S800 CI801MemMap

IndustrialIT
800xA - Control and I/O

S800 I/O
Version 4.0
Memory Maps for CI801

Software Version 1.0
IndustrialIT
800xA - Control and I/O
S800 I/O
Version 4.0
Memory Maps for CI801

Software Version 1.0
NOTICE
The information in this document is subject to change without notice and should not be
construed as a commitment by ABB. ABB assumes no responsibility for any errors that
may appear in this document.
In no event shall ABB be liable for direct, indirect, special, incidental or consequential
damages of any nature or kind arising from the use of this document, nor shall ABB be
liable for incidental or consequential damages arising from use of any software or hardware described in this document.
This document and parts thereof must not be reproduced or copied without written permission from ABB, and the contents thereof must not be imparted to a third party nor used
for any unauthorized purpose.
The software or hardware described in this document is furnished under a license and
may be used, copied, or disclosed only in accordance with the terms of such license.
This product meets the requirements specified in EMC Directive 89/336/EEC and in Low
Voltage Directive 72/23/EEC.
Copyright 2003 - 2004 by ABB.
All rights reserved.
Release:
Document number:
October 2004
3BSE 036 959R4001
TRADEMARKS
Registrations and trademarks used in this document include:
Windows
Registered trademark of Microsoft Corporation.
Industrial IT
Trademark of ABB.
Advant
Registered trademark of ABB.
Advant Fieldbus
Trademark of ABB.
PROFIBUS
Registered trademark of Profibus International (P.I.)
PROFIBUS-DP
Registered trademark of Profibus International (P.I.)
HART
Registered trademark of HART Communication Foundation.
Table of Contents
TABLE OF CONTENTS
About This Book
0.1 General ........................................................................................................................9
0.2 Use of Warning, Caution, Information, and Tip Icons ..............................................10
0.3 Terminology...............................................................................................................11
0.4 Related Documentation .............................................................................................12
Section 1 - Introduction
1.1 Product Overview......................................................................................................13
Section 2 - Fieldbus Communication Interface CI801

2.1 General Functionality ................................................................................................15
2.2 Calculation of Maximum Number of Modules on CI801 .........................................17
2.3 Dynamic Data Exchange ...........................................................................................20
2.4 Parameter Area ..........................................................................................................21
2.5 Memory Maps ...........................................................................................................26
2.6 CI801 Memory Map ..................................................................................................27
2.7 Diagnostic..................................................................................................................28
Section 3 - I/O Module Data

3.1 General Parameter Definitions ..................................................................................35
3.2 General Memory Map Definitions ............................................................................36
3.3 AI801 Analog Input Module .....................................................................................38
3.5 AI820 Differential Analog Input Module..................................................................46
3.6 AI830 RTD Input Module .........................................................................................49
3.7 AI835 Thermocouple/mV Input Module...................................................................53
3.8 AI843 Thermocouple/mV Input Module...................................................................58
3.10 AI890 Analog Input Module ...................................................................................66
3BSE 036 959R4001
Table of Contents
3.11 AI893 Thermocouple/mV/RTD Input Module........................................................ 69

3.12 AI895 Analog Input Module ................................................................................... 75
3.13 AO801 Analog Output Module............................................................................... 78
3.15 AO820 Bipolar Analog Output Module.................................................................. 84
3.19 DI801 Digital Input Module, 24 V.......................................................................... 96
3.20 DI802 Digital Input Module, 120 V a.c./d.c. .......................................................... 98
3.21 DI803 Digital Input Module, 230 V a.c./d.c. ........................................................ 100
3.22 DI810 Digital Input Module, 24 V........................................................................ 102
3.24 DI814 Digital Input Module, 24 V Current Source .............................................. 106
3.27 DI840 Digital Input Module.................................................................................. 112
3.29 DO801 Digital Output Module, 24 V ................................................................... 117
3.30 DO802 Digital Output Module, Relay .................................................................. 119
3.32 DO814 Digital Output Module, 24 V Current Sinking......................................... 123
3.36 DO840 Digital Output Module ............................................................................. 131
3.38 DP820 Incremental Pulse Encounter Module ....................................................... 136
3.39 DP840 Incremental Pulse Encounter Module ....................................................... 144
3.40 ACS600 Standard Drive........................................................................................ 149
Section 4 - DPV1 Services

4.1 DPV1 services ......................................................................................................... 155
3BSE 036 959R4001
Table of Contents
4.2 DDLM_READ ........................................................................................................155

4.2.1 DDLM_READ Data Structure ..................................................................155
4.2.1.1 Slot Number ..........................................................................155
4.2.1.2 Index ....................................................................................156
4.2.1.3 Length ...................................................................................156
4.2.2 READ SOFTWARE ID .............................................................................156
4.2.3 READ DP DIAGNOSTICS ......................................................................157
4.2.4 READ STATE ...........................................................................................157
4.2.5 READ DYNAMIC VALUE......................................................................157
4.2.6 READ HW ID AND STATE.....................................................................158
4.2.7 READ HARDWARE ID ...........................................................................158
4.2.8 HART READ ............................................................................................158
4.2.9 READ CHANGED DIAGNOSTICS........................................................159
4.2.10 READ CURRENT DIAGNOSTICS.......................................................159
4.3 DDLM_WRITE.......................................................................................................160
4.3.1 DDLM_WRITE Structure.........................................................................160
4.3.1.1 Slot Number ..........................................................................160
4.3.1.2 Index ....................................................................................160
4.3.1.3 Length ...................................................................................161
4.3.2 WRITE ACKNOWLEDGE CHANNEL ERRORS .................................161
4.3.3 HART WRITE ..........................................................................................161
4.4 DPV1 Error Codes...................................................................................................162
Section 5 - HART Communication

5.1 System Architecture ................................................................................................163
5.2 Functions .................................................................................................................165
5.3 Communication .......................................................................................................165
5.4 Error Codes..............................................................................................................166
5.5 AI845/AO845 HART Master ..................................................................................167
5.5.1 HART Command Data Structure ..............................................................167
5.5.2 Communication .........................................................................................168
5.6 AI895/AO895 HART Master Device ......................................................................171
5.6.1 HART Command Data Structure ..............................................................171
3BSE 036 959R4001
Table of Contents
5.6.1.1 Pass-through Command ........................................................ 171

5.6.1.2 Copy Command .................................................................... 171
5.6.2 Communication......................................................................................... 173
5.6.3 HART Commands (from tool to module)................................................. 174
5.6.4 Delayed Responses ................................................................................... 176
5.6.5 Node Identification ................................................................................... 177
5.6.6 Gateway Parameters ................................................................................. 178
5.6.7 Module HART Status................................................................................ 179
5.6.8 Locate Instruments.................................................................................... 180
5.6.9 Scanning Function .................................................................................... 181
Appendix A - Configuration Example

A.1 Introduction ............................................................................................................ 183
A.2 CI801 ...................................................................................................................... 184
A.2.1 User Parameters ....................................................................................... 184
A.3 AI820...................................................................................................................... 185
A.3.2 Memory Map ........................................................................................... 186
A.4 DO810 .................................................................................................................... 187
A.4.2 Memory Map ........................................................................................... 188
Appendix B - AI895/AO895 Supported HART Commands

B.1 Universal Commands ............................................................................................. 189
B.1.1 Command 0 - Read unique identifier ....................................................... 189
B.1.2 Command 11 - Read unique identifier associated with tag...................... 190
B.1.3 Command 12 - Read message .................................................................. 191
B.1.4 Command 13 - Read tag, descriptor, date ................................................ 191
B.1.5 Command 16 - Read final assembly number ........................................... 191
B.1.6 Command 17 - Write message ................................................................. 192
B.1.7 Command 18 - Write tag, descriptor, date ............................................... 192
B.1.8 Command 19 - Write final assembly number .......................................... 193
B.2 Common Practice Commands ................................................................................ 194
3BSE 036 959R4001
Table of Contents
B.2.1 Command 38 - Reset configuration changed flag ....................................194

B.2.2 Command 41 - Perform device self-test ...................................................194
B.2.3 Command 42 - Perform master reset........................................................194
B.2.4 Command 48 - Read additional device status ..........................................195
B.2.5 Command 106 - Flush completed delayed response ................................196
B.3 AI/AO895 Specific Commands ..............................................................................197
B.3.1 Command 128 - Read gateway parameters ..............................................197
B.3.2 Command 129 - Read channel status .......................................................198
B.3.3 Command 130 - Read instrument list from index ....................................199
B.3.4 Command 131 - Read instrument static data............................................200
B.3.5 Command 132 - Write instrument static data ...........................................201
B.3.6 Command 133 - Remove instrument from list .........................................203
B.3.7 Command 144 - Read retry limits ............................................................204
B.3.8 Command 145 - Write retry limits............................................................204
B.3.9 Command 146 - Read scan command ......................................................205
B.3.10 Command 148 - Read scan status...........................................................205
B.3.11 Command 149 - Write scan status ..........................................................205
B.3.12 Command 150 - Read mode ...................................................................206
B.3.13 Command 152 - Read locate method .....................................................206
B.3.14 Command 154 - Rebuild loops...............................................................207
B.3.15 Command 155 - Copy command............................................................208
B.3.16 Command 160 - Read all channels scan status and fault........................209
B.3.17 Command 250 - Write device identifier .................................................210
Appendix C - HART Addressing

C.1 General....................................................................................................................211
C.2 How to Interpret the HART Address ......................................................................211
Appendix D - I/O Module Diagnostics

D.1 I/O Module Diagnostic ...........................................................................................213
INDEX ........................................................................................................................217
3BSE 036 959R4001
Table of Contents
3BSE 036 959R4001
About This Book
General
About This Book

0.1 General
This book describes the functions of the S800 I/O system on a PROFIBUS-DPV1
network.
Section 1, Introduction, provides a short overview of how S800 I/O modules and the
CI801 interface can be connected and a list of product releases.
Section 2, Fieldbus Communication Interface CI801, describes how the CI801
interface communicates with the PROFIBUS-DPV1 master and the I/O units, and
provides information on its parameters and memory map. It is recommended that
you read Section 2, Fieldbus Communication Interface CI801, in its entirety, after
which relevant parts of the other chapters may be studied.
Section 3, I/O Module Data, provides the parameter and memory map descriptions
for the I/O modules.
Section 4, DPV1 Services, describes allowed DPV1 services.
Section 5, HART Communication, describes HART communication for
AI845/AO845 and AI895/AO895.
Appendix A, Configuration Example, provides a configuration example describing
parameters and memory maps.
Appendix B, AI895/AO895 Supported HART Commands, provides the supported
HART commands for AI895/AO895.
Appendix C, HART Addressing, describes the HART addressing for AI845/AO845
and AI895/AO895.
Appendix D, I/O Module Diagnostics, provides Diagnostic Statement Types and
Statement Information.
3BSE 036 959R4001
Use of Warning, Caution, Information, and Tip Icons
About This Book
0.2 Use of Warning, Caution, Information, and Tip Icons

This publication includes Warning, Caution, and Information where appropriate
to point out safety related or other important information. It also includes Tip to
point out useful hints to the reader. The corresponding symbols should be
interpreted as follows:
Electrical warning icon indicates the presence of a hazard which could result in
electrical shock.
Warning icon indicates the presence of a hazard which could result in personal
injury.
Caution icon indicates important information or warning related to the concept
discussed in the text. It might indicate the presence of a hazard which could
result in corruption of software or damage to equipment/property.
Information icon alerts the reader to pertinent facts and conditions.
Tip icon indicates advice on, for example, how to design your project or how to
use a certain function
Although Warning hazards are related to personal injury, and Caution hazards are
associated with equipment or property damage, it should be understood that
operation of damaged equipment could, under certain operational conditions, result
in degraded process performance leading to personal injury or death. Therefore,
comply fully with all Warning and Caution notices.
10
3BSE 036 959R4001
About This Book
Terminology
0.3 Terminology
The following is a list of terms that you should be familiar with.
Term
Description
CI801
Fieldbus communication interface module for single

applications which connects S800 I/O modules to a
PROFIBUS-DPV1 network.
Controller
Computer-based unit in which control applications are

running.
FCI
Fieldbus Communication Interface.
Fieldbus
Serial, multidrop circuit for communication between

controllers and distributed peripherals.
GSD file
Device description file (Gert Stamm Datei), a standard

PROFIBUS file containing standard PROFIBUS-DP
parameters, memory maps, etc.
HART
Highway Addressable Remote Transducer
I/O Station
FCI with connected I/O modules.
OCS
Open Control System
OSP
Output Set as Predetermined
PNO
PROFIBUS User Organization (PROFIBUS

Nutzerorganisation)
PROFIBUS-DPV1
Open, vendor-independent fieldbus for time-critical

communication between controllers and distributed
peripherals
RTD
Resistance Thermometer Detector
S800 I/O
A range of process I/O modules
TC
Thermocouple
3BSE 036 959R4001
11
Related Documentation
About This Book
0.4 Related Documentation

The following is a listing of documentation related to the product.
Title
S800 I/O General Information and
Installation Users Guide
Description
Describes the general installation and
configuration information for the
S800 I/O system.
S800 I/O Modules and Termination Units Describes the I/O modules and
Users Guide
termination units in the S800 I/O
system.
S800 I/O Modules and Termination Units Describes I/O modules and termination
with Intrinsic Safety Interface Users
units with I.S. interface in the S800 I/O
Guide
system.
S800 I/O Fieldbus Communication
Interface for PROFIBUS-DP Users
Guide
12
Describes the PROFIBUS-DP FCI in the

S800 I/O system.
3BSE 036 959R4001
Section 1
Introduction
Product Overview
Section 1
Introduction
1.1 Product Overview

An S800 I/O station consists of a fieldbus communications interface (FCI) and up to
24 I/O modules divided in up to 8 clusters with a maximum of 12 modules in each
cluster. The I/O station requires configuration data from a superior system, that is,
a controller, in order to function.
CI801 is an FCI which acts as a DPV1 slave device on a PROFIBUS-DPV1
network, connecting S800 I/O modules to any controller with PROFIBUS-DPV1
master capabilities. This book describes the parameters and memory maps of CI801
and the I/O modules. Any configuration tool recommended for the master controller
can be used to enter the required information.
For information on the CI801 hardware, refer to the S800 I/O Fieldbus
Communication Interface for PROFIBUS-DP Users Guide.
Below are one table showing the release history.
Table 1-1 Product Release History
Version
1.0
3BSE 036 959R4001
Description
This is the initial release of FCI CI801.
13
Product Overview
14
Section 1
Introduction
3BSE 036 959R4001
Section 2
Fieldbus Communication Interface CI801
Section 2
General Functionality
Fieldbus Communication Interface

CI801
2.1 General Functionality

The CI801 fieldbus communication interface (FCI) transfers input values and
diagnostics from the I/O modules to a superior controller, and transmits output and
parameter values from the controller to the S800 I/O modules. It also performs
signal conditioning on input and output values.
Communication with the superior controller (the PROFIBUS-DPV1 master) takes
place via a PROFIBUS-DPV1 network, and communication with the I/O modules
takes place via the S800 I/O ModuleBus. Some of the parameters received from the
controller are intended for the FCI itself, and some affect a specific I/O module or
an individual channel on the module.
An S800 I/O station consists of the FCI and up to 24 I/O modules divided into a
maximum of 8 clusters, with a maximum of 12 modules in each cluster. The base
cluster (cluster 0) consists of the FCI and I/O modules directly plugged together.
Additional clusters 1 to 7 are connected via ModuleBus modems and optical cables
to an optical port connected to the FCI, see Figure 2-1. For information on
hardware, refer to the S800 I/O Fieldbus Communication Interface for
PROFIBUS-DPV1 Users Guide, S800 I/O General Information and Installation
Users Guide and S800 I/O Modules and Terminal Units Users Guide.
Due to the PROFIBUS-DPV1 specification it is not possible to connect 24 I/O
modules, of all types, to one FCI. Please refer to information about limitations
caused by PROFIBUS-DPV1 in Calculation of Maximum Number of Modules on
CI801 on page 17.
The FCI controls all operations of an S800 I/O station, acting as a pure slave station
on PROFIBUS-DPV1 and as the bus-master on ModuleBus.
3BSE 036 959R4001
15
General Functionality
Section 2
PROFIBUS-DPV1
masters
I/O station with S800 I/O (max. 24 I/O modules)

Cluster 0 (Base cluster)
FCI FCI 1
PROFIBUS
Fiber-optic
ModuleBus
Cluster 1
Optical
modem 1
Cluster 2
Optical
modem 1
Additional clusters
Another
PROFIBUS
slave
Figure 2-1 PROFIBUS-DPV1 Network with S800 I/O
16
3BSE 036 959R4001
Section 2
Fieldbus Communication Interface CI801 Calculation of Maximum Number of Modules
2.2 Calculation of Maximum Number of Modules on CI801

In order to find out if a given configuration of analog and digital modules can be
used, the following method should be used:
Fill in number of modules in Table 2-1.
Calculate the sum in the three columns:
Sum User Parameters
Sum Input Bytes
Sum Output Bytes.
Calculate the three total sums for:
ParamSize
InSize
OutSize.
Check that:
ParamSize is less than or equal to 221 (220 if HCIR is used)
InSize is less than or equal to 239
OutSize is less than or equal to 112.
If any of these three values is too high then the configuration can not be used.
Table 2-1 Calculation of Number of Modules
User
Parameters
Input
Bytes
Output
Bytes
AI801
13
17
AI810
13
17
AI820
AI830
12
17
Module Type
3BSE 036 959R4001
Number
of
Modules
Sum
User
Parameters
Sum
Input
Bytes
Sum
Output
Bytes
17
Calculation of Maximum Number of Modules on CI801
Section 2
Fieldbus Communication
Table 2-1 Calculation of Number of Modules (Continued)

User
Parameters
Input
Bytes
Output
Bytes
AI835
15
17
AI843
16
20
AI845
13
17
AI890
13
17
AI893
15
17
AI895
13
17
AO801
17
16
AO810
17
16
AO820
11
AO845
18
16
AO890
17
16
AO895
17
16
DI801
DI802
DI803
DI810
DI811
DI814
DI820
DI821
DI840
13
DI890
Module Type
18
Number
of
Modules
Sum
User
Parameters
Sum
Input
Bytes
Sum
Output
Bytes
3BSE 036 959R4001
Section 2
Fieldbus Communication Interface CI801 Calculation of Maximum Number of Modules
Table 2-1 Calculation of Number of Modules (Continued)

User
Parameters
Input
Bytes
Output
Bytes
DO801
10
DO802
DO810
10
DO814
10
DO815
DO820
DO821
DO840
11
DO890
DP820
12
18
13
DP840
10
34
ACS600
13
12
Module Type
Number
of
Modules
Sum
User
Parameters
Sum
Input
Bytes
Sum
Output
Bytes
ParamSize
InSize
OutSize
Standard Drive
Total sum
3BSE 036 959R4001
19
Dynamic Data Exchange
Section 2
2.3 Dynamic Data Exchange

Figure 2-2 gives an overview of how data is transferred back and forth between
the user application and the actual process.
PROFIBUS-DP master
(Class 1)
PROFIBUS-DP
The PROFIBUS-DPV1 master

uses Data Exchange requests
towards the FCI according to
its scheduling scheme.
Data exchange with PROFIBUS-DPV1

is cyclic and consists of both writing of
data from master to FCI as well as
reading data from FCI to master.
Fieldbus communication
interface (FCI)
Communication memory
Input and output values are updated

as quickly as possible (depending on
the configuration). Signal
conditioning is also performed.
ModuleBus
I/O modules
Input and output values are updated

as quickly as possible (depending on
the S800 I/O module type).
Process
Figure 2-2 Dynamic Data Exchange

The data transfer between PROFIBUS-DPV1 and the ModuleBus is not
synchronized. Read and write operations are performed from and to a dual-port
memory in the FCI. The ModuleBus data is scanned (read or written) cyclically,
depending on the I/O module configuration. In one scan all digital modules, 1/4 of
the fast analog modules and 1/10 of the slow analog modules are scanned. It takes 4
scans to read all fast analog modules and 10 scans to read all slow analog modules.
20
3BSE 036 959R4001
Section 2
Parameter Area
2.4 Parameter Area

The parameter area in CI801, specified in the table below, defines the functionality
of the FCI and each module. Parameter bytes 1 to 7 (the first seven rows in the
table) are specified by the PROFIBUS-DP standard, and they are followed by
parameters 8, 9, 10 which are DPV1 parameters and byte 11 to 18 are
Prm_Command for redundancy configuration. After the FCI, all installed I/O
modules are described by means of family, identity number (readable from
software), position on the network and the parameters specific for each module
type. Parameter bytes 19 and onwards constitute the user parameter area
(User_Prm_Data).
Any configuration tool recommended for the master controller can be used to enter
or change the required information. A GSD file is available from ABB Automation
Technology Products for the CI801 FCI and the S800 I/O modules. The GSD file
also provides default values. The file is in ASCII format and can be viewed with any
text editor. The parameter area is specified in the table below.
Table 2-2 Parameter Area
Param. byte
07
06
3BSE 036 959R4001
05
04
03
02
01
00
HCIR
disable
HCIR
enable
Station status
Watchdog control
Watchdog control
Minimum station delay
Identity number 1
Identity number 2
Group identity number
DPV1 state 1
DPV1 state 2
DPV 1 state 3
10
10
21
Parameter Area
Section 2
Table 2-2 Parameter Area (Continued)

Param. byte
07
06
05
04
03
02
01
00
HCIR
disable
HCIR
enable
Block_Len = 0x8
11
11
Structure type = 0x2
12
12
Slot = 0x0
13
13
Specifier
14
14
Function
15
15
Properties
16
16
Not used = 0x0
17
17
Not used = 0x0
18
18
FCI control byte
19
19
HCIR byte (Hot Configuration In Run)
20(1)
Family type module 1
20
21
Identity module 1
21
22
Position module 1
22
23
Other parameters module 1
23
- ...
24
- ...
..... ...... .....
.....
.....
Family type module 24
Identity module 24
x+1
y+1
(1) This byte only in system where HCIR is enabled, see FCI control byte.
22
3BSE 036 959R4001
Section 2
Parameter Area
Parameter byte 1: Station status

07
06
05
04
Not used - set to 0
03
02
WD
01
00
Not used
WD = 1
Watchdog is activated (OSP will be set on output modules at

communication error)
WD = 0
Watchdog is deactivated
Parameter byte 2 and 3: Watchdog control

With Watchdog Factor 1 (WDF1) and Watchdog Factor 2 (WDF2), the watchdog
time-out (TWD) can be set between 10ms and 650s according to:
TWD = 10ms x WDF1 x WDF2
Depending on what Target rotation time (TTR) is being used, the watchdog time
varies. Use the following formula to calculate your watchdog time (watchdog
parameter should be greater than): TTR x (1 / baudrate[kbits/s]) + 0.5
Parameter byte 4: Minimum station delay.
Parameter byte 5 and 6: Identity number 1 and 2 see GSD-file.
Parameter byte 7: Group identity number not used
Parameter byte 8 and 9: DPV1 state 1 and 2 not used
Parameter byte 10: DPV1 state 3
DPV1 state 3, bit 7: Enable_Prm_Command. This bit is set by the DP-Master (Class
1) to enable the transmission of Prm_Command. A Prm_Command is blockoriented. See below.parameter byte 11 to 18 are Prm command for redundancy
configuration.
Parameter byte 11: Block_Len
Block length always equal to 8.
Parameter byte 12: Structure type
Field structure type always equal to 2.
Parameter byte 13: Slot
Reserved
3BSE 036 959R4001
23
Parameter Area
Section 2
Parameter byte 14: Specifier (Not used)

Bit 0-2 reserved. Bit 3-7 sequence number.
Parameter byte 15 Function (Not used)
Bit-No
0
Meaning:
Reserved (BackupRequest)
Primary Request
Stop_MSAC1S
Start_MSAC1S
Check_Properties
Reserved
MasterStateClear
Reserved
PrimaryRequest: Activate the Channel

Stop_MSAC1S: Stops the acyclic State-Machine
Start_MSAC1S: Starts the acyclic State-Machine
Check_Properties: Slave shall check the demanded Properties
MasterStateClear: Actual MasterState for the StartUp of the Slave
Combinations for Start/Stop_MASAC1S:

Bit-No
2 3
0 0
1 0
0 1
1 1
24
Action
No Action
Stops the acyclic State-Machine
Starts the acyclic State-Machine
Reset the acyclic State-Machine
3BSE 036 959R4001
Section 2
Parameter Area
Parameter byte 16: Properties (Not implemented, reserved for future use.)
Bit-No
0
Meaning:
Primary-Req_MS0_MS1 used
Start/Stop_MSAC1S used
Address Change
Address Offset = 64
Reserved
Bit 0-1: Check for the usable Functions. This is like the Sync/Freeze-Supportedcheck. If the DP-Slave does not support a function requested it shall send a
diagnosis with Prm Fault = 1.
Address Change and Address Offset = 64 shall be supported by every Redundant
Slave (Not used).
Parameter 17-18: Not used
Not uses should be set to 0.
Byte 19 determines the CI801 parameterization and from byte 20 (byte 21 if HCIR
is enabled) and onward, the I/O module parameterization. If HCIR is enabled
byte 20 is used for HCIR parameters.
Table 2-3 Byte 20 HCIR Parameters
07
06
HCIR
act
HCIR_F
3BSE 036 959R4001
05
04
03
02
01
00
HCIR_WCBC_Base
25
Memory Maps
Section 2
Table 2-4 Byte 20 HCIR Parameter Definition

Abbreviation
Name
Values
HCIR act
Hot Configuration
In Run active
0 = HCIR is not requested

1 = HCIR is requested, set by the
PROFIBUS master
HCIR_F
Hot Configuration
In Run Factor
0 = 1 (dec), 1 = 16 (dec)
Calculates by the PROFIBUS master
HCIR_WCBC
_Base
Hot configuration
In Run
Worst Case Bus
Cycle Base
Calculates by the PROFIBUS master
2.5 Memory Maps

Unlike the static parameter data, memory maps contain changing information such
as input/output values and diagnostics. Parameters required for immediate
processing are also included, such as filter times for analog input values.
The CI801 FCI has its own memory map, see CI801 Memory Map on page 27.
The memory maps of the individual modules are described in Section 3, I/O Module
Data.
26
3BSE 036 959R4001
Section 2
CI801 Memory Map
2.6 CI801 Memory Map

The parameter byte dedicated to the FCI (FCI control byte, byte 19, in Table 2-2)
are specified in the table below.
Table 2-5 CI801 User Parameters
07
06
05
04
03
02
01
00
Decimal bit
HCIR
PSE
Param. byte 1
The control byte contains three parameters explained below.

Table 2-6 FCI Parameter Definition
Abbreviation
Name
Values
HCIR
Hot Configuration
In Run
0 = HCIR disable
1 = HCIR enable
PSE
Power supervision 0 = Power supervision of opto-extension off

of opto-extension 1 = Power supervision of opto-extension on
The configuration data for this module is: 0x90.

Table 2-7 FCI Dynamic Values
07
06
05
04
03
02
01
00
SW
RPB
RPA
3BSE 036 959R4001
Decimal bit
Read byte 1
27
Diagnostic
Section 2
Table 2-8 CI801 Dynamic Values Definitions

Abbreviation
Description
SW
Station warning. Set if any error exists in the FCI station

including modules.
RPB
Redundant power B failure (opto extension).
RPA
Redundant power A failure (opto extension).
2.7 Diagnostic
The slaves diagnostic information is transferred to the master as a response on the
service Slave_Diag. The transferred data consists of six bytes of standard diagnostic
information specified by the PROFIBUS-DP standard and an extended diagnostic
information area named Ext_Diag_Data. The Ext_Diag_Data area consists of four
sub-areas, device related diagnostic, redundant related diagnostics, identifier related
diagnostic and channel related diagnostic.
The device related diagnostic area is specified manufacturer specific and is
described in Table 2-9 and Table 2-10.
Table 2-9 Device related Diagnostic Area in Slave_Diag.res Message
Byte no
SW
RPB
RPA
SAW
10
11 to 18
28
HCIR_A HCIR_F
HCIR_WD_Base
0
3BSE 036 959R4001
Section 2
Diagnostic
Table 2-10 Description Device related Diagnostic

Device diag.
Meaning
SW
FCI warning. Set if any error exists in the FCI station incl.
modules.
RPB
Redundant power B failure (opto extension)
RPA
Redundant power A failure (opto extension)
SAW
Station address warning
HCIR_A
Hot Configuration In Run Active
HCIR_F
Hot Configuration In Run Factor
HCIR_WD_Base Watchdog for Hot Configuration In Run; 0-6300 ms (in steps of

100 ms)
Redundancy related diagnostics, byte 11-18 is specified in Table 2-11. (Not yet
implemented.)
Table 2-11 Redundancy Related Diagnostics
Byte no
coding of
Prm_Command_Ack
coding of
Red_State_Diagnosis
11
Headerbyte = 8h
Headerbyte = 8h
12
Status_Type = 9Eh
Status_Type = 9Fh
13
Slot_Number = 0h
Slot_Number = 0h
14
Specifier
Specifier
15
Function
Function
16
Red_State_1
Red_State_1
17
Red_State_2
Red_State_2
18
Red_State_3
Red_State_3
3BSE 036 959R4001
29
Diagnostic
Section 2
Byte 11: Headerbyte, always 0x8

Byte 12: Status_Type, 0x9E for Prm_Command_Ack and 0x9F for Red-State
Byte 13: Slot, always = 0
Prm_Command_Ack:
Byte 14: Specifier (see Prm_Command includes the Sequence number)
Byte 15: Function (see Prm_Command)
Byte 16: Red_State_1 (meaning see below)
Byte 18: Red_State_3
Red_State_3 is an application-specific byte.
Red_State Diagnosis:
Byte 14: Specifier (Specifier from the last Prm_Command)
Byte 15: Function (Function from the last Prm_Command)
Byte 18: Red_State_3
Red_State_3 is an application-specific byte.
Red_State_1/ Red_State_2:
Red_State_1 is the state from the initiator of the State_diagnosis.
30
3BSE 036 959R4001
Section 2
Diagnostic
Red_State_2 is the state from the other Slave-Device.
Bit-No
0
Meaning:
Backup
Primary
HW-Defect
Data-Exchange
Master_State_Clear
Baudrate found
Toh started
Reserved
NOTE 1 If both Backup and Primary are 0 the Interface Module is in a Startup Phase.
NOTE 2 In Case of an HW-Defect in Red_State_1 the switch over may be done
without PrmCmd
NOTE 3 In Case of not existence of a second SIM a HW-Defect is set in Red_State_2
The identifier related diagnostic area and the channel related diagnostic area are
specified by the PROFIBUS-DP standard except for five added error types for the
channel related diagnostics. The error types are described in the Table 2-16.
The format of the identifier related diagnostic area and the channel related
diagnostic area are described in Table 2-12 and Table 2-13.
Table 2-12 Identifier related Diagnostic Area in Slave_Diag.res Message
Byte
no
bit 7
bit 6
bit 5
bit 4
bit 3
bit 2
bit 1
bit 0
19
20
I7
I6
I5
I4
I3
I2
I1
I0
21
I15
I14
I13
I12
I11
I10
I9
I8
22
I23
I22
I21
I20
I19
I18
I17
I16
23
I24
3BSE 036 959R4001
31
Diagnostic
Section 2
In the identifier related diagnostic area each identifier (module) with present
diagnostic information is marked with 1. The identifier number represents the
configured modules in number order. If there are two modules configured, one on
position 2 and one on position 5, these modules will have identifier number 1 and 2.
As a S800 I/O station is able to handle up to 24 I/O modules the identifier related
diagnostic area consists of 5 bytes.
Table 2-13 Channel related Diagnostic Area in Slave_Diag.res Message
24
25
bit 7
bit 6
28
bit 3
bit 1
bit 0
Channel number
Device related diagnostic

Identifier number (=module) 0 to 24
Module type
Channel number
Channel type
1
bit 2
Identifier number (=module) 0 to 24
Channel type
29
30
bit 4
Module type
26
27
bit 5
Device related diagnostic

Identifier number
In the channel related diagnostic area for single I/O modules channel number 0 is
used to point out a certain module. Channel number 1 to n are used for specific
channels within a module. All errors on modules are presented first in the device
related diagnostic area and then errors per channel follows. The device related
diagnostic area is truncated after 24 errors and then the Ext_Diag_Overflow flag (bit
7 in the third byte of the standard diagnostic information) is set.
Table 2-14 Module Type in the Channel Related Diagnostic Area
Identity
32
Module type
00
reserved
01
input
10
output
11
input / output
3BSE 036 959R4001
Section 2
Diagnostic
Table 2-15 Channel Type in the Channel Related Diagnostic Area

Identity
Channel type size
000
reserved
001
bit
010
2 bits
011
4 bits
100
byte
101
word
110
2 words
111
reserved
Table 2-16 Device Related Diagnostic in the Channel Related Diagnostic Area
Device related
diagnostic
(Error type)
3BSE 036 959R4001
Code
Short circuit
Line break
Error
Reserved
10 - 15
Warning
16(1)
OSP
17(1)
Not configured
18(1)
Module missing
19(1)
33
Diagnostic
Section 2
Table 2-16 Device Related Diagnostic in the Channel Related Diagnostic Area
(Continued)
Device related
diagnostic
(Error type)
Code
Process power missing
20(1)
Wrong module type
21(1)
Internal channel error
22
Pulse synchronization
error
23(1)
Not used
24-31
(1) Only on module, i.e. channel = 0
34
3BSE 036 959R4001
Section 3
I/O Module Data
General Parameter Definitions
Section 3
I/O Module Data
3.1 General Parameter Definitions

The parameters for each I/O module comprise family, identity number and position
on the PROFIBUS-DPV1 network, followed by a number of bytes specific for the
module type. The specific parameters are listed and defined separately for each I/O
module in the relevant section of this chapter.
The position of the I/O module is defined according to the table below.
Table 3-1 Position Definition
Decimal value on
PROFIBUS-DP
Definition
Comment
7
1, 2, , 12
Cluster = 0
1 - 12
Pos. 1 to 12 in cluster 0 (1 12)
17, 18, , 28
Cluster = 1
1 - 12
113, 114, , 124
Cluster = 7
1 - 12
3BSE 036 959R4001
35
General Memory Map Definitions
Section 3
I/O Module Data
3.2 General Memory Map Definitions

Unlike the static user parameter data, the memory maps contain changing
information such as input/output values and diagnostics. Parameters required for
immediate processing are also included, such as filter times for analog input values.
Tables of memory maps for each I/O module can be found in the relevant section of
this chapter.
Analog process values for standard voltage and current signals in memory maps are
coded according to the table below.
Table 3-2 Coding of Analog Process Values
Nominal range
Physical
Min. underrange
16-bit integer (1)
Physical
Nom. overrange
16-bit integer (1)
Physical
16-bit integer (1)
010 V
028480
None (0 V)
11.5 V
32704
05 V
(0100 %)
None (0 V)
(0 %)
5.7 V
(114.8 %)
020 mA
None (0 mA)
23 mA
-1010 V
-2848028480
-11.5 V
-32704
11.5 V
32704
-55 V
(-100100%)(2)
-5.7 V
(-114.8 %)
5.7 V
(114.8 %)
-2020 mA
210 V
15 V
420 mA
-23 mA
028480
(0100%)
(3)
23 mA
None (0 V)
-7120
11.2 V
32704
None (0 V)
(-25 %)
5.6 V
(115 %)
None (0 mA)
22.4 mA
(1) 2-compliment
(2) Percentage of the maximum positive range, that is, 0% means 0 V or 0 mA.
(3) Percentage of the signal range, that is, 0% means 2 V, 1 V or 4 mA, respectively.
Min. underrange is minimum guaranteed underrange but the underrange can be

more dependent on type of I/O module.
Modules with for example input range 0 to 20 mA can sometimes show a small
negative value if the input signal is negative.
Modules with for example input range -20 to 20 mA show value in the range -20 to
20 mA even if the specified signal range is 0 to 20 mA.
36
3BSE 036 959R4001
Section 3
I/O Module Data
General Memory Map Definitions
Analog process values for template signals in memory maps are coded according to
table below. The value has no over or under range.
Nominal range
Signal
-100100%
Value in 16-bit integer (1)

-32000...32000
(1) 2-compliment
3BSE 036 959R4001
37
AI801 Analog Input Module
Section 3
I/O Module Data
3.3 AI801 Analog Input Module

8 channels: 0...20 mA, 420 mA.
The user parameter area is specified and the parameters are explained in the two
tables below.
Table 3-3 AI801 User Parameters in Normal Mode
07
06
05
04
03
02
01
00
Family type = 4
0
Param. byte 1
Identity number = 01
Param. byte 2
Position, see Table 3-1

No of channels - 1 = 7
DA8
38
DA7
DA6
DA5
Decimal bit
Param. byte 3
DA4
DA3
0
DA2
Param. byte 4
DA1
Param. byte 5
FT1
L1
Signal range channel 1
Param. byte 6
FT2
L2
Param. byte 7
FT3
L3
Param. byte 8
FT4
L4
Param. byte 9
FT5
L5
Param. byte 10
FT6
L6
Param. byte 11
FT7
L7
Param. byte 12
FT8
L8
Param. byte 13
3BSE 036 959R4001
Section 3
I/O Module Data
Table 3-4 AI801 Parameter Definitions

Abbreviation
Values
DA#
Deactivate channel #
0 = channel fully operational

1 = channel not operational
and supervision disabled
FT#
Filter time channel #
00 = filter off
01 = 200 ms
10 = 500 ms
11 = 2 s
Linearization code channel #
0 = no linearization
1 = Sqrt linearization
Signal range channel #
0 = 020 mA
1 = 420 mA
6 = 0...20 mA LL
7 = 4...20 mA LL
L#
SR#
3BSE 036 959R4001
Name
39
Section 3
I/O Module Data
The memory map area is specified and its contents are explained in the two tables
below.
The configuration data for this module is: 0x40, 0x90.
Table 3-5 AI801 Dynamic Values
07
S8
40
06
S7
05
S6
04
03
02
01
00
Decimal bit
Analog value 1, MSB
Read byte 1
Analog value 1, LSB
Read byte 2
Analog value 2, MSB
Read byte 3
Analog value 2, LSB
Read byte 4
Analog value 3, MSB
Read byte 5
Analog value 3, LSB
Read byte 6
Analog value 4, MSB
Read byte 7
Analog value 4, LSB
Read byte 8
Analog value 5, MSB
Read byte 9
Analog value 5, LSB
Read byte 10
Analog value 6, MSB
Read byte 11
Analog value 6, LSB
Read byte 12
Analog value 7, MSB
Read byte 13
Analog value 7, LSB
Read byte 14
Analog value 8, MSB
Read byte 15
Analog value 8, LSB
Read byte 16
S5
S4
S3
S2
S1
Read byte 17
3BSE 036 959R4001
Section 3
I/O Module Data
Table 3-6 AI801 Dynamic Values Definitions

Abbreviation
S#
3BSE 036 959R4001
Name
Channel status #
Values
0 = channel OK
1 = channel error
41
Section 3
I/O Module Data

8 channels: 0...20 mA, 420 mA, 010 V, 210 V d.c.
tables below.
07
06
05
04
03
02
01
00
Family type = 4
0
Param. byte 1
Param. byte 2

DA8
42
DA7
DA6
DA5
Decimal bit
Param. byte 3
DA4
DA3
0
DA2
Param. byte 4
DA1
Param. byte 5
FT1
L1
Param. byte 6
FT2
L2
Param. byte 7
FT3
L3
Param. byte 8
FT4
L4
Param. byte 9
FT5
L5
Param. byte 10
FT6
L6
Param. byte 11
FT7
L7
Param. byte 12
FT8
L8
Param. byte 13
3BSE 036 959R4001
Section 3
I/O Module Data

Abbreviation
Name
Values
DA#

FT#
00 = filter off
01 = 200 ms
10 = 500 ms
11 = 2 s
L#
SR#
0 = 020 mA
1 = 420 mA
2 = 010 V
3 = 210 V
6 = 0...20 mA LL
7 = 4...20 mA LL
8 = 0...10 V LL
9 = 2...10 V LL
3BSE 036 959R4001
43
Section 3
I/O Module Data
below.
Table 3-9 AI810 Dynamic values
07
S8
44
06
S7
05
S6
04
03
02
01
00
Decimal bit
Analog value 1, MSB
Read byte 1
Analog value 1, LSB
Read byte 2
Analog value 2, MSB
Read byte 3
Analog value 2, LSB
Read byte 4
Analog value 3, MSB
Read byte 5
Analog value 3, LSB
Read byte 6
Analog value 4, MSB
Read byte 7
Analog value 4, LSB
Read byte 8
Analog value 5, MSB
Read byte 9
Analog value 5, LSB
Read byte 10
Analog value 6, MSB
Read byte 11
Analog value 6, LSB
Read byte 12
Analog value 7, MSB
Read byte 13
Analog value 7, LSB
Read byte 14
Analog value 8, MSB
Read byte 15
Analog value 8, LSB
Read byte 16
S5
S4
S3
S2
S1
Read byte 17
3BSE 036 959R4001
Section 3
I/O Module Data

Abbreviation
S#
Name
Channel status #
Values
0 = channel OK
1 = channel error
Refer to Table 3-2 for information on how analog process values are coded.
3BSE 036 959R4001
45
AI820 Differential Analog Input Module
Section 3
I/O Module Data
3.5 AI820 Differential Analog Input Module

4 channels: 20 mA, 420 mA, 10 V, 210 V, 5 V, 15 V d.c. bipolar
differential inputs.
tables below.
07
06
05
04
03
02
01
00
Decimal bit
Family type = 4
0
Param. byte 1
Param. byte 2
Param. byte 3
Not used - set to zero
DA4
DA3
0
DA2
Param. byte 4
DA1
Param. byte 5
FT1
L1
Param. byte 6
FT2
L2
Param. byte 7
FT3
L3
Param. byte 8
FT4
L4
Param. byte 9

Abbreviation
46
Name
Values
DA#

FT#
00 = filter off
01 = 200 ms
10 = 500 ms
11 = 2 s
3BSE 036 959R4001
Section 3
I/O Module Data
Table 3-12 AI820 Parameter Definitions (Continued)

Abbreviation
Name
Values
L#
SR#
0 = 020 mA
1 = 420 mA
2 = 010 V
3 = 210 V
4 = -20...20 mA
5 = -10...10 V
6 = 0...20 mA LL
7 = 4...20 mA LL
8 = 0...10 V LL
9 = 2...10 V LL
10 = -20...20 mA LL
11 = -10...10 V
12 = -5... 5 V
13 = 0...5 V
14 = 1...5 V
15 = -5...5 V LL
16 = 0...5 V LL
17 = 1...5 V LL
3BSE 036 959R4001
47
Section 3
I/O Module Data
below.
07
06
05
04
03
02
01
00
Decimal bit
Analog value 1, MSB
Read byte 1
Analog value 1, LSB
Read byte 2
Analog value 2, MSB
Read byte 3
Analog value 2, LSB
Read byte 4
Analog value 3, MSB
Read byte 5
Analog value 3, LSB
Read byte 6
Analog value 4, MSB
Read byte 7
Analog value 4, LSB
Read byte 8
S4
S3
S2
S1
Read byte 9

Abbreviation
S#
Name
Channel status #
Values
0 = channel OK
1 = channel error
48
3BSE 036 959R4001
Section 3
I/O Module Data
AI830 RTD Input Module
3.6 AI830 RTD Input Module

8 channels: Pt100, Cu10, Ni100, Ni120 and resistor inputs.
tables below.
07
06
05
04
03
02
01
00
Family type = 135

0
Param. byte 1
Param. byte 2

Decimal bit
Param. byte 3
G
Param. byte 4
FT1
DA1
Param. byte 5
FT2
DA2
Param. byte 6
FT3
DA3
Param. byte 7
FT4
DA4
Param. byte 8
FT5
DA5
Param. byte 9
FT6
DA6
Param. byte 10
FT7
DA7
Param. byte 11
FT8
DA8
Param. byte 12
3BSE 036 959R4001
49
Section 3
I/O Module Data

Abbreviation
50
Name
Values
Grid frequency, A/D converter

integration time
0 = 50 Hz
1 = 60 Hz
DA#
Deactivate channel#

FT#
Filter time channel#
00 = filter off
01 = 1 s
10 = 5 s
11 = 15 s
SR#
0 = -80...80 C Pt100
1 = -112...176 F Pt100
2 = -200...250C Pt100
3 = -328...482 F Pt100
4 = -200...850 C Pt100
5 = -328...1562 F Pt100
6 = -60180 C Ni100
7 = -76356 F Ni100
8 = -80260 C Ni120
9 = -112...500 F Ni120
10 = -100...260 C Cu10
11 = -148500 F Cu10
12 = 0400 resistor
3BSE 036 959R4001
Section 3
I/O Module Data
below.
07
S8
3BSE 036 959R4001
06
S7
05
S6
04
03
02
01
00
Decimal bit
Analog value 1, MSB
Read byte 1
Analog value 1, LSB
Read byte 2
Analog value 2, MSB
Read byte 3
Analog value 2, LSB
Read byte 4
Analog value 3, MSB
Read byte 5
Analog value 3, LSB
Read byte 6
Analog value 4, MSB
Read byte 7
Analog value 4, LSB
Read byte 8
Analog value 5, MSB
Read byte 9
Analog value 5, LSB
Read byte 10
Analog value 6, MSB
Read byte 11
Analog value 6, LSB
Read byte 12
Analog value 7, MSB
Read byte 13
Analog value 7, LSB
Read byte 14
Analog value 8, MSB
Read byte 15
Analog value 8, LSB
Read byte 16
S5
S4
S3
S2
S1
Read byte 17
51
Section 3
I/O Module Data

Abbreviation
S#
52
Name
Channel status #
Values
0 = channel OK
1 = channel error
3BSE 036 959R4001
Section 3
I/O Module Data
AI835 Thermocouple/mV Input Module
3.7 AI835 Thermocouple/mV Input Module

8 differential channels for thermocouple/mV.
tables below.
07
06
05
04
03
02
01
00
Family type = 136

0
Param. byte 1
Param. byte 2

C8
Decimal bit
Param. byte 3
G
Param. byte 4
FT1
DA1
Sensor type channel 1
Param. byte 5
FT2
DA2
Param. byte 6
FT3
DA3
Param. byte 7
FT4
DA4
Param. byte 8
FT5
DA5
Param. byte 9
FT6
DA6
Param. byte 10
FT7
DA7
Param. byte 11
FT8
DA8
Param. byte 12
C7
3BSE 036 959R4001
C6
C5
C4
C3
C2
C1
Param. byte 13
FJT byte 1 (MSB)
Param. byte 14
FJT byte 2 (LSB)
Param. byte 15
53
Section 3
I/O Module Data

Abbreviation
Name
Values

integration time
0 = 50 Hz
1 = 60 Hz
FJT
Fix junction temperature
The fix junction temperature

is a value in the range
0...65300 (decimal), linear to
the wanted value in the
physical range -40...100C or
-40...212F. FTJ byte 1 is the
most significant byte.
Example: Physical value
25C (77F) as FTJ = 30318.
54
FT
Filter time channel
00 = filter off
01 = 1 s
10 = 5 s
11 = 15 s
DA(1)

3BSE 036 959R4001
Section 3
I/O Module Data

Abbreviation
Name
Values
ST
Sensor type and thermocouple 0 = 441820C, type B

type per channel #
1 = 1113308F, type B
2 = 02300C, type C
3 = 32...4172F, type C
4 = -2701000 C, type E
5 = -4541832 F, type E
6 = -2101200 C, type J
7 = -3462192 F, type J
8 = -2701372 C, type K
9 = -4542501 F, type K
10 = -2701300 C, type N
11 = -4542372 F, type N
12 = -501768 C, type R
13 = -583214 F, type R
14 = -501768 C, type S
15 = -583214 F, type S
16 = -270400 C, type T
17 = -454752 F, type T
18 = -40100 C (2)
19 = -40212 F (2)
20 = -3075 mV (linear)
Cold junction temperature

channel #
0 = CJT measured via ch 8

1 = Fix CJT
(1) At least one channel must be set to operational to get module configured.
(2) Pt100 RTD is used for measurement of the cold junction temperature (if used, it must be
connected to channel 8).
3BSE 036 959R4001
55
Section 3
I/O Module Data
below.
07
S8
56
06
S7
05
S6
04
03
02
01
00
Decimal bit
Analog value 1, MSB
Read byte 1
Analog value 1, LSB
Read byte 2
Analog value 2, MSB
Read byte 3
Analog value 2, LSB
Read byte 4
Analog value 3, MSB
Read byte 5
Analog value 3, LSB
Read byte 6
Analog value 4, MSB
Read byte 7
Analog value 4, LSB
Read byte 8
Analog value 5, MSB
Read byte 9
Analog value 5, LSB
Read byte 10
Analog value 6, MSB
Read byte 11
Analog value 6, LSB
Read byte 12
Analog value 7, MSB
Read byte 13
Analog value 7, LSB
Read byte 14
Analog value 8, MSB
Read byte 15
Analog value 8, LSB
Read byte 16
S5
S4
S3
S2
S1
Read byte 17
3BSE 036 959R4001
Section 3
I/O Module Data

Abbreviation
S#
3BSE 036 959R4001
Name
Channel status #
Values
0 = channel OK
1 = channel error
57
Section 3
I/O Module Data
3.8 AI843 Thermocouple/mV Input Module

8 differential channels for Thermocouple/mV.
tables below.
07
06
05
04
03
02
01
00
Family type = 139

0
Param. byte 1
Param. byte 2

58
CJch
Decimal bit
Param. byte 3
G
Param. byte 4
FT1
DA1
Param. byte 5
FT2
DA2
Param. byte 6
FT3
DA3
Param. byte 7
FT4
DA4
Param. byte 8
FT5
DA5
Param. byte 9
FT6
DA6
Param. byte 10
FT7
DA7
Param. byte 11
FT8
DA8
Param. byte 12
C4
C3
C2
C1
Param. byte 13
C8
C7
C6
C5
Param. byte 14
FJT byte 1 (MSB)
Param. byte 15
FJT byte 2 (LSB)
Param. byte 16
3BSE 036 959R4001
Section 3
I/O Module Data

Abbreviation
Name
Values
CJch
Cold Junction channel


integration time
0 = 50 Hz
1 = 60 Hz
FT
Filter time channel
00 = filter off
01 = 1 s
10 = 5 s
11 = 15 s
DA

FJT
Fix junction temperature
The fix junction temperature is

a value in the range 0...65300
(decimal), linear to the wanted
value in the physical range
-40...100C or -40...212F.
FTJ byte 1 is the most
significant byte.
Example: Physical value 25C
(77F) as FTJ = 30318.
3BSE 036 959R4001
59
Section 3
I/O Module Data

Abbreviation
60
Name
Values
ST
Sensor type and thermocouple 0 = 441820C, type B

type per channel #
1 = 111.23308F, type B
2 = 02300C, type C
3 = 32...4172F, type C
4 = 0...2300C, type D
5 = 32...4172F, type D
6 = -2701000C, type E
7 = -4541832F, type E
8 = -2101200C, type J
9 = -3462192F, type J
10 = -2701372C, type K
11 = -4542501.6F, type K
12 = -200...900C, type L
13 = -328...1652F, type L
14 = -2701300C, type N
15 = -4542372F, type N
16 = -501768C, type R
17 = -583214.4F, type R
18 = -501768C, type S
19 = -583214.4F, type S
20 = -270400C, type T
21 = -454752F, type T
22 = -200...600C, type U
23 = -328...1112F, type U
24 = -3075 mV (linear)
Cold junction temperature

channel #
0 = CJT measured via CJT

input
1 = Fix CJT via parameter
2 = Application controlled CJT
3BSE 036 959R4001
Section 3
I/O Module Data
The memory map area is specified in the table below.

The configuration data for the module is: 0xC0, 0x81, 0x93.
07
S8
06
S7
05
04
03
02
01
00
Decimal bit
Analog value 1, MSB
Read byte 1
Analog value 1, LSB
Read byte 2
Analog value 2, MSB
Read byte 3
Analog value 2, LSB
Read byte 4
Analog value 3, MSB
Read byte 5
Analog value 3, LSB
Read byte 6
Analog value 4, MSB
Read byte 7
Analog value 4, LSB
Read byte 8
Analog value 5, MSB
Read byte 9
Analog value 5, LSB
Read byte 10
Analog value 6, MSB
Read byte 11
Analog value 6, LSB
Read byte 12
Analog value 7, MSB
Read byte 13
Analog value 7, LSB
Read byte 14
Analog value 8, MSB
Read byte 15
Analog value 8, LSB
Read byte 16
Analog value CJT input, MSB
Read byte 17
Analog value CJT input, LSB
Read byte 18
S6
S5
S4
S3
S2
S1
Read byte 19
CJch(1) Read byte 20
3BSE 036 959R4001
61
Section 3
I/O Module Data
Table 3-25 AI843 Dynamic values (Continued)

07
06
05
04
03
02
01
00
Decimal bit
Application controlled CJT, MSB
Write byte 1
Application controlled CJT, LSB
Write byte 2
(1) CJch is the channel status for CJT input channel.

Abbreviation
S#
62
Name
Channel status #
Values
0 = channel OK
1 = channel error
3BSE 036 959R4001
Section 3
I/O Module Data

8 channels: 0...20 mA, 4...20 mA, 0...5 V, 1...5 V.
The user parameter area is specified and the parameters are explained below.
07
06
05
04
03
02
01
00
Family type = 9
0
Param. byte 1
Param. byte 2

DA8
DA7
DA6
DA5
Decimal bit
Param. byte 3
SU
DA4
DA3
00
DA2
Param. byte 4
DA1
Param. byte 5
FT1
L1
Param. byte 6
FT2
L2
Param. byte 7
FT3
L3
Param. byte 8
FT4
L4
Param. byte 9
FT5
L5
Param. byte 10
FT6
L6
Param. byte 11
FT7
L7
Param. byte 12
FT8
L8
Param. byte 13
3BSE 036 959R4001
63
Section 3
I/O Module Data

Abbreviation
Name
Values
SU
External power supervision
0 = power supervision off

1 = power supervision on
DA#

FT#
00 = filter off
01 = 200 ms
10 = 500 ms
11 = 2 s
L#
1 = sqrt linearization
SR#
0 = 0...20 mA
1 = 4...20 mA
6 = 0...20 mA LL
7 = 4...20 mA LL
13 = 0...5 V
14 = 1...5 V
16 = 0...5 V LL
17 = 1...5 V LL
below.
The configuration data for this module is: 040, 0x90.
07
64
06
05
04
03
02
01
00
Decimal bit
Analog value 1, MSB
Read byte 1
Analog value 1, LSB
Read byte 2
3BSE 036 959R4001
Section 3
I/O Module Data

07
S8
06
S7
05
S6
04
03
02
01
00
Decimal bit
Analog value 2, MSB
Read byte 3
Analog value 2, LSB
Read byte 4
Analog value 3, MSB
Read byte 5
Analog value 3, LSB
Read byte 6
Analog value 4, MSB
Read byte 7
Analog value 4, LSB
Read byte 8
Analog value 5, MSB
Read byte 9
Analog value 5, LSB
Read byte 10
Analog value 6, MSB
Read byte 11
Analog value 6, LSB
Read byte 12
Analog value 7, MSB
Read byte 13
Analog value 7, LSB
Read byte 14
Analog value 8, MSB
Read byte 15
Analog value 8, LSB
Read byte 16
S5
S4
S3
S2
S1
Read byte 17

Abbreviation
S#
3BSE 036 959R4001
Name
Channel status #
Values
0 = channel OK
1 = channel error
65
Section 3
I/O Module Data

8 channels: 0...20 mA, 420 mA with Intrinsic Safety Interface.
tables below.
07
06
05
04
03
02
01
00
Family type = 4
0
Param. byte 1
Param. byte 2

DA8
66
DA7
DA6
DA5
Decimal bit
Param. byte 3
DA4
DA3
0
DA2
Param. byte 4
DA1
Param. byte 5
FT1
L1
Param. byte 6
FT2
L2
Param. byte 7
FT3
L3
Param. byte 8
FT4
L4
Param. byte 9
FT5
L5
Param. byte 10
FT6
L6
Param. byte 11
FT7
L7
Param. byte 12
FT8
L8
Param. byte 13
3BSE 036 959R4001
Section 3
I/O Module Data

Abbreviation
Name
Values
DA#

FT#
00 = filter off
01 = 200 ms
10 = 500 ms
11 = 2 s
L#
SR#
0 = 020 mA
1 = 420 mA
6 = 0...20 mA LL
7 = 4...20 mA LL
below. The configuration data for this module is: 0x40, 0x90.
07
3BSE 036 959R4001
06
05
04
03
02
01
00
Decimal bit
Analog value 1, MSB
Read byte 1
Analog value 1, LSB
Read byte 2
Analog value 2, MSB
Read byte 3
Analog value 2, LSB
Read byte 4
Analog value 3, MSB
Read byte 5
Analog value 3, LSB
Read byte 6
Analog value 4, MSB
Read byte 7
67
Section 3
I/O Module Data

07
S8
06
S7
05
S6
04
03
02
01
00
Decimal bit
Analog value 4, LSB
Read byte 8
Analog value 5, MSB
Read byte 9
Analog value 5, LSB
Read byte 10
Analog value 6, MSB
Read byte 11
Analog value 6, LSB
Read byte 12
Analog value 7, MSB
Read byte 13
Analog value 7, LSB
Read byte 14
Analog value 8, MSB
Read byte 15
Analog value 8, LSB
Read byte 16
S5
S4
S3
S2
S1
Read byte 17

Abbreviation
S#
Name
Channel status #
Values
0 = channel OK
1 = channel error
68
3BSE 036 959R4001
Section 3
I/O Module Data
AI893 Thermocouple/mV/RTD Input Module
3.11 AI893 Thermocouple/mV/RTD Input Module

8 differential channels for 2- or 3-wire Thermocouple/mV and RTD with Intrinsic
Safety Interface.
tables below.
07
06
05
04
03
02
01
00
Family type = 136

0
Param. byte 1
Param. byte 2

C8
Decimal bit
Param. byte 3
0
TT
Param. byte 4
FT1
DA1
Param. byte 5
FT2
DA2
Param. byte 6
FT3
DA3
Param. byte 7
FT4
DA4
Param. byte 8
FT5
DA5
Param. byte 9
FT6
DA6
Param. byte 10
FT7
DA7
Param. byte 11
FT8
DA8
Param. byte 12
C7
3BSE 036 959R4001
C6
C5
C4
C3
C2
C1
Param. byte 13
FJT byte 1 (MSB) (only for TC)
Param. byte 14
FJT byte 2 (LSB) (only for TC)
Param. byte 15
69
Section 3
I/O Module Data

Abbreviation
70
Name
Values
TT
Treatment type
0 = TC
1 = RTD
FT
Filter time channel
00 = filter off
01 = 1 s
10 = 5 s
11 = 15 s
DA
Deactivate channel # 0 = channel fully operational

1 = channel not operational and supervision
disabled
ST
Sensor type and

thermocouple type
per channel #
Temperature range, RTD mode

0 = RTD Pt 50 (IEC 751): -200...850C
1 = RTD Pt 50 (IEC 751): -328...1562F
2 = RTD Pt 100 (IEC 751): -200...850C
3 = RTD Pt 100 (IEC 751): -328...1562F
4 = RTD Pt 200 (IEC 751): -200...850C
5 = RTD Pt 200 (IEC 751): -328...1562F
6 = RTD Pt 500 (IEC 751): -200...850C
7 = RTD Pt 500 (IEC 751): -328...1562F
8 = RTD Pt 1000 (IEC 751): -200...850C
9 = RTD Pt 1000 (IEC 751): -328...1562F
10 = RTD Pt 50 (GOST 50353-92):
-200...850C
11 = RTD Pt 50 (GOST 50353-92):
-328...1562F
12 = RTD Pt 100 (GOST 50353-92):
-200...850C
13 = RTD Pt 100 (GOST 50353-92):
-328...1562F
14 = RTD Ni 100 (DIN 43760,
TRC=0.00617): -60...180C
15 = RTD Ni 100 (DIN 43760,
TRC=0.00617): -76...356F
3BSE 036 959R4001
Section 3
I/O Module Data

Abbreviation
Name
Values
16 = RTD Ni 200 (DIN 43760,
TRC=0.00617): -60...180C
17 = RTD Ni 200 (DIN 43760,
TRC=0.00617): -76...356F
18 = RTD Ni 500 (DIN 43760,
TRC=0.00617): -60...180C
19 = RTD Ni 500 (DIN 43760,
TRC=0.00617): -76...356F
20 = RTD Ni 120 (MIL-T-24388,
TRC=0.00672): -80...260C
21 = RTD Ni 120 (MIL-T-24388,
TRC=0.00672): -112...500F
22 = RTD Cu 10 (TRC=0.00427,
R25=10ohms MINCO): -100...260C
23 = RTD Cu10 (TRC=0.00427,
R25=10ohms MINCO): -148...500F
24 = RTD Cu 10 (GOST 50353-92,
TRC=0.00428): -200...200C
25 = RTD Cu 10 (GOST 50353-92,
TRC=0.00428): -328...417.6F
26 = RTD Cu 50 (GOST 50353-92,
TRC=0.00428): -200...200C
27 = RTD Cu 50 (GOST 50353-92,
TRC=0.00428): -328...417.6F
28 = RTD Cu 100 (GOST 50353-92,
TRC=0.00428): -200...200C
29 = RTD Cu 100 (GOST 50353-92,
TRC=0.00428): -328...417.6F
30 = Linear: 0...400 Ohm
31 = Linear: 0...4000 Ohm
Temperature range, TC mode
0 = TC B: 0...1820C
1 = TC B: 32...3308F
2 = TC C: 0...2300C
3 = TC C: 32...4172F
3BSE 036 959R4001
71
Section 3
I/O Module Data

Abbreviation
Name
Values
4 = TC D: 0...2300C
5 = TC D: 32...4172F
6 = TC E: -270...1000C
7 = TC E: -454...1832F
8 = TC J: -210...1200C
9 = TC J: -346...2192F
10 = TC K: -270...1372C
11 = TC K: -454...2501.6F
12 = TC L: -100...900C
13 = TC L: -212...1652F
14 = TC N: -270...1300C
15 = TC N: -454...2372F
16 = TC R: -50...1768C
17 = TC R: -58...3214.4F
18 = TC S: -50...1768C
19 = TC S: -58...3214.4F
20 = TC T: -270...400C
21 = TC T: -454...752F
22 = TC U: -200...600C
23 = TC U: -392...1112F
24 = RTD Pt 100: -40...100C (IEC 751)(1)
25 = RTD Pt 100: -40...212F (IEC 751)
26 = Linear: -10...25 mV
27 = Linear: -10...25 mV
28 = Linear: -10...25 mV
29 = Linear: -10...25 mV
30 = Linear: -10...25 mV
31 = Linear: -15...80 mV
72
3BSE 036 959R4001
Section 3
I/O Module Data

Abbreviation
Name
Values
C(2)
Cold junction
temperature
channel #
0 = CJT measured via ch 8

1 = Fix CJT
FJT(2)
Fix junction
temperature
The fix junction temperature is a value in the

range 0...65300 (decimal), linear to the
wanted value in the physical range
-40...100 C or -40...212 F. FTJ byte 1 is
the most significant byte.
Example: Physical value 25 C (77 F) as
FTJ = 30318
(1) Pt 100 RTD is used for measurement of the cold junction temperature (if used, it must be
connected to channel 8).
(2) Parameter is only used for TC modules (treatment type 0).

07
3BSE 036 959R4001
06
05
04
03
02
01
00
Decimal bit
Analog value 1, MSB
Read byte 1
Analog value 1, LSB
Read byte 2
Analog value 2, MSB
Read byte 3
Analog value 2, LSB
Read byte 4
Analog value 3, MSB
Read byte 5
Analog value 3, LSB
Read byte 6
Analog value 4, MSB
Read byte 7
Analog value 4, LSB
Read byte 8
Analog value 5, MSB
Read byte 9
73
Section 3
I/O Module Data

07
S8
06
S7
05
S6
04
03
02
01
00
Decimal bit
Analog value 5, LSB
Read byte 10
Analog value 6, MSB
Read byte 11
Analog value 6, LSB
Read byte 12
Analog value 7, MSB
Read byte 13
Analog value 7, LSB
Read byte 14
Analog value 8, MSB
Read byte 15
Analog value 8, LSB
Read byte 16
S5
S4
S3
S2
S1
Read byte 17

Abbreviation
S#
74
Name
Channel status #
Values
0 = channel OK
1 = channel error
3BSE 036 959R4001
Section 3
I/O Module Data

8 channels: 420 mA with Intrinsic Safety and HART Interface.
tables below.
07
06
05
04
03
02
01
00
Family type = 4
0
Param. byte 1
Param. byte 2

DA8
DA7
DA6
DA5
Decimal bit
Param. byte 3
DA4
DA3
0
DA2
Param. byte 4
DA1
Param. byte 5
FT1
L1
Param. byte 6
FT2
L2
Param. byte 7
FT3
L3
Param. byte 8
FT4
L4
Param. byte 9
FT5
L5
Param. byte 10
FT6
L6
Param. byte 11
FT7
L7
Param. byte 12
FT8
L8
Param. byte 13
3BSE 036 959R4001
75
Section 3
I/O Module Data

Abbreviation
Name
Values
DA#

FT#
00 = filter off
01 = 200 ms
10 = 500 ms
11 = 2 s
L#
SR#
1 = 420 mA
7 = 4...20 mA LL
below. The configuration data for this module is: 0x40, 0x90.
07
76
06
05
04
03
02
01
00
Decimal bit
Analog value 1, MSB
Read byte 1
Analog value 1, LSB
Read byte 2
Analog value 2, MSB
Read byte 3
Analog value 2, LSB
Read byte 4
Analog value 3, MSB
Read byte 5
Analog value 3, LSB
Read byte 6
Analog value 4, MSB
Read byte 7
Analog value 4, LSB
Read byte 8
3BSE 036 959R4001
Section 3
I/O Module Data

07
S8
06
S7
05
S6
04
03
02
01
00
Decimal bit
Analog value 5, MSB
Read byte 9
Analog value 5, LSB
Read byte 10
Analog value 6, MSB
Read byte 11
Analog value 6, LSB
Read byte 12
Analog value 7, MSB
Read byte 13
Analog value 7, LSB
Read byte 14
Analog value 8, MSB
Read byte 15
Analog value 8, LSB
Read byte 16
S5
S4
S3
S2
S1
Read byte 17

Abbreviation
S#
Name
Channel status #
Values
0 = channel OK
1 = channel error
Error codes at HART communication via CI801 and AO895, see Table 5-1.
3BSE 036 959R4001
77
AO801 Analog Output Module
Section 3
I/O Module Data
3.13 AO801 Analog Output Module

tables below.
Table 3-43 AO801 User Parameters in Normal Mode
07
06
05
04
03
02
01
00
Family type = 5
0
Param. byte 1
Param. byte 2

DA8
78
DA7
DA6
DA5
Decimal bit
Param. byte 3
DA4
DA3
0
DA2
Param. byte 4
DA1
Param. byte 5
SR2
OC2
SR1
OC1
Param. byte 6
SR4
OC4
SR3
OC3
Param. byte 7
SR6
OC6
SR5
OC5
Param. byte 8
SR8
OC8
SR7
OC7
Param. byte 9
OSP value channel 1
Param. byte 10
OSP value channel 2
Param. byte 11
OSP value channel 3
Param. byte 12
OSP value channel 4
Param. byte 13
OSP value channel 5
Param. byte 14
OSP value channel 6
Param. byte 15
OSP value channel 7
Param. byte 16
OSP value channel 8
Param. byte 17
3BSE 036 959R4001
Section 3
I/O Module Data
Table 3-44 AO801 Parameter Definitions

Abbreviation
Name
Values
DA#

SR#
0 = 020 mA
1 = 420 mA
OC#
OSP(1) control, channel #
0 = keep current value

1 = set OSP value upon loss
of communication
OV#
OSP value channel #
Reduced precision, 8 bits(2)
(1) Outputs Set as Predefined, that is, outputs are set to the OSP values specified by parameters.
(2) The most significant 8 bits of the 16-bit integer according to Table 3-2.

The configuration data for this module is: 0xC0, 0x8F, 0x80.
Table 3-45 AO801 Dynamic Values
07
06
05
04
03
02
01
00
S8
S7
S6
S5
S4
S3
S2
S1
3BSE 036 959R4001
Decimal bit
Read byte 1
Analog value 1, MSB
Write byte 1
Analog value 1, LSB
Write byte 2
Analog value 2, MSB
Write byte 3
Analog value 2, LSB
Write byte 4
Analog value 3, MSB
Write byte 5
Analog value 3, LSB
Write byte 6
79
Section 3
I/O Module Data
Table 3-45 AO801 Dynamic Values (Continued)

07
06
05
04
03
02
01
00
Decimal bit
Analog value 4, MSB
Write byte 7
Analog value 4, LSB
Write byte 8
Analog value 5, MSB
Write byte 9
Analog value 5, LSB
Write byte 10
Analog value 6, MSB
Write byte 11
Analog value 6 LSB
Write byte 12
Analog value 7, MSB
Write byte 13
Analog value 7, LSB
Write byte 14
Analog value 8, MSB
Write byte 15
Analog value 8, LSB
Write byte 16
Table 3-46 A0801 Dynamic Values Definitions

Abbreviation
S#
Name
Channel status #
Values
0 = channel OK
1 = channel error
.
80
3BSE 036 959R4001
Section 3
I/O Module Data

tables below.
07
06
05
04
03
02
01
00
Family type = 5
0
Param. byte 1
Param. byte 2

DA8
DA7
DA6
DA5
Decimal bit
Param. byte 3
DA4
DA3
0
DA2
Param. byte 4
DA1
Param. byte 5
SR2
OC2
SR1
OC1
Param. byte 6
SR4
OC4
SR3
OC3
Param. byte 7
SR6
OC6
SR5
OC5
Param. byte 8
SR8
OC8
SR7
OC7
Param. byte 9
3BSE 036 959R4001
OSP value channel 1
Param. byte 10
OSP value channel 2
Param. byte 11
OSP value channel 3
Param. byte 12
OSP value channel 4
Param. byte 13
OSP value channel 5
Param. byte 14
OSP value channel 6
Param. byte 15
OSP value channel 7
Param. byte 16
OSP value channel 8
Param. byte 17
81
Section 3
I/O Module Data

Abbreviation
Name
Values
DA#

SR#
0 = 020 mA
1 = 420 mA
OC#

of communication
OV#
OSP value channel #

82
07
06
05
04
03
02
01
00
S8
S7
S6
S5
S4
S3
S2
S1
Decimal bit
Read byte 1
Analog value 1, MSB
Write byte 1
Analog value 1, LSB
Write byte 2
Analog value 2, MSB
Write byte 3
Analog value 2, LSB
Write byte 4
Analog value 3, MSB
Write byte 5
Analog value 3, LSB
Write byte 6
3BSE 036 959R4001
Section 3
I/O Module Data

07
06
05
04
03
02
01
00
Decimal bit
Analog value 4, MSB
Write byte 7
Analog value 4, LSB
Write byte 8
Analog value 5, MSB
Write byte 9
Analog value 5, LSB
Write byte 10
Analog value 6, MSB
Write byte 11
Analog value 6 LSB
Write byte 12
Analog value 7, MSB
Write byte 13
Analog value 7, LSB
Write byte 14
Analog value 8, MSB
Write byte 15
Analog value 8, LSB
Write byte 16
Table 3-50 AO810 Dynamic Values Definitions

Abbreviation
S#
Name
Channel status #
Values
0 = channel OK
1 = channel error
3BSE 036 959R4001
83
AO820 Bipolar Analog Output Module
Section 3
I/O Module Data
3.15 AO820 Bipolar Analog Output Module

4 channels: 20 mA, 0...20 mA, 420 mA, 10 V, 0...10 V, 2...10 V.
tables below.
07
06
05
04
03
02
01
00
Family type = 5
0
Param. byte 1
Param. byte 2
84
Decimal bit
Param. byte 3
DA4
DA3
0
DA2
Param. byte 4
DA1
Param. byte 5
SR2
OC2
SR1
OC1
Param. byte 6
SR4
OC4
SR3
OC3
Param. byte 7
OSP value channel 1
Param. byte 8
OSP value channel 2
Param. byte 9
OSP value channel 3
Param. byte 10
OSP value channel 4
Param. byte 11
3BSE 036 959R4001
Section 3
I/O Module Data

Abbreviation
Name
Values
DA#

SR#
0 = 020 mA
1 = 420 mA
2 = 010 V
3 = 210 V
4 = -20...20 mA
5 = -10...10 V
OC#

of communication
OV#
OSP value channel #

The configuration data for this module is: 0xC0, 0x87, 0x80.
07
06
05
0
3BSE 036 959R4001
04
03
02
01
00
S4
S3
S2
S1
Decimal bit
Read byte 1
Analog value 1, MSB
Write byte 1
Analog value 1, LSB
Write byte 2
Analog value 2, MSB
Write byte 3
85
Section 3
I/O Module Data

07
06
05
04
03
02
01
00
Decimal bit
Analog value 2, LSB
Write byte 4
Analog value 3, MSB
Write byte 5
Analog value 3, LSB
Write byte 6
Analog value 4, MSB
Write byte 7
Analog value 4, LSB
Write byte 8

Abbreviation
S#
Name
Channel status #
Values
0 = channel OK
1 = channel error
86
3BSE 036 959R4001
Section 3
I/O Module Data

8 channels: 4...20 mA.
tables below.
07
06
05
04
03
02
01
00
Family type = 10
0
Param. byte 1
Param. byte 2

DA8
OF8
DA7
DA6
DA5
Decimal bit
Param. byte 3
DA4
DA3
00
DA2
Param. byte 4
DA1
Param. byte 5
SR2
OC2
SR1
OC1
Param. byte 6
SR4
OC4
SR3
OC3
Param. byte 7
SR6
OC6
SR5
OC5
Param. byte 8
SR8
OC8
SR7
OC7
Param. byte 9
OF7
3BSE 036 959R4001
OF6
OSP value channel 1
Param. byte 10
OSP value channel 2
Param. byte 11
OSP value channel 3
Param. byte 12
OSP value channel 4
Param. byte 13
OSP value channel 5
Param. byte 14
OSP value channel 6
Param. byte 15
OSP value channel 7
Param. byte 16
OSP value channel 8
Param. byte 17
OF5
OF4
OF3
OF2
OF1
Param byte 18
87
Section 3
I/O Module Data

Abbreviation
Name
Values
DA#

SR#
Single range channel #
1 = 4...20 mA
OC#
OSP control, channel #

of communication
OSP value #
OSP value channel #
Reduced precision, 8bits
OF#
Output filter channel #
0 = off
1 = on
Should be set when using
HART.

88
07
06
05
04
03
02
01
00
S8
S7
S6
S5
S4
S3
S2
S1
Decimal bit
Read byte 1
Analog value 1, MSB
Write byte 1
Analog value 1, LSB
Write byte 2
Analog value 2, MSB
Write byte 3
Analog value 2, LSB
Write byte 4
Analog value 3, MSB
Write byte 5
3BSE 036 959R4001
Section 3
I/O Module Data

07
06
05
04
03
02
01
00
Decimal bit
Analog value 3, LSB
Write byte 6
Analog value 4, MSB
Write byte 7
Analog value 4, LSB
Write byte 8
Analog value 5, MSB
Write byte 9
Analog value 5, LSB
Write byte 10
Analog value 6, MSB
Write byte 11
Analog value 6 LSB
Write byte 12
Analog value 7, MSB
Write byte 13
Analog value 7, LSB
Write byte 14
Analog value 8, MSB
Write byte 15
Analog value 8, LSB
Write byte 16

Abbreviation
S#
3BSE 036 959R4001
Name
Channel status #
Values
0 = channel OK
1 = channel error
89
Section 3
I/O Module Data

8 channels: 0...20 mA, 420 mA with Intrinsic Safety interface.
tables below.
07
06
05
04
03
02
01
00
Family type = 5
0
Param. byte 1
Param. byte 2

DA8
90
DA7
DA6
DA5
Decimal bit
Param. byte 3
DA4
DA3
0
DA2
Param. byte 4
DA1
Param. byte 5
SR2
OC2
SR1
OC1
Param. byte 6
SR4
OC4
SR3
OC3
Param. byte 7
SR6
OC6
SR5
OC5
Param. byte 8
SR8
OC8
SR7
OC7
Param. byte 9
OSP value channel 1
Param. byte 10
OSP value channel 2
Param. byte 11
OSP value channel 3
Param. byte 12
OSP value channel 4
Param. byte 13
OSP value channel 5
Param. byte 14
OSP value channel 6
Param. byte 15
OSP value channel 7
Param. byte 16
OSP value channel 8
Param. byte 17
3BSE 036 959R4001
Section 3
I/O Module Data

Abbreviation
Name
Values
DA#

SR#
0 = 020 mA
1 = 420 mA
OC#

of communication
OV#
OSP value channel #

07
06
05
04
03
02
01
00
S8
S7
S6
S5
S4
S3
S2
S1
3BSE 036 959R4001
Decimal bit
Read byte 1
Analog value 1, MSB
Write byte 1
Analog value 1, LSB
Write byte 2
Analog value 2, MSB
Write byte 3
Analog value 2, LSB
Write byte 4
Analog value 3, MSB
Write byte 5
Analog value 3, LSB
Write byte 6
91
Section 3
I/O Module Data

07
06
05
04
03
02
01
00
Decimal bit
Analog value 4, MSB
Write byte 7
Analog value 4, LSB
Write byte 8
Analog value 5, MSB
Write byte 9
Analog value 5, LSB
Write byte 10
Analog value 6, MSB
Write byte 11
Analog value 6 LSB
Write byte 12
Analog value 7, MSB
Write byte 13
Analog value 7, LSB
Write byte 14
Analog value 8, MSB
Write byte 15
Analog value 8, LSB
Write byte 16

Abbreviation
S#
Name
Channel status #
Values
0 = channel OK
1 = channel error
92
3BSE 036 959R4001
Section 3
I/O Module Data

8 channels: 420 mA with Intrinsic Safety and HART interface.
tables below.
07
06
05
04
03
02
01
00
Family type = 5
0
Param. byte 1
Param. byte 2

DA8
DA7
DA6
DA5
Decimal bit
Param. byte 3
DA4
DA3
0
DA2
Param. byte 4
DA1
Param. byte 5
SR2
OC2
SR1
OC1
Param. byte 6
SR4
OC4
SR3
OC3
Param. byte 7
SR6
OC6
SR5
OC5
Param. byte 8
SR8
OC8
SR7
OC7
Param. byte 9
3BSE 036 959R4001
OSP value channel 1
Param. byte 10
OSP value channel 2
Param. byte 11
OSP value channel 3
Param. byte 12
OSP value channel 4
Param. byte 13
OSP value channel 5
Param. byte 14
OSP value channel 6
Param. byte 15
OSP value channel 7
Param. byte 16
OSP value channel 8
Param. byte 17
93
Section 3
I/O Module Data

Abbreviation
Name
Values
DA#

SR#
1 = 420 mA
OC#

of communication
OV#
OSP value channel #

94
07
06
05
04
03
02
01
00
S8
S7
S6
S5
S4
S3
S2
S1
Decimal bit
Read byte 1
Analog value 1, MSB
Write byte 1
Analog value 1, LSB
Write byte 2
Analog value 2, MSB
Write byte 3
Analog value 2, LSB
Write byte 4
Analog value 3, MSB
Write byte 5
Analog value 3, LSB
Write byte 6
Analog value 4, MSB
Write byte 7
3BSE 036 959R4001
Section 3
I/O Module Data

07
06
05
04
03
02
01
00
Decimal bit
Analog value 4, LSB
Write byte 8
Analog value 5, MSB
Write byte 9
Analog value 5, LSB
Write byte 10
Analog value 6, MSB
Write byte 11
Analog value 6 LSB
Write byte 12
Analog value 7, MSB
Write byte 13
Analog value 7, LSB
Write byte 14
Analog value 8, MSB
Write byte 15
Analog value 8, LSB
Write byte 16

Abbreviation
S#
Name
Channel status #
Values
0 = channel OK
1 = channel error
Error codes at HART communication via CI801 and AO895, see Table 5-1.
3BSE 036 959R4001
95
DI801 Digital Input Module, 24 V
Section 3
I/O Module Data
3.19 DI801 Digital Input Module, 24 V

16 channels: 24 V d.c. current sinking.
DI801 has no separate input for sensor power supervision.
Channels 16 can be used for sensor power supervision.
The user parameter area is specified in the table below.
Table 3-67 DI801 User Parameters in Normal Mode
07
06
05
04
03
02
01
00
Family type = 1
0
Param. byte 1
Param. byte 2
Position see Table 3-1

Decimal bit
Param. byte 3
SU
Param. byte 4
DA8
DA7
DA6
DA5
DA4
DA3
DA2
DA1
Param. byte 5
DA16
DA15
DA14
DA13
DA12
DA11
DA10
DA9
Param. byte 6
FT
Param. byte 7
Table 3-68 DI801 Parameter Definitions

Abbreviation
96
Name
Values
DA#

FT
Filter time for all channels
00 = 2 ms
01 = 4 ms
10 = 8 ms
11 = 16 ms
SU
Sensor power supervision

3BSE 036 959R4001
Section 3
I/O Module Data
The memory map area for dynamic values is specified and its contents are explained
in the two tables below.
Table 3-69 DI801 Dynamic Values
07
06
05
04
03
02
01
00
Decimal bit
D16
D15
D14
D13
D12
D11
D10
D9
Read byte 1
D8
D7
D6
D5
D4
D3
D2
D1
Read byte 2
S16
S15
S14
S13
S12
S11
S10
S9
Read byte 3
S8
S7
S6
S5
S4
S3
S2
S1
Read byte 4
Table 3-70 DI801 Dynamic Values Definitions

Abbreviation
Name
Values
D#
Digital value channel #
0 or 1
S#
Channel status #
0 = channel OK
1 = channel error
3BSE 036 959R4001
97
DI802 Digital Input Module, 120 V a.c./d.c.
Section 3
I/O Module Data
3.20 DI802 Digital Input Module, 120 V a.c./d.c.

8 channels: 120 V a.c./d.c. with individually isolated points.
DI802 has no separate input channels for sensor power supervision. Instead can
channel 8 be used as inputs for sensor power supervision for channels 1 to 7.
07
06
05
04
03
02
01
00
Family type = 1
0
Param. byte 1
Param. byte 2

DA8
DA7
DA6
DA5
Decimal bit
Param. byte 3
SU
DA4
DA3
0
DA2
Param. byte 4
DA1
FT
Param. byte 5
Param. byte 6

Abbreviation
98
Name
Values
DA#

FT
00 = 2 ms
01 = 4 ms
10 = 8 ms
11 = 16 ms
SU

3BSE 036 959R4001
Section 3
I/O Module Data
below.
07
06
05
04
03
02
01
00
Decimal bit
D8
D7
D6
D5
D4
D3
D2
D1
Read byte 1
S8
S7
S6
S5
S4
S3
S2
S1
Read byte 2

Abbreviation
Name
Values
D#
0 or 1
S#
Channel status #
0 = channel OK
1 = channel error
3BSE 036 959R4001
99
Section 3
I/O Module Data

channel 8 be used as inputs for sensor power supervision for channels 1 to 7.
07
06
05
04
03
02
01
00
Family type = 1
0
Param. byte 1
Param. byte 2

DA8
DA7
DA6
DA5
Decimal bit
Param. byte 3
SU
DA4
DA3
0
DA2
Param. byte 4
DA1
FT
Param. byte 5
Param. byte 6

Abbreviation
100
Name
Values
DA#

FT
00 = 2 ms
01 = 4 ms
10 = 8 ms
11 = 16 ms
SU

3BSE 036 959R4001
Section 3
I/O Module Data
below.
07
06
05
04
03
02
01
00
Decimal bit
D8
D7
D6
D5
D4
D3
D2
D1
Read byte 1
S8
S7
S6
S5
S4
S3
S2
S1
Read byte 2

Abbreviation
Name
Values
D#
0 or 1
S#
Channel status #
0 = channel OK
1 = channel error
3BSE 036 959R4001
101
Section 3
I/O Module Data

DI810 has two separate inputs for sensor power supervision.
One for channels 1 to 8, and one for channels 9 to 16.
07
06
05
04
03
02
01
00
Family type = 1
0
Param. byte 1
Param. byte 2

Decimal bit
Param. byte 3
SU
Param. byte 4
DA8
DA7
DA6
DA5
DA4
DA3
DA2
DA1
Param. byte 5
DA16
DA15
DA14
DA13
DA12
DA11
DA10
DA9
Param. byte 6
FT
Param. byte 7

Abbreviation
102
Name
Values
DA#

FT
00 = 2 ms
01 = 4 ms
10 = 8 ms
11 = 16 ms
SU

3BSE 036 959R4001
Section 3
I/O Module Data
below. The configuration data for this module is: 0x93.
07
06
05
04
03
02
01
00
Decimal bit
D16
D15
D14
D13
D12
D11
D10
D9
Read byte 1
D8
D7
D6
D5
D4
D3
D2
D1
Read byte 2
S16
S15
S14
S13
S12
S11
S10
S9
Read byte 3
S8
S7
S6
S5
S4
S3
S2
S1
Read byte 4

Abbreviation
Name
Values
D#
0 or 1
S#
Channel status #
0 = channel OK
1 = channel error
3BSE 036 959R4001
103
Section 3
I/O Module Data

DI811 has two separate inputs for sensor power supervision, one for channels 1 to 8,
and one for channels 9 to 16.
07
06
05
04
03
02
01
00
Family type = 1
0
Param. byte 1
Param. byte 2

Decimal bit
Param. byte 3
SU
Param. byte 4
DA8
DA7
DA6
DA5
DA4
DA3
DA2
DA1
Param. byte 5
DA16
DA15
DA14
DA13
DA12
DA11
DA10
DA9
Param. byte 6
FT
Param. byte 7

Abbreviation
104
Name
Values
DA#

FT
00 = 2 ms
01 = 4 ms
10 = 8 ms
11 = 16 ms
SU

3BSE 036 959R4001
Section 3
I/O Module Data
below.
07
06
05
04
03
02
01
00
Decimal bit
D16
D15
D14
D13
D12
D11
D10
D9
Read byte 1
D8
D7
D6
D5
D4
D3
D2
D1
Read byte 2
S16
S15
S14
S13
S12
S11
S10
S9
Read byte 3
S8
S7
S6
S5
S4
S3
S2
S1
Read byte 4

Abbreviation
Name
Values
D#
0 or 1
S#
Channel status #
0 = channel OK
1 = channel error
3BSE 036 959R4001
105
DI814 Digital Input Module, 24 V Current Source
Section 3
I/O Module Data
3.24 DI814 Digital Input Module, 24 V Current Source

16 channels: 24 V d.c. current source.
DI814 has two separate inputs for sensor power supervision, one for channels 1 to 8,
and one for channels 9 to 16.
07
06
05
04
03
02
01
00
Family type = 1
0
Param. byte 1
Param. byte 2

Decimal bit
Param. byte 3
SU
Param. byte 4
DA8
DA7
DA6
DA5
DA4
DA3
DA2
DA1
Param. byte 5
DA16
DA15
DA14
DA13
DA12
DA11
DA10
DA9
Param. byte 6
FT
Param. byte 7

Abbreviation
106
Name
Values
DA#

FT
00 = 2 ms
01 = 4 ms
10 = 8 ms
11 = 16 ms
SU

3BSE 036 959R4001
Section 3
I/O Module Data
DI814 Digital Input Module, 24 V Current Source
below.
07
06
05
04
03
02
01
00
Decimal bit
D16
D15
D14
D13
D12
D11
D10
D9
Read byte 1
D8
D7
D6
D5
D4
D3
D2
D1
Read byte 2
S16
S15
S14
S13
S12
S11
S10
S9
Read byte 3
S8
S7
S6
S5
S4
S3
S2
S1
Read byte 4

Abbreviation
Name
Values
D#
0 or 1
S#
Channel status #
0 = channel OK
1 = channel error
3BSE 036 959R4001
107
Section 3
I/O Module Data

channels 1 and 8 be used as inputs for sensor power supervision, channel 1 for
channels 2 to 4, and channel 8 for channels 5 to 7.
07
06
05
04
03
02
01
00
Family type = 1
0
Param. byte 1
Param. byte 2

DA8
DA7
DA6
DA5
Decimal bit
Param. byte 3
SU
DA4
DA3
0
DA2
Param. byte 4
DA1
FT
Param. byte 5
Param. byte 6

Abbreviation
108
Name
Values
DA#

FT
00 = 2 ms
01 = 4 ms
10 = 8 ms
11 = 16 ms
SU

3BSE 036 959R4001
Section 3
I/O Module Data
below.
07
06
05
04
03
02
01
00
Decimal bit
D8
D7
D6
D5
D4
D3
D2
D1
Read byte 1
S8
S7
S6
S5
S4
S3
S2
S1
Read byte 2

Abbreviation
Name
Values
D#
0 or 1
S#
Channel status #
0 = channel OK
1 = channel error
3BSE 036 959R4001
109
Section 3
I/O Module Data

channels 1 and 8 be used as inputs for sensor power supervision, channel 1 for
channels 2 to 4, and channel 8 for channels 5 to 7.
07
06
05
04
03
02
01
00
Family type = 1
0
Param. byte 1
Param. byte 2

DA8
DA7
DA6
DA5
Decimal bit
Param. byte 3
SU
DA4
DA3
0
DA2
Param. byte 4
DA1
FT
Param. byte 5
Param. byte 6

Abbreviation
110
Name
Values
DA#

FT
00 = 2 ms
01 = 4 ms
10 = 8 ms
11 = 16 ms
SU

3BSE 036 959R4001
Section 3
I/O Module Data
below.
07
06
05
04
03
02
01
00
Decimal bit
D8
D7
D6
D5
D4
D3
D2
D1
Read byte 1
S8
S7
S6
S5
S4
S3
S2
S1
Read byte 2

Abbreviation
Name
Values
D#
0 or 1
S#
Channel status #
0 = channel OK
1 = channel error
3BSE 036 959R4001
111
DI840 Digital Input Module
Section 3
I/O Module Data
3.27 DI840 Digital Input Module

16 channels: 24 V.
tables below.
07
06
05
04
03
02
01
00
Family type = 7
0
Param. byte 1
Param. byte 2

Param. byte 3
SU
not used - set to zero
112
Decimal bit
00
Param. byte 4
CS
Param. byte 5
FT2
DA2
FT1
DA1
Param. byte 6
FT4
DA4
FT3
DA3
Param. byte 7
FT6
DA6
FT5
DA5
Param. byte 8
FT8
DA8
FT7
DA7
Param. byte 9
FT10
DA10
FT9
DA9
Param. byte 10
FT12
DA12
FT11
DA11
Param. byte 11
FT14
DA14
FT13
DA13
Param. byte 12
FT16
DA16
FT15
DA15
Param. byte 13
3BSE 036 959R4001
Section 3
I/O Module Data

Abbreviation
Name
Values
DA#

FT#
Filter time for all channels #
000 = 0 ms
001 = 2 ms
010 = 4 ms
011 = 8 ms
100 = 16 ms
101 = 32 ms
110 = 64 ms
111 = 127 ms
SU

CS
Channel supervision
0 = channel supervision off

1 = channel supervision on

07
06
05
04
03
02
01
00
D16
D15
D14
D13
D12
D11
D10
D9
Read byte 1
D8
D7
D6
D5
D4
D3
D2
D1
Read byte 2
S16
S15
S14
S13
S12
S11
S10
S9
Read byte 3
S8
S7
S6
S5
S4
S3
S2
S1
Read byte 4
3BSE 036 959R4001
Decimal bit
113
Section 3
I/O Module Data

Abbreviation
Name
Values
D#
0 or 1
S#
Channel status #
0 = channel OK
1 = channel error
114
3BSE 036 959R4001
Section 3
I/O Module Data

8 channels: Proximity sensor, voltage-free contact, with Intrinsic Safety Interface.
DI890 has sensor power supervision and channel supervision on each channel.
07
06
05
04
03
02
01
00
Family type = 1
0
Param. byte 1
Param. byte 2

DA8
DA7
DA6
DA5
Param. byte 3
SU
DA4
DA3
01
DA2
0
X8
X7
X6
Param. byte 4
DA1
FT
X5
X4
Decimal bit
X3
X2
Param. byte 5
Param. byte 6
X1
Param. byte 7

Abbreviation
Name
Values
DA#

X#(1)
Channel supervision
channel #

3BSE 036 959R4001
115
Section 3
I/O Module Data
Table 3-104 DI890 Parameter Definitions (Continued)

Abbreviation
Name
Values
FT
00 = 2 ms
01 = 4 ms
10 = 8 ms
11 = 16 ms
SU

(1) Sensor power supervision must be set to ON to get channel supervision.
below.
07
06
05
04
03
02
01
00
Decimal bit
D8
D7
D6
D5
D4
D3
D2
D1
Read byte 1
S8
S7
S6
S5
S4
S3
S2
S1
Read byte 2

Abbreviation
116
Name
Values
D#
0 or 1
S#
Channel status #
0 = channel OK
1 = channel error
3BSE 036 959R4001
Section 3
I/O Module Data
DO801 Digital Output Module, 24 V
3.29 DO801 Digital Output Module, 24 V

tables below.
Table 3-107 DO801 User Parameters in Normal Mode
07
06
05
04
03
02
01
00
Decimal bit
Family type = 2
0
Param. byte 1
Param. byte 2

Param. byte 3
SU
Param. byte 4
DA8
DA7
DA6
DA5
DA4
DA3
DA2
DA1
Param. byte 5
DA16
DA15
DA14
DA13
DA12
DA11
DA10
DA9
Param. byte 6
OC8
OC7
OC6
OC5
OC4
OC3
OC2
OC1
Param. byte 7
OC16
OC15
OC14
OC13
OC12
OC11
OC10
OC9
Param. byte 8
OV8
OV7
OV6
OV5
OV4
OV3
OV2
OV1
Param. byte 9
OV16
OV15
OV14
OV13
OV12
OV11
OV10
OV9
Param. byte 10
Table 3-108 DO801 Parameter Definitions

Abbreviation
Name
Values
SU

DA#

3BSE 036 959R4001
117
Section 3
I/O Module Data
Table 3-108 DO801 Parameter Definitions (Continued)

Abbreviation
Name
Values
OC#
OSP(1) control

of communication
OV#
OSP value
0 or 1

The configuration data for this module is: 0xB1
Table 3-109 DO801 Dynamic Values
07
06
05
04
03
02
01
00
Decimal bit
S16
S15
S14
S13
S12
S11
S10
S9
Read byte 1
S8
S7
S6
S5
S4
S3
S2
S1
Read byte 2
D16
D15
D14
D13
D12
D11
D10
D9
Write byte 1
D8
D7
D6
D5
D4
D3
D2
D1
Write byte 2
Table 3-110 DO801 Dynamic Values Definitions

Abbreviation
118
Name
Values
D#
0 or 1
S#
Channel status #
0 = channel OK
1 = channel error
3BSE 036 959R4001
Section 3
I/O Module Data
DO802 Digital Output Module, Relay
3.30 DO802 Digital Output Module, Relay

8 channels: 230 V a.c./d.c. with relays, normally open.
tables below.
07
06
05
04
03
02
01
00
Family type = 2
0
Param. byte 1
Param. byte 2

No no channels - 1 = 7
Decimal bit
Param. byte 3
SU
Param. byte 4
DA8
DA7
DA6
DA5
DA4
DA3
DA2
DA1
Param. byte 5
OC8
OC7
OC6
OC5
OC4
OC3
OC2
OC1
Param. byte 6
OV8
OV7
OV6
OV5
OV4
OV3
OV2
OV1
Param. byte 7

Abbreviation
Name
Values
SU
Power supervision
0 = power supervision off,

DA#

OC#
OSP(1) control

of communication
OV#
OSP value
0 or 1
3BSE 036 959R4001
119
Section 3
I/O Module Data

The configuration data for this module is: 0xB0.
07
06
05
04
03
02
01
00
Decimal bit
S8
S7
S6
S5
S4
S3
S2
S1
Read byte1
D8
D7
D6
D5
D4
D3
D2
D1
Write byte 1

Abbreviation
120
Name
Values
D#
0 or 1
S#
Channel status #
0 = channel OK
1 = channel error
3BSE 036 959R4001
Section 3
I/O Module Data

tables below.
07
06
05
04
03
02
01
00
Family type = 2
0
Param. byte 1
Param. byte 2

Decimal bit
Param. byte 3
SU
Param. byte 4
DA8
DA7
DA6
DA5
DA4
DA3
DA2
DA1
Param. byte 5
DA16
DA15
DA14
DA13
DA12
DA11
DA10
DA9
Param. byte 6
OC8
OC7
OC6
OC5
OC4
OC3
OC2
OC1
Param. byte 7
OC16
OC15
OC14
OC13
OC12
OC11
OC10
OC9
Param. byte 8
OV8
OV7
OV6
OV5
OV4
OV3
OV2
OV1
Param. byte 9
OV16
OV15
OV14
OV13
OV12
OV11
OV10
OV9
Param. byte
10

Abbreviation
Name
Values
SU

DA#

3BSE 036 959R4001
121
Section 3
I/O Module Data

Abbreviation
Name
Values
OC#
OSP(1) control

of communication
OV#
OSP value
0 or 1

07
06
05
04
03
02
01
00
Decimal bit
S16
S15
S14
S13
S12
S11
S10
S9
Read byte 1
S8
S7
S6
S5
S4
S3
S2
S1
Read byte2
D16
D15
D14
D13
D12
D11
D10
D9
Write byte 1
D8
D7
D6
D5
D4
D3
D2
D1
Write byte 2

Abbreviation
122
Name
Values
D#
0 or 1
S#
Channel status #
0 = channel OK
1 = channel error
3BSE 036 959R4001
Section 3
I/O Module Data
DO814 Digital Output Module, 24 V Current Sinking
3.32 DO814 Digital Output Module, 24 V Current Sinking

tables below.
07
06
05
04
03
02
01
00
Family type = 2
0
Param. byte 1
Param. byte 2

Decimal bit
Param. byte 3
SU
Param. byte 4
DA8
DA7
DA6
DA5
DA4
DA3
DA2
DA1
Param. byte 5
DA16
DA15
DA14
DA13
DA12
DA11
DA10
DA9
Param. byte 6
OC8
OC7
OC6
OC5
OC4
OC3
OC2
OC1
Param. byte 7
OC16
OC15
OC14
OC13
OC12
OC11
OC10
OC9
Param. byte 8
OV8
OV7
OV6
OV5
OV4
OV3
OV2
OV1
Param. byte 9
OV16
OV15
OV14
OV13
OV12
OV11
OV10
OV9
Param. byte
10

Abbreviation
Name
Values
SU

DA#

3BSE 036 959R4001
123
DO814 Digital Output Module, 24 V Current Sinking
Section 3
I/O Module Data

Abbreviation
Name
Values
OC#
OSP(1) control

of communication
OV#
OSP value
0 or 1

07
06
05
04
03
02
01
00
Decimal bit
S16
S15
S14
S13
S12
S11
S10
S9
Read byte 1
S8
S7
S6
S5
S4
S3
S2
S1
Read byte 2
D16
D15
D14
D13
D12
D11
D10
D9
Write byte 1
D8
D7
D6
D5
D4
D3
D2
D1
Write byte 2

Abbreviation
124
Name
Values
D#
0 or 1
S#
Channel status #
0 = channel OK
1 = channel error
3BSE 036 959R4001
Section 3
I/O Module Data

8 channels: 24 V d.c.
DO815 has sensor power supervision and error latch on each channel.
tables below.
07
06
05
04
03
02
01
00
Family type = 2
0
Param. byte 1
Param. byte 2

Decimal bit
Param. byte 3
SU
01
Param. byte 4
DA8
DA7
DA6
DA5
DA4
DA3
DA2
DA1
Param. byte 5
OC8
OC7
OC6
OC5
OC4
OC3
OC2
OC1
Param. byte 6
OV8
OV7
OV6
OV5
OV4
OV3
OV2
OV1
Param. byte 7
X8
X7
X6
X5
X4
X3
X2
X1
Param. byte 8

Abbreviation
Name
Values
SU
Channel power supervision

DA#

3BSE 036 959R4001
125
Section 3
I/O Module Data

Abbreviation
Name
Values
OC#
OSP(1) control

of communication
OV#
OSP value
0 or 1
X#
Output fault operation mode

channel #
0 = Automatic reset mode

1 = Fault latching mode
If Fault latching mode
Transition between 1 and 0
serves as acknowledgement
of channel error (the error
marking does not disappear
until acknowledgement).

07
06
05
04
03
02
01
00
Decimal bit
S8
S7
S6
S5
S4
S3
S2
S1
Read byte1
D8
D7
D6
D5
D4
D3
D2
D1
Write byte 1

Abbreviation
126
Name
Values
D#
0 or 1
S#
Channel status #
0 = channel OK
1 = channel error
3BSE 036 959R4001
Section 3
I/O Module Data

8 channels: 230 V a.c./d.c. with relays, normally open.
tables below.
07
06
05
04
03
02
01
00
Family type = 2
0
Param. byte 1
Param. byte 2

No no channels - 1 = 7
Decimal bit
Param. byte 3
SU
Param. byte 4
DA8
DA7
DA6
DA5
DA4
DA3
DA2
DA1
Param. byte 5
OC8
OC7
OC6
OC5
OC4
OC3
OC2
OC1
Param. byte 6
OV8
OV7
OV6
OV5
OV4
OV3
OV2
OV1
Param. byte 7

Abbreviation
Name
Values
SU
Power supervision
0 = power supervision off,

DA#

OC#
OSP(1) control

of communication
OV#
OSP value
0 or 1
3BSE 036 959R4001
127
Section 3
I/O Module Data

07
06
05
04
03
02
01
00
Decimal bit
S8
S7
S6
S5
S4
S3
S2
S1
Read byte1
D8
D7
D6
D5
D4
D3
D2
D1
Write byte 1

Abbreviation
128
Name
Values
D#
0 or 1
S#
Channel status #
0 = channel OK
1 = channel error
3BSE 036 959R4001
Section 3
I/O Module Data

8 channels: 230 V a.c./d.c. with relays, normally closed.
tables below.
07
06
05
04
03
02
01
00
Family type = 2
0
Param. byte 1
Param. byte 2

Decimal bit
Param. byte 3
SU
Param. byte 4
DA8
DA7
DA6
DA5
DA4
DA3
DA2
DA1
Param. byte 5
OC8
OC7
OC6
OC5
OC4
OC3
OC2
OC1
Param. byte 6
OV8
OV7
OV6
OV5
OV4
OV3
OV2
OV1
Param. byte 7

Abbreviation
Name
Values
SU
Power supervision

DA#

OC#
OSP(1) control

of communication
OV#
OSP value
0 or 1
3BSE 036 959R4001
129
Section 3
I/O Module Data

07
06
05
04
03
02
01
00
Decimal bit
S8
S7
S6
S5
S4
S3
S2
S1
Read byte1
D8
D7
D6
D5
D4
D3
D2
D1
Write byte 1

Abbreviation
130
Name
Values
D#
0 or 1
S#
Channel status #
0 = channel OK
1 = channel error
3BSE 036 959R4001
Section 3
I/O Module Data
DO840 Digital Output Module
3.36 DO840 Digital Output Module

16 channels: 24 V.
tables below.
07
06
05
04
03
02
01
00
Decimal bit
Family type = 8
0
Param. byte 1
Param. byte 2

Param. byte 3
SU
00
Param. byte 4
DA8
DA7
DA6
DA5
DA4
DA3
DA2
DA1
Param. byte 5
DA16
DA15
DA14
DA13
DA12
DA11
DA10
DA9
Param. byte 6
OC8
OC7
OC6
OC5
OC4
OC3
OC2
OC1
Param. byte 7
OC16
OC15
OC14
OC13
OC12
OC11
OC10
OC9
Param. byte 8
OV8
OV7
OV6
OV5
OV4
OV3
OV2
OV1
Param. byte 9
OV16
OV15
OV14
OV13
OV12
OV11
OV10
OV9
Param. byte 10
OPM2
OPM1
ICED2
ICED1
PTD2
PTD1
Param. byte 11

Abbreviation
Name
Values
SU

DA#

3BSE 036 959R4001
131
Section 3
I/O Module Data

Abbreviation
Name
Values
OC#
OSP control, channel #

of communication
OV#
OSP value, channel #
0 or 1
PTD#
Pulse test disabled on group

#. (DO840 has two groups
each on 8 channels.)
0 = pulse test enabled(1)

1 = pulse test disabled
ICED#
Internal channel error

deactivated on group #
0 = deactivation disabled
1 = deactivation enabled
OPM#
Output channel mode on

group#
0 = automatic reset mode

1 = latch on fault mode
(1) Allow short pulse bursts (1 ms every 100 ms) of opposite values on the outputs.

132
07
06
05
04
03
02
01
00
Decimal bit
S16
S15
S14
S13
S12
S11
S10
S9
Read byte 1
S8
S7
S6
S5
S4
S3
S2
S1
Read byte 2
D16
D15
D14
D13
D12
D11
D10
D9
Write byte 1
D8
D7
D6
D5
D4
D3
D2
D1
Write byte 2
3BSE 036 959R4001
Section 3
I/O Module Data

Abbreviation
Name
Values
D#
0 or 1
S#
Channel status #
0 = channel OK
1 = channel error
3BSE 036 959R4001
133
Section 3
I/O Module Data

4 channels: 24 V d.c. with Intrinsic Safety Interface
DO890 has output power supervision and channel supervision on each channel.
tables below.
07
06
05
04
03
02
01
00
Family type = 2
0
Param. byte 1
Param. byte 2

Decimal bit
Param. byte 3
SU
01
Param. byte 4
DA4
DA3
DA2
DA1
OC4
OC3
OC2
OC1
Param. byte 5
OV4
OV3
OV2
OV1
X4
X3
X2
X1
Param. byte 6

Abbreviation
134
Name
Values
SU
Module & channel supervision 0 = supervision off,

1 = supervision on
DA#

OC#
OSP(1) control

of communication
3BSE 036 959R4001
Section 3
I/O Module Data

Abbreviation
OV#
X#
Name
Values
OSP value
0 or 1
Channel supervision channel

#(2)
0 = supervision off
1 = supervision on
(2)

07
06
05
04
03
02
01
00
Decimal bit
S4
S3
S2
S1
Read byte1
D4
D3
D2
D1
Write byte 1

Abbreviation
Name
Values
D#
0 or 1
S#
Channel status #
0 = channel OK
1 = channel error
3BSE 036 959R4001
135
DP820 Incremental Pulse Encounter Module
Section 3
I/O Module Data
3.38 DP820 Incremental Pulse Encounter Module

Incremental pulse encounter with two channels for position, speed and frequency
measurement.
tables below.
Table 3-143 DP820 User Parameters in Normal Mode
07
06
05
04
03
02
01
00
Family type = 6
0
Param. byte 1
Param. byte 2

0
OV2
OV1
Not used - set to 0
136
Param. byte 3
PM2
DO mode 2
Decimal bit
Param. byte 4
PM1
Param. byte 5
DOPW1
Param. byte 6
DOPW2
Param. byte 7
PRIT1
Param. byte 8
PRIT2
Param. byte 9
DO mode 1
GC 2
GC1
Param. byte 10
OC2
OC1
MIS 2
MIS 1
MIC2
MIC 1
Param. byte 11
FDI2
FDI1
FST2
FST1
FAB2
FAB1
Param. byte 12
3BSE 036 959R4001
Section 3
I/O Module Data
Table 3-144 DP820 Parameter Definitions

Abbreviation
Name
Values
PM#
Pulse Mode
0 = Input A for up-count, Input B for down-count

1 = Quadrature pulse encoding*1
4 = Input A pulses, Input B for direction (1 = up)
5..7 = Not used
DOPW#
Digital Output Pulse Width 10 ms resolution (10-2550 ms)

time, channel #
PRIT#
PRogrammable Interval
Times, channel #
10 ms resolution (10-2000 ms),

values above 200 are rounded down to 200
DO mode #
Digital Output mode,

channel #
0 = Activation of DO at coincidence
Deactivation of DO at DOPW timer
1 = Activation of DO at bit DO = 1
Deactivation of DO at DOPW timer
2 = Activation of DO at bit DO = 1
Deactivation of DO at DO = 0
3= Activation of DO at coincidence and bit DO =1
Deactivation of DO at bit DO = 0
GC#
Gated Count mode,

channel #
0 = Gated count inactivated

1 = Hardware gate. Input DI. Level controlled
2 = Hardware gate. Input DI. Pos. edge controlled
OV#
OSP Value, channel #
0 or 1
OC#
OSP Control, channel #
0 = Keep current value

1 = Set OSP value upon loss of communication
MIS#
Measure Interval Source
0 = Measure interval time is controlled by PRIT timer

1 = Measure interval time is controlled by COIN
3BSE 036 959R4001
137
Section 3
I/O Module Data
Table 3-144 DP820 Parameter Definitions (Continued)

Abbreviation
MIC#
Name
Values
Measure Interval Control,

channel #
0 = Measure interval time is controlled by PRIT or

COIN for the own channel
1 = Measure interval time is controlled by PRIT timer
or COIN for the other channels (used to obtain
synchronized freq. measurement between
channels).
FDI#
Filter time for Digital Input, 0 = 1 ms

channel #
1 = 5 ms
FST#
Filter time for STrobe

input, channel #
0 = 1 s
1 = 1 ms
FAB#
Filter time for input A and

B, channel #
0 = Unfiltered
1 = 1s

The configuration data for this module is: 0xC0, 0x8C, 0x91.
Table 3-145 DP820 Dynamic Values
07
li_sp 1
138
06
tp 1
05
04
03
02
01
00
Decimal bit
PSXL 1, bit 31-24
Read byte1
PSXL 1, bit 23-16
Read byte 2
PSXL 1, bit 15-8
Read byte 3
PSXL 1, bit 7-0
Read byte 4
coin 1 sync 1 li_ps 1
owf 1
up 1
DI 1
Read byte 5
freq. value 1, byte 1
Read byte 6
Read byte 7
Read byte 8
Read byte 9
3BSE 036 959R4001
Section 3
I/O Module Data
Table 3-145 DP820 Dynamic Values (Continued)

07
li_sp 2
06
tp 2
r_lip 1 r_of 1
pcsy 1
splc 2
r_lip 2 r_of 2
pcsy 2
3BSE 036 959R4001
05
04
03
02
01
00
Decimal bit
PSXL 2, bit 31-24
Read byte 10
PSXL 2, bit 23-16
Read byte 11
PSXL 2, bit 15-8
Read byte 12
PSXL 2, bit 7-0
Read byte 13
coin 2 sync 2 li_ps 2
owf 2
up 2
DI 2
Read byte 14
Read byte 15
Read byte 16
Read byte 17
Read byte 18
PSXCR 1, bit 31-24
Write byte 1
PSXCR 1, bit 23-16
Write byte 2
PSXCR 1, bit 15-8
Write byte 3
PSXCR 1, bit 7-0
Write byte 4
r_sy 1 r_co 1 coen 1
DO 1
Sync condition 1
splc 1
r_lis 1
LED 1 Write byte 5
pxlc 1
Write byte 6
frzps 2 frzsp 2 frzps 1 frzsp 1 Write byte 7
PSXCR 2, bit 31-24
Write byte 8
PSXCR 2, bit 23-16
Write byte 9
PSXCR 2, bit 15-8
Write byte 10
PSXCR 2, bit 7-0
Write byte 11
r_sy 2 r_co 2 coen 2

Sync condition 2
DO 2
r_lis 2
LED 2 Write byte 12
pxlc 2
Write byte 13
139
Section 3
I/O Module Data
Table 3-146 DP820 Dynamic Values Definitions

Abbreviation
li_ps #
owf #
Name
Values
Latch inhibit, pulse

counter
0 = Latch not inhibit
Pulse counter overflow
0 = No overflow
1 = Latch inhibit
1 = Overflow
up #
Counting direction
0 = Counting direction is down

1 = Counting direction is up
PSXL #
Pulse counter value
Signed 32 bits integer

(-268435456 .... +268435455)
li_sp #
Latch inhibit, frequency
0 = Latch not inhibit

1 = Latch inhibit
tp #
Transducer power OK
0 = False
1 = True
coin #
Coincidence has
occurred
0 = False
Pulse counter has been

synchronized
0 = False
freq. value #
Measured frequency
value
Float (IEEE 32 bits sign format)

-1.5 MHz to 1.5 MHz
DI #
Reflects the input signal
0 or 1
coen #
Enable coincidence
0 = Disable
sync #
1 = True
1 = True
1 = Enable
PSXCR #
140
Coincidence comparison
value
Signed 32 bits integer

(rounded into range
-268435456 .... +268435455)
3BSE 036 959R4001
Section 3
I/O Module Data
Table 3-146 DP820 Dynamic Values Definitions (Continued)

Abbreviation
Name
r_lip #
Reset latch inhibit, pulse

counter
r_of #
Reset pulse counter

overflow
r_sy #
Reset sync.
r_co #
Reset coincidence
DO #
Activate DO
LED #
Activate used LED
pcsy #
Sync. (i.e. reset) of pulse

counter
3BSE 036 959R4001
Values
141
Section 3
I/O Module Data

Abbreviation
Sync condition #
Name
Synchronization
condition
Values
0 = Synchronization inhibit
1 = Sync. if pcsy=1
2 = Sync. if count.dir=up and
input ST=active
3 = Sync. if count.dir=down and
input ST=active
input DI=pos. edge
input DI=pos. edge
input DI=neg. edge
input DI=neg. edge
input ST=active and DI=pos.
edge
input ST=active and DI=pos.
edge
input ST=active and DI=neg.
edge
input ST=active and DI=neg.
edge
12 = Sync. if coincidence on
own channel
13 = Sync. if coincidence on
other channel
14 and 15 = Not used
142
3BSE 036 959R4001
Section 3
I/O Module Data

Abbreviation
pxlc #
Name
Pulse counter value,
freeze condition
Values
0 = Latch inhibit on DI+.
Freeze PSXL-value on
pos. edge of DI signal.
1 = Latch inhibit on DI-.
Freeze PSXL-value on
neg. edge of DI signal.
2 = Latch inhibit on coincidence.
3 = Latch inhibit on sw freeze,
bit frzps x in the Dynamic
values.
4 = Latch inhibit on coincidence
on the other channel.
r_lis #
Reset frequency value
splc #
Frequency value freeze

condition (Speed Latch
Inhibit Condition)
0 = Latch inhibit on DI+.

1 = Latch inhibit on DI-.
2 = Latch inhibit on coin on
own channel.
3 = Latch inhibit on sw freeze,
bit frzsp x in the Dynamic
values.
frzps #
Freeze pulse counter

value channel #
0=1 = freeze
frzsp #
Freeze frequency value

channel #
0=1 = freeze
3BSE 036 959R4001
1 = Reset of bit lisp #

0=-
143
Section 3
I/O Module Data
3.39 DP840 Incremental Pulse Encounter Module

Incremental pulse encounter with 8 channels for pulse count and frequency
measurement.
Each channel can be used for pulse count or frequency (speed) measurement. The
inputs can also be read as DI signals.
tables below
Table 3-147 DP840 User Parameters in Normal Mode
07
06
05
04
03
02
01
00
Family type =16

0
Param. byte 1
Param. byte 2

Decimal bit
Param. byte 3
Ch SU
Signal range
Param. byte 4
DA8
DA7
DA6
DA5
DA4
DA3
DA2
DA1
Param. byte 5
P/F8
P/F7
P/F6
P/F5
P/F4
P/F3
P/F2
P/F1
Param. byte 6
144
FILT4
FILT3
FILT2
FILT1
Param. byte 7
FILT8
FILT7
FILT6
FILT5
Param. byte 8
PRIT4
PRIT3
PRIT2
PRIT1
Param. byte 9
PRIT8
PRIT7
PRIT6
PRIT5
Param. byte 10
3BSE 036 959R4001
Section 3
I/O Module Data
Table 3-148 DP840 Parameter Definitions

Abbreviation
Ch SU
Name
Channel supervision
Signal range
Values
00 = Namur
01 = 12 V
10 = Not used
11 = 24 V
DA#

P/F#
Pulse counting/
Frequency measuring
0 = Pulse count data

1 = Frequency data
FILT#
00 = 10 s
01 = 100 s
10 = 800 s
11 = 6400 s
PRIT#
Programmable interval timer
00 = 10 ms
01 = 20 ms
10 = 50 ms
11 = 100 ms
3BSE 036 959R4001
145
Section 3
I/O Module Data

The configuration data for this module is: 0x40, 0xA1.
Table 3-149 DP840 Dynamic Values
07
146
06
05
04
03
02
01
00
Decimal bit
Pulse count value / Frequency value 1 high-high byte
Read byte1
Pulse count value / Frequency value 1 high-low byte
Read byte 2
Pulse count value / Frequency value 1 low-high byte
Read byte 3
Pulse count value / Frequency value 1 low-low byte
Read byte 4
Read byte 5
Read byte 6
Read byte 7
Read byte 8
Read byte 9
Read byte 10
Read byte 11
Read byte 12
Read byte 13
Read byte 14
Read byte 15
Read byte 16
Read byte 17
Read byte 18
Read byte 19
Read byte 20
Read byte 21
3BSE 036 959R4001
Section 3
I/O Module Data
Table 3-149 DP840 Dynamic Values (Continued)

07
06
05
04
03
02
01
00
Decimal bit
Read byte 22
Read byte 23
Read byte 24
Read byte 25
Pulse count value / Frequency value 7high-low byte
Read byte 26
Read byte 27
Read byte 28
Read byte 29
Read byte 30
Read byte 31
Read byte 32
D8
D7
D6
D5
D4
D3
D2
D1
Read byte 33
S8
S7
S6
S5
S4
S3
S2
S1
Read byte 34
Table 3-150 DP840 Dynamic Values Definitions

Abbreviation
Name
Values
D#
0 or 1
S#
Channel status #
0 = channel OK
1 = channel error
3BSE 036 959R4001
147
Section 3
I/O Module Data

Abbreviation
148
Name
Values
Pulse count value
Measured pulse value
Pulse count value is a 16 bit

unsigned integer 0-65535.
High-high and high-low bytes
will be set to zero.
Frequency value
Measured frequency value
Float (IEEE 32 bit sign

format) 0-50 kHz
3BSE 036 959R4001
Section 3
I/O Module Data
ACS600 Standard Drive
3.40 ACS600 Standard Drive

The user parameter area is specified in the tables below.
Table 3-151 Standard Drive User Parameters in Normal Mode

07
06
05
04
03
02
01
00
Decimal bit
Family type = 137
Param. byte 1
Param. byte 2
Param. byte 3
Number of channels - 1 = 1
Param. byte 4
below.
The configuration data for this module is: 0xC0, 0x8B, 0x8C.
Table 3-152 Standard Drive Memory Map in Normal Mode
07
06
05
04
3BSE 036 959R4001
03
02
01
State
00
Decimal bit
Read byte 1
Status MSB
Read byte 2
Status LSB
Read byte 3
Actual 1 MSB
Read byte 4
Actual 1 LSB
Read byte 5
Actual 2 MSB
Read byte 6
Actual 2 LSB
Read byte 7
Actual 3 MSB
Read byte 8
Actual 3 LSB
Read byte 9
Actual 4 MSB
Read byte 10
149
Section 3
I/O Module Data
Table 3-152 Standard Drive Memory Map in Normal Mode

07
150
06
05
04
03
02
01
00
Decimal bit
Actual 4 LSB
Read byte 11
Actual 5 MSB
Read byte 12
Actual 5 LSB
Read byte 13
Command MSB
Write byte 1
Command LSB
Write byte 2
Reference 1 MSB
Write byte 3
Reference 1 LSB
Write byte 4
Reference 2 MSB
Write byte 5
Reference 2 LSB
Write byte 6
Reference 3 MSB
Write byte 7
Reference 3 LSB
Write byte 8
Reference 4 MSB
Write byte 9
Reference 4 LSB
Write byte 10
Reference 5 MSB
Write byte 11
Reference 5 LSB
Write byte 12
3BSE 036 959R4001
Section 3
I/O Module Data
Table 3-153 Standard Drive Memory Map Definitions

Abbreviation
State
Name
Module state (1)
Values
0-3
0 = Operational
8 = Module deleted
1 = OSP (2)
9 = Forced to OSP
2 = Ready
10 = Wrong module type
3 = Not configured
11 = Configuration running
4 = Error
12 = Forced to error
5 = Init
13 = No answer
6 = FIM
E
Status
Module error
Module warning
Status
3BSE 036 959R4001
(3)
No error
Module error
No warning
Module warning
0
Initialization not OK
Ready (initialization OK)
Not Ready (stop 1)
Ready (ready to start)
Not ready (run disable)
Not ready for reference, or running
No fault
Fault condition (fault)
Coast to stop (stop 2) ON
Coast to stop (stop 2) OFF
151
Section 3
I/O Module Data
Table 3-153 Standard Drive Memory Map Definitions (Continued)

Abbreviation
Status
Name
Status
Values
5
10
11
Stop according to selected stop type

(stop 3) ON
Stop according to selected stop type

(stop 3) OFF
Drive not ready
Drive not ready
No warning
Warning condition
Actual value differs from reference value
Actual value equals reference value
ACS600 control location LOCAL
ACS600 control location REMOTE
Actual frequency value is within

supervision limit
Actual frequency limit equals or is greater

than supervision limit
External reference 1 selected
External reference 2 selected
12-14
15
Actual 1-5
152
Unused
0
DDCS communication (ACS600 - FCI)

OK
Error(s) in DDCS communication

Note: Status word not updated
16 bit integer with sign bit
3BSE 036 959R4001
Section 3
I/O Module Data
Table 3-153 Standard Drive Memory Map Definitions (Continued)

Abbreviation
Command
Name
Control word
Values
0
Stop according to ramp (stop 1)
Enter Ready to start
Coast to stop (stop 2)
Ready
Stop according to stop type selected
Ready
Coast to stop (run disable)
01
4-6
Stop according to stop type selected
Normal operation
No reset performed
01
8, 9
10
11
12-15
Reference 1-5
Start if bits 0-2 are ON
Fault reset (enter Drive disable)

Unused
The control and the frequency reference

(from PROFIBUS-DP) are not activated.
Old value are retained.
The control and the frequency reference

(from PROFIBUS-DP) are activated.
External reference 1 selected.
External reference 2 selected.

Unused
16 bit integer with sign bit
(1) For detailed information, refer to the S800 I/O Fieldbus Communication Interface for PROFIBUS-DP/DPV1.
(2) Outputs Set as Predefined, that is, outputs are set to the safe OSP values specified by parameters.
(3) Firmware maintenance.
3BSE 036 959R4001
153
154
Section 3
I/O Module Data
3BSE 036 959R4001
Section 4
DPV1 Services
DPV1 services
Section 4
DPV1 Services
4.1 DPV1 services

With DPV1 services acyclic data can be read and written to a slave. CI801 supports
two acyclic connections, DDLM_Read and DDLM_Write, for class 1 or class 2
masters.
The acyclic connection has a service header of 4 byte, and up to 84 byte data block.
DDLM_Read and DDLM_Write are built up as described in DDLM_READ on
page 155 and DDLM_WRITE on page 160.
4.2 DDLM_READ
4.2.1 DDLM_READ Data Structure
To the slave:
DDLM service
Slot Number
Index
Length
Slot Number
Index
Length
Read = 0x5E
From the slave:

DDLM service
Read = 0x5E
Data Block
Data fetched from the slave
4.2.1.1 Slot Number
Slot Number that indicates which module to address, consists of cluster and position
within the cluster. See Table 3-1.
3BSE 036 959R4001
155
READ SOFTWARE ID
Section 4
DPV1 Services
4.2.1.2 Index
Index indicates which DPV1 service is to be performed.The following DPV1

services are supported by CI801.
Table 4-1 DPV1 Read Services
DPV1 Service
Index
Data length (bytes)
READ SOFTWARE ID
0x01
16
READ DP DIAGNOSTICS
0x04
max. 83
READ CHANGED
DIADNOSTICS
0x05
Max. 42
READ CURRENT
DIAGNOSTICS
0x06
Max. 42
READ STATE
0x07
READ DYNAMIC VALUE
0x08
I/O module type dependent
READ HARDWARE ID AND

STATE
0x09
READ HARDWARE ID
0x21
HART READ
0x30
According to the HART command
4.2.1.3 Length
Length (n bytes) is the length of the data to be read. If the answer consists of more
bytes than specified, an error code will be returned. If the answer consists of fewer
bytes, the Length will be replaced by the real length. For specific DPV1 service see
Table 4-1.
4.2.2 READ SOFTWARE ID

With DPV1 service READ SOFTWARE ID, the FCI (CI801) firmware identity can
be read. Data is a string of 16 ACII characters e.g. the first five characters are 1.0/0
and the rest is blank characters.
156
3BSE 036 959R4001
Section 4
DPV1 Services
READ DP DIAGNOSTICS
4.2.3 READ DP DIAGNOSTICS

With DPV1 service READ DP DIAGNOSTIC the I/O station, FCI and I/O module
diagnostics can be read. See Diagnostic on page 28.
Byte 1 in the data block of READ DP DIAGNOSTICS is the same as byte 7 in
Diagnostic on page 28.
Only 22 errors can be read in the channel related diagnostic area.
4.2.4 READ STATE

With DPV1 service READ STATE the I/O module state can be read.
Bit 7
Bit 6
Bit 5
Bit 4
Not used
0:
3:
4:
8:
10:
13:
Bit 3
Bit 2
Bit 1
Bit 0
State
Operational
Not Configured
Error
Module Deleted
Wrong Module Type
No Answer
4.2.5 READ DYNAMIC VALUE

With DPV1 service READ DYNAMIC VALUE the I/O module channel values and
status can be read. See Section 3, I/O Module Data for each module.
The number of bytes to read depends of the I/O module type.
For analog I/O modules, 2 bytes (1 word) channel value are read for each
channel. The first byte is the most significant channel data byte and the second
byte is the least significant channel data byte per channel.
The last byte(s) read by the service, is the channel status for each channel. For
1-8 channels modules 1 status byte is read. For 9-16 channels modules 2 bytes
are read. The least significant bit in the status byte is the channel status for
lowest numbered channel. As an example, see Table 3-5 for AI801.
3BSE 036 959R4001
157
READ HW ID AND STATE
Section 4
DPV1 Services
For digital I/O modules, 1 byte per 8 channels is read. For 1-8 channels
modules, 1 channel value byte is read. For 9-16 channels modules, 2 channel
value bytes are read. The first byte is the channel values for channel 9-16 and
the second byte is the channel values for channel 1-8. The least significant bit
in the channel value byte is the channel value for lowest numbered channel.
The last byte(s) read by the service is the channel status for each channel. For
1-8 channels modules 1 status byte is read. For 9-16 channels modules 2 bytes
are read. The first byte is the channel status for channel 9-16 and the second
byte is the channel status for channel 1-8. The least significant bit in the status
byte is the channel status for lowest numbered channel.
As an example, see Table 3-69 for DI801.
4.2.6 READ HW ID AND STATE

With DPV1 service READ HW ID AND STATE, the FCI and I/O module hardware
identity and state can be read.
For byte 1 to 3 see READ HARDWARE ID on page 158.
Byte 4 STATE see READ STATE on page 157.
4.2.7 READ HARDWARE ID

With DPV1 service READ HARDWARE ID, the I/O module hardware identity can
be read.
See Section 3, I/O Module Data for each module.
Byte 1 family type (AI, AO, DI, DO...).
Byte 2 identity number (DO814 = 14).
Byte 3 Product Revision, 1 = PR: A, 2 = PR: B and so on according to the English
alphabet.
4.2.8 HART READ

See Section 5, HART Communication.
158
3BSE 036 959R4001
Section 4
DPV1 Services
READ CHANGED DIAGNOSTICS
4.2.9 READ CHANGED DIAGNOSTICS

With DPV1 service READ CHANGED DIAGNOSTICS, the internal I/O can be
read. The service is supported by following I/O modules: AI830, AI835, AI843,
AI845 and AO845.
The service gives a list of the diagnostics statements that have been changed since
the list was last read. The diagnostics list begins with 2 bytes specifying the number
of diagnostic statements in the list. Each diagnostics statement is represented by
four bytes according to Table 4-2.
Table 4-2 Diagnostics Statement
Bit 31
Condition
Bit 30
Class
Bit 29-16
Statement type
Bit 15-0
(1)
Statement info
(1) All diagnostic statement types are described in Appendix D, I/O Module Diagnostics.
4.2.10 READ CURRENT DIAGNOSTICS

With DPV1 service READ CURRENT DIAGNOSTICS, the internal I/O module
diagnostics can be read. The service is supported by following I/O modules: AI830,
AI835, AI843, AI845 and AO845.
The service gives a list of all diagnostics statements that are true for the moment.
The diagnostics list begins with 2 bytes specifying the number of diagnostic
statements in the list. Each diagnostics statement is represented by four bytes
according to Table 4-2.
3BSE 036 959R4001
159
DDLM_WRITE
Section 4
DPV1 Services
4.3 DDLM_WRITE
4.3.1 DDLM_WRITE Structure
To the slave:
DDLM service
Slot Number
Index
Length
Write = 0x5F
Data Block
Data written to the slave
From the slave:

DDLM service
Slot Number
Index
Length
Write = 0x5F
4.3.1.1 Slot Number
Slot Number that indicates which module to address, consists of cluster and position
within the cluster. See Table 3-1.
4.3.1.2 Index
Index indicates which DPV1 service is to be performed. The following DPV1

services are supported by CI801.
Table 4-3 DPV1 Write Services
DPV1 Service
160
Index
Data length (bytes)
WRITE ACKNOWLEDGE CHANNEL ERRORS
0x25
HART WRITE
0x30
According to the HART

command
3BSE 036 959R4001
Section 4
DPV1 Services
WRITE ACKNOWLEDGE CHANNEL ERRORS
4.3.1.3 Length
Length (n bytes) is the length of the data to be written. If the data block consists of
fewer bytes, an error message will be returned. For specific DPV1 service see
Table 4-3.
4.3.2 WRITE ACKNOWLEDGE CHANNEL ERRORS

With DPV1 service WRITE ACKNOWLEDGE CHANNEL ERRORS, an
acknowledge can be done for latched I/O module channel errors. Used only for
DO815 and DO840.
Data block 1 byte, "1" = acknowledge.
Only one channel per message. 0x08 will acknowledge channel 8.
4.3.3 HART WRITE

See Section 5, HART Communication.
3BSE 036 959R4001
161
DPV1 Error Codes
Section 4
DPV1 Services
4.4 DPV1 Error Codes

Table 4-4 DPV1 Error Codes
Error
Code
162
Error Class
Error
Error Description
0xA0
Application
Read Error
Service failed to read.
0xA1
Application
Write Error
Service failed to write.
0xA9
Application
Feature Not
Supported
Feature not supported.
0xB0
Access
Invalid Index
The used index does not exist or

is not supported by the current
slot.
0xB1
Access
Write Length Error
The length of write data is not

correct.
0xB2
Access
Invalid Slot
The used slot is not a valid.
0xB3
Access
Type Conflict
Accessed module is of wrong

type for used service.
0xB5
Access
State Conflict
Accessed module or FCI is in

wrong state to accomplish the
service.
0xBA
Access
Read Length Error
The length of the requested read

data is not correct.
0xC2
Resource
Resource Busy
Resource busy, service can not

be performed.
3BSE 036 959R4001
Section 5
HART Communication
Section 5
System Architecture
HART Communication
5.1 System Architecture

Figure 5-1 shows a typical system using S800 I/O modules with HART support.
The I/O modules are connected to the FCI through the ModuleBus link. The FCI is
the ModuleBus master and provides a fieldbus communication with the Controller.
The I/O modules represent the system process interface and a node that bridges
communication between HART instruments and the communication path starting
from an engineering workplace where an HART configuring tool is running.
AI845/AO845 and AI895/AO895 are eight channels modules. Each channel
corresponds to an HART loop, connecting one HART instrument to the module.
3BSE 036 959R4001
163
System Architecture
Section 5
HART Communication
Engineering
Workplace
HART
Configuration
Tool
Control Network
Controller
ModuleBus
Fieldbus
PROFIBUS-DPV1 Communication
Interface (FCI)
CI801
Input
Module
Output
Module
AI845/AI895 AO845/AO895
8 channels
8 channels
4-20 mA loops
4-20 mA loops
HART Instrument
Figure 5-1 System Architecture
164
3BSE 036 959R4001
Section 5
HART Communication
Functions
5.2 Functions
The HART communication in CI801 is based on PROFIBUS-DPV1 services
DDLM_WRITE and DDLM_READ. The DDLM_WRITE and DDLM_READ
services are using index 0x30 (see table 4-1 and table 4-2) to be identified as HART
requests.
The DDLM_WRITE and DDLM_READ services are built up as described in
DDLM_READ on page 155, and DDLM_WRITE on page 160. The data structure
differs depending on if the HART instrument is connected to an AI845/AO845 (see
AI845/AO845 HART Master on page 167) or an AI895/AO895 (see AI895/AO895
HART Master Device on page 171) I/O module. The maximum size of the HART
data structure is 64 byte.
The HART functionality in AI845/AO845 and AI895/AO895 are implemented in
two different ways:
AI845/AO845 are HART Masters which means that the I/O modules
communicates as Master with the connected HART instrument in the HART
loop.
HART commands can only be addressed to connected HART instruments.
AI895/AO895 are HART Master Devices which means that the I/O modules
are HART units. Therefore it is possible to send HART commands addressed to
the I/O module itself. The Master functionality of the I/O module means that
the module communicates as Master with the connected HART instrument in
the HART loop.
HART commands can therefore be sent, either to a connected HART
instrument or right to the I/O module.
5.3 Communication
The data exchange consists of a number of write- and read requests to the I/O
module via PROFIBUS-DPV1. Figure 5-3 and Figure 5-6 shows the
communication sequence of each I/O module type. CI801 can handle up to 6 HART
requests to different I/O modules at the same time.
3BSE 036 959R4001
165
Error Codes
Section 5
HART Communication
5.4 Error Codes

HART PROFIBUS-DPV1 communication errors are described in Table 5-1.
Table 5-1 HART PROFIBUS-DPV1 Error Codes
Error code(1)
DPV1 Service
Error condition
Comment
P: 0xA0
DDLM_Read
Read buffer is empty and no

message is pending in the
HART handler.
Application error,
read error.
P: 0xA9
Not a valid HART

service,
DDLM_Write or
DDLM_Read
If a HART coded message not Application error,

using the DPV1 services
feature not
MSACX_Write or
supported.
MSACX_Read is sent.
P: 0xA9
DDLM_Write or
DDLM_Read
I/O module does not support

HART
Application error
H: 0xF2
DDLM_Read
Requested response is not

first in read buffer (FIFO).
HART busy.
H: 0xF2
DDLM_Read
Read buffer is empty but a

message is pending in the
HART handler.
HART busy.
H: 0xF2
DDLM_Write
A PROFIBUS-DPV1 master is HART busy.

trying to write a second HART
request to a slot that already
has a message pending for
the actual master.
H: 0xF3
DDLM_Write
Write or Read buffer is full.
H: 0xF5
DDLM_Read
Data exchange on ModuleBus HART

failed.
ModuleBus
communication
error.
HART instance
overflow.
(1) H = HART error decode, P = PROFIBUS-DPV1 error decode
166
3BSE 036 959R4001
Section 5
HART Communication
AI845/AO845 HART Master
5.5 AI845/AO845 HART Master

5.5.1 HART Command Data Structure
The data structure for HART messages are built up as shown in Figure 5-2. The
maximum data length is 64 byte.
DIRECTION
CHANNEL#
/STATUS
RETRIES
PREAMB
START
ADDRESS
CMD
BYTE CNT
DATA
Figure 5-2 Data structure for AI/AO845
Table 5-2 Data Structure definitions for AI845/AO845

DIRECTION/STATUS
DIRECTION indicates if the HART message is a

request (=0) or response (=1)
STATUS is the first byte of the HART Request answer or
HART response reading contain status information, see
Table 5-3 and Table 5-4.
CHANNEL #
Channel number, allowed 0..8
RETRIES
Number of retries, allowed 0..10
PREAMB
Number of preambles, allowed 5..20
START
Start delimiter, allowed:

Direction 0 (request data)
0x02 for short (1 byte) address format
0x82 for long (5 byte) address format
Direction 1 (response data)
ADDRESS[5]
3BSE 036 959R4001
Address 5 byte. When short address format is used, only

ADRESS[0] is valid.
167
Communication
Section 5
HART Communication
Table 5-2 Data Structure definitions for AI845/AO845 (Continued)

CMD
HART command, allowed 0..0xFF.
BYTE CNT
HART data field byte count. Indicates the length of the

data field.
DATA[52]
HART data field, maximum length is 52 byte
5.5.2 Communication
The HART data exchange with PROFIBUS-DPV1 in CI801 is described in
Figure 5-3.
PROFIBUS-DPV1 Master
1
CI801
DDLM_Write
code
Acknowledge or error
Direction = 0
HART Request
DDLM_Read
or
Request answer or err
DDLM_Write
code
code
Direction = 1
HART Response
DDLM_Read
r code
HART response or erro
Figure 5-3 HART Communication Sequence for AI845/AO845
168
3BSE 036 959R4001
Section 5
HART Communication
Communication
1.
Initiate a HART request (DIRECTION = 0)
2.
The answer on this request is 1 status byte, see Table 5-3.
3.
Initiate a HART response reading (DIRECTION = 1). The write data structure
is built up with only the direction byte.
4.
The answer on this request contains the requested HART data.

Note! If STATUS byte is not equal to 0x00, only the STATUS byte is valid,
see Table 5-4.
Table 5-3 Request Status Codes

Status Code
Description
0x00
REQ_OK: HART request is accepted and subsequent calls

to mssExchangeSD can check for the HART response
0x21
REQ_PROGRESS: A HART session is already pending
0x82
REQ_WRONG_MODULE: HART not supported with this

module type
0x83
REQ_CHANNEL_PASSIVE: Channel is passive (channel

parameter)
0x84
REQ_SYNTAX_ERROR: HART request frame has syntax

error; one more parameter dont fit the content as stated
above, e.g direction not 0 or channel_number not in 1..8
and so on.
3BSE 036 959R4001
169
Communication
Section 5
HART Communication
Table 5-4 Response Status Codes

Status Code
170
Description
0x00
RSP_OK: HART response frame follows
0x21
RSP_PROGRESS: A HART session is still pending
0x82
RSP_WRONG_MODULE: HART not supported with this

module type
0x83
RSP_CHANNEL_PASSIVE: Channel is passive (channel

parameter)
0x24
RSP_WRONG_DIRECTION: A call with direction = 1 was

made but no call with direction = 0 before
0x45
RSP_COMM_ERROR: HART communication error in

response
0x46
RSP_CHECK: Check sum error in the received frame
0x47
RSP_PARITY: Parity or framing error in a received byte
0x48
RSP_DELIM: Wrong delimiter in HART response frame
0x49
RSP_LONG_CARR: Endless carrier detected on HART

input channel
0x4a
RSP_SLAVE: No HART response frame received
0x4b
RSP_PREAM: Maximum numbers of response preambles

exceeded
0x4c
RSP_LINK: HART Link Time overflow
0x0d
RSP_CMD_WARN: Command specific warning in HART

response
0x0e
RSP_CMD_ERROR: Command specific error in HART

response
3BSE 036 959R4001
Section 5
HART Communication
AI895/AO895 HART Master Device
5.6 AI895/AO895 HART Master Device

5.6.1 HART Command Data Structure
In AI895/AO895 there are two ways of sending commands to the HART device.
The maximum allowed length is 64 byte.
5.6.1.1 Pass-through Command
This is a command that contains a direct address to the field device and it is
recognized by the module if the address matches the address of an instrument
included in its instrument list. This command and the reply do not include the
preambles that are added/removed by the module. The data structure for
Pass-through command is built up as shown in Figure 5-4. For data structure
definitions see Table 5-5.
START
ADRESS
CMD
BYTE CNT
DATA
CKSUM
This is the HART address of the field device
Figure 5-4 HART Pass-through Command

5.6.1.2 Copy Command
This is a command addressed to the module. Its data field contains a command that
must be transferred to the field device connected to a selected channel. Preambles
are not included in the command destined to the field instrument and are added by
the module before sending it to the device on a HART loop.
The whole command is sent to the loop indicated by the channel number.
The response from the field device is copied in the module reply without preambles.
3BSE 036 959R4001
171
HART Command Data Structure
Section 5
HART Communication
Copy command = 155
START
ADRESS
CMD
BYTE CNT
DATA
CKSUM
This is the module HART address
ADRESS
CHANNEL # START
CMD
BYTE CNT
DATA
CKSUM
This is the HART address of the field device
Figure 5-5 HART Copy Command
Table 5-5 Data Structure Definitions for AI895/AO895

START
172
Start delimiter, allowed:
ADDRESS[0..5]
All HART commands will be in extended 5 byte) address

format and command 0 also in short (1 byte) address
format. They are recognized if the address matches the
HART address of the module. The short address of the
I/O module is 0.
CMD
HART command, allowed 0..0xFF.
BYTE CNT
HART data field byte count. Indicates length of the data

field.
DATA[ ]
HART data field.
3BSE 036 959R4001
Section 5
HART Communication
Communication
Table 5-5 Data Structure Definitions for AI895/AO895 (Continued)

CHANNEL #
Channel number, allowed 0..7 where 0 = channel 1 and

7 = channel 8
CKSUM - XOR
XOR checksum is calculated on the whole data

structure.
5.6.2 Communication
The HART data exchange with PROFIBUS-DPV1 in CI801 is described in
Figure 5-6
PROFIBUS-DPV1 Master
1
CI801
DDLM_Write
code
DDLM_Read
HART response or err
or code
Figure 5-6 HART Communication Sequence for AI895/AO895

1.
Initiate a HART request.
2.
The answer on this request contains the requested HART data.
3BSE 036 959R4001
173
HART Commands (from tool to module)
Section 5
HART Communication
5.6.3 HART Commands (from tool to module)

The module supports the following HART commands that are addressed to the
module itself. See Appendix B, AI895/AO895 Supported HART Commands.
Table 5-6 HART Commands

Command
number
174
Function
Notes
Read unique identifier
Recognized in both short and

long frame format
11
Read unique identifier associated Recognized when tag and

with tag
address match modules ones or
broadcast address is used
12
Read message
13
Read tag, descriptor, date
16
Read final assembly number
17
Write message
18
Write tag, descriptor, date
19
Write final assembly number
38
Reset configuration changed flag
41
Perform device self-test
42
Perform master reset
48
Read additional device status
106
Flush completed delayed

responses
128
Read gateway parameters
129
Read channel status
130
Read instrument list from index
3BSE 036 959R4001
Section 5
HART Communication
HART Commands (from tool to module)
Table 5-6 HART Commands (Continued)

Command
number
Function
131
Read instruments static data
132
Write instruments static data
133
Remove instrument from

instrument list
144
Read retry limits
145
Write retry limits
146
Read scan command
148
Read scan status
149
Write scan status
150
Read mode
152
Read channel locate method
154
Rebuild loops
155
Copy command
160
Read all channels scan status

and fault
250
Write device ID
Notes
Only command 1 is allowed
The module is primary master

only
"Private command" with

broadcast address
If a command number is unknown the module will respond with error code 64, not
implemented command response.
3BSE 036 959R4001
175
Delayed Responses
Section 5
HART Communication
5.6.4 Delayed Responses

When a Pass-through command or a Copy command requires too much time to be
completed, a delayed responses mechanism is used. In the module one delayed
buffer is reserved. This means that only one command from the configuring tool to a
field slave device may be active at a time.
When a command is received and the buffer is in the state DR_EMPTY (buffer is
available), it is stored into the buffer to be routed to the instrument it is addressed to.
A reply containing the DR_INITIATE command response (error code 33) is sent to
the configuring tool. The delayed buffer enters the DR_INITIATE state.
When the module to instrument command - reply is completed the response from
the field device is stored and the delayed buffer enter the DR_DONE state. If the
Mux to instruments dialog has a communication failure or a "no reply ", the delayed
buffer enters the DR_DEAD state. If a communication error is detected, the reply is
stored and the delayed buffer enters the DR_DONE state.
When a command is received and the buffer is not in the state EMPTY the module
must verify if it matches a previous stored command.
If it matches:
in the DR_DONE state, the module will reply with the stored reply coming
from the instrument. The buffer will enter the DR_EMPTY state;
in the DR_DEAD state, the module will reply with the DR_DEAD command
response (error code 35). The buffer will enter the DR_EMPTY state;
in the DR_INITIATE or DR_RUNNING state, the module will reply with the
DR_RUNNING command response (error code 34). The buffer will enter the
DR_RUNNING state.
If it does not match, the module will reply with a BUSY command response (error
code 32). The buffer can be flushed with command 106.
176
3BSE 036 959R4001
Section 5
HART Communication
Node Identification
5.6.5 Node Identification

Seen as an HART device the module must have identification information.
Table 5-7 Module Identification Information
Manufacturer identification code
0x49 (Elcon Instruments)
Device type code
0xEC = AI895
0xEB = AO895
Device ID number
Number of preambles required
0x00
Universal command revision
0x05
Device specific command revision

Software revision
Hardware revision + physical signalling
In the format yyyyyxxx B

yyyyy 5 bit integer = Hardware revision
xxx 3 bit integer = Physical signalling =
0x06 (Special)
Device function flag
0x04 (Protocol bridge device)
Message
Description
Tag name
Final assembly number
Date
3BSE 036 959R4001
177
Gateway Parameters
Section 5
HART Communication
5.6.6 Gateway Parameters

The following parameters and variables define the gateway characteristics of the
module:
Table 5-8 Module Gateway Characteristics
Max delayed responses for primary configuration tool
Max delayed responses for secondary configuration tool
Number of delayed responses in use for primary

configuration tool
Number of delayed responses in use for secondary
configuration tool
Physical signalling on HART loop
Max number of HART loops
Max number of supported instruments
Number of instruments found

Number of instruments scanned
178
3BSE 036 959R4001
Section 5
HART Communication
Module HART Status
5.6.7 Module HART Status

As a slave device seen from the configuration tool, the module must handle the
HART field device status. The device status are the two first bytes in Data.
One byte is communication status or Response code and one byte is Field device
status i.e. Module HART status.
Table 5-9 Module HART Status
Bit
Function
Device malfunction
Description
Configuration changed
This bit is set whenever a HART parameters

change is made by the configuration tool, for
example with any write command. This bit is
cleared by Command 38.
Cold start
When the module is powered up, this bit is set

for one transaction only with the configuration
tool.
More status available
This bit is the OR of channel REBUILDING

bits.
Analogue output fixed
Not used (always 1)
Analogue output
saturated
Not used (always 0)
Non PV out of limits
Not used (always 0)
PV out of limits
Not used (always 0)
3BSE 036 959R4001
179
Locate Instruments
Section 5
HART Communication
5.6.8 Locate Instruments

The locate function permits the identification of field device connected to each
channel. A Command #0 is sent to each device and data in the reply of Command #0
("Read Unique Identifier") permit the determination of the device revision, the
building of the Unique Identifier and of the transmitters data list. The number of
preamble characters required by the device is also determined. The command 0 is
addressed to short address 0.
The transmitter data list includes the following items:
Manufacturer's device type code
Device ID number
Number of preambles required
Software revision
Hardware revision
Device function flag
The Locate function is performed by the module when it enters the

OPERATIONAL STATE, when a reset command (42) is received. After entering
the OPERATIONAL STATE an AO895 module waits 5s before starting the locate
function.
During the locate function, the RESET bit (Operation in progress) is set. At the end
of the locate function the RESET bit is cleared. During the locate function only
commands 0, 11, 12, 13, 16, 48, 129 are accepted by the module. To other
commands the module will reply with command error code 32 (busy).
A single loop can be rebuilt also when a rebuild channel command (154) is
received. While a channel is been rebuilt (during the locate function or during a
rebuild loop phase) the channel REBIULD bit and the module error status bit 4
(More status available) are set.
180
3BSE 036 959R4001
Section 5
HART Communication
Scanning Function
5.6.9 Scanning Function

Process values are not carried via HART and analog process values are handled in
the same way AI/AO 890 modules do.
The scanning function is implemented to monitor the presence of field instruments.
When the scanning is enabled (with command 149) all instruments of the
instruments list are scanned (a different channel every 5s) with HART command 1.
If an instrument does not reply the DISAPPEARED and SEARCHING bits related
to that instrument are set. Then the module begins to scan that instrument with
HART command 0.
If there is a reply to command 0, the module verifies if it comes from the original
instrument:
if it does, the APPEARED bit is set, the DISAPPEARED and SEARCHING

bits are cleared and the module restarts the normal scanning activity.
if it does not, the MISMATCHED bit is set, the DISAPPEARED bit is cleared
and the module keeps on searching the instrument with command 0.
When a command 129 (Read channel status) or a command 160 (Read all channels
scan status) is received, the DISAPPEARED and APPEARED bits are cleared.
3BSE 036 959R4001
181
Scanning Function
182
Section 5
HART Communication
3BSE 036 959R4001
Appendix A Configuration Example
Introduction

A.1 Introduction
As an example, the shaded module positions in an I/O station according to
Figure A-1 are described with their corresponding parameters and memory maps.
All positions up to the highest position used must be specified in the parameter
area (Table 2-2). Only modules in the shaded positions are exemplified below.
The following modules are used:
FCI: CI801
Cluster 0, module 3: Analog input module AI820
Cluster 1, module 5: Digital output module DO810
PROFIBUS-DP
master
I/O station with S800 I/O

Cluster 0 (Base cluster)
FCI
2 33
9 10 11 12
PROFIBUS
Cluster 1
Fiber-optic
ModuleBus
Optical
modem 1
4 5
9 10 11 12
Figure A-1 PROFIBUS-DP Network with S800 I/O
3BSE 036 959R4001
183
CI801
A.2 CI801
A.2.1 User Parameters
If we choose HCIR enabled and power supervision on the opto-expanded clusters,
the user parameters will be as shown in Table A-1. Refer to Table 2-5 for
parameter definitions.
Table A-1 CI801 User Parameters
07
06
05
04
03
02
01
00
Decimal bit
HCIR=1
PSE=1
Param. byte 1
In hexadecimal notation, the parameter bytes assume the values:

Byte 1 = 44
184
3BSE 036 959R4001
AI820
A.3 AI820
The parameters are selected according to table Table A-2.
Table A-2 AI820 User Parameters in Normal Mode
07
06
05
04
03
02
01
00
Family type = 4
0
Param. byte 1
Cluster = 0
Decimal bit
Param. byte 2
Position = 3
No of channels = 4 - 1 = 3
LZ
Not used - set to zero
DA4
DA3
Param. byte 3
0
DA2
Param. byte 4
DA1
Param. byte 5
FT1
L1
Param. byte 6
FT2
L2
Param. byte 7
FT3
L3
Param. byte 8
FT4
L4
Param. byte 9
The parameter values have the following significance.

Byte 1 =
4 (decimal) = 04 (hexadecimal)
Byte 2 =
20 (decimal) = 14 (hexadecimal) = 0001 0100(binary) means no

redundancy and identity number 20
Byte 3 =
03 (hexadecimal) means position 3 in cluster 0 (decimal value = 3 on

PROFIBUS-DP, see Table 3-1).
Byte 4 =
44 (hexadecimal) = 0100 1000 (binary) means 4 channels and

channel error if signals <-12.5%.
Byte 5 =
0F (hexadecimal) = 0000 1111 (binary) means all 4 channels active.
Byte 6 =
00 (hexadecimal) = 0000 0000 (binary) means no linearization

(L1 = 0) and measurement range 0...20 mA.
3BSE 036 959R4001
185
Memory Map
Byte 7 =
21 (hexadecimal) = 0010 0001 (binary) means square-root

linearization (L2 = 1) and measurement range 4...20 mA.
Byte 8 =
25 (hexadecimal) = 0010 0101 (binary) means square-root

linearization (L3 = 1) and measurement range -10...10 V.
Byte 9 =
F1 (hexadecimal) = 1111 0001 (binary) means filter time 2 s,

square-root linearization (L4 = 1) and measurement range 1...5 V
with under range values suppressed (limited to 1 V).
A.3.2 Memory Map

The AI820 memory map consists of 17 read bytes shown in Table 3-10. The
significance of the bits follows from Table 3-11. Table 3-3 explains how analog
process values are coded.
Example
Read byte 1 and 2 =14240 (decimal) = 37A0 (hexadecimal) means 10 mA (= 50 %)
on analog input channel 1 (0...20 mA).
Read byte 3 and 4 =0 (decimal) = 0000 (hexadecimal) means 4 mA (= 0%) on
analog input channel 2 (4...20 mA).
Read byte 5 and 6 =2848 (decimal) = 0B20 (hexadecimal) means +1 V (= 10%) on
analog input channel 3 (-10...10 V). Note that 0% = 0 V and
100% = 10 V.
Read byte 7 and 8 =7120 (decimal) = 1BD0 (hexadecimal) means 2 V (= 25%) on
analog input channel 4 (1...5 V). Note that 0% = 1 V,
25% = 2 V and 100% = 5 V.
Read byte 9 = 0 (decimal) = 00 (hexadecimal) means no channel error.
186
3BSE 036 959R4001
DO810
A.4 DO810
The parameters are selected according to Table A-3.
Table A-3 DO810 User Parameters in Normal Mode
07
06
05
04
03
02
01
00
Family type = 2
0
Param. byte 1
Cluster = 1
DA8=1
DA7=1
DA6=1
Param. byte 2
Position = 5
No of channels = 16 - 1 = 15
DA5=1
Decimal bit
SU
DA4=0
DA3=0
Param. byte 3
0
Param. byte 4
DA2=0
DA1=0
Param. byte 5
DA16=0 DA15=0 DA14=0 DA13=0 DA12=0
DA11=0 DA10=0
DA9=0
Param. byte 6
OC8=0
OC7=0
OC6=0
OC5=0
OC4=0
OC3=0
OC2=0
OC1=0
Param. byte 7
OC16 =
1
OC15 =
1
OC14 =
1
OC13 =
1
OC12 =
1
OC11 =
1
OC10 =
1
OC9 = 1 Param. byte 8
OV8
OV7
OV6
OV5
OV4
OV3
OV2
OV1
V16 = 1
V15 = 1
V14 = 1
V13 = 0
V12 = 0
V11 = 0
V10 = 0
V9 = 0
Param. byte 9
Param. byte
10
The parameter values have the following significance.

Byte 1 =
2 (decimal) = 02 (hexadecimal)
Byte 2 =
10 (decimal) = 0A (hexadecimal) = 0000 1010 (binary) means no

redundancy and identity number 10
Byte 3 =
15 (hexadecimal) means position 5 in cluster 1 (decimal value = 21

on PROFIBUS-DP, see Table 3-1).
Byte 4 =
F1 (hexadecimal) = 1111 0001 (binary) means 16 channels and

sensor power supervision off.
3BSE 036 959R4001
187
Memory Map
Byte 5 =
F0 (hexadecimal) = 1111 0000 (binary) means channel 1-4 activated

and 5-8 deactivated.
Byte 6 =
00 (hexadecimal) = 0000 0000 (binary) means channel 9-16

activated.
Byte 7 =
00 (hexadecimal) = 0000 0000 (binary) means that the values of

outputs 1 - 8 will remain unchanged if the OSP time-out elapses.
Byte 8 =
FF (hexadecimal) = 1111 1111 (binary) means that the values of

outputs 9-16 will assume their predetermined (OSP) values if the
OSP time-out elapses.
Byte 9=
Indicates the OSP values of outputs 1-8, which are insignificant

because the outputs are defined to be unchanged by the value of byte
5.
Byte 10 =
E0 (hexadecimal) = 1110 0000 (binary) indicates that outputs 9 - 13

will go OFF and outputs 14-16 will go ON if the OSP time-out
elapses.
A.4.2 Memory Map

The DO810 memory map consists of 2 read words and 2 write words shown in
Table 3-118.
Example
Read byte 1 = 00 (hexadecimal) = 0000 0000 (binary), that is, no fault on
channel 9 to channel 16.
Read byte 2 = F0 (hexadecimal) = 1111 0000 (binary), that is,
S5-S8 = 1 (channels 5 - 8 is faulty).
Write byte 1 = 1F (hexadecimal) = 0001 1111 (binary), that is,
output value = 1 (ON) for channels 9 - 13,
and output value = 0 (OFF) for channels 14 - 16.
Write byte 2 = E0 (hexadecimal) = 1110 0000 (binary), that is,
output value = 1 (ON) for channels 6 - 8 and output
value = 0 (OFF) for channels 1 - 5.
188
3BSE 036 959R4001
Appendix B AI895/AO895 Supported HART Commands
Universal Commands
Appendix B AI895/AO895 Supported HART

Commands
B.1 Universal Commands
B.1.1 Command 0 - Read unique identifier
Request data bytes: none
Response data bytes:
Byte
Description
Value
EXT_FLAG
Expansion code
FEh
MFR_ID
49h = ELCON
INSTRUMENTS
DEV_TYPE
Manufacturers device type code
ECh = AI895;
EBh = AO895
RQST_PREAM Number of preambles required in

command
00h
U_CMD
05h
DS_CMD
SOFT_REV
Software revision
HARD_REV
FLAGS
Device functions flags
9-11 DEV_ID
04h = protocol
bridge device
Device identification number
Command specific response code: none
3BSE 036 959R4001
189
Command 11 - Read unique identifier associated with tag
Appendix B AI895/AO895 Supported
B.1.2 Command 11 - Read unique identifier associated with tag

Request data bytes:
Byte
Description
0-5 TAG
Tag, packed ASCII (6 char)

Byte
Description
Value
EXT_FLAG
Expansion code
FEh
MFR_ID
49h = ELCON
INSTRUMENTS
DEV_TYPE
Manufacturers device type code
ECh = AI895;
EBh = AO895
RQST_PREAM Number of preambles required in

command
00h
U_CMD
05h
DS_CMD
SOFT_REV
Software revision
HARD_REV
FLAGS
Device functions flags
9-11 DEV_ID
04h = protocol
bridge device
Device identification number
190
3BSE 036 959R4001
Command 12 - Read message
B.1.3 Command 12 - Read message

Request data bytes: none:
Byte
Description
0-23 MESSAGE
Message packed ASCII (32 char)
B.1.4 Command 13 - Read tag, descriptor, date

Byte
Description
0-5
TAG
6-17
DESC
Descriptor, packed ASCII (16 char)
18-20 DATE
Date, (3bytes dd, mm, yy)
B.1.5 Command 16 - Read final assembly number

Byte
0-3 ASS_NUM
Description
3BSE 036 959R4001
191
Command 17 - Write message
B.1.6 Command 17 - Write message

Request data bytes:
Byte
Description
0-23 MESSAGE

Byte
Description
0-23 MESSAGE
Command specific response code:

5 - Error: too few data bytes received
32 - Error: busy
B.1.7 Command 18 - Write tag, descriptor, date

Request data bytes:
Byte
Description
0-5
TAG
6-17
DESC
18-20 DATE

Byte
Description
0-5
TAG
6-17
DESC
18-20 DATE
192
3BSE 036 959R4001
Command 19 - Write final assembly

32 - Error: busy
B.1.8 Command 19 - Write final assembly number

Request data bytes:
Byte
0-3
Description
ASS_NUM

Byte
0-3
Description
ASS_NUM

32 - Error: busy
3BSE 036 959R4001
193
Common Practice Commands
B.2 Common Practice Commands

B.2.1 Command 38 - Reset configuration changed flag
Response data bytes: none
32 - Error: busy
B.2.2 Command 41 - Perform device self-test

32 - Error: busy
B.2.3 Command 42 - Perform master reset

This command only resets the HART task of the module.
32 - Error: busy
194
3BSE 036 959R4001
Command 48 - Read additional device
B.2.4 Command 48 - Read additional device status

Byte
0
Description
OP_PROGRES Operations in progress:
S
bit 7 RESET
bit 6 REBUILD (OR of HART channels)
bit 5 EEPROM update
bit 4 SCAN_ENABLE
bit 3 SELF TEST
bit 2..0 Reserved
HARD_FAULT
SCAN_FAULT
Hardware faults:
bit 7 CHANNEL FAULT (OR of HART
channels)
bit 6 ROM FAULT
bit 5 EEPROM FAULT
bit 4..0 Reserved
OR of instruments scan faults and
status:
bit 7 SCAN ENABLED
bit 6 SEARCHING
bit 5 DISAPPEARED
bit 4 APPEARED
bit 3 MISMATCHED
bit 2..0 Reserved
COM_FAULT
OR of instruments communication error

bits (of reply to command sent directly
by the module
ex: command 0 during locate phase)
STAT_FAULT
OR of instruments status bits (of reply to

command sent directly by the module
ex: command 0 during locate phase)
Value
0 = not, 1 = yes
0 = not, 1 = yes
0 = not, 1 = yes
0 = not, 1 = yes
0 = not, 1 = yes
0 = not, 1 = yes
0 = not, 1 = yes
0 = not, 1 = yes
0 = not, 1 = yes
0 = not, 1 = yes
0 = not, 1 = yes
0 = not, 1 = yes
0 = not, 1 = yes
3BSE 036 959R4001
195
Command 106 - Flush completed delayed response
B.2.5 Command 106 - Flush completed delayed response

32 - Error: busy
196
3BSE 036 959R4001
AI/AO895 Specific Commands
B.3 AI/AO895 Specific Commands

B.3.1 Command 128 - Read gateway parameters
The parameters read with this command are related to the module gateway
functionality.
Byte
Description
Value
MAX_DR_PM
Max delayed response for primary

master
MAX_DR_SM
Max delayed response for secondary

master
NUM_DR_PM
Delayed response in use for primary

master
NUM_DR_SM
Delayed response in use for secondary

master
CH_SIGN
Physical signalling on HART channels
0 = BELL 202
MAX_CH
Max number of HART channels
6-7
MAX_INST
Max number of HART instruments
8-9
NUM_INST
Number of HART instruments in the list
10-11 NUM_SCAN
Number of HART instruments scanned
12
MODE
Master bit and timing
1 = primary
13
LOC_MET
Locate method
0 = single analog
(short address 0
only)
14
SCAN_CMD
Scan command
1 = command 1
15
SCAN_EN
Scan enable
0 = disabled
1 = enabled
3BSE 036 959R4001
197
Command 129 - Read channel status
Byte
Description
Value
16
BUSY_RETRY
Number of retries for a busy response

from inst
17
OTHER_RETRY Number of retries for a other error from

inst

32 - Error: busy
B.3.2 Command 129 - Read channel status

One instrument maximum per channel.
Request data bytes:
Byte
0
Description
CH_NUM
HART channel number
Value
0..7

Byte
Description
CH_NUM
HART channel number
0..7
CH_STATUS
Channel status
bit 7 HARD FAULT
bit 6 REBUILDING
bit 5..0 Reserved
0 = not, 1 = yes
0 = not, 1 = yes
COUNT
SHORT_ADDR Instrument short address
4-8 EXT_ADDR
198
Value
Byte before next item
Instrument extended address
3BSE 036 959R4001
Appendix B AI895/AO895 Supported HART Commands Command 130 - Read instrument list from
Byte
9
10
Description
INST_SCAN
INST_FAULT
Instrument scan status

bit 7 SCAN_ENABLE
bit 6 SEARCHING
bit 5..0 Reserved
Instrument scan faults
bit 7..6 Reserved
bit 5 DISAPPEARED
bit 4 APPEARED
bit 3 MISMATCHED
bit 2..0 Reserved
Value
0 = not, 1 = yes
0 = not, 1 = yes
0 = not, 1 = yes
0 = not, 1 = yes
0 = not, 1 = yes
Data from byte 2 are present in the reply only if one instrument has been found on
the requested channel.
3 - Error: passed parameter too large
B.3.3 Command 130 - Read instrument list from index

Request data bytes:
Byte
Description
0-1 INDEX
Value
Instrument list index

Byte
0
Description
INDEX
Instrument list index
2-6 EXT_ADDR 0
Extended address of first instrument
7-11 EXT_ADDR 1
Extended address of second
..
3BSE 036 959R4001
Value
...
199
Command 131 - Read instrument static data
If the index value is too high (max value is 7), no list is generated and only the index
is present in the reply.
32 - Error: busy
B.3.4 Command 131 - Read instrument static data

Request data bytes:
Byte
Description
0-4 EXT_ADDR 0
5
COUNT 0
6-10 EXT_ADDR 1
11
COUNT 1
Extended address 0
Bytes before next item
Extended address 1
..

Byte
Description
0-4 EXT_ADDR 0
200
Value
Extended address
COUNT 0
ERROR 0
Error
CH_NUM 0
Channel number
SHORT_ADDR 0 Instrument short address
0 = The instrument
is present. Data are
included in reply.
64 = The instrument
is unknown. In that
case no data are
included in reply.
3BSE 036 959R4001
Byte
Command 132 - Write instrument static
Description
U_CMD 0
10
RQST_PREAM 0 Number of preambles required by

inst.
Value
Instrument universal command

revision
..

17 - Error: too many items requested
32 - Error: busy
B.3.5 Command 132 - Write instrument static data

Request data bytes:
Byte
0-4
Description
EXT_ADDR 0
Extended address 0
COUNT 0
CH_NUM 0
Channel number 0
SHORT_ADDR 0 Short address 0
U_CMD 0

instrument
..
EXT_ADDR 1
Extended address 1
..
COUNT 1
..
CH_NUM 1
Channel number 1
..
SHORT_ADDR 1 SHORT_ADDR 1
3BSE 036 959R4001
Instrument universal command revision
201
Command 132 - Write instrument static data
Byte
Description
..
U_CMD 1
..

instrument

Byte
0-4
Description
EXT_ADDR 0
Extended address
COUNT 0
ERROR 0
Error
CH_NUM 0
Channel number
SHORT_ADDR 0 Instrument short address
U_CMD 0
10

instrument
..

32 - Error: busy
202
3BSE 036 959R4001
Appendix B AI895/AO895 Supported HART Commands Command 133 - Remove instrument from
B.3.6 Command 133 - Remove instrument from list

Request data bytes:
Byte
0-4
5
6-10
11
Description
EXT_ADDR 0 Extended address 0
COUNT 0
EXT_ADDR 1 Extended address 1

COUNT 1
..

Byte
Description
0-4 EXT_ADDR 0
Extended address 0
COUNT 0
ERROR 0
Error
7-11 EXT_ADDR 1
12
COUNT 1
13
ERROR 1
Value
0 = The instrument
was present but no
longer in list.
64 = The instrument
is unknown
Extended address 1
..

32 - Error: busy
3BSE 036 959R4001
203
Command 144 - Read retry limits
B.3.7 Command 144 - Read retry limits

Byte
Description
Value
BUSY_RETRY

from inst

inst

32 - Error: busy
B.3.8 Command 145 - Write retry limits

Request data bytes:
Byte
Description
Value
BUSY_RETRY

from inst

inst

Byte
Description
Value
BUSY_RETRY

from inst

inst
204
3BSE 036 959R4001
Command 146 - Read scan command

9 - Error: first parameter too large
11 - Error: second parameter too large
32 - Error: busy
B.3.9 Command 146 - Read scan command

Byte
0
Description
SCAN_CMD
Scan command
Value
1 = command 1

32 - Error: busy
B.3.10 Command 148 - Read scan status

Byte
0
Description
SCAN_EN
Scan enable
Value
0 = disabled

32 - Error: busy
B.3.11 Command 149 - Write scan status

Request data bytes:
Byte
0
3BSE 036 959R4001
Description
SCAN_EN
Scan enable
Value
0 = disable
1 = enable
205
Command 150 - Read mode

Byte
0
Description
SCAN_EN
Scan enable
Value
0 = disabled
1 = enable

2 - Error: invalid selection
32 - Error: busy
B.3.12 Command 150 - Read mode

Byte
0
MODE
Description
Value
Master bit and timing used
1 = primary

32 - Error: busy
B.3.13 Command 152 - Read locate method

Byte
0
Description
LOC_MET
Locate method
Value
0 = single analog

32 - Error: busy
206
3BSE 036 959R4001
Command 154 - Rebuild loops
B.3.14 Command 154 - Rebuild loops

Request data bytes:
Byte
Description
CH_NUM 0
Channel number 0
COUNT 0
Number of bytes before next item
..
CH_NUM i
Channel number i
..
COUNT i
Value

Byte
Description
CH_NUM 0
Channel number 0
COUNT 0
ERROR 0
Error 0
..
CH_NUM i
Channel number i
..
COUNT i
..
ERROR i
Error i
Value
0 = channel
number between
0..7
64 = invalid
channel number

32 - Error: busy
3BSE 036 959R4001
207
Command 155 - Copy command
B.3.15 Command 155 - Copy command

Request data bytes:
Byte
Description
Value
CH_NUM
Channel number
0..7
1..
COMMAND
Command to sent to the selected

channel = delimiter, address, command,
byte count, data, checksum
Preambles are not present

Byte
Description
Value
CH_NUM
Channel number
0..7
1..
REPLY
Reply from selected channel = delimiter,

address, command, byte count, data,
checksum
Preambles from instruments are not
included

3 - Error: passed parameter too large
32 - Error: busy
208
3BSE 036 959R4001
Command 160 - Read all channels scan
B.3.16 Command 160 - Read all channels scan status and fault
Byte
Description
Value
CH_NUM 0
Channel number
SCAN_FAULT
of channel 0
OR of instrument scan faults and status:

bit 7 SCAN ENABLED
bit 6 SEARCHING
bit 5 DISAPPEARED
bit 4 APPEARED
bit 3 MISMATCHED
bit 2..0 Reserved
0 = not, 1 = yes
0 = not, 1 = yes
0 = not, 1 = yes
0 = not, 1 = yes
0 = not, 1 = yes
14
CH_NUM 7
Channel number
15
SCAN_FAULT
of channel 7
...
...

32 - Error: busy
3BSE 036 959R4001
209
Command 250 - Write device identifier
B.3.17 Command 250 - Write device identifier

Request data bytes:
Byte
0-3 DEV_ID
Description
Device ID number

Byte
0-3 DEV_ID
Description
Device ID number

32 - Error: busy
210
3BSE 036 959R4001
Appendix C HART Addressing
General

C.1 General
To be able to communicate with a HART device, its HART address (5 bytes long)
must be known. For AI845/AO845 and AI895/AO895, the address of connected
HART instruments are read as follows:
For AI845/AO845, HART command 0 (with 1 byte short address format)

should be sent directly to the connected HART instrument. The HART
instrument will respond with information that should be used to interpret its 5
bytes long address of the instrument, see How to Interpret the HART Address
on page 211.
For AI895/AO895, HART command 0 (with 1 byte short address format)

should be sent to the I/O module itself. The I/O module will respond with
information that should be used to interpret its 5 bytes long address of the I/O
module, see How to Interpret the HART Address on page 211. To get the
addresses of connected HART instruments, HART command 130 should be
sent to the I/O module. The I/O module will respond with a list of connected
instruments.
C.2 How to Interpret the HART Address

Extract the 5 bytes HART device address from command 0 response according to
following:
Address Byte 1 =
2#10XX XXXX where XX XXXX is the 6 least

significant bits of the Manufacturer identification code.
Address Byte 2 =
Device type (16#EC for AI895 and 16#EB for AO895).
Address Byte 3-5 =
Device identification number.
When command 130 is used the first byte in the received address must be
adjusted in the same way as for address byte 1 in command 0.
3BSE 036 959R4001
211
How to Interpret the HART Address
212
3BSE 036 959R4001
Appendix D I/O Module Diagnostics
I/O Module Diagnostic

D.1 I/O Module Diagnostic
Table D-1 Diagnostic Statement Type
Bit 31
Condition
Bit 30
Class
Bit 29-16
Statement
type
Open circuit
(thermocouple
burnout)
T/F
Channel x
see Table D-2
AI830, AI835,
AI843, AI845,
AO845
Short circuit
T/F
Channel x
see Table D-2
AI830, DI885,
AI845
Error in reference
channels
T/F
AI830, AI835,
AI843, AI845
Internal power supply

low
T/F
AI830, AI835,
AI843, AI845,
AO845
Cold junction error
T/F
Channel x
see Table D-2
AI835, AI843
Illegal module
parameter
T/F
AI830, AI835,
AI843, AI845,
AO845
Illegal channel
parameter
T/F
Channel x
see Table D-2
AI830, AI835,
AI843, AI845,
AO845
Situation
3BSE 036 959R4001
Bit 15-0
Statement
Info
Module
213
Table D-1 Diagnostic Statement Type (Continued)

Bit 31
Condition
Bit 30
Class
Bit 29-16
Statement
type
Bit 15-0
Statement
Info
Check sum error
T/F
Check sum
Watchdog
T/F
EEPROM check sum

error
T/F
16
External power supply

error
T/F
17
Analogous read back

and voltage reference
error
T/F
18
Channel x
AI845, AO845
Current bypass error
T/F
19
Channel x
AO845
Oscillator frequency
error
T/F
20
Timer value
AO845
Output transistor short

circuit error
T/F
21
Channel x
AO845
Module Status Link

read back error
T/F
22
External Shunt error
T/F
23
Channel x
AI845
Accuracy error
T/F
24
Channel x
AI843, AI845
FPGA RAM error
T/F
25
Address
AI845, AO845
Multiplexer error
T/F
26
Channel x
AI845
Wrong OSP behavior
T/F
27
Situation
214
Check sum
0
Module
AI830, AI835,
AI843, AI845,
AO845
AI830, AI835,
AI843, AI845,
AO845
AI845, AO845
AI845, AO845
AO845
AO845
3BSE 036 959R4001
Table D-2 Statement Information

Statement Info Bit 15-0
3BSE 036 959R4001
Value
Module
Channel 1
Channel 2
Channel 3
Channel 4
Channel 5
Channel 6
Channel 7
Channel 8
Channel 9
Channel 10
10
Channel 11
11
Channel 12
12
Channel 13
13
Channel 14
14
Channel 15
15
Channel 16
16
215
216
3BSE 036 959R4001
INDEX
A
ACS600 standard drive 149
AI801 38
AI810 42
AI820 46
AI830 49
AI835 53
AI845 63
AI890 66
AI895 75
Analog input module
AI801 38
AI810 42
AI820 46
AI830 49
AI835 53
AI845 63
AI890 66
AI895 75
Analog output module
AO801 78
AO810 81
AO820 84
AO845 87
AO890 90
AO895 93
Analog process value 36
AO801 78
AO810 81
AO820 84
AO845 87
AO890 90
AO895 93
3BSE 036 959R4001
B
Base cluster 15
Bus-master 15
C
CI801 15
CI840
Configuration example 184
User parameters 27
D
Data exchange 20
DI801 96
DI802 98
DI803 100
DI810 102
DI811 104
DI814 106
DI820 108
DI821 110
DI840 112
DI890 115
Digital input module
DI801 96
DI802 98
DI803 100
DI810 102
DI811 104
DI814 106
DI820 108
DI821 110
DI840 112
DI890 115
Digital output module
DO801 117
217
Index
DO802 119
DO810 121
DO814 123
DO815 125
DO820 127
DO821 129
DO840 131
DO890 134
DO801 117
DO802 119
DO810 121
DO814 123
DO815 125
DO820 127
DO821 129
DO840 131
DO890 134
DP820 136
DPV1 Services 155
mV input module AI835 53
N
Nominal range 36 to 37
O
Overrange 36
P
Parameter 35
Parameter area 21
Position 35
PROFIBUS-DP 15, 20
R
Range 36 to 37
Resistance thermometer module
AI830 49
F
FCI 15
Fieldbus communication interface 15
S
S800 I/O station 15
Slave station 15
Standard drive ACS600 149
G
GSD file 21
T
Thermocouple input module
AI835 53
HART 163
U
I
Underrange 36
I/O station 15
Identity number 35
Incremental pulse encounter module
DP820 136
M
Memory map 26, 36
ModuleBus 15, 20
218
3BSE 036 959R4001
3BSE 036 959R4001. Printed in Sweden October 2004

Copyright 2004 by ABB. All Rights Reserved
Registered Trademark of ABB.
Trademark of ABB.
http://www.abb.com/control
Automation Technology Products
Vsters, Sweden
www.abb.com/processautomation
email: [email protected]

Wickliffe, Ohio, USA
www.abb.com/processautomation

Mannheim, Germany
www.abb.de/processautomation

S800 CI801MemMap

Uploaded by

Copyright:

Available Formats

S800 CI801MemMap

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

S800 CI801MemMap

Uploaded by

Copyright:

Available Formats

IndustrialIT

800xA - Control and I/O

Memory Maps for CI801

Memory Maps for CI801

Registered trademark of Microsoft Corporation.

Registered trademark of ABB.

Registered trademark of Profibus International (P.I.)

Registered trademark of Profibus International (P.I.)

Registered trademark of HART Communication Foundation.

Section 2 - Fieldbus Communication Interface CI801

Section 3 - I/O Module Data

3BSE 036 959R4001

3.11 AI893 Thermocouple/mV/RTD Input Module........................................................ 69

Section 4 - DPV1 Services

3BSE 036 959R4001

4.2 DDLM_READ ........................................................................................................155

Section 5 - HART Communication

3BSE 036 959R4001

5.6.1.1 Pass-through Command ........................................................ 171

Appendix A - Configuration Example

Appendix B - AI895/AO895 Supported HART Commands

3BSE 036 959R4001

B.2.1 Command 38 - Reset configuration changed flag ....................................194

Appendix C - HART Addressing

Appendix D - I/O Module Diagnostics

3BSE 036 959R4001

3BSE 036 959R4001

About This Book

About This Book

3BSE 036 959R4001

Use of Warning, Caution, Information, and Tip Icons

About This Book

0.2 Use of Warning, Caution, Information, and Tip Icons

3BSE 036 959R4001

About This Book

Fieldbus communication interface module for single

Computer-based unit in which control applications are

Fieldbus Communication Interface.

Serial, multidrop circuit for communication between

Device description file (Gert Stamm Datei), a standard

Highway Addressable Remote Transducer

FCI with connected I/O modules.

Open Control System

Output Set as Predetermined

PROFIBUS User Organization (PROFIBUS

Open, vendor-independent fieldbus for time-critical

Resistance Thermometer Detector

A range of process I/O modules

3BSE 036 959R4001

About This Book

0.4 Related Documentation

Describes the PROFIBUS-DP FCI in the

3BSE 036 959R4001

1.1 Product Overview

3BSE 036 959R4001

3BSE 036 959R4001

Fieldbus Communication Interface CI801

Fieldbus Communication Interface

2.1 General Functionality