FINS Route (Omron)

FINS Overview

The FINS route enables communication with Omron PLCs (CJ, CS, CP, and NJ/NX series) using the FINS (Factory Interface Network Service) protocol. It supports both TCP and UDP transport, multiple memory areas, and bit-level access.

FINS is Omron’s native protocol providing fast, efficient access to PLC memory. For newer NJ/NX series, consider OPC UA as an alternative.

Basic Syntax

DEFINE ROUTE OmronPLC WITH TYPE FINS
    ADD FINS_CONFIG
        WITH ADDRESS "192.168.1.100"
        WITH PORT '9600'
        WITH PROTOCOL "TCP"
        WITH LOCAL_NODE '0'
        WITH REMOTE_NODE '0'
    ADD MAPPING ProcessData
        WITH EVERY 500 MILLISECONDS
        ADD TAG Temperature
            WITH ADDRESS "100"
            WITH MEMORY_TYPE "DM"
            WITH DATA_TYPE "REAL"
            WITH SOURCE_TOPIC "plc/temperature"

Connection Configuration

FINS_CONFIG Parameters

ADDRESS

string

required

Target Omron device IP address.

PORT

integer

FINS protocol port. Default: 9600.

PROTOCOL

string

Protocol type: TCP or UDP. Default: TCP.

LOCAL_NODE

integer

Local node address (0-255). Default: 0.

REMOTE_NODE

integer

Remote node address - target PLC (0-255). Default: 0.

TIMEOUT

integer

Connection timeout in seconds. Default: 2.

RETRIES

integer

Number of retries for FINS communication. Default: 5.

POLLING

integer

Polling interval in milliseconds. Default: 200.

Connection Examples

TCP Connection
UDP Connection

Standard TCP connection (recommended):

ADD FINS_CONFIG
    WITH ADDRESS "192.168.1.100"
    WITH PORT '9600'
    WITH PROTOCOL "TCP"
    WITH LOCAL_NODE '0'
    WITH REMOTE_NODE '0'
    WITH TIMEOUT '2'
    WITH RETRIES '5'

UDP for lower latency:

ADD FINS_CONFIG
    WITH ADDRESS "192.168.1.100"
    WITH PORT '9600'
    WITH PROTOCOL "UDP"
    WITH LOCAL_NODE '1'
    WITH REMOTE_NODE '0'
    WITH TIMEOUT '2'

UDP requires proper node addressing and may have firewall considerations.

Memory Areas

Omron PLCs organize data in different memory areas:

Memory Type	Code	Description	Access
`CIO`	0	Core I/O and work area	Read/Write
`WR`	1	Work area	Read/Write
`HR`	2	Holding area (retentive)	Read/Write
`AR`	3	Auxiliary area	Read-only
`DM`	4	Data Memory	Read/Write
`CNT`	5	Counter values	Read/Write
`TIM`	6	Timer values	Read/Write
`EM`	7	Extended Memory	Read/Write

DM (Data Memory) is the most commonly used area for user data. CIO is typically used for I/O and internal relays.

Data Types

Data Type	Description	Size
`BOOL`	Boolean (single bit)	1 bit
`BYTE`	Unsigned 8-bit	8 bits
`INT`	Signed 16-bit integer	16 bits
`UINT`	Unsigned 16-bit integer	16 bits
`DINT`	Signed 32-bit integer	32 bits
`UDINT`	Unsigned 32-bit integer	32 bits
`LINT`	Signed 64-bit integer	64 bits
`ULINT`	Unsigned 64-bit integer	64 bits
`REAL`	32-bit floating point	32 bits
`LREAL`	64-bit floating point	64 bits
`ASCII`	ASCII character	8 bits
`STRING`	String value	Variable

TAG Configuration

Complete TAG Example

ADD TAG ProcessTemperature
    WITH ADDRESS "100"
    WITH BIT_ADDRESS '0'
    WITH DATA_TYPE "REAL"
    WITH MEMORY_TYPE "DM"
    WITH STRING_SIZE "256"
    WITH SOURCE_TOPIC "plc/process/temperature"
    WITH DESTINATION_TOPIC "plc/process/temperature/write"
    WITH WRITABLE "true"
    WITH SCALING "0.1"
    WITH OFFSET "0"
    WITH UNIT "°C"
    WITH DECIMAL_PLACES "2"
    WITH MIN_VALUE "-50"
    WITH MAX_VALUE "500"
    WITH DEADBAND "0.5"
    WITH PUBLISH_MODE "JSON"
    WITH DESCRIPTION "Main process temperature sensor"

TAG Parameters

Address Configuration

ADDRESS

string

required

Word address in PLC memory (e.g., 100, 200, 500).

BIT_ADDRESS

integer

Bit address for bit-specific data types (0-15). Used for BOOL values within a word.

MEMORY_TYPE

string

Memory area: CIO, WR, HR, AR, DM, CNT, TIM, EM. Default: DM.

DATA_TYPE

string

required

FINS data type: BOOL, BYTE, INT, UINT, DINT, UDINT, LINT, ULINT, REAL, LREAL, ASCII, STRING.

STRING_SIZE

integer

Size of string for STRING types. Default: 256.

Value Transformation

SCALING

double

Multiplier for value transformation. Default: 1.0.

OFFSET

double

Offset added after scaling. Default: 0.0.

DECIMAL_PLACES

integer

Decimal places in output. Default: 2.

Filtering

MIN_VALUE

double

Minimum allowed value.

MAX_VALUE

double

Maximum allowed value.

DEADBAND

double

Minimum change to trigger publish. Default: 0.0.

Publishing

SOURCE_TOPIC

string

required

MQTT topic for read values.

DESTINATION_TOPIC

string

MQTT topic for write commands.

PUBLISH_MODE

string

Output format: VALUE_ONLY or JSON. Default: VALUE_ONLY.

UNIT

string

Engineering unit for documentation.

DESCRIPTION

string

Human-readable description.

Write Configuration

WRITABLE

boolean

Allow writing to this address. Default: false.

Addressing Examples

Word Addressing

Access data at word level:

ADD TAG DataWord100
    WITH ADDRESS "100"
    WITH MEMORY_TYPE "DM"
    WITH DATA_TYPE "INT"
    WITH SOURCE_TOPIC "plc/dm/100"

Bit Addressing

Access individual bits within a word:

ADD TAG Bit0
    WITH ADDRESS "100"
    WITH BIT_ADDRESS '0'
    WITH MEMORY_TYPE "DM"
    WITH DATA_TYPE "BOOL"
    WITH SOURCE_TOPIC "plc/dm/100.0"

ADD TAG Bit15
    WITH ADDRESS "100"
    WITH BIT_ADDRESS '15'
    WITH MEMORY_TYPE "DM"
    WITH DATA_TYPE "BOOL"
    WITH SOURCE_TOPIC "plc/dm/100.15"

32-bit Values

32-bit values span two consecutive words:

ADD TAG FloatValue
    WITH ADDRESS "200"
    WITH MEMORY_TYPE "DM"
    WITH DATA_TYPE "REAL"
    WITH SOURCE_TOPIC "plc/float"

REAL and DINT types use two consecutive words (e.g., DM200 and DM201).

Complete Examples

Read values from DM area:

DEFINE ROUTE OmronBasic WITH TYPE FINS
    ADD FINS_CONFIG
        WITH ADDRESS "192.168.1.100"
        WITH PORT '9600'
        WITH PROTOCOL "TCP"
        WITH LOCAL_NODE '0'
        WITH REMOTE_NODE '0'
    ADD MAPPING DataMemory
        WITH EVERY 500 MILLISECONDS
        ADD TAG Temperature
            WITH ADDRESS "100"
            WITH MEMORY_TYPE "DM"
            WITH DATA_TYPE "REAL"
            WITH SOURCE_TOPIC "plc/temperature"
            WITH SCALING "0.1"
            WITH UNIT "°C"
        ADD TAG Pressure
            WITH ADDRESS "102"
            WITH MEMORY_TYPE "DM"
            WITH DATA_TYPE "REAL"
            WITH SOURCE_TOPIC "plc/pressure"
            WITH UNIT "bar"
        ADD TAG Counter
            WITH ADDRESS "104"
            WITH MEMORY_TYPE "DM"
            WITH DATA_TYPE "DINT"
            WITH SOURCE_TOPIC "plc/counter"

Read CIO and Work areas:

DEFINE ROUTE OmronIO WITH TYPE FINS
    ADD FINS_CONFIG
        WITH ADDRESS "192.168.1.100"
        WITH PORT '9600'
        WITH PROTOCOL "TCP"
    ADD MAPPING IOStatus
        WITH EVERY 100 MILLISECONDS
        ADD TAG DigitalInputs
            WITH ADDRESS "0"
            WITH MEMORY_TYPE "CIO"
            WITH DATA_TYPE "UINT"
            WITH SOURCE_TOPIC "plc/io/di"
        ADD TAG DigitalOutputs
            WITH ADDRESS "100"
            WITH MEMORY_TYPE "CIO"
            WITH DATA_TYPE "UINT"
            WITH SOURCE_TOPIC "plc/io/do"
        ADD TAG WorkBits
            WITH ADDRESS "0"
            WITH MEMORY_TYPE "WR"
            WITH DATA_TYPE "UINT"
            WITH SOURCE_TOPIC "plc/work"

Access individual bits:

DEFINE ROUTE OmronBits WITH TYPE FINS
    ADD FINS_CONFIG
        WITH ADDRESS "192.168.1.100"
        WITH PORT '9600'
        WITH PROTOCOL "TCP"
    ADD MAPPING BitStatus
        WITH EVERY 100 MILLISECONDS
        ADD TAG StartButton
            WITH ADDRESS "0"
            WITH BIT_ADDRESS '0'
            WITH MEMORY_TYPE "CIO"
            WITH DATA_TYPE "BOOL"
            WITH SOURCE_TOPIC "plc/buttons/start"
        ADD TAG StopButton
            WITH ADDRESS "0"
            WITH BIT_ADDRESS '1'
            WITH MEMORY_TYPE "CIO"
            WITH DATA_TYPE "BOOL"
            WITH SOURCE_TOPIC "plc/buttons/stop"
        ADD TAG MotorRunning
            WITH ADDRESS "100"
            WITH BIT_ADDRESS '0'
            WITH MEMORY_TYPE "CIO"
            WITH DATA_TYPE "BOOL"
            WITH SOURCE_TOPIC "plc/motor/running"
            WITH WRITABLE "true"
            WITH DESTINATION_TOPIC "plc/motor/running/set"

Read timer and counter values:

DEFINE ROUTE OmronTimerCounter WITH TYPE FINS
    ADD FINS_CONFIG
        WITH ADDRESS "192.168.1.100"
        WITH PORT '9600'
        WITH PROTOCOL "TCP"
    ADD MAPPING TimersCounters
        WITH EVERY 500 MILLISECONDS
        ADD TAG Timer0
            WITH ADDRESS "0"
            WITH MEMORY_TYPE "TIM"
            WITH DATA_TYPE "UINT"
            WITH SOURCE_TOPIC "plc/timer/0"
            WITH SCALING "0.1"
            WITH UNIT "s"
        ADD TAG Timer1
            WITH ADDRESS "1"
            WITH MEMORY_TYPE "TIM"
            WITH DATA_TYPE "UINT"
            WITH SOURCE_TOPIC "plc/timer/1"
        ADD TAG Counter0
            WITH ADDRESS "0"
            WITH MEMORY_TYPE "CNT"
            WITH DATA_TYPE "UINT"
            WITH SOURCE_TOPIC "plc/counter/0"
        ADD TAG Counter1
            WITH ADDRESS "1"
            WITH MEMORY_TYPE "CNT"
            WITH DATA_TYPE "UINT"
            WITH SOURCE_TOPIC "plc/counter/1"

Read and write process values:

DEFINE ROUTE OmronControl WITH TYPE FINS
    ADD FINS_CONFIG
        WITH ADDRESS "192.168.1.100"
        WITH PORT '9600'
        WITH PROTOCOL "TCP"
    ADD MAPPING ControlLoop
        WITH EVERY 200 MILLISECONDS
        ADD TAG ProcessValue
            WITH ADDRESS "200"
            WITH MEMORY_TYPE "DM"
            WITH DATA_TYPE "REAL"
            WITH SOURCE_TOPIC "control/pv"
            WITH UNIT "°C"
            WITH PUBLISH_MODE "JSON"
        ADD TAG Setpoint
            WITH ADDRESS "202"
            WITH MEMORY_TYPE "DM"
            WITH DATA_TYPE "REAL"
            WITH SOURCE_TOPIC "control/sp"
            WITH UNIT "°C"
            WITH WRITABLE "true"
            WITH DESTINATION_TOPIC "control/sp/write"
            WITH MIN_VALUE "0"
            WITH MAX_VALUE "100"
        ADD TAG Output
            WITH ADDRESS "204"
            WITH MEMORY_TYPE "DM"
            WITH DATA_TYPE "REAL"
            WITH SOURCE_TOPIC "control/output"
            WITH UNIT "%"
        ADD TAG AutoMode
            WITH ADDRESS "206"
            WITH BIT_ADDRESS '0'
            WITH MEMORY_TYPE "DM"
            WITH DATA_TYPE "BOOL"
            WITH SOURCE_TOPIC "control/auto"
            WITH WRITABLE "true"
            WITH DESTINATION_TOPIC "control/auto/write"

Read retentive data from HR area:

DEFINE ROUTE OmronHolding WITH TYPE FINS
    ADD FINS_CONFIG
        WITH ADDRESS "192.168.1.100"
        WITH PORT '9600'
        WITH PROTOCOL "TCP"
    ADD MAPPING RetentiveData
        WITH EVERY 5 SECONDS
        ADD TAG TotalRuntime
            WITH ADDRESS "0"
            WITH MEMORY_TYPE "HR"
            WITH DATA_TYPE "DINT"
            WITH SOURCE_TOPIC "plc/stats/runtime"
            WITH UNIT "seconds"
        ADD TAG ProductionTotal
            WITH ADDRESS "2"
            WITH MEMORY_TYPE "HR"
            WITH DATA_TYPE "DINT"
            WITH SOURCE_TOPIC "plc/stats/production"
        ADD TAG LastErrorCode
            WITH ADDRESS "4"
            WITH MEMORY_TYPE "HR"
            WITH DATA_TYPE "UINT"
            WITH SOURCE_TOPIC "plc/stats/error"

Memory Area Details

CIO - Core I/O

Used for I/O mapping and internal relays
Words 0-99: Typically input/output modules
Words 100-999: Work bits and internal relays
Addresses are PLC model dependent

DM - Data Memory

Main user data storage
Typically DM0-DM32767
Best for process data, setpoints, configuration
Retentive (battery-backed)

HR - Holding Area

Always retentive data
Survives power cycles
Use for counters, totals, settings
Typically HR0-HR511

WR - Work Area

General purpose work bits
Non-retentive (cleared on power cycle)
Fast access for temporary data

TIM/CNT - Timers and Counters

TIM: Timer present values
CNT: Counter present values
Values are 16-bit unsigned
Timer values often in 0.1s units

Troubleshooting

Connection Failed

Verify IP address is correct
Check firewall allows port 9600
Ensure PLC Ethernet module is configured
Try both TCP and UDP protocols
Verify node addresses match PLC configuration

Node Address Errors

LOCAL_NODE should be unique on the network
REMOTE_NODE is the target PLC’s node number
Check PLC’s FINS settings for correct node configuration
For direct connections, try 0 for both nodes

Memory Address Errors

Verify address is within valid range for memory type
Check MEMORY_TYPE matches where data is stored
For 32-bit types, ensure two consecutive words are available
BIT_ADDRESS must be 0-15

Timeout Errors

Increase TIMEOUT value
Check network connectivity
Verify PLC is in RUN mode
Reduce POLLING rate if reading many tags
Try TCP instead of UDP

Write Operations Fail

Ensure WRITABLE is “true”
Verify memory area is writable (not AR)
Check PLC is not in monitor mode
Verify value is within data type range

Next Steps

Modbus TCP

Universal industrial protocol support.

Industrial Overview

Common patterns for all industrial routes.

Quick Start

MQTT Broker

LoT Language

LoT Notebooks

Actions

Routes

Models

Rules

FINS Overview

Basic Syntax

Connection Configuration

FINS_CONFIG Parameters

Connection Examples

Memory Areas

Data Types

TAG Configuration

Complete TAG Example

TAG Parameters

Addressing Examples

Word Addressing

Bit Addressing

32-bit Values

Complete Examples

Memory Area Details

Troubleshooting

Next Steps

Modbus TCP

Industrial Overview

Quick Start

MQTT Broker

LoT Language

LoT Notebooks

Actions

Routes

Models

Rules

​FINS Overview

​Basic Syntax

​Connection Configuration

​FINS_CONFIG Parameters

​Connection Examples

​Memory Areas

​Data Types

​TAG Configuration

​Complete TAG Example

​TAG Parameters

​Addressing Examples

​Word Addressing

​Bit Addressing

​32-bit Values

​Complete Examples

​Memory Area Details

​Troubleshooting

​Next Steps

Modbus TCP

Industrial Overview

FINS Overview

Basic Syntax

Connection Configuration

FINS_CONFIG Parameters

Connection Examples

Memory Areas

Data Types

TAG Configuration

Complete TAG Example

TAG Parameters

Addressing Examples

Word Addressing

Bit Addressing

32-bit Values

Complete Examples

Memory Area Details

Troubleshooting

Next Steps