An AS228T program is attempting to read five items from an ABB PLC over Modbus TCP with MCONF, but no connection is established. The same project reports an EIP parameter upload timeout. Treat the Modbus transaction and the EIP upload timeout as separate diagnostic paths until evidence proves they share a cause.
Preserve the Known Configuration
| Item | Evidence value | Interpretation |
|---|---|---|
| Local PLC | AS228T | Delta PLC programmed in Structured Text |
| Remote PLC | ABB PLC | Target device; exact model is unknown |
| Protocol | Modbus TCP | Intended data-table read path |
| Configuration words |
D100 := 16#0A14D101 := 16#0375
|
Meanings are not established by the evidence; do not reinterpret them as an address, port, or device identifier without the MCONF documentation |
| Read address | 16#0000 |
Requested starting address; register type and addressing convention remain unknown |
| Function value | 03 |
Passed to MCONF; confirm its meaning in the applicable instruction documentation |
| Requested quantity | 5 |
Passed to MCONF; the evidence does not define its unit |
| Reported diagnostic | EIP parameter upload timeout |
Exact message reported by the project |
Correct the Structured Text Execution Order
The shown program calls MCONF before assigning D100, D101, and okuma_adresi. That ordering is a concrete initialization risk: the call can observe earlier or uninitialized values, depending on when and how it is enabled. Assign every input and configuration word before invoking the block.
D100 := 16#0A14;
D101 := 16#0375;
okuma_adresi := 16#0000;
MCONF(0, D100, 1, 03, okuma_adresi, 5, seviye, 10, 0, 0, seviye_yazma);
This reorder does not prove that the encoded values are correct. It only ensures that the displayed values exist before the instruction executes.
Configure the Data Exchange Path
The available guidance identifies two relevant application topics: Data Exchange Communication (Modbus TCP) and Editing the Data Exchange Table with the MCONF Instruction (Modbus TCP). This indicates that the connection depends on both the Modbus TCP Data Exchange configuration and the MCONF-defined table entry; locating the block in the library alone is insufficient evidence that the exchange table is valid.
- Initialize
D100,D101, andokuma_adresibefore theMCONFcall. - Use the Delta Data Exchange and MCONF application material to verify every argument against the intended ABB endpoint and table entry.
- Confirm on the ABB side that the requested data area begins at the intended address and is exposed through Modbus TCP. Resolve the ambiguity between protocol addressing and the ABB table notation rather than assuming that
16#0000maps to the desired value. - Run the exchange and verify both the MCONF result/status variables and whether
seviyechanges. Preserve the exact status returned if the read still fails.
Separate the EIP Timeout
EIP parameter upload timeout names an EIP operation, while the requested exchange uses Modbus TCP. Do not treat that message alone as proof that the Modbus TCP peer rejected the request. First establish whether the timeout occurs during an engineering upload operation, during MCONF execution, or independently; then record the operation that triggers it and the associated status.
If reordered initialization and a verified Data Exchange table still produce no read, the missing evidence is decisive: the ABB model, its Modbus TCP configuration, the intended table/address convention, the meaning of the two configuration words, and the MCONF output status. Obtain those values before changing additional parameters.
FAQ
Why does the AS228T MCONF call fail to connect to the ABB PLC?
The shown code calls MCONF before assigning D100, D101, and okuma_adresi, and the Data Exchange table has not been verified. Initialize the values first, then validate every MCONF table field against the ABB Modbus TCP configuration.
Does EIP parameter upload timeout prove that Modbus TCP is failing?
No. The reported message identifies an EIP upload timeout, while the intended transaction is Modbus TCP. Record exactly which operation triggers the timeout and diagnose it separately unless a shared cause is demonstrated.
Can I assume D100 16#0A14 and D101 16#0375 contain the ABB IP address?
No. The evidence supplies those words but does not define their encoding. Verify their fields in the applicable MCONF and Data Exchange documentation before interpreting or changing them.