MODBUS Protocol for CS141 network card families

Similar documents
MAN-SGY-012-V11 EC 5195 Fairford Electronics Ltd - Synergy Modbus RTU Programming Manual - 22nd February 2016 Page 1 of 59.

Inbuilt Modbus Protocol

VISY-Quick Communication Protocol

Differential Pressure Sensor

DEIF A/S. MTR-2-015, -315, -415, MTR-2F-215 Multi-configurable AC transducer C. Modbus Communication Manual.

Weather Station P03/3-Modbus-GPS for Modbus

Motors Automation Energy Transmission & Distribution Coatings. Servo Drive SCA06 V1.5X. Addendum to the Programming Manual SCA06 V1.

605 series / Relion Protection and Control. Feeder Protection and Control/ Feeder Protection REF601/REJ601 Modbus Communication Protocol Manual

Installation Instructions: ICON Anti-Condensate Controller

CLX000 Technical Manual (v5.7x)

Communication description SCYLAR -HEAT. Communication description

Data byte 0 Data byte 1 Data byte 2 Data byte 3 Data byte 4. 0xA Register Address MSB data byte Data byte Data byte LSB data byte

MKIII -MB USER S GUIDE 09/18/18. Rev. 3

PAX2S Modbus Register Table REVISED 2/20/12 LP0894A

POINTS OF CAUTION BEFORE USE...

Remote Display Unit. Installers Handbook Copyright 2001 AirSense Technology Ltd. LM Remote Display Unit Installers Handbook Issue 1.

Electronic pressure-independent characterised control valve with energy monitoring

station) on the serial port

Infrared Tire Temperature Sensor, IRTS-V2 - Datasheet

CANBUS-THERMO-2CH Rev B v Channel CAN-Bus Thermocouple Interface K-Type. V1.0 July SK Pang Electronics Ltd

Property of Monitronics Inc

Product Data Sheet KyoRack 4

Multichannel Brake Infrared Temperature Sensor - Datasheet

FATEK. FBs-1HLC. Precision Load Cell Module. Operation manual V1.1 06/07/2017 FATEK AUTOMATION CORP.

AW/AHW Professional Weighing Scale. User Manual

Infrared Temperature Sensor - Datasheet

PART TEMP RANGE PIN-PACKAGE

OP-02 / OP-03 / OP-04

43iQ MODBUS Register Table

Weather Station P03/3-RS485-GPS with RS485 Interface

1014/15 R Float Volt - - Voltage, L-L, ave of 3 phases 1016/17 R Float Volt - - Voltage, L-N, ave of 3 phases

ECE260: Fundamentals of Computer Engineering

COM - START. Communication module Installation. Slave no. Command (03) No. of bytes Words number 1 Words num. 1 hexadecimal byte. 2 hexadecimal bytes

GW Professional Weighing Scale. User Manual SNOWREX INTERNATIONAL CO., LTD. SRGW

Infrared Tire Temperature Sensor Kit, IRTS-UK-V2 Datasheet

MS BA01. PHT Combination Sensor SPECIFICATIONS

Operation Manual Contents subject to change without notice

PowerView Modbus Registers (Ver 3.2)

MP3 Digital Voice Module Model No.: VCM-SD Rev.A3. Content

NTE74176 Integrated Circuit TTL 35Mhz Presettable Decade Counter/Latch

Coordination. Failures and Consensus. Consensus. Consensus. Overview. Properties for Correct Consensus. Variant I: Consensus (C) P 1. v 1.

HME Series Amplified pressure sensors

MS BA01 PTH Fusion Sensor

hexadecimal-to-decimal conversion

Meteorological Station P03/3-RS485-WAGO

The Ordering Code for various standard model Recorders with an AC supply and without any additional options are as follows:

Digital Temperature Sensor and Thermal Watchdog with 2-Wire Interface

BINARY CODES. Binary Codes. Computer Mathematics I. Jiraporn Pooksook Department of Electrical and Computer Engineering Naresuan University

Appendices. RS232 Commands. RS232 Connector. Pin No Specification 1 N/A 2 RXD 3 TXD 4 DTR 5 GND 6 DSR 7 RTS 8 CTS 9 N/A.

DNP V3.00 Level2. ProtocolAssignm entsusermanual

Weather Station P03/3-RS485 with RS485 Interface

FRENIC-Ace (C2) (Supplement to RS-485 User's Manual)

MODEL: R7K4FML3. Remote I/O R7K4F Series. POWER INPUT DC power R: 24 V DC (Operational voltage range: ±10 %; ripple 10 %p-p max.)

TYPE RECALL 1 RECALL 2 RECALL 3 RECALL 4, 8 RECALL 5, 7 RECALL 6 FORMAT #23 #30 #0 #7 #23 #20 MODE RUN TRACK POINT RUN RUN INC PARITY BAUD

IO-Link Data Reference Guide: K50 Pro Touch Button with IO-Link

Overlay Transport Virtualization (OTV) Unicast-Mode Transport Infrastructure Deployment

MPP5800 series - PANEL MOUNT PRINTERS. Options

244241, Operation Manual Contents subject to change without notice. Version 1.0 Issue AA

E40M. Binary Numbers. M. Horowitz, J. Plummer, R. Howe 1

Multimedia Systems WS 2010/2011

HD2016. [ GB ] Weighing rain gauge. Rain PART OF G H M GROUP TELEMETRIE & AUTOMATION TELEMETRIE & AUTOMATION

Acceleration/Velocity/Displacement VIBRATION METER

CS 347 Parallel and Distributed Data Processing

NTE74177 Integrated Circuit TTL 35Mhz Presettable Binary Counter/Latch

O P E R A T I N G M A N U A L

Vidyalankar S.E. Sem. III [EXTC] Digital Electronics Prelim Question Paper Solution ABCD ABCD ABCD ABCD ABCD ABCD ABCD ABCD = B

User Manual. 1000BASE-T1 SFP Module

Troubleshooting IOM Issues

WEIGHT INDICATOR WIDRA W90

,- # (%& ( = 0,% % <,( #, $ <<,( > 0,% #% ( - + % ,'3-% & '% #% <,( #, $ <<,(,9 (% +('$ %(- $'$ & " ( (- +' $%(& 2,#. = '%% ($ (- +' $ '%("

9-Channel 64steps Constant-Current LED Driver with SPI Control. Features

Product Data Sheet KyoRack 2

Swegon CASA Smart ModBus Register SCB 3.0

NOTE: Opening and Closing Reports must be enabled. See CL 2C Digit Positions 1 and 3 for additional information.

Real-Time Course. Clock synchronization. June Peter van der TU/e Computer Science, System Architecture and Networking

SINAMICS G120X. Available in power ratings up to 700 hp (630 kw) Technical documentation 01 / 2019

G. Lufft Mess- und Regeltechnik GmbH, Fellbach, Germany. We reserve the right to make technical changes at any time without notice.

WE TAKE BUILDING AUTOMATION PERSONALLY MANUAL PRESIGO PDT

SZ7001. Wireless ZIGBEE tipping bucket rain sensor. Product Overview. Dimensions. parameter. September, 2016 Rev.

KN Series Boiler HeatNet V3 LonWorks Network Variables V1.10

ECE20B Final Exam, 200 Point Exam Closed Book, Closed Notes, Calculators Not Allowed June 12th, Name

About the Sens it Payload

89BSD CALCULATION METHOD APPLICATION NOTE

OPERATING MANUAL. EIB-Kombisensor AS 315 N

EECS150 - Digital Design Lecture 23 - FFs revisited, FIFOs, ECCs, LSFRs. Cross-coupled NOR gates

MS4525HRD (High Resolution Digital)

LABORATORY MANUAL MICROPROCESSOR AND MICROCONTROLLER

DATA SHEET. Thermocouple module with digital I²C-Interface - THMOD-I²C. Characteristic features. Areas of application. Features.

Product manual. Mylos KNX Shutter actuator 2CSY1104C/S

High-efficiency Circulator Pump. Rio-Eco N / Rio-Eco Z N. Type Series Booklet

CSE 123: Computer Networks

Communication and data formats

Operating Manual. English. Compact Weather Station WS200-UMB WS300-UMB WS301-UMB WS400-UMB WS500-UMB WS501-UMB WS600-UMB.

Electric Duct Heater. HECB Series Modbus Communication Module User Guide. HECB-Modbus Guide docx

CHV Series Vector Control Inverter Options. Operating Instructions for Tension Control Card

MS4525HRD (High Resolution Digital) Integrated Digital Pressure Sensor (24-bit Σ ADC) Fast Conversion Down to 1 ms Low Power, 1 µa (standby < 0.15 µa)

16 Input AC Block I/O Module

G. Lufft Mess- und Regeltechnik GmbH, Fellbach, Germany. We reserve the right to make technical changes at any time without notice.

UMG 96 RM Basic unit Extension UMG 96RM-PN Extension UMG 96RM-P Extension UMG 96RM-CBM Power Analyser

MAGPOWR TENSION CONTROL DLCA NET-SLIM. User Manual. Digital Load Cell Amplifier MI 850A358 1 A

Transcription:

Last update: 20/09/208 MODBUS Protocol for CS4 network card families Summary. MODBUS PROTOCOL... 2.. MODBUS COMMUNICATION PARAMETERS... 2.2. AVAILABLE MODBUS FUNCTION CODES... 2.3. EXCEPTION CODES... 3 2. COMMUNICATION EXAMPLE... 4 3. MODBUS TABLES... 6 3.. NIKY, NIKY S, KEOR LINE RT... 6 3.2. DAKER DK, KEOR LP, KEOR S... 8 3.3. DHEA, WHAD 800/2500, MEGALINE... 0 3.4. WHAD 3000/6000, TRIMOD, TRIMOD HE, ARCHIMOD, ARCHIMOD HE... 2 3.5. KEOR T... 4 3.6. KEOR HP... 6 3.7. KEOR HPE... 8 3.8. STATUS BYTES TABLE ( SEE REGISTRY 09 OF ALL PREVIOUS TABLES )... 20 4. APPENDIX... 2 4.. RS485 CONNECTOR FOR CS4M AND CS4M SK... 2 4.2. BUS TERMINATION... 2

. Modbus Protocol MODBUS is a protocol for serial communication. Data is transmitted in form of 6bit registers (integer) or data byte status information. It is an open protocol and a common protocol in industry machinery. The fundamental structure of MODBUS has never changed due to compatibility reasons. MODBUS is also a single mater protocol. The master controls the whole transmission and monitors potential occurring timeouts. The connected devices are only allowed to send telegrams if the master requests. For remote control and monitoring of devices the MODBUS interface in each CS4 can read out measurement values, events, status and other information in a master-slave protocol... Modbus Communication Parameters The CS4 always uses 8 data bits for communication. If you receive faulty answers (Timeout Errors, Transaction ID Errors, Write Errors etc.), it may be, that the polling cycle was defined to fast. This causes the non-answered polling requests or even to a reboot of the CS4 through the integrated Watchdog, because the system is overloaded. Further on it can come to delayed answers during the MODBUS over IP or rather RS485 polling due to traffic into the bus or network, because the CS4 is a multi-device, which has to handle several tasks at the same time. Please define a response timeout of at least 500ms (at a fast MODBUS over IP or RS485 network/bus or rather higher accordingly, e.g. 4000ms at slow connections). The timeout has to be increased until the errors stay out..2. Available Modbus Function Codes Implemented MODBUS functions in the CS4 units: Code 03H 04H 0H Original Modbus Function Read Holding Registers Read Input Registers Write Multiple Registers The CS4 makes no difference between function 03H and 04H. The baud rate is adjustable up to 38400 Baud. Please note that the MODBUS adapter client allows a timeout of 40ms at 9600 baud for one value. 2

.3. Exception Codes Except for broadcast messages, when a master device sends a query to a slave device it expects a normal response. One of four possible events can occur from the master's query: If the slave device receives the query without a communication error, and can handle the query normally, it returns a normal response. If the slave does not receive the query due to a communication error, no response is returned. The master program will eventually process a timeout condition for the query. If the slave receives the query, but detects a communication error parity, LRC, or CRC, no response is returned. The master program will eventually process a timeout condition for the query. If the slave receives the query without a communication error, but cannot handle it (for example, if the request is to read a non existent register the slave will return an exception response informing the master about the nature of the error. Available Exception codes: Code 0H Meaning Illegal: The command received in the query is not defined. 02H Illegal: The address received in the query is not defined for the slave. 04H Slave device failure: Internal slave device error 3

2. Communication Example The following tables contain the general command descriptions and examples with Modbus RTU framing. Query: slave no function code address of first word to read word count Checksum LRC or CRC byte byte High byte Low byte High byte Low byte or 2 bytes Answer: slave no function code byte count high byte of first word low byte of first word bytes with contents of n words Checksum LRC or CRC byte byte byte byte byte n * 2 bytes or 2 bytes Read Words (Functions 03h and 04h) Example: Read Words, Function 04h Read one word at address 63h (= 99 decimal): Query: Byte 2, 3 4, 5 6, 7 8, 9 0, 2, 3 4, 5 6 7 Meaning Leading colon Slave number Function code Address of first word to read Word count to read LRC Carriage return Line feed high byte low byte high byte low byte LF HEX [3A] [30][3] [30][34] [30][30] [36][33] [30][30] [30][3] [39][37] [0D] [0A] Answer: Byte 2, 3 4, 5 6,7 8, 9 0, 2, 3 4 5 Meaning Leading colon Slave number Function code Byte count Contents of the word LRC Carriage return Line feed LF high byte low byte HEX [3A] [30][3] [30][34] [30][32] [3][32] [33][34] [42][33] [0D] [0A] HEX: Hexadecimal values of the data The word at address contains the value 234h = 4660 decimal. Example: Read Words, Function 04h, RTU Mode Read one word at address 63h (= 99 decimal) ( The word at address contains the value 234h = 4660 decimal.): Query: Byte 2 3 4 5 6 7 8 Meaning slave function address of first word count to CRC silent number code word to read read interval high low high low low >= 3,5 byte byte byte byte byte characters RTU HEX high byte [0] [04] [00] [63] [00] [0] [C] [D4] silent interval >= 3,5 characters Answer: 4

Byte 2 3 4 5 6 7 Meaning slave function byte contents of the CRC silent number code count word interval high byte low byte low byte high byte >= 3,5 RTU characters [0] [04] [02] [2] [34] [B4] [47] HEX silent interval >= 3,5 characters 5

3. Modbus Tables Note: Type U/S : this defines whether the answer has an algebraic sign (math. +/-) or not. U means unsigned. S means signed, so this answer may be positive or negative. The answer may be true or false. Some clients (f.e. MODBUS Poll) use MODBUS addresses with a valid range between 0-65535. Some clients use as the valid range -65536, so it may be necessary to add to the address. 3.. Niky, Niky S, Keor Line RT Address Type Function Description Length Notes 97 U 3 / 4 Output Voltage [V] 00 U 3 / 4 Output Power [%] 03 U 3 / 4 Battery Charge Level [%] 04 S 3 / 4 Input Voltage [V] 07 S 3 / 4 Temperature [C ] 08 S 3 / 4 Autonomy Time [minutes] 09 U 3 / 4 UPS Status (ASCII HEX) Please check Status Bytes table below 0 S 3 / 4 Battery Voltage [V] U 3 / 4 Input Frequency [Hz] 4 U 3 / 4 Powerfail Counter 6 U 3 / 4 7 U 3 / 4 9 U 3 / 4 22 U 3 / 4 32 U 3 / 4 34 U 3 / 4 38 U 3 / 4 39 U 3 / 4 40 U 3 / 4 4 U 3 / 4 42 U 3 / 4 43 U 3 / 4 44 U 3 / 4 Alarm: On Battery = active; 0 = not active Alarm: Battery Low = active; 0 = not active Alarm: Over Temperature = active; 0 = not active Alarm: Output Overload = active; 0 = not active Alarm: General Fault = active; 0 = not active Alarm: UPS communication lost = active; 0 = not active Alarm: Test in progress = active; 0 = not active AUX Port = active (high); 0 = not active (low) AUX Port 2 = active (high); 0 = not active (low) AUX Port 3 = active (high); 0 = not active (low) AUX Port 4 = active (high); 0 = not active (low) Sensormanager / SM_T_COM sensor Sensormanager / SM_T_COM sensor 2 () () () () (2) (2) 6

45 U 3 / 4 46 U 3 / 4 47 U 3 / 4 48 U 3 / 4 49 U 3 / 4 50 U 3 / 4 Sensormanager sensor 3 Sensormanager sensor 4 Sensormanager sensor 5 Sensormanager sensor 6 Sensormanager sensor 7 Sensormanager sensor 8 (2) (2) (2) (2) (2) (2) () not available in CS4B, CS4B SK (2) available only in CS4, CS4 SK 7

3.2. Daker DK, Keor LP, Keor S Address Type Function Description Length Note 97 U 3 / 4 Output Voltage [V] 00 U 3 / 4 Output Power [%] 03 U 3 / 4 Battery Charge Level [%] 04 S 3 / 4 Input Voltage phase L [V] 05 S 3 / 4 Input Voltage phase L2 [V] () 06 S 3 / 4 Input Voltage phase L3 [V] () 07 S 3 / 4 Temperature [C ] 08 S 3 / 4 Autonomy Time [minutes] 09 U 3 / 4 UPS Status (ASCII HEX) Please check Status Bytes table below 0 S 3 / 4 Battery Voltage [V] U 3 / 4 Input Frequency phase L [Hz] 2 U 3 / 4 Input Frequency phase L2 [Hz] () 3 U 3 / 4 Input Frequency phase L3 [Hz] () 4 U 3 / 4 Powerfail Counter 6 U 3 / 4 7 U 3 / 4 9 U 3 / 4 22 U 3 / 4 23 U 3 / 4 32 U 3 / 4 34 U 3 / 4 38 U 3 / 4 39 U 3 / 4 40 U 3 / 4 4 U 3 / 4 42 U 3 / 4 43 U 3 / 4 44 U 3 / 4 45 U 3 / 4 46 U 3 / 4 Alarm: On Battery = active; 0 = not active Alarm: Battery Low = active; 0 = not active Alarm: Over Temperature = active; 0 = not active Alarm: Output Overload = active; 0 = not active Alarm: On Bypass = active; 0 = not active Alarm: General Fault = active; 0 = not active Alarm: UPS communication lost = active; 0 = not active Alarm: Test in progress = active; 0 = not active AUX Port = active (high); 0 = not active (low) AUX Port 2 = active (high); 0 = not active (low) AUX Port 3 = active (high); 0 = not active (low) AUX Port 4 = active (high); 0 = not active (low) Sensormanager / SM_T_COM sensor Sensormanager / SM_T_COM sensor 2 Sensormanager sensor 3 Sensormanager sensor 4 (2) (2) (2) (2) (3) (3) (3) (3) 8

47 U 3 / 4 48 U 3 / 4 49 U 3 / 4 50 U 3 / 4 Sensormanager sensor 5 Sensormanager sensor 6 Sensormanager sensor 7 Sensormanager sensor 8 (3) (3) (3) (3) () available only in three-phase UPSs (2) available only in CS4, CS4 SK (3) not available in CS4B, CS4B SK 9

3.3. Dhea, Whad 800/2500, Megaline Address Type Function Name Length Notes 97 U 3 / 4 Output Voltage [V] 00 U 3 / 4 Output Power [%] 03 U 3 / 4 Battery Charge Level [%] 04 S 3 / 4 Input Voltage [V] 07 S 3 / 4 Temperature [C ] 08 S 3 / 4 Autonomy Time [minutes] 09 U 3 / 4 UPS Status (ASCII HEX) Please check Status Bytes table below 0 S 3 / 4 Battery Voltage [V] 4 U 3 / 4 Powerfail Counter 6 U 3 / 4 7 U 3 / 4 9 U 3 / 4 22 U 3 / 4 23 U 3 / 4 27 U 3 / 4 32 U 3 / 4 34 U 3 / 4 38 U 3 / 4 39 U 3 / 4 40 U 3 / 4 4 U 3 / 4 42 U 3 / 4 43 U 3 / 4 44 U 3 / 4 45 U 3 / 4 46 U 3 / 4 47 U 3 / 4 48 U 3 / 4 Alarm: On Battery = active; 0 = not active Alarm: Battery Low = active; 0 = not active Alarm: Over Temperature = active; 0 = not active Alarm: Output Overload = active; 0 = not active Alarm: On Bypass = active; 0 = not active Alarm: Charger failed = active; 0 = not active Alarm: General Fault = active; 0 = not active Alarm: UPS communication lost = active; 0 = not active Alarm: test in progress = active; 0 = not active AUX Port = active (high); 0 = not active (low) AUX Port 2 = active (high); 0 = not active (low) AUX Port 3 = active (high); 0 = not active (low) AUX Port 4 = active (high); 0 = not active (low) Sensormanager / SM_T_COM sensor Sensormanager / SM_T_COM sensor 2 Sensormanager sensor 3 Sensormanager sensor 4 Sensormanager sensor 5 Sensormanager sensor 6 () () () () (2) (2) (2) (2) (2) (2) 0

49 U 3 / 4 50 U 3 / 4 Sensormanager sensor 7 Sensormanager sensor 8 (2) (2) () not available in CS4B, CS4B SK (2) available only in CS4, CS4 SK

3.4. Whad 3000/6000, Trimod, Trimod HE, Archimod, Archimod HE Address Type Function Description Length Notes 99 U 6 (0H) Time syncronization signal When this signal is set, the CS4 sets the internal clock to 0:00 of the same day. Write only: commands 3 and 4 are not allowed. 00 U 3 / 4 Output Power phase L [%] 0 U 3 / 4 Output Power phase L2 [%] () 02 U 3 / 4 Output Power phase L3 [%] () 03 U 3 / 4 Battery Charge Level [%] 04 S 3 / 4 Input Voltage phase L [V] 05 S 3 / 4 Input Voltage phase L2 [V] () 06 S 3 / 4 Input Voltage phase L3 [V] () 07 S 3 / 4 UPS Temperature [C ] 08 S 3 / 4 Autonomy Time [minutes] 09 U 3 / 4 UPS Status (ASCII HEX) Please check Status Bytes table below 0 S 3 / 4 Battery Voltage [V] U 3 / 4 Input Frequency phase L [Hz] 2 U 3 / 4 Input Frequency phase L2 [Hz] () 3 U 3 / 4 Input Frequency phase L3 [Hz] () 4 U 3 / 4 Powerfail Counter 5 U 3 / 4 6 U 3 / 4 7 U 3 / 4 9 U 3 / 4 20 U 3 / 4 2 U 3 / 4 22 U 3 / 4 23 U 3 / 4 24 U 3 / 4 25 U 3 / 4 26 U 3 / 4 27 U 3 / 4 28 U 3 / 4 29 U 3 / 4 Alarm Battery Bad = active; 0 = not active) Alarm: On Battery = active; 0 = not active Alarm: Battery Low = active; 0 = not active Alarm: Over temperature = active; 0 = not active Alarm: Input Bad = active; 0 = not active Alarm: Output Bad = active; 0 = not active Alarm: Output Overload = active; 0 = not active Alarm: On Bypass = active; 0 = not active Alarm: Bypass Bad = active; 0 = not active Alarm: Output Off as requested = active; 0 = not active Alarm: UPS Off as requested = active; 0 = not active Alarm: Charger Failed = active; 0 = not active Alarm: UPS Output Off = active; 0 = not active Alarm: UPS System Off = active; 0 = not active (2) 2

32 U 3 / 4 33 U 3 / 4 34 U 3 / 4 36 U 3 / 4 37 U 3 / 4 38 U 3 / 4 39 U 3 / 4 Alarm: General fault = active; 0 = not active Alarm: Diagnose test failed = active; 0 = not active Alarm: UPS Communication lost = active; 0 = not active Alarm: Shutdown pending = active; 0 = not active Alarm: shutdown imminent = active; 0 = not active Alarm: Test in progress = active; 0 = not active Alarm: Manual Bypass Switch Closed = active; 0 = not active 40 U 3 / 4 Output Voltage phase L [V] 4 U 3 / 4 Output Voltage phase L2 [V] () 42 U 3 / 4 Output Voltage phase L3 [V] () 43 U 3 / 4 Output Current phase L [A*0] 44 U 3 / 4 Output Current phase L2 [A*0] () 45 U 3 / 4 Output Current phase L3 [A*0] () 52 U 3 / 4 53 U 3 / 4 54 U 3 / 4 55 U 3 / 4 56 U 3 / 4 57 U 3 / 4 58 U 3 / 4 59 U 3 / 4 Sensormanager / SM_T_COM sensor Sensormanager / SM_T_COM sensor 2 Sensormanager sensor 3 Sensormanager sensor 4 Sensormanager sensor 5 Sensormanager sensor 6 Sensormanager sensor 7 Sensormanager sensor 8 60 U 3 / 4 Output Power phase L [kw] (3) (3) (3) (3) (3) (3) (3) (3) 6 U 3 / 4 Output Power phase L2 [kw] () 62 U 3 / 4 Output Power phase L3 [kw] () 63 U 3 / 4 64 U 3 / 4 65 U 3 / 4 66 U 3 / 4 () available only in three-phase UPS (2) available only in Trimod HE, Archimod HE (3) available only in CS4, CS4 SK (4) not available in CS4B, CS4B SK AUX Port = active (high); 0 = not active (low) AUX Port 2 = active (high); 0 = not active (low) AUX Port 3 = active (high); 0 = not active (low) AUX Port 4 = active (high); 0 = not active (low) (4) (4) (4) (4) 3

3.5. Keor T Address Type Function Name Length Notes 00 U 3 / 4 Output Power phase L [%] 0 U 3 / 4 Output Power phase L2 [%] 02 U 3 / 4 Output Power phase L3 [%] 03 U 3 / 4 Battery Charge Level [%] 04 S 3 / 4 Input Voltage phase L [V] 05 S 3 / 4 Input Voltage phase L2 [V] 06 S 3 / 4 Input Voltage phase L3 [V] 07 S 3 / 4 Temperature [C ] 08 S 3 / 4 Autonomy Time [minutes] 09 U 3 / 4 UPS Status (ASCII HEX) Please check Status Bytes table below 0 S 3 / 4 Battery Voltage [V] U 3 / 4 Input Frequency phase L [Hz] 2 U 3 / 4 Input Frequency phase L2 [Hz] 3 U 3 / 4 Input Frequency phase L3 [Hz] 4 U 3 / 4 Powerfail Counter 5 U 3 / 4 6 U 3 / 4 7 U 3 / 4 8 U 3 / 4 9 U 3 / 4 20 U 3 / 4 2 U 3 / 4 22 U 3 / 4 23 U 3 / 4 24 U 3 / 4 28 U 3 / 4 3 U 3 / 4 32 U 3 / 4 33 U 3 / 4 34 U 3 / 4 38 U 3 / 4 Alarm Battery Bad = active; 0 = not active) Alarm: On Battery = active; 0 = not active Alarm: Battery Low = active; 0 = not active Alarm: Battery Depleted = active; 0 = not active Alarm: Over temperature = active; 0 = not active Alarm: Input Bad = active; 0 = not active Alarm: Output Bad = active; 0 = not active Alarm: Output Overload = active; 0 = not active Alarm: On Bypass = active; 0 = not active Alarm: Bypass Bad = active; 0 = not active Alarm: UPS Output Off = active; 0 = not active Alarm: Fuse failure = active; 0 = not active Alarm: General fault = active; 0 = not active Alarm: Diagnose test failed = active; 0 = not active Alarm: Communication lost = active; 0 = not active Alarm: Test in progress = active; 0 = not active 4

39 U 3 / 4 40 U 3 / 4 4 U 3 / 4 42 U 3 / 4 43 U 3 / 4 44 U 3 / 4 45 U 3 / 4 46 U 3 / 4 47 U 3 / 4 48 U 3 / 4 49 U 3 / 4 50 U 3 / 4 AUX Port = active (high); 0 = not active (low) AUX Port 2 = active (high); 0 = not active (low) AUX Port 3 = active (high); 0 = not active (low) AUX Port 4 = active (high); 0 = not active (low) Sensormanager / SM_T_COM sensor Sensormanager / SM_T_COM sensor 2 Sensormanager sensor 3 Sensormanager sensor 4 Sensormanager sensor 5 Sensormanager sensor 6 Sensormanager sensor 7 Sensormanager sensor 8 5 U 3 / 4 Output Voltage phase L [V] 52 U 3 / 4 Output Voltage phase L2 [V] 53 U 3 / 4 Output Voltage phase L3 [V] 54 U 3 / 4 Output Current phase L [A * 0] 55 U 3 / 4 Output Current phase L2 [A * 0] 56 U 3 / 4 Output Current phase L3 [A * 0] () () () () (2) (2) (2) (2) (2) (2) (2) (2) () not available in CS4B, CS4B SK (2) available only in CS4, CS4 SK 5

3.6. Keor HP Address Type Function Name Length Notes 97 U 3 / 4 Output Voltage phase L [V] 98 U 3 / 4 Output Voltage phase L2 [V] 99 U 3 / 4 Output Voltage phase L2 [V] 00 U 3 / 4 Output Power phase L [%] 0 U 3 / 4 Output Power phase L2 [%] 02 U 3 / 4 Output Power phase L3 [%] 03 U 3 / 4 Battery Charge Level [%] 04 S 3 / 4 Input Voltage phase L [V] 05 S 3 / 4 Input Voltage phase L2 [V] 06 S 3 / 4 Input Voltage phase L3 [V] 07 S 3 / 4 Temperature [C ] 08 S 3 / 4 Autonomy Time [minutes] 09 U 3 / 4 UPS Status (ASCII HEX) Please check Status Bytes table below 0 S 3 / 4 Battery Voltage [V] U 3 / 4 Input Frequency phase L [Hz] 2 U 3 / 4 Input Frequency phase L2 [Hz] 3 U 3 / 4 Input Frequency phase L3 [Hz] 4 U 3 / 4 Powerfail Counter 5 U 3 / 4 6 U 3 / 4 7 U 3 / 4 8 U 3 / 4 9 U 3 / 4 20 U 3 / 4 2 U 3 / 4 22 U 3 / 4 23 U 3 / 4 24 U 3 / 4 25 U 3 / 4 26 U 3 / 4 27 U 3 / 4 28 U 3 / 4 Alarm Battery Bad = active; 0 = not active) Alarm: On Battery = active; 0 = not active Alarm: Battery Low = active; 0 = not active Alarm: Battery Depleted = active; 0 = not active Alarm: Over temperature = active; 0 = not active Alarm: Input Bad = active; 0 = not active Alarm: Output Bad = active; 0 = not active Alarm: Output Overload = active; 0 = not active Alarm: On Bypass = active; 0 = not active Alarm: Bypass Bad = active; 0 = not active Alarm: Output Off as requested = active; 0 = not active Alarm: UPS Off as requested = active; 0 = not active Alarm: Charger Failed = active; 0 = not active Alarm: UPS Output Off = active; 0 = not active 6

29 U 3 / 4 30 U 3 / 4 3 U 3 / 4 32 U 3 / 4 33 U 3 / 4 34 U 3 / 4 35 U 3 / 4 36 U 3 / 4 37 U 3 / 4 38 U 3 / 4 39 U 3 / 4 40 U 3 / 4 4 U 3 / 4 42 U 3 / 4 43 U 3 / 4 44 U 3 / 4 45 U 3 / 4 46 U 3 / 4 47 U 3 / 4 48 U 3 / 4 49 U 3 / 4 50 U 3 / 4 Alarm: UPS System Off = active; 0 = not active Alarm: Fan Failure = active; 0 = not active Alarm: Fuse Failure = active; 0 = not active Alarm: General fault = active; 0 = not active Alarm: Diagnose test failed = active; 0 = not active Alarm: UPS communication lost = active; 0 = not active Alarm: Awaiting Power = active; 0 = not active Alarm: Shutdown pending = active; 0 = not active Alarm: Shutdown imminent = active; 0 = not active Alarm: Test in progress = active; 0 = not active AUX Port = active (high); 0 = not active (low) AUX Port 2 = active (high); 0 = not active (low) AUX Port 3 = active (high); 0 = not active (low) AUX Port 4 = active (high); 0 = not active (low) Sensormanager / SM_T_COM sensor Sensormanager / SM_T_COM sensor 2 Sensormanager sensor 3 Sensormanager sensor 4 Sensormanager sensor 5 Sensormanager sensor 6 Sensormanager sensor 7 Sensormanager sensor 8 () () () () (2) (2) (2) (2) (2) (2) (2) (2) () not available in CS4B, CS4B SK (2) available only in CS4, CS4 SK 7

3.7. Keor HPE Address Type Function Name Length Notes 00 U 3 / 4 Output Power phase L [%] 0 U 3 / 4 Output Power phase L2 [%] 02 U 3 / 4 Output Power phase L3 [%] 03 U 3 / 4 Battery Charge Level [%] 04 S 3 / 4 Input Voltage phase L [V] 05 S 3 / 4 Input Voltage phase L2 [V] 06 S 3 / 4 Input Voltage phase L3 [V] 07 S 3 / 4 Temperature [C ] 08 S 3 / 4 Autonomy Time [minutes] 09 U 3 / 4 UPS Status (ASCII HEX) Please check Status Bytes table below 0 S 3 / 4 Battery Voltage [V] U 3 / 4 Input Frequency phase L [Hz] 2 U 3 / 4 Input Frequency phase L2 [Hz] 3 U 3 / 4 Input Frequency phase L3 [Hz] 4 U 3 / 4 Powerfail Counter 5 U 3 / 4 6 U 3 / 4 7 U 3 / 4 8 U 3 / 4 9 U 3 / 4 20 U 3 / 4 2 U 3 / 4 22 U 3 / 4 23 U 3 / 4 24 U 3 / 4 25 U 3 / 4 26 U 3 / 4 27 U 3 / 4 28 U 3 / 4 29 U 3 / 4 30 U 3 / 4 Alarm Battery Bad = active; 0 = not active) Alarm: On Battery = active; 0 = not active Alarm: Battery Low = active; 0 = not active Alarm: Battery Depleted = active; 0 = not active Alarm: Over temperature = active; 0 = not active Alarm: Input Bad = active; 0 = not active Alarm: Output Bad = active; 0 = not active Alarm: Output Overload = active; 0 = not active Alarm: On Bypass = active; 0 = not active Alarm: Bypass Bad = active; 0 = not active Alarm: Output Off as requested = active; 0 = not active Alarm: UPS Off as requested = active; 0 = not active Alarm: Charger Failed = active; 0 = not active Alarm: UPS Output Off = active; 0 = not active Alarm: UPS System Off = active; 0 = not active Alarm: Fan Failure = active; 0 = not active 8

3 U 3 / 4 32 U 3 / 4 33 U 3 / 4 34 U 3 / 4 35 U 3 / 4 36 U 3 / 4 37 U 3 / 4 38 U 3 / 4 39 U 3 / 4 40 U 3 / 4 4 U 3 / 4 42 U 3 / 4 43 U 3 / 4 44 U 3 / 4 45 U 3 / 4 46 U 3 / 4 47 U 3 / 4 48 U 3 / 4 49 U 3 / 4 50 U 3 / 4 Alarm: Fuse Failure = active; 0 = not active Alarm: General fault = active; 0 = not active Alarm: Diagnose test failed = active; 0 = not active Alarm: UPS communication lost = active; 0 = not active Alarm: Awaiting Power = active; 0 = not active Alarm: Shutdown pending = active; 0 = not active Alarm: Shutdown imminent = active; 0 = not active Alarm: Test in progress = active; 0 = not active AUX Port = active (high); 0 = not active (low) AUX Port 2 = active (high); 0 = not active (low) AUX Port 3 = active (high); 0 = not active (low) AUX Port 4 = active (high); 0 = not active (low) Sensormanager / SM_T_COM sensor Sensormanager / SM_T_COM sensor 2 Sensormanager sensor 3 Sensormanager sensor 4 Sensormanager sensor 5 Sensormanager sensor 6 Sensormanager sensor 7 Sensormanager sensor 8 () () () () (2) (2) (2) (2) (2) (2) (2) (2) () not available in CS4B, CS4B SK (2) available only in CS4, CS4 SK 9

3.8. Status Bytes table ( see registry 09 of all previous tables ) UPS Status Hex Value Dec Value Description UPS_SB_BYPASS_MODE 0x000 UPS is in bypass UPS_SB_SHUTDOWN 0x0002 2 Shutdown UPS UPS_SB_OUTPUT_ACT 0x0004 4 Inverter on = UPS OK UPS_SB_BACKUP_MODE 0x0008 8 UPS is working in battery mode UPS_SB_BATTERY_LOW 0x000 6 Battery Low signal UPS_SB_OVER_TEMP 0x0020 32 Over temperature UPS_SB_TEST_ACT 0x0040 64 Test in progress UPS_SB_INPUT_HIGH 0x0080 28 Input voltage too high UPS_SB_OUTPUT_HIGH 0x000 256 Overload UPS_SB_INVERTER_FAILURE 0x0200 52 Inverter error UPS_SB_BATTERY_BAD 0x0400 024 Battery error UPS_SB_ECO_MODE 0x0800 2048 ECO mode UPS_SB_COMM_LOST 0x4000 6384 For snmp Examples (decimal): STATUS= 4 means UPS_SB_OUTPUT_ACT (4) + no other alarms = UPS OK STATUS= 5 means UPS_SB_OUTPUT_ACT (4) + UPS_SB_BYPASS_MODE () are active! = UPS on Bypass! STATUS= 2 means UPS_SB_OUTPUT_ACT (4) + UPS_SB_BACKUP_MODE (8) are active! = UPS Powerfail! STATUS= 22 means UPS_SB_OUTPUT_ACT (4) + UPS_SB_BACKUP_MODE (8) + UPS_SB_BATTERY_LOW (0) are active! = UPS Powerfail and Battery low! STATUS= 68 means UPS_SB_OUTPUT_ACT (4) + UPS_SB_TEST_ACT (64) are active! = UPS battery test is running 20

4. Appendix 4.. RS485 Connector for CS4M and CS4M SK Phoenix 952267 connector: Pin : -> GND Pin 2: -> RS485 (+) Pin 3: -> RS485 (-) 4.2. Bus termination It is necessary to set the last bus device on the RS485 bus jumper for the bus termination (20 ohm). Please remove the 4 screws at the buttom of the adapter in order to open the box. You will find the jumper near the Modbus connector (see below). Default is OFF (CS4 is NOT last device). To terminate the RS485 bus at your CS4, please close the Jumper. 2