Configuring Weidmüller PLC Expansion and Network Layout

Daniel Price7 min read
Industrial NetworkingOther ManufacturerTechnical Reference
Licensed PE Working through this on a live machine? A Maine-licensed engineer can take it from here — included with IMD hardware, by the hour for everything else. Book an engineer

The request path determines whether a fault belongs to the rack, the Ethernet segment, a serial link, or the addressed device. This Weidmüller PLC installation runs Codesys with more than 50 expansion slots and more than 300 I/O channels. Its communication interfaces include Modbus RTU, Modbus TCP, RS232, and DALI. Follow each path independently; a healthy local I/O backplane says nothing about a failed Modbus transaction.

How does data move through this PLC system?

Start with the requester. For every transaction, identify which controller or application initiates it, which physical interfaces carry it, and which device must reply. The configured client, server, master, and device roles are not specified, so read them from the Codesys project and connected-device configuration.

Path Physical hops Address or setting to record First useful stop test
Local I/O Controller, expansion bus, selected module, field terminal Slot and channel mapping Module diagnostics and channel state
Modbus TCP Requester Ethernet port, industrial switch, destination segment and device Source and destination IP addresses; TCP port from the project Link state and switch-port counters
Modbus RTU Configured serial interface, bus wiring, addressed device Unit address, baud rate, parity, stop bits, and timeout from the project Transmit activity followed by a valid reply
RS232 PLC serial interface, cable, peer interface Protocol assignment and serial framing Transmit and receive activity at both ends
DALI DALI interface, bus conductors, addressed control gear Configured device or group address Bus status and response from the selected address

Do not merge the Modbus RTU and RS232 entries without checking the project and wiring. Modbus RTU names a protocol, while RS232 names a physical interface. The listed capabilities do not prove that this installation carries Modbus RTU over its RS232 connection.

Which mounting and network approaches fit the installation?

The rack is mounted vertically because of cabinet-space constraints. This mounting orientation is permitted for the installed system when the controller module is at the bottom. Cabinet ventilation was added. Both conditions matter: airflow cannot correct a module order that violates the permitted orientation, and correct module order cannot remove heat without a usable air path.

The Ethernet equipment can also be misread during a visual inspection. The cabinet contains one switch and two PoE injectors, not three switches. A proposal to replace three small switches with one 16-port switch therefore solves the wrong topology unless a port, power, maintenance, or diagnostic study supports a redesign.

Approach Advantage Constraint Decision criterion
Vertical rack with controller at bottom Fits the available cabinet space Depends on the permitted module order and cabinet airflow Confirm the exact hardware manual and mounting-specific temperature range
One switch plus two PoE injectors Retains the documented equipment roles Adds inline devices and patch leads to selected Ethernet paths Trace which endpoints require injected power
Single PoE-capable switch Can reduce inline connections Requires verified port count, power budget, environmental rating, and network features Use only if the resulting design meets every endpoint requirement

What configuration should be recommended?

Retain the permitted vertical rack arrangement with the controller at the bottom, then validate airflow and operating temperature under the actual load. Do not approve the orientation merely because fans were installed. The mounting rule, clearances, air direction, module loading, and temperature limit must all agree with the manual for the exact installed hardware.

Retain the one-switch-and-two-injector network until the path map shows a specific reason to consolidate it. A replacement switch must supply the required PoE service and enough ports while preserving any network functions used by the control system. Port count alone is not an engineering basis for replacement.

Create labels at both ends of every field conductor and network lead. Terminal numbers and drawings can locate a circuit, but visible device, cable, slot, and destination identifiers shorten fault isolation and reduce the chance of disconnecting the wrong path.

How should the rack and communication paths be commissioned?

  1. Record the controller and expansion-module order from bottom to top. Match every physical position to its Codesys slot and channel mapping.
  2. Confirm that the controller occupies the required bottom position for vertical mounting. Check the exact product documentation for clearance, airflow direction, and the mounting-specific operating-temperature range.
  3. Trace cabinet ventilation from inlet to outlet. Check that wiring ducts, Ethernet loops, expansion hardware, and cabinet walls do not block the cooling path.
  4. Identify the Ethernet switch and both PoE injectors by function. Label each switch port, injector input, injector powered output, and final endpoint.
  5. Build a communication matrix containing requester, destination, physical interface, address, serial framing where applicable, timeout from the project, and expected response.
  6. Commission local I/O by slot and channel. Compare the physical terminal state, module indication, Codesys online value, and application interpretation for each tested point.
  7. Test Modbus TCP one destination at a time. Confirm physical link first, then IP addressing and the configured TCP service, then the application register transaction.
  8. Test each serial path independently. Match interface type and framing at both ends before investigating register maps or application logic.
  9. Commission DALI separately from Modbus and local I/O. Verify bus status, addressing, and the response of the selected device or group.
  10. Operate the populated rack and network equipment at representative load. Record cabinet temperature at the locations specified by the hardware documentation and compare it with the applicable limit.

Where should troubleshooting start when a device stops responding?

Layer one first. Inspect power, connectors, cable seating, link indicators, serial-interface selection, and the relevant field bus before changing logic. Then follow the packet or frame from the requester toward the destination.

Symptom Likely boundary Check
No Ethernet link Port, patch lead, injector, or endpoint power Test each hop and verify the injector input and powered-output sides
Link present but no Modbus TCP response Addressing, configured service, routing, or destination application Compare the project settings with the endpoint and inspect switch counters
Serial transmission without replies Interface mismatch, framing, address, wiring, or peer state Read both endpoint configurations; do not infer the protocol from the connector alone
One I/O point disagrees with the process Terminal, channel, mapping, or application scaling Trace terminal to module channel to Codesys variable
Multiple adjacent modules become unstable Expansion connection, power distribution, or temperature Inspect the common physical boundary and review module diagnostics

Do not change several addresses, timeouts, or cables simultaneously. One controlled change preserves the fault boundary. Cable color and the absence of an identified VFD do not establish the cabinet’s electromagnetic environment; base routing and cable selection on the complete equipment inventory and manufacturer instructions.

How is the completed installation verified?

Verify each layer with a recorded acceptance result. The rack passes its physical check when module order matches the vertical-mount rule, ventilation operates, air passages remain clear, and measured temperature stays inside the documented range. Local I/O passes when tested terminal states agree with module indications, Codesys values, and application behavior.

For Modbus TCP, prove that a request leaves the configured requester, crosses the intended switch port, reaches the correct destination, and receives the expected application response. For a path containing a PoE injector, confirm both communication and endpoint power through that specific injector. For Modbus RTU or another serial protocol, record matching interface and framing settings plus successful addressed exchanges. Verify DALI with responses from the configured devices or groups.

Finish with a drawing-to-cabinet audit covering labels, module positions, switch ports, PoE injector paths, protocol roles, and configured addresses. Repeat the communication tests while the rack carries representative I/O and thermal load.

FAQ

How do I mount this Weidmüller PLC vertically?

Place the controller module at the bottom, as required for the permitted vertical arrangement described for this system. Then verify clearances, airflow, and the mounting-specific temperature range in the manual for the exact installed hardware.

How do I trace a failed Modbus TCP connection?

Start at the configured requester and check its Ethernet link, the assigned switch port, any PoE injector in that endpoint path, the destination IP address, and the configured TCP service. After the physical and network layers pass, test the expected Modbus transaction.

How do I verify the PLC rack after wiring changes?

Compare every changed terminal with its module channel and Codesys value, rerun the affected Modbus, RS232, or DALI exchange, and check cabinet temperature under representative load. Record the final module, port, address, response, and temperature results.

Back to blog