CPU226-ETH Manual

ClassificationGPU226-R -ETHGPU226-T -ETH
Digital input2424
Digital output16 relay16 transistor
485 interface22
Ethernet port100M adaptive100M adaptive
Power supply24VDC24VDC
Note: Comes with 10/100M Ethernet port, similar to CP243 functional module, can download monitoring program through network interface, support S7 communication protocol and MODBUS TCP communication protocol

Wiring

CPU226-R-ETH (relay type) wiring diagram
CPU226-T-ETH-(transistor-type)-wiring-diagram

Features

1) Fully compatible with S7 programming software and instruction set.
2) 24 digital inputs; 16 digital outputs;
3) The digital input port adopts bidirectional optocoupler and supports NPN or PNP input.
4) 2 PPI communication interfaces, supporting 187.5k baud rate. -ETH suffix model has one Ethernet port, which can download and monitor programs through Ethernet.
5) Support PPI protocol, Modbus protocol, Freeport protocol, USS protocol, support S7 Ethernet protocol, Modbus TCP protocol.
6) Built-in clock battery, dual-circuit power supply design, support perpetual calendar standby use for more than 2 years.
7) Unbreakable after encryption, completely protect your program.
8) Using FLASH technology, no battery support, permanent storage.
9) Power supply anti-reverse connection design; communication port electrostatic protection design; analog quantity anti-short circuit protection.
10) Support PID instruction, which can facilitate users to realize multi-channel PID control.
11) The power board uses solid materials and sufficient power to meet multiple expansions and sensor power supplies;
12) After strict industrial field test and environmental test.
13) Transistor model products, support 100K high-speed pulse output.
14) Support 7 external expansion modules, and support mixed use with Siemens modules.

Technical Parameters

ModelCPU226-R/T(-ETH)
Power Consumption10W
Program memory16K
Data storage10K
Digital input24
Digital output16
Digital IO mapping area256(128DI/128DO)
Analog IO mapping area64(32AI/32AO)
Maximum expansion module7
High-speed pulse input6 X 30K
High-speed pulse output2 X 100K
Total number of timers256
Total number of counters256
Analog potentiometer2 X 8Bit
Time interruption2 *1mS resolution
Real Time ClockSupport, built-in battery
Boolean instruction efficiency0.28uS
Floating point instruction efficiency0.75uS
interface2*RS-485,standard PPI communication ports
PPI baud rate9.6k, 19.2k and 187.5kbps
Free port baud rate1.2k-115.2kbps
Maximum cable length per sectionUsing isolated repeater: 187.5kbps up to 1000 meters, 38.4kbps up to 1200 meters; not using isolated repeater: 50 meters
Maximum number of stations32 stations per segment, 126 stations per network
Maximum number of master stations32
Number of interfaces1
Mode10/100Mbit/s
ProtocolS7 Ethernet protocol (support server mode)
Modbus TCP protocol (support server and client mode)
Maximum communication distance1000 meters
Input voltageDC24V 20.4-28.8VDC
Input Current110mA(only CPU,24VDC)
Isolation (field and logic)Not isolated
Sensor voltageL±1V
Current limit1.5A peak 0.7A normal
Ripple noiseDC24V power supply
Isolation (sensor and logic)non-isolated
Digital input characteristics
Integrated digital input24 Input
Input typePNP/NPN bidirectional
Rated voltage24VDC, 4mA
Maximum continuous allowable voltage30VDC
Surge voltage35VDC, 0.5s
Logic 1 voltage range15V-30VDC
Logic 0 voltage range0-5VDC
Input delay0.2-12.8ms can be selected
Isolation (field and logic)Yes
Optical isolation500VDC for 1 minute
High-speed counter input rate30KHZ (single phase)
Simultaneously connected inputsall
Maximum cable length500 meters (standard input)
Digital output characteristics
Integrated digital output16 output
Output typeRelay 5A (resistive)
Transistor sink type 24V DC single channel 0.8A
Rated current of common terminal6A
Resistance (contact)0.2Ω typical (0.6Ω maximum)
Photoelectric isolation (field to isolation)500VAC, 1 minute
Simultaneously connected outputAt 60°C, all outputs (horizontal installation) At 50°C, all outputs (vertical installation)
Two parallel outputsYes, only when the same group is output
Shield500 meters
Size (W x H x D)mm180x130x36

Communication interface definition

PINPort1Port0
1Shell GroundShell Ground
2+24V Ground+24V Ground
3RS485 signal ARS485 signal A
4Send application RTSSend application RTS
5+5V Ground+5V Ground
6+5V+5V
7+24V+24V
8RS485 signal BRS485 signal B
9NCNC

Internal schematic diagram of transistor output

Dimensions

CPU224XP-ETH Ethernet interface

The PLC with Ethernet port integrates the CP243 Ethernet module, but it does not require configuration settings. After configuring the IP address, it can be used directly. It is simpler and more reliable than the CP243 module. Ethernet supports two protocols: S7 Ethernet protocol and Modbus TCP protocol. The upload, download and monitoring of the program can be realized through the network cable, and the download speed is super fast. It can also communicate with the touch screen and directly connect with WINCC. If multiple PLC hosts are connected to a switch, they can also communicate with each other.

IP address view and modification

Connect the PLC with a network cable. The factory default IP address of this machine is 192.168.1.218. The PLC can be directly connected to the computer, or it can be connected to a router or switch, and the PLC can be accessed through the router settings.
To access the PLC from the computer, it is required that the computer and the PLC are in the same LAN segment, and the wired network card (note that it is not a wireless network card) IP address is in the network segment 192.168.1.XXX

After filling in the computer’s IP address, test whether the computer and the PLC are physically connected properly. Open the “Command Line Prompt” on the computer, and ping 192.168.1.218. If the PLC returns the data within 1ms, the physical link is normal.

View and modify IP address via web page

Use a browser (IE browser is recommended) to enter the URL, http://192.168.1.218

Ethernet download and monitoring

Download

Take the PLC network cable connected to the computer as an example, click Set PG/PC interface in the viewing window and choose according to your computer network card (the picture below is the demo machine network card, the user needs to choose according to your computer network card, the name of your computer network card can be viewed in the “device manager”, if the driver list There is no network card in the computer, this is a S7 software compatibility problem, it is recommended to apply a 64-bit system patch), click Diagnose to test.

OK means that the SR protocol test is successful, but it does not mean that the PLC connection is successful, because even if the PLC is not connected, if the SR protocol is okay, the test will be OK; if it fails, please refer to the “SR Protocol Diagnosis Failure Solution”.
Click the communication button on the viewing interface

Click OK, double-click to refresh the list, the PLC model is identified in the host column, indicating that the connection is successful

Be sure to click the searched device, and then click Confirm.

SR protocol diagnosis failure solution

An error occurred in the function call SRMD_Set(..)
Error: No interface handle
Question: S7ONLINE Error: SRMD_Set No interface handle?
Reason: “C:\Program Files\Common Files\Siemens\S7IEPG\s7oiehsx.exe” file is blocked from running, causing: “SIMATIC IEPG Help Service” to stop.

Solution 1:
Right-click on the computer, left-click on Manage—>Services and Applications—>Service—>and then activate "SIMATIC IEPG Help Service"; if it fails to activate, it means that it is blocked by antivirus software. Add the s7oiehsx.exe file to the "antivirus software" "In the executable file trust table, re-run "SIMATIC IEPG Help Service", finally restart the computer, and restart STEP 7.
Solution 2:
Left-click the mouse and click Start—>Run—>services.msc to activate "SIMATIC IEPG Help Service"; if it fails to activate, it means it is blocked by anti-virus software. Add the s7oiehsx.exe file to the executable file of "360 or other anti-virus software" In the trust list, re-run "SIMATIC IEPG Help Service", finally restart the computer, and restart STEP7.

MODBUS TCP Protocol-Communication Example

Ethernet port PLC, supports Modbut TCP server mode and client mode

Install MODBUS TCP command library

Open the S7 programming software, there is no Modbus TCP in the library, download the latest Modbus TCP library “S7-200 software Modbus TCP installation library 4.0.mwl

This library file cannot be deleted after installation, otherwise the library will be lost, so it is recommended to copy it to a fixed location. After restarting, the MODBUS_TCP library is installed

MODBUS address mapping table

Modbus addressRead/writeDescriptionFunction code
00001 to 00128Q0.0 to Q15.7Digital outputRead coil: No. 1 function code;
Write single coil: No. 5 function code, Write multiple coils: No. 15 function code
10001 to 10128I0.0 to I15.7Digital inputRead input status bit:No. 2 Function code
30001 to 30128AIW0 to AIW62Analog input registerRead input register: No. 4 function code;
40001 to 4XXXXVW(HoldStart) to VW[HoldStart +2 * (XXXX-1)]Holding register, corresponding to V area, HoldStart is filled in the program instruction.40001 to 4XXXX
Read holding register: No. 3 function code;
Write a single register: function code No. 6; write multiple registers: function code No. 16

PLC as server, computer (touch screen) as client example

The PLC is the server and the touch screen is the client is the most commonly used connection method. It is also the easiest way to program on the PLC. You only need to write a command. Modbus tcp serves as the server, and the port is 502.

PLC server command (ModbusTCP_Sever)

ParameterParameter TypeData TypeDefinition
ENINPUTBoolEnable
PortINPUTByteCommunication port 1,2,3,4,5
ErrorINPUTByteerror code
MaxIOINPUTWordThe maximum I/Q bit, the maximum number of I/O points involved in communication, the I/O image area of S7-200 is 128/128, and the default value is 128
MaxAIINPUTWordThe maximum number of AI words, the maximum number of AI channels involved in communication, can be 16 or 32
MaxHoldINPUTWordThe largest holding register area, V memory area words involved in communication (VW)
HoldstartINPUTDWordThe starting address of the holding register area, specified by &VBx (indirect addressing mode)

PLC as client, computer (touch screen) as server setting

This kind of use is mainly used in PLC connection with sensor applications that support Modbus TCP protocol.

Client instruction (ModbusTCP_Client)

ParameterParameter TypeData TypeDefinition
ENINPUTBoolEnable
CONNECTINPUTBool0: Disconnect, 1: Establish and keep the connection.
SocketINPUTByteCommunication port 1,2,3,4,5
Profile_TableINPUTWordThe starting address of the communication profile table is represented by a byte offset from V0 (for example, VB99, the corresponding value is 99)
ErrorINPUTByteError code

Add data in the data block according to the access requirements

Send data configuration format

Offset address of sending start addressexampleexample
VBn4Number of segments accessed by this socket4
VBn+1The highest byte of the other party’s IP address192
VBn+2The second byte of the other party’s IP address168
VBn+3The third byte of the other party’s IP address1
VBn+4The last byte of the other party’s IP address205
VBn+5Slave ID Slave address16#FF
VBn+6function code3
VBn+7The data address of the slave to be read and written40001
VBn+9Number of read and write data4
VBn+11Start address of sending data in V storage area1000
VBn+13Start address of the received data in the V storage area1300
VBn+15Status byte of this section
VBn+16 to VBn+20This section reserved for use
VBn+21The highest byte of the other party’s IP address192
VBn+22The second byte of the other party’s IP address168
VBn+23The third byte of the other party’s IP address1
VBn+24The last byte of the other party’s IP address205
VBn+25Slave ID Slave address16#FF
VBn+26function code16
VBn+27The data address of the slave to be read and written41000
VBn+29Number of read and write data4
VBn+31Start address of sending data in V storage area1600
VBn+33Start address of the received data in the V storage area1900
VBn+35Status byte of this section
VBn+36 to VBn+40This section reserved for use
continuouscontinuous

The format of the received data

answerReceive the offset address of the start addressDescription
Correct answerVBnNumber of received data
VBn+1Slave ID Slave address
VBn+2function code
VBn+3Number of data read
VBn+4Data area
ErrorVBnNumber of received data
VBn+1Slave ID Slave address
VBn+2function code+0x80The highest position of the function code 1
VBn+3Error code:
0 no error
1 The value of Count is 0
2 Illegal data address
4 Communication port is busy
6 Function code error

In the above example, only the Socket1 communication port is turned on, segment 1 accesses 192.168.1.205, segment 2 accesses 192.168.1.205, segment 3 accesses 192.168.1.210, segment 4 accesses 192.168.1.213, and the same communication port accesses the unreachable IP Address, this will reduce the efficiency of communication. It is recommended that the same socket only access the same IP address. If you want to access another IP address, open another socket for configuration.

FAQ

Ping fails.
Answer: It means that the physical layer is not connected successfully. 1 Check whether the network cable is loose. 2 Check whether the computer IP and PLC’s IP are in the same network segment. 3Whether the computer gateway address, subnet mask and DNS address are filled in completely. 4Turn off the computer’s wireless network card and try. 5 Let the computer and the PLC connect directly with the network cable, and try to remove the intermediate router.

It can be pinged, but the web page cannot be opened.
Answer: 1 Try changing the IE browser. 2 https is not allowed in the URL, but http should be used. 3 Try changing to another computer.

The S7 software settings PC/PG interface cannot find the network card driver.
Answer: Download the 64-bit patch from the website and try it out.

Two CPU226-ETH devices are hung under the same switch, and one of them is not smooth.
Answer: After the PLC leaves the factory, the MAC addresses are all the same. Check if the MAC addresses are the same, and just modify one of them.

The two PLCs can’t communicate directly with the network cable, but they can communicate when they are plugged into the switch.
Answer: Try changing the crossover cable.

CPU224XP-ETH Review

CPU224XP-ETH Manual

ClassificationGPU224XP-R -ETHGPU224XP-T -ETH
Digital input1414
Digital output10 relay10 transistor
Analog input2 channels (voltage or current input can be switched)2 channels (voltage or current input can be switched)
Analog output11
485 interface22
Ethernet port100M adaptive100M adaptive
Power supply24VDC24VDC
Note: Comes with 10/100M Ethernet port, similar to CP243 functional module, can download monitoring program through network interface, support S7 communication protocol and MODBUS TCP communication protocol

Features

1) Fully compatible with S7 programming software and instruction set.
2) 14 channels of digital input; 10 channels of digital output; 2 channels of analog analog input, built-in DIP switch, voltage or current input can be set; 1 channel of analog output, output voltage and current at the same time.
3) The digital input port adopts bidirectional optocoupler and supports NPN or PNP input.
4) The analog input adopts high-precision AD and rail-to-rail operational amplifier, which can realize low-voltage recognition.
5) 2-channel PPI communication interface, supporting 187.5k baud rate. With one Ethernet port, you can download and monitor programs via Ethernet.
6) Support PPI protocol, Modbus protocol, Freeport protocol, USS protocol, support S7 Ethernet protocol, Modbus TCP protocol.
7) Built-in clock battery, dual-circuit power supply design, support perpetual calendar standby use for more than 2 years.
8) Unbreakable after encryption, completely protect your program.
9) Using FLASH technology, no need for battery support, permanent storage.
10) Anti-reverse connection design for power supply; electrostatic protection design for communication port; analog short-circuit protection.
11) Support PID instruction, which can facilitate users to realize multi-channel PID control.
12) The power board uses solid materials and sufficient power to meet multiple expansion and sensor power supply;
13) After strict industrial field test and environmental test.
14) Transistor model products, support 100K high-speed pulse output.
15) Support 7 external expansion modules, and support mixed use with Siemens modules.

Wiring

CPU224XP-T-ETH-(transistor-type)-wiring-diagram
CPU224XP-R-ETH (relay type) wiring diagram

Technical Parameters

ModelCPU224XP-R/T(-ETH)
Power Consumption7W
Program memory16K
Data storage10K
Digital input14
Digital output10
Digital IO mapping area256(128DI/128DO)
Analog IO mapping area64(32AI/32AO)
Maximum expansion module7
High-speed pulse input6 X 30K
High-speed pulse output2 X 100K
Total number of timers256
Total number of counters256
Analog potentiometer2 X 8Bit
Time interruption2 *1mS resolution
Real Time ClockSupport, built-in battery
Boolean instruction efficiency0.28uS
Floating point instruction efficiency0.75uS
interface2*RS-485,standard PPI communication ports
PPI baud rate9.6k, 19.2k and 187.5kbps
Free port baud rate1.2k-115.2kbps
Maximum cable length per sectionUsing isolated repeater: 187.5kbps up to 1000 meters, 38.4kbps up to 1200 meters; not using isolated repeater: 50 meters
Maximum number of stations32 stations per segment, 126 stations per network
Maximum number of master stations32
Number of interfaces1
Mode10/100Mbit/s
ProtocolS7 Ethernet protocol (support server mode)
Modbus TCP protocol (support server and client mode)
Maximum communication distance1000 meters
Input voltageDC24V 20.4-28.8VDC
Input Current100mA
Isolation (field and logic)Not isolated
Sensor voltageL±1V
Current limit1.5A peak 0.7A normal
Ripple noiseDC24V power supply
Isolation (sensor and logic)non-isolated
Digital input characteristics
Integrated digital input14 Input
Input typePNP/NPN bidirectional
Rated voltage24VDC, 4mA
Maximum continuous allowable voltage30VDC
Surge voltage35VDC, 0.5s
Logic 1 voltage range15V-30VDC
Logic 0 voltage range0-5VDC
Input delay0.2-12.8ms can be selected
Isolation (field and logic)Yes
Optical isolation500VDC for 1 minute
High-speed counter input rate30KHZ (single phase)
Simultaneously connected inputsall
Maximum cable length500 meters (standard input)
Digital output characteristics
Integrated digital output10 output
Output typeRelay 5A (resistive)
Transistor sink type 24V DC single channel 0.8A
Rated current of common terminal6A
Resistance (contact)0.2Ω typical (0.6Ω maximum)
Photoelectric isolation (field to isolation)500VAC, 1 minute
Simultaneously connected outputAt 60°C, all outputs (horizontal installation) At 50°C, all outputs (vertical installation)
Two parallel outputsYes, only when the same group is output
Shield500 meters
Analog input characteristics
The machine’s integrated input points2
input methodSingle-ended input
Analog input characteristics0~10V / 0~20mA
input resistanceVoltage type 30K ,current type 120Ω
Data Format0~32000
Resolution12 bits with sign bit
ErrorWorst case, 0° to 55°C ± 2.5% of full scale
Typical, 25°C ±1.0% of full scale
Repeatability ± 0.05% of full scale
Analog to digital conversion time100ms
Analog output characteristics
The machine’s integrated input points1
Output voltage range0~10V
Output current rangeOutput current range0~20mA
Data Format0~32000
ErrorWorst case, 0° to 55°C ± 3% of full scale
Typical, 25°C ±2.5% of full scale
Repeatability ± 1% of full scale
Conversion time50uS
Load capacity0~10V >5KΩ 0~20mA <500Ω
Size (W x H x D)mm150x106x35

Communication interface definition

PINPort1Port0
1Shell GroundShell Ground
2+24V Ground+24V Ground
3RS485 signal ARS485 signal A
4Send application RTSSend application RTS
5+5V Ground+5V Ground
6+5V+5V
7+24V+24V
8RS485 signal BRS485 signal B
9NCNC

Analog interface definition

Analog input interface
A+: AIW0 channel,
0-10V or 0-20mA input
M: analog input common terminal
B+: AIW2 channel,
0-10V or 0-20mA input
Note: The analog input supports voltage or current input, which can be selected by the DIP switch on the right. DIP 1 corresponds to A+ channel, DIP 2 corresponds to B+ channel, ON current input, OFF voltage input
V0: AQW0 channel, 0-10V output;
M: analog output common terminal;
B+: AQW0 channel, 0-20mA output;
Note: The analog output channel outputs voltage and current at the same time, both of which are controlled by AQW0

4-20mA Transmitter Wiring Diagram

4-20mA two-wire and three-wire transmitter wiring diagram
Note: Before connecting the current signal, the analog input should be set to the current input mode through the red dial switch

Internal schematic diagram of transistor output

Dimensions

CPU224XP-ETH Review

CPU224XP-ETH

CPU224XP Ethernet

  • Analog 2 channel input/1 channel output
  • DC24V 1A
  • 2 channel PPI port(support Modbus)
  • Up to 7 modules can be connected
  • 1 channel Ethernet port
  • Software supports all instructions in Siemens v4.0 Step 7

Check Price

The CPU224XP-ETH plc has powerful communication function,It provides 5 SOCKETs, which can be connected to 5 terminal devices at the same time. Moreover, you can program and download programs through the network.

If you know Siemens plc very well before, then you can easily.Because it support Siemens s7 network protocol,you can use Siemens v4.0 Step7 software.

In engineering projects, you are often troubled by the speed of communication. This plc can be said to be perfect, its transmission speed can reach 100M, allowing you to experience high-speed transmission.

It also integrates 2 PPI communication ports, and the supported communication baud rate is 187.5K. It is the same as Siemens.

Then you want to buy a plc with powerful functions and a reasonable price, this plc should be a good choice

Pros

  • Support Ethernet programming
  • Transmission speed 100M
  • Support Siemens protocol
  • cheap price

Cons

  • Transparent shell, after long time, it will covered with dust.

Software

STEP7 MicroWIN V4.0 SP9