PLC通信协议【西门子】S7系列协议初始化报文

s7-200

发送：03 00 00 16 11 e0 00 00 00 01 00 c1 02 4d 57 c2 02 4d 57 c0 01 09
返回：03 00 00 16 11 d0 00 01 00 0c 00 c1 02 4d 57 c2 02 4d 57 c0 01 09
发送：03 00 00 19 02 f0 80 32 01 00 00 00 00 00 08 00 00 f0 00 00 01 00 01 03 c0
返回：03 00 00 1b 02 f0 80 32 03 00 00 00 00 00 08 00 00 00 00 f0 01 00 01 00 f0 00 f0

s7-200smart
s7-200smart只需注意倒数第四项Source TSAP和倒数第一项Destination TSAP，分别代表PLC参数中的localTASP和RemotTASP参数，默认为 0x0200 及 0x0201

发送：03 00 00 16 11 E0 00 00 00 01 00 C0 01 09 C1 02 02 00 C2 02 02 01
返回：03 00 00 16 11 D0 00 01 00 08 00 C0 01 09 C1 02 02 00 C2 02 02 01
发送：03 00 00 19 02 F0 80 32 01 00 00 00 38 00 08 00 00 F0 00 00 01 00 01 00 F0
返回：03 00 00 1B 02 F0 80 32 03 00 00 00 00 00 08 00 00 00 00 F0 01 00 01 00 F0 00 F0 

s7-300

发送：03 00 00 16 11 e0 00 00 00