Content
# SCADA Comm Notes
Found how the reservoir levels are transmitted to the sites. Gateway Event Scripts in SCADA.
![[SCADA_Comm_Notes_Snapshot_1.jpg]]
Except for W22 and Res1, which are written to by ModbusTCP comm from Res2
NEED PLC PROGRAMS FROM RES 1 AND RES 3
Res 3 level is transmitted to Well 3 by the old Phoenix IO radios and is input to the 820 on input 2
[this code is there, but not used]
THE "TRUE" BIT INPUTS TO THE COPY AND MODBUS MSG BLOCKS IN THE COMMS PROGRAMS IN WELL 4, 3, AND 7 WERE ALL UNCONNECTED. THIS SAYS THE MODBUS COMM TO WRITE THE LEVELS FROM RES 1 AND RES 3 ARE IN ANOTHER PLC THAT WRITES TO THE "res_1_level" and "res_3_level" tags. THEN MAYBE SCADA PICS IT UP AND DISTRIBUTES IT? NEED TO INVESTIGATE RES 1 AND RES 3 PLC TO SEE IF THEY WRITE THE LEVELS LIKE RES 2 DOES.
I WONDER IS RES 1 AND RES 3 WRITE THEIR LEVELS TO RES 2. PROBABLY NOT. BOTH RES 1 AND RES 3 TAGS IN THE PLC ARE 0
WELL 3 HAS RES 1 AND RES 3 LEVELS DATA IN THE TAGS
LOOK IN RES 1 AND RES 3 PLC TO SEE IF THEY ARE WRITING THEIR LEVELS TO W3, AND W4. THEN MAYBE THE WRITE TO WELL 7 IS DISABLE OR MISSING?
RES 2 PLC WRITES THE TANK LEVEL TO RES 1 PLC AND W22 PLC
THESE ARE THE ONLY TWO SITES THAT RUN OFF OF RES 2 LEVEL ??
THERE ARE TWO MODBUS WRITE COMM BLOCKS
MSG_MODBUS2_RES1
LOCAL CONFIGLOCAL CHANNEL #4TRIGGER ONCEMODBUS COMMAND 161 ELEMENT
TARGET CONFIGTARGET'S MODBUS DATA ADDRESS = 11TARGET NODE ADDRESS = 192.168.100.111TARGET PORT 502UNIT IDENTIFIER = 1
LOCAL ADDRESSLOCALADDR = 1277
MSG_MODBUS2_W22
LOCAL CONFIGLOCAL CHANNEL #4TRIGGER ONCEMODBUS COMMAND 161 ELEMENT
TARGET CONFIGTARGET'S MODBUS DATA ADDRESS = 16 [40016?] LOOKS LIKE N11:15 IN W22 PLCTARGET NODE ADDRESS = 192.168.100.150TARGET PORT 502UNIT IDENTIFIER = 1
LOCAL ADDRESSLOCALADDR = 1277
MODBUS MAPPING
POINTS OF INTEREST:400035-36 RES_1_LEVEL (REAL)400037-38 RES_3_LEVEL (REAL)
IN WELL 22 PLC MODBUS HOLDING REG ARE IN N11 AND COILS ARE B3