A new science experiment this week, trying to utilize the MODBUS TCP functionality in a IE2000 industrial switch to allow MODBUS to occasionally poll data from the switch so I can show that data in my PLC system alarms. This is a Rockwell (Allen Bradley) ControlLogix system using s Prosoft PLX31-EIP-MBTCP Ethernet/IP to MODBUS TCP gateway. That is a little white lie, I am looking to get data out of a Stratix 5700 Switch - which Cisco builds for Allen Bradley, and the two are similar enough (if not identical) to allow me to use Cisco data.
I have successfully enabled the scada modbus server on the switch and am using the Prosoft gateway to gather information from the switch. Getting a valid list of MODBUS addresses took a little searching on Cisco's site - but I have that now. The addresses are in hex, so that must be converted to decimal for the Prosoft card. So I'm currently reading registers 0x980, length of 9 registers and 0x1500, length of 20 registers. The first 9 gives me alarm statuses, power supply statuses and internal temperature. The other set gives me the Port State for all the ports on the switch.
The problem is, I don't know what some of the data means. For instance, it looks like a "1" for power supply status = "bad" and alarm 1 & 2 status are "0" which means good (compared to what I am seeing going on with the switch). Also showing the temperature of 44C - verifiable with the web GUI. Those a person can work out. The port state ones are a little tougher for me to put a finger on. For ports that have nothing plugged into them, I get back 0x0. For ports that are connected at 100MB-Full I get 0x401 (1025 Decimal). I am having trouble finding what that code represents.
So... That is my question, how does one find out what all the return values mean?
My next experiment - which I hope will pay off - is to collect some data from a C3850 Switch. This is the switch that all the little Stratix 5700's uplink to. I would like to do some info gathering, alarming to my PLC from that boy.
