This utility program for Heidenhain TNC and iTNC controllers allows writing and reading of PLC data and machine parameters from an external PC connected to the controller via Ethernet network.
It supports writing and reading of PLC MARKER, BYTE, WORD and DWORD values and machine parameters. It also allows to convert PLC BYTE, WORD and DWORD output data read from older TNC 426 and 430 devices to match the values shown at the controller.
Note: For this diagnostic program Heidenhain Option 18 is NOT needed. This saves you up to 1000 EUR per machine.
Make sure that you have an Ethernet network connection between your PC and the machine and get data, use our Heidenhain Machine Data utility to do so.
In case you use a firewall at your PC or your company network please make sure that there is an exception for TCP Port 19000. You can use our tool Device Port Scanner to check if your controller is reachable via port 19000. TOP
SOFTWARE SETUP & USAGE
Download writetncplc.zip and extract all files to a folder of your choice on your PC.
Double click HeidenhainPLCRW.exe and enter the IP Address or DNS Hostname of your controller (1).
Input a PLC address or machine parameter (2) name you’d like to read values from or write values to.
Select one of the PLC areas or the machine parameter area, here Parameter (3).
After clicking button [Query] (4) the program tries to connect to your controller and read or write the requested data.
FIG 1: Read / Write Heidenhain TNC PLC Data or Machine Parameter
If successful, the program outputs the result of the operation in the area at the right (5).
For PLC data you get M for MARKER, B for BYTE, W for WORD or D for DWORD + address = value.
For a machine parameter you get the name of the parameter followed by the value read or written. TOP
To write a PLC address value or a machine parameter you have to enter the desired value under ‘Write Value’, activate checkbox ‘Write Value’ and click button [Execute]. If successful the program outputs the result of the write operation in the area at the right.
For testing it is usually safe to write data to MARKER, BYTE or WORD address 1. For DWORD you may use 24. If you change machine parameter 3515 please reset it to its original value afterwards. In any case it is recommended to verify that PLC addresses or machine parameters you intend to write values to for testing are NOT used for production tasks at the machine!
To verify the result of a write operation you can simply deactivate checkbox ‘Write Value’ and click button [Execute] to check the actual value.
If you read or write a WORD address value the PLC address has to be divisible by 2 e.g. 490, 492.
If you read or write a DORD address value the PLC address has to be divisible by 4 e.g. 360, 364.
In case of writing a MARKER address value you have to enter either 0 or 1 as ‘Write Value’.
If you read BYTE, WORD or DWORD values from an older TNC 426 or 430 controller it may be required to activate the ‘Swap’ checkbox to get correct results. Activating ‘Swap’ has no influence on writing.
A machine parameter can be entered as MP + Parameter name or just parameter name, both deliver the same result e.g. MP3515 or 3515. Please note that reading and writing of machine parameters may not be supported by older TNC 426 and 430 controllers.TOP
If you have installed CNCnetPDM on your PC with a license other than a ‘free license’ and run this program from the folder where CNCnetPDM is installed you get unlimited functionality. With a free license you can read PLC address values or machine parameters. Writing of values is not supported in this case. Please see licensing for details or contact us if you have any questions.
Note: If you like to run this program from a different location on your PC you can simply copy your CNCnetPDM.ini file to this directory. TOP
TYPICAL PLC ADDRESSES
Below the image you can find some useful machine parameters that can be written and read to/from Heidenhain iTNC 530, TNC 426 or 430 devices. For PLC addresses please refer to this section.
MP6520 Probing feed rate for tool measurement with non-rotating tool, Input: 1 to 10 000 [mm/min]
MP6550 Rapid traverse in probing cycle, Input: 10 to 1 000 000 [mm/min]
MP6570 Maximum permissible surface cutting speed of the tool tooth, Input: 1.0000 to 120.0000 [m/min]
MP7260 Size of the tool table, Input: 0 to 30 000, Number of tools (T number) TOP
If you can ping the controller but get a ‘Connection to IP Address port 19000: Failed!’ please verify that there’s an exception for port 19000 in your firewall. Use our tool Device Port Scanner to check that your controller is reachable via that port.
If you still cannot connect to the controller please make sure that LSV2 access is not locked at the controller, see ‘Controller Setup’.
If you can connect to the controller but get something like ‘LOGIN: Area PLCDEBUG Unexpected response from device (TNC = Access denied (LSV 2))’ please check if PLC access is not locked or password protected via file OEM.SYS also see ‘Controller Setup’. TOP