300+ SCADA Protocol Articles & Guides
Deep dives on Modbus, DNP3, IEC 60870-5-101/104, IEC 61850, OPC UA, Profinet, MQTT, IEC 62443, and substation automation — written for practicing engineers.
Modbus TCP Beckhoff TwinCAT: Client and Server Setup
Modbus TCP Beckhoff TwinCAT configuration with TF6250: client function blocks, server XML mapping, licensing by TwinCAT version, and the usual failure points.
Modbus TCP CODESYS: Step-by-Step Configuration
Modbus TCP CODESYS configuration for WAGO, Phoenix Contact, ABB, and Delta PLCs: master and slave setup, channel configuration, and vendor-specific notes.
Modbus TCP ControlLogix Setup in Studio 5000
Modbus TCP ControlLogix setup three ways: the ProSoft MVI56E-MNETC module, AOI socket messaging, and a gateway, with pitfalls and performance notes for each.
Modbus Unit Identifier Explained: Unit ID by Scenario
Modbus Unit Identifier (Unit ID) explained by scenario: direct TCP devices, RTU gateways, multi-port gateways. Value ranges, common defaults, troubleshooting.
Modbus Broadcast Function Codes: Address 0 Explained
Modbus broadcast on address 0: which function codes support it, how serial and TCP differ, turnaround timing, gateway behavior, and when to actually use it.
Modbus Client-Server vs Master-Slave Terminology
Modbus client-server vs master-slave: the 2020 terminology change explained. What stays the same, translation table, and how to read mixed-terminology docs.
Modbus TCP MBAP Header Explained: 7 Bytes Byte by Byte
Modbus TCP MBAP header decoded byte by byte: Transaction ID, Protocol ID, Length, and Unit ID, with a real hex dump, network byte order, and common mistakes.
Modbus TCP Security Explained: TLS on Port 802
Modbus TCP Security explained: TLS on port 802, X.509 certificates, role-based access control, deployment alongside port 502, cipher suites, real setup.
EtherNet/IP vs Modbus TCP: Complete Comparison Guide
EtherNet/IP vs Modbus TCP: detailed comparison of data models, performance, ports, security, deployment scenarios. When to choose which protocol.
Modbus TCP S7-1500: MB_CLIENT and MB_SERVER Setup
Modbus TCP S7-1500 setup in TIA Portal: MB_CLIENT, MB_SERVER, and TCON_IP_v4 configured, MB_MODE mapped to function codes, and status codes 8200 and 809B fixed.
Modbus TCP Mitsubishi iQ-R: GX Works3 Setup Guide
Modbus TCP Mitsubishi iQ-R setup in GX Works3: RJ71EN71 module parameters, MODBUS Device Assignment, float byte order, exception codes, and troubleshooting.
Modbus TCP Schneider M340: Unity Pro Setup Guide
Modbus TCP Schneider M340 configuration: CPU embedded port, NOE 0100 and NOC 0401 modules, server and client roles, READ_VAR, WRITE_VAR, and ADDM explained.
Modbus Exception Codes Explained: Complete Reference
Modbus exception codes 01 through 0B in full: Illegal Function, Illegal Data Address, Slave Device Failure, and gateway errors, each with the fix that works.
Modbus TCP CompactLogix Setup in Studio 5000
Modbus TCP CompactLogix setup with Rockwell's free AOI in Studio 5000: client and server roles, AOI parameters, polling multiple devices, and gateway options.
Wireshark Modbus TCP: Capture, Filter, Troubleshoot
Wireshark Modbus TCP analysis end to end: display filters, MBAP header decoding, exception responses, timeouts, and what each failure looks like on the wire.
Modbus TCP S7-1200: TIA Portal Step-by-Step Guide
Modbus TCP S7-1200 configuration in TIA Portal: MB_SERVER and MB_CLIENT setup, holding register mapping, connection parameters, and reading multiple devices.
Modbus Security Risks and How to Protect Your Network
Modbus security risks in practice: why the protocol has no authentication, real attack techniques on RTU and TCP, plus segmentation, firewalls, and monitoring.
Modbus TCP/IP Setup: Step-by-Step Configuration Guide
Modbus TCP/IP setup from scratch: IP planning, server and client configuration, MBAP header basics, gateway bridging to RTU, and connection troubleshooting.