关于西门子PLC与上位机通讯的damo程序，以及更改后的S7.net+

西门子数控通讯软件windows版 802S/C/D 810/840D

在实际工程项目中，经常会遇到 400H 和 S7-1500 通讯的问题，基于两类控制器所支持的接 口而言，有三种可能的通讯方式：Profibus DP、以太网。考虑到 S7-1500 和 400H 集成的 DP 接口均只能用作 DP 主站，所以两者之间不能采用 Profibus DP 的主从通讯方式。 本文主要介绍通过以太网以及 PCS7 工业库实现 400H 和 S7-1500 之间的通讯。 要实现 H 系统集成 PN 口与 S7-1500 的通讯，可以采用基于 S7 连接的方式，配和“H_Status”功能块来确定激活哪一个 CPU 的连接完成数据交换。

与西门子PLC通讯的调试软件 对应博文《案例分享：Qt西门子PLC调试模拟工具(包含PLC上位机通讯，PLC服务器，读写Byte、Int、DInt、Real)（持续更新，当前v1.6.0）》 https://blog.csdn.net/qq21497936/article/details/110071837

AB与西门子通讯方案

此动态链接库DLL支持S7-200\S7-300\S7-400\S7-1200\S7-1500------------------------------

自动生成报文，只需输入IP地址与端口号即可使用，支持real（float）数据类型、INT数据类型、bool数据类型、string数据类型进行读写

关于上位机通过TCP写入读取西门子PLC指定内容，数据类型转换，适合人群智能制造，工业行业。

与西门子PLC通讯的Labview库，还不错。 以下是英文声明： Warning, the attached files are experimental VIs provided for educational purposes only. No warrantee is expressed or implied. You should test your code and completely understand the implications of writing to or reading from an operating PLC. PLCs are often used to control hazardous processes and/or equipment. Writing to or reading from a PLC in active control of equipment or process can result in the disruption of the PLC program or data areas, potentially causing economic loss, property damage, generation or release of hazardous substances and/or personal injury up to and including death. Test your software in a controlled environment and qualify it before using it on active equipment or processes. To my knowledge, Siemens has never released the details of the S7 protocol. Much of what is publicly available on S7 is based on observations of the protocol by others. There is an open source S7 data exchange package available at http://libnodave.sourceforge.net/ that documents many S7 features. These VIs were based upon the example posted at http://decibel.ni.com/content/docs/DOC-5467. They were modified by observing and mimicking a S7 data exchange between a protocol converter and a S7-300 series PLC. The observations were accomplished with the wireshark network protocol analyzer, available at http://www.wireshark.org/ and the Wireshark Plugin f黵 S7-Protokoll, available at http://sps-forum.de/showthread.php?p=202763. The Address Area parameter determines which PLC memory area is the target for the reads and writes. I have only tested reads and writes to the Data Block (DB) Area. Your application should read and write to separate read and write DBs dedicated for transfer only. By confining reads and writes to dedicated Data Blocks, the risk of unintended overwrites may be reduced. The data type: S7Com_Transport_Size.ctl is a ring variable that contains the parameter for the size or type of the transfer. I have only had success with the BYTE, INT and DINT transport sizes on an S7-300 series PLC. The other sizes remain in the ring variable for testing on other PLCs. I do not know if the bytes of a multiple-byte variable are read or written atomically. The example contains two top-level VIs: S7Com_Once.vi and S7Com_W+R_Loop.vi. S7Com_Once.vi performs one read or write per execution. It writes to the target PLC from an array of I32, it reads from the target PLC into an array of I32. The number of bytes written is proportional to the number of elements in the array to be written and the transport size parameter. S7Com_W+R_Loop.vi regularly writes to and reads from a pair of DBs in the target PLC. In order to use it, your Step7 PLC project should provide two Data Blocks, DB11 and DB12. See the screen capture image db11&12.PNG for their layout. After downloading the DBs to your PLC, monitor and change DB VAlues with a VAT. As can be seen in the VI, the transfer size is DWORD. Included are example VIs (S7Com_to_PLC(SubVI).vi and S7Com_from_PLC(SubVI).vi) to map variables between Labview and the S7 PLC DBs. In the example, they use the same cluster type definition (S7Com_PLC_Data.ctl) but that is not a requirement. When you change the mappings, you must calculate the size of the variables to be read from the PLC in order to use the correct Read Length parameter. The read length parameter is in transport size units. The write length parameter is taken from the size of the write data array, so if the write data array is larger than you anticipate, data may be overwritten. The hex byte and hex byte array type definitions were created to format the internal data structures to show hex values so that they could be easily compared to the wireshark packet dumps. These VIs have been minimally tested on a NI 9072 cRIO. This is not finished. Needed are better error checking, cleaner S7 Response decoding, and stress testing with malformed data.

Unity与plc通讯时使用的Dll库和接口函数说明书