Skip to content

Inovance Modbus TCP

Inovance Modbus TCP is a version of the Modbus protocol based on Ethernet, utilizing TCP/IP for communication.

The Neuron Inovance Modbus TCP plugin is tailored for Inovance PLC tags.

Add Device

Go to Configuration -> South Devices, then click Add Device to add the driver. Configure the following settings in the popup dialog box.

Inovance Modbus TCPModbus TCP protocol implementation, adapted for Inovance PLC points.

Device Configuration

After clicking Create, you will be redirected to the Device Configuration page, where we will set up the parameters required for Neuron to establish a connection with the device. You can also click the device configuration icon on the southbound device card to enter the Device Configuration interface.

EndiannessByte order of tags with 32 bits, ABCD corresponds to 1234.
Send IntervalThe waiting time between sending each read/write command. Some serial devices may discard certain commands if they receive consecutive commands in a short period of time.
PLC IP AddressThe IP address of the device.
PLC PortThe port number of the device.
Connection TimeoutThe time the system waits for a device to respond to a command.

Configure Data Groups and Tags

After the plugin is added and configured, the next step is to establish communication between your device and Neuron by adding groups and tags to the Southbound driver.

Once device configuration is completed, navigate to the South Devices page. Click on the device card or device row to access the Group List page. Here, you can create a new group by clicking on Create, then specifying the group name and data collection interval.

Upon successfully creating a group, click on its name to proceed to the Tag List page. This page allows you to add device tags for data collection. You'll need to provide information such as the tag address, attributes, and data type.

For information on general configuration items, see Connect to Southbound Devices. The subsequent section will concentrate on configurations specific to the driver.

Data types

  • BIT
  • INT8
  • UINT8
  • INT16
  • UINT16
  • INT32
  • UINT32
  • INT64
  • UINT64

Address format



Since communication is done via TCP/IP, the device is searched through the IP address and port number, making it unnecessary to specify the station number in the message. Neuron defaults the station number to 1.


Required, refers to the register address. HuiChuan PLC supports coil and register access for MODBUS protocol. Different from the standard Modbus protocol, each area's address range is as follows:

The address areas are divided into two types according to the PLC model.

Small PLCs: EASY series, H5U, etc.

AreaAddress RangeQuantityAttributeRegister SizeFunction CodeData Type
M0-M7999(Coils)0x0000-0x1F3F (0-7999)8000Read/Write1Bit0x01,0x05,0x0fBIT
B0-B32767(Coils)0x3000-0xAFFF (12288-45055)32768Read/Write1Bit0x01,0x05,0x0fBIT
S0-S4095(Coils)0xE000-0xEFFF (57344-61439)4096Read/Write1Bit0x01,0x05,0x0fBIT
X0-X1777(octal) (Coils)0xF800-0xFBFF (63488-64511)1024Read/Write1Bit0x01,0x05,0x0fBIT
Y0-X1777(octal) (Coils)0xFC00-0xFFFF (64512-65535)1024Read/Write1Bit0x01,0x05,0x0fBIT
D0-D7999(Holding Registers)0x0000-0x1F3F (0-7999)8000Read/Write16Bit,2Byte0x03,0x06,0x10Various
R0-R32767(Holding Registers)0x3000-0xAFFF (12288-45055)32768Read/Write16Bit,2Byte0x03,0x06,0x10Various


The X and Y areas' addresses are represented in octal.

Medium PLCs: AM series, AC series, etc.

AreaAddress RangeQuantityAttributeRegister SizeFunction CodeData Type
QX0.0-QX8191.7(Coils)0x0000-0xFFFF (0-65536)65536Read/Write1Bit0x01,0x05,0x0fBIT
IX0.0-IX8191.7(Input)0x0000-0xFFFF (0-65536)65536Read1Bit0x01,0x05,0x0fBIT
MW0-MW65535(Holding Registers)0x0000-0xFFFF (0-65536)65536Read/Write16Bit,2Byte0x03,0x06,0x10Various
SM0-SM79990x0000-0x1F3F (0-7999)8000Read/Write16Bit,2Byte0x01,0x05,0x0fBIT
SD0-SD79990x0000-0x1F3F (0-7999)8000Read/Write16Bit,2Byte0x03,0x06,0x10Various


The M,I,Q area supports multiple addressing methods, including (M|I|Q)X, (M|I|Q)B, (M|I|Q)W, (M|I|Q)D, which correspond to addressing by bit, Byte, Word, and Dword, respectively.

When using MX and MB addressing methods, the tags only support read attributes.


Optional, specify a specific bit in a register

AddressData TypeDescription
D4.0bitD area, address 4, bit 0
D10.4bitD area, address 10, bit 4
D1.15bitD area, address 1, bit 15


Optional, byte order, applicable to data types int16/uint16/int32/uint32/float, see the table below for details.

SymbolByte OrderSupported Data TypesNote
#L1,2int16/uint16Default byte order if not specified
#LL3,4,1,2int32/uint32/floatDefault byte order if not specified


The byte order of a tag has a higher priority than the byte order configuration of a node. That is to say, once the byte order is configured for a tag, it follows the configuration of that tag and ignores the node configuration.


When the data type is STRING, .LEN is a required field, indicating the number of bytes the string occupies. Each register contains two storage methods: H, L, as shown in the table below.

HOne register stores two bytes, with the high byte first
LOne register stores two bytes, with the low byte first


Please note, the default byte order for Inovance plugin strings is L.


Optional, read and write the length of bytes type data, applicable to bytes data type.


A register of the Modbus driver contains 2 bytes. When reading and writing Modbus register data in the bytes data type, please ensure that the bytes parameter is set to an even number.

Example Addresses

AddressData TypeDescription
D4int16D area, address 4, byte order #L
D4#Lint16D area, address 4, byte order #L
D4#Buint16D area, address 4, byte order #B
D4int32D area, address 4, byte order #LL
D4#LBuint32D area, address 4, byte order #LB
D4#BBuint32D area, address 4, byte order #BB
D4#LLint32D area, address 4, byte order #LL
D4#BLfloatD area, address 4, byte order #BL
D1.10StringD area, address 1, character length 10, byte order L, which occupies addresses D1 to D5
D1.10HStringD area, address 1, character length 10, byte order H, which occupies addresses D1 to D5
D1.10LStringD area, address 1, character length 10, byte order L, which occupies addresses D1 to D5
M8bitM area, address 8
X10bitM area, address 8
MX1.1bitM area, address is the tenth bit of the first register
MB1int8X area, address is the low byte of the first register
MW1int16X area, address is the second register
MD1int32X area, address is the third register

Use Case

Using Inovance' PLC programming software AutoShop, you can quickly connect to the PLC and Neuron for debugging. For specific operations, see Connect to Easy521.

Data Monitoring

After completing the point configuration, you can click Monitoring -> Data Monitoring to view device information and control devices. For details, refer to Data Monitoring.