I tried, but same problem. i write 01 06 10 01 D7 46 in RS2 function e read this value in Device buffer memory PLC but in buffer communication when i send, i read: 00 7FF3 FF EB FF FF.
It's put 00 first byte too! Boh!
I need that the packet sent must to be the same that i write, because this and other command it will be used by rfid reader connected.