News CNCnetPDM About us Support  


For Heidenhain TNC and iTNC controllers this program enables to read and output PLC data from an external PC connected to the controller via Ethernet network.

It supports reading of PLC MARKER, BYTE, WORD and DWORD values. For all supported data types you can scan adjustable PLC address ranges and output their values. You can also search PLC address ranges for a target value. It also allows to convert PLC output data from older TNC 426 and 430 devices to match the values shown at the controller.

  • Note: For this diagnostic program Heidenhain Option 18 is NOT needed. This saves you up to 1000 EUR per machine.



  • Make sure that you have an Ethernet network connection between your PC and the machine and get data, use our Heidenhain Machine Data utility to do so.
  • In case you use a firewall at your PC or your company network please make sure that there is an exception for TCP Port 19000. You can use our tool Device Port Scanner to check if your controller is reachable via port 19000. TOP



Download and extract all files to a folder of your choice on your PC.

  • Double click HeidenhainPLC.exe and enter the IP Address or DNS Hostname of your controller (1).
  • Input a start (1) and end (3) address for the PLC address range you’d like to get data from.
  • Select at least one PLC area you’d like to scan, here Marker (4).
  • After clicking button [Query] (5) the program tries to connect to your controller and read the requested data.

Read Heidenhain TNC PLC Data

FIG 1:    Read Heidenhain TNC PLC Data
  • If successful, the program outputs the PLC data in the area at the right (6) in form of PLC Area (M for MARKER, B for BYTE, W for WORD or D for DWORD) + address = value. TOP

If you search for a WORD address value the start address has to be divisible by 2 e.g. 490, 492.

If you search for a DORD address value the start address has to be divisible by 4 e.g. 360, 364.

To search for a target value enter target value, PLC start and end address and check ‘Search Target Value’ before clicking button [Query].

If searching for markers by target value only 0 or 1 as target value deliver results.

If you’re working on an older TNC 426 or 430 controller it may be required to activate the ‘Swap’ checkbox to get matching results.

Although possible it is not recommended to search through a large range of PLC addresses (> 100) or all PLC areas with a single query! TOP


If you have installed CNCnetPDM on your PC with a license other than a ‘free license’ and run this program from the folder where CNCnetPDM is installed you get unlimited functionality and output. With a free license you can search for values of one address at a time. Searching for target values is not supported in this case. Please see licensing for details or contact us if you have any questions.

  • Note: If you like to run this program from a different location on your PC you can simply copy your CNCnetPDM.ini file to this directory. TOP


Here are some useful PLC addresses for Heidenhain iTNC 530, TNC 426 or 430 devices:

Heidenhain TNC PLC DWORD Table

FIG 2:    Heidenhain TNC PLC DWORD Table

MARKER 4150: OP Mode Manual
MARKER 4152: OP Mode MDI
MARKER 4151: OP Mode Hand wheel
MARKER 4153: OP Mode Automatic single
MARKER 4154: OP Mode Automatic full
MARKER 4155: OP Mode Traversing
MARKER 4176: PR Mode Running
MARKER 4175: PR Mode Interrupted
MARKER 4177: PR Mode Error active
MARKER 4220: PR Mode Stopped extern
MARKER 4221: PR Mode Stopped intern
MARKER 4178: PR Mode Emergency A
MARKER 4222: PR Mode Emergency B
MARKER 4582: PR Mode Emergency C
MARKER 4170: PR Mode Finished

WORD 492: Override (% to be divided by 100)
WORD 272: Execution mode (subtract 1 to get real mode)
WORD 320: Target speed
WORD 322: Actual speed

DWORD 356: Programmed speed
DWORD 364: Target speed
DWORD 368: Actual speed
DWORD 360: Programmed feed rate
DWORD 388: Actual feed rate TOP


If you can ping the controller but get a ‘Connection to IP Address port 19000: Failed!’ please verify that there’s an exception for port 19000 in your firewall. Use our tool Device Port Scanner to check that your controller is reachable via that port.

If you still cannot connect to the controller please make sure that LSV2 access is not locked at the controller, see ‘Controller Setup’.

If you can connect to the controller but get something like ‘LOGIN: Area PLCDEBUG Unexpected response from device (TNC = Access denied (LSV 2))’ please check if PLC access is not locked or password protected via file OEM.SYS also see ‘Controller Setup’. TOP

Privacy notice

This website uses cookies. By continuing to use it you agree to our privacy policy.

Support | Heidenhain | Overview

For Heidenhain TNC and iTNC controllers CNCnetPDM enables you to acquire and monitor machine-, process- and quality-data and integrate it seamlessly with your business... [read more]

Support | Heidenhain | Release Notes

(7/31/2019) We released an updated version of our Heidenhain TNC device driver. HEIDENHAIN.DLL (7/31/2019) The driver now also outputs data for Error class, group, number... [read more]
Release Notes

Support | Heidenhain | TNC Machine Data

Version For Heidenhain TNC and iTNC controllers CNCnetPDM enables you to acquire,  monitor and write machine-, process- and quality-data. Seamless integration of... [read more]
TNC Machine Data

Support | Heidenhain | TNC Device Driver

Version This highly configurable Heidenhain device driver for CNCnetPDM enables you to acquire and output machine-, process- and quality data from machines with... [read more]
TNC Device Driver

Support | Heidenhain | Write TNC PLC Data

This utility program for Heidenhain TNC and iTNC controllers allows writing and reading of PLC data and machine parameters from an external PC connected to the controller via... [read more]
Write TNC PLC Data
Modified: 2020-08-24