Back to blog

Connecting Devices to SCADA and Multiple HMI Displays – Protocols, Wiring, Diagnostics

14 min read
Connecting Devices to SCADA and Multiple HMI Displays – Protocols, Wiring, Diagnostics

Connecting machines, inverters, PLCs and operator panels to a SCADA system is now standard in factories and increasingly on farms, in forklift fleets and on solar plants. A well-executed integration gives real-time machine status, alarm and trend archives and remote diagnostics. A poor one means communication drops, frozen screens and hours spent hunting for a fault that turns out to be a single RS-485 connector. This guide collects hard data: protocols, link parameters, wiring rules, multi-display configurations and the most common faults we see in our workshop.

Control room with a multi-screen SCADA video wall
Multi-screen SCADA visualisation: process diagrams, trends and alarm lists at a single operator station.

SCADA versus an HMI panel

SCADA (Supervisory Control And Data Acquisition) is a supervisory system that collects data from many controllers, archives it, visualises it and lets operators issue commands. An HMI panel is a local screen at the machine – it shows status and allows operation, but usually sees only one controller or line. In practice they work together: the HMI serves the machine on site, while SCADA collects data from many machines into one central view.

Comparison: HMI panel vs SCADA system
FeatureHMI panelSCADA system
ScopeOne machine or lineWhole plant, many controllers and sites
LocationCabinet, desk at the machinePC, server, control room, web browser
ArchivingLimited (SD card, panel memory)Database, long alarm and trend history
Number of tagsHundredsThousands to hundreds of thousands
Remote accessOptional (VNC, panel web server)Standard (web client, mobile apps)
Typical useMachine operation and diagnosticsProduction supervision, reports, notifications

Architecture: how data flows from machine to screen

A typical system has four layers: field devices (sensors, drives, energy meters, engine controllers), PLCs or protocol gateways that normalise the data, the network (RS-485, CAN, Ethernet), and the supervisory layer (SCADA server, HMI panels, possibly the cloud). The joints between layers – gateways, converters and serial-to-Ethernet transitions – are where most problems occur.

Control cabinet interior with PLC, Ethernet switch and protocol gateway
A cabinet with PLC, industrial switch and protocol gateway – communication quality is usually decided here.

Communication protocols used with SCADA

Most common protocols for SCADA integration
ProtocolMedium / portSpeedTypical useNotes
Modbus RTURS-485 (2-wire), RS-2321.2–115.2 kb/sDrives, meters, controllersMaster/slave, addresses 1–247, simplest and most common
Modbus TCPEthernet, port 50210/100 Mb/sPLCs, gateways, newer drivesNo encryption – never expose to the internet
PROFIBUS DPRS-485, 9-pin D-sub9.6 kb/s–12 Mb/sSiemens, drives, remote I/ONeeds termination and proper connectors
PROFINETIndustrial Ethernet100 Mb/s – 1 Gb/sNew Siemens installationsReal-time, line or star topology
EtherNet/IPEthernet, ports 44818 / 2222100 Mb/sRockwell / Allen-Bradley, OmronExplicit and cyclic (I/O) messaging
CAN / CANopen2 wires + shield10 kb/s–1 Mb/sDrives, forklifts, mobile machinery120 Ω termination at both ends
SAE J1939CAN 250 / 500 kb/s250–500 kb/sTractor engines, trucks, generatorsPGN/SPN identifiers, DM1 fault codes
OPC UAEthernet, port 4840Network dependentPLC ↔ SCADA ↔ MES ↔ cloudBuilt-in encryption and authentication
MQTTTCP, ports 1883 / 8883 (TLS)Network dependentIIoT, cloud telemetryPublish/subscribe, lightweight
S7 (ISO-on-TCP)Ethernet, port 102100 Mb/sSiemens S7 controllersRequires PUT/GET access enabled in the PLC

RS-485 (Modbus RTU): the parameters people forget

Most serial communication problems come from installation, not software. RS-485 is a twisted pair (A/B or D+/D−) plus reference ground and shield. It must be wired as a line, not a star, and needs terminating resistors at both ends.

Recommended RS-485 / Modbus RTU parameters
ParameterRecommended valueWhat happens if wrong
CableShielded twisted pair, about 120 Ω impedanceReflections, random CRC errors
TopologyDaisy-chain, stubs shorter than 0.5 mA star causes unstable communication
Termination120 Ω at both ends onlyNone: noise; too many: reduced amplitude
BiasingBias resistors on A/B (about 560 Ω) in one placeFalse frames on an idle line
LengthUp to about 1200 m at up to 100 kb/sLonger distances need a repeater
Number of devicesUp to 32 receivers without a repeaterMore reduces signal levels
Serial settings9600–115200 baud, 8N1 or 8E1, identical on all devicesParity mismatch means no reply
ShieldGrounded at one end (or via capacitor at the other)Ground loops, damaged transceivers
AddressesUnique (1–247), no duplicatesTwo devices reply at once and corrupt the frame

The most used Modbus functions are 03 (read holding registers), 04 (read input registers), 06 (write single register) and 16 (write multiple registers). Watch the address numbering: some vendors count from 1, others from 0, causing the classic off-by-one error.

Sample inverter register map

Every manufacturer has its own map, but the data scope is similar. Always verify actual addresses in the device manual.

Typical inverter Modbus register map (illustrative)
VariableAccessModbus functionFormatNotes
Control word (start/stop/reset)Write06 / 1616 bit, bitwiseStart, stop, fault reset, direction
Frequency / speed referenceWrite06 / 1616 bit, 0.01 Hz scaleOften a percentage of rated value
Status wordRead03 / 0416 bit, bitwiseReady, running, fault, warning
Output frequencyRead03 / 0416 bit, 0.01 Hz scaleActual value
Output currentRead03 / 0416 bit, 0.1 A scaleFor load trends
DC bus voltageRead03 / 0416 bit, 0.1 V scalePower supply and capacitor diagnostics
Heatsink temperatureRead03 / 0416 bit, 1 °C scaleOverheating prediction
Last fault codeRead03 / 0416 bit, vendor codeMap to text in SCADA

Heavy and mobile machinery: CAN, J1939 and gateways to SCADA

Tractors, forklifts, lifts and trucks communicate internally over CAN. They are not connected directly to SCADA – a CAN → Modbus TCP / OPC UA / MQTT gateway reads the frames (engine speed, coolant temperature, oil pressure, active DM1 fault codes) and exposes them in a format the supervisory system understands. For electric forklifts, drive controller data (current, temperature, faults, battery voltage) enables condition-based rather than calendar-based servicing.

Typical devices and how to connect them to SCADA
DeviceInterfaceHow to connect to SCADAMost common problem
Industrial inverterRS-485 Modbus RTU / EthernetDirectly to a PLC or via RS-485/Ethernet converterMismatched serial settings, no termination
PLCEthernet (Modbus TCP, S7, EtherNet/IP, OPC UA)Native driver in SCADA or OPC UAAccess blocked in PLC config, wrong IP
HMI panelEthernet / RS-485Shared tags with the PLC, remote view via VNC / webIP conflicts, overloaded panel
Electric forkliftCANCAN → Modbus TCP / MQTT gatewayWrong CAN bitrate, no termination
Combustion engine (agri, trucks)CAN J1939J1939 gateway → Modbus / OPC UAIncorrect PGN/SPN mapping
Energy meterRS-485 Modbus RTU / M-BusConverter to Ethernet or PLCDuplicate address, wrong parity
Cogeneration unit / generatorModbus RTU/TCP, CANBuilt-in port or gatewayLimited simultaneous requests

Multiple displays: connecting several HMI panels and SCADA screens

Two industrial HMI panels side by side on a machine enclosure
Two HMI panels at one machine: separate screens for process and for alarms/trends.
Multi-display configurations
ConfigurationHow it worksAdvantagesLimitations
Several HMI panels on one PLCEach panel talks to the same controller over Ethernet or RS-485Multiple operator stations, independent screensPLC connection limit, growing request load
Main panel + remote view (VNC / web)Panel shares its image via VNC or built-in web serverFast to deploy, no extra softwareUsually limited clients, shared view
SCADA server + clientsOne server collects data, many operator stations use itScalable, common archive and alarmsNeeds server and client licences
Web client (browser)HTML5 visualisation from any deviceTablets, phones, no installationNeeds secure network and authentication
Video wallVideo controller splits SCADA across many monitorsGreat readability in a control roomRequires screen layout and GPU planning
Distributed HMI via gatewayPanels attached to a gateway buffering many devicesLower load on PLC and drivesExtra point of failure, gateway must be monitored

Three rules matter. First, a single source of truth: tags should come from one controller or server. Second, separated permissions: shop-floor operators can control, office views read only. Third, load control: every panel polling the same inverter over RS-485 reduces line throughput, so let one unit collect data and the others read from it.

Ethernet in the cabinet: addressing, segmentation, security

Use a separate subnet for automation devices, static IP addresses with a documented table and industrial-grade switches. Services such as Modbus TCP (502) or S7 (102) must never be exposed directly to the internet – use a VPN or a secure authenticated gateway. Prefer OPC UA with encryption over open Modbus TCP wherever possible.

  • Segmentation – separate automation from office networks (VLAN or separate switches with a firewall).
  • IP documentation – one table with device, address, mask, gateway and protocol.
  • Monitoring – SNMP or simple pings alerting on device loss.
  • Backups – keep copies of PLC, HMI and gateway projects off the machine.

Commissioning checklist

Service engineer connecting a laptop to a PLC and inverter on a test bench
Bench commissioning before cabinet installation shortens rollout and makes faults easier to isolate.
  1. Gather documentation – register maps, tag lists, wiring diagrams and serial settings.
  2. Plan addressing – slave addresses, IP addresses, CAN bitrates, node IDs.
  3. Verify wiring – continuity, A/B polarity, termination, shield grounding, separation from power cables.
  4. Test each device on its own with a Modbus master tool or CAN sniffer.
  5. Add devices to the network one at a time and note when communication destabilises.
  6. Define tags in SCADA / HMI – names, types, scaling, units, alarm limits.
  7. Configure alarms and trends – priorities, acknowledgement, archiving, notifications.
  8. Run a load test with the full tag count and all stations for several hours, watching CRC errors and timeouts.
  9. Save backups – project, device configuration, address table, operator manual.

Common communication faults and how to diagnose them

Troubleshooting SCADA / HMI communication
SymptomLikely causeWhat to check
No device response (timeout)Wrong address, serial settings, swapped A/BSlave address, baud rate, parity, wire polarity
Random CRC errorsMissing termination, interference, wrong cable120 Ω termination, shield, distance from motor and inverter cables
Data shifted by one registerDifferent address numbering (from 0 / from 1)Vendor documentation and SCADA driver settings
Values always zero or constantWrong register type or scalingFunction 03 vs 04, format (int16, uint16, float)
Communication drops in and outOverloaded line, timeout too short, weak gateway powerPolling rate, tag count, power supply
HMI freezes after hoursMemory overload, too many alarms, failing power supply24 V supply, panel CPU load, event archive
Device not visible on IP networkIP conflict, wrong VLAN, damaged switch portPings, ARP tables, switch port diagnostics
RS-485 port damaged after a stormSurge on the bus, no protectionTransceiver, surge protection, grounding

In our workshop we also see hardware failures: damaged RS-485 transceivers, burnt Ethernet ports in HMI panels and controllers, dead 24 V supplies and communication modules after surges. These can usually be diagnosed and repaired at component level instead of replacing the entire controller or panel.

Design best practices

  • Use consistent tag naming (e.g. LINE1_DRIVE2_CURRENT) and keep a central tag register.
  • Separate operator, service and management views.
  • Design clear alarms with priorities and short descriptions – avoid alarm floods.
  • Size the 24 V supply with margin and surge protection; many "strange" communication faults start at the power supply.
  • Do not run communication cables alongside power and inverter motor cables; cross them at right angles if necessary.
  • Plan spare tags and ports – installations almost always grow after the first year.

When to call a service workshop

If communication is unstable, SCADA loses data, an HMI cannot see the controller after a replacement or a machine lost connectivity after a surge, bring in a workshop that understands both electronics and protocols. We help with communication diagnostics, repair of damaged ports and communication modules, gateway commissioning and cleaning up the variable map of inverters, PLCs, HMI panels and mobile machine controllers. We work on weekdays, Monday to Friday, 8:00–16:00, around Knurów, Gliwice and the Silesia region.

See also: inverter repair after a surge and forklift controller repair. Have a device that will not talk to SCADA? Contact us – quotes are individual, after diagnostics.

Frequently asked questions

How do I connect an inverter to SCADA?
Usually over RS-485 (Modbus RTU) directly to a PLC or through an RS-485/Ethernet converter, or over Ethernet (Modbus TCP, PROFINET, EtherNet/IP). Use the same slave address, baud rate and parity on drive and master, and fit 120 Ω termination at both ends of the line.
What is the difference between SCADA and an HMI panel?
An HMI is a local screen at one machine or line. SCADA is a supervisory system that collects data from many controllers, archives and visualises it and allows control from one place.
How many HMI panels can I connect to one PLC?
It depends on the model and protocol – every controller has a limit of simultaneous connections. For many screens use a SCADA server or a buffering gateway to avoid overloading the PLC and drives.
How do I connect farm machinery and forklifts to SCADA?
Through a CAN → Modbus TCP, OPC UA or MQTT gateway. The gateway reads CAN or J1939 frames (speed, temperature, oil pressure, DM1 fault codes) and exposes them to the supervisory system.
Why does Modbus RTU drop data or report CRC errors?
Most often because of missing 120 Ω termination, wrong cable, interference from motor cables, a star topology or mismatched serial settings. Check wiring and settings before looking for a software bug.
Can I expose Modbus TCP to the internet?
No. Modbus TCP has no encryption or authentication. Use a VPN or secure gateway for remote access and OPC UA with encryption where possible.

Have a similar problem?

Call us, describe the fault – we'll tell you if we can help.

Call: +48 504 511 170