链路先握手再通信,不握手不通信,通信中断须再握手(建立链路)确认报文的来回须对方的认可,认可方式可以是一条专用的报文也可以是下一个询问报文中的FCB来暗示原因传送的信息都必须带上原因,不允许没有理由的传输地址每个信息量都有一个唯一的不重复的地址类型每种信息的传输都有不同的功能类型68 启动符5D 长度6C 控制域103 控制域278 控制域300 控制域401 遥信D0 可变结构限定词(信息体个数)14 00 传送原因01 00 站地址01 00 00 信息体地址(点号=信息体地址-起始地址)00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00结构说明:TYP:类型标识,可查表在监视方向的过程信息<0> := 未定义<1> := 单点信息M_SP_NA_1<3> := 双点信息M_DP_NA_1<5> := 步位置信息M_ST_NA_1<7> := 32比特串M_BO_NA_1<9> := 测量值,归一化值M_ME_NA_1<11> := 测量值,标度化值M_ME_NB_1<13> := 测量值,短浮点数M_ME_NC_1<15> := 累计量M_IT_NA_1<20> := 带状态检出的成组单点信息M_PS_NA_1<21> := 不带品质描述的归一化测量值M_ME_ND_1<22..29>:= 为将来的兼容定义保留<30> := 带时标CP56Time2a的单点信息M_SP_TB_1<31> := 带时标CP56Time2a的双点信息M_DP_TB_1<32> := 带时标CP56Time2a的步位置信息M_ST_TB_1<33> := 带时标CP56Time2a的32比特串M_BO_TB_1<34> := 带时标CP56Time2a的测量值,归一化值M_ME_TD_1<35> := 带时标CP56Time2a的测量值,标度化值M_ME_TE_1<36> := 带时标CP56Time2a的测量值,短浮点数M_ME_TF_1<37> := 带时标CP56Time2a的累计量M_IT_TB_1<38> := 带时标CP56Time2a的继电保护装置事件M_EP_TD_1<39> := 带时标CP56Time2a的继电保护装置成组启动事件M_EP_TE_1<40> := 带时标CP56Time2a的继电保护装置成组输出电路信息M_EP_TF_1<41..44>:= 为将来的兼容定义保留在控制方向的过程信息类型标识:= UI8[1..8]<45..69>CON <45> := 单命令C_SC_NA_1 CON <46> := 双命令C_DC_NA_1 CON <47> := 步调节命令C_RC_NA_1 CON <48> := 设点命令,归一化值C_SE_NA_1 CON <49> := 设点命令,标度化值C_SE_NB_1 CON <50> := 设点命令,短浮点数C_SE_NC_1 CON <51> := 32比特串C_BO_NA_1<52..57> := 为将来的兼容定义保留在控制方向的过程信息,带时标的ASDUCON <58> := 带时标CP56Time2a的单命令C_SC_TA_1 CON <59> := 带时标CP56Time2a的双命令C_DC_TA_1 CON <60> := 带时标CP56Time2a的步调节命令C_RC_TA_1 CON <61> := 带时标CP56Time2a的设点命令,归一化值C_SE_TA_1 CON <62> := 带时标CP56Time2a的设点命令,标度化值C_SE_TB_1 CON <63> := 带时标CP56Time2a的设点命令,短浮点数C_SE_TC_1 CON <64> := 带时标CP56Time2a的32比特串C_BO_TA_1 <65..69> := 为将来的兼容定义保留VSQ:可变结构限定词D7 D6 … … D0SQ 信息对象数目SQ=0:离散的信息报告SQ=1:顺序的信息报告信息对象数目的个数是0-127;一包报文中所含的信息(YC 、YX 等)的数目COT_L,COTH:传送原因1,NET 保护单元之间的通讯怎样设置在6800里??2,控制域的I,S,U 等格式是怎样用的I 格式:信息传输格式类型(Information transmit format)简称 I-FORMAT 。
用于传输含有信息体的报文和确认对方I 格式的信息报文 控制域一、二:发送Information Numbers(WORD)控制域第一个八位位组的比特 1 = 0 定义了I 格式, I 格式的APDU 常常包含一个ASDU 。
I 格式的控制信息如图6所示比特 8 7 6 5 4 3 2 1图 6 信息传输格式类型( I 格式)的控制域控制域第一个八位位组的比特 1= 1 并且比特2 = 0 定义了S 格式。
S 格式的APDU 只包括APCI 。
S 格式的控制信息如图7所示。
比特图 7 编号的监视功能类型(S 格式)的控制域控制域第一个八位位组的比特1 = 1 并且比特2 =1 定义了U 格式。
U 格式的APDU 只包括APCI. U 格式的控制信息如图8所示。
在同一时刻,TESTFR , STOPDT 或 STARTDT 中只有一个功能是激活的。
比特 8 76 5 4 3 2 1图 8 未编号的控制功能类型(U 格式 ) 的控制域八位位组 1 八位位组 2 八位位组 3 八位位组 4八位位组1 八位位组 3 八位位组 4八位位组 2 八位位组1 八位位组 3 八位位组 4八位位组 2S格式:计数的监视功能类型(Numbered supervisory functions)简称 S-FORMAT。
用于传输对站端确认的报文68 04 0100 0800头长度 01 接收长度U格式:不计数的控制功能类型(Unnumbered control function)简称 U-FORMAT。
用于传输链路控制命令的报文U格式报文(Hex) 控制域(Bin) 语义6804 07000000 00000111 启动命令6804 0B000000 00001011 启动确认6804 13000000 00010011 停止命令6804 23000000 00100011 停止确认6804 43000000 01000011 测试命令6804 83000000 10000011 测试确认3,104通讯过程:a,建链、启动传输b,是否启动确认 (未确认等待启动帧返回a)c,站召唤d,回答全数据e,回答结束否 (等待d结束,未结束返回d)f,有无定时任务g,遥控遥调h,对时测试i,超时处理j,接收变化数据k,S-FORMAT确认 (确认完毕,返回f)另外:超时时间(建议)T0 建立连接超时。
T0〈30秒T1 发送或测试APDU的超时。
T1〈15 秒。
T2 S格式确认时间。
T2〈10 秒(T2<T1)T3 链路上没有任何格式的信息而须发出U格式命令。
T3〈 20 秒。
物理层网络特定参数链路层平衡传输应用层2Byte ASDU地址,3Byte 信息地址,2Byte 传送原因,APDU最大长度253 端口号2404发送状态变量和接收序号的最大差值k默认12(1-32767)接收到w个I格式的报文后给出确认,w的默认值为8启动发送数据:68 04 07 00 00 00(对这条报文做个分析;起始字节=68 数据单元长度(APDU)=4 U格式帧 STARTDT:ACT=1 CON=0 STOPDT:ACT=0 CON=0 TESTFR: ACT=0 CON=0)接收数据:68 04 0b 00 00 00(这条报文分析:起始字节=68 数据单元长度(APDU)=4 U格式帧 STARTDT:ACT=0 CON=1 STOPDT:ACT=0 CON=0 TESTFR: ACT=0 CON=0链路连接完成!上面两条报文是:启动命令,启动确认04,07)开始测试过程:发送数据:68 04 43 00 00 00(起始字节=68 数据单元长度(APDU)=4 U格式帧 STARTDT:ACT=0 CON=0 STOPDT:ACT=0 CON=0 TESTFR: ACT= CON=0)接收数据:68 04 83 00 00 00(起始字节=68 数据单元长度(APDU)=4 U格式帧 STARTDT:ACT=0 CON=0 STOPDT:ACT=0 CON=0 TESTFR: ACT=0 CON=143,83,是测试命令,和测试确认)发送数据:68 04 43 00 00 00接收数据:68 04 83 00 00 00发送数据:68 04 43 00 00 00接收数据:68 04 83 00 00 00开始总召过程发送数据: (64:TPY总召命令,01:NUM,06 00:Cause激活,01 00 :F.Add,00 00 00 :I.add) 68 0E 3C 00 9E 02 64 01 06 00 01 00 00 00 00 14104站召唤680E00000000 64 01 0600 0100 000000 14Head Type Num Cause F.Add I.Add接收数据: (64:TPY总召命令,01:NUM,07 00:Cause激活确认,01 00 :F.Add,00 00 00:I.add)68 0E 6A 03 78 00 64 01 07 00 01 00 00 00 00 14接收数据: (01:遥信[全遥信和遥信变位],D0:可变结构限定词[信息体的个数],14 00:传送原因,全数据, 01 00:站地址,01 00 00:信息体地址[点号=信息体地址-起始地址],遥信状态 00:分,01合)起始地址 YX 01 00 00 YC 00 40 0068 5D 6C 03 78 00 01 D0 14 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00接收数据:68 5D 6E 03 78 00 01 D0 14 00 01 00 51 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0000 00 00 00 00 00 00 00 01 00 01 01 01 00 01 00 00 01 01 01 01 00 01 00 01 01 01 0101 00 01 00 00 00 00 00 00 00 00 00发送数据:68 04 01 00 A4 02(这个是S帧,没有具体信息内容,用来对站端所发信息报文的确认)发送数据:68 04 43 00 00 00发送数据:68 04 43 00 00 00接收数据:68 5D 70 03 78 00 01 D0 14 00 01 00 A1 00 00 01 00 00 00 00 00 00 00 00 00 00 0000 00 00 00 01 01 00 00 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0001 00 01 01 01 00 01 00 00 01 00 00 00 01 01 00 00 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00发送数据:68 04 43 00 00 00接收数据:68 1D 72 03 78 00 01 90 14 00 01 00 F1 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00接收数据:(15:遥测,B2可变结构限定词SQ=1顺序信息/=0离散信息,14 00:全数据, 00 :站地址,01 07 00 :信息体地址[点号=信息体地址-起始地址,比如:信息体地址 =0X701,应用厂站表配置YC起始地址=0X701,所以点号=0X701-0X701=0])注意:YX,COS,SOE的起始地址一致68 71 74 03 78 00 15 B2 14 00 01 00 01 0700 00 00 00 00 03 00 03 00 03 00 00 00 00 00 05 00 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00接收数据:68 71 76 03 78 00 15 B2 14 00 01 00 33 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 49 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 BA F1 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00接收数据:68 71 78 03 78 00 15 B2 14 00 01 00 65 07 00 00 00 00 00 00 00 00 00 00 00 00 0000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00接收数据:68 71 7A 03 78 00 15 B2 14 00 01 00 97 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00发送数据:68 04 43 00 00 00发送数据:68 04 43 00 00 00接收数据:68 71 7C 03 78 00 15 B2 14 00 01 00 C9 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00接收数据:68 19 7E 03 78 00 15 86 14 00 01 00 FB 07 00 00 00 00 00 00 00 00 00 00 00 00 00接收数据:68 0E 80 03 78 00 64 01 0A 00 01 00 00 00 00 14接收数据:68 04 83 00 00 00接收数据:68 04 83 00 00 00接收数据:68 04 83 00 00 00接收数据:68 04 83 00 00 00接收数据:68 04 83 00 00 00发送数据:68 04 43 00 00 00接收数据:68 04 83 00 00 00发送数据:68 04 43 00 00 00接收数据:68 04 83 00 00 00发送数据:68 04 43 00 00 00104补充说明:a.主站(客户)端和RTU(服务器)端采用标准的TCP/IP客户--服务器模式建立TCP连接,即主站(客户)端按照Socket()->Connect()的顺序进行,RTU(服务器)端按Socket()->Bind()->Listen()->Accept()的顺序进行。