Modbus exception 02 illegal data address range - PLC Playground troubleshooting guide

Modbus Exception 02 Is a Reply, Not a Timeout

Exception 02 means the server replied that the requested data address was not allowed. Treat it differently from receiving no reply. Start with the function, starting address, and quantity rather than increasing the timeout.

Modbus exception meaning is standardized; valid registers are device-specific.

What is happening?

A request can begin at a valid address but extend beyond an allowed range. Device maps may contain gaps or different access permissions. The Modbus specification defines exception responses; the product register map defines the available objects.

Check these five things

  1. Capture the request function, address, quantity, and exception.

  2. Check the map for the exact device revision.

  3. Confirm the entire requested range exists for that function.

  4. Test a small documented read before expanding the range.

  5. Handle exception replies separately from transport failures in diagnostics.

Worked example

A model permits registers 100 through 109. Reading ten registers from 100 fits; reading ten from 105 extends to 114 and can fail even though register 105 itself is valid. Check the whole range, not just its first element.

Quick diagnostic reference

Result Interpretation
No response Transport or unavailable server
Exception 02 Rejected address range
Normal response Decode according to map

The mistake to avoid

Polling invalid ranges faster creates repeated rejected requests without improving data. Fix the interface definition before optimizing polling frequency.

How to verify the fix

Confirm successful reads at documented boundaries and clear diagnostics for deliberately invalid test requests in a nonproduction environment. Record function and range together in the interface table.

Field-work boundary: These are educational diagnostic guides. Use the exact equipment manuals and approved site procedures. Electrical testing and machinery changes belong to qualified, authorized personnel; control hazardous energy and validate affected functions before release.

Technical reference

Modbus Organization: Application Protocol Specification. The examples and diagnostic tables above are original teaching material; they do not replace the product manual.

Continue troubleshooting

Previous Post Next Post