巧用python之--模仿PLC(PLC模擬器)

工作中用到了VM(VisionMaster4.3)有時候需要和PLC打交道,但是PLC畢竟是別人的,不方便修改別人的程序,這時候需要一個靈活的PLC模擬器是多么好呀!

先說背景:

PLC型號
匯川Easy521:
Modbus TCP 192.168.1.10:502?
在匯川Easy521中Modbus保持寄存器=D寄存器 ,在modbus協議中 0-4區 3區就是保持寄存器(R/W)

那么事情很簡單了:只需要做一個ModbusTCP的服務端就能模擬PLC:

Modbus RTU是主從結構分 Modbus? 主機 / 從機 ?Master / Slave;

RTU模式主從主機會輪詢從機問一次答一次;? ?一般電腦做主機 PLC做從機;

但是當電腦同時連接很多臺PLC,電腦做主機,主動詢問PLC那么電腦的壓力會很大;

這時候電腦可以做從機,多個PLC做主機,電腦端成了被動,那么電腦壓力會小很多;

(適用于MODBUS RTU &TCP) 扯遠了;

好了這里只說Modbus_TCP?粗略的說Modbus_TCP的報文實際就是RTU 增加文件頭去掉CRC校驗;

注意下面說的Tcp都指得是modbusTCP;;;

客戶端服務器?Client/Server

VisionMaster4.3只支持Modbus> TcpClient?

TcpClient按主從結構分是主機/(Master), PLC扮演的是 Modbus> TcpServer (Slave)

所以在Modbustcp這里,服務器是modbus從機,客戶端是modbus主機;

由 TcpClient(VM) 去輪詢?TcpServer(PLC);

? 好了,搞清楚原理了,下來就是,模擬一個TcpServer(PLC);就是一個可以用的PLC模擬器.

當然你用Modsim/ModScan也可以,但是操作不便;

;因為之前就做過一些用hsl庫C#,模擬modbusTCPServer,這里程序放出來吧;

using System;
using System.Collections.Generic;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Linq;
using System.Net;
using System.Text;
using System.Threading.Tasks;
using System.Windows.Forms;using System;
using System.Collections.Generic;
using System.Net;
using System.Runtime.Remoting.Contexts;
using System.Threading;using HslCommunication;namespace MB_TCPServer
{public partial class Form1 : Form{HslCommunication.ModBus.ModbusTcpServer modbusTcpServer;public Form1(){InitializeComponent();modbusTcpServer  = new HslCommunication.ModBus.ModbusTcpServer();modbusTcpServer.ServerStart(502);modbusTcpServer.Write("50", (UInt16)1);modbusTcpServer.Write("60", (UInt16)1);modbusTcpServer.Write("61", (UInt16)1);OperateResult <UInt16> intReg_100 = modbusTcpServer.ReadUInt16("50");                    // 讀取輸入寄存器100的值if (intReg_100.IsSuccess){Console.WriteLine("success!");Console.WriteLine("");}else{Console.WriteLine("failed:" + intReg_100.Message);}List<string> ipAddresses = GetIpAddresses();//調用Console.WriteLine(ipAddresses.Count);//有幾個ipforeach (string ipAddress in ipAddresses){Console.WriteLine(ipAddress);//ip分別有哪些comboBox_me_ip.Items.Add(ipAddress);}comboBox_me_ip.SelectedItem   = 1; }private void button1_Click(object sender, EventArgs e){}public static List<string> GetIpAddresses(){List<string> ipAddresses = new List<string>();try{// 獲取本地主機名string hostName = Dns.GetHostName();// 使用主機名獲取IP地址信息IPHostEntry hostEntry = Dns.GetHostEntry(hostName);// 獲取IP地址列表foreach (IPAddress ipAddress in hostEntry.AddressList){// 確保IP地址不是IPv6的環回地址或者IPv4的環回地址if (!ipAddress.IsIPv4MappedToIPv6 && ipAddress.AddressFamily != System.Net.Sockets.AddressFamily.InterNetworkV6){ipAddresses.Add(ipAddress.ToString());}}}catch (Exception ex){}return ipAddresses;/*List<string> ipAddresses = GetIpAddresses();//調用Console.WriteLine(ipAddresses.Count);//有幾個ipforeach (string ipAddress in ipAddresses){Console.WriteLine(ipAddress);//ip分別有哪些}*/}private void button_trig_Click(object sender, EventArgs e){modbusTcpServer.Write("50", (UInt16)10);    OperateResult<UInt16> intReg_100 = modbusTcpServer.ReadUInt16("50");                    // 讀取輸入寄存器100的值if (intReg_100.IsSuccess){Console.WriteLine("success!");Console.WriteLine(intReg_100.Content);textBox_trig.Text= intReg_100.Content.ToString();}else{Console.WriteLine("failed:" + intReg_100.Message);}}private void button2_Click(object sender, EventArgs e){modbusTcpServer.Write("50", (UInt16)0);OperateResult<UInt16> intReg_100 = modbusTcpServer.ReadUInt16("50");                    // 讀取輸入寄存器100的值if (intReg_100.IsSuccess){Console.WriteLine("success!");Console.WriteLine(intReg_100.Content);textBox_trig.Text = intReg_100.Content.ToString();}else{Console.WriteLine("failed:" + intReg_100.Message);}}private void button3_Click(object sender, EventArgs e){button_trig_Click(null,null);Thread.Sleep(200);// 太快vm反應不過來button2_Click(null, null);}}
}

?可以看出實際有用的只有這些:其余都是 winform界面;

using HslCommunication;
namespace MB_TCPServer
{public partial class Form1 : Form{HslCommunication.ModBus.ModbusTcpServer modbusTcpServer;public Form1(){modbusTcpServer  = new HslCommunication.ModBus.ModbusTcpServer();modbusTcpServer.ServerStart(502);modbusTcpServer.Write("50", (UInt16)1);modbusTcpServer.Write("60", (UInt16)1);modbusTcpServer.Write("61", (UInt16)1);OperateResult <UInt16> intReg_100 = modbusTcpServer.ReadUInt16("50");                    if (intReg_100.IsSuccess){Console.WriteLine("success!");Console.WriteLine("");}else{Console.WriteLine("failed:" + intReg_100.Message);}}}
}

要求很簡單就是要一個界面帶按鈕可以修改模擬TcpServer(PLC);內指定寄存器的數值讀取指定數值即可.

但是那天出門只帶了一個平板筆記本,且沒轉VS雖然有程序但無法編譯,所以python登場.

.雖然python有modbus庫?minimalmodbus?pymodbus ;等但是沒有hsl好用因為之前用hsl ;

直接用pythonnet在python里面調用 .net 版的hsl,實際python也有hsl但是需要授權,C# 版7.001以及以下版本是免費的,對于干這件事情是綽綽有余的,這里對hsl作者表示感謝;;;

于是就有了如下產物: 有界面有按鈕有結果顯示有數字顯示可以模擬 PLC的程序且一共200行;

當然必須安裝pythonnet ,且依賴的外部 .net? dll文件要和.py程序在一個目錄?

import os,sys,time
import tkinter as tk
from tkinter import messagebox#import win32api,win32con,win32guifrom ctypes import *
#需要安裝 pywin32
def cmd(s="pause"):os.system(s)
def p(s):print(s);return s
win = tk.Tk()
win.title("(匯川Easy521): PLC模擬器")
win.geometry('960x280')
win.config(background ="#00aa00")
winscrwidth=win.winfo_screenwidth()# 基礎庫
import os,sys,time
from ctypes import *
def cmd(s="pause"):os.system(s)
#C語言那一套 拿過來 C#那一套數據類型拿過來
import clr,System
from System import String, Char, Int32,UInt16, Int64, Environment, IntPtr#導包
print(clr.AddReference("HslCommunication"))
#現在可以當python自己的庫來用了
import HslCommunicationmodbusTcpServer  = HslCommunication.ModBus.ModbusTcpServer();
modbusTcpServer.ServerStart(502);#必須指定泛型 否則無效 UInt16(65535)
#初始化寄存器 指定3區 設定初始值
modbusTcpServer.Write("x=3;100", UInt16(0));# 觸發 1 2 3 4對應4流道
modbusTcpServer.Write("x=3;101", UInt16(0));# 料號 0 1 2
modbusTcpServer.Write("x=3;105", UInt16(0));# 結果 11(OK) 12(NG) 13(ERROR)
modbusTcpServer.Write("x=3;106", UInt16(0));# 心跳0/1# 獲取時間的函數
def gettime():# 獲取當前時間dstr.set(f"""{time.strftime("%H:%M:%S")}  >>127.0.0.1:502""")try: #必須try 否則要在界面控件創建完成后銷毀前調用 圖省事try完事intReg_100 = modbusTcpServer.ReadUInt16("100");#返回的是 Oper類型 不是int數值 intReg_101 = modbusTcpServer.ReadUInt16("101");intReg_105 = modbusTcpServer.ReadUInt16("105");intReg_106 = modbusTcpServer.ReadUInt16("106");entry1.delete(0, "end");entry1.insert(0,f'{intReg_100.Content}')#entry2.delete(0, "end");entry2.insert(0,f'{intReg_101.Content}')#entry3.delete(0, "end");entry3.insert(0,f'{intReg_105.Content}')#entry4.delete(0, "end");entry4.insert(0,f'{intReg_106.Content}')#    Reg=intReg_105.Contentif(Reg==0):rrr.config(text='None'); rrr.config(bg='#00aa00')if(Reg==11):rrr.config(text='ok');   rrr.config(bg='#00ff00')if(Reg==12):rrr.config(text='ng');   rrr.config(bg='#ff0000')if(Reg==13):rrr.config(text='Error');rrr.config(bg='#ffff00')##except:pass# 每隔 1s 調用一次 gettime()函數來獲取時間win.after(200, gettime)
# 生成動態字符串
dstr = tk.StringVar()
# 利用 textvariable 來實現文本變化
lb = tk.Label(win,textvariable=dstr,fg='green',font=("微軟雅黑",18))
lb.pack()
gettime()# 調用生成時間的函數tk.Label(win,text='觸發(D100[1]):',fg='black',font=("微軟雅黑",15)).place (x=0,y=40, width=150, height=30)
entry1 = tk.Entry(win)# 創建輸入框控件
entry1.place (x=300,y=40, width=60, height=30)#relx=0.01,relheight=0.4
#.pack(padx=20, pady=20)# 放置輸入框，并設置位置
entry1.delete(0, "end")
entry1.insert(0,'0')# 插入默認文本
print(entry1.get())# 得到輸入框字符串
# entry1.delete(0, tk.END)# 刪除所有字符#-----------------------------------------------------------------------------
def button_click_100():#按鈕modbusTcpServer.Write("x=3;105", UInt16(0));#結果清零modbusTcpServer.Write("x=3;100", UInt16(1));pass
button_100 = tk.Button(win,text="觸發寫1",command=button_click_100)
button_100.place (x=380,y=40, width=60, height=30)def button_click_100_2():modbusTcpServer.Write("x=3;105", UInt16(0));#結果清零modbusTcpServer.Write("x=3;100", UInt16(2));pass
button_100 = tk.Button(win,text="觸發寫2",command=button_click_100_2)
button_100.place (x=380+80,y=40, width=60, height=30)def button_click_100_3():modbusTcpServer.Write("x=3;105", UInt16(0));#結果清零modbusTcpServer.Write("x=3;100", UInt16(3));pass
button_100 = tk.Button(win,text="觸發寫3",command=button_click_100_3)
button_100.place (x=380+80+80,y=40, width=60, height=30)def button_click_100_4():modbusTcpServer.Write("x=3;105", UInt16(0));#結果清零modbusTcpServer.Write("x=3;100", UInt16(4));pass
button_100 = tk.Button(win,text="觸發寫4",command=button_click_100_4)
button_100.place (x=380+80+80+80,y=40, width=60, height=30)def button_click_101():#按鈕 觸發寫0modbusTcpServer.Write("x=3;100", UInt16(0));pass
button_100 = tk.Button(win,text="觸發寫0",command=button_click_101)
button_100.place (x=380+80+80+80+80,y=40, width=60, height=30)def button_click_102():#按鈕 觸發寫0modbusTcpServer.Write("x=3;105", UInt16(0));#結果清零modbusTcpServer.Write("x=3;100", UInt16(1));time.sleep(0.2)modbusTcpServer.Write("x=3;100", UInt16(0));pass
button_100 = tk.Button(win,text="觸發寫1(延時200)寫0",command=button_click_102)
button_100.place (x=380+80+80+80+80+80,y=40, width=160, height=30)
#-----------------------------------------------------------------------------
#-----------------------------------------------------------------------------
def button_click_200():#按鈕modbusTcpServer.Write("x=3;101", UInt16(0));pass
button_100 = tk.Button(win,text="料號寫0",command=button_click_200)
button_100.place (x=380,y=40+40, width=60, height=30)def button_click_201():#按鈕 觸發寫0modbusTcpServer.Write("x=3;101", UInt16(1));pass
button_100 = tk.Button(win,text="料號寫1",command=button_click_201)
button_100.place (x=380+80,y=40+40, width=60, height=30)def button_click_202():#按鈕 觸發寫0modbusTcpServer.Write("x=3;101", UInt16(2));pass
button_100 = tk.Button(win,text="料號寫2",command=button_click_202)
button_100.place (x=380+80+80,y=40+40, width=160, height=30)
#-----------------------------------------------------------------------------tk.Label(win,text='料號(D101[0/1/2]):',fg='black',font=("微軟雅黑",15)).place (x=0,y=40+40, width=180, height=30)
entry2 = tk.Entry(win)# 創建輸入框控件
entry2.place (x=300,y=40+40, width=60, height=30)#relx=0.01,relheight=0.4
#.pack(padx=20, pady=20)# 放置輸入框，并設置位置
entry2.delete(0, "end")# 插入默認文本
entry2.insert(0,'0')
print(entry2.get())# 得到輸入框字符串
# entry1.delete(0, tk.END)# 刪除所有字符
#relx、rely relheight、relwidth anchor=NEtk.Label(win,text='結果:(D105[11(OK)/12(NG)]):',fg='black',font=("微軟雅黑",15)).place (x=0,y=40+40+40, width=280, height=30)entry3 = tk.Entry(win)# 創建輸入框控件
entry3.place (x=300,y=40+40+40, width=60, height=30)#relx=0.01,relheight=0.4
#.pack(padx=20, pady=20)# 放置輸入框，并設置位置
entry3.delete(0, "end")# 插入默認文本
entry3.insert(0,'0')
print(entry3.get())# 得到輸入框字符串rrr=tk.Label(win,text='ok',fg='black',font=("微軟雅黑",15))
rrr.place (x=400,y=40+40+40, width=150, height=30)
#rrr.config(text='ok');rrr.config(bg='#00ff00')
#rrr.config(text='ng');rrr.config(bg='#ff0000')
rrr.config(text='None');rrr.config(bg='#00aa00')tk.Label(win,text='心跳:(D106[0/1]):',fg='black',font=("微軟雅黑",15)).place (x=0,y=40+40+40+40, width=180, height=30)entry4 = tk.Entry(win)# 創建輸入框控件
entry4.place (x=300,y=40+40+40+40, width=60, height=30)#relx=0.01,relheight=0.4
#.pack(padx=20, pady=20)# 放置輸入框，并設置位置
entry4.delete(0, "end")# 插入默認文本
entry4.insert(0,'0')
print(entry4.get())# 得到輸入框字符串def QueryWindow():if messagebox.showwarning("窗口關閉?"):win.destroy()
win.protocol('WM_DELETE_WINDOW', QueryWindow)
win.mainloop()

這樣VM 寫電腦IP 或者 127.0.0.1:502 就可以把這個程序當成PLC連接了.

在手上沒有PLC的情況下很方便使用.

接下來分享一下其他用法:

比如監視PLC值:(為了方便不寫界面): 這樣就可以實時觀察到PLC的值

import os,sys,time,win32api,win32con,win32gui
def cmd(s="pause"):os.system(s)
from ctypes import *
import clr,System#C語言那一套 拿過來 C#那一套數據類型拿過來
from System import String, Char, Int32,UInt16, Int64, Environment, IntPtr
print(clr.AddReference("HslCommunication"))#導包
import HslCommunication#現在可以當python自己的庫來用了
modbus = HslCommunication.ModBus.ModbusTcpNet( "192.168.1.10" );#modbus = HslCommunication.ModBus.ModbusTcpNet( "127.0.0.1" );
while 1:cmd("cls")time.sleep(0.5)for i in range(15):time.sleep(0.3)intReg_100 = modbus.ReadUInt16("100");Reg_100 = intReg_100.Content;intReg_101 = modbus.ReadUInt16("101");Reg_101 = intReg_101.Content;intReg_105 = modbus.ReadUInt16("105");Reg_105 = intReg_105.Content;intReg_106 = modbus.ReadUInt16("106"); Reg_106 = intReg_106.Content;print(f"""{time.strftime("%H:%M:%S")}   \n\nD100:{Reg_100}  D101:{Reg_100}  D105:{Reg_100}  D106:{Reg_100}   \n""")#intReg_100.IsSuccess,intReg_100.Content, #     intReg_101.IsSuccess,intReg_101.Content,#     intReg_105.IsSuccess,intReg_105.Content,#     intReg_106.IsSuccess,intReg_106.Content)>#pip install pywin32 numpy pythonnet -i https://pypi.tuna.tsinghua.edu.cn/simple

下來在分享一個socket的腳本用來調試VM很方便.


def p(P):print(P);
import os,sys,time,socket,_thread,threading關閉時間=60*2
from threading import Timer
def close_window():print("cl")os._exit(0)#root.destroy()  # 銷毀主窗口#print("窗口已關閉")
Timer(關閉時間, close_window).start()#def thread_it(func, *args):t = threading.Thread(target=func, args=args)t.setDaemon(True);t.start();
def Thread_ConnectSocket(ip="",prot=0,sendData="",recv_flag=True):是否發送成功標志=Falsewhile True:try:global tcp_client_sockettcp_client_socket = socket.socket(socket.AF_INET, socket.SOCK_STREAM)tcp_client_socket.connect((ip, prot))while True:try:tcp_client_socket.send(sendData.encode("utf-8"))#發送print(f'>>{ip}:({prot})"{sendData}"!')if (recv_flag):#print(f'等待對方回復!')recv_content = tcp_client_socket.recv(1024)#接收result = recv_content.decode("utf-8")print(f'收到對方發來的"{result}"!')   print(f'done!')是否發送成功標志=Truebreakexcept:是否發送成功標志=Falsebreakexcept socket.error:print("未連接，嘗試重連中..")time .sleep(1)if (是否發送成功標志):print(f'finish!')breakipport=("127.0.0.1", 7930)#右側IP=ipport[0]
PROT=ipport[1] #IP,PROT def Tcp_Send(S=""):#B_左(7931)thread_it(Thread_ConnectSocket,IP,PROT,S)import tkinter as tkroot = tk.Tk()#root.iconbitmap('mfc.ico')
root.geometry('400x400+100+100')
#root.resizable(0,0)
root.title("")
lb__a = tk.Label(root,text=f"(7931) :{IP} : {PROT}",fg='green',font=("微軟雅黑",16))
lb__a.pack()def gettime():dstr.set(time.strftime("%H:%M:%S"))try:passroot.after(1000, gettime)# 每隔 1s 調用一次.except:passdstr = tk.StringVar()# 定義動態字符串
lb = tk.Label(root,textvariable=dstr,fg='green',font=("微軟雅黑",20))
lb.pack()
gettime()# 0 800V 一體軛
# 1 800V 中柱
# 2 800V 邊柱
##------------------------------料號0---------------------------------------------------------
#---------------------------------------------------------------------------------------------
def Cam0():Tcp_Send("0") 
button = tk.Button(root,text=' 料號0:800V 一體軛',bg='#7CCD7C',width=20, height=2,command=Cam0)
button.place(relx=0.15,rely=0.2, width=260, height=30)#------------------------------料號1---------------------------------------------------------
#---------------------------------------------------------------------------------------------def Cam1():Tcp_Send("1")#Tcp_SendB Tcp_SendA #B_左(7931)  A_右(7930) 
button = tk.Button(root,text='料號1:800V 中柱',bg='#7CCD7C',width=20, height=2,command=Cam1)
#button.pack()
button.place(relx=0.15,rely=0.3, width=260, height=30)#------------------------------料號2---------------------------------------------------------
#---------------------------------------------------------------------------------------------def Cam2():Tcp_Send("2")#Tcp_SendB Tcp_SendA #B_左(7931)  A_右(7930) 
button = tk.Button(root,text='料號2:800V 邊柱',bg='#7CCD7C',width=20, height=2,command=Cam2)
#button.pack()
button.place(relx=0.15,rely=0.4, width=260, height=30)#------------------------------料號:    噢噢噢噢---------------------------------------------------------
#---------------------------------------------------------------------------------------------def CamT1():Tcp_Send("T1")
button = tk.Button(root,text='拍照1',bg='#7CCD7C',width=20, height=2,command=CamT1)
button.place(relx=0.15,rely=0.5, width=260, height=30)def CamT2():Tcp_Send("T2")
button = tk.Button(root,text='拍照2',bg='#7CCD7C',width=20, height=2,command=CamT2)
button.place(relx=0.15,rely=0.6, width=260, height=30)def CamT3():Tcp_Send("T3")
button = tk.Button(root,text='拍照3',bg='#7CCD7C',width=20, height=2,command=CamT3)
button.place(relx=0.15,rely=0.7, width=260, height=30)def CamT4():Tcp_Send("T4")
button = tk.Button(root,text='拍照4',bg='#7CCD7C',width=20, height=2,command=CamT4)
button.place(relx=0.15,rely=0.8, width=260, height=30)#---------------------------------------------------------------------------------------------
#------------------------------料號2---------------------------------------------------------
#---------------------------------------------------------------------------------------------root.mainloop()