Thanks -I changed that, I still get the timeout errors. Yes I can setting are correct - I can read/write using my laptop over RS232
So I think I have figured out that I need to write to "Intelligent Function Module", not "CPU Built-in Memory", I no longer have the protocol errors at all, just time out errors which means I have to dig into the wiring again I guess...