OMRON客户服务中心P1031Size(bytes)HeaderFINS/TCP headerCommand4FINS frameFINS frame12 to 2,012 (Refer to 7-2 FINS Frames for details.)The details of the above frame are shown in the following table.Contents(hexadecimal)RemarksHeader46494E53Length00000014to000007E420 to 2020 bytes:Length ofdata after mand.Command00000002Error code00000000Not used,so does not requirechecking by at the receivingend.FINS frameFrom FINS header ICF to endof data.图2-7Size(bytes)Contents_ICF_Displays frame information_..BSV-_.Reserved by system.GCT_.-Permissible number of gatewaysDNA---Destination work addressFINS header1Destination node addressDA2Destination unit addressSNASource work addressSA11Source node addressSA21Source unit addressSIDMRC1Main request codeFINS mandSRCSub-request codeParameter/Command parameters and send dataFINS parameter/datadata field2000max.The data length depends on the MRC and SRC.图2-8其中ICF数据格式如下：Bit 7 65432100000Response Request Bit(0:Response required;1:Response not required)Kind of data(0:mand;1:response)图2-9OMR0N客户服务中心P103-1即发送数据时候，ICF=80RSV固定00，GCT固定02DNA为目标网络号DA1为目标节点号DA2为目标单元号SNA为源网络号SA1为源节点号SA2为源单元号SID设置00此次计算机P:10.110.59.192,PLC IP:10.110.59.33即目标(PLC)网络号0，单元号0(CPU单元，见注)，节点号33源（计算机）网络号0，单元号0，节点号192即FINS头代码为：80000200210000C00000注：PLC侧直接对CPU操作，固定为O。e.使用0101代码读取D0D1数据，完整命令如下：46494E530000001A(发送字节数)000000020000000080000200210000C000000101(读代码)82(DM地址)000000(D0)0002(2个数据)0101指令说明如下：Command Format0101CommandBeginning addressNo.of itemscode(binary)V/O Memory area codeResponse Format0101CommandEnd codeData (for number of items)code图2-10OMRON客户服务中心P1031￡.使用0102代码写D100数据，完整命令如下：46494E530000001C(发送字节数)000000020000000080000200210000C000000102(写代码)82(DM地址)006400(D100)0001(写一个数据)12340102代码格式说明如下：Command Format0102Beginning address No.of items(binary)Data (for number of items)Response Format0102End code图2-113、现象和结论：a.先在NJ控制器里给变量ABC和DEF分别赋值1122和3344：在线值ABC11221122WORDHexadecim:DEF33443344WORD图3-1b.发送握手信号，先点击连接按钮，出现以下提示，既可以开始发送数据：已连接对方1P10.11059.33对方端口：9600连接断开本地端口：3117图3-2选择以十六进制显示，得到反馈如下：数据接收及提示窗口1347:46发送数据：FNS1347:46收到数据：{46494E53000000100000000100000000000000C000000021)FN5数据发送窗口HE模式】图3-3OMRON客户服务中心P1031反馈正确时N叮的EIP口的LINK/ACT灯闪，代表建立通讯。握手信号反馈格式如下：Size(bytes)HeaderLengthCommand4FINS/TCP headerError codeClient node addressServer node address4图3-4The details of the above frame are shown in the following table.Contents (hexadecimal)RemarksHeader46494E53Length0000001016 bytes:Length of data frommand onwards.Command00000001Error codeRefer to the following table oferror codes.Client node address00000001to000000FE1to254(FINS node addressof FINS/TCP client)Server node address00000001to000000FE1to254(Fins node addressof FINS/TCP server)图3-5c.使用0101代码读取D0D1数据，完整命令如下：46494E530000001A000000020000000080000200210000C000000101820000000002反馈如下：Socket状态已连接对方P10.110.59.33对方端口：9600连接断开本地端口：1498数据接收及提示窗口192015发送数据：FNS19:2015收到数据：{46494E53000000100000000100000000000000C000000021}FNS19:20:30发送数据：FINS19:20:30收到数据：{46494E530000001A0000000200000000C0000200C000002100000101000011223344FINS图3-6OMR0N客户服务中心P103-1即46494E530000001A0000000200000000(FINS/TCP头代码)C0000200C000(计算机节点)002100(PLC节点)000101（读数据）0000（正常反馈)11223344（数据）。FINS/TCP命令反馈格式如下：Size(bytes)ContentsFINS header10Same as in mand frame.FINS mand2Same as in mand frame.MRESMain response codeFINSSRESSub-response codeparameter/data fieldData1998max.Response dataThere are some frames in whichthe data length is 0.图3-7d.使用0102写D100数据，完整命令如下：46494E530000001C000000020000000080000200210000C0000001028200640000011234接收到的反馈如下：Socket状态已连接对方1P-10.11059.33对方端口：9600连接断开本地端口：1623数据接收及提示窗口192808发送数据：FNS192808收到数据：{46494E53000000100000000100000000000000C000000021FIN5192820发送数据：FINS1928:20收到数据：{46494E53000000160000000200000000C0000200C0000021000001图3-8即46494E530000001A0000000200000000(FINS/TCP头代码)C0000200C000(计算机节点)002100(PLC节点)000102（写命令）0000（正常结束)NJ监视变量数据如下：名称示格式new_Controller_1ABC12341234WORD%D100new_Controller_133443344WORD9%D101[Hexadecimnew_Controller_1图3-9OMR0N客户服务中心P103-14.注意事项：(1)FINS/TCP命令每次通讯前必须先进行握手，完成后即可不断发送FINS命令，如果突然通讯中断，需要重新进行握手。(2)NX1P2不支持INSTCP方式。(3)PLC直接连接计算机，直连网线与交叉网线都可以。(4)在没有建立过路由表的情况下，网络号都为0。(⑤)输入命令的时候中间不能加空格，否则无法得到正确反馈。(6)反馈代码可以在W420-E1-06手册的8-4-7 Troubleshooting with ResponseCodes.里查看。MRESExecution results00Normal pletion01Local node error02Remote node error03Unit error (controller error)04Service not supported05Routing error1011Parameter error22Status error23Operating environment error25Unit error图4-1(7)内存地址代码参考如下表格：ExampleDesignationContentsMemory areaAddress within memorycodearea codeWordBitC100010B0000A00 hex000A hex00 hexC1000101330000A0D hex30 hex000A hexOD hexW010B10000A00 hexB1 hex00 hexW0101331000A0D hex31 hexOD hexH010B2000A00 hexB2 hex000A hex00 hexH0101332000A0D hex32 hex000A hexOD hexC10001013bit13of70000A0D hex70 hex000A hexOD hexforced statusCIO 0010,with forcedF0000A00 hex000A hex00 hexstatusT0010 Completion09 hex00 hexFlagD00010 value82000A00heX82 hex000A hex00 hexE_3_00010 valueA3000A00 hexA3 hex00 hexCurrent EM bank98000A00hex98 hex00 hex00010 value图4-2