For Heidenhain TNC and iTNC controllers this program enables to read and output PLC data from an external PC connected to the controller via Ethernet network.
It supports reading of PLC MARKER, BYTE, WORD and DWORD values. For all supported data types you can scan adjustable PLC address ranges and output their values. You can also search PLC address ranges for a target value. It also allows to convert PLC output data from older TNC 426 and 430 devices to match the values shown at the controller.
Make sure that you have an Ethernet network connection between your PC and the machine and get data, use our Heidenhain Machine Data utility to do so.
In case you use a firewall at your PC or your company network please make sure that there is an exception for TCP Port 19000. You can use our tool Device Port Scanner to check if your controller is reachable via port 19000. TOP
SOFTWARE SETUP & USAGE
Download readtncplc.zip and extract all files to a folder of your choice on your PC.
Double click HeidenhainPLC.exe and enter the IP Address or DNS Hostname of your controller (1).
Input a start (1) and end (3) address for the PLC address range you’d like to get data from.
Select at least one PLC area you’d like to scan, here Marker (4).
After clicking button [Query] (5) the program tries to connect to your controller and read the requested data.
FIG 1: Read Heidenhain TNC PLC Data
If successful, the program outputs the PLC data in the area at the right (6) in form of PLC Area (M for MARKER, B for BYTE, W for WORD or D for DWORD) + address = value. TOP
If you search for a WORD address value the start address has to be divisible by 2 e.g. 490, 492.
If you search for a DORD address value the start address has to be divisible by 4 e.g. 360, 364.
To search for a target value enter target value, PLC start and end address and check ‘Search Target Value’ before clicking button [Query].
If searching for markers by target value only 0 or 1 as target value deliver results.
If you’re working on an older TNC 426 or 430 controller it may be required to activate the ‘Swap’ checkbox to get matching results.
Although possible it is not recommended to search through a large range of PLC addresses (> 100) or all PLC areas with a single query! TOP
If you have installed CNCnetPDM on your PC with a license other than a ‘free license’ and run this program from the folder where CNCnetPDM is installed you get unlimited functionality and output. With a free license you can search for values of one address at a time. Searching for target values is not supported in this case. Please see licensing for details or contact us if you have any questions.
Note: If you like to run this program from a different location on your PC you can simply copy your CNCnetPDM.ini file to this directory. TOP
TYPICAL PLC ADDRESSES
Here are some useful PLC addresses for Heidenhain iTNC 530, TNC 426 or 430 devices:
FIG 2: Heidenhain TNC PLC DWORD Table
MARKER 4150: OP Mode Manual MARKER 4152: OP Mode MDI MARKER 4151: OP Mode Hand wheel MARKER 4153: OP Mode Automatic single MARKER 4154: OP Mode Automatic full MARKER 4155: OP Mode Traversing MARKER 4176: PR Mode Running MARKER 4175: PR Mode Interrupted MARKER 4177: PR Mode Error active MARKER 4220: PR Mode Stopped extern MARKER 4221: PR Mode Stopped intern MARKER 4178: PR Mode Emergency A MARKER 4222: PR Mode Emergency B MARKER 4582: PR Mode Emergency C MARKER 4170: PR Mode Finished
WORD 492: Override (% to be divided by 100) WORD 272: Execution mode (subtract 1 to get real mode) WORD 320: Target speed WORD 322: Actual speed
DWORD 356: Programmed speed DWORD 364: Target speed DWORD 368: Actual speed DWORD 360: Programmed feed rate DWORD 388: Actual feed rate TOP
If you can ping the controller but get a ‘Connection to IP Address port 19000: Failed!’ please verify that there’s an exception for port 19000 in your firewall. Use our tool Device Port Scanner to check that your controller is reachable via that port.
If you still cannot connect to the controller please make sure that LSV2 access is not locked at the controller, see ‘Controller Setup’.
If you can connect to the controller but get something like ‘LOGIN: Area PLCDEBUG Unexpected response from device (TNC = Access denied (LSV 2))’ please check if PLC access is not locked or password protected via file OEM.SYS also see ‘Controller Setup’. TOP