inventcom

READ TNC PLC DATA

For Heidenhain TNC and iTNC controllers this program enables to read and output PLC data from
an external PC connected to the controller via Ethernet network.

It supports reading of PLC MARKER, BYTE, WORD and DWORD values. For all supported data
types you to scan adjustable PLC address ranges and output their values. You can also search PLC
address ranges for a target value. It also allows to convert PLC output data from older TNC 426
and 430 devices to match the values shown at the controller.

PREREQUISITES
 Make sure that you have an Ethernet network connection between your PC and the machine
and get data, use our HeidenhainData.exe utility to do so.
 In case you use a firewall at your PC or your company network please make sure that there is
an exception for TCP Port 19000. You can use our tool Device Port Scanner to check if your
controller is reachable via port 19000..

READ HEIDENHAIN TNC PLC DATA

Inventcom · www.inventcom.net · info@inventcom.net
Version: October 2018 V1.0
Page 1 of 4
 inventcom

SOFTWARE SETUP & USAGE

Download readtncplc.zip and extract all files to a folder of your choice on your PC.

 Double click HeidenhainPLC.exe and enter the IP Address or DNS Hostname of your controller
(1).
 Input a start (1) and end (3) address for the PLC address range you’d like to get data from.
 Select at least one PLC area you’d like to scan, here Marker (4).
 After clicking button [Query] (5) the program tries to connect to your controller and read the
requested data.

FIG 1: Read Heidenhain TNC PLC Data

 If successful, the program outputs the PLC data in the area at the right (6) in form of PLC Area
(M for MARKER, B for BYTE, W for WORD or D for DWORD) + address = value.

If you search for a WORD address value the start address has to be divisible by 2 e.g. 490, 492.

If you search for a DORD address value the start address has to be divisible by 4 e.g. 360, 364.

To search for a target value enter target value, PLC start and end address and check ‘Search
Target Value’ before clicking button [Query].

READ HEIDENHAIN TNC PLC DATA

Inventcom · www.inventcom.net · info@inventcom.net
Version: October 2018 V1.0
Page 2 of 4
 inventcom

If searching for markers by target value only 0 or 1 as target value deliver results.

If you’re working on an older TNC 426 or 430 controller it may be required to activate the ‘Swap’
checkbox to get matching results.

Although possible it is not recommended to search through a large range of PLC addresses (>
100) or all PLC areas with a single query!

LICENSING
If you have installed CNCnetPDM on your PC with a license other than a ‘free license’ and run this
program from the folder where CNCnetPDM is installed you get unlimited functionality and output.
With a free license you can search for values of one address at a time. Searching for target values
is not supported in this case. Please see licensing for details or contact us if you have any
questions.

 Note: If you like to run this program from a different location on your PC you can simply copy
your CNCnetPDM.ini file to this directory.

TYPICAL PLC ADDRESSES

Here are some useful PLC addresses for Heidenhain iTNC 530, TNC 426 or 430 devices:

MARKER 4150: OP Mode Manual

MARKER 4152: OP Mode MDI
MARKER 4151: OP Mode Hand wheel
MARKER 4153: OP Mode Automatic single
MARKER 4154: OP Mode Automatic full
MARKER 4155: OP Mode Traversing
MARKER 4176: PR Mode Running
MARKER 4175: PR Mode Interrupted
MARKER 4177: PR Mode Error active
MARKER 4220: PR Mode Stopped extern
MARKER 4221: PR Mode Stopped intern
MARKER 4178: PR Mode Emergency A
MARKER 4222: PR Mode Emergency B
MARKER 4582: PR Mode Emergency C
MARKER 4170: PR Mode Finished

READ HEIDENHAIN TNC PLC DATA

Inventcom · www.inventcom.net · info@inventcom.net
Version: October 2018 V1.0
Page 3 of 4
 inventcom

WORD 492: Override (% to be divided by 100)

WORD 272: Execution mode (subtract 1 to get real mode)
WORD 320: Target speed
WORD 322: Actual speed

DWORD 356: Programmed speed

DWORD 364: Target speed
DWORD 368: Actual speed
DWORD 360: Programmed feed rate
DWORD 388: Actual feed rate

TROUBLESHOOTING
If you can ping the controller but get a ‘Connection to IP Address port 19000: Failed!’ please verify
that there’s an exception for port 19000 in your firewall. Use our tool Device Port Scanner to
check that your controller is reachable via that port.

If you still cannot connect to the controller please make sure that LSV2 access is not locked at the
controller, see ‘Controller Setup’.

If you can connect to the controller but get something like ‘LOGIN: Area PLCDEBUG Unexpected
response from device (TNC = Access denied (LSV 2))’ please check if PLC access is not locked or
password protected via file OEM.SYS also see ‘Controller Setup’.

READ HEIDENHAIN TNC PLC DATA

Inventcom · www.inventcom.net · info@inventcom.net
Version: October 2018 V1.0
Page 4 of 4