这里我们进行封装读写西门子PLC的S7协议命令以及连接西门子PLC并两次握手

新建部分类文件SiemensS7ProtocolUtil.ReadWrite.cs

主要方法

连接西门子PLC并发送两次握手。

两次握手成功后才真正连接到PLC

public

ConnectPlcAndHandshake(SiemensPlcCategory

siemensPlcCategory,

BuildWriteByteCommand(OperateResultbyte,

int,

生成一个读取字数据指令头的通用方法【一个字Word占用两个字节Byte】

public

BuildReadCommand(OperateResultbyte,

int,

SiemensS7ProtocolUtil.ReadWrite.cs源程序如下

using

System.Threading.Tasks;namespace

PlcSiemesS7Demo

关键方法:连接PLC并发送两次握手、生成写PLC命令生成读PLC命令///

(1).public

ConnectPlcAndHandshake(SiemensPlcCategory

siemensPlcCategory,

BuildWriteByteCommand(OperateResultlt;byte,

int,

(3).BuildReadCommand(OperateResultlt;byte,

int,

西门子S7协议握手【两次握手】命令固定.不同型号的PLC握手命令有少许不同private

byte[]

byte[22]{0x03,0x00,0x00,0x16,0x11,0xE0,0x00,0x00,0x00,0x01,0x00,0xC0,0x01,0x0A,0xC1,0x02,0x01,0x02,0xC2,0x02,0x01,0x00};private

byte[]

byte[25]{0x03,0x00,0x00,0x19,0x02,0xF0,0x80,0x32,0x01,0x00,0x00,0x04,0x00,0x00,0x08,0x00,0x00,0xF0,0x00,0x00,0x01,0x00,0x01,0x01,0xE0};private

byte[]

byte[22]{0x03,0x00,0x00,0x16,0x11,0xE0,0x00,0x00,0x00,0x01,0x00,0xC1,0x02,0x10,0x00,0xC2,0x02,0x03,0x00,0xC0,0x01,0x0A};private

byte[]

byte[25]{0x03,0x00,0x00,0x19,0x02,0xF0,0x80,0x32,0x01,0x00,0x00,0xCC,0xC1,0x00,0x08,0x00,0x00,0xF0,0x00,0x00,0x01,0x00,0x01,0x03,0xC0};#endregion///

summary///

连接西门子PLC并发送两次握手。

两次握手成功后才真正连接到PLC///

/summary///

namesiemensPlcCategory/param///

param

ConnectPlcAndHandshake(SiemensPlcCategory

siemensPlcCategory,

SiemensPlcCategory.S1500:plcHead1[21]

0;break;case

SiemensPlcCategory.S300:plcHead1[21]

2;break;case

SiemensPlcCategory.S400:plcHead1[21]

3;plcHead1[17]

SiemensPlcCategory.S200Smart:plcHead1

plcHead2_200smart;break;default:plcHead1[18]

0;break;}//

重新连接之前先将旧的数据进行清空CoreSocket?.Close();OperateResultSocket

result

SendDataAndWaitResult(result.Content,

plcHead1);if

(!read_first.IsSuccess){RecordLogEvent?.Invoke($第一次握手出错{read_first.Message});return

read_first;}//

SendDataAndWaitResult(result.Content,

plcHead2);if

(!read_second.IsSuccess){RecordLogEvent?.Invoke($第二次握手出错{read_second.Message});return

read_second;}//

result.Content;result.IsSuccess

true;isConnected

true;RecordLogEvent?.Invoke($连接PLC【{endPoint}】成功并且两次握手成功);}else{result.Content?.Close();CoreSocket

false;}return

连接西门子PLC并发送两次握手。

两次握手成功后才真正连接到PLC///

使用IP地址和端口【默认102】和PLC型号枚举进行连接///

/summary///

namesiemensPlcCategory/param///

param

ConnectPlcAndHandshake(SiemensPlcCategory

siemensPlcCategory,

ConnectPlcAndHandshake(siemensPlcCategory,

new

IPEndPoint(IPAddress.Parse(ipAddress),

port),

InteractionsOperateResultbyte[]

read

SendDataAndWaitResult(command.Content);if

(!read.IsSuccess)

OperateResult.CreateSuccessResult(buffer);}else{return

new

数据块长度校验失败请检查是否开启put/get以及关闭db块优化

};}}private

ReadBitFromPLC(OperateResultbyte,

int,

BuildBitReadCommand(analysis);if

(!command.IsSuccess)

OperateResult.CreateFailedResultbyte[](command);//

核心交互

SendDataAndWaitResult(command.Content);if

(!read.IsSuccess)

OperateResult.CreateSuccessResult(buffer);}else{return

new

OperateResultbyte[](read.ErrorCode,

数据块长度校验失败请检查是否开启put/get以及关闭db块优化);}}///

summary///

entireValue){OperateResultbyte[]

write

SendDataAndWaitResult(entireValue);if

(!write.IsSuccess)

(write.Content[write.Content.Length

0xFF){//

OperateResult(write.Content[write.Content.Length

1],

write.Content[write.Content.Length

1]);}else{return

OperateResult.CreateSuccessResult();}}///

summary///

BuildWriteByteCommand(OperateResultbyte,

int,

偏移地址占用三个字节下面注释的三行等价于BitConverter.GetBytes(Int32)

//_PLCCommand[28]

BitConverter.GetBytes(analysis.Content2);_PLCCommand[28]

offsetAddress[2];_PLCCommand[29]

offsetAddress[1];_PLCCommand[30]

offsetAddress[0];//

OperateResult.CreateSuccessResult(_PLCCommand);}public

static

BuildWriteBitCommand(OperateResultbyte,

int,

OperateResult.CreateFailedResultbyte[](analysis);byte[]

buffer

256);buffer.CopyTo(_PLCCommand,

35);return

OperateResult.CreateSuccessResult(_PLCCommand);}///

summary///

nameplcRegisterCategory寄存器类型/param///

param

nameoffsetAddress偏移量偏移地址/param///

param

AnalysisAddress(PlcRegisterCategory

plcRegisterCategory,

0){//地址类型起始地址DB块编号OperateResultbyte,

int,

PlcRegisterCategory.DB:result.Content1

0x84;result.Content2

PlcRegisterCategory.M:result.Content1

0x83;result.Content2

PlcRegisterCategory.Input:result.Content1

0x81;result.Content2

PlcRegisterCategory.Quit:result.Content1

0x82;result.Content2

PlcRegisterCategory.T:result.Content1

0x1D;result.Content2

PlcRegisterCategory.C:result.Content1

0x1C;result.Content2

PlcRegisterCategory.V:result.Content1

0x84;result.Content2

生成一个读取字数据指令头的通用方法【一个字Word占用两个字节Byte】

-///

nameaddress起始地址例如M100I0Q0DB2.100

-///

BuildReadCommand(OperateResultbyte,

int,

NullReferenceException(address);if

(length

NullReferenceException(count);if

(address.Length

OperateResult.CreateSuccessResult(_PLCCommand);}///

summary///

nameaddress起始地址例如M100.0I0.1Q0.1DB2.100.2

-///

BuildBitReadCommand(OperateResultbyte,

int,

OperateResult.CreateFailedResultbyte[](analysis);byte[]

_PLCCommand

OperateResult.CreateSuccessResult(_PLCCommand);}}