocol-specific
Off 01
On 10

Conversion of quality descriptors

RTU560 internal communication Protocol-specific
SE Select / Execute Simulated by SCI

Conversion of cause of transmission

RTU560 internal communication Protocol-specific
T Test -
P/N Positive/negative confirmation Relevant for activation confirmation
only
Cause Activation -
Activation confirmation Simulated by SCI
Deactivation -
Deactivation confirmation Simulated by SCI
Activation termination Received echo of write query

6-4 1KGT 150 486 V013 1 ABB AG

RTU560 Subdevice Communication Interface Modbus Data Types – Control Direction

6.3 RCO – Regulation Command Output

Regulation process command (two bits)

Supported <06> Preset Single Registers

function codes
Parameter:
Function Code (RCO - Protocol address and parameter)
Index (RCO - Protocol address and parameter)
Query Range (RCO - Protocol address and parameter)
(if auto-packing mode is disabled)

Command None
authority

Additional Regulating step commands are in principle retriggerable

commands

Remarks

Supported <16> Preset Multiple Registers

function code
for ABB SACE Parameter:
PR12x/33x Function Code (RCO - Protocol address and parameter)
Index (RCO - Protocol address and parameter)
Query Range (RCO - Protocol address and parameter)
(if auto-packing mode is disabled)

Command None
authority

Additional Value for On/Raise

Range: 0 – 15

Value for Off/Lower

Range: 0 – 15

Parameter:
Sub parameters (RCO – Protocol address and parameter)

Remarks Index is always fixed at 40001 and 40002

ABB AG 1KGT 150 486 V013 1 6-5

Data Types – Control Direction RTU560 Subdevice Communication Interface Modbus

Supported <06> Preset Single Registers

function codes <16> Preset Multiple Registers
for ABB SACE
PR 223DS/223EF Parameter:
devices Function Code (RCO - Protocol address and parameter)
Index for On/Raise (RCO - Protocol address and parameter)
Index for Off/Lower (RCO - Protocol address and parameter)
Query Range (RCO - Protocol address and parameter)
(if auto-packing mode is disabled)

Command None
authority

Additional None

Conversion of value
RTU560 internal communication Protocol-specific
Lower 01
Higher 10

Conversion of quality descriptors

RTU560 internal communication Protocol-specific
SE Select / Execute -

Conversion of cause of transmission

RTU560 internal communication Protocol-specific
T Test -
P/N Positive/negative confirmation Relevant for activation confirmation
only
Cause Activation -
Activation confirmation Simulated by SCI
Deactivation -
Deactivation confirmation Simulated by SCI
Activation termination Echo of write query

6-6 1KGT 150 486 V013 1 ABB AG

RTU560 Subdevice Communication Interface Modbus Data Types – Control Direction

6.4 ASO – Analog Setpoint Output

Analog process command (16-bit signed number)

Supported <06> Preset Single Register

function codes
Parameter:
Function Code (ASO - Protocol address and parameter)
Index (ASO - Protocol address and parameter)
Query Range (ASO - Protocol address and parameter)
(if auto-packing mode is disabled)

Value type Signed normalized (F16)

Command None
authority

Additional Maximum value Range: 0 ... 32767

Note:
Value 32767 means that the value is sent
in normalized format without scaling (see
value range above).

Parameter:
Sub parameters (ASO - Protocol Address and Parameter)

Conversion of value
RTU560 internal communication Protocol-specific
Range min. -100% -32768
... ...
Range max. +100% +32767

Conversion of quality descriptors

RTU560 internal communication Protocol-specific
SE Select / Execute -

Conversion of cause of transmission

RTU560 internal communication Protocol-specific
T Test -
P/N Positive/negative confirmation Received exception response /
Relevant for activation confirmation
only
Cause Activation -
Activation confirmation Received echo of write query
Deactivation -
Deactivation confirmation -
Activation termination -

ABB AG 1KGT 150 486 V013 1 6-7

Data Types – Control Direction RTU560 Subdevice Communication Interface Modbus

6-8 1KGT 150 486 V013 1 ABB AG

RTU560 Subdevice Communication Interface Modbus Data Types – Control Direction

6.5 DSO – Digital Setpoint Output

Binary process command (8 or 16 bit-signed number)

Supported <06> Preset Single Register

function codes
Parameter:
Function Code (DSO - Protocol address and parameter)
Index (DSO - Protocol address and parameter)
Query Range (DSO - Protocol address and parameter)
(if auto-packing mode is disabled)

Value type Signed normalized (F16)

Command None
authority

Additional Maximum value Range: 0 ... 32762

Note:
Value 32767 means that the value is sent
in normalized format without scaling (see
value range above).

Parameter:
Sub parameters (DSO - Protocol Address and Parameter)

Conversion of value
RTU560 internal communication Protocol-specific
Range min. -100% -32768
... ...
Range max. +100% +32767

Conversion of quality descriptors

RTU560 internal communication Protocol-specific
SE Select / Execute -

Conversion of cause of transmission

RTU560 internal communication Protocol-specific
T Test -
P/N Positive/negative confirmation Received exception response /
Relevant for activation confirmation
only
Cause Activation -
Activation confirmation Received echo of write query
Deactivation -
Deactivation confirmation -
Activation termination -

ABB AG 1KGT 150 486 V013 1 6-9

Data Types – Control Direction RTU560 Subdevice Communication Interface Modbus

6-10 1KGT 150 486 V013 1 ABB AG

RTU560 Subdevice Communication Interface Modbus Data Types – Control Direction

6.6 BSO – Bit String Output

Binary process command (1-, 2-, 8-, 16-bit unsigned number)

Supported <06> Preset Single Register

function codes
Parameter:
Function Code (BSO - Protocol address and parameter)
Index (BSO - Protocol address and parameter)
Query Range (BSO - Protocol address and parameter)
(if auto-packing mode is disabled)

Command None
authority

Additional None

Conversion of value
RTU560 internal communication Protocol-specific
Range min. 0 0
... ...
Range max. 65535 65535

Conversion of quality descriptors

RTU560 internal communication Protocol-specific
SE Select / Execute -

Conversion of cause of transmission

RTU560 internal communication Protocol-specific
T Test Ignored
P/N Positive/negative confirmation Received exception response /
Relevant for activation confirmation
only
Cause Activation -
Activation confirmation Received echo of write query
Deactivation -
Deactivation confirmation -
Activation termination -

ABB AG 1KGT 150 486 V013 1 6-11

Data Types – Control Direction RTU560 Subdevice Communication Interface Modbus

6.7 FSO – Floating point Setpoint Output

Floating point process command

Supported <06> Preset Single Register

function codes
Parameter:
Function Code (FSO - Protocol address and parameter)
Index (FSO - Protocol address and parameter)
Query Range (FSO - Protocol address and parameter)
(if auto-packing mode is disabled)

Value type

Command None
authority

Additional Value format

Value format used for transmitting the FSO information.

Supported value formats are:

32 bit floating value (High word in first register)

32 bit floating value (High word in second register)
16 bit scaled value
32 bit scaled value (High word in first register)
32 bit scaled value (High word in second register)

Min. raw value

Minimum value in the telegram, to be converted to -100%

(internal communication)

Max. raw value

Maximum value in the telegram, to be converted to 100%

(internal communication)

Min. float value

Minimum Float value in the telegram, to be converted to -

100% (internal communication)

Max. float value

Maximum float value in the telegram, to be converted to

+100% (internal communication)

6-12 1KGT 150 486 V013 1 ABB AG

RTU560 Subdevice Communication Interface Modbus Data Types – Control Direction

Conversion of value
RTU560 internal communication Protocol-specific
38
Range min. -3,4 10 Min. Value
... ...
Range max. +3,4 1038 Max. Value

Conversion of quality descriptors

RTU560 internal communication Protocol-specific
SE Select / Execute -

Conversion of cause of transmission

RTU560 internal communication Protocol-specific
T Test -
P/N Positive/negative confirmation Received exception response /
Relevant for activation confirmation
only
Cause Activation -
Activation confirmation Received echo of write query
Deactivation -
Deactivation confirmation -
Activation termination -

ABB AG 1KGT 150 486 V013 1 6-13

 7 Transparent Data Messages

With the “Transparent Data Messages” the RTU560 is able to transmit any data of a
foreign protocol from/to the Controlling Station. The RTU560 supports the encapsulation
of Modbus messages in a transparent data channel.
A Modbus message is encapsulated with Modbus frame and checksum. This frame is not
included in the transparent data message.

7.1 Modbus ASCII Mode

Start character (:), slave address, LRC check sum and end character (CR, LF) are not
included in the transparent data message.

7.2 Modbus RTU Mode

Slave address information and CRC check sum are not included in the transparent data
message.

Example: Read register 8 from slave device 17

Data bytes Data Bytes Data Bytes

Transparent Data Modbus Message Modbus Message
RTU mode ASCII mode

Slave address 0x11 0x31 and0x31

Function 0x04 0x04 0x30 and 0x34

Starting address high 0x00 0x00 0x30 and 0x30

Starting address low 0x08 0x08 0x30 and 0x38

Number of points high 0x00 0x00 0x30 and 0x30

Number of points low 0x01 0x01 0x30 and 0x31

CRC high 0xB2 0x42 and 0x32

CRC low 0x98 0x39 and 0x38

ABB AG 1KGT 150 486 V013 1 7-1

Transparent Data Messages RTU560 Subdevice Communication Interface Modbus

The response from the IED is transmitted as follows:

Data Bytes Data Bytes Data bytes

Modbus Message Modbus Message Transparent Data
RTU mode ASCII mode

Slave address 0x11 0x31 0x31

Function 0x04 0x30 0x34 0x04

Byte Count 0x02 0x30 0x30 0x02

Data byte high 0x00 0x30 0x30 0x00

Data byte low 0x0A 0x30 0x41 0x0A

CRC high 0xF8 0x46 0x38

CRC low 0xF4 0x46 0x34

7.3 Modbus TCP/IP

In TCP/IP mode the telegram header (MBAP = Modbus Application Protocol) is not
included in the transparent data message.

Example: Read register 8 from slave device:

Data bytes Data Bytes

Transparent Data Modbus Message
TCP/IP mode

Transaction ID high 0x15

Transaction ID low 0x01

Protocol ID high 0x00

Protocol ID low 0x00

Length high 0x00

Length low 0x06

Unit ID 0xFF

Function 0x04 0x04

Starting address high 0x00 0x00

Starting address low 0x08 0x08

Number of points high 0x00 0x00

Number of points low 0x01 0x01

7-2 1KGT 150 486 V013 1 ABB AG

RTU560 Subdevice Communication Interface Modbus Data Types – Control Direction

The response as follows:

Data Bytes Data bytes

Modbus Message Transparent Data
TCP/IP mode

Transaction ID high 0x15

Transaction ID low 0x01

Protocol ID high 0x00

Protocol ID low 0x00

Length high 0x00

Length low 0x05

Unit ID 0xFF

Function 0x04 0x04

Byte count 0x02 0x02

Data byte high 0x00 0x00

Data byte low 0x0A 0x0A

7.4 Configuration

The transparent data channel must be configured for each IED by adding a TDC node to
the Hardware Tree of the configuration tool RTUtil560.

ABB AG 1KGT 150 486 V013 1 7-3

 8 File Transfer

Not defined in the Modbus protocol.

ABB AG 1KGT 150 486 V013 1 8-1

 9 Internal Functions

9.1 General Interrogation

The general interrogation of the subordinated devices is done directly after the
initialization of the RTU560 and on every change of the subordinated link from state
OFFLINE to state ONLINE.

A general interrogation is done by polling all data configured for one subordinated
device. If this polling cycle is finished, the general interrogation is considered to be
terminated.

9.2 Time Synchronization

There are four different device types handled by the RTU560 concerning the time
synchronization via Modbus protocol (see parameter Type, chapter 2.2.2 and 2.3.2).
According to the device type different specific methods are used.

The time synchronization command is only send to subordinated devices which are in
state ONLINE and only if the time of the own RTU is valid (synchronized)

Those device types are:

- Generic device (no time synchronization performed)

- Sepam (Schneider electric)

- MiCOM (Alstom)

- REF542+ (ABB)

ABB SACE devices do not support time synchronization.

9.2.1 Sepam

The synchronization zone is a table which contains the absolute date and time for the
time tagging function. Time messages should be written in a single block containing 4
words, using the Jbus n 16 function “word writing”.[4]

ABB AG 1KGT 150 486 V013 1 9-1

Interoperability List RTU560 Subdevice Communication Interface Modbus

Date and Time format:

15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00

0 0 0 0 0 0 0 0 0 Y Y Y Y Y Y Y 1

0 0 0 0 M M M M 0 0 0 D D D D D 2

0 0 0 H H H H H 0 0 mn mn mn mn mn mn 3

ms ms ms ms ms ms ms ms ms ms ms ms ms ms ms ms 4

Y: 1 byte for years: 0 to 99 years.

The remote monitoring and control system must ensure that the year 00 is greater than
99.

M: 1 byte for months: varies from 1 to 12.

D: 1 byte for days: varies from 1 to 31.

H: 1 byte for hours: varies from 0 to 23.

Mn: 1 byte for minutes: varies from 0 to 59.

Ms: 2 bytes for milliseconds: varies from 0 to 59999.

Procedure

Function code: <0x16> (Write multiple registers)

Start address: 0x0002 (called synchronization table)

Quantity of registers: 0x04

Registers: Date and Time (8 Bytes)

9.2.2 MiCOM

Access in writing for n words (function 16). The time synchronization format is based on
8 Bytes (4 words). [5]

9-2 1KGT 150 486 V013 1 ABB AG

RTU560 Subdevice Communication Interface Modbus Interoperability List

Date and Time format:

15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00

0 0 0 0 0 0 0 0 0 Y Y Y Y Y Y Y 1

0 0 0 0 M M M M 0 0 0 D D D D D 2

0 0 0 H H H H H 0 0 mn mn mn mn mn mn 3

ms ms ms ms ms ms ms ms ms ms ms ms ms ms ms ms 4

Y: 1 byte for years: 0 to 99 years.

The remote monitoring and control system must ensure that the year 00 is greater than
99.

M: 1 byte for months: varies from 1 to 12.

D: 1 byte for days: varies from 1 to 31.

H: 1 byte for hours: varies from 0 to 23.

Mn: 1 byte for minutes: varies from 0 to 59.

Ms: 2 bytes for milliseconds: varies from 0 to 59999.

Procedure

Function code: <0x16> (Write multiple registers)

Start address: 0x0800 (called Page 8)

Quantity of registers: 0x04

Registers: Date and Time (8 Bytes)

9.2.3 REF 542+

The absolute time may be sent from the control system to the communication board by
using the extended file 7. The time format is based on the structure CP56Time2a (see
IEC 870-5-4).

Each time the communication board receives a writing message on file 7, it forwards the
entire AbsoluteTime field to the main board that applies the time. That means the entire
file must be filled with a single function 21 message, otherwise a corrupted time value
may be transferred to the main board. [6]

ABB AG 1KGT 150 486 V013 1 9-3

Interoperability List RTU560 Subdevice Communication Interface Modbus

Date and time format:

07 06 05 04 03 02 01 00 Byte

0 Y Y Y Y Y Y Y 1

0 0 0 0 M M M M 2

DOW DOW DOW DOM DOM DOM DOM DOM 3

SU 0 0 H H H H H 4

IV 0 mn mn mn mn mn mn 5

Ms ms ms ms ms ms ms ms 6

Ms ms ms ms ms ms ms ms 7

Y: years: varies from 0 to 99

M: months: varies from 1 to 12

DOM: day of month: varies from 1 to 31

DOW: day of week: varies from 1 to 7 //unused

H: hours: varies from 0 to 23

SU: summer time: 0 = standard time, 1 = summer time //unused

mn: minutes: varies from 0 to 59

IV: invalid: 0 = valid, 1 = invalid

ms: milliseconds: varies from 0 to 59999 (7=high byte, 8=low byte)

Format: CP56time2a (56 byte) according IEC standard

Procedure

Function code: <0x21> (Write file record)

Reference Type: 0x06

File number: 0x0007 (called extended file 7)

Record number: 0x00

Record length: 0x04

Records: Date and Time (7 Bytes) and 0x00 (1 Byte)

9-4 1KGT 150 486 V013 1 ABB AG

RTU560 Subdevice Communication Interface Modbus Interoperability List

9.3 Event handling

After establishing a connection to a device all objects with modbus register addresses
are polled with their modbus register address. Objects with configured and enabled event
addresses will afterwards only be updated via events.
It is important that the event handling mechanism requires a prior time synchronization
of the RTU560 and the device itself.

9.3.1 General

There are four different device types handled by the RTU560 concerning the reading of
time tagged events via Modbus protocol. According to the device type different specific
methods are used for event handling.

Those device types are:

- Generic device (no reading of time tagged events performed)

- Sepam 2000 (Schneider electric)

- MiCOM (Alstom)

- REF542+ (ABB)

ABB SACE devices do not support event handling mechanism.

9.3.2 Sepam

On Sepam devices a “zone” describes a logical group of registers used for a specific
purpose.
The event zones are two tables which contain a maximum of 4 time tagged events.
Events should be read in a single block containing 33 words using FC 3. The exchange
word can be written using FC 6 or 16, and read individually using FC 3..[4]. Only the first
event table is evaluated by RTU560.

Events 1 zone / Events 2 zone:

Word address Size Access

0x0040 / 0x0070 1 Word R/W Exchange word

0x0041 / 0x0071 8 Words R Event 1

0x0049 / 0x0079 8 Words R Event 2

0x0051 / 0x0081 8 Words R Event 3

0x0059 / 0x0089 8 Words R Event 4

ABB AG 1KGT 150 486 V013 1 9-5

Interoperability List RTU560 Subdevice Communication Interface Modbus

These parameters can be configured in the line folder of RTUtil560 separately for each
datapoint

Device Type: Sepam, Datapoint Type: SPI

Options / Parameter Range of Values / Explanations Default
Event handling enabled Enabled / Disabled Disabled

This parameter enables / disables the

mechanism of event handling for this IED

9.3.3 MiCOM

To upload the event records two requests are allowed. The first method for uploading is
to request an event record without acknowledgement of this event by using FC 3 with
address 0x3500. The second one is to upload the oldest stored non acknowledged event
record by using FC 3 with address 0x3600. The automatic acknowledgment depends on
the state of bit 12 of remote control word 1 at address 0x0400 (0 = automatic mode, 1 =
manual mode). In automatic mode, reading of the event does also acknowledge it. For
event reading the RTU560 uses the second method with automatic mode.

Event format:

Information Size Word

Event meaning 1 Word 1

MODBUS assoc. 1 Word 2

value

MODBUS address 1 Word 3

Reserved 1 Word 4

Event date (s) 2 Words 5/6

Event date (ms) 2 Words 7/8

Acknowledgement 1 Word 9

These parameters can be configured in the line folder of RTUtil560 separately for each
datapoint

Device Type: Micom, Datapoint type: SPI

Options / Parameter Range of Values / Explanations Default
Event handling enabled Enabled / Disabled Disabled

This parameter enables / disables the

mechanism of event handling for this IED
Code Integer Range 0 ... 67 0

Code of the event meaning

9-6 1KGT 150 486 V013 1 ABB AG

RTU560 Subdevice Communication Interface Modbus Interoperability List

9.3.4 REF 542+

The REF542+ records up to 100 of the last events. As the master unit sends out a
request, the REF 542+ transmits the stored events, marked by the absolute time (year-
month-day-hour-second-millisecond). REF542+ shows the number of stored events in a
dedicated location, so the master unit can read the event table (by polling). [6]

RCE extended table:

Information Direction Register

Number of available events r 0

Overflow indicator r 1

Clear RCE w 2

Event 1 r 3

D+2

Event 2 r D+3

(D*2) + 2

… … …

Event MAX r (D*(MAX-1)) + 3

(D*MAX) + 2

Unused error (D*MAX) + 3

… … …

Unused error 9999

With D = sizeof (Event) / 2 = 22 Bytes / 2 = 11 word

MAX = 100

ABB AG 1KGT 150 486 V013 1 9-7

Interoperability List RTU560 Subdevice Communication Interface Modbus

These parameters can be configured in the line folder of RTUtil560 separately for each
datapoint

Device Type: REF542+, Datapoint type: SPI, DPI

Options / Parameter Range of Values / Explanations Default
Event handling enabled Enabled / Disabled Disabled

This parameter enables / disables the

mechanism of event handling for this IED
Channel number Integer Range 0 ... 65535 0

Number of the communication channel

Event number state ‘on’ Integer Range 0 ... 127 0

Number of the event

Event number state ‘off’ Integer Range 0 ... 127 0

Number of the event

9-8 1KGT 150 486 V013 1 ABB AG

RTU560 Subdevice Communication Interface Modbus Interoperability List

9.4 System Events

The subdevice communication interface manages internal status messages for every
device connected to this line. These status messages are created from the subdevice
communication interface itself for every connected device. The subdevice
communication interface supports the following system events

Description of system event Firmware Shortcut

Device active #024
Device inoperable #048
If a fix system event address schema is configured for the system events of a
subordinated device the system events shortcut is used as address offset. Every system
event can be configured with an individual process address. The ease the configuration
and for compatibility reasons fix system event schema is available.

Conversion of Value
Description RTU560 Protocol Specific
internal
Device Active off Device not Active
on Device Active
Device inoperable off Device operable
on Device inoperable
While initialization the value of system event ‘Device is active’ (#024) is set to ON. On a
running system this system event doesn’t change anymore.

9.4.1 Change Offline to Online

If the status of a subordinated device or line changes from OFFLINE to ONLINE a

general interrogation command is sent to respective device(s)

The system event RTU_INOPERABLE (48) with value 0 is sent as SPI to the internal
communication for every device that changed the state.

9.4.2 Change Online to Offline

If the status of a subordinated device or line changes from ONLINE to OFFLINE all
configured data points connected to this device are sent to the internal communication
with the actual state, marked as INVALID and with the time stamp of its own RTU.

The system event RTU_INOPERABLE (48) with value 1 is sent as SPI to the internal
communication for every device that changed the state.

ABB AG 1KGT 150 486 V013 1 9-9

Interoperability List RTU560 Subdevice Communication Interface Modbus

10 Interoperability List

Supported and selectable parameter

In this document parameter settings and selections of the Modbus protocol that are
supported by RTU560 are marked by squares with a tick

Functions and parameter with filled (black) squares are not supported by RTU560 !

10-10 1KGT 150 486 V013 1 ABB AG

RTU560 Subdevice Communication Interface Modbus Interoperability List

10.1 Network Configuration

(network-specific parameter)

Point-to-point Multipoint star

10.2 Physical Layer

[Link] Electrical Interface

RS-232

EIA RS-485

Ethernet

Number of unit loads: max. 32 slave devices

NOTE - EIA RS-485 standard defines unit loads so that 32 of them can be operated on one line. For detailed information refer to
clause 3 of EIA RS-485 standard.

10.2.2 Transmission Speed

Transmission settings are defined according to the chosen framing type. (serial only)

300 bit/s 600 bit/s 1200 bit/s

2400 bit/s 4800 bit/s 9600 bit/s
19200 bit/s
Transmission on Ethernet Networks
10 MBit/s
100 Mbit/s

10.2.3 Transmission Settings (only serial)

even parity, 1 stop bit

odd parity, 1 stop bit

ABB AG 1KGT 150 486 V013 1 10-11

Interoperability List RTU560 Subdevice Communication Interface Modbus

none parity, 1 stop bit

none parity, 2 stop bits (CP1 / CP2 only)

10.3 Link Layer

Framing type (only serial)

ASCII framing (7-bit ASCII characters)

RTU framing (8-bit characters)

Message length
255 Maximum length L (number of characters)

10.4 Application Layer

10.4.1 Function Codes

< 01 > Read Coil Status < 02 > Read Input Status

< 03 > Read Holding Registers < 04 > Read Input Registers

< 05 > Force Single Coil < 06 > Preset Single Register

< 07 > Read Exception Status < 08 > Diagnostics

< 09 > Program 484 < 10 > Poll 484

< 11 > Fetch Communication Event Counter < 12 > Fetch Communication Event Log

< 13 > Program Controller < 14 > Poll Controller

< 15 > Force Multiple Coils < 16 > Preset Multiple Coils

< 17 > Report Slave ID < 18 > Program 884/M84

< 19 > Reset Communication Link < 20 > Read General Reference

< 21 > Write General Reference < 22 > Mask Write 4X Register

< 23 > Read/Write 4X Registers < 24 > Read FIFO Queue

10-12 1KGT 150 486 V013 1 ABB AG

RTU560 Subdevice Communication Interface Modbus Interoperability List

10.4.2 Basic Application Functions

Clock synchronization
Clock synchronization

Command transmission
Direct command transmission
Select and execute command (Note: Select is internally simulated by RTU560-SCI)

Direct setpoint command transmission

Select and execute setpoint command (Note: Select is internally simulated by RTU560-SCI)

ABB AG 1KGT 150 486 V013 1 10-13

Interoperability List RTU560 Subdevice Communication Interface Modbus

Note:
We reserve the right to make technical changes or modify the contents of this
document without prior notice With regard to purchase orders, the agreed
particulars shall prevail. ABB AG does not accept any responsibility whatsoever for
potential errors or possible lack of information in this document.

We reserve all rights in this document and in the subject matter and illustrations
contained therein. Any reproduction, disclosure to third parties or utilization of its
contents - in whole or in parts –is forbidden without prior written consent of ABB
AG.

Copyright© 2011 ABB

All rights reserved

10-14 1KGT 150 486 V013 1 ABB AG

RTU560 Subdevice Communication Interface Modbus Interoperability List

ABB AG 1KGT 150 486 V013 1 10-15