IEC PAS 62591:2009

IEC/PAS 62591 ®
Edition 1.0 2009-01
PUBLICLY AVAILABLE
SPECIFICATION
PRE-STANDARD
Industrial communication networks – Fieldbus specifications –
WirelessHART™ communication network and communication profile

IEC/PAS 62591:2009(E)
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form

or by any means, electronic or mechanical, including photocopying and microfilm, without permission in writing from
either IEC or IEC's member National Committee in the country of the requester.
If you have any questions about IEC copyright or have an enquiry about obtaining additional rights to this publication,

please contact the address below or your local IEC member National Committee for further information.

IEC Central Office
3, rue de Varembé
CH-1211 Geneva 20
Switzerland
Email: inmail@iec.ch
Web: www.iec.ch
About the IEC
The International Electrotechnical Commission (IEC) is the leading global organization that prepares and publishes
International Standards for all electrical, electronic and related technologies.

About IEC publications
The technical content of IEC publications is kept under constant review by the IEC. Please make sure that you have the
latest edition, a corrigenda or an amendment might have been published.
ƒ Catalogue of IEC publications: www.iec.ch/searchpub
The IEC on-line Catalogue enables you to search by a variety of criteria (reference number, text, technical committee,…).
It also gives information on projects, withdrawn and replaced publications.
ƒ IEC Just Published: www.iec.ch/online_news/justpub
Stay up to date on all new IEC publications. Just Published details twice a month all new publications released. Available
on-line and also by email.
ƒ Electropedia: www.electropedia.org
The world's leading online dictionary of electronic and electrical terms containing more than 20 000 terms and definitions
in English and French, with equivalent terms in additional languages. Also known as the International Electrotechnical
Vocabulary online.
ƒ Customer Service Centre: www.iec.ch/webstore/custserv
If you wish to give us your feedback on this publication or need further assistance, please visit the Customer Service
Centre FAQ or contact us:
Email: csc@iec.ch
Tel.: +41 22 919 02 11
Fax: +41 22 919 03 00
IEC/PAS 62591 ®
Edition 1.0 2009-01
PUBLICLY AVAILABLE
SPECIFICATION
PRE-STANDARD
Industrial communication networks – Fieldbus specifications –
WirelessHART™ communication network and communication profile

INTERNATIONAL
ELECTROTECHNICAL
COMMISSION
PRICE CODE
XH
ICS 25.040.40 ; 35.100.05 ISBN 978-2-88910-811-4
– 2 – PAS 62591 © IEC:2009(E)
CONTENTS
FOREWORD.13

INTRODUCTION.13

1 Scope.14

1.1 General .14

1.2 Specifications.14

1.3 Procedures.14

1.4 Applicability.14
1.5 Conformance.14
2 Normative references .15
3 Terms, definitions, abbreviated terms, acronyms, and conventions.15
3.1 Terms and definitions .15
3.2 Abbreviated terms and acronyms .20
4 Physical Layer.23
5 TDMA Data Link layer.24
5.1 Purpose .24
5.2 Overview .25
5.2.1 TDMA Basics.25
5.2.2 Mesh Networking.27
5.2.3 Network Maintenance .28
5.2.4 Time Keeping .28
5.3 Data-Link Layer Services .29
5.3.1 General .29
5.3.2 Message SPs .29
5.3.3 Management SPs .33
5.4 Logical Link Control.35
5.4.1 The DLPDU .35
5.4.2 DLPDU Types.39
5.4.3 DLPDU Priority and Flow Control.41
5.4.4 Error Detection Coding and Security.42
5.5 Medium Access Control.43
5.5.1 General .43

5.5.2 Slot Timing .44
5.5.3 Communication Tables and Buffers .46
5.5.4 Link Scheduling .52
5.5.5 MAC Operation.56
5.6 Physical Layer-Specific Requirements.64
6 Network Management.65
6.1 Purpose .65
6.2 WirelessHART™ .65
6.2.1 General .65
6.2.2 Mesh Networks.66
6.2.3 WirelessHART Network Components.67
6.2.4 Message Routing.71
6.2.5 Security.73
6.3 Network Layer Services.74

PAS 62591 © IEC:2009(E) – 3 –
6.3.1 General .74

6.3.2 Network Layer Message SPs .74

6.3.3 WirelessHART Network Layer Management Services .78

6.4 WirelessHART Network Layer .81

6.4.1 General .81

6.4.2 Wireless Network Layer PDUs .81

6.4.3 Wireless Transport Layer.89

6.4.4 Wireless Network Layer Operation.96

6.4.5 WirelessHART Procedures .104

7 Wireless Devices.119

7.1 Purpose .119
7.2 Overview .119
7.2.1 Gerenal .119
7.2.2 WirelessHART Network Components.119
7.3 WirelessHART Field Devices.122
7.3.1 Overview .122
7.3.2 General Requirements.122
7.3.3 Maintenance Port .122
7.3.4 WirelessHART Interface .123
7.4 Wireless Adapter.125
7.4.1 Overview .125
7.4.2 General Requirements.126
7.4.3 WirelessHART Interface .126
7.5 WirelessHART Gateway .127
7.5.1 Overview to this subclause .127
7.5.2 General Requirements.128
7.5.3 Gateway Model.130
7.5.4 Gateway Management .136
7.5.5 WirelessHART Gateway Superframe .138
7.5.6 Gateway Change Notification Services .138
7.5.7 HART Commands Interface .140
7.6 WirelessHART Network Manager.144
7.6.1 General .144
7.6.2 Core Network Functions .146
7.6.3 Network Manager Requirements.149

7.6.4 Network Manager Model .150
7.6.5 Routing.161
7.6.6 Scheduling .162
7.6.7 Network Manager Interface.168
7.7 Handheld Devices .173
7.7.1 General .173
7.7.2 General Requirements.174
7.7.3 Maintenance Port Connection.174
7.7.4 Network Device Connection.174
7.7.5 Network Connection as a Maintenance Device . 175
7.8 Redundancy .176
8 Wireless Network and Gateway Commands.178
8.1 Overview .178
8.2 Subject.179

– 4 – PAS 62591 © IEC:2009(E)
8.3 WirelessHART Command Overview.179

8.3.1 Physical Layer Commands .179

8.3.2 Data Link Layer Commands.179

8.3.3 Network Layer Commands.180

8.3.4 Network Manager Commands .181

8.3.5 Gateway Commands.181

8.3.6 Wireless Application Commands.182

8.4 NETWORK Commands.183

8.4.1 General .183

8.4.2 Command 768 Write Join Key.183

8.4.3 Command 769 Read Join Status. 184
8.4.4 Command 770 Request Active Advertising . 184
8.4.5 Command 771 Force Join Mode .185
8.4.6 Command 772 Read Join Mode Configuration . 186
8.4.7 Command 773 Write Network Id .187
8.4.8 Command 774 Read Network Id .188
8.4.9 Command 775 Write Network Tag .188
8.4.10 Command 776 Read Network Tag .189
8.4.11 Command 777 Read Wireless Device Capabilities. 189
8.4.12 Command 778 Read Battery Life .190
8.4.13 Command 779 Report Device Health .190
8.4.14 Command 780 Report Neighbor Health List .191
8.4.15 Command 781 Read Device Nickname Address . 192
8.4.16 Command 782 Read Session List .192
8.4.17 Command 783 Read Superframe List . 193
8.4.18 Command 784 Read Link List .194
8.4.19 Command 785 Read Graph List.194
8.4.20 Command 786 Read Neighbor Property Flag . 195
8.4.21 Command 787 Report Neighbor Signal Levels. 195
8.4.22 Command 788 Alarm "Path Down".196
8.4.23 Command 789 Alarm "Source Route Failed".196
8.4.24 Command 790 Alarm "Graph Route Failed" . 197
8.4.25 Command 791 Alarm "Transport Layer Failed" .197
8.4.26 Command 793 Write UTC Time Mapping .198
8.4.27 Command 794 Read UTC Time Mapping .198

8.4.28 Command 795 Write Timer Interval.199
8.4.29 Command 796 Read Timer Interval .200
8.4.30 Command 797 Write Radio Power Output.200
8.4.31 Command 798 Read Radio Output Power.201
8.4.32 Command 799 Request Service.202
8.4.33 Command 800 Read Service List. 203
8.4.34 Command 801 Delete Service .204
8.4.35 Command 802 Read Route List .204
8.4.36 Command 803 Read Source-Route.205
8.4.37 Command 804 Read CCA Mode .205
8.4.38 Command 805 Write CCA Mode .206
8.4.39 Command 806 Read Handheld Superframe . 207
8.4.40 Command 807 Request Handheld Superframe Mode. 207
8.4.41 Command 808 Read Packet Time-to-Live .208

PAS 62591 © IEC:2009(E) – 5 –
8.4.42 Command 809 Write Packet Time-to-Live .208

8.4.43 Command 810 Read Join Priority .209

8.4.44 Command 811 Write Join Priority. 209

8.4.45 Command 812 Read Packet Receive Priority.210

8.4.46 Command 813 Write Packet Receive Priority.210

8.4.47 Command 814 Read Device List Entries .211

8.4.48 Command 815 Add Device List Table Entry .211

8.4.49 Command 816 Delete Device List Table Entry .212

8.4.50 Command 817 Read Channel Blacklist . 213

8.4.51 Command 818 Write Channel Blacklist .214

8.4.52 Command 819 Read Back-Off Exponent. 214
8.4.53 Command 820 Write Back-Off Exponent. 215
8.4.54 Command 821 Write Network Access Mode.216
8.4.55 Command 822 Read Network Access Mode.216
8.4.56 Command 823 Request Session .217
8.5 Gateway and Network Manager Commands .217
8.5.1 Command 832 Read Network Device Identity using Unique ID . 217
8.5.2 Command 833 Read Network Device's Neighbor Health . 218
8.5.3 Command 834 Read Network Topology Information . 219
8.5.4 Command 835 Read Publish Data Message List. 220
8.5.5 Command 836 Flush Cached Responses for a Device. 220
8.5.6 Command 836 Write Update Notification Bit Mask for a Device . 221
8.5.7 Command 838 Read Update Notification Bit Mask for a Device . 221
8.5.8 Command 839 Change Notification.222
8.5.9 Command 840 Read Network Device's Statistics . 223
8.5.10 Command 841 Read Network Device Identity using Nickname. 223
8.5.11 Command 842 Write Network Device's Scheduling Flags. 224
8.5.12 Command 843 Read Network Device's Scheduling Flags . 225
8.5.13 Command 844 Read Network Constraints. 225
8.5.14 Command 845 Write Network Constraints. 226
8.6 Network Management Configuration Commands . 226
8.6.1 Command 960 Disconnect Device .226
8.6.2 Command 961 Write Network Key . 227
8.6.3 Command 962 Write Device Nickname Address . 228
8.6.4 Command 963 Write Session.228

8.6.5 Command 964 Delete Session.229
8.6.6 Command 965 Write Superframe.230
8.6.7 Command 966 Delete Superframe .231
8.6.8 Command 967 Write Link.231
8.6.9 Command 968 Delete Link.232
8.6.10 Command 969 Write Graph/Neighbor Pair . 233
8.6.11 Command 970 Delete Graph Connection .234
8.6.12 Command 971 Write Neighbor Property Flag . 234
8.6.13 Command 972 Write Network Suspend.235
8.6.14 Command 973 Write Service .236
8.6.15 Command 974 Write Route.237
8.6.16 Command 975 Delete Route.237
8.6.17 Command 976 Write Source-Route.238
8.7 Device Specific Wireless-NETWORK Commands . 239

– 6 – PAS 62591 © IEC:2009(E)
8.7.1 General .239

8.7.2 Command 64 512 Read Wireless Module Revision . 239

9 Application Layer addendum – Device Commands.241

9.1 Subject.241

9.2 Application of Publish data mode and event commands.241

9.2.1 Publish data Mode Commands .241

9.2.2 Event Notification .243

9.3 DEVICE Commands .244

9.3.1 Revisions to IEC 61158-6-20 .244

9.3.2 Additional commands .245
10 Security.274
11 Amendment to IEC 61784-1:2007 for Profile 9/2 .276
13.3 Profile CP 9/2 (WirelessHART).276
13.3.1 Physical layer .276
13.3.2 Data Link Layer .282
13.3.3 Application Layer.283

Figure 1 – OSI 7-Layer Communication Model mapped to Type 20 .13
Figure 2 – Data-Link Layer Scope.24
Figure 3 – A TDMA Slot and Superframe .25
Figure 4 – Channel Hopping .26
Figure 5 – Mesh Network .27
Figure 6 – Message Service Sequences .30
Figure 7 – DLPDU Structure .36
Figure 8 – Address Specifier.37
Figure 9 – Construction of 8 byte EUI-64 Addresses .37
Figure 10 – DLPDU Specifier .38
Figure 11 – Slot Timing.44
Figure 12 – Data-Link Table Relationships.47
Figure 13 – Relationships Used for Link Scheduling.53
Figure 14 – MAC Components .56
Figure 15 – TDMA State Machine .58

Figure 16 – ACK Transmission.60
Figure 17 – Transmit State Machine .61
Figure 18 – Receive State Machine .63
Figure 19 – Network Layer.65
Figure 20 – WirelessHART Network .66
Figure 21 – Typical WirelessHART Network Components .68
Figure 22 – Single Access Point with Clock .70
Figure 23 – Multiple Access Points with Clocks.70
Figure 24 – Access Point Not Providing Clock .70
Figure 25 – Graph Routing.72
Figure 26 – Source Routing .73
Figure 27 – Network Layer Message Sequence .75

PAS 62591 © IEC:2009(E) – 7 –
Figure 28 – WirelessHART Network Layer Context Diagram .81

Figure 29 – WirelessHART NPDU Structure.82

Figure 30 – Network Control Byte .83

Figure 31 – Expanded Routing Information .84

Figure 32 – Security Sub-Layer.84

Figure 33 – Security Control Byte .85

Figure 34 – Transport Layer.90

Figure 35 – Transport Byte .90

Figure 36 – WirelessHART Command Format .91
Figure 37 – Using Transport Layer to Change Network Key. .93
Figure 38 – WirelessHART Network Layer Operation .98
Figure 39 – Wireless Network Table Relationships.100
Figure 40 – NPDU Clients.101
Figure 41 – Join Sequence .107
Figure 42 – Network Layer Join Procedure .111
Figure 43 – Data-Link Layer Network Search Procedure . 113
Figure 44 – Device leaving the network.115
Figure 45 – Neighbor Discovery.116
Figure 46 – Path Failure .117
Figure 47 – Changing Network Keys .118
Figure 48 – WirelessHART Standalone Gateway. .120
Figure 49 – Supporting Publish Data Operation .125
Figure 50 – Wireless Adapter.126
Figure 51 – Gateway Scope.128
Figure 52 – Virtual Gateway and Network Access Points in a WirelessHART Network . 129
Figure 53 – Gateway model .130
Figure 54 – Logical Network Device.133
Figure 55 – Physical Network Device .134
Figure 56 – Managing Notification Services .140
Figure 57 – Network Manager Scope .145
Figure 58 – Network Manager in WirelessHART Network .146

Figure 59 – General Model for Network Manager .151
Figure 60 – Kinds of Devices .153
Figure 61 – Network Routing.154
Figure 62 – Network Schedule .156
Figure 63 – Example of a Three-slot Superframe .157
Figure 64 – Multiple Superframes in a Network .158
Figure 65 – Security Manager .159
Figure 66 – Network Management Architecture. 160
Figure 67 – Example Four Network Device WirelessHART Network .165
Figure 68 – Example of Command Message Sequences .169
Figure 69 – Initializing a WirelessHART Network .170
Figure 70 – Allocating and using services .171

– 8 – PAS 62591 © IEC:2009(E)
Figure 71 – Adjusting Network Schedule.172

Figure 72 – Health Reports .172

Figure 73 – WirelessHART Handheld Connections.174

Figure 74 – Network Routing.176

Figure 75 – Graph Routing from WirelessHART Device "A" to the Network Manager.177

Figure 76 – Redundant Network Managers .178

Figure 77 – Trigger Mode 1: Windowed.259

Figure 78 – Windowed Condition on Publish Data with max. Update Time expired . 259

Figure 79 – Update Time change on Limit Excess.260
Figure 80 – Physical Layer Message SP's.280

Table 1 – Local Device Management Commands .33
Table 2 – Network ID Allocation .36
Table 3 – Slot Timing Symbols.45
Table 4 – Minimum Table and Buffer Space Requirement .47
Table 5 – Superframe Properties .48
Table 6 – Link Properties .48
Table 7 – Neighbor Table Entry .50
Table 8 – Graph Table Entry.51
Table 9 – Packet Record.51
Table 10 – Packet Precedence Order.54
Table 11 – Example BOCntr Selection Sets .54
Table 12 – 2 450 MHz IEEE STD 802.15.4-2006 Timing and Specifications .64
Table 13 – Physical Channel Table.64
Table 14 – Destination Enumerator.76
Table 15 – Transport Type Codes .76
Table 16 – Transport Type Codes Pairs .77
Table 17 – Local Device Management Commands .78
Table 18 – General Network Layer Attributes .80
Table 19 – Session Table Attributes.80

Table 20 – Route Table Attributes.80
Table 21 – Security Layer Sizes.85
Table 22 – Session Table Entry .86
Table 23 – NPDU Nonce (Byte-String 'N') .87
Table 24 – Transport Table Entries .92
Table 25 – Definitions of Network Layer States.96
Table 26 – Minimum Session Table Space Requirement . 100
Table 27 – Route Table Entries.100
Table 28 – Service Table Entries .101
Table 29 – NPDU Construction .102
Table 30 – Default Route Based on Priority and Transport Type . 102
Table 31 – Routing of Forwarded Packets.104

PAS 62591 © IEC:2009(E) – 9 –
Table 32 – Mandatory Commands for WirelessHART Field Devices .122

Table 33 – Wireless Adapter Minimum Capacity Requirements .126

Table 34 – Required Command Responses .139

Table 35 – WirelessHART Gateway Status Flags.142

Table 36 – Gateway Minimum Capacity Requirements .142

Table 37 – Required Gateway Commands .143

Table 38 – Cached Response Messages .144

Table 39 – Network Manager Requirements.149

Table 40 – Routing Requirements .161
Table 41 – Scheduler Requirements .162
Table 42 – FrameId 1: 1 s Update Rate (Superframe Length 100).166
Table 43 – FrameId 4: 4 s Update (Superframe Length 400) .166
Table 44 – FrameId 0: Management Superframe.166
Table 45 – Join Request (shared w/ management responses).166
Table 46 – Join Response (shared w/ management requests).166
Table 47 – Commands .166
Table 48 – Command Reponses .167
Table 49 – Node A.167
Table 50 – Node B.167
Table 51 – Node C.168
Table 52 – Node D.168
Table 53 – Void .168
Table 54 – Network Manager Universal Commands . 169
Table 55 – Physical layer commands .179
Table 56 – DL commands .179
Table 57 – Network layer commands .180
Table 58 – Network Manager Commands.181
Table 59 – Gateway Commands .182
Table 60 – Wireless Application Commands.182
Table 61 – Command 768 Request Data Bytes .183
Table 62 – Command 768 Response Data Bytes .183

Table 63 – Command 768-specific Response Codes. 183
Table 64 – Command 769 Request Data Bytes .184
Table 65 – Command 769 Response Data Bytes .184
Table 66 – Command 769-specific Response Codes. 184
Table 67 – Command 770 Request Data Bytes .185
Table 68 – Command 770 Response Data Bytes .185
Table 69 – Command 770-specific Response Codes. 185
Table 70 – Command 771 Request Data Bytes .186
Table 71 – Command 771 Response Data Bytes .186
Table 72 – Command 771-specific Response Codes. 186
Table 73 – Update periods allowed .242
Table 74 – Minimum Update Rates Allowed by Physical Layer. 242

– 10 – PAS 62591 © IEC:2009(E)

Table 75 – Identify response value field.244

Table 76 – Publish Data Message P
...