Instruction/ maintenance manual of the product HS500E Emsa
Go to page of 82
.
ESCORT MEMORY SYSTEMS HS500E Industrial Ethernet Antenna Operator’s Manual P/N: 17-1305 REV 02 (12/05) Copyright © 2005 Escort Memory Systems, All rights reserved. Escort Memory Systems reserv es the right to make modifications or improvements to its products and/or docu mentation without prior notification.
HS500E Read/Write Industria l Ethernet Antenna O PERATOR’S M ANUAL How to Install, Configure and Operate Escort Memory Systems’ HS500E Industrial Ethernet Antenna.
FCC C OMPLIANCE N OTICE FCC Part 15 This equipment has been tested a nd found to comply with the limits for a Class A digital device, pursuant to part 15 of t he FCC Rules. These limits are desi gned to provide reasonable protection against harmful interfer ence in a residential installation.
TA B LE OF CONTENTS T ABLE OF C ONTENTS FCC COMPLIANCE NOTICE 4 TABLE OF CONTENTS 5 CHAPTER 1: GETTING STARTED 8 1.1 Introduction 8 1.1.1 Company Background 8 1.1.2 RFID Over view 8 1.2 About this Manual 9 1.2.1 Who Should Read this Manual? 9 1.2.2 HEX Notation 9 1.
TA B LE OF CONTENTS Command F2: Start/Stop Repetitive Command 33 Command F3: Write IP Address 35 Command F4: Reset Battery Counter 37 CHAPTER 4: ERROR CODES 38 4.1 Error Types 38 4.1.1 Syntax Errors 38 4.1.2 RF Response Errors 38 CHAPTER 5: ETHERNET/IP PROTOCOL 39 5.
TA B LE OF CONTENTS APPENDIX B: ASCII CHART 61 APPENDIX C: ETHERNET/IP - OBJECT MODEL 63 C.1 Ethernet/IP - Required Objects 64 C.1.1 Identity Object (0x01- 1 Instance) 64 C.1.2 Message Router Object (0 x02) 66 C.1.3 Assembly Object (0x04 – 3 Instances) 66 C.
CHA PTER 1 : GETTING ST ARTED CHAPTER 1: G ETTING S T A R TED 1.1 I NTRODUCTION Welcome to the HS500E Industrial Ethernet An tenna - Operator’s M anual . This manual will assist you in the installation, configuratio n and operation of Escort Memory Systems’ HS500E Industrial Eth e rnet Antenna.
CHA PTER 1 : GETTING ST ARTED 1.2 A BOUT THIS M ANUAL This document provides guideline s and in structions on how to install, configure and operate the HS500E Industrial Ethernet Ant enna. Descriptions of the RFID command set are also included, a s are instructions detailing ho w to issue commands from a Host computer to the HS500E.
CHA PTER 1 : GETTING ST ARTED 1.3 D IMENSIONS & D IAGRAMS 1.3.1 Di m e n s i o n s – T o p V i e w Dimensions – Top View HS500E – OPERA TOR’S MAN UA L P/N: 17-1 305 REV02 (12-05) PA GE 10 .
CHA PTER 1 : GETTING ST ARTED 1.3.2 Di m e n s i o n s – S i d e V i e w Dimensions – Side View HS500E – OPERA TOR’S MAN UA L P/N: 17-1 305 REV02 (12-05) PA GE 11 O F 82.
CHA PTER 1 : GETTING ST ARTED 1 . 3 . 3 Dimensions – Rear V iew (Power & Ethernet) Dimensions – Rear View (Power & E thernet) HS500E – OPERA TOR’S MAN UA L P/N: 17-1 305 REV02 (12-05) .
CHA PTER 1 : GETTING ST ARTED 1.3.4 L E D D e s c r i p t i o n s LED Descriptions HS500E – OPERA TOR’S MAN UA L P/N: 17-1 305 REV02 (12-05) PA GE 13 O F 82.
CHA PTER 1 : GETTING ST ARTED 1.3.5 A n t e n n a R e a d R a n g e - F r o n t Vi e w NOTE: The range listed above wa s defined in free air. However, proximity to metal, water and RF interference can affect range perfor mance and results. All RFID a pplications should be tested to ensure adequate RF performance can be achieved.
CHA PTER 1 : GETTING ST ARTED 1.3.6 An t e n n a R e a d R a n g e - S i d e V i e w NOTE : The range listed above wa s defined in free air. However, proximity to metal, water and RF interference can affect range perfor mance and results. All RFID a pplications should be tested to ensure adequate RF performance can be achieved.
CHA PTER 1 : GETTING ST ARTED 1.4 I NST ALLA TION & S ETUP 1.4.1 I n s t a l l a t i o n P r e c a u t i o n s Mounting Guidelines Avoid mounting the HS500E or its RFID controllers near sources of EMI (electro-magnetic interfe r ence) or near devices that generate high ESD (electro-static disc harge) levels.
CHA PTER 1 : GETTING ST ARTED 1.4.2 I n s t a l l i n g t h e H S 5 0 0 E 1 Unpack and inspect the HS500E hardw are and acce ssories. If an item appears to be damaged, notify your EMS distributor immediately. 2 Securely mount the HS500E to your chosen locatio n using four (4) #10 [M5] screws and matching locking wa shers and nuts.
CHA PTER 2: IP CONFIGUR ATION CHAPTER 2: IP C ONFIGURA TION 2.1 T HE HTML S ER VER Built into the HS500E is an embedded HTML Server which provides a Website-like user interface with all of the tools necessary to configu re the unit. The first step in configuring the HS500E is to set its IP address.
CHA PTER 2: IP CONFIGUR ATION Click the link: IP Configuration The HTML Server- Main Page 4 At the HTML Server - Main Page, click the link labeled IP Configuration . The IP Configuration Page will be displayed. You will a rrive at a page similar to the one displayed below.
CHA PTER 2: IP CONFIGUR ATION 6 Click the “ Save Settings” button to store the config uration changes to the HS500E’s non-volatile flash memory. 7 Manually cycle power to the HS500E. It takes 15 – 30 seconds for the HS500E to reboot, at which time your IP configuration changes wil l be implemented.
CHA PTER 3 : RFID COMM ANDS CHAPTER 3: RFID C OMMANDS 3.1 C OMMAND S TRUCTURE RFID commands a re Host-generated packets of data that contain i nstructions intended for the HS500E.
CHA PTER 3 : RFID COMM ANDS 3 . 1 . 1 Command Packet Structure T able Word # MSB LSB Description 01 00 06 (+ number of additional data words, if any) OVERALL LENGTH: The first word in a command packet is the Overall Length . This 2-byte value indicates the total number of words in the comm and (including this - the Overall Length field).
CHA PTER 3 : RFID COMM ANDS 3 . 1 . 2 Response Packet Structure T able Word # MSB LSB Description 01 00 06 (+ number of returned data words, if any) OVERALL LENGTH: The first word in a response packet is the Overall Length . This 2-byte value indicates the total number of words in the respon se (including this - the Overall Length field).
CHA PTER 3 : RFID COMM ANDS Word MSB # LSB Description 05 (RF Retry) (Reser ved) 0x00 RF RETRY COUNTER: The fifth word contains the RF Retry Counter in the MSB. This counter indicates the number of packets that required re-transmi ssion to successfully compl ete the given command.
CHA PTER 3 : RFID COMM ANDS 3.2 RFID C OMMANDS The HS500E uses a 2-byte Command ID number to specify the type of operation to perform. Commands 02, 03 and 05 must include the comm and prefix “ AB ” (0xAB), as in AB03 (for Command 03) .
CHA PTER 3 : RFID COMM ANDS C OMMAND 02: R EAD D ATA DESCRIPTION Command 02 instru cts the H500E to retrieve a specified number of bytes from a contiguous (sequential) are a of an RFID tag’s memory. The Read Data command consists of the Overall Length (OAL), the Comm and ID Number, Node ID value, Timeout Value, Start Address and Read Length.
CHA PTER 3 : RFID COMM ANDS Command 02: Read Data – Response Structure Field Name MSB LSB Word Value Overall Length (in word s) 00 08 0008 MSB =RF Error Counter LSB = Command ID Echo 00 02 0002 MSB .
CHA PTER 3 : RFID COMM ANDS C OMMAND 03: W RITE D ATA DESCRIPTION Command 03 instru cts the HS500E to write segments of data to contiguou s addresses of an RFID tag’s memory. The Write Data comm and consists of an Overall Length, the Command ID, a Timeout Value, Start Address and Write Length, and the Data Byte Value(s) to be written to the tag.
CHA PTER 3 : RFID COMM ANDS Command 03: Write Data – Respo nse Structure Field Name MSB LSB Word Value Overall Length 00 06 0006 MSB =RF Error Counter LSB = Command ID Echo 00 03 0003 MSB = Instance.
CHA PTER 3 : RFID COMM ANDS C OMMAND 05: F ILL T AG DESCRIPTION Command 05 is used to instruct the HS5 00E to write a particular data byte value to all specified contiguous areas of tag memory begi nning at the Start Address.
CHA PTER 3 : RFID COMM ANDS C OMMAND F1: T EST LED S / G ET I NFO DESCRIPTION Command F1 tests the HS500E’s LE Ds and re trieves the unit’s currently installed software version number. This comman d causes the HS500E’s LE Ds to flash a coded diagnostic pattern while also retri eving the version number of the installed software.
CHA PTER 3 : RFID COMM ANDS Command F1: Test LEDs / Read Info – Resp onse Structure Field Name MSB LSB Word Value Overall Length 00 06 0006 MSB =RF Error Counter LSB = Command ID Echo 00 F1 00F1 MSB.
CHA PTER 3 : RFID COMM ANDS C OMMAND F2: S TART /S TOP R EPETITIVE C OMMAND DESCRIPTION Command F2 is used to instruct the HS500E to continuously repe at a specified RFID command. Note that only Commands 02, 03 and 05 are repeatable. To begin repeating a command, set the Overall Len gth to a value of 0x0006 or greater.
CHA PTER 3 : RFID COMM ANDS Command F2: Repeat Command (Re ad Data) – Response Structure Word # Field Name MSB LSB Word Value 1 Overall Length (in word s) 00 08 0008 2 MSB =RF Error Counter LSB = Co.
CHA PTER 3 : RFID COMM ANDS C OMMAND F3: W RITE IP A DDRESS DESCRIPTION Command F3 is used to modify and st ore the IP address of the HS500E. NOTE: The unit’s IP address can also b e changed using the built-in HTML Server. See Chapter 2 for instructions.
CHA PTER 3 : RFID COMM ANDS R ESPONSE FROM HS500E There is no response for Comm and F3 because as soon as the I P address is changed on the HS500E, the existing TCP /IP connection with the Ho st will be terminated. To reset the IP address of the HS500E to factory default settings see: Appendix A: IP Address Reset .
CHA PTER 3 : RFID COMM ANDS C OMMAND F4: R ESET B ATTERY C OUNTER DESCRIPTION Command F4 resets the value of a tag’s Battery Count er to zero (0x00). This command is intended to be used when replacing the batteries in an active RFI D tag and will reset the value of the Battery Counter to zero (0x00).
CHA PTER 4: ERROR CODE S CHAPTER 4: E RROR C ODES The HS500E will generate an error re sponse if it is unable to complete an operation. When an error occurs, the LSB of the se con d word in a response (the Command Echo word) will be replaced by a 1-byte error code that indicates the actual error that was experienced.
CHA PTER 5: ETHERNET/IP PROTOCO L CHAPTER 5: ETHERNET/IP PROT OCOL The HS500E is designed to support ma ny common Industrial Ethernet protocols and can be implemented in a wide variety of existing Ho st / PLC Industrial Ethernet applications.
CHA PTER 5: ETHERNET/IP PROTOCO L 5.1 S TEPS TO C ONFIGURE THE HS500E See Chapter 2 for instructions o n conf iguring the IP addres s of the HS500E. Sections 5.
CHA PTER 5: ETHERNET/IP PROTOCO L The OnDemand Co nfiguration Page 3 At the HS500E’s OnDemand Co nfiguration Page , select Node 01 from the drop-down list (Node 01 is sele cted in the image above). 4 Click Submit. The OnDemand Node 01 Configuratio n Page will be displayed.
CHA PTER 5: ETHERNET/IP PROTOCO L 5 . 2 . 2 OnDemand Node 01 Configuration Page The OnDemand No de 01 Configuration Page Use this page to modify the settings for Node 01. Controller Settings 5 Select the Controller Type from the drop-down menu. The Controller Type (in this case) specifies the type of PLC that will be communicating wi th the HS500E.
CHA PTER 5: ETHERNET/IP PROTOCO L 9 Write Tag Name / Write File Address: a. For ControlLogix : Specify a Write Ta g Name that is 40 characters or less. The Write Tag Name refers to the name of the Controller Tag in the PLC where the HS 500E will write PLC-bou nd data for Node 01 (example: EMS_WRITE1).
CHA PTER 5: ETHERNET/IP PROTOCO L 5 . 2 . 3 OnDemand Configuration Page (Summar y) OnDemand Configuration Page When you return to the OnDemand Con figuration Page , you will notice a brief summary (similar to the image above) that displays the current details of the Node configuration settings for the HS500E.
CHA PTER 5: ETHERNET/IP PROTOCO L 5.3 C ONFIGURING PLC C ONTROLLER T AGS After you have configured Node 01 via OnDemand Node Configu r ation , open y our PLC control software (RSLogix 5000 for ControlLogix) and define two Controller Tags (a Write Tag and a Read Tag ).
CHA PTER 5: ETHERNET/IP PROTOCO L 5.4 C HECKING O N D EMAND S TAT U S Now that you have configured Node 01 f or the HS500E and defined corresponding Write and Read Tags in the PLC, the last step is to check the communication status between the HS500E and the PLC.
CHA PTER 5: ETHERNET/IP PROTOCO L 5.5 U SING THE HS500E WITH RSL OGIX 5000 At this point, communication between t he PLC and the HS500E should be properly configured and a connectio n established. You can verify the exchange of informat ion between devices using RS Logix 5000.
CHA PTER 5: ETHERNET/IP PROTOCO L 5.5.1 E t h e r n e t / I P H a n d s h a k i n g To ensure that messages to and from the HS500E are properly delivered and received, a handshaking mech anism has been implemented that uses a pair of dedicated words in the ex change.
CHA PTER 5: ETHERNET/IP PROTOCO L 3 After executing the command, the HS500E writes the response in the Write Tag and then increment s the counter in EMS_WRITE1 [1]. This signals that there is new information for the PL C (the HS500E g enerated response).
CHA PTER 5: ETHERNET/IP PROTOCO L Write Tag (where responses are w ritten by the HS500E) EMS_Write1 [0] = (2) the counter is copied here by the HS500E to ACK EMS_Write1 [1] = (3) the HS500E increments.
CHA PTER 5: ETHERNET/IP PROTOCO L 5.6 HTML S ER VER AND O N D EMAND PLC S UPPOR T Below is a partial list of the programmab le logic controllers that are supported by EMS’ HTML Server and OnDemand Utility . ControlLogix – OnDemand supp orts all current versions RA’s PLC5E releases: • Series C, Revision N.
CHA PTER 6 : MOD BUS TCP PROTOCO L CHAPTER 6: MODBUS TCP PROT OCOL One of the most popular and well -proven i ndustrial automation protocol s in use today is Modbus. Modbus TCP al lows the Modbus protocol to be carri ed over standard Ethernet networks.
CHA PTER 6 : MOD BUS TCP PROTOCO L 4 R/W 2-byte Timeout Value (0-65535) measured in milliseconds 5 R/W 2-byte Read/Write Start Addres s (0-65535) 6 R/W 2-byte Read/Write Data Le ngth (0-65535) 7 – 3.
CHA PTER 6 : MOD BUS TCP PROTOCO L 6 . 1 . 2 Modbus TCP Respon se Structure M APPING N ODE 33 (P RODUCE R EGISTERS ) Produce Registers hold data that is destined for the Host.
CHA PTER 6 : MOD BUS TCP PROTOCO L 6.2 M ODBUS TCP H ANDSHAKING Modbus TCP handshakin g is governed by the changin g of the “ Overall Length ” value within a data packet.
CHA PTER 6 : MOD BUS TCP PROTOCO L 6 . 2 . 2 Modbus TCP Comman d, Respon se & Handshaking Exam ple 1 The Host issues an RFID comman d to the HS500E, writing the command string to the holding registers for Devi ce ID 1. An Overall Length val ue of 0x06 is written last to holding register 40001.
CHA PTER 7 : RA W TCP/IP PROTOCOL CHAPTER 7: RA W TCP/IP PROT OCOL 7.1 RA W TCP/IP O VERV IEW Another means of communicating with t he HS500E is through the standard TCP/IP protocol. For this manual, the protocol is referred to a s RAW TCP/IP to distinguish it from the other industrial protocol s.
CHA PTER 7 : RA W TCP/IP PROTOCOL 7.2 RA W TCP/IP C OMMAND & R ESPONSE E XAMPLES In RAW TCP/IP, RFID commands issued by the Host resemble Modbus TCP commands; howeve r RAW TCP/IP commands re quire an additional tw o-b yt e header (which includ es 0xFF in the MSB, and 0x01 - the Node ID of the HS500E - in the LSB).
CHA PTER 7 : RA W TCP/IP PROTOCOL 7 . 2 . 2 RA W TCP/IP Response Example The following is the respon se to the Read Da ta command issued in the previous example: Word MSB LSB Description 01 FF 01 “R.
AP PENDIX A: IP A DDRE SS RES ET A PPENDIX A: IP A DDRESS R ESET To reset the IP address of the HS500E to factory default values, follow the steps below: 1.
AP PENDIX B: ASCII CHA RT A PPENDIX B: ASCII C HAR T HS500E – OPERA TOR’S MAN UA L P/N: 17-1 305 REV02 (12-05) PA GE 61 O F 82.
AP PENDIX B: ASCII CHA RT HS500E – OPERA TOR’S MAN UA L P/N: 17-1 305 REV02 (12-05) PA GE 62 O F 82.
AP PENDIX C: ETHERNET/IP – O B JECT MODE L A PPENDIX C: E THERNET /IP - O BJECT M ODEL The Object Model is the logical organization of attributes (parameters) withi n classes (objects) and services supp orted by each device. Objects are broken down i nto three categories: Requi red Objec t s , Vendor Specific Objects and Application Objects .
AP PENDIX C: ETHERNET/IP – O B JECT MODE L C.1 E THERNET /IP - R EQUIRED O BJECTS Under Ethernet/IP, the HS500E has six Required Objects : Required Objects: Identity Object (0x01) Message Router Object (0x02) Assembly Object (0x04) Connection Manager Obj e ct (0x06) TCP Object (0xF5) Ethernet Link Object (0xF6) C.
AP PENDIX C: ETHERNET/IP – O B JECT MODE L 7 Product Name Structure of: Product Name Size Product Name String USINT USINT[26] 11 “HS500E” Get Status Word Bit Bit = 0 Bit = 1 0 No I/O Connection .
AP PENDIX C: ETHERNET/IP – O B JECT MODE L C.1.2 Message Router Object (0x02) This object has no sup ported attributes. C.1.3 A ssembly Object (0x04 – 3 Inst ances) Class Attributes Attribute ID N.
AP PENDIX C: ETHERNET/IP – O B JECT MODE L Instance 0x65 Attributes (Input Instan ce 2) Attribute ID Name Data Ty pe Def ault Data Value Access Rule 3 Serial Produce Data Structure of: Consume Data Seq.
AP PENDIX C: ETHERNET/IP – O B JECT MODE L Instance 0x70 Attributes (Output Ins tance 1) Attribute ID Name Data Ty pe Def ault Data Value Access Rule 3 Serial Consume Data Structure of: Produce Da ta Seq.
AP PENDIX C: ETHERNET/IP – O B JECT MODE L Instance 0x71 Attributes (Output Ins tance 2) Attribute ID Name Data Ty pe Def ault Data Value Access Rule 3 Serial Consume Data Structure of: Produce Da ta Seq.
AP PENDIX C: ETHERNET/IP – O B JECT MODE L C.1.4 Connection Mana ger Object (0x06) This object has no attributes. C.1.5 TCP O bject (0xF5 - 1 Instance) Class Attributes Attribute ID Name Data Typ e .
AP PENDIX C: ETHERNET/IP – O B JECT MODE L 5 Interface Configuration 5 Structure of: IP Address Network Mask Gateway Address Name Server Name Server 2 Domain Name Size Domain Name UDINT UDINT UDINT .
AP PENDIX C: ETHERNET/IP – O B JECT MODE L C.1.6 Ethernet Link Object (0xF6 - 1 Inst ance) Class Attributes Attribute ID Name Data Typ e Data Value Access Rule 1 Revision UINT 1 Get Instance Attribu.
AP PENDIX C: ETHERNET/IP – O B JECT MODE L C.2 V ENDOR S PECIFIC O BJECTS C.21 HS500E Consume Dat a Object (0x64 - 32 Inst ances) Class Attributes (Instance 0) Attribute ID Name Data Ty pe Default D.
AP PENDIX C: ETHERNET/IP – O B JECT MODE L … … … … … 34 Consume Data [8,000-8,24 9] UINT 0 Get / Set … … … … … 38 Consume Data [9,000-9,24 9] UINT 0 Get / Set … … … … ….
AP PENDIX C: ETHERNET/IP – O B JECT MODE L Common Services Implemented for Service Code Class Level Instance Lev el Service Name 05 HEX No Yes Reset 10 0E HEX Yes Yes Get Attribute Single 10 HEX No Yes Set Attribute Single 10 This Service Code is used to flush all attributes to zero.
AP PENDIX C: ETHERNET/IP – O B JECT MODE L C.22 HS500E Produce Dat a Object (0x65 - 32 Inst ances) Class Attributes (Instance 0) Attribute ID Name Data Ty pe Default Data Value Access Rule 1 Revisio.
AP PENDIX C: ETHERNET/IP – O B JECT MODE L … … … … … 38 Produce Data [9,000-9,249] UINT 0 Get … … … … … 42 Produce Data [10,000-10,249] UINT 0 Get … … … … … 82 Produce .
AP PENDIX C: ETHERNET/IP – O B JECT MODE L Common Services Implemented for Service Code Class Level Instance Lev el Service Name 05 HEX No Yes Reset 11 0E HEX Yes Yes Get Attribute Single 10 HEX No Yes Set Attribute Single 11 This Service Code is used to flush all attributes to zero.
AP PENDIX C: ETHERNET/IP – O B JECT MODE L C.23 OnDemand Object (0x67 - 10 Inst ances) Class Attributes (Instance 0) Attribute ID Name Data Ty pe Default Data Value Access Rule 1 Revision UINT 1 Get.
AP PENDIX C: ETHERNET/IP – O B JECT MODE L 14 Write File Offset (SLC/PLC Only) N7:Y where Y is the File Offset UINT 0 Get 15 Write Heartbeat Timeout: 0 = disabled 5-60000 ticks = enable (10ms Resolu.
AP PENDIX C: ETHERNET/IP – O B JECT MODE L Common Services Implemented for Service Code Class Level Instance Lev el Service Name 0E HEX Yes Yes Get Attribute Single HS500E – OPERA TOR’S MAN UA L.
EMS WAR RANTY EMS W ARRANTY Escort Memory Systems warrants that all products of its own manufacturing conform to Escort Memory Systems’ specifications and are free fr om defects in material and workmanship when used under normal operatin g conditions and within the servi ce conditions for which they were furnished.
An important point after buying a device Emsa HS500E (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought Emsa HS500E yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data Emsa HS500E - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, Emsa HS500E you will learn all the available features of the product, as well as information on its operation. The information that you get Emsa HS500E will certainly help you make a decision on the purchase.
If you already are a holder of Emsa HS500E, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime Emsa HS500E.
However, one of the most important roles played by the user manual is to help in solving problems with Emsa HS500E. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device Emsa HS500E along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center
