Simatic S7-400 Point-To-Point Connection CP 441 Installation and Parameter Assignment
Simatic S7-400 Point-To-Point Connection CP 441 Installation and Parameter Assignment
Product Description            1
                                   Basic Principles of Serial
                                   Data Transmission              2
SIMATIC
                                   Commissioning the CP 441       3
S7-400
Point-to-point connection CP 441                                  4
                                   Mounting the CP 441
Installation and Parameter
Assignment                         Configuring and Assigning
                                   Parameters for the CP 441      5
Manual
                                   Communication via System
                                   Function Blocks                6
                                   Start-up Characteristics and
                                   Operating Mode Transitions     7
                                   of the CP 441
Technical Specifications A
Cables B
                                   SFB Parameters                 C
                                   Accessories and Order
                                   Numbers                        D
Literature on SIMATIC S7 E
10/2005
A5E00405449-01
Safety Guidelines
             This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
             damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
             symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
             graded according to the degree of danger.
             Danger
             indicates that death or severe personal injury will result if proper precautions are not taken.
             Warning
             indicates that death or severe personal injury may result if proper precautions are not taken.
             Caution
             with a safety alert symbol, indicates that minor personal injury can result if proper precautions are not taken.
             Caution
             without a safety alert symbol, indicates that property damage can result if proper precautions are not taken.
             Notice
             indicates that an unintended result or situation can occur if the corresponding information is not taken into
             account.
             If more than one degree of danger is present, the warning notice representing the highest degree of danger will
             be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to
             property damage.
Qualified Personnel
             The device/system may only be set up and used in conjunction with this documentation. Commissioning and
             operation of a device/system may only be performed by qualified personnel. Within the context of the safety notes
             in this documentation qualified persons are defined as persons who are authorized to commission, ground and
             label devices, systems and circuits in accordance with established safety practices and standards.
Prescribed Usage
             Note the following:
             Warning
             This device may only be used for the applications described in the catalog or the technical description and only in
             connection with devices or components from other manufacturers which have been approved or recommended by
             Siemens. Correct, reliable operation of the product requires proper transport, storage, positioning and assembly
             as well as careful operation and maintenance.
Trademarks
             All names identified by ® are registered trademarks of the Siemens AG. The remaining trademarks in this
             publication may be trademarks whose use by third parties for their own purposes could violate the rights of the
             owner.
Disclaimer of Liability
             We have reviewed the contents of this publication to ensure consistency with the hardware and software
             described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the
             information in this publication is reviewed regularly and any necessary corrections are included in subsequent
             editions.
                       Note
                       The descriptions of the CP 441 communication processor and the interface submodules in
                       this manual were correct at the time of publication. We reserve the right to describe
                       modifications to the functionality of the modules in a separate Product Information.
Approvals
                  You will find detailed information about certificates, approvals and standards in the manual
                  S7-400 Programmable Controller; Module Specifications.
Additional Assistance
                  Please contact your local Siemens representative if you have any queries about the products
                  described in this manual.
                  • Find your contact partner at:
                     http://www.siemens.com/automation/partner
                  • A signpost to the documentation of the various SIMATIC products and systems is
                    available at:
                     http://www.siemens.de/simatic-tech-doku-portal
                  • The online catalog and the online ordering system is available at:
                     http://mall.automation.siemens.com
Conventions
                  This manual uses the generic term CP 441. This information in the manual apples to the
                  CP 441-1 and CP 441-2 communication processors, unless otherwise specified.
Training Center
                  We offer courses to help you get started with the S7 automation system. Please contact your
                  local training center or the central training center in Nuremberg, D-90327 Germany.
                  Tel: +49 (911) 895-3200.
                  Internet: http://www.sitrain.com
Technical Support
                       Here you can access Technical Support for all A&D products
                       • Use the Web form for the support request at:
                           http://www.siemens.de/automation/support-request
                       • Tel: + 49 180 5050 222
                       • Fax: + 49 180 5050 223
                       You will find further information about our technical support services under:
                       http://www.siemens.de/automation/service
       6.6           Using the System Function Blocks with the Printer Driver ...................................................... 6-41
       6.7           Summary.................................................................................................................................. 6-43
7      Start-up Characteristics and Operating Mode Transitions of the CP 441................................................ 7-1
       7.1           Startup Characteristics of the CP 441 ....................................................................................... 7-1
       7.2           Operating Mode Transitions of the CP 441 ............................................................................... 7-2
8      Diagnostics Functions of the CP 441 ...................................................................................................... 8-1
       8.1           Diagnostics via the display elements of the CP 441.................................................................. 8-3
       8.2           Diagnostics Messages of the System Function Blocks ............................................................. 8-4
       8.3           Diagnostics via the Error Signaling Area SYSTAT .................................................................... 8-8
       8.4           Error Numbers in the Response Message Frame ................................................................... 8-21
       8.5           Diagnostics via the diagnostic buffer of the CP 441 ................................................................ 8-23
       8.6           Diagnostic Interrupt.................................................................................................................. 8-25
9      Programming Example for System Function Blocks ............................................................................... 9-1
       9.1           General Information ................................................................................................................... 9-1
       9.2           Device Configuration.................................................................................................................. 9-2
       9.3           Configuring the Controller Setup................................................................................................ 9-3
       9.4           Parameterizing the CP 441........................................................................................................ 9-3
       9.5           Configuring the Connection to the Communication Partner ...................................................... 9-4
       9.6           Programming an RK 512 User Program.................................................................................... 9-5
       9.6.1         Program CP441 RK 512 Send/Recv ......................................................................................... 9-5
       9.6.2         Blocks Used in the Sample Program ......................................................................................... 9-7
       9.7           Programming an ASCII/3964(R) User Program ........................................................................ 9-8
       9.8           Programming a Printer User Program ....................................................................................... 9-8
       9.8.1         Cyclic Program........................................................................................................................... 9-9
       9.8.2         Blocks Used in the Sample Program ....................................................................................... 9-10
       9.9           Installation, Error Messages .................................................................................................... 9-10
A      Technical Specifications .........................................................................................................................A-1
       A.1           Technical Specifications of the CP 441 and the Interface Submodules .................................... A-1
       A.2           Transmission times of the protocols .......................................................................................... A-3
B      Cables ....................................................................................................................................................B-1
       B.1           Interface Submodule RS 232C .................................................................................................. B-1
       B.2           20mA TTY interface submodule ................................................................................................ B-8
       B.3           Interface Submodule X27 (RS 422/485).................................................................................. B-15
C      SFB Parameters .....................................................................................................................................C-1
D      Accessories and Order Numbers............................................................................................................D-1
E      Literature on SIMATIC S7.......................................................................................................................E-1
       Index................................................................................................................................................ Index-1
Tables
Table 1-1      Transmission Protocols in the Module Firmware ....................................................................... 1-2
Table 1-2      Functions of the CP 441 Depending on the Interface Submodule Used ................................... 1-2
Table 1-3      Hardware Components for a Point-to-Point Connection with the CP 441 ................................. 1-3
Table 1-4      Software Components for a Point-to-Point Connection with the CP 441 .................................. 1-4
Table 2-1      Structure of Message Frame Header (RK 512) ....................................................................... 2-24
Table 2-2      3964(R) Protocol ...................................................................................................................... 2-52
Table 2-3      Protocol Parameters (3964(R) Procedure) .............................................................................. 2-53
Table 2-4      Baud Rate / Character Frame (3964(R) Procedure)................................................................ 2-54
Table 2-5      Receive buffer on CP (3964(R) procedure) ............................................................................. 2-55
Table 2-6      X27 (RS 422) Interface (3964(R) procedure)........................................................................... 2-55
Table 2-7      Protocol Parameters (ASCII Driver)......................................................................................... 2-59
Table 2-8      Baud Rate / Character Frame (ASCII Driver) .......................................................................... 2-60
Table 2-9      Data flow control (ASCII driver) ............................................................................................... 2-61
Table 2-10     Receive Buffer on CP (ASCII Driver) ....................................................................................... 2-62
Table 2-11     X27 (RS 422/485) interface submodule (ASCII driver)............................................................ 2-63
Table 2-12     Baud Rate/Character Frame (Printer Driver) ........................................................................... 2-66
Table 2-13     X27 (RS 422) interface submodule (printer) ............................................................................ 2-67
Table 2-14     Data flow control (printer driver)............................................................................................... 2-69
Table 2-15     Page layout (printer driver)....................................................................................................... 2-70
Table 2-16     Character Set (Printer Driver) .................................................................................................. 2-71
Table 2-17     Control Characters (Printer Driver) .......................................................................................... 2-71
Table 2-18     Message Texts (Printer Driver) ................................................................................................ 2-73
Table 2-19     Representation types in the conversion statement.................................................................. 2-77
Table 2-20     Example: The pressure in the chamber "is falling" .................................................................. 2-78
Table 2-21     Example: (Setting the page number to 10) .............................................................................. 2-79
Table 5-1      Configuration Options for the CP 441 ........................................................................................ 5-1
Table 5-2      Basic Parameter......................................................................................................................... 5-3
Table 5-3      Settings in the "Object Properties" dialog for the ASCII driver, printer driver and 3964(R)
               procedure ................................................................................................................................. 5-10
Table 5-4      Settings in the "Object Properties" dialog for the RK 512........................................................ 5-13
Table 5-5      LEDs for firmware update ........................................................................................................ 5-21
Table 6-1      System function blocks of the S7-400 programmable controller ............................................... 6-2
Table 6-2      SFB Control Parameters ............................................................................................................ 6-3
Table 6-3      SFB Addressing Parameters...................................................................................................... 6-4
Table 6-4      SFB Status Parameters ............................................................................................................. 6-5
Table 6-5      If the communication load is increased please note the following: ............................................ 6-7
Table 6-6      Example of Calling SFB12 (BSEND) using 3964(R) ............................................................... 6-10
Table 6-37     The following applies to the output of message texts on a printer:.......................................... 6-44
Table 8-1      Error Messages of the CP 441 Display Elements...................................................................... 8-3
Table 8-2      Error Information for SFB 12 "BSEND"...................................................................................... 8-4
Table 8-3      Error Information for SFB 13 "BRCV" ........................................................................................ 8-5
Table 8-4      Error Information for SFB 14 "GET" ........................................................................................... 8-6
Table 8-5      Error Information for SFB 15 "PUT" ........................................................................................... 8-6
Table 8-6      Error Information for SFB 16 "PRINT" ....................................................................................... 8-7
Table 8-7      Error Information for SFB 22 "STATUS" .................................................................................... 8-7
Table 8-8      Example for calling SFB 22 (STATUS) ...................................................................................... 8-9
Table 8-9      Event classes and event numbers ........................................................................................... 8-10
Table 8-10     Error messages in the response message frame with RK 512................................................ 8-21
Table 9-1      Blocks Used in the Sample Program ......................................................................................... 9-7
Table 9-2      Blocks Used in the Sample Program for Printers..................................................................... 9-10
Table A-1      Technical Specifications of the CP 441 .....................................................................................A-1
Table A-2      Technical Specifications of the Interface Submodules ..............................................................A-2
Table A-3      Transmission Times for ASCII Drivers (in seconds) ..................................................................A-3
Table A-4      Transmission Times for the 3964(R) Procedure (in Seconds)...................................................A-4
Table A-5      Transmission Times for the RK 512 Computer Connection (in Seconds) .................................A-4
Table B-1      Pin assignment for the 9-pin subminiature D male connector of the RS 232C
               interface submodule...................................................................................................................B-1
Table B-2      Pin Allocation for the 9-Pole Sub D Female Connector on the 20mA TTY
               Interface Submodule ..................................................................................................................B-8
Table B-3      Pin assignment for the 15-pin subminiature D female connector of the X27
               interface submodule.................................................................................................................B-15
Table C-1      SFB Parameters.........................................................................................................................C-1
Table C-2      SFB Parameters.........................................................................................................................C-1
Table D-1      The following is an overview of the accessories for the CP 441:...............................................D-1
Table E-1      Manuals for Configuring and Programming the S7–400............................................................E-1
Table E-2      Manuals for PROFIBUS-DP....................................................................................................... E-2
Introduction
                       The CP 441 communication processor allows you to exchange data between programmable
                       controllers or computers by means of a point-to-point connection.
Table 1-2 Functions of the CP 441 Depending on the Interface Submodule Used
Hardware Components
                       For a point-to-point connection using the CP 441, you require certain hardware components.
Table 1-3 Hardware Components for a Point-to-Point Connection with the CP 441
Power supply module (PS)                        ... converts the line voltage (120/230 V AC or
                                                24 V DC) into the operating voltage of 24 V
                                                and 5 V DC required to supply the S7-400.
Central processor unit (CPU)                    ... executes the user program; communicates
Accessories:                                    via the MPI interface with other CPUs or with
                                                a programming device.
• Memory card
• Backup battery
CP 441 communication processor                  ... communicates via the interface with one or
                                                more communication partners.
                                                ... enable the CP 441 to be adapted to suit
Interface submodules                            the communication partner.
Programming device (PG) or PC ... communicates with the CPU of the S7-400.
Software Components
                   The following table lists the software components required for establishing a point-to-point
                   connection with the CP 441.
Table 1-4 Software Components for a Point-to-Point Connection with the CP 441
CP 441: Configuration Package for Point   ... assigns parameters for the interfaces
to Point Communication parameter          of the CP 441.
assignment interface
Function blocks                           ... for reading and controlling the
                                          RS 232C secondary signals.
Programming example                       ... with user programs for printer output
                                          and data transfer by means of the RK 512
                                          computer connection and the 3964(R)
                                          procedure.
Loadable drivers                          ... with transmission protocols that can be
                                          loaded on the CP 441-2 in addition to the
                                          standard protocols in the module
                                          firmware.                                             &'              'RQJOH
Setup
                       The CP 441-1 communication processor has one slot and the CP 441-2 has two slots for
                       plug-in interface submodules. The operator control and display elements are in the same
                       position on both the CP 441-1 and the CP 441-2. Identical elements have the same functions
                       on both models.
                                                 &3                      &3
                       CP 441 - 1
                                           X 2                                                                    X 2
                                           3 4                                                                    3 4
Vx.x.x Vx.x.x
                                    INTF
                                                 ,17)                        ,17)                          INTF
                                    TxD 1
                                                 7['                       7['                         TxD 1
                                                                                                           RxD 1
                                    RxD 1
                                                 5['                       5['
                                                                             )$8/7                       FAULT 2
                                                                                                           TxD 2
                                                                             7['                         RxD 2
                                                                             5['
                                                                            ,QWHUIDFH
                                                                            VXEPRGXOHVORW
                                                                            ,)
                                                 ,QWHUIDFH                                   IF
                                                                                              1
                                                 VXEPRGXOHVORW
                                                                            ,QWHUIDFH
                                                 ,)
                                                                            VXEPRGXOHVORW
                                                                            ,)
                       IF                                                                     IF
                       1                                                                      2
                       Figure 1-1                   Position of the operator control and display elements on the CP 441-1 and CP 441-2
                                                    communication processors
LEDs
                  The following LEDs are located on the front panel of the CP 441:
                  • INTF (red) CP 441 signals internal fault
                  • EXFT (red) CP 441 signals external fault
                  • FAULT 1 (red) Fault LED for interface IF 1
                  • TXD 1 (green) Interface IF 1 transmitting
                  • RXD 1 (green) Interface IF 1 receiving
                  • FAULT 2 (red) Fault LED for interface IF 2 (CP 441-2)
                  • TXD 2 (green) Interface IF 2 transmitting (CP 441-2)
                  • RXD 2 (green) Interface IF 2 receiving (CP 441-2)
See also
                  Properties of the RS 232C Interface Submodule (Page 1-7)
                  Attributes of the 20mA TTY interface submodule (Page 1-8)
                  Properties of the X27 (RS 422/485) Interface Submodule (Page 1-9)
Introduction
                       Three module variants of the communication processor are available, each having a different
                       interface type suitable for the different properties of communication partners.
Standard Cables
                       Siemens offers standard cables in various lengths for point-to-point connection between the
                       communication processor and a communication partner.
Definition
                       The RS 232C interface submodule is a voltage interface used for serial data transmission in
                       compliance with the RS 232C standard.
Properties
                       The RS 232C interface submodule has the following properties and fulfils the following
                       requirements:
                       • Type: Voltage interface
                       • Front connector: 9-pin subminiature D male connector with a screw-type fitting
                         (compatible with the 9-pin COM port (PC/PG))
                       • Max. transmission rate: 115.2 Kbps
                       • Max. cable length: 10 m
                       • Standard: DIN 66020, DIN 66259, EIA-RS 232C, CCITT V.24/V.28
                       • Degree of protection: IP 00
                       Please observe the maximum permitted transmission rates for the modules.
See also
                       Interface Submodule RS 232C (Page B-1)
Definition
                    The 20mA TTY interface submodule is a current-loop interface used for serial data
                    transmission.
Properties
                    The 20mA TTY interface submodule has the following attributes and fulfills the following
                    requirements:
                    • Type: Linear current interface
                    • Front connector: 9-pin subminiature D female with screw interlock
                    • Max. transmission rate: 19,2 Kbps
                    • Max. cable length: 1000 m at 9600 bps
                    • Standard: DIN 66258 Part 1
                    • Degree of protection: IP 00
                    Please observe the maximum permitted transmission rates for the modules.
See also
                    20mA TTY interface submodule (Page B-8)
Definition
                       The X27 (RS 422/485) interface is a voltage-difference interface for serial data transmission
                       in compliance with the X27 standard.
Properties
                       The X27 (RS 422/485) interface submodule has the following properties and fulfils the
                       following requirements:
                       • Type: Differential voltage interface
                       • Front connector: 15-pin sub-D female, with screwed interlock
                       • Max. transmission rate: 115.2 Kbps
                       • Max. cable length: 1200 m at 19200 Bps
                       • Standard: DIN 66259 Parts 1 and 3, EIA-RS 422/485, CCITT V.11
                       • Degree of protection: IP 00
                       Please observe the maximum permitted transmission rates for the modules.
                       Note
                       With the RK 512 and 3964(R) protocols, the X27 (RS 422/485) interface submodule can only
                       be used in four-wire mode.
See also
                       Interface Submodule X27 (RS 422/485) (Page B-15)
Considerations
                    The general installation guidelines for S7-400 must be observed (see the S7-400/M7-400
                    Programmable Controller, Hardware and Installation manual).
                    To meet the EMC (electromagnetic compatibility) values, the cable shield must be connected
                    to a shield bus.
Introduction
                       The system provides various networking options for the exchange of data between two or
                       more communication partners. The simplest form of data interchange is via a point-to-point
                       connection between two communication partners.
Point-to-point Communication
                       In point-to-point communication the communication processor forms the interface between a
                       programmable controller and a communication partner. In PtP communication with
                       communication processor, data are transferred via serial interface.
Serial Transmission
                       In serial transmission, the individual bits of each byte of information are transmitted one after
                       the other in a fixed order.
Declarations
                   As well as the start and stop bits, further declarations must be made between the sending
                   and receiving partners before serial transmission can take place. These include:
                   • Transmission speed (baud rate)
                   • Character and acknowledgment delay times
                   • Parity
                   • Number of data bits
                   • Number of stop bits
Character frame
                       Data is transmitted between the communication processor and a communication partner via
                       the serial interface in a character frame. Various data formats are available for the character
                       frame. You can set the format for data transmission with the CP 441: Configuration Package
                       for Point to Point Communication parameter assignment interface.
                       The figure below shows examples of different data formats for a 10-bit character frame.
GDWDELWVVWDUWELWGDWDELWVVWRSELWV
                       6LJQDOVWDWH
                                                                                                                                
                       6LJQDOVWDWH
                                                                                                                           VWRSELWV
                                                      VWDUWELW
                                                                            GDWDELWV
                       GDWDELWVVWDUWELWGDWDELWVSDULW\ELWVWRSELW
                       6LJQDOVWDWH
                                                                                                                                
                       6LJQDOVWDWH
                                                                                                                                         VWRSELW
                                                       VWDUWELW
GDWDELWV
SDULW\ELW
GDWDELWVVWDUWELWGDWDELWVVWRSELW
                       6LJQDOVWDWH
                                                                                                                                 
                       6LJQDOVWDWH
                                                                                                                                          VWRSELW
                                                      VWDUWELW
GDWDELWV
Signal
                                                                ZVZ
                       1
Time t
See also
                   Parameter Assignment Data of the Protocols (Page 2-51)
Introduction
                       When data are transmitted, all communication partners must adhere to a fixed set of rules for
                       handling and implementing data traffic. The ISO has defined a 7-layer model, which is
                       recognized as the basis for a worldwide standardization of transmission protocols for
                       computer-to-computer communication.
Procedure
                       This is the specific process according to which the data is transmitted.
Introduction
                       Transmission integrity plays an important role in the transmission of data and in selection of
                       the transmission procedure. Generally speaking, the more layers of the reference model are
                       applied, the greater the transmission integrity.
7UDQVSRUWOD\HU
                       /D\HU          (YHU\FRUUHFWO\UHFHLYHGFRPPDQG
                                        PHVVDJHIUDPHLVDQVZHUHGZLWKD
                                                                                                                             5.
                                            UHVSRQVHPHVVDJHIUDPH
                                              1RWSUHVHQWZLWKDSXUH
                       /D\HU               SRLQWWRSRLQWFRQQHFWLRQ
                                                 'DWDOLQNOD\HU
                                                                                                                     5
                       /D\HU           7KHGDWDE\WHVDUHWUDQVPLWWHGZLWK
                                        5 6WDUWDQGVWRSELWVDUHDGGHG
                                      LQWKHHYHQWRIDQHUURUWKHWUDQVPLVVLRQ
                                                 PD\EHUHSHDWHG
                                                   3K\VLFDOOD\HU
                                                                                                   3ULQWHUGULYHU
                                                                                    $6&,,GULYHU
                       /D\HU           7KHSK\VLFDOWUDQVPLVVLRQRWWKH
                                              GDWDE\WHVLVGHILQHG
Figure 2-3 Position of the supplied protocols of the CP 441 in the reference model
Introduction
                  The 3964(R) procedure controls point-to-point data exchange between the communication
                  processor and a communication partner. As well as the physical layer (layer 1), the 3964(R)
                  procedure also incorporates the data-link layer (layer 2).
Startup
                  The figure below illustrates the start-up of the 3964(R) procedure.
                    3RZHUXSDIWHUUHVWDUWRIWKH
                     &38RUYROWDJHUHFRYHU\
(YDOXDWHSDUDPHWHUDVVLJQPHQW
,QLWLDOL]HLQWHUIDFH
6HQG1$.
Introduction
                       The RK 512 computer connection provides a very high degree of data integrity. During data
                       transmission, the 3964(R) procedure adds control characters to the information data
                       (data-connection layer). These control characters allow the communication partner to check
                       whether the data has arrived complete and without errors.
                           Note
                           If DLE is transmitted as an information string, it is sent twice so that it can be
                           distinguished from the control code DLE during connection setup and release on the send
                           line (DLE duplication). The receiver then reverses the DLE duplication.
Priority
                       With the 3964(R) procedure, one communication partner must be assigned a higher priority
                       and the other partner a lower priority. If both partners begin connection setup at the same
                       time, the partner with the lower priority will defer its send request.
Block Checksum
                  With the 3964R transmission protocol, data integrity is increased by the additional sending of
                  a block check character (BCC).
                  0HVVDJHIUDPH
                    67;'DWD'/((7;%&&
+ൺ+ൺ+ൺ+ൺ+ൺ+ൺ+
                  The block checksum is the even longitudinal parity (EXOR operation on all data bytes) of a
                  sent or received block. Its calculation begins with the first byte of user data (first byte of the
                  message frame) after the connection setup, and ends after the DLE ETX code on connection
                  release.
                  Note
                  If DLE duplication occurs, the DLE code is accounted for twice in the BCC calculation.
&3 &RPPXQLFDWLRQSDUWQHU
                       VWGDWDE\WH                               VWE\WH
                       QGGDWDE\WH                               QGE\WH
                                                                                           8VHU
                                                                                          1XW]
                       ವ                                        ವ                    GDWD
                                                                                          GDWHQ
                       ವ                                        ವ
                       QWKGDWDE\WH                               QWKE\WH
Figure 2-6 Data traffic when sending with the 3964(R) procedure
Sending Data
                       If a connection is successfully established, the user data contained in the output buffer of the
                       communication processor is sent to the communication partner with the chosen transmission
                       parameters. The partner monitors the times between incoming characters. The interval
                       between two characters must not exceed the character delay time.
                       If the communication partner sends the NAK control code during an active send operation,
                       the procedure aborts its transmission of the block and tries again as described above,
                       beginning with connection setup. If a different code is sent, the procedure first waits for the
                       character delay time to expire and then sends the NAK code to change the mode of the
                       communication partner to idle. Then the procedure starts to send the data again with the
                       connection setup STX.
                                                                              ,QWHQWLRQWR
                                    *                                        VHQG                                   *
                                                                                                        *
6HQG1$.
                                                                     :                         6HQG1$.
                                                                                                                         [!
                                                                                                           [ 
                                                                                                        [!
                                                                     [ 
                                                                                               [ 
                                                                  6HQG67;
                                                                                                                 :
6WDUW7$'7 [
                                                                              7!7$'7
                                                                              FKDUDFWHUH[FHSW
                                                                              
                                        +LJK                    :DLWIRU'/( '/(67;RU
                                        SULRULW\           67;   DFNQRZOHGJ LQYDOLG
                                      /RZ
                                       SULRULW\
                                                                              '/(         5HFHLSWQRW
                                                                                          SHUPLWWHG
                                                                  6HQGEORFN
                                                                     SRVV
                                                                 GXSOLFDWH'/(               6HQG1$.
                                                                  6HQG'/(
                                                                   (7;
                                                                                              5
6HQG%&&
                                                                  6WDUW7$'7
                                                                                     7!7$'7
                                                                                     FKDUDFWHUH[FHSW
                                                                                     
                                                                                     '/(RULQYDOLG
                                                                 :DLWIRU'/(        FKDUDFWHU
                                                                 DFNQRZOHGJ
'/(
6HQGLOHWHG
                                                                       *
                       %&&RQO\ZLWK5
                       [ VHWXSDWWHPSWFRXQW
                       7$'7 PV 57$'7 V
                       : WUDQVPLVVLRQDWWHPSWFRXQW
                       ,PPHGLDWHUHWXUQWRLQLWLDOVWDWHDWOLQHEUHDN %5($.
                       Figure 2-7       Flow diagram of sending with the 3964(R) procedure
                                    &KDUDFWHUVH[FHSW
                                    67;1$.                     ,QWHQWLRQWRVHQG
                                                         *                                   
                                                              5HFHLYH
                                                              67;
                                                                                        5HSHWLWLRQ
                                                                                       H[SHFWHG
                                  1RWH
                                  1$.
                                                                              :
                                                                                                     ,QLWLDOL]DWLRQ
                                                                                                     FRQIOLFWORZ
                                                                               6WDUW
                                                                                                     SULRULW\
                                                                              71$.7,0
:DLW
                                                                                     7!71$.7,0
                                                                %XIIHUIUHH          %XIIHUQRWIUHH
6HQG'/( 6HQG1$.
                                                                                                *
                  71$.7,0 PV
                  : WUDQVPLVVLRQDWWHPSWFRXQWHU
                  ,PPHGLDWHUHWXUQWRLQLWLDOVWDWHDWOLQHEUHDN %5($.
Figure 2-8 Flow Diagram for Receiving with the 3964(R) Procedure
&RPPXQLFDWLRQSDUWQHU &3
                                                       VWE\WH               VWGDWDE\WH
                                                       QGE\WH               QGGDWDE\WH
                              8VHU
                              GDWD                     ವ                   ವ
                                                       ವ                   ವ
                                                       QWKE\WH               QWKGDWDE\WH
Figure 2-9 Data traffic when receiving with the 3964(R) procedure
                       Note
                       As soon as it is ready, the 3964(R) procedure sends a single NAK to the communication
                       partner to set the latter to idle.
Receiving Data
                  After a successful connection setup, the receive characters that are arrive are stored in the
                  receive buffer. If two consecutive DLE codes are received, only one of these is stored in the
                  receive buffer.
                  After each receive character, the procedure waits out the character delay time for the next
                  character. If this period expires before another character is received, an NAK is sent to the
                  communication partner. The CP 441 reports the error in the SYSTAT error-signaling area.
                  The 3964(R) procedure does not initiate a repetition.
                  If transmission errors occur during receiving (lost character, frame error, parity error, etc.),
                  the procedure continues to receive until the connection is shut down, then an NAK is sent to
                  the communication partner. A repetition is then expected. If the undamaged block still cannot
                  be received after the number of transmission attempts defined in the static parameter set, or
                  if the communication partner does not start the repetition within a block wait time of 4
                  seconds, the procedure aborts the receive operation. The CP 441 reports the first erroneous
                  transmission and the final abortion in the SYSTAT error-signaling area.
                                                            6WDUW7FKDUGHOD\WLPH
                                                                                                                 1RWH
                                              &RUUHFW
                                                                                                                 1$.
                                              FKDUDFWHU
                                              H[FHSWIRU          :DLWWR
                                              '/(                 UHFHLYH            ,QYDOLGFKDUDFWHU
                                                                
                                                                FKDUDFWHUV           7!7FKDUGHOD\WLPH
'/(
                                                            6WDUW7FKDUGHOD\WLPH
                                             'XDO'/(
                                                                  :DLWIRU     7!7FKDUGHOD\WLPH
                                       1RWH1$.
                                                                   (7;
                                            &KDUDFWHUV
                                                                          (7;
                                            H[FHSW
                                            (7;'/(                          5
                                                                
                                                                              6WDUW7FKDUGPH
                                                                                            7!7FKDUGHOD\WLPH
                                                                                  :DLWIRU %&&LQFRUUHFW
                                                                                   %&&
%&&
1$.QRWHG
                                                                6HQG'/(                                     6HQG1$.
                          ,QLWLDOL]DWLRQFRQIOLFW
                          QRWHGORZSULRULW\                          5HFHLSWFRPSOHWHG                     :!
                                                                                                                         : 
                                                                                                    1RWHUHSHWLWLRQH[SHFWHG
                                                                                                           VWDUW7%ORFN
                                                                     *
                                                                                                               :DLWIRU       7!7%ORFN
                                                                                                                67;
                                                                                                                         67;       *
                       7LPHV7FKDUGHOD\WLPH PV7%ORFN V
                       : WUDQVPLVVLRQDWWHPSWFRXQW
                       %&&ZLWK5RQO\                                                                           
                       ,PPHGLDWHUHWXUQWRLQLWLDOVWDWHDWOLQHEUHDN %5($.
Figure 2-10 Flow Diagram for Receiving with the 3964(R) Procedure
&RPPXQLFDWLRQSDUWQHU &3
5HFHLYLQJGDWD
                  VWGDWDE\WH                           VWE\WH
                                                                                      8VHU
                     ವ                                    ವ                        GDWD
                   QWKGDWDE\WH                          QWKE\WH
                     ವ                                    ವ
                     ವ                                    ವ
QHZVHWXSDWWHPSW
                  When the string DLE ETX BCC is received, the CP 441 compares the BCC of the
                  communication partner with its own internally calculated value. If the BCC is correct and no
                  other receive errors occur, the CP 441 responds with DLE.
                  Otherwise, the CP 441 responds with an NAK and waits the block wait time (T) of 4 seconds
                  for a new attempt. If after the defined number of transmission attempts the block cannot be
                  received, or if no further attempt is made within the block wait time, the CP 441 aborts the
                  receive operation.
Initialization conflict
                       The figure below illustrates the transmission sequence during an initialization conflict.
                       &3                                                     &RPPXQLFDWLRQSDUWQHU
                       ORZSULRULW\                                                     KLJKHUSULRULW\
                       VWGDWDE\WH                                VWE\WH
                       QGGDWDE\WH                                QGE\WH
                                                                                                8VHU
                            Ⴠ                                    Ⴠ
                                                                                                GDWD
                            Ⴠ                                    Ⴠ
                       QWKGDWDE\WH                                QWKE\WH
QGVHWXSDWWHPSW
                       If a device responds to the communication partner's send request (code STX) within the
                       acknowledgment delay time by sending the code STX instead of the acknowledgment DLE
                       or NAK, an initialization conflict occurs. Both devices want to execute a send request. The
                       device with the lower priority withdraws its send request and responds with the code DLE.
                       The device with the higher priority sends its data in the manner described above. Once the
                       connection has been released, the lower-priority device can execute its send request.
                       To be able to resolve initialization conflicts you must set different priorities for the
                       communication partners.
Procedure errors
                   The procedure recognizes both errors which are caused by the communication partner and
                   errors caused by faults on the line.
                   In both cases, the procedure makes repeated attempts to send/receive the data block
                   correctly. If this is not possible within the maximum number of transmission attempts set (or
                   if a new error status occurs), the procedure aborts the send or receive process. It reports the
                   error number of the first recognized error and returns to idle mode. The CP 441 reports the
                   error in the SYSTAT error-signaling area.
                   If the CP 441 frequently reports the error number in the SYSTAT for send and receive
                   repetitions, this implies occasional disturbances in the data traffic. The large number of
                   transmission attempts compensates for this, however. In this case you are advised to check
                   the transmission link for possible sources of interference, because frequent repetitions
                   reduce the user-data rate and integrity of the transmission. The disturbance could also be
                   caused, however, by a malfunction on the part of the communication partner.
                   If the receive connection is interrupted, the system program reports a BREAK status (in
                   SYSTAT). No repeat is started. The BREAK status in the SYSTAT is automatically reset as
                   soon as the connection is restored on the line.
                   For every recognized transmission error (lost character, frame or parity error), a standard
                   number is reported, regardless of whether the error was detected during sending or receiving
                   of a data block. The error is only reported, however, following unsuccessful repetitions.
                   If the damaged character is received when the procedure is idle, the system program reports
                   the error (error number in the SYSTAT) to inform you of major interference in the data
                   transmission circuit.
See also
                   Diagnostics via the Error Signaling Area SYSTAT (Page 8-8)
Introduction
                       The RK 512 computer connection controls data transmission via a point-to-point connection
                       between the CP 441 and a communication partner.
                       Unlike the 3964(R) procedure, the RK 512 includes not only the physical layer (layer 1), and
                       the data-link layer (layer 2), but also the transport layer (layer 4) of the ISO reference model.
                       The RK 512 computer connection also offers higher data integrity and better addressing.
                  bytes      Meaning
                  1          Message frame ID in command message frames (00H),
                             in continuation command message frames (FFH)
                  2          Message frame ID (00H)
                  3          'A' (41H) for SEND/PUT request with destination DB or
                             'O' (4FH) for SEND request with destination DX or
                             'E' (45H) for GET request
                  4          Data to be transmitted consists of:
                             'D' (44H)=data block
                             'E' (45H)=input bytes'A' (41H) =output bytes
                             'M' (4DH)=flag bytes
                             'C' (5AH)=counter cells'T' (54H)=time cells
                             (The entry for send requests with BSEND and PUT is always "D", irrespective of the
                             areas from which the data come.)
                  5 and 6    Data destination of SEND/PUT request or data source of GET request e.g. byte 5 = DB
                             no., byte 6 = DW no.
                             (RK 512 addressing describes the data source and destination with word limits.
                             Conversion to byte addresses in SIMATIC S7 is automatic.)
                  7 and 8    Length of high byte Length of data to be transmitted according to type in bytes or
                             Length of low byte words
                  9          Byte number of the interprocessor communication flag (You can specify interprocessor
                             communication flags for send requests with "BSEND". In the block of the partner you
                             cannot specify interprocessor communication flags, because the CP itself does not
                             support them.)
                             FFH is displayed if you have not specified an interprocessor communication flag.
                  10         Bit 0 to 3: Bit number of the interprocessor communication flag (You can specify
                             interprocessor communication flags for send requests with "BSEND". You cannot
                             specify interprocessor communication flags in the block of the partner because the CP
                             itself does not support them.).
                             The protocol enters FH here if you have not specified an interprocessor communication
                             flag.
                             Bit 4 to 7: CPU number (number from 1 to 4) (The CPU number 0 is supported as of
                             STEP 7, Version 4.0.);
                             If you have not specified a CPU number but you have specified an interprocessor
                             communication flag, OH is displayed here; if you specified neither a CPU number nor an
                             interprocessor communication flag, FH is shown here.
                 The letters in bytes 3 and 4 are ASCII characters.
                 The header of the continuation command message frame consists of bytes 1 to 4 only.
                        bytes    Meaning
                        1        Message frame ID in response message frames (00H),
                                 in continuation response message frames (FFH)
                        2        Message frame ID (00H)
                        3        Displays 00H
                        4        Error number of the communication partner in the response message frame:
                                 • 00H if transmission was error-free
                                 • > 00H error number
                                 The error number in the response message frame automatically causes an error number to
                                 be entered in the SYSTAT.
See also
                       Communication via System Function Blocks (Page 6-1)
                       Diagnostics via the Error Signaling Area SYSTAT (Page 8-8)
                       Error Numbers in the Response Message Frame (Page 8-21)
                 6(1'387PHVVDJHIUDPH
                 6WDUWFRGH +                       67;                          &RQQHFWLRQ
                 3RVDFNQRZOHGJPHQW +              '/(                            VHWXS
                  +                                  VWE\WH
                  +                                  QGE\WH
                 6(1'387UHTXHVW +                 UGE\WH
                 'DWDEORFN +                       WKE\WH                      0HVVDJH
                                                                                       IUDPH
                 'DWDGHVWLQDWLRQ'% $+            WKE\WH
                                                                                      KHDGHU
                 ': +                             WKE\WH
                 /HQJWK +                           WKE\WH
                 ': +                            WKE\WH
                 1R.0 ))+                            WKE\WH
                 &38RQO\ )+                       WKE\WH
                 VWGDWDE\WH                         WKE\WH
                 QGGDWDE\WH                         WKE\WH
                                                                                     8VHUGDWD
                      ವ                             ವ
                      ವ                             ವ
                 QWKGDWDE\WH                         QWKE\WH
                 5HVSRQVHPHVVDJHIUDPH
                 6WDUWFRGH +                       67;
                                                                                    &RQQHFWLRQ
                 3RVDFNQRZOHGJPHQW +              '/(                            VHWXS
                 +                                   VWE\WH
                                                                                     5HVSRQVH
                 +                                   QGE\WH                      PHVVDJH
                 +                                   UGE\WH                        IUDPH
                 (UURUFRGH +                       WKE\WH                       KHDGHU
Figure 2-13 Data traffic when sending with a response message frame
Sending Data
                       The SEND/PUT request is executed in the following sequence:
                       • Active partner
                           Sends a SEND/PUT message frame. This contains a message frame header and data.
                       • Passive partner
                           Receives the message frame, checks the header and the data, and acknowledges it with
                           a response message frame after passing the data on to the CPU.
                       • Active partner
                           Receives the response message frame.
                           Sends user data.
                           If the volume of user data exceeds 128 bytes, the active partner sends a continuation
                           SEND/PUT message frame.
                       • Passive partner
                           Receives the continuation SEND/PUT message frame, checks the header and the data,
                           and acknowledges it with a continuation response message frame after passing the data
                           on to the CPU.
                           Note
                           If the CPU receives an errored SEND/PUT message frame or if an error has occurred in
                           the message frame header, the communication partner enters an error number in the 4th
                           byte of the response message frame. This does not apply when protocol errors occur.
&3 &RPPXQLFDWLRQSDUWQHU
                  &RQWLQXDWLRQ6(1'387PHVVDJHIUDPH
                  6WDUWFRGH +                              67;                       &RQQHFWLRQ
                                                                                           VHWXS
                  3RVDFNQRZOHGJ                             '/(
                  PHQW +
                 &RQWLQXDWLRQPHVVDJHIUDPH ))+                VWE\WH
                  +                                          QGE\WH                    0HVVDJH
                 6(1'387UHTXHVW +                                                  IUDPHKHDGHU
                                                               UGE\WH
                 'DWDEORFN +                               WKE\WH
                  WKGDWDE\WH                              WKE\WH
                  WKGDWDE\WH                              WKE\WH
                       ವ                                    ವ                      8VHUGDWD
                       ವ                                    ವ
                  QWKGDWDE\WH                                QWKE\WH
&RQWLQXDWLRQUHVSRQVHPHVVDJHIUDPH
                  &RQWLQXDWLRQUHVSRQVH
                  PHVVDJHIUDPH ))+                           VWE\WH
                                                                                          5HVSRQVH
                  +                                          QGE\WH
                                                                                           PHVVDJH
                  +                                          UGE\WH
                                                                                        IUDPHKHDGHU
                  (UURUQXPEHU +                            WKE\WH
                 Figure 2-14      Sequence of a continuation SEND message frame with a continuation response
                                  message frame
&3 &RPPXQLFDWLRQSDUWQHU
*(7PHVVDJHIUDPH
                        +                                   %\WH
                        +                                   %\WH
                       *(7UHTXHVW +                       %\WH
                       'DWDEORFN +                        %\WH
                       'DWDVRXUFH'% +                 %\WH
                                                                                        0HVVDJH
                       ': +                             %\WH                 IUDPHKHDGHU
                       /HQJWK +                            %\WH
                                                              %\WH
                       ': +
                       1R.0 ))+                             %\WH
                       &38RQO\ )+                        %\WH
5HVSRQVHPHVVDJHIUDPHZLWKGDWD
                        +                                   %\WH
                                                              %\WH                  5HVSRQVH
                        +                                                            PHVVDJH
                        +                                   %\WH                IUDPHKHDGHU
                       (UURUFRGH +                        %\WH
                       VWGDWDE\WH                          %\WH
                       QGGDWDE\WH                          %\WH                    8VHU
                                                                                GDWD
                                                          
                       QWKGDWDE\WH                          %\WHQ
Figure 2-15 Data traffic when fetching with a response message frame
Fetching Data
                 The GET request is executed in the following sequence:
                 • Active partner
                    Sends a GET message frame. This contains a message frame header.
                 • Passive partner
                    Receives the message frame, checks the header, fetches the data from the CPU, and
                    acknowledges this with a response message frame containing the data. This contains the
                    data.
                 • Active partner
                    Receives the response message frame.
                    If the volume of user data exceeds 128 bytes, the active partner sends a continuation
                    GET message frame. This contains byte 1 to 4 of the message frame header.
                 • Passive partner
                    Receives the continuation GET message frame, checks the header, fetches the data from
                    the CPU, and acknowledges this with a continuation response message frame containing
                    further data.
                 If there is an error number (not equal to 0) in the 4th byte, the response message frame does
                 not contain any data.
                 If more than 128 bytes are requested, the extra bytes are automatically fetched in one or
                 more continuation message frames.
                 Note
                 If the CPU receives an errored GET message frame or if an error has occurred in the
                 message frame header, the communication partner enters an error number in the 4th byte of
                 the response message frame. This does not apply when protocol errors occur.
&3 &RPPXQLFDWLRQSDUWQHU
                       &RQWLQXDWLRQ*(7PHVVDJHIUDPH
                       6WDUWFRGH +                              67;                   &RQQHFWLRQ
                       3RVDFNQRZOHGJPHQW +                     '/(                     VHWXS
                       &RQWLQXDWLRQPHVVDJH
                       IUDPH ))+                                   VWE\WH
                        +                                         QGE\WH               0HVVDJH
                                                                    UGE\WH                 IUDPH
                       *(7UHTXHVW +
                                                                    WKE\WH                KHDGHU
                       'DWDEORFN +
                       &RQWLQXDWLRQUHVSRQVHPHVVDJHIUDPH
                       6WDUWFRGH +                              67;
                                                                                           &RQQHFWLRQ
                       3RVDFNQRZOHGJPHQW +                     '/(                      VHWXS
                       &RQWLQXDWLRQUHVSRQVH
                       PHVVDJHIUDPH ))+                           VWE\WH
                                                                                           5HVSRQVH
                       +                                          QGE\WH
                                                                                           PHVVDJH
                       +                                          UGE\WH
                                                                                             IUDPH
                       (UURUQXPEHU +                            WKE\WH                KHDGHU
                       WKGDWDE\WH                             WKE\WH
                       WKGDWDE\WH                               WKE\WH                8VHU
                                                                                 GDWD
                                                              
                       QWKGDWDE\WH                                 QWKE\WH
                       Figure 2-16     Sequence of a continuation GET message frame with a continuation response message
                                       frame
Quasi-Full-Duplex Operation
                 Quasi full-duplex operation means: the partners can send command and response message
                 frames at any time as long as the other partner is not sending. The maximum nesting depth
                 for command and response message frames is "1". The next command message frame,
                 therefore, cannot be processed until the previous one has been answered with a response
                 message frame.
                 It is possible under certain circumstances - if both partners want to send - to transmit a
                 SEND/PUT message frame from the partner before the response message frame. For
                 example, if a SEND/PUT message frame from the partner was entered in the output buffer of
                 the CP 441 before the response message frame.
                 In the following figure the continuation response message frame to the first SEND/PUT
                 message frame is not sent until after the partner's SEND/PUT message frame.
&3 &RPPXQLFDWLRQSDUWQHU
                                            6(1'PHVVDJHIUDPH
                                           5HVSRQVHPHVVDJHIUDPH
                                     VWFRQWLQXDWLRQ6(1'PHVVDJHIUDPH
                                         3DUWQHUಬV6(1'PHVVDJHIUDPH
                                               VWFRQWLQXDWLRQ
                                               UHVSRQVHPHVVDJHIUDPH
                                    QGFRQWLQXDWLRQ6(1'PHVVDJHIUDPH
                                           5HVSRQVHPHVVDJHIUDPH
                                              QGFRQWLQXDWLRQ
                                              UHVSRQVHPHVVDJHIUDPH
                                                              &38
                                                            UHTXHVW
                                                             LQLWLDO
                                                            SRVLWLRQ
                                                                   &38UHTXHVW
                                                      &38FRPPDQG
                                                         IUDPH
6WDUW75(6
                                                                            7!75(6
                                                            :DLWIRU       (UURUDERUWLRQ
                                                           UHVSRQVH
                                                             IUDPH
                                                                 5HVSRQVHIUDPH
                                                                 UHFHLYHG
                                                                        $OOGDWDWUDQVIHUUHG
                                                                                &38UHTXHVW
                                                      0RUH                     FRPSOHWHG
                                                 VXEEORFNV
                                                          6HQG
                                                       FRQWLQXDWLRQ
                                                     FRPPDQGIUDPH
6WDUW75(6
                                                                      7!75(6RUILUVW
                                                                      UHVSRQVHIUDPH
                                                      :DLWIRUFRQW UHFHLYHG
                                                      UHVSIUDPH               (UURUDERUWLRQ
                                         &RQWUHVSRQVH
                                         IUDPHUHFHLYHG
                       5HVSRQVHIUDPHPRQLWRULQJWLPH
                       GHSHQGHQWRQWUDQVPLVVLRQUDWH
                       75(6 V VV
Figure 2-18 Flow diagram of data transmission with the RK 512 when CPU requests are made
                                             3DUWQHU
                                          UHTXHVWLQLWLDO
                                             SRVLWLRQ
                                                  3DUWQHUFRPPDQG
                                                  IUDPHUHFHLYHG
                                         6HQGGDWDWRRU
                                          JHWGDWDIURP
                                             WKH$6
(UURU
                                      6HQGUHVSRQVHIUDPH           6HQGUHVSRQVHIUDPH
                                         ZLWKRXWHUURU               ZLWKHUURUPHVVDJH
                                           PHVVDJH
                                                                         3DUWQHUUHTXHVW
                                                                         FRPSOHWHG
                                                  $OOGDWDWUDQVIHUUHG
                                          0RUH
                                     VXEEORFNV
                                            6WDUW75(6
                                                             7!75(6RUILUVW
                                                             FRPPDQGIUDPH
                                            :DLWIRU        UHFHLYHG
                                          FRQWLQXDWLRQ
                                             IUDPH                                (UURUDERUWLRQ
                            &RQWUHVSRQVH
                            IUDPHUHFHLYHG
                 5HVSRQVHIUDPHPRQLWRULQJWLPHGHSHQGHQWRQWUDQVPLVVLRQUDWH
                 75(6 V VV 
                 $6 DXWRPDWLRQV\VWHP
Figure 2-19 Flow diagram of data transmission with the RK 512 when partner requests are made
Introduction
                       The ASCII driver controls data transmission via a point-to-point connection between the
                       communication processor and a communication partner. This driver contains the physical
                       layer (layer 1).
                       The structure of the message frames is left open through the S7 user passing on the
                       complete send message frame to the communication processor. For the receive direction,
                       the end criterion of a message must be configured. The structure of the send message
                       frames may differ from that of the receive message frames.
                       The ASCII driver allows data of any structure (all printable ASCII characters as well as all
                       other characters from 00 through FFH (with 8 data bit character frames) or from 00 through
                       7FH (with 7 data bit character frames) to be sent and received.
Sending Data
                   When you send data, you specify the number of user data bytes to be transferred in the
                   "LEN" parameter of the call for the BSEND system function block.
                   When you work with the end criterion "Character Delay Time" when receiving data, the
                   ASCII driver pauses between two message frames when sending. You can call the BSEND
                   SFB at any time, but the ASCII driver does not begin with output until a time greater than the
                   configured character delay time has passed since the last message frame was sent.
                   Note
                   When XON/XOFF flow control is configured, the user data must not contain the configured
                   XON or XOFF characters. The default settings are DC1 = 11H for XON and DC3 = 13H for
                   XOFF.
                   If you work with the "End-of-Text Character" criterion, you have a choice of three options:
                   • Send up to and including the end-of-text character
                      The end-of-text character must be included in the data to be sent. Data is sent only up to
                      and including the end-of-text character, even if the data length specified in the FB is
                      longer.
                   • Send up to length configured at the FB
                      Data is sent up to the length configured at the FB. The last character must be the end-of-
                      text character.
                   • Send up to the length configured at the FB and automatically append the end-of-text
                     character or characters
                      Data is sent up to the length configured at the FB. The end-of-text character is
                      automatically appended, in other words the end-of-text characters must not be included in
                      the data to be sent. 1 or 2 characters more than the number specified at the FB are sent
                      to the partner, depending on the number of end-of-text characters.
                   When you work with the end criterion "Fixed Message Frame Length", the number of data
                   bytes transferred in the send direction is as specified for the "LEN" parameter of the BSEND.
                   The number of data bytes transferred in the receive direction, i.e. in the receive DB, is as
                   specified at the receiver using the "fixed message frame length" parameter in the parameter
                   assignment interface interface. The two parameter settings must be identical, in order to
                   ensure correct data traffic. A pause equal to the length of the character delay time (CDT) is
                   inserted between two message frames when sending, to allow the partner to synchronize
                   (recognize start of message frame).
                   If some other method of synchronization is used, the pause in sending can be deactivated by
                   means of the parameter assignment interface.
Send Operation
                       The figure below illustrates a send operation.
                                                 :DLWLQJIRU
                                                VHQGUHTXHVW
                       5HTXHVWSURFHVVHG
6HQGUHTXHVWDUULYHG
                                                                          
                                                                          7KHDPRXQWRIGDWDWR
                                                 6HQGLQJ
                                                                          EHVHQWLVWDNHQIURP
                                                 XVHUGDWD
                                                                          WKH/(1SDUDPHWHURI
                                                                          WKHVHQGUHTXHVW
Code Transparency
                   The code transparency of the procedure depends on the choice of configured end criterion
                   and flow control:
                   • With one or two end-of-text characters
                      – not code-transparent
                   • When end criterion is character delay time or fixed message frame length
                      – code-transparent
                   • Code-transparent operation is not possible when the flow control XON/XOFF is used.
                   Code-transparent means that any character combinations can occur in the user data without
                   the end criterion being recognized.
                                                                                                                     :DLWLQJIRU
                                                                                                                     FKDUDFWHU
                       (QGFULWHULRQIRUPHVVDJHIUDPHLGHQWLILHGHUURUHQWU\IROORZV
                                                                                                                             &KDUDFWHU
                                                                                                                             DUULYHG
                                                                                         0HVDJHIUDPEXIIHUHG
                                                                                                                 &KDUDFWHUUHFHLYHG                (UURUZKHQUHFHLYLQJ
                                                                                                                 ZLWKFKDUDFWHUGHOD\               QRWDFKDUDFWHUGHOD\
                                                                                                                   WLPHPRQLWRULQJ                  WLPHHUURU
                                                                                                                                                      :DLWLQJIRUFKDUDFWHU
                                                                                                                                                      GHOD\WLPH5HFHLYHG
                                                                                                                             0HVVDJHIUDPH           FKDUDFWHUVGLVFDUGHG
                                                                                                                             FRPSOHWH FKDUDFWHU
                                                                                                                             GHOD\WLPHH[SLUHG
                                                                                                                   0HVVDJHIUDPH
                                                                                                                  HQWHUHGLQUHFHLYH
                                                                                                                        EXIIHU
                                                                                                                                                     (QWHUHUURULQ6<67$7
                                                                                                                                                      HUURUVLJQDOLQJDUHD
Figure 2-21 Sequence of receive operation with "Expiration of Character Delay Time" end criterion
The figure below illustrates a receive operation with the end criterion "end-of-text character".
                                                                                                                       :DLWLQJIRU
                                                                                                                       FKDUDFWHU
                       (QGFULWHULRQIRUPHVVDJHIUDPHLGHQWLILHGHUURUHQWU\IROORZV
                                                                                                                                &KDUDFWHU
                                                                                                                                DUULYHG
                                                                                         0HVVDJHIUDPEXIIHUHG
                                                                                                                    &KDUDFWHUUHFHLYHG
                                                                                                                   ZLWKHQGFRQWURODQG
                                                                                                                   FKDUDFWHUGHOD\WLPH
                                                                                                                                                       (UURUZKHQUHFHLYLQJ
                                                                                                                   0HVVDJH
                                                                                                                      IUDPH
                                                                                                                   FRPSOHWH                                      :DLWLQJIRU
                                                                                                                                                               YDOLGHQGFRGH
                                                                                                                     0HVVDJHIUDPH
                                                                                                                 HQWHUHGLQUHFHLYHEXIIHU
                                                                                                                                             &KDUDFWHU
                                                                                                                                             GHOD\WLPH
                                                                                                                                              H[SLUHG
                                                                                                                                                                (QWHUHUURULQ
                                                                                                                                                                   6<67$7
                                                                                                                                                             HUURUVLJQDOLQJDUHD
Figure 2-22 Sequence of receive operation with "End-of-Text Character" end criterion
                       The figure below illustrates a receive operation with the end criterion "fixed message frame
                       length".
                                                                                                                        :DLWLQJIRU
                                                                                                                        FKDUDFWHU
                       (QGFULWHULRQIRUPHVVDJHIUDPHLGHQWLILHGHUURUHQWU\IROORZV
                                                                                                                                &KDUDFWHU
                                                                                                                                DUULYHG
                                                                                         0HVVDJHIUDPHEXIIHUHG
                                                                                                                    &KDUDFWHUUHFHLYHG
                                                                                                                    ZLWKOHQJWKFRQWURO
                                                                                                                      DQGFKDUDFWHU
                                                                                                                        GHOD\WLPH
                                                                                                                    0HVVDJH                         (UURUZKHQUHFHLYLQJ
                                                                                                                       IUDPH
                                                                                                                    FRPSOHWH                                   :DLWLQJIRU
                                                                                                                                                          SDUDPHWHUL]HGQXPEHU
                                                                                                                                                              RIFKDUDFWHUV
                                                                                                                  0HVVDJHIUDPHHQWHUHG
                                                                                                                     LQUHFHLYHEXIIHU
                                                                                                                                            &KDUDFWHU
                                                                                                                                            GHOD\WLPH
                                                                                                                                             H[SLUHG
                                                                                                                                                          (QWHUHUURULQ6<67$7
                                                                                                                                                           HUURUVLJQDOLQJDUHD
Figure 2-23 Sequence of receive operation with "Fixed Message Frame Length" end criterion
                      Note
                      If the constant reading of the received data from the user program is interrupted for a
                      while, you may find that when the received data is requested again, the CPU first
                      receives old message frames from the CP 441 before it receives the most recent one.
                      The old message frames were either on the way between the CP 441 and CPU or had
                      already been received by the SFB.
Introduction
                       When you run the ASCII driver in RS 485 mode (half-duplex, two-wire mode), you must take
                       steps in the user program to ensure that only one user sends data at any one time. If two
                       users send data simultaneously, the message frame is corrupted.
                           Note
                           When automatic use of the RS 232C secondary signals is configured, neither RTS/CTS
                           data flow control nor RTS and DTR control by means of the V24_SET FB are possible.
                           |When RTS/CTS data flow control is configured, RTS control by means of the V24_SET
                           FB is not possible. On the other hand, it is always possible to read all RS 232C
                           secondary signals by means of the V24_STAT FB.
                       The sections that follow describe how the control and evaluation of the RS 232C secondary
                       signals is handled.
                      Note
                      Automatic use of the RS 232C secondary signals is only possible in half-duplex mode.
                      When automatic use of the RS 232C secondary signals is configured, neither RTS/CTS
                      data flow control nor RTS and DTR control by means of the V24_SET FB are possible.
                      The "time to RTS OFF" must be set in the parameter assignment interface so that the
                      communication partner can receive the last characters of the message frame in their
                      entirety before RTS, and thus the send request, is taken away. The "data output waiting
                      time" must be set so that the communication partner can be ready to receive before the
                      time elapses.
Time Diagram
                       The figure illustrates the chronological sequence of a send request.
                                 21
                       576
                                2))
                                 21
                       &76
                                2))
                                   
                       7;'
                                   
                                                                             7UDQVPLVVLRQ                    W
                                       6HQGUHTXHVW                        WHUPLQDWHG
                                          576 21                           
                                                   3DUWQHU              7LPHWR5762))
                                                   &76 21                       HODSVHG
                                            'DWDRXWSXWZDLWWLPH                            3DUWQHU
                                            H[SLUHGඎ6HQG                                 &76 2))
                                                          'DWDRXWSXW                      7LPHWR576
                                                          ZDLWLQJWLPH                      2))
Figure 2-24 Time diagram of automatic use of the RS 232C secondary signals
                   • If the CP 441 receives the XOFF character, or the CTS control signal is set to OFF, the
                     CP 441 interrupts the transmission. If neither an XON character is received nor CTS is
                     set to ON before a configured time has elapsed, the transmission is aborted and an
                     appropriate error message (0708H) is entered in the SYSTAT error-signaling area of the
                     CP 441.
                      Note
                      When RTS/CTS data flow control is configured, you must fully wire the interface signals in
                      the plug connection (see Appendix B). |When RTS/CTS data flow control is configured,
                      RTS control by means of the V24_SET FB is not possible.
See also
                   Interface Submodule X27 (RS 422/485) (Page B-15)
                   Using the System Function Blocks with the ASCII Driver (Page 6-35)
Introduction
                       The printer driver allows you to output message texts with the date and time to a printer. This
                       enables you to monitor simple processes, print error or fault messages or issue instructions
                       to the operating personnel, for example.
                       The printer driver contains the physical layer (layer 1).
Printer Output
                       To output n bytes of user data to a printer, the format string and the variables of the
                       message text must be specified as parameters when the PRINT system function block is
                       called.
                       During output the data is edited for printing. The print editing is performed as configured in
                       the CP 441: Configuration Package for Point to Point Communication parameter assignment
                       interface (page layout, character set, control characters, etc.).
                       Characters are not received during printer output. The exception to this are any flow control
                       characters that have been configured. Any characters received are not adopted.
                                              :DLWIRUD
                                              SULQWMRE
                   5HTXHVWSURFHVVHG
3ULQWMREUHFHLYHG
                                                                        7KHQXPEHURIWKH
                                          3ULQWHGLWLQJDQG             PHVVDJHWH[WLVREWDLQHG
                                            RXWSXWRIWKH               IURPWKHSDUDPHWHUV
                                           PHVVDJHWH[W                 )250$7DQG6'BWR
                                                                        6'BLQWKH35,176)%
See also
                   Parameters for the Communications Protocols (Page 5-3)
Introduction
                       By selecting different protocols, you can adjust your CP 441 communication processor to suit
                       the properties of the communication partner.
                       The sections that follow describe the parameter assignment data of the 3964(R) procedure,
                       RK 512 computer connection, ASCII driver and printer driver.
                       Note
                       When the X27 (RS 422/485) interface submodule is used, the 3964(R) procedure can only
                       be used in four-wire mode.
Protocol
                      The following table describes the protocol.
Protocol parameters
                       You can only set the protocol parameters if you have not set the default values in the
                       protocol.
Receive Buffer on CP
                         The following table describes the parameters for the CP receive buffer.
                                                                                            5 % 
                    QRQH
                                                                                           5 $ 
9
                                                                                            5 % 
                   5 $ 95 % 9
                                                                                           5 $ 
9
9
                                                                                            5 % 
                    5 $ 95 % 9
                                                                                           5 $ 
9
Figure 2-26 Wiring of the recipient at the X27 (RS 422) interface (3964(R) driver)
See also
                   Parameters for the Communications Protocols (Page 5-3)
Introduction
                       You can use the parameter assignment data of the RK 512 computer connection to adjust
                       the CP 441 to suit the properties of the communication partner.
                       Note
                       Exception: The number of data bits per character is set permanently to 8 with the RK 512
                       computer connection.
                       The parameters of the transport layer (layer 4) must be specified in the system function
                       blocks (SFB) used.
See also
                       Parameter Assignment Data of the 3964(R) Procedure (Page 2-51)
Introduction
                  Using the parameter assignment data of the ASCII driver, you can adjust the communication
                  processor to suit the properties of the communication partner.
                  Note
                  When the X27 (RS 422/485) interface submodule is used, the ASCII driver can be used in
                  four-wire mode (RS 422) and two-wire mode (RS 485). During parameter assignment, you
                  specify the type of interface (RS 422 or RS 485).
Protocol parameters
                        The table below describes the protocol parameters.
Receive Buffer on CP
                       The following table describes the parameters for the CP receive buffer.
5 %
5 $
9
                                                                                           5 % 
                   5 $ 95 % 9
                                                                                           5 $ 
9
9
                                                                                           5 % 
                    5 $ 95 % 9
                                                                                           5 $ 
9
Figure 2-27 Wiring of the recipient at the X27 (RS 422/485) interface (ASCII driver)
See also
                   Parameters for the Communications Protocols (Page 5-3)
                   Data Transmission with the ASCII Driver (Page 2-35)
Introduction
                       You can use the parameter assignment data of the printer driver to set the transmission-
                       specific parameters and the message texts for printer output.
Note
                       Please note the following:
                       • The size of the message text buffer depends on the module:
                           – 8 KB per interface for the CP 441, 6ES7 441-XAA00-0AE0
                           – 8 KB per interface for the CP 441, 6ES7 441-XAA01-0AE0
                           – 55 KB per interface for the CP 441, 6ES7 441-XAA02-0AE0
                           – 55 KB per interface for the CP 441, 6ES7 441-XAA03-0AE0
                           – 55 KB per interface for the CP 441, 6ES7 441-XAA04-0AE0
                       • The message texts are stored in the CPU's load memory together with the parameter
                         assignment data and loaded automatically onto the CP 441 during the loading operation.
                         You must therefore reserve the corresponding memory space in the load memory of the
                         CPU for every interface for which you have created message texts.
                       • Before you transfer the message texts to the CP 441 you must increase the value of the
                         parameter for transferring parameters to modules for the relevant CPU. You should plan
                         in approximately 20 s per interface.
                    Note
                    Inreasing the max. number of signal numbers from 1000 to 4000
                    As of the CP 441, 6ES7 441-XAA04-0AE0 or the CP 441: Configuration Package for Point to
                    Point Communication parameter assignment interface V5.1 incl. SP6, you can configure up
                    to 4000 message text numbers (0-3999).
                                                                                                 5 % 
                          QRQH
                                                                                                 5 $ 
9
                                                                                                 5 % 
                         5 $ 95 % 9
                                                                                                 5 $ 
9
9
                                                                                                 5 % 
                         5 $ 95 % 9
                                                                                                 5 $ 
9
Figure 2-28 Wiring of the recipient at the X27 (RS 422) interface
                     Note
                     RTS/CTS data flow control is only possible when the RS 232C interface submodule is
                     used. To do this, you must fully wire the interface signals in the plug-in connection.
BUSY Signal
                  The CP 441 evaluates the printer's "BUSY" control signal. The printer indicates to the
                  CP 441 that it is ready to receive:
                  • In the case of the CP 441 with the 20mA TTY interface submodule: current on RxD line
                  • CP 441 with RS 232C and X27 (RS 422/485) interface submodule:
                    with signal CTS = "ON"
                     Note
                     When you configure with RTS/CTS flow control, you must set the polarity of the BUSY
                     signal on the printer as follows: BUSY signal: CTS = "OFF". Please note that some
                     printers use the DTR signal to display the BUSY signal. In such cases you must wire the
                     cable to the CP 441 appropriately.
Page layout
                       The table below contains descriptions of the parameters for the page layout.
Character set
                        The table below contains descriptions of the parameters for the character set.
Control characters
                        The table below contains a description of the parameter for control characters.
Message texts
                        You can configure message texts with variables and control statements (e.g. for bold,
                        condensed, expanded or italic type and underlining). Each message text is assigned a
                        number during parameter assignment. You print out a specific message text by specifying a
                        reference (to the memory cell containing the message text number) for send parameters
                        SD_1 to SD_4 of the PRINT system function block.
Performance features
                  Conditions for configuring message texts:
                  • Max. size of the text SDB: 55 KB
                  • Max. length of a message text without variables: 150 characters
                  • Max. length of a message text with variables displayed: 4000 characters
                  • Max. number of variables per message text: 4 (3 + message text number)
                  • Max. number of message text numbers: 4000 (0 to 3999)
                    The net amount of memory space available for the message texts is dependent on the
                    smallest and largest message text number actually used. You can calculate the net
                    memory space available for message texts as follows:
                     Net memory space for message texts effectively =
                     56.400 - 2 x (the largest message text number used - the smallest message text number
                     used + 1)
Variables
                  Up to 4 variables (3 + a message text number) can be displayed in a message text. The
                  following can be displayed as variables: values calculated by the user program (e.g. levels),
                  date and time, strings (string variables) or other message texts. The variables are configured
                  as the send parameters SD_1 to SD_4 of the PRINT system function block.
                  A conversion statement must be specified in the configured message text or in the format
                  string for each variable, and the meaning and output format of the variable value must be
                  encoded in this statement.
Format string
                  The format string allows you to define the format and composition of a message text. The
                  format string can consist of:
                  • Text (all printable characters, for example: The level ... was reached at ... hours.)
                  • Conversion statements for variables (e.g. %N = expression of a message text stored on
                    the CP CP 441; the desired message text number is configured by means of the
                    reference (ANYPOINTER addressed to the memory cell in which the message text
                    number is stored) in the send variables SD_1 to SD_4).
                     For each variable there must be one conversion statement in the format string. The
                     conversion statements are applied to the variables in the sequence in which they occur in
                     the format string.
                  • Control statements with control characters for bold, condensed or italic type and
                    underlining (e.g. \B = bold type on) or with additional control characters you have defined.
                     You can use other control characters supported by your printer if you enter them in the
                     control characters table of the CP 441: Configuration Package for Point to Point
                     Communication parameter assignment interface and then make new parameter
                     assignments for the CP 441.
                  Please note that a line feed is carried out by default after each output.
Message texts
                       The following table contains descriptions of the parameters for configuring message texts
                       (using the CP 441: Configuration Package for Point to Point Communication parameter
                       assignment interface).
Examples
                  Here are some examples of message texts. The variables (SD_1, SD_2) in the examples
                  must be configured at the PRINT SFB.
                  • Example 1: The level "200" l was reached at "17.30" hours.
                     Format string = The level %i l was reached at %Z hours.
                     Variable (SD_1) = time
                     Variable (SD_2) = level
                  • Example 2: The pressure in the chamber "is falling"
                     Format string = %N %S
                     Variable (SD_1) = Reference to memory cell containing "17" (text no. 17:The pressure in
                     the chamber ...)
                     Variable (SD_2) = Reference to the string (string variable: ... is falling)
                     The reference to the string is a symbolic address that specifies where the string is stored
                     (DB).
                  • Example 3: (Setting the page number to 10)
                     Format string = %P
                     Variable (SD_1) = 10 (page number: 10)
See also
                  Interface Submodule RS 232C (Page B-1)
Introduction
                       The output of a message text with variables and control statements (e.g. for bold,
                       condensed, expanded or italic type and underlining) is defined by means of a format string.
                       In the format string you can also define statements to execute other useful functions for
                       printer output (e.g. to set a page number or begin a new page).
                       All the permissible characters and representation modes for the format string are described
                       below. You can also configure all the control statements for variables (except for \F "begin
                       new page" and \x "printing without a line break") and the conversion statements for variables
                       (except for %P "set page number" and) in the message texts using the parameter
                       assignment interface for the CP 441: Configuration Package for Point to Point
                       Communication parameter assignment interface.
Format string
                       The figure illustrates the structure of the format string schematically.
                       A format string can contain normal text and/or conversion statements for variables and/or
                       control statements. Normal text, conversion statements and control statements can occur in
                       any sequence in the format string.
                       There must be a conversion statement (and only one) for each variable in the format string
                       or message text. The conversion statements are applied to the variables in the sequence in
                       which they occur.
1RUPDOWH[W DOOSULQWDEOHFKDUDFWHUV
&RQYHUVLRQVWDWHPHQW
&RQWUROVWDWHPHQW
Conversion Statement
                  The figure illustrates the structure of the format string schematically.
                                                                                                  5HSUHVHQWDWLRQ
                                           )ODJ          :LGWK              3UHFLVLRQ
                                                                                                       W\SH
Flag
Width
Precision
                  Precision is only relevant to representation types A, D, F and R. It is ignored otherwise.
Representation Type
                        The table below describes the possible representation types of the values of the variables.
                        Representation types N and P are exceptions. They are explained below the table. Both
                        upper- and lower-case characters are permitted for the representation type.
                        Uppercase and lowercase letters are permissible for the representation.
                  Format string      =   %N %S
                  Variable           =   Reference to memory cell containing "17" (text no. The pressure in
                  (SD_1)                 the chamber ...)
                  Variable           =   Reference to string (string variable: ... is falling)
                  (SD_2)
                  The reference to the string is a symbolic address that specifies where the string is stored
                  (DB).
                  Note
                  Within a message text, all conversion statements except for %N and all control statements
                  except for "\F" and "\x" are allowed! An explicite width setting of %N limits the printed length
                  of the referenced message text to the width indicated.
                        Format string         =    %P
                        Variable (SD_1)       =    10 (page number: 10)
                       Note
                       In the case of the P representation type, there must be no further text, conversion or control
                       statements in the format string. The P representation type is not permitted in configured
                       message texts.
Example 2:****
Example 3: 96-10-3
Example 4: **********
Example 5: ******
Example 2: 12345.
Example 3: 12d_0h_0m_23s_348ms
                        Format string        =    %T
                        Variable (SD_1) =         T#12D23S348MS
                       The IEC time is in the standard format; unspecified time units are inserted with zeros.
Example 4: 1.234560E+02
Example 5: TEST..
Control statements
                  Control statements are used to achieve specific results in the printout (e.g. underlining).
                  In addition to the standard control statements (for bold, condensed, expanded or italic type
                  and underlining), you can also use other control characters if you enter them in the control
                  character table of the CP 441: Configuration Package for Point to Point Communication
                  parameter assignment interface (e.g., K for "small caps").
                  The figure illustrates the structure of the control statement schematically.
                                        2XWSXWRIWKHFKDUDFWHU
                          ?                                                                      
                                         2XWSXWRIWKHFKDUDFWHU?
                                                                                                 ?
                                        6ZLWFKRQ                             %ROGW\SH
                                                                                                 %
                                        6ZLWFKRII                            &RQGHQVHGW\SH
                                                                                                 &
                                                                              ([SDQGHGW\SH
                                                                                                 (
                                                                              ,WDOLFW\SH
                                                                                                 ,
                                                                              6PDOOFDSLWDOV
                                                                                                 .
                                                                              8QGHUOLQLQJ
                         VWDQGDUGFRQWUROVWDWHPHQW
                                                                                                 8
Examples
                  Here are some examples with control statements:
                  • Example 1:
                     To print the text "Bold type and underlining are ways of highlighting a text", you have to
                     enter the following:
                     \BBold type\-B and \Uunderlining\-U are ways of highlighting a text
                  • Example 2:
                     To output the format string with the conversion statement "Message text no. %i of %8.2A"
                     transparently on the printer, you have to enter the following:
                     'Message text no. \%i of \%8.2A'
                       Note
                       In the case of the \F control statement, there must be no further text, conversion or control
                       statements in the format string. The variables remain unassigned.
                       Note
                       Please note that when you use the \x control statement, the new line always begins without a
                       left margin.
Further Information
                 Chapter 7 of the manual contains a complete programming example.
See also
                 Installing and Removing the Interface Submodules of the CP 441 (Page 4-3)
                 Configuring and Assigning Parameters for the CP 441 (Page 5-1)
                 Managing the Parameter Data (Page 5-16)
                 Connection Configuration (Page 5-5)
                 Communication via System Function Blocks (Page 6-1)
Introduction
                       There are no specific slots reserved for communication modules in the rack of the S7-400
                       automation system.
Further Information
                       Further information about the topic of racks is availabl3e in the installation manual S7-400,
                       M7-400 Programmable Controllers, Installation
Introduction
                 When mounting and removing the CP 441, you must observe certain rules.
Tool
                 You will need a 3.5 mm cylindrical screwdriver to mount or dismount the communication
                 processor.
                 Note
                 The CP 441 can be hot-plugged and hot-pulled, in other words with voltage applied. This
                 means that the CP 441 can be replaced while the programmable logic controller is in
                 operation. The CP 441 is configured automatically when it is plugged in. It then operates as
                 before.
Introduction
                       When installing and removing the interface submodules of the CP 441, you must observe
                       certain rules.
                       Caution
                       Before inserting the interface submodule, unplug the power supply module or dismount the
                       CP 441 from the rack, otherwise the interface submodule could be permanently damaged.
Tool
                       To install the interface submodule you require a 3.5 mm cylindrical screwdriver.
                       Note
                       To prevent interference, it is absolutely essential that the two screws used to attach the
                       interface submodule are tightened properly and that the shield of the plug cable is connected
                       to a shield bus. Only then can the relevant EMC (electromagnetic compatibility) standards be
                       complied with.
Introduction
                       Once you have mounted the communication processor, you must inform the programmable
                       controller that it is there. This process is known as "configuration".
Requirements
                  The CP 441: Configuration Package for Point to Point Communication parameter
                  assignment interface is installed on the PG/PC under STEP 7.
                  Before you can enter the communication processor in the configuration table of the STEP 7
                  software, you must have created a project and a terminal with STEP 7.
Configuration
                  In the following, "configuration" refers to the entry of the communication processor in the
                  configuration table of the STEP 7 software. In the configuration table, enter the rack, the slot
                  and the order number of the communication processor. STEP 7 then automatically assigns
                  an address to the CP.
                  The CPU is now able to find the communication processor in its slot in the rack by way of its
                  address.
Further Information
                  The procedure for configuring S7-400 modules is described in detail in the STEP 7 manual.
                  In addition, STEP 7's online help system will provide you with all the assistance you will need
                  when configuring an S7-400 module.
Introduction
                       Once you have entered the CP 340 in the configuration table, you must supply its interface
                       with parameters. In the case of the printer driver, you can also configure message texts for
                       printer output. This process is known as "Parameter Assignment".
Parameter Assignment
                       The expression "Parameter Assignment" is used in the following to describe the setting of
                       interface-specific parameters and the configuration of message texts. This is done using the
                       CP 441: Configuration Package for Point to Point Communication parameter assignment
                       interface.
                       You start the parameteri assignment interface by double-clicking the order number (CP 441)
                       in the configuration table or by selecting the CP 441 and then calling the Edit > Object
                       Properties menu command.
                       You do not have to specify any settings for the CP 441 on the "General" and "Addresses"
                       tabs.
                       Select the "Basic parameters" tab and enter the interface number and the type of interface.
                       Click on the "Parameters" button to go to protocol selection. Set the protocol and double-
                       click the icon for the transmission protocol (an envelope). This takes you to the dialog for
                       setting the protocol-specific parameters.
                  The "Response to a CPU Stop" parameter is only available for the CP 441-2 (as of
                  6ES7 441-2AA04-0AE0). It influences CP 441 acces to local S7 data areas during a CPU
                  stop when using the RK512 protocol and the uploadable driver MODBUS Slave as follows:
                  • The changes only affect remote requests.
                  • Behavior when using the RK512 protocol:
                      When a "SEND" or "FETCH" request is received remotely (that is, when attempting to
                      write to or read from local SIMATIC memory areas), the remote requests:
                      – Continue to be processed using the communication mechanisms PUT/GET in the
                        case of "Continue Work", also during a CPU stop.
                      – Are not passed on to the CPU in the case of "STOP", but rather a RK512 response
                        message frame with the error code "0A" is returned to the remote partner that
                        submitted the request.
Further Information
                  The procedures for using the CP441: Configuration Package for Point to Point
                  Communication parameter assignment interface is the same for all communication
                  processors and is self-explanatory. For this reason, the parameter assignment interface is
                  not described in detail here.
                  Also, the on-line help provides sufficient support for working with the parameter assignment
                  interface.
Introduction
                       The CP 441 represents the link between an S7 CPU and a communication partner linked by
                       means of a point-to-point connection. The S7 connections are converted to the address
                       mechanisms of the selected transmission protocol on the CP 441.
                       When you configure a connection, you specify the route the connection takes from the
                       S7 CPU to the CP 441 via the serial link to the communication partner.
                       As a result of connection configuration, you obtain the connection ID that you have to specify
                       as the parameter "ID" in your user program when you call a system function block in order to
                       exchange data with the corresponding communication partner.
Further Information
                       You will find general information on how to configure connections with STEP 7 in the STEP 7
                       manual Configuring Hardware and Communication Connections STEP 7 V5.3.
                       In addition, STEP 7's online help system will provide you with assistance in configuring a
                       connection.
                  Note
                  If your communication partner is a CP 441, please note the following: Whereas a
                  homogeneous S7 connection ends directly at the two end points (CPUs) of the connection, a
                  point-to-point connection consists of a "partial connection" from the CPU to the CP 441 in
                  one station and a "partial connection" from the CPU to the CP 441 in the partner station. You
                  therefore have to configure a connection on your partner station as well in order to enable a
                  point-to-point connection between the two CPUs, and the local IDs may be different.
See also
                  Under the "Object Properties" dialog, the procedures for the RK 512 computer connection
                  (Page 5-12)
                  "Object Properties" Dialog, Procedures for the ASCII Driver, Printer Driver and 3964(R)
                  Procedure (Page 5-9)
Introduction
                       To present the point-to-point connection graphically, proceed as follows:
Select Netpro
                       1. In SIMATIC Manager, display the "<Offline> (Project)" project window, and double-click
                          the CPU in your SIMATIC 400 station.
                           Result: The Connections object (connection table) appears on the right.
                       2. Double-click this icon. The "Configuring Connections" dialog appears.
See also
                       "Object Properties" Dialog, Procedures for the ASCII Driver, Printer Driver and 3964(R)
                       Procedure (Page 5-9)
                       Under the "Object Properties" dialog, the procedures for the RK 512 computer connection
                       (Page 5-12)
Entering a Connection
                  1. Select Insert > Connection to add a new connection to the connection table of the CPU
                     you selected.
                  2. In the New Connection dialog, select SIMATIC 400 station(2) or Other Station or
                     SIMATIC S5 as communication partner and enter S7 PTP Connection as the connection
                     type. Then click OK to exit the dialog.
                  3. In the "Object Properties" dialog, set the specific properties of the connection:
                     – Under the "Object Properties" dialog, the procedures for the ASCII driver, printer driver
                       and 3964(R) procedure or
                     – Under the "Object Properties" dialog, the procedures for the RK 512 computer
                       connection
                  4. Click OK to return to the "Configuring Connections" dialog.
Result
                  The "Configuring Connections" dialog displays the "Local ID (Hexadecimal)" of the
                  connection that you have added. You have to specify this ID as the parameter "ID" at the
                  system function block in the user program of your CPU in the SIMATIC 400 station(1).
                  Note
                  If your connection partner is another SIMATIC 400 station with a CP 441, you have to
                  configure a connection on your partner station as well in order to enable a point-to-point
                  connection between the two CPUs, and the local IDs may be different.
                  Please note that you cannot configure more than 8 connections for each interface of the
                  CP 441.
See also
                  Under the "Object Properties" dialog, the procedures for the RK 512 computer connection
                  (Page 5-12)
5.3.1          "Object Properties" Dialog, Procedures for the ASCII Driver, Printer Driver and
               3964(R) Procedure
2EMHFW3URSHUWLHV&RQQHFWLRQ [
&RQQHFWLRQ %ORFN3DUDPHWHU,'
                                                                                                                                  ,'
                                $FWLYH&RQQHFWLRQ6HWXS
6HQG2SHUDWLQJ0RGH0HVVDJHV 'HIDXOW
&RPPXQLFDWLRQ'LUHFWLRQ
                          1HWZRUN&RQQHFWLRQV
                                                /RFDO                                                3DUWQHU
,QWHUIDFH7\SH 3W3
,QWHUIDFH ,)B 5
                          &RQQHFWLRQ6HOHFWHG8VLQJ5.&381R                                  5.&381R                   
                                                                                         2.
2. &DQFHO +HOS
Settings
                    You set the properties of a connection in the "Object Properties" dialog:
Table 5-3 Settings in the "Object Properties" dialog for the ASCII driver, printer driver and 3964(R) procedure
Parameters                               Description
Configured dynamic connection The check box is grayed and not selected: The connection is set up automatically during
                              startup and is sustained until shutdown.
Active connection setup                  The check box is grayed and selected: The connection is always set up by the local
                                         station.
Send operating mode                      The check box is grayed and not selected: Operating status messages cannot be sent.
messages
Local ID                                 Local ID (hexadecimal) which you have to specify as the parameter "ID" at the system
                                         function block in the user program of your CPU. You can change the suggested ID if you
                                         have programmed the SFBs with certain IDs.
Communication direction                  Specify the direction in which communication is to take place by selecting the appropriate
                                         option (see also the sections entitled "One Connection Configured" and "Several
                                         Connections Configured")
Parameters                           Description
Interface                            Interface
                                     The CP 441-2 has two channels (the interfaces IF1 and IF2) via which the point-to-point
                                     connections can be set up. Select the channel used for the configured connection.
                                     /Protocol
                                     Various protocols can be used to send data via point-to-point connections. You specified
                                     the protocol when you configured the module.
Connection is selected using         These fields are relevant only to the RK 512 computer connection. These fields are
RK512 CPU no.                        grayed out.
• RK512 CPU no.
                       Note
                       If your communication partner is a CP 441, you also have to set the object properties for the
                       partial connection in the partner station.
                       Note
                       Data can only be received via one connection for each interface. If you have set "2: Partner
                       → Local" or "3: Local ↔ Partner" as the communication direction for a connection via one
                       interface, you can select "1: Local → Partner" as the communication direction.
5.3.2       Under the "Object Properties" dialog, the procedures for the RK 512 computer
            connection
                     2EMHFW3URSHUWLHV&RQQHFWLRQ                                                                                   [
                     &RQQHFWLRQ                                                     %ORFN3DUDPHWHU,'
                                                                                    /RFDO,'                      :
                           &RQILJXUHG'\QDPLF&RQQHFWLRQ
                                                                                                                             ,'
                           $FWLYH&RQQHFWLRQ6HWXS
6HQG2SHUDWLQJ0RGH0HVVDJHV 'HIDXOW
&RPPXQLFDWLRQ'LUHFWLRQ
                     1HWZRUN&RQQHFWLRQ
                                           /RFDO                                                3DUWQHU
,QWHUIDFH7\SH 3W3
,QWHUIDFH ,)B5.
&RQQHFWLRQ6HOHFWHG8VLQJ5.&381R 2. 5.&381R
2. &DQFHO +HOS
Settings
                       You set the properties of a connection in the "Object Properties" dialog:
Table 5-4 Settings in the "Object Properties" dialog for the RK 512
Parameters                           Description
Configured dynamic connection The check box is grayed and not selected: The connection is set up automatically during
                              startup and is sustained until shutdown.
Active connection setup              The check box is grayed and selected: The connection is always set up by the local
                                     station.
Send operating mode                  The check box is grayed and not selected: Operating status messages cannot be sent.
messages
Local ID                             Local ID (hexadecimal) which you have to specify as the parameter "ID" at the system
                                     function block in the user program of your CPU. You can change the suggested ID if you
                                     have programmed the SFBs with certain IDs.
Communication direction              Specify the direction in which communication is to take place by selecting the appropriate
                                     option (see also the sections entitled "One Connection Configured" and "Several
                                     Connections Configured")
Interface                            Interface
                                     The CP 441-2 has two channels (the interfaces IF1 and IF2) via which the point-to-point
                                     connections can be set up. Select the channel used for the configured connection.
                                     /Protocol
                                     Various protocols can be used to send data via point-to-point connections. You specified
                                     the protocol when you configured the module.
Connection selected using            If you have selected Partner → Local or Local ↔ Partner as the communication direction,
RK512 CPU no.                        enter the CPU number (1 to 4) by means of which your partner can address this
                                     connection.
RK512 CPU no.                        If you have selected Local → Partner or Local ↔ Partner as the communication direction,
                                     enter the CPU number (1 to 4) to which the connection goes.
                       Note
                       If your partner is a CP 441, you also have to set the object properties for the partial
                       connection in the partner station.
                  Note
                  The number of connections per interface via which you can send message frames is limited
                  to eight. The fact that the CPU numbers in the message frame header are limited to 1 to 4
                  limits the number of connections via which you can receive message frames at a single
                  interface to a maximum of four. In the "Local" box, a CPU number that has already been
                  assigned cannot be assigned again for a different connection at the same interface.
                  If you have set "2: Partner → Local" or "3: Local ↔ Partner" as the communication direction
                  for a connection via one interface, you must enter another CPU no. in the "Local" field for
                  another connection for receiving data or, if you only want to send data, you must select "1:
                  Local → Partner" as the communication direction.
Examples
                       • Example 1:
                           Task: You want data to be sent (or fetched) by means of RK 512 from your S7-400
                           system. The data is to be stored on the partner's CPU 3 (or fetched by CPU 3).
                           Parameter assignment: You must specify Local → Partner as the communication direction
                           and enter the CPU number 3 in the "Partner, RK512 CPU No." field.
                       • Example 2:
                           Task: You want by means of RK 512 to receive from the partner data identified by the
                           CPU number 2 in the RK 512 message frame.
                           Parameter assignment: You must specify Partner → Local as the communication direction
                           and enter the CPU number 2 in the "Local, Connection Selected Using RK 512 CPU No."
                           field.
                       • Example 3:
                           Task: You want data to be sent from your S7-400 system to the partner (or fetched) by
                           means of RK 512. The data is to be stored on the partner's CPU 3 (or fetched by CPU 3).
                           At the same time, you want to use the connection to receive from the partner data
                           identified by the CPU number 2 in the RK 512 message frame.
                           Parameter assignment: You must specify Local ↔ Partner as the communication direction
                           and enter the CPU number 3 in the "Partner, RK512 CPU No." field and the CPU number
                           2 in the "Local, Connection Selected Using RK 512 CPU No." field.
Introduction
                  The CP 441's configuration and parameter assignment data (including the message texts) is
                  stored in the current project (on the hard disk of the programming device/PC).
Data management
                  When you quit the configuration table by selecting Station > Save or Station > Save As, the
                  system automatically saves the configuration and parameter assignment data (including the
                  module parameters) to the project/user file you have created.
Further Information
                  In Configuring Hardware and Communication Connections STEP 7 V5.3, the manual for
                  STEP 7, you will find detailed descriptions of how to:
                  • save the configuration and parameters.
                  • load the configuration and parameters onto the CPU.
                  • read, modify, copy and print the configuration and the parameters.
See also
                  Configuring and Assigning Parameters for the CP 441 (Page 5-1)
                  Connection Configuration (Page 5-5)
Prerequisite
                       STEP 7, Version 4.02 or higher
Note
                       Please observe the following rules of multiprocessor communication:
                       • Data can be sent from any CPU.
                       • In the case of the ASCII driver and the 3964(R) procedure, data can only be received via
                         one CPU, since these protocols do not send any address information with the data.
                       • In the case of the RK 512 computer connection, data can be received on 4 CPUs.
                         Addressing is by means of the CPU numbers 1 to 4 in the header of the RK 512 message
                         frame.
                           The CPU numbers automatically assigned in the configuration table of STEP 7 are
                           entered by default during connection configuration in the "Connection Selected Using
                           RK512 CPU No." field of the "Object Properties" dialog.
See also
                       Under the "Object Properties" dialog, the procedures for the RK 512 computer connection
                       (Page 5-12)
Introduction
                  To extend the functionality of the CP 441 and adapt it to the communication partner, you can
                  load other transmission protocols on the CP 441-2 (loadable drivers) in addition to the
                  standard protocols in the module firmware (ASCII, 3964(R), RK 512, printer).
                  The loadable drivers are not shipped with the CP 441 or the parameter assignment interface
                  as standard. You have to order them separately (see the chapter entitled "Loadable Drivers"
                  in the ST 70 catalog).
                  To find out how to install and assign parameters to a loadable driver and load it onto the
                  CP 441-2, consult the separate documentation for the loadable driver. Only the requirements
                  and the fundamentals are described below.
Requirements
                  The prerequisites for loading the drivers are:
                  • STEP 7, V4.02 or higher
                  • CP 441: Configuration Package for Point to Point Communication parameter assignment
                    interface, as of V5.0
                  • The CP 441-2 (order number 6ES7 441-2AA02- 0AE0 or higher)
                  • The dongle provided with the driver must be installed on the CP 441-2.
Note
                       Please note the following:
                       • The loadable driver is stored in the CPU's load memory together with the parameter data
                         and loaded automatically onto the CP 441-2 during the loading operation. You must
                         therefore reserve the requisite memory space in the load memory of the CPU for every
                         interface on which you want to load the driver.
                       • Loadable drivers are sent only once to the CP 441. The driver download (2 SDBs) is
                         interrupted if you attempt to assign parameters. This is indicated by the INTF LED on the
                         CPU and the corresponding entry (error loading SDB) in the CPU's diagnostic buffer. In
                         this case the entry is of no significance.
                       • Before you transfer the loadable driver to the CP 441-2, you must increase the value of
                         the parameter for transferring parameters to modules for the relevant CPU. Allow
                         approximately 15 seconds for each loadable driver.
See also
                       Connection Configuration (Page 5-5)
Introduction
                  You can enhance functionality and eliminate errors by downloading firmware updates to
                  system memory of communication processor.
                  Subsequent loading of firmware updates with the CP 441: Configuration Package for Point to
                  Point Communication parameter assignment interface.
Basic Firmware
                  The CP 441 is shipped with basic firmware preinstalled.
Requirements
                  The prerequisites for loading firmware updates are:
                  • STEP 7, V4.02 or higher
                  • CP 441: Configuration Package for Point to Point Communication parameter assignment
                    interface, as of V5.0
                  • You must create a valid project under the hardware configuration and upload it to the
                    CPU before you can update the firmware of the communication procrocessor with the
                    parameter assignment interface.
                  • The instructions accompanying the firmware update always detail the destination
                    directories for the files.
                  The ..\CP441.nnn path always identifies the firmware version.
Firmware download
                  You send the firmware update to the CP 441 using the CP 441: Configuration Package for
                  Point to Point Communication parameter assignment interface.
                  Proceed as follows:
                  1. Switch the CPU to STOP mode.
                  2. Start the parameter assignment interface:
                     In SIMATIC Manager: File > Open > Project> Hardware Config > double-click on
                     CP 441 > select the "Parameters" button.
LEDs
                       LEDs during the download of a firmware update:
Introduction
                  The S7-400 programmable controller provides you with a number of system function blocks
                  which initiate and control communication between the CPU and the CP 441 communication
                  processor in the user program. The system function blocks are stored permanently in the
                  CPU memory.
                   SFB        Meaning
                   BSEND      The BSEND system function block allows you to send data from an S7 data area to a
                   (SFB 12)   communication partner with fixed destination.
                   BRCV       The BRCV system function block allows you to receive data from a communication
                   (SFB 13)   partner and transfer it to an S7 data area.
                   GET        RK 512 only: The GET system function block enables you to fetch data from a
                   (SFB 14)   communication partner.
                   PUT        RK 512 only: The PUT system function block enables you to send data to a
                   (SFB 15)   communication partner with dynamically changeable destination.
                   PRINT      The PRINT system function block allows you to output a message text containing up to
                   (SFB 16)   4 variables to a printer.
                   STATUS     The STATUS system function block allows you to query the device status of a
                   (SFB 22)   communication partner.
Further Information
                  For a detailed description of the system function blocks, see the reference manual System
                  Software for S7-300 and S7-400, System and Standard Functions.
Introduction
                        The following sections describe what you must take into account when supplying parameters
                        for the system function blocks in your own programmable controller (S7-400).
                        The communication between two CP 441s is described.
                        For points to note with regard to other communication partners of the CP 441, see the
                        relevant SIMATIC S5 literature or third-party literature.
Control Parameters
                        Data transfer is only activated if the associated control parameters have a defined value
                        when the SFB is called or if the value has changed in a defined way since the last SFB call.
                        We therefore refer to them as level- or edge-triggered control parameters.
Addressing Parameters
                   Note
                   The addressing parameters ID and R_ID are only evaluated the first time the block is called
                   (the actual parameters or the predefined values from the instance). The communication
                   relationship (connection) to the remote partner is thus defined at the first call and remains so
                   until the next restart of the CPU.
Status Parameters
                   The status parameters allow you to monitor whether the block has completed its task
                   successfully or is still doing it. They also display errors that occur.
                   Note
                   The status parameters are only valid for a single cycle - from the first command following the
                   SFB call to the next SFB call. Consequently, you have to evaluate these parameters after
                   every block cycle.
                       Note
                       The receiving CPU determines data consistency (CPU 412/413: 16 bytes, CPU 414/417: 32
                       bytes). For further information on data consistency, refer to the reference manual to the
                       system and standard funcitons. To guarantee further data consistency, please observe the
                       following:
                       • Sender: Only access the send DB when all data have been completely transferred
                         (DONE = 1).
                       • Receiver: Only access the receive DB when all data are received (NDR = 1). Then you
                         must inhibit the receive DB (EN_R = 0) until you have processed the data.
Example:
                       If all requests are 2000 bytes long, for example, 8 requests can be buffered.
Table 6-5 If the communication load is increased please note the following:
See also
                       Diagnostics Messages of the System Function Blocks (Page 8-4)
                       Diagnostics via the Error Signaling Area SYSTAT (Page 8-8)
6.3 Using the System Function Blocks with the 3964(R) Procedure
6.3.1 Applications
Introduction
                  If you are using the 3964(R) procedure as your transmission procedure, you can transmit
                  data from your S7-400 programmable controller to a communication partner.
                     <RXUSURJUDPPDEOHFRQWUROOHU                  &RPPXQLFDWLRQSDUWQHU
                      DFWLYH                        6
                                                                                  6)%
                                                                                  %5&9
                      6)%
                      %6(1'                          5                   RU
                                                    SURWRFRO
                                                                            5HFHLYHPDLOER[
                                                                             '%
Figure 6-1 Sending Data to a Communication Partner with the 3964(R) Procedure
                           Note
                           Please note that destination information is not transferred when transmitting data using
                           the 3964(R) protocol. The data can therefore be sent from more than one source
                           (BSENDs), but stored on one destination only per serial interface (BSEND or receive
                           mailbox).
What To Do
                       This type of data transmission has the advantage that, using the BRCV, you can interpret the
                       NDR parameter to establish when the complete data was received, and the EN_R parameter
                       to prevent unprocessed data from being overwritten at the receiver.
                  Note
                  So that no destination information can be transferred to the protocol by this means, the data
                  of all BSENDs with different R_IDs must be received by means of a BRCV. No more than
                  one BRCV system function block can therefore be created for a serial interface. The value
                  "0" must be specified for the R_ID parameter.
                  For the RD_1 parameter (data type ANY), specify where the data is to be stored
                  (destination). The length defines the maximum length of the block to be received.
                  Example: p#DB20.DBX10.0 WORD 2048
                  To prevent unprocessed data from being overwritten, you must call the BRCV with the value
                  0 at the control input EN_R.
                  Note that you might have to use the CP 441: Configuration Package for Point to Point
                  Communication parameter assignment interface to disable (delete) a receive mailbox on the
                  CP 441, as otherwise the data will be placed in the data block specified in the receive
                  mailbox instead of being fowarded to BRCV.
Example
                   STL
                               L                  50
                               T                  DB60.DBW806
                   CALL SFB 12, DB62                                                   Call for SFB 12.
                               REQ                :=DB60.DBX812.0                      Following a rising edge at the REQ
                               R                  :=DB60.DBX812.1                      parameter, the data for a length of 50
                                                                                       bytes starting at data byte 5 in DB10
                               ID                 :=W#16#1000
                                                                                       is sent to the communication partner
                               R_ID               :=W#16#5                             with the BSEND request.
                               DONE               :=DB60.DBX812.2
                               ERROR              :=DB60.DBX812.3
                               STATUS             :=DB60.DBW802
                               SD_1               :=p#DB10.DBX5.0 WORD 1
                               LEN                :=DB60.DBW806
                         STL
                         SET
                                    =              DB60.DBX812.4
                         CALL SFB 13, DB63                                                    Call for SFB 13.
                                    ID             :=W#16#1001                                The data is received with the BRCV
                                                                                              request and stored in DB20, starting at
                                    R_ID           :=W#16#0
                                                                                              data byte 10. The LEN parameter shows
                                    NDR            :=DB60.DBX812.5                            the length of the received data (50 bytes).
                                    ERROR          :=DB60.DBX812.6                            Note that this protocol requires 0 as the
                                    STATUS         :=DB60.DBW800                              R_ID of the BRCV system function block.
Request Table
                        The following table lists the data types which can be transmitted.
Table 6-8 Request table for sending data with the 3964(R) using BSEND and BRCV
6.3.3 Data Transmission with 3964(R) Using BSEND and a Receive Mailbox
What To Do
                  This type of data transmission has the advantage that no programming is necessary in the
                  user program of the communication partner.
                  Note that at the receiver you cannot tell when a transmission is taking place. Therefore, the
                  receiving CP 441 cannot prevent unprocessed data from being overwritten at the receiver.
                  The data is transferred even when the receiving S7 CPU is in STOP mode. The receiving
                  CPU determines data consistency (CPU 412/413: 16 bytes, CPU 414/417: 32 bytes).
Further Information
                  You will find more information on data consistency in the reference manual on system
                  functions and standard functions System Software for S7 300/400, System and Standard
                  Functions..
Request Table
                       The following table lists the data types which can be transmitted.
Table 6-9 Request Table for Sending Data with 3964(R) Using BSEND and a Receive Mailbox
6.4        Using the System Function Blocks with the RK 512 Computer
           Connection
                 If you are using the RK 512 computer connection as your transmission procedure, you can:
                 • Send data from your S7-400 automation system to a communication partner with a fixed
                   destination.
                 • Send data from your S7-400 automation system to a communication partner with a
                   dynamic destination.
                 • Fetch data from a communication partner.
Transmission Sequence
                 The figure below illustrates how data is sent to a communication partner with static
                 destination definition using RK 512.
                     <RXUSURJUDPPDEOHFRQWUROOHU                &RPPXQLFDWLRQSDUWQHU
                      DFWLYH                        6
                                                                               6)%
                                                                               %5&9
                       6)%
                       %6(1'                         5.                  RU
                                                     SURWRFRO
                                                                            1R
                                                                            SURJUDPPLQJ
                                                                            QHFHVVDU\
                 Figure 6-2     Sending Data to a Communication Partner with Static Destination Definition with the
                                RK 512 Computer Link
                       Note
                       If you are transmitting data via the RK 512 computer connection, you must distinguish
                       between sending data to another CP 441 or linking up to an S5 module or third-party device.
                       Note
                       The RK 512 protocol only allows an even number of data to be sent. If you specify an odd
                       number of data, an additional filler byte with a value of "0" is sent at the end.
6.4.2      Sending Data with RK 512 to the Communication Partner CP 441 with Static
           Destination Definition, Use of BSEND and BRCV
What To Do
                 This type of data transmission has the advantage that, using the BRCV, you can interpret the
                 NDR parameter to establish when the complete data was received, and the EN_R parameter
                 to prevent unprocessed data from being overwritten at the receiver.
                 Note
                 If you send data to a CP 441 by means of an S5 CP or a third-party device, in this mode you
                 must specify DX as the destination data block with the corresponding number in the request
                 block (S5 CP). The start address is not evaluated. Interprocessor communication flags are
                 not evaluated either. The connection via which the data is forwarded from the CP 441 to the
                 S7 CPU is selected by means of the CPU number. Up to 4 KB of data can be transferred.
Example
                       Table 6-10     Example of Calling SFB12 (BSEND) using RK 512:
                        STL
                                           L                  50
                                           T                  DB60.DBW806
                        CALL SFB 12, DB62                                              Call for SFB 12.
                                           REQ                :=DB60.DBX812.0          Following a rising edge at the REQ
                                           R                  :=DB60.DBX812.1          parameter, the data for a length of 50 bytes
                                           ID                 :=W#16#1000              starting at data byte 5 in DB10 is sent to the
                                                                                       communication partner with the BSEND
                                           R_ID               :=W#16#5
                                                                                       request.
                                           DONE               :=DB60.DBX812.2
                                           ERROR              :=DB60.DBX812.3
                                           STATUS             :=DB60.DBW802
                                           SD_1               :=p#DB10.DBX5.0 WORD 1
                                           LEN                :=DB60.DBW806
                        STL
                        SET           =            DB60.DBX812.4
                        CALL SFB 13, DB63                                         Call for SFB 13.
                                      EN_R         DB60.DBX812.4                  The data is received with the BRCV request and
                                      ID           :=W#16#1001                    stored in DB20, starting at data byte 10. The
                                      R_ID         :=W#16#5                       LEN parameter shows the length of the received
                                                                                  data (50 bytes).
                                      NDR          :=DB60.DBX812.5
                                                                                  Note that the R_ID of the BRCV must be
                                      ERROR        :=DB60.DBX812.6
                                                                                  identical to the R_ID of the BSEND.
                                      STATUS       :=DB60.DBW800
                                      RD_1         :=p#DB20.DBX10.0 WORD 2048
                                      LEN          :=DB60.DBW804
Request Table
                             The following table lists the data types which can be transmitted.
Table 6-12         Request Table for Sending Data with RK 512 to the CP 441 Communication Partner, Using BSEND and
                   BRCV"
    Source,        To Destination,        Parameter Assignment in the         Parameter      Parameter      Parameter Assignment in BRCV SFB,
    BSEND                S7              BSEND SFB, Parameter SD_1           Assignment in   Assignment        Parameter RD_1 (Destination)
    from S7        Communication                   (Source)                  BSEND SFB,      in BSEND/
                   Partner (BRCV)                                             Parameter      BRCV SFB,
                                                                             LEN (Source)    Parameter
                                                                                                R_ID
                                        S-TYPE    S-DBNO       S-Offset      Length (max.        No.        D-TYPE        D-                D-
                                                                (byte)        4096 byte)                                 DBNO          Offset (byte)
 Data block             Data block        DB         1-*         0-*              1-*           0-255          DB         1-*                0-*
      Flag              Data block        MB      irrelevant     0-*              1-*           0-255          DB         1-*                0-*
     Inputs             Data block         IB     irrelevant     0-*              1-*           0-255          DB         1-*                0-*
    Outputs             Data block        AB      irrelevant     0-   *           1-   *        0-255          DB         1-   *             0-*
    Counters            Data block         Z      irrelevant     0-*              1-*           0-255          DB         1-*                0-*
     Times              Data block         T      irrelevant     0-*              1-*           0-255          DB         1-*                0-*
*   This value is dictated by the CPU that you use.
Abbreviations: S-TYPE= source type, S-DBNO= source data block number, S-Offset= source start address; D-TYPE= destination type,
length= source length, D-DBNO= destination data block number, D-Offset= destination start address
Table 6-13         Specifications in Message Frame Header of RK 512 Protocol, "Sending Data to Communication Partner CP
                   441 with RK 512, Using BSEND and BRCV"
6.4.3          Sending Data with RK 512 to the Communication Partner CP 441 with Static
               Destination Definition, Using BSEND
What To Do
                       This type of data transmission has the advantage that no programming is necessary in the
                       user program of the communication partner.
                       Note that at the receiver you cannot tell when a transmission is taking place. Therefore, the
                       receiving CP 441 cannot prevent unprocessed data from being overwritten at the receiver.
                       Using the "Response to a CPU Stop" parameter, indicate whether data should continue to be
                       transmitted when the S7 CPU is also in STOP mode. The parameter is only available for the
                       CP 441-2 (as of 6ES7 441-2AA04-0AE0).
                       The receiving CPU determines data consistency (CPU 412/413: 16 bytes, CPU 414/417:
                       32 bytes).
                 Please note that the length of the data that can be transferred is limited to 450 bytes
                 depending on the CPU of the communication partner.
                 Note also that the parameter limits of the RK 512 protocol at the partner only allow you to
                 access data blocks 1 through 255 and to specify as the offset a maximum of 255.
                 Note
                 If you send data to a CP 441 by means of an S5 CP or a third-party device, in this mode you
                 must specify DB as the destination data block with the corresponding number and start
                 address (offset) in the request block. Interprocessor communication flags are not evaluated.
                 The connection via which the data is forwarded from the CP 441 to the S7 CPU is selected
                 by means of the CPU number. The length of the transferable data is 450 bytes.
Example
                 Table 6-14   Example of Calling SFB12 (BSEND) using RK 512:
                  STL
                  L                              50                                    Length = 50 bytes
                  T                              DB60.DBW806
                  L                              B#16#1                                Data type DB
                  T                              DB60.DBB820
                  L                              0                                     Not relevant
                  T                              DB60.DBB821
                  L                              20                                    Starting at data word 20 (offset)
                  T                              DB60.DBB822
                  L                              71                                    DB No. 71
                  T                              DB60.DBB823
                  CALL SFB 12, DB62
                  REQ                            :=DB60.DBX812.0                    Following a rising edge at the REQ
                  R                              :=DB60.DBX812.1                    parameter, the data for a length of 50
                                                                                    bytes starting at data byte 5 in DB 10 is
                  ID                             :=W#16#1000
                                                                                    sent to the communication partner.
                  R_ID                           :=DB60.DBD820
                                                                                    The partner stores the data in DB 71,
                  DONE                           :=DB60.DBX812.2                    starting at data word 20. The
                  ERROR                          :=DB60.DBX812.3                    destination information in the R_ID is
                                                                                    accepted once during CPU startup and
                  STATUS                         :=DB60.DBW802
                                                                                    cannot subsequently be changed.
                  SD_1                           :=p#DB10.DBX5.0 WORD 1
                  LEN                            :=DB60.DBW806
Request Table
                         The following table lists the data types which can be transmitted.
Table 6-15        Request table for "Sending data with RK 512 to the communication partner CP 441,
                  using BSEND"
Table 6-16        Specifications in message frame header of RK 512 protocol, "Sending data to
                  communication partner CP 441 with RK 512, using BSEND"
Further Information
                 You will find more information on data consistency in the reference manual on system
                 functions and standard functions System Software for S7 300/400, System and Standard
                 Functions..
See also
                 Parameters for the Communications Protocols (Page 5-3)
6.4.4          Sending Data with RK 512 to the S5 Communication Partner or Third-party Device
               with Static Destination Definition
What To Do
                       If your partner in the link is an S5 CP or a third-party device, proceed as follows:
                       The parameters of the destination data area are transmitted to the communication partner in
                       the RK 512 message frame header.
                       Note that the length of the transmittable data is restricted to 4 KB.
Example
                  STL
                  L                   50                               Length = 50 bytes
                  T                   DB60.DBW806
                  L                   B#16#31                          IPC flag bit 3 / data type DB
                  T                   DB60.DBB820
                  L                   30                               Interprocessor communication flag byte 30
                  T                   DB60.DBB821
                  L                   20                               Starting at data word 20 (offset)
                  T                   DB60.DBB822
                  L                   71                               DB No. 71
                  T                   DB60.DBB823
                  CALL SFB 12, DB62
                  REQ                 :=DB60.DBX812.0                  Following a rising edge at the REQ parameter, the data
                  R                   :=DB60.DBX812.1                  for a length of 50 bytes starting at data byte 5 in DB 10
                                                                       is sent to the communication partner.
                  ID                  :=W#16#1000
                                                                       The partner stores the data in DB 71, starting at data
                  R_ID                :=DB60.DBD820
                                                                       word 20. Interprocessor communication flag byte and
                  DONE                :=DB60.DBX812.2                  IPC bit are also transferred. The destination information
                  ERROR               :=DB60.DBX812.3                  in the R_ID is accepted once during CPU startup and
                                                                       cannot subsequently be changed.
                  STATUS              :=DB60.DBW802
                  SD_1                :=p#DB10.DBX5.0 WORD 1
                  LEN                 :=DB60.DBW806
Request Table
                       The following table lists the data types which can be transmitted.
                       Data destination DB:
Table 6-18     Request table for "Sending data to an S5 communication partner or third-party device with RK 512, data
               destination DB"
Table 6-19   Specifications in message frame header of RK 512 protocol, "Sending data to
             an S5 communication partner or third-party device with RK 512, data destination DB"
Request Table
                    The following table lists the data types which can be transmitted.
                    Data destination DX:
Table 6-20   Request table for "Sending data to an S5 communication partner or third-party device
             with RK 512, data destination DX"
Table 6-21       Specifications in message frame header of RK 512 protocol, "Sending data to an S5 communication partner or
                 third-party device with RK 512, data destination DX"
Transmission Sequence
                 The figure below illustrates how data is sent to a communication partner with dynamically
                 modifiable destination definition using RK 512.
                      <RXUSURJUDPPDEOHFRQWUROOHU                 &RPPXQLFDWLRQSDUWQHU
                       DFWLYH                         6
                                                                                 1R
                       6)%                                                       SURJUDPPLQJ
                       387                           5.
                                                     SURWRFRO                    QHFHVVDU\
                 Figure 6-3    Sending data to a communication partner with dynamic destination definition with the
                               RK 512 computer link
                       Note
                       If you send data to a CP 441 by means of an S5 CP or a third-party device, in this mode you
                       must specify DB as the destination data block with the corresponding number and start
                       address (offset) in the request block. Interprocessor communication flags are not evaluated.
                       The connection via which the data is forwarded from the CP 441 to the S7 CPU is selected
                       by means of the CPU number.
Example
                    STL
                    CALL SFB 15, DB52                                               When this SFB is called, at a positive edge at
                                REQ            := DB400.DBX0.0                      bit DBX0.0, data is sent to the
                                                                                    communication partner, where it is placed in
                                ID             :=W#16#1000
                                                                                    DB30. If several data areas are sent at the
                                DONE           := DB400.DBX0.4
                                                                                    same time, additional SD_i and ADDR_i pairs
                                ERROR          := DB400.DBX0.5                      can be assigned parameters.
                                STATUS         := DB400.DBW12
                                ADDR_1         := P#DB30.DBX 0.0 WORD 10
                                ADDR_2
                                ADDR_3
                                ADDR_4
                                SD_1           := P#DB10.DBX 0.0 WORD 10
                                SD_2
                                SD_3
                                SD_4
                   See the CP441 ANY demo project for instructions on how to change the send and receive
                   parameters of the ANY data type at runtime. The demo project is in the "Examples" STEP 7
                   catalog under CP441.
Request Table
                   The following table lists the data types which can be transmitted.
Table 6-23 Request table for "Sending data with RK 512 to the communication partner CP 441, using PUT"
  Source, PUT     To Destination,      Parameter Assignment in the PUT SFB,          Parameter Assignment in PUT SFB,
    from S7       Communication             Parameter SD_1 (Source)                    Parameter ADDR (Destination)
                     Partner          S-TYPE     S-DBNO       S-Offset (byte)     D-TYPE       D-DBNO        D-Offset (words)
    Data block         Data block        DB          1-*        0-*            DB        1-255            0-255
       Flag            Data block        MB      irrelevant     0-  *          DB        1-255            0-255
      Inputs           Data block        IB      irrelevant     0-*            DB        1-255            0-255
     Outputs           Data block        QB      irrelevant     0-*            DB        1-255            0-255
    Counters           Data block        C       irrelevant     0-*            DB        1-255            0-255
      Times            Data block         T      irrelevant     0-  *          DB        1-255            0-255
*This value is dictated by the CPU that you use.
** Dependent on the CPU of the communication partner, max. 450 bytes
Abbreviations used in the table: S-TYPE= source type, S-DBNO= source data block number, S-Offset= source start
address, D-TYPE= destination type, D-DBNO= destination data block number, D-Offset= destination start address
Table 6-24     Specifications in Message Frame Header of RK 512 Protocol, "Sending Data to Communication partner
               CP 441 with RK 512, Using PUT"
Further Information
                       You will find more information on data consistency in the reference manual on system
                       functions and standard functions System Software for S7 300/400, System and Standard
                       Functions..
See also
                       Overview of the System Function Blocks (Page 6-2)
Transmission Sequence
                 Fetching data from a communication partner with RK 512:
                 The figure below illustrates how data are fetched from a communication partner.
                      <RXUSURJUDPPDEOHFRQWUROOHU                &RPPXQLFDWLRQSDUWQHU
                       DFWLYH                       6
                      6)%                                                         1R
                      *(7                            5.                       SURJUDPPLQJ
                                                     SURWRFRO                     QHFHVVDU\
Figure 6-4 Fetching data from a communication partner with the RK 512 computer connection
                       Please note that the partner cannot recognize when you fetch data. It is therefore not
                       possible to prevent as yet unprocessed data being fetched from the partner. Using the
                       "Response to a CPU Stop" parameter, indicate whether data should continue to be
                       transmitted when the S7 CPU is also in STOP mode. The parameter is only available for the
                       CP 441-2 (as of 6ES7 441-2AA04-0AE0). Interprocessor communication flags are not
                       supported when connecting with S5 CPs. The sending and receiving CPUs determine data
                       consistency (CPU 412/413: 16 bytes, CPU 414/417: 32 bytes). The weaker partner in terms
                       of consistency determines the resulting consistency length for data transfer.
Further Information
                       You will find more information on data consistency in the reference manual on system
                       functions and standard functions System Software for S7 300/400, System and Standard
                       Functions..
                       Note
                       If you fetch data from a CP 441 by means of an S5 CP or a third-party device, you must
                       specify the source data type in the request block (S5 CP). In the case of the source data
                       type DB, you must specify the corresponding number and the start address (offset).
                       Interprocessor communication flags are not evaluated. The connection via which the data is
                       fetched from the S7 CPU is selected by means of the CPU number.
Example
                        STL
                        CALL SFB 14, DB14                                            When this SFB is called at a positive
                                       REQ            := DB10.DBX10.0                edge at bit DBX10.0, data is fetched
                                                                                     from the communication partner. The
                                       ID             :=W#16#1000
                                                                                     data source is specified at ADDR_1: DB
                                       NDR            := DB10.DBX10.2
                                                                                     10, 10 words starting at byte 6. This
                                       ERROR          := DB10.DBX10.3                data is placed in DB 100, starting at
                                       STATUS         := DB10.DBW20                  byte 0. The same data length must be
                                       ADDR_1         := P#DB10.DBX 6.0 WORD 10      specified! If several data areas are
                                       ADDR_2                                        fetched at the same time, additional
                                                                                     ADDR_i and RD_i pairs can be
                                       ADDR_3
                                                                                     assigned parameters.
                                       ADDR_4
                                       RD_1           := P#DB100.DBX 0.0 WORD 10
                                       RD_2
                                       RD_3
                                       RD_4
Request Table
                   The following table lists the data types which can be transmitted.
Table 6-26   Request table for "Fetching data with RK 512 from communication partner"
Source, Fetch     To Destination,   Parameter Assignment in the GET            Parameter Assignment in the GET SFB,
 (GET) from        Your S7 PLC       SFB, Parameter ADDR (Source)                   Parameter RD (Destination)
Communication
   Partner
                                    S-TYPE      S-DBNO        S-Offset      Length        D-TYPE       D-DBNO        D-Offset
                                                               (byte)      max. **450                                 (byte)
                                                                             bytes
    Data block        Data block       DB        * - 255     0 - 510***       1-*       DB         1-*         0-*
       Flag           Data block      MB       irrelevant    0 - 255*         1-*       DB         1-*         0-*
      Inputs          Data block       IB      irrelevant    0 - 255*         1-*       DB         1-*         0-*
     Outputs          Data block       QB      irrelevant    0 - 255  *       1-*       DB         1- *        0-*
    Counters          Data block       C       irrelevant    0 - 510 ***      1-*       DB         1- *        0-*
      Times           Data block        T      irrelevant    0 - 510 ***      1-*       DB         1- *        0-*
* The maximum value is determined by the partner CPU that you use.
** Dependent on your CPU and the CPU of the communication partner, max. 450 bytes.
*** Only even-numbered values are permitted for these data types. The maximum value is determined by the partner CPU.
Abbreviations used in the table: S-TYPE= source type, S-DBNO= source data block number, S-Offset= source start
address, length= source length, D-TYPE= destination type, D-DBNO= destination data block number, D-Offset=
destination start address
Table 6-27   Specifications in Message Frame Header of RK 512 Protocol, "Fetching Data from the Communication Partner
             with RK 512"
 Source, Fetch (GET) from            to the destination,                            Message frame header
   Communica. Partner                   your S7 PLC
                                                                   Byte 3/4            Byte 5/6            Byte 7/8
                                                                  Command         D-DBNO/D-Offset         Number in
                                                                    mode
        Data block                      Data block                    ED                DB/DW               words
            Flag                        Data block                    EM                DB/DW                bytes
           Inputs                       Data block                    EI                DB/DW                bytes
          Outputs                       Data block                    EQ                DB/DW                bytes
         Counters                       Data block                    EC                DB/DW               words
           Times                        Data block                    ET                DB/DW               words
Abbreviations: S-DBNO = destination data block number, S-Offset = source start address, DW = Offset in words
See also
                   Under the "Object Properties" dialog, the procedures for the RK 512 computer connection
                   (Page 5-12)
                   Overview of the System Function Blocks (Page 6-2)
6.5 Using the System Function Blocks with the ASCII Driver
Introduction
                       The same functions can be used for data transmission with the ASCII as with the 3964(R)
                       procedure. In other words, the information on the 3964(R) procedure also applies to the
                       ASCII driver.
                       In addition, when the ASCII driver is used with the RS 232C interface submodule, you can
                       read and control the RS 232C secondary signals. The following describes only what you
                       have to do to use these additional functions.
                        FB                   Meaning
                        FB 5                 The V24_STAT function allows you to read the signal states at the RS 232C
                        V24_STAT             interface of the CP 441.
                        FB 6                 The V24_SET function allows you to set/reset the outputs at the RS 232C
                        V24_SET              interface of the CP 441.
Introduction
                  The V24_STAT FB reads the RS 232C secondary signals from an interface of the CP 441
                  and makes them available to the user at the module parameters. The V24_STAT FB is
                  called statically (without conditions) in the cycle or alternatively in a time-controlled program.
                  The RS 232C secondary signals are updated each time the function is called (cyclic polling).
                  You select the interface by specifying at the V24_STAT FB the "local" ID of one of the
                  connections that uses this interface.
                  The binary result BR is not affected.
Block call
                             REQ :             =
                             ID:               =                                         9B67$7
                             NDR :             =                     (1                             (12
                             ERROR :           =                     5(4                            1'5
                             STATUS :          =                     ,'                        (5525
                             DTR_OUT:          =                                               67$786
                             DSR_IN:           =                                             '75B287
                                                                                               '65B,1
                             RTS_OUT:          =
                                                                                            576B287
                             CTS_IN:           =
                                                                                                &76B,1
                             DCD_IN:           =
                                                                                              '&'B,1
                             RI_IN:            =
                                                                                                 5,B,1
                  Note
                  The parameters EN and ENO are only present in the graphical representation (LAD or FBD).
                  To process these parameters, the compiler uses the binary result BR. The binary result is set
                  to signal state "1" if the block was terminated without errors. If there was an error, the BR is
                  set to "0".
                  Note
                  A positive input threshold voltage in the RS232 C input signals DSR, CTS, DCD and RI is
                  mapped respectively to the signal state "1" of the FB input signals DSR_IN, CTS_IN,
                  DCD_IN and RI_IN.
FB 5 V24_STAT Parameters
                       The following table lists the parameters of the 5 V24_STAT FB:
Example
                   STL
                           CALL FB 5, DB55
                                     REQ                     := DB30.DBX10.0
                                     ID                      :=W#16#1000
                                     NDR                     := DB30.DBX10.1
                                     ERROR                   := DB30.DBX10.2
                                     STATUS                  := DB30.DBW20
                                     DTR_OUT                 := DB30.DBX30.0
                                     DSR–IN                  := DB30.DBX30.1
                                     RTS_OUT                 := DB30.DBX30.2
                                     CTS_IN                  := DB30.DBX30.3
                                     DCD_IN                  := DB30.DBX30.4
                                     RI_IN                   := DB30.DBX30.5
See also
                  Data Transmission with the ASCII Driver (Page 2-35)
Introduction
                       The user can use the parameter inputs of the V24_SET FB to set or reset the corresponding
                       interface outputs of an interface of the CP 441. The V24_SET FB is called statically (without
                       conditions) in the cycle or alternatively in a time-controlled program.
                       You select the interface by specifying at the V24_SET FB the "local ID" of one of the
                       connections that uses this interface.
                       The binary result BR is not affected.
Block call
CALL V24_SET
REQ : =
                                    ID:               =                                        9B6(7
                                    DONE :            =                    (1                       (12
                                    ERROR :           =
                                                                           5(4                     '21(
                                                                           ,'                       (5525
                                    STATUS :          =
                                                                           576                     67$786
                                    RTS:              =
                                                                           '75
                                    DTR:              =
                       Note
                       The parameters EN and ENO are only present in the graphical representation (LAD or FBD).
                       To process these parameters, the compiler uses the binary result BR. The binary result is
                       set to signal state "1" if the block was terminated without errors. If there was an error, the BR
                       is set to "0".
6 V24_SET FB Parameters
                   The following table lists the parameters of 6 V24_SET FB:
Example
                   STL
                            CALL FB 6, DB56
                                       REQ         := DB40.DBX10.0
                                       ID          :=W#16#1000
                                       DONE        := DB40.DBX10.1
                                       ERROR       := DB40.DBX10.2
                                       STATUS      := DB40.DBW20
                                       RTS         := DB40.DBX30.2
                                       DTR         := DB40.DBX30.0
See also
                   Data Transmission with the ASCII Driver (Page 2-35)
6.6 Using the System Function Blocks with the Printer Driver
Introduction
                       The P_PRINT system function block (SFB) is available to you for outputting message texts to
                       a printer. PRINT transfers a process message to the CP 441, for example. The CP 441 logs
                       the process message on the connected printer.
What To Do
                       In the S7 user program of the CPU you must program the PRINT system function block
                       (SFB 16).
                       You specify as the ID the connection via which PRINT is to be executed.
                       The PRN_NR parameter (printer number) has no significance for the CP 441, since only one
                       printer can be addressed via a serial interface.
                       You specify the format string in the FORMAT parameter. Proceed as follows:
                       1. You must store the format string in a separate data block. If this block does not exist, you
                          must define it.
                           Make an entry in the declaration field of the DB to output a message text as in the
                           following example:
                           -- Name: Anna
                           -- Type: STRING
                           -- Start value: 'Content of message text: %N'
                       2. The DB for the format string can only be specified symbolically.
                           After the DB has been saved, you should therefore set symbolic representation under
                           "View" in the STL compiler and then enter a symbol for the data block in the symbol table
                           under "Options" (e.g. print_db). As the address and data type, you enter in the symbol
                           table the DB in which the format strings are stored.
                       3. Switch the view of your module in which you call "PRINT" to symbolic representation as
                          well, and enter "print_db".Anna as the FORMAT parameter at the system function block.
                       Up to four variables can be specified at SD_1 to SD_4 for printer output (the number of the
                       message text to be output is to be specified in the example).
Example
                   STL
                          CALL SFB 16, DB116                                      PRINT SFB call in an FB
                                REQ            :=DB60.DBX100.0
                                ID             :=W#16#1000
                                DONE           :=DB60.DBX100.1
                                ERROR          :=DB60.DBX100.2
                                STATUS         :=DB60.DBW110
                                PRN_NR         :=DB60.DBB120
                                FORMAT         :=”print_db”.Anna                  Byte 200 in DB 60 contains the message text
                                SD_1           :=p#DB60.DBX200.0 Byte 1           number
                                SD_2           :=
                                SD_3           :=
                                SD_4           :=
Important Notes
                   Note that the volume of data consisting of format string and variables that can be transferred
                   is limited to 400 bytes.
                   Note that if changes are made subsequently to the format string, you cannot enter them in
                   the string under "Initial value"; instead, you have to select the data view under "View" and
                   enter the changed format string under "Initial value".
                   Note that no string can be transferred in the case of the C (character) representation type.
                   Use the S representation type for strings.
                   Note that you cannot specify the string directly at the SD_i parameter in the case of the S
                   (string) representation type. As in the case of the format string, you have to store the string in
                   a data block and address it symbolically at the SD_i parameter.
See also
                   Connection Configuration (Page 5-5)
6.7 Summary
Overview
                       The tables below summarize the following information on the protocols:
                       • The possible communication types
                       • The system function blocks used
                       • Whether or not overwrite protection is possible and
                       • The maximum length of transmittable data
Table 6-35 The following applies when sending data via the RK 512 computer connection:
Table 6-36 The following applies when fetching data via the RK 512 computer connection:
Printer Output
Table 6-37 The following applies to the output of message texts on a printer:
Start-up behavior
                       The CP 441 start-up is divided into two phases:
                       • Initialization (CP 441 in POWER ON mode)
                       • Parameter assignment
Initialization
                       As soon as the CP 441 is connected to the power supply, the firmware on the CP 441 is
                       prepared for operation after a hardware test program has been executed.
Parameter Assignment
                       During parameter assignment, the CP 441 receives the module parameters which have been
                       assigned to the current slot. The CP 441 is now ready for operation.
Note
                       Please note the following for the start-up behavior of the CP 441:
                       Note
                       After power on, the CP 441 requires several seconds for initialization and hardware and
                       memory testing before it is ready for operation. The parameter assignment attempts made
                       by the CPU during this phase are aborted and an error is entered in the diagnostic buffer:
                       "SDB processing error, error class 1", and the SDB is identified, and "Parameter assignment
                       error on module parameter assignment", and the SDB is identified. As soon as the module
                       test has been completed, parameter assignment is performed by the CPU without errors.
                       SFB calls in the user program will result in an error as long as the CP 441 has not been
                       parametered.
Introduction
                  Once the CP 441 has been started up, all data is exchanged between the CPU and the
                  CP 441 by means of the system function blocks. The operating mode transition behavior of
                  the CP 441 depends on the operating mode of the CPU.
CPU-STOP
                  Communication direction CPU > CP:
                  Communication between the CPU and CP 441 still takes place even when the CPU is in
                  STOP mode. When the CPU is in STOP mode, the initiated SFB requests (e.g. BSEND) on
                  the CPU are fully executed and the data is transferred in its entirety to the CP 441 and
                  forwarded to the communication partner.
                  Communication direction CP > CPU:
                  The message frames are received in the CP 441. Any attempt to send the data on to the
                  CPU is aborted with an error message
CPU RUN
                  The CP 441 does not recognize how the CPU switches to RUN mode (cold restart or restart
                  following CPU STOP). The CP 441 behaves identically in both cases.
Diagnostic Interrupt
                  The CP 441 can trigger a diagnostic interrupt on the CPU assigned to it. CP 441 provides
                  4 bytes of diagnostics information at the S7-400 backplane bus. This information is analyzed
                  via the user program (OB 82) or using a programming device to read from the CPU
                  diagnostic buffer.
                  The CP 441 also writes diagnostic events which have triggered a diagnostic interrupt to its
                  diagnostic buffer.
                  When a diagnostic interrupt event occurs, the EXTF LED (red) lights up.
See also
                  Subsequent Loading of Firmware Updates (Page 5-20)
                  Diagnostics Messages of the System Function Blocks (Page 8-4)
                  Diagnostics Via the Error Signaling Area SYSTAT (Page 8-8)
                  Error Numbers in the Response Message Frame (Page 8-21)
                  Diagnostics via the diagnostic buffer of the CP 441 (Page 8-23)
Display Functions
                       The display elements of the CP 441 provide information on the CP 441. The following
                       display functions are distinguished:
                       • Special displays
                           – TXDSending active; lights up when the CP is sending user data via the interface.
                           – RXDReceiving active; lights up when the CP is sending user data via the interface.
                       • Group error displays
                           – INTF internal error
                           – EXTF external error
                       • Interface fault LED
                           – FAULT interface error
See also
                       Subsequent Loading of Firmware Updates (Page 5-20)
Status Parameter
                       Every system function block has a STATUS parameter for error diagnostics. The STATUS
                       message numbers always have the same meaning, irrespective of which system function
                       block is used.
                       The tables below are copied from the STEP 7 manual and represent only the current status.
                       Refer to the original tables if you discover discrepancies.
Further Information
                       For further information on using the variable table, see the STEP 7 manual Configuring
                       Hardware and Communication Connections with STEP 7 V5.0.
                  The SYSTAT error message area is a data area on the CP 441 by means of which you can
                  query the device status of an interface using the STATUS system function block.
                  Note
                  Because the STATUS request is executed asynchronously to the rest of the requests
                  running at an interface, an SFB with a specific R_ID cannot be assigned to the error
                  messages. This means that although SYSTAT can display which errors have occurred at an
                  interface, it cannot show which SFB call (R_ID number) triggered the error.
Errors/Events
                  The SYSTAT messages are entered in bytes 2 to 15 of the LOCAL parameter when the
                  STATUS SFB is called. In addition to the error byte (byte 2), the first six errors/events are
                  displayed. Error event 1 is the oldest.
                  If other error events occur, these cannot be reported until the "old" entries are deleted. The
                  error-signaling area must therefore be deleted in good time. This is done when the STATUS
                  SFB is called.
                  The errors/events are stored as follows:
                  • Byte 0 Operating mode of CP (02H for RUN, 05H for faulty)
                  • Byte 1 Reserved
                  • Byte 2
                     – Bit 0 -F Error entered in SYSTAT
                     – Bit 1 -U Error overflow
                     – Bit 2 -B Break
                  • Byte 3 Reserved
                  • Byte 4/5 Event 1
                  • Byte 6/7 Event 2
                  • Byte 8/9 Event 3
                  • Byte 10/11 Event 4
                  • Byte 12/13 Event 5
                  • Byte 14/15 Event 6
Example
                        STL
                        CALL SFB 22, DB22                                                                          STATUS SFB call in an FB
                                         REQ                  :=DB450.DBX0.0
                                         ID                   :=W#16#1000                                          The errors/events are entered in bytes 20-35 of
                                         NDR                  :=DB450.DBX0.4                                       DB450 following a rising edge of the REQ
                                                                                                                   parameter. SFB22 should not be run unless an
                                         ERROR                :=DB450.DBX0.5
                                                                                                                   error occurs in data transfer. For example, the
                                         STATUS               :=DB450.DBW12                                        error bit of a BSEND (ERROR parameter) can be
                                         PHYS                 :=p#DB450.DBX16.0 Byte 2                             used as the request bit for the STATUS (REQ).
                                                                                                                   Calling SFB22 automatically clears the error-
                                         LOG                  :=p#DB450.DBX18.0 Byte 2
                                                                                                                   signaling area of SYSTAT.
                                         LOCAL                :=p#DB450.DBX20.0 Byte 16
Numbering Scheme
                       The numbering scheme for the events in the error-signaling area SYSTAT has the following
                       structure:
                       %LWQR
                       67$786
                                                                                           (YHQWQXPEHU
                                   5HVHUYH               (YHQWFODVV                       (UURUQXPEHU
(YHQW
Event Classes
                     The table below describes the various event classes and numbers. Event classes and event
                     numbers are listed with hexadecimal notation.
Table 8-10 Error messages in the response message frame with RK 512
                       Note
                       The diagnostic buffer is a ring buffer for a maximum of 64 diagnostic entries. When the
                       diagnostic buffer is full, the oldest entry is deleted when a new entry is made in it. The most
                       recent entry always comes first. When the POWER OF the CP 441 is switched off, the
                       contents of the diagnostic buffer are lost.
                       Note
                       Diagnostic events in the diagnostic buffer of the CP 441 can be read using STEP 7 as of
                       Version 4.0.
                       All the user-relevant information in the CP diagnostic buffer is displayed to you on the
                       "Diagnostic Buffer" in the "Module Information" dialog. You can call the "Module Information"
                       dialog under STEP 7 from SIMATIC Manager.
                       Prerequisite: In order to obtain the status of the module, there must be an on-line
                       connection from the programming device to the programmable controller (on-line view in the
                       project window).
                   Proceed as follows:
                   1. Open the relevant SIMATIC 400 station (by double-clicking it or by choosing the Edit >
                      Open menu command).
                   2. Open the "Hardware" object contained in it (again by double-clicking it or by choosing the
                      Edit > Open menu command).
                      Result: The window containing the configuration table appears.
                   3. Select the CP 441 in the configuration table.
                   4. Choose the PLC > Module Information menu command.
                      Result: The "Module Information" dialog appears for the CP 441. The "General" tab is
                      displayed by default the first time you call it.
                   5. Select the "Diagnostic Buffer" tab.
                      Result: The "Diagnostic Buffer" tab displays the most recent diagnostic events of the
                      CP 441. Any "result details" on the cause of the problem appears in the lower part of the
                      tab.
                   The event's numeric code is displayed in the "Event ID" field. The 16#F1C8 leader for
                   interface 1 and the 16#F9C8 leader for interface 2 are non-variables. The rest of the ID code
                   corresponds to event class and event number of the events. By clicking the "Help on Event"
                   button you can display the help text on the event text.
                   If you click the "Update" button, the current data is read from the CP 441. By clicking the
                   "Help on Event" button you can display a help text on the selected diagnostic event with
                   information on error correction.
See also
                   Diagnostics via the Error Signaling Area SYSTAT (Page 8-8)
Introduction
                       The CP 441 can trigger a diagnostic interrupt on the assigned CPU, thus indicating a
                       malfunction of the CP 441. You can specify during parameter assignment (as of STEP 7
                       V5.0, SP2) whether the CP 441 is to trigger a diagnostic interrupt or not in the event of
                       serious errors.
                       "Diagnostic interrupt = NO" is the default.
Diagnostic Interrupt
                       In the event of a fault the CP 441 provides diagnostic information on the S7-400 backplane
                       bus. In response to a diagnostic interrupt, the CPU reads the system-specific diagnostic data
                       and enters it in its diagnostic buffer. You can read the contents of the diagnostic buffer on
                       the CPU using a programming device.
                       When a diagnostic interrupt event occurs, the INTF LED (red) lights up. In addition, the
                       OB 82 is called with this diagnostic data as start information.
Organization block OB 82
                       You have the option of programming error responses in the user program in the OB 82.
                       If no OB 82 is programmed, the CPU automatically enters STOP mode in the event of a
                       diagnostic interrupt.
                                                                             2. bytes
                             7             6             5               4              3              2       1              0
                             0             0             0               1              1              1       0              0
                                          %\WH
                                                                      
(UURURQLQWHUIDFH ,)
(UURURQLQWHUIDFH ,)
                                               %\WH                                   ,QWHUIDFH
                                                                      
,QFRUUHFWSDUDPHWHUV
/LQHEUHDN
                                               %\WH                                  ,QWHUIDFH
                                                                      
Introduction
                       The programming example in this chapter describes how to create a project and, by means
                       of a simple data transfer operation, the basic usage of the system function blocks for
                       operating the CP 441 communication processor.
                       The individual steps described for configuring and programming should make it easier for
                       you to create a project.
                       Because only the general procedure is presented here and the sequence of the individual
                       steps may vary over the course of time in the individual STEP 7 packages, you should also
                       consult the current documentation for these packages.
                       At the end of the chapter you will find an example of how to program the output of message
                       texts on a printer.
Objective
                       The programming example
                       • aims to show the most important functions,
                       • is clear and easy to understand,
                       • can easily be extended for your own purposes.
                       The example shows how a connection to a communication partner can be configured using
                       the system function blocks BSEND and BRCV (for sending and receiving data respectively).
                       The CP 441 modules are parameterized by the CPU at CPU start-up
Prerequisite
                       The example can be executed with the minimum hardware equipment.
Application
                  To try out the program example, you could use the following devices:
                  • An S7-400 automation system (mounting rack, power supply, CPU 414 or CPU 417)
                  • A CP 441
                  • A programming device (e.g. PG 740)
                  Data transmission is from interface 1 to interface 2 of the CP 441. If you use a CP 441-1 you
                  can ignore the settings for interface 2; your communication partner receives the data.
Device Configuration
'%
'%
Configuration
                       An S7-400 station is configured using "HW Config" in STEP 7. Place the modules in the
                       configuration table in accordance with your hardware configuration.
                       In the configuration table you must configure the controller setup as follows:
                       • Slots 1 and 2: Power supply (e.g. PS 10A) the number of occupied slots depends on the
                         type of power supply used.
                       • Slot 4: CPU
                       • Slot 10: CP 441
Parameter assignment
                       Once you have arranged the modules in your mounting rack, you can double-click the CP
                       441 (in the configuration table) to display the "Properties" dialog:
                       1. Under "Basic Parameters", specify in the "Interface" entry field (1 or 2) the type of the
                          interface submodule installed here.
                       2. Choose the "Parameters" button in the "Properties" dialog.
                           Result: The CP 441: Configuration Package for Point to Point Communication parameter
                           assignment interface for assigning CP 441 protocol parameters is opened.
                       3. Select the desired transmission protocol ("RK 512", "3964(R)", "ASCII" or "Printer").
                           Result: The parameter assignment interface that is available in accordance with the
                           protocol is displayed. The gray buttons allow you to open additional parameter
                           assignment dialogs.
                       4. Accept the default settings, and return to the configuration table.
                       5. If necessary, carry out steps 1. to 4. in accordance with your configuration for the second
                          interface of the CP 441.
Configuring a Connection
                  You configure a point-to-point connection between your CP 441 and the communication
                  partner using "NETPRO". Proceed as follows:
                  1. Enter the connection in the connection table.
                  2. Set the object properties of the connection.
General
                       In OB 1, the blocks FC21 and FC 23 are called cyclically, FC21 for sending data
                       (SFB BSEND) and FC 23 for receiving data (SFB BRCV).
                       In the example, the system function blocks BSEND and BRCV work with the data blocks
                       DB 12 and DB 13 as instance DBs, and with DB 42 and DB 43 as send and receive DBs
                       respectively.
                       In the example the system function blocks are parameterized partly via constants and partly
                       via symbolically addressed actual operands.
                       Connection_ID 1000 (hexadecimal) is entered for the BSEND and the associated STATUS.
                       Connection_ID 1001 (hexadecimal) is entered for the BRCV and the associated STATUS. If
                       you are using a CP 441-1, you must enter connection ID 1000 (hexadecimal) for the BRCV
                       and the associated STATUS. You can then receive data from your communication partner
                       via interface 1.
                       For the data transmission the block pair BSEND and BRCV are used. The same R_ID is
                       used for both blocks.
                       The values for R_ID are accepted once during startup and cannot subsequently be changed.
                       This ensures that the SFBs BSEND and STATUS are run through once at the beginning with
                       REQ = "0" (so the edge rises from "0" to "1" at the REQ input), the REQ parameter in
                       OB 100 is set to "0" once after a complete restart.
Description of FC 21 (SEND)
                       The "Generate edge P_SEND_REQ" program section:
                       BSEND is run through once at the start with P_BSEND_REQ =0. BSEND_REQ is then set to
                       1. The BSEND request is started when a signal state change from 0 to 1 is detected at the
                       BSEND_REQ control parameter.
                       When BSEND_DONE = 1 or BSEND_ERROR = 1, BSEND_REQ is reset to "0".
                       The "BSEND_DONE = 1" program section
                       If the transfer is successful, BSEND_DONE at the parameter output of the BSEND is set to
                       "1".
                       To distinguish between consecutive transfers, "BSEND_COUNTER_OK" send counter is
                       included in data word 0 of the source block DB 42.
                       The "BSEND_ERROR = 1" program section
                       If BSEND runs through with BSEND_ERROR=1, the BSEND_COUNTER_ERR error counter
                       in data word 2 increments. The BSEND_STATUS is copied, because it will be overwritten
                       with 0 in the next run and could not subsequently be read.
                       In addition, in the event of an error, the STATUS system function block is activated so that
                       detailed fault messages (LOCAL parameter) can be read.
Description of FC 23 (RECEIVE)
                 The "Enable Receive Data" program section:
                 For data to be received, the receive enable (control parameter BRCV_EN_R for the BRCV
                 block) must have the signal "1".
                 The "BRCV_NDR=1" program section:
                 When BRCV_NDR is set, new data has been received and the BRCV_COUNTER_OK
                 receive counter increments.
                 The "BRCV_ERROR = 1" program section:
                 If the startup is unsuccessful, i.e. if the ERROR bit is set at the parameter output of BRCV,
                 the BRCV_COUNTER_ERR error counter increments. The BSEND_STATUS is copied,
                 because it will be overwritten with 0 in the next run and could not subsequently be read.
                 In addition, in the event of an error, the STATUS system function block is activated so that
                 detailed fault messages (LOCAL parameter) can be read.
                 All relevant values can be observed for test purposes in the variable table.
                 Special Features of the CP 441-1:
                 If you want to receive data from your communication partner, the partner must specify DX 33
                 (21 hexadecimal) as the destination address. In this way BRCV is referenced with R_ID 21
                 (hexadecimal) in FC 23.
See also
                 Diagnostics via the Error Signaling Area SYSTAT (Page 8-8)
Blocks Used
                       The table below shows the blocks used for the sample program.
                       Prerequisite: All symbolic designations have already been declared in the symbol table.
See also
                       Data Transmission with 3964(R) Using BSEND and BRCV (Page 6-9)
Introduction
                 The following sections describe an example of how to send data to a printer. The example
                 program indicates the procedure for the editing data and assigning parameters for the
                 PRINT SFB.
Prerequisite
                 You have already configured the messages using the CP 441: Configuration Package for
                 Point to Point Communication parameter assignment inteface (Hardware > Properties of
                 CP 441 > Parameter > Messages). The messages have been transferred together with the
                 other parameter data on the CP 441.
                 Message text examples:
                 1:\B%C\-B F220340 Share of component no.\B%I\-B reached\B%10.2RKg\-B
                 2:\B%S\-B H244312 Bypass fitting closed
                 3:\B%S\-B h620125 Failure of station input hydraulic mechanism
                 4:\B%S\-B P215055 Tank gauge pressure %12.4R bar
                 The result on the printer for message text No. 1, for example, is:
                 "W F220340 proportion component No. 6 attained 1.45E+02 Kg"
General
                       The organization block OB 1 contains the cyclic program.
                       In the example the PRINT system function block works with the DB 16 data blocks, and the
                       STATUS system function block works with the DB 22 data block as the instance DB
                       (clipboard).
                       The same connection ID is to be entered at the appropriate input parameters for the PRINT
                       SFB and the associated STATUS SFB in the program, since the STATUS SFB works on a
                       connection-related basis.
                       The PRINT request is supplied with data from DB 146, DB 160 and DB 165.
                       In FB 50, the PRINT SFB and the STATUS SFB are initialized by means of a one-off call
                       with the signal "0" at the REQ input parameter.
Blocks Used
                   The table below shows the blocks used for the sample program.
                   Prerequisite: All symbolic designations have already been declared in the symbol table.
Installation
                   The hardware for the example is completely set up and the programming device is
                   connected.
                   Once the CPU has been reset (operating mode STOP), transfer the example corresponding
                   to your hardware configuration fully into the user memory. Then use the operating mode
                   switch to change from STOP to RUN_P (start-up characteristic CRST).
Malfunction
                   If an error occurs during start-up, the block calls to be processed cyclically will not be
                   executed and the error LED INTF or EXTF on the CPU will be set. Detailed information on
                   the cause of the error can be found in the diagnostic buffer.
                                                                 Technical Specifications
                        Power supply                                     max. 0.6 A / 5 V
                        Power loss                                       3.5 W
                        Degree of protection                             IP20
                        Dimensions W x H x D                             25 x 290 x 210 mm
                        Weight                                           approx. 0.8 kg
                        Display elements                                 LEDs for transmitting (TXD), receiving (RXD) and
                                                                         interface fault (FAULT) Group alarm LEDs for internal
                                                                         fault (INTF) and external fault (EXTF)
                        Supplied protocol drivers                        •   ASCII driver
                        CP 441-1                                         •   3964(R) procedure
                                                                         •   Printer
                        Supplied protocol drivers                        •   ASCII driver
                        CP 441-2                                         •   3964(R) procedure
                                                                         •   RK512 computer connection
                                                                         •   Printer
                                                                         •   Loadable drivers
                        Interrupts
                        • Diagnostic Interrupt                           parameterizable
                        Diagnostic functions
                        • Indicators for internal and external           yes, 2 red LEDs
                           faults
                        Diagnostic information dump                      Yes
Transmission Rates
                       The tables below indicate the transmission times required depending on the transmission
                       protocol selected.
                       Two S7-400s, each with a CPU 417 (6ES7/ 417-1XJ00-0AB0) and a CP 441-2, were used to
                       measure the time. A BSEND system function block was programmed in the user program of
                       the active CPU, and a BRCV system function block was programmed in the user program of
                       the passive CPU. The second interface of the CP 441-2 was not parametered. The time that
                       elapsed between the initiation and completion of the request was measured.
                       If you are using a CPU 412, 413 or 441, you should add around 20% to the times indicated
                       here.
                       You will find the runtimes of the communication blocks in the relevant CPU manual.
ASCII driver
Baud rate (bd)       300         600      1200      2400      4800       9600    19200   38400   57600    76800    115200
User data
1 byte              0.164       0.082     0.041    0.026     0.023       0.023   0.023   0.023    0.023   0.023     0.023
10 bytes            0.466       0.241     0.121    0.062     0.039       0.030   0.023   0.023    0.023    0.023    0.023
20 bytes            0.842       0.421     0.211    0.120     0.061       0.040   0.031   0.023    0.023    0.023    0.023
50 bytes            1.940       0.977     0.497    0.271     0.151       0.091   0.045   0.033    0.030    0.026    0.023
100 bytes           3.776       1.895     0.948    0.497     0.271       0.151   0.091   0.046    0.038    0.034    0.030
200 bytes           7.459       3.730     1.866    0.949     0.497       0.271   0.151   0.090    0.060    0.047    0.038
500 bytes           18.484      9.249     4.656    2.357     1.216       0.641   0.356   0.207    0.138    0.132    0.091
1000 bytes          36.864     18.451     9.267    4.679     2.379       1.237   0.663   0.380    0.274    0.228    0.159
2000 bytes          73.629     36.880 18.514       9.324     4.725       2.428   1.280   0.711    0.511    0.458    0.319
4000 bytes         147.233     73.737 36.989 18.603          9.410       4.819   2.516   1.370    0.994    0.805    0.605
3964(R) Procedure
Table A-4 Transmission Times for the 3964(R) Procedure (in Seconds)
Baud rate (bd)    300       600     1200     2400     4800     9600      19200     38400      57600     76800      115200
User data
1 byte            0.287    0.151    0.084    0.050    0.036   0.027      0.023     0.019      0.018      0.018      0.018
10 bytes          0.618    0.316    0.166    0.092    0.056   0.038      0.030     0.023      0.023      0.020      0.018
20 bytes          0.986    0.500    0.259    0.138    0.079   0.049      0.036     0.030      0.023      0.023      0.023
50 bytes          2.089    1.052    0.535    0.276    0.150   0.083      0.053     0.038      0.030      0.030      0.025
100 bytes         3.926    1.971    0.995    0.507    0.263   0.143      0.083     0.053      0.042      0.038      0.030
200 bytes         7.604    3.811    1.914    0.967    0.496   0.256      0.140     0.083      0.060      0.053      0.041
500 bytes        18.657    9.350    4.694    2.369    1.205   0.624      0.334     0.188      0.143      0.117      0.091
1000 bytes       37.059    18.563   9.314    4.689    2.377   1.222      0.644     0.354      0.258      0.210      0.165
2000 bytes       73.873    36.992   18.553   9.332    4.723   2.420      1.268     0.692      0.498      0.404      0.308
4000 bytes       147.497   73.852   37.028   18.617   9.410   4.813      2.508     1.355      0.972      0.780      0.590
Table A-5 Transmission Times for the RK 512 Computer Connection (in Seconds)
Baud rate (bd)    300       600     1200     2400     4800     9600      19200     38400      57600     76800      115200
User data
1 byte            1.060    0.532    0.287    0.165    0.106   0.075      0.060     0.053      0.050      0.049      0.048
10 bytes          1.354    0.679    0.361    0.203    0.128   0.084      0.065     0.055      0.052      0.051      0.050
20 bytes          1.722    0.863    0.453    0.249    0.150   0.096      0.071     0.058      0.054      0.053      0.051
50 bytes          2.826    1.415    0.729    0.387    0.218   0.131      0.088     0.068      0.061      0.058      0.056
100 bytes         4.663    2.337    1.190    0.619    0.334   0.190      0.119     0.084      0.073      0.069      0.064
200 bytes         9.079    4.556    2.305    1.179    0.618   0.340      0.198     0.129      0.107      0.098      0.090
500 bytes        21.653    10.892   5.514    2.816    1.470   0.810      0.469     0.307      0.249      0.228      0.185
1000 bytes       43.304    21.622   10.896   5.570    2.894   1.570      0.895     0.577      0.462      0.416      0.344
2000 bytes       85.912    43.099   21.795   11.087   5.742   3.105      1.755     1.125      0.890      0.802      0.673
4000 bytes       171.612   86.027   43.500   22.127 11.449    6.161      3.469     2.203      1.737      1.570      1.321
Pin Assignment
                          The table below shows the pin assignment for the 9-pin subminiature D male connector in
                          the front panel of the RS 232C interface submodule.
Table B-1 Pin assignment for the 9-pin subminiature D male connector of the RS 232C interface submodule
                      1
                                4      DTR                               Output                 Communication terminals
              6
                      2
                                       Data Terminal Ready                                      ready
              7
              8
                      3         5      GND Ground                        -                      Signal ground (GNDint)
                      4
              9
                      5
                                6      DSR Data Set Ready                Input                  Ready for operation
                                7      RTS Request To Send               Output                 Activate transmitter
                                8      CTS Clear To Send                 Input                  Ready for sending
                                9      RI Ring Indicator                 Input                  Receiving call
* View from the front
Cables
                          If you make your own cables you must remember that unconnected inputs at the
                          communication partner may have to be connected to open-circuit potential.
                          Please note that you must only use shielded connector casings. A large surface area of both
                          sides of the cable shield must be in contact with the connector casing.
                          Caution
                          Never connect the cable shield with the GND, as this could destroy the submodules. GND
                          must always be connected on both sides (pin 5), otherwise the submodules could again be
                          destroyed.
                          The following pages contain examples of cables for a point-to-point connection between the
                          CP 441 and S7 modules or SIMATIC S5.
&3 &RPPXQLFDWLRQSDUWQHU
5HFHLYHU 6HQGHU
5['7['
6HQGHU 5HFHLYHU
7['5['
576&76
&76576
'65'75
'75'65
*1'*1'
RS 232C Cables (S7/M7 (CP 441) - CP 544, CP 524, CPU 928B, CPU 945, CPU 948)
                       The figure below illustrates the cable for a point-to-point connection between a CP 441 and a
                       CP 544, CP 524, CPU 928B, CPU 945 or CPU 948.
                       You require the following female/male connectors for the cables:
                       • At the CP 441 side: 9-pin subminiature D female with screw interlock
                       • At communication partner: 25-pin subminiature D male with clip fixing
&3 &RPPXQLFDWLRQSDUWQHU
5HFHLYHU 6HQGHU
5['7['
6HQGHU 5HFHLYHU
7['5['
576&76
&76576
'65'75
'75'65
*1'*1'
                                                                   &DEOHW\SH
                            &DVLQJVKLHOG                                                               &DVLQJVKLHOG
                                                                /,<&<[
Figure B-2 RS 232C cable CP 441 - CP 544, CP 524, CPU 928B, CPU 945, CPU 948
&3 &RPPXQLFDWLRQSDUWQHU
576&76
&76576
'65'75
'75'65
*1'*1'
                                                             &DEOHW\SH
                  &DVLQJVKLHOG                           /,<&<[                        &DVLQJVKLHOG
&3 &RPPXQLFDWLRQSDUWQHU
576&76
&76576
'65'75
'75'65
*1'*1'
                                                                &DEOHW\SH
                         &DVLQJVKLHOG                                                               &DVLQJVKLHOG
                                                             /,<&<[
RS 232C Cable (S7/M7 (CP 441) - IBM Proprinter (PT 88), DR 230)
                 The figure below illustrates the cable for a point-to-point connection between a CP 441 and
                 an IBM Proprinter with a serial interface (PT 88 or IBM-compatible printer).
                 You require the following female/male connectors for the cable:
                 • At the CP 441 side: 9-pin sub-D socket
                 • With IBM Proprinter: 25-pin sub-D male connector
&3 3ULQWHU
                      5HFHLYHU                                                                         6HQGHU
                                    5['7['
                        6HQGHU                                                                        5HFHLYHU
                                    7['5['
                                                                                                 IRU37
                                    '65
'75
'&'
*1'*1'
                                                        &DEOHW\SH
                   &DVLQJVKLHOG                     /,<&<[                            &DVLQJVKLHOG
&3 3ULQWHU
                             5HFHLYHU                                                                          6HQGHU
                                            5['7['
                               6HQGHU                                                                         5HFHLYHU
                                            7['5['
&76
'65'75
*1'*1'
Pin Assignment
                        The table belows shows the pin allocation for the 9-pin sub D female connector in the front
                        panel of the 20mA TTY interface submodule.
Table B-2 Pin Allocation for the 9-Pole Sub D Female Connector on the 20mA TTY Interface Submodule
Block Diagram
                       The figure below shows the block diagram for a 20 mA TTY interface IF963-TTY.
7['
                                                                            YRP
                                                                            8$57
                        7['
5['
                                                                            ]XP
                                                                            8$57
                        5['
P$ ,
9
P$ ,
P$ 09
Cables
                       If you make your own cables you must remember that unconnected inputs at the
                       communication partner may have to be connected to open-circuit potential.
                       Please note that you must only use shielded connector casings. A large surface area of both
                       sides of the cable shield must be in contact with the connector casing.
                       Caution
                       Never connect the cable shield with the GND, as this could destroy the submodules.
                       The following pages contain examples of cables for a point-to-point connection between the
                       CP 441 and S7 modules or SIMATIC S5.
20mA TTY Connecting Cable (S7/M7 (CP 441) - S7/M7 (CP 441/CP 340)
                 The figure below illustrates the cable for a point-to-point connection between a CP 441 and a
                 CP 441/CP 340.
                 For the cables you require the following male connectors:
                 • At the CP 441 side: 9-pin sub-d male with screw interlock
                 • At communication partner: 9-pin subminiature D male with screw fixing
&3 &RPPXQLFDWLRQSDUWQHU
5['7['
                              5HFHLYHU                                                            6HQGHU
                                    5['7['
                                      P$P$
                                                                                                           9
                                      P$P$
                 9
7['5['
                          6HQGHU                                                             5HFHLYHU
                                      7['5['
                                                            &DEOHW\SH
                  &DVLQJVKLHOG                          /,<&<[                         &DVLQJVKLHOG
                 Note
                 This cable type (LIYCY 4 x 0.14) can be used in the following lengths for the CP 441 as
                 communication partner:
                 • max. 1000 m at 9600 bps
                 • Max. 500 m at 19.2 Kbps
20mA TTY Connecting Cable (S7/M7 (CP 441) - CP 544, CP 524, CPU 928B, CPU 945, CPU 948)
                       The figure below illustrates the cable for a point-to-point connection between a CP 441 and a
                       CP 544, CP 524, CPU 928B, CPU 945 or CPU 948.
                       For the cables you require the following male connectors:
                       • At the CP 441 side: 9-pin sub-d male with screw interlock
                       • At communication partner: 25-pin subminiature D male with clip fixing
&3 &RPPXQLFDWLRQSDUWQHU
5['7['
                                  5HFHLYHU                                                             6HQGHU
                                        5['7['
                                          P$P$
                                                                                                                 9
                                           P$P$
                       9
7['5['
                                 6HQGHU                                                             5HFHLYHU
                                           7['5['
                                                                &DEOHW\SH
                        &DVLQJVKLHOG                         /,<&<[                          &DVLQJVKLHOG
                       Figure B-9       20mA TTY Connecting Cable CP 441 - CP 544, CP 524, CPU 928B, CPU 945,
                                        CPU 948
&3 &RPPXQLFDWLRQSDUWQHU
                                    P$7['
                 9
                                                                                                  6HQGHU
                                    5['7['
                          5HFHLYHU
                                  5['
P$
                                    P$
                 9
7['
                          6HQGHU
                                    7['5['
                                                                                            5HFHLYHU
                                    P$5['
6KLHOGFRQWDFW
                                                          &DEOHW\SH
                  &DVLQJVKLHOG                         /,<&<[                           &DVLQJVKLHOG
20mA TTY Connecting Cable (S7/M7 (CP 441) - CP 521 SI/CP 521 BASIC/ IBM-compatible printer)
                       The figure below illustrates the cable for a point-to-point connection between a CP 441 and a
                       CP 521 SI/CP 521 BASIC.
                       For the cables you require the following male connectors:
                       • At the CP 441 side: 9-pin sub D male with screw interlock
                       • At communication partner: 25-pin subminiature D male with screw interlock
&3 &RPPXQLFDWLRQSDUWQHU
                                           P$7['
                       9
                                                                                                        6HQGHU
                                           5['7['
                                   5HFHLYHU
                                         5['
P$
                                           P$
                       9
7['
                                  6HQGHU
                                           7['5['
                                                                                                 5HFHLYHU
                                           P$5['
                                                                     6KLHOG
                                                                     &DEOHW\SH
                         &DVLQJVKLHOG                          /,<&<[                             &DVLQJVKLHOG
20mA TTY Connecting Cable (S7/M7 (CP 441) - CPU 944/AG 95)
                 The figure below illustrates the cable for a point-to-point connection between a CP 441 and a
                 CPU 944/AG 95.
                 For the cables you require the following male connectors:
                 • At the CP 441 side: 9-pin sub D male with screw interlock
                 • At communication partner: 15-pin sub D male with clip fixing
&3 &RPPXQLFDWLRQSDUWQHU
                                    P$7['
                 9
                                                                                                  6HQGHU
                                    5['7['
                          5HFHLYHU
                                  5['
P$
                                    P$
                 9
7['
                          6HQGHU
                                    7['5['
                                                                                            5HFHLYHU
                                    P$5['
6KLHOGFRQWDFW
                                                          &DEOHW\SH
                  &DVLQJVKLHOG                         /,<&<[                           &DVLQJVKLHOG
Pin Assignment
                        The table below shows the pin assignment for the 15-pin subminiature D female connector in
                        the front panel of the X27 interface submodule.
Table B-3 Pin assignment for the 15-pin subminiature D female connector of the X27 interface submodule
Cables
                        If you make your own cables you must remember that unconnected inputs at the
                        communication partner may have to be connected to open-circuit potential.
                        Please note that you should only use shielded connector casings. A large surface area of
                        both sides of the cable shield must be in contact with the connector casing.
                        Caution
                        Never connect the cable shield with the GND, as this could destroy the submodules. GND
                        must always be connected on both sides (pin 8), otherwise the submodules could again be
                        destroyed.
                        The following pages contain examples of cables for a point-to-point connection between the
                        CP 441 and S7 modules or SIMATIC S5.
&3 &RPPXQLFDWLRQSDUWQHU
                                                                                   
                                    7 % 5 % 
                    6HQGHU                                                                            5HFHLYHU
                                    5 $ 7 $ 
                                                
                                   5 % 7 % 
                    5HFHLYHU                                                                            6HQGHU
                                    *1'*1'
6KLHOG
                                                        &DEOHW\SH
                   &DVLQJVKLHOG                    /,<&<[[                         &DVLQJVKLHOG
                                                 7 $ 7 % DQG5 $ 5 %
                                                       WZLVWHGSDLUV
                  ,QWKHFDVHRIFDEOHVORQJHUWKDQP\RXPXVWVROGHULQ
                   DWHUPLQDWLQJUHVLVWRURIവRQWKHUHFLSLHQWVLGH
Figure B-13 X27 cable CP 441 - CP 441/CP 340 for RS 422 operation (four-wire mode)
                 Note
                 This cable type can be used in the following lengths for the CP 441 as communication
                 partner:
                 • max. 1200 m at 19 200 bps
                 • max. 500 m at 38 400 bps
                 • max. 250 m at 76 800 bps
                 • max. 200 m at 115 200 bps
&3 &RPPXQLFDWLRQSDUWQHU
                                              6HQGHU                                                                               6HQGHU
                                                             5 $ 5 $ 
                                                                                                       
                                                            5 % 5 % 
                                              5HFHLYHU                                                                          5HFHLYHU
                                                             *1'*1'
6KLHOG
                                                                                   &DEOHW\SH
                                            &DVLQJVKLHOG                      /,<&<[[                          &DVLQJVKLHOG
                                                                                   5 $ 5 %
                                                                                    WZLVWHG
                                           ,QWKHFDVHRIFDEOHVORQJHUWKHQP\RXPXVWVROGHULQD
                                            WHUPLQDWLQJUHVLVWRURIRQWKHUHFLSLHQWVLGH
Figure B-14 X27 cable CP 441 - CP 340/CP 441 for RS 485 operation (two-wire mode)
X 27 Cable (S7/M7 (CP 441) - CP 544, CP 524, CPU 928B, CPU 945, CPU 948)
                 The figure below illustrates the cable for a point-to-point connection between a CP 441 and a
                 CP 544, CP 524, CPU 928B, CPU 945, CPU 948 for RS 422 operation.
                 For the cables you require the following male connectors:
                 • At the CP 441 side: 15-pin subminiature D male with screw interlock
                 • At communication partner: 15-pin subminiature D male with clip fixing
&3 &RPPXQLFDWLRQSDUWQHU
                      6HQGHU                                                                           5HFHLYHU
                                     5 $ 7 $ 
                                                  
                                    5 % 7 % 
                      5HFHLYHU                                                                            6HQGHU
                                     *1'*1'
                                                                6KLHOG
                                                          &DEOHW\SH
                    &DVLQJVKLHOG                    /,<&<[[                           &DVLQJVKLHOG
                                                   7 $ 7 % DQG5 $ 5 %
                                                         WZLVWHGSDLUV
                  ,QWKHFDVHRIFDEOHVORQJHUWKDQP\RXPXVWVROGHULQD
                   WHUPLQDWLQJUHVLVWRURIവRQWKHUHFLSLHQWVLGH
                 Figure B-15     X27 cable CP 441 - CP 544, CP 524, CPU 928B, CPU 945, CPU 948 for RS 422
                                 operation (four-wire mode)
SFB Parameters
                       The following tables provides a brief description of the parameters of the system function
                       blocks.
Further Information
                       For a detailed description of the system function blocks, see the reference manual System
                       Software for S7-300 and S7-400, System and Standard Functions.
See also
                       Diagnostics Messages of the System Function Blocks (Page 8-4)
Table D-1 The following is an overview of the accessories for the CP 441:
                        20mA TTY:
                        • 20mA TTY, 5 m                                     •   6ES7 902-2AB00-0AA0
                        • 20mA TTY, 10 m                                    •   6ES7 902-2AC00-0AA0
                        • 20mA TTY, 50 m                                    •   6ES7 902-2AG00-0AA0
Title                                             Contents
Manual                                            The programming manual offers basic information on the design of the
Programming with STEP 7 V5.1                      operating system and a user program of an S7 CPU. For novice users of an
                                                  S7–300/400 it provides an overview of the programming principles on which
                                                  the design of user programs is based.
Manual                                            The STEP 7 user manual explains the principles for using the STEP 7
Configuring Hardware and Communication            automation software and its functions. Novice users of STEP 7 as well as
Connections STEP 7V5.1                            experienced users of STEP 5 are provided with an overview of the
                                                  configuring, programming and start-up procedures for an S7-300/400. When
                                                  working with the software, an on-line help assists you if you require detailed
                                                  information on the software.
Reference Manual                                  The manuals for the STL, LAD, FDB and SCL packages each comprise the
Statemant List (STL) for S7-300/400               user manual and the language description. For programming an S7–300/400
Programming                                       you need only one of the languages, but, if required, you can switch between
                                                  the language to be used in a project. If it is the first time that you use one of
Reference Manual                                  the languages, the manuals will help you in getting familiar with the
Ladder Logic (LAD) for S7-300/400                 programming principles.
Programming                                       When working with the software, you can use the on-line help, which
Reference Manual                                  provides you with detailed information on editors and compilers.
Function Block Diagram (FBD) for S7-
300/400 Programming
Reference Manual
Structured Control Language (SCL) for S7-
300 and S7-400
Title                                        Contents
Manual                                       With the S7-GRAPH, S7-HiGraph, CFC languages, you can implement
S7-GRAPH1 for S7-300 and S7-400              sequential function charts, state diagrams or graphic interconnections of
Programming Sequential Control Systems       blocks. Each of the manuals comprises a user manual and a language
                                             description. If it is the first time that you use one of these languages, the
Manual                                       manual will help you in getting familiar with the programming principles.
S7-HiGraph1 for S7-300 and S7-400            When working with the software, you can also use the on-line help (not for
Programming State Graphs                     HiGraph), which provides you with detailed information on editors and
Manual                                       compilers.
Continuous Function Charts1 for S7 and
M7
Reference Manual                             The S7 CPU's offer systems and standard functions which are integrated in
System Software for S7-300 and S7-400        the operating system. You can use these functions when writing programs in
Systems and Standard Functions               one of the languages, that is STL, LAD and SCL. The manual provides an
                                             overview of the functions available with S7 and, for reference purposes,
                                             detailed interface descriptions which you require in your user program.
1   Add-on packages for S7-300/400 system software
                                                                    Manual
                      ET 200M Distributed I/O Station
                      SINEC L2-DP Interface of the S5-95U Programmable Controller
                      ET 200B Distributed I/O Station
                      ET 200C Distributed I/O Station
                      ET 200U Distributed I/O Station
                      ET 200 Handheld Unit
                      SINEC L2/L2FO-Network Components
E                                                         L
End criterion, 2-39                                       LEDs, 1-6
   End-of-text character, 2-40                            Loadable drivers, 5-18
   Expiration of the character delay time, 2-39
   Fixed message frame length, 2-42
End-of-text character, 2-59                               M
Error message area, SYSTAT, 8-1
                                                          Message frame header
                                                            Structure of the RK 512 command message
                                                            frame, 2-24
F                                                         Message frame length when received, 2-59
Fetching data                                             Message texts, 2-49
   RK 512, 2-29                                             Character conversion table, 2-49
Firmware updates                                            Control characters, 2-49
   Subsequent downloading, 5-20                             Control characters table, 2-49
Format string, 2-72, 2-75                                   Control statements, 2-82
Full-duplex operation, 2-2                                  Conversion statements for variables, 2-76
Function blocks                                             Format string, 2-72
   Diagnostic messages, 8-4                                 Page layout, 2-49, 2-70
Functions                                                   variables, 2-75
   FC 5 V24_STAT, 6-37                                    Message texts "outputting", 6-41
   FC 6 V24_SET, 6-40                                     Mounting the CP 441, 4-2
                                                          Multiprocessor communication, 5-17
G
                                                          O
GET message frame, 2-23
                                                          Operating mode transitions, 7-2
H
                                                          P
Half-duplex operation, 2-2
Handshaking, 2-68                                         Page layout
                                                             in message texts, 2-49, 2-70
                                                          Page number, setting, 2-79
I                                                         Parameter Assignment, 5-3
                                                          Parameter assignment data
Indicator for end of receive message frame, 2-59
                                                             ASCII driver, 2-58
Initial state of receive line, 2-55, 2-63, 2-67
                                                             Printer Driver, 2-65
Initialization, 7-1
                                                             RK 512, 2-57
initialization conflict, 2-21
                                                          Parameter assignment interface, 1-4
Installation guidelines, 1-10
                                                          parameters, assigning, 5-18
Installing the interface submodules, 4-3
                                                          Parity, 2-54, 2-60, 2-66
Interface
                                                          Printer Driver
     RS 232C, 1-7
                                                             BUSY Signal, 2-68
     X27 (RS 422/485), 1-9
                                                             Data Flow Control, 2-68
Interface submodules, 1-3
                                                             Message Text Output, 2-49
     20 mA TTY, B-8
                                                             Message texts, 2-49, 2-75
   Parameters, 2-65                                                      S
Priority, 2-54
                                                                         Scope of the manual, iii
Procedure, 2-5
                                                                         SEND message frame, 2-23
Programming device (PG), 1-3
                                                                         Sending Data
Programming device cable, 1-3
                                                                            3964(R) procedure, 2-13
Protocol, 2-52
                                                                            ASCII driver, 2-36, 2-49
   integrated in module, 1-2, 1-4, 2-3
                                                                            RK 512, 2-26
Protocol parameters, 2-53, 2-59
                                                                         Setup attempts, 2-53
PUT message frame, 2-23
                                                                         SFB Parameters, C-1
                                                                         Slot for Interface Modules, 1-6
                                                                         Slots, 4-1
R                                                                        Standard cable, 1-3
Receive buffer, 2-44, 2-55, 2-62                                         Start bit, 2-54, 2-60, 2-66
receiving data                                                           Start-up behavior, 7-1
   3964(R) procedure, 2-17                                               STATUS Output of the SFBs, 8-1
   ASCII driver, 2-38                                                    Steps, 3-1
Removing the CP 441, 4-2                                                 Stop bits, 2-54, 2-60, 2-66
Removing the interface submodules, 4-3                                   System function block, 6-2
response message frame, 2-23                                                3964(R) procedure, 6-8
Response message frame                                                      Application, 6-3
   error numbers, 8-1, 8-2, 8-21                                            for printer driver, 6-41
   Structure and contents, 2-25                                             Parameters, C-1
Restart of the CPU, 7-2                                                     with ASCII driver, 6-35
RK 512 computer connection, 2-23                                         system function blocks
   Command message frame, 2-23, 2-24                                        3964(R) procedure, in the case of, 6-10
   Fetching data, 2-29
   Parameters, 2-57
   Response message frame, 2-23                                          T
   Sending Data, 2-26
                                                                         Total baud rate, 2-60
RS 232C secondary signals
                                                                         Transmission attempts, 2-53
   Controlling, 6-39
                                                                         Transmission integrity, 2-7
   Reading, 6-36
                                                                            for printer driver, 2-8
RS 232C Secondary Signals, 2-45
                                                                            with 3964R, 2-8
   Automatic use, 2-46
                                                                            with ASCII driver, 2-8
RS 232C, secondary signals
                                                                            with the RK 512, 2-9
   controlling,, 6-36
                                                                         U
                                                                         Unidirectional/bidirectional data traffic, 2-1