Accessing ET200SP (SP1515PC2)

[Mason48]

Hi,
I like to show what i dit to access a sp1515pc2 cpu (aka ET200SP)
First the telegram is a bit different

    // ISO Connection Request telegram (contains also ISO Header and COTP Header)
    byte[] ISO_CR_ET200SP = {
		   	// TPKT (RFC1006 Header)
		   	0x03, // RFC 1006 ID (3) 
		   	0x00, // Reserved, always 0
		   	0x00, // High part of packet lenght (entire frame, payload and TPDU included)
		   	0x57, // Low part of packet lenght (entire frame, payload and TPDU included)
		   	// COTP (ISO 8073 Header)
		   	0x52, // PDU Size Length
		   	0xE0, // CR - Connection Request ID
		   	0x00, // Dst Reference HI
		   	0x00, // Dst Reference LO
		   	0x00, // Src Reference HI
		   	0x35, // Src Reference LO
		   	0x00, // Class + Options Flags
		   	0xC0, // PDU Max Length ID
		   	0x01, // PDU Max Length HI
		   	0x0A, // PDU Max Length LO
		   	0xC1, // Src TSAP Identifier
		   	0x1C, // Src TSAP Length (28 bytes)
		   	0x01, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00, // Src TSAP ID
			0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
            0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
            0x00, 0x00, 0x06, 0x00,
            0xC2, // Dst TSAP Identifier
		   	0x29, // Dst TSAP Length (42 bytes)
		   	// Ab hier TSAP ID (String)
		   	// SIMATIC-ROOT-HMI
		};

    // TPKT + ISO COTP Header (Connection Oriented Transport Protocol)
    byte[] TPKT_ISO_ET200SP = { // 7 bytes
		 	0x03,0x00,
            0x00,0x57,      // Telegram Length (Data Size + 87 or 91)
           	0x02,0xf0,0x80  // COTP (see above for info)
		};

and also the params of connectionparams are different because of extra bytes before the string SIMATIC-ROOT-HMI

           byte[] DestTSAP = new byte[] { 0x01, 0x06, 0x01, 0x0f, 0x00, 0x00, 0xff, 0xff, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x53, 0x49, 0x4d, 0x41, 0x54, 0x49, 0x43, 0x2d, 0x52, 0x4f, 0x4f, 0x54, 0x2d, 0x45, 0x53 };
          m_client.SetConnectionParams(address, 0x0600, DestTSAP);

And the function ISOConnect

	private int ISOConnect()
	{
		int Size;
		byte[] isocon;
        if (HostIp == "192.168.0.60")
        {
            isocon = new byte[ISO_CR_ET200SP.Length + RemoteTSAP_S.Length];

            ISO_CR_ET200SP[3] = (byte)(46 + RemoteTSAP_S.Length);
            ISO_CR_ET200SP[4] = (byte)(41 + RemoteTSAP_S.Length);
            ISO_CR_ET200SP[45] = (byte)RemoteTSAP_S.Length;

            Array.Copy(ISO_CR_ET200SP, isocon, 46);
            Array.Copy(RemoteTSAP_S, 0, isocon, 46, RemoteTSAP_S.Length);
        }
        else
        {
            isocon = new byte[ISO_CR_1500.Length + RemoteTSAP_S.Length];
            ISO_CR_1500[16] = LocalTSAP_HI;
            ISO_CR_1500[17] = LocalTSAP_LO;

            ISO_CR_1500[3] = (byte)(20 + RemoteTSAP_S.Length);
            ISO_CR_1500[4] = (byte)(15 + RemoteTSAP_S.Length);
            ISO_CR_1500[19] = (byte)RemoteTSAP_S.Length;

            Array.Copy(ISO_CR_1500, isocon, 20);
            Array.Copy(RemoteTSAP_S, 0, isocon, 20, RemoteTSAP_S.Length);
        }

        // Sends the connection request telegram      
        SendPacket(isocon);
		if (_LastError == 0)
		{
			// Gets the reply (if any)
			Size = RecvIsoPacket();
			if (_LastError == 0)
			{
                if ((Size == 36 && (HostIp != "192.168.0.60")) || (Size == 87 && (HostIp == "192.168.0.60")))
                {
                    if (LastPDUType != (byte)0xD0) // 0xD0 = CC Connection confirm
                        _LastError = S7Consts.errIsoConnect;
                }
                else
                    _LastError = S7Consts.errIsoInvalidPDU;
            }
		}
		return _LastError;
	}

I'm a newbie in developing and maybe is this an idea that can be implemented in the program.

[thomas-v2]

Hi,
what is a "sp1515pc2 cpu"? An standard ET200SP CPU is either a 1510, 1512 or 1514.

1515 is maybe one of these obscure "Open Controllers"?

If the TSAP is almost similar to what the old controllers supported, the long TSAP may be used for routing information. Thus this won't be a fixed value, but you have to insert some type of subnet id's which you only have in the source project.