Notes I have gathered on telnet so far;
run telnet
open <IP address>:23
password: 1234
info
returns Sysclock,
Revision#,
Loader#,
Firmware#,
User App#,
Run Stat,
Name,
WMI Stat
USB Stat
PLC Model,
WMI Host
CPU Freq
cfgsrv
returns WMI Host with port
program enable <#####> <##########> <User App>
starts TCP Communications
data download: 21120 2141526140
filecopy enable <#####> <##########> <Password>
data download: 21952 3842419543
Starts TCP Communications
wrmem <###############>
<Memory> <Value> ?? maybe
0564040000 00
chks
2141526140
Returns PLC File. Check gmt suite project file matches file on PLC.
rdmem
rdmem 011801 011D01 06CF01 06D401 055C04 06DC01 06DD01 076E02 070601 070B01 062404 072101 065C04 078602 000001 023001 034801
stop
stops plc
run
starts plc
live
command sent by GMT Suite. PLC Responds invalid command.
wrmem
writes to memory address
exit