CONTENTS Project name WMHpc Revision 1.3

Transcription

1 , modbus protocol, Modbus protocol (rev 1).doc 1/20 CONTENTS 1 MODBUS protocol and parameters Implementation Commands... 3 Parameters MODBUS virtual memory map Bit addressing area (#01: "coil" parameters) Bit addressing area (#02: "input" parameters) Register addressing area (#03, #06, #16: "holding register" parameters) Register addressing area (#04: "input register" parameters)... 20

2 , modbus protocol, Modbus protocol (rev 1).doc 2/20 1 MODBUS protocol and parameters 1.1 Implementation A selection from the available parameters are mapped into virtual memory areas for Modbus access. There are two such areas available, and each parameter is mapped into the area that best corresponds to the parameter type. One area is dedicated for bit addressing ("coil/input"-parameters), and the other area for register addressing ("holding register/input register"-parameters). Each area starts at an address that is dependent on the command used for data access. that the bit- and register addresses listed in this document should be decremented by a command specific offset when converting to the address actually transferred in the Modbus communication protocol. (See information at each command for further information). This is done in accordance with the Modbus standard of implementation and is usually handled automatically by the client driver. Some parameters are left out due to limitations in the protocol, or because they are considered relevant only for the web interface. (E.g. no voluminous text parameters are included). All holding registers are implemented with 16 bit address resolution. "Register" (as in "number of registers") is handled and counted as words (2 bytes). The smallest element size of a parameter in the register addressing area is one word (2 bytes). Reading from an unmapped area gives 0-values (no exception code is generated). Writing to an unmapped area is ignored (no exception code is generated). Reading from a non-readable parameter gives 0-values (no exception code is generated). Writing to a non-writeable parameter is ignored (no exception code is generated). If a parameter is readable, but the read fails for some other reason (internal error?), the exception code illegal data value is generated (this should never happen!). If a parameter is writeable, but the write fails for some other reason (e.g. out of range), exception code illegal data value is generated. Reading or writing outside the 64k Modbus address area gives exception code "illegal data address". For register addressing, specifying "number of registers" < 1 or "number of registers" >122 gives exception code "illegal data address". For bit addressing, specifying "number of bits" < 1 or "number of bits" > 1960 (i.e. 245 bytes) gives exception code "illegal data address". It is not allowed to begin or end reading or writing in the middle of a parameter element that consist of multiple registers (long, fix, etc.). Exception code "illegal data address" is then given, but it is allowed to begin or end reading or writing between parameter elements within a parameter. Numeric parameter elements (int, long etc.) are sent with MSB first (big endian). The Modbus command itself (start address, number of registers etc.) is also sent with MSB first (big endian), except for the CRC-checksum, which is sent with LSB first (little endian), according to the Modbus standard.

3 , modbus protocol, Modbus protocol (rev 1).doc 3/ Commands Only a subset of the general Modbus commands and exception codes are supported: Commands dedicated for bit addressing area ("input/coil"-parameters) #01 = "Read coils". #02 = "Read discrete inputs" 1. Commands dedicated for register addressing area ("holding register"-parameters) #03 = "Read holding registers". #04 = "Read input registers" 2. #06 = "Write single register". #16 = "Write multiple registers". The following exception codes can be generated 01 = "Illegal function". 02 = "Illegal data address". 03 = "Illegal data value". 06 = "Slave device busy" (configurable usage). Description of command table (see next page) Q = Question. A = Answer. Exc = Exception code. id = communication address (slave). addr = Start address (big endian). regs = Number of registers (big endian). bits = Number of bits (big endian). bytes = Byte count. value = Data value (big endian). mask = Data bitmask. crc = Cyclic redundancy checksum (little endian). <:1> = Item size is 1 byte. <:2> = Item size is 2 byte. <:N> = Item size in number of bytes, according to the content of bytes. 1 Identical functionality as command #01 but with a different memory mapping. 2 Identical functionality as command #03 but with a different memory mapping.

4 , modbus protocol, Modbus protocol (rev 1).doc 4/20 #01: "Read coils" N = size according to bytes = (bits + 7) div 8 Q: <id:1>,<0x01>,<addr:2>,<bits:2>,<crc:2> A: <id:1>,<0x01>,<bytes:1>,<mask:n>,<crc:2> Exc: <id:1>,<0x81>,<exc:1>,<crc:2> #02: "Read discrete inputs" N = size according to bytes = (bits + 7) div 8 Q: <id:1>,<0x02>,<addr:2>,<bits:2>,<crc:2> A: <id:1>,<0x02>,<bytes:1>,<mask:n>,<crc:2> Exc: <id:1>,<0x82>,<exc:1>,<crc:2> #03: "Read holding registers" N = size according to bytes = regs * 2 Q: <id:1>,<0x03>,<addr:2>,<regs:2>,<crc:2> A: <id:1>,<0x03>,<bytes:1>,<value:n>,<crc:2> Exc: <id:1>,<0x83>,<exc:1>,<crc:2> #04: "Read input registers" N = size according to bytes = regs * 2 Q: <id:1>,<0x04>,<addr:2>,<regs:2>,<crc:2> A: <id:1>,<0x04>,<bytes:1>,<value:n>,<crc:2> Exc: <id:1>,<0x84>,<exc:1>,<crc:2> #06: "Write single register" Q: <id:1>,<0x06>,<addr:2>,<value:2>,<crc:2> A: <id:1>,<0x06>,<addr:2>,<value:2>,<crc:2> Exc: <id:1>,<0x86>,<exc:1>,<crc:2> #16: "Write multiple registers" N = size according to bytes Q: <id:1>,<0x10>,<addr:2>,<regs:2>,<bytes:1>,<value:n>,<crc:2> A: <id:1>,<0x10>,<addr:2>,<regs:2>,<crc:2> Exc: <id:1>,<0x90>,<exc:1>,<crc:2>

5 , modbus protocol, Modbus protocol (rev 1).doc 5/20 Parameters A parameter element can have one of the following standard data types: bool : 1 bit data, boolean (range = 0.. 1). uchar : 1 byte data, unsigned character (range = ). schar : 1 byte data, signed character (range = ). uint : 2 byte data, unsigned integer (range = ). sint : 2 byte data, signed integer (range = ). ulong : 4 byte data, unsigned long integer (range = ). slong : 4 byte data, signed long integer (range = ). fixn : 4 byte data, signed long integer * 10 N (real, with a fixed number of decimals = N). These parameter elements can then be arranged into 0, 1, 2 or 3 dimensions, hence called "single", "array", "matrix" or "cube". 0-dimensional parameters (single) consist of only one single data element. 1-dimensional parameters (array) consist of an array of data elements. 2-dimensional parameters (matrix) consist of an array of arrays of data elements.

6 , modbus protocol, Modbus protocol (rev 1).doc 6/20 2 MODBUS virtual memory map 2.1 Bit addressing area (#01: "coil" parameters) Accessible via Modbus command #01. 8 bits of data are packed into each byte in the answer, starting from initial bit address in the request, and any additional bits to fill up the last answer byte are set to zero. (See chapter 1.2). : Bit addr, Size and Offs are given in bit resolution for this table. Bit addr should be decremented by 1 when converting to protocol level address. Bit addr (Size) +Offs Bit addressed parameters RW Type [Value] Unit (70) ALARMSTATUS Status of active alarms (as bits instead of registers) array R bool [0..1] 0 = Not active 1 = Active +0 Alarm 01: High return temp All +1 Alarm 02: Temp diff brine All +2 Alarm 03: Compressor current All +3 Alarm 04: Brine pump current All +4 Alarm 05: High pressure All +5 Alarm 06: Low pressure All +6 Alarm 07: Low brine flow Option +7 Alarm 08: Brine pressure Option +8 Alarm 09: Compressor heat All +9 Alarm 10: Hot gas temperature Not used +10 Alarm 11: Control pressostat All +11 Alarm 12: Sensor supply temp All +12 Alarm 13: Sensor return temp All +13 Alarm 14: Broken outdoor temp Master +14 Alarm 15: Sensor hot water Master +15 Alarm 16: Sensor hot gas temp Option +16 Alarm 17: Sensor brine in All +17 Alarm 18: Sensor brine out All +18 Alarm 19: Sensor prim. supply Master +19 Alarm 20: HPC RM Communication All +20 Alarm 21: 24 VAC Power fail All +21 Alarm 22: WCS sensor Error Option +22 Alarm 23: WCS Controller error Option +23 Alarm 24: Sensor Error TWC Option +24 Alarm 25: TWC out temp Option +25 Alarm 26: TWC Return Temp Option +26 Alarm 27: Ctrl err cooling c Option +27 Alarm 28: Sensor cooling tank Option +28 Alarm 29: Sensor surplus cool Option +29 Alarm 30: Sensor cooling t out Option +30 Alarm 31: Sensor cooling circ. Option +31 Alarm 32: Reserved Not used

7 , modbus protocol, Modbus protocol (rev 1).doc 7/ Alarm 33: Reserved Not used +33 Alarm 34: Shunt 1 sensor Option +34 Alarm 35: Shunt 1 ctrl err Option +35 Alarm 36: Shunt 2 sensor Option +36 Alarm 37: Shunt 2 ctrl err Option +37 Alarm 38: Shunt 3 sensor Option +38 Alarm 39: Shunt 3 ctrl err Option +39 Alarm 40: Shunt 4 sensor Option +40 Alarm 41: Shunt 4 ctrl err Option +41 Alarm 42: Shunt 5 sensor Option +42 Alarm 43: Shunt 5 ctrl err Option +43 Alarm 44: Shunt 6 sensor Option +44 Alarm 45: Shunt 6 ctrl err Option +45 Alarm 46: Shunt 7 sensor Option +46 Alarm 47: Shunt 7 ctrl err Option +47 Alarm 48: Shunt 8 sensor Option +48 Alarm 49: Shunt 8 ctrl err Option +49 Alarm 50: Communication Master Slave +50 Alarm 51: High brine in temp Option +51 Alarm 52: Low brine in temp Option +52 Alarm 53: Low brine out temp Option +53 Alarm 54: Slave pump missing Master +54 Alarm 55: Reserved Not used +55 Alarm 56: Reserved Not used +56 Alarm 57: Reserved Not used +57 Alarm 58: Reserved Not used +58 Alarm 59: Reserved Not used +59 Alarm 60: Reserved Not used +60 Alarm 61: Reserved Not used +61 Alarm 62: Reserved Not used +62 Alarm 63: Reserved Not used +63 Alarm 64: Reserved Not used +64 Alarm 65: Reserved Not used +65 Alarm 66: Reserved Not used +66 Alarm 67: Reserved Not used +67 Alarm 68: Reserved Not used +68 Alarm 69: Reserved Not used +69 Alarm 70: Reserved Not used

8 , modbus protocol, Modbus protocol (rev 1).doc 8/ Bit addressing area (#02: "input" parameters) Accessible via Modbus command #02. Identical to command #01, except that the memory map starts at instead of 0. (See chapter 2.1). : Bit addr should be decremented by when converting to protocol level address. (Protocol level addresses are identical between command #01 and #02).

9 , modbus protocol, Modbus protocol (rev 1).doc 9/ Register addressing area (#03, #06, #16: "holding register" parameters) Accessible via Modbus commands #03, #06, #16. : Word addr, Size and Offs are given in word resolution for these tables. Word addr should be decremented by when converting to protocol level address. Word addr (Size) +Offs Word addressed parameters RW Type [Value] Unit (1) MODBUSREVISION Modbus protocol revision (for future usage) single RW uint (8) VERNR version numbers +0 Bootloader +2 Firmware +4 Webpages +6 Appscript array R fix (70) ALARMSTATUS Status of active alarms (as registers instead of bits) array R uint [0..1] +0 0 = Not active 1 = Active See ALARMSTATUS (chapter 2.1) (70) ALARMACK Acknowledge/Reset one active alarm Signature XXX will be used in the event log array W uint [1] +0 1 = Acknowledge one active alarm See ALARMSTATUS (1) EVENTACK_ALL Acknowledge/Reset all active events 3 and alarms Signature XXX will be used in the event log single W uint [1] 1 = Acknowledge all active events and alarms (400) CHNVALUE array R fix# Channel value +0 Channel 001: Supplytemperature Master fix1 C +2 Channel 002: Returntemperature All fix1 C +4 Channel 003: Outdoor temp fix1 C +6 Channel 004: Hot water start sensor Master fix1 C +8 Channel 005: Hot gas temp All fix1 C +10 Channel 006: Brine in temperature All fix1 C +12 Channel 007: Brine out temperature All fix1 C 3 Acknowledge of individual active events are currently not available via Modbus, neither is status of active events, but EVENTACK_ALL will acknowledge/reset all active events, together with all active alarms.

10 , modbus protocol, Modbus protocol (rev 1).doc 10/ Channel 008: Primary supply temp Master fix1 C +16 Channel 009: Room temperature Option fix1 C +18 Channel 010: Reserved Not used fix Channel 011: Reserved Not used fix Channel 012: Reserved Not used fix Channel 013: Reserved Not used fix Channel 014: Reserved Not used fix Channel 015: Reserved Not used fix Channel 016: Reserved fix0 +32 Channel 017: High comressor current fix0 +34 Channel 018: High pump current fix0 +36 Channel 019: Control pressostat fix0 +38 Channel 020: High pressure pressostat fix0 +40 Channel 021: Low pressure pressostat fix0 +42 Channel 022: Flowsensor fix0 +44 Channel 023: Compressor over heat fix0 +46 Channel 024: External brine start fix0 +48 Channel 025: Extra heater Master fix1 % +50 Channel 026: Analog out 2 fix1 V +52 Channel 027: Mean fix1 C +54 Channel 028: Max fix1 C +56 Channel 029: Min fix1 C +58 Channel 030: Mean fix1 C +60 Channel 031: Max fix1 C +62 Channel 032: Min fix1 C +64 Channel 033: Start/Stop compressor All fix0 +66 Channel 034: Start/Stop brinepump All fix0 +68 Channel 035: Start/Stop rad.pump All fix0 +70 Channel 036: Hot water switchover valve All fix0 +72 Channel 037: Block. extra heater Master fix0 +74 Channel 038: Sum alarm All fix0 +76 Channel 039: System pump Master fix0 +78 Channel 040: Digital out 8 fix0 +80 Channel 041: Led master fix0 +82 Channel 042: Led AO1 fix0 +84 Channel 043: Mean fix1 C +86 Channel 044: Max fix1 C +88 Channel 045: T1 fix1 ohm +90 Channel 046: T2 fix1 ohm +92 Channel 047: T3 fix1 ohm +94 Channel 048: T4 fix1 ohm +96 Channel 049: T5 fix1 ohm +98 Channel 050: T6 fix1 ohm +100 Channel 051: T7 fix1 ohm +102 Channel 052: T8 fix1 ohm +104 Channel 053: RM Reset fail fix Channel 054: Controller function fix Channel 055: RM Comm Fail fix Channel 056: RM Power fail fix Channel 057: RM Comm Start fix Channel 058: RM First Connect fix Channel 059: Number of HP fix0

11 , modbus protocol, Modbus protocol (rev 1).doc 11/ Channel 060: No of Heating HPs fix Channel 061: No of hot Water HPs fix Channel 062: TW Max fix Channel 063: Control pres. active fix Channel 064: Faulty slave pumps fix Channel 065: Room compensation fix1 K +130 Channel 066: Heat stop status fix Channel 067: Heat stop blocking timer fix0 sec +134 Channel 068: Heat stop timer fix0 sec +136 Channel 069: Temp diff brine trig fix Channel 070: Auto. brinepump fix Channel 071: Controller error fix1 C +142 Channel 072: System setpoint Master fix1 C +144 Channel 073: Slavepump fix Channel 074: Mean fix1 C +148 Channel 075: Max fix1 C +150 Channel 076: Min fix1 C +152 Channel 077: Mean fix1 C +154 Channel 078: Max fix1 C +156 Channel 079: Min fix1 C +158 Channel 080: Integral value Master fix0 C min +160 Channel 081: A-Alarms fix Channel 082: B-Alarms fix Channel 083: Maste comm error fix Channel 084: Mean fix1 C +168 Channel 085: Max fix1 C +170 Channel 086: Min fix1 C +172 Channel 087: Mean fix1 C +174 Channel 088: Max fix1 C +176 Channel 089: Min fix1 C +178 Channel 090: Rest time block fix1 min +180 Channel 091: Start intervall time block fix1 min +182 Channel 092: Outdoor temp blocking extra heater fix Channel 093: HP limit fix Channel 094: Low brine in trig fix Channel 095: High brine in trig fix Channel 096: Low brine out trig fix Channel 097: Mean fix1 C +194 Channel 098: Max fix1 C +196 Channel 099: Min fix1 C +198 Channel 100: Shunt 1 status Option fix Channel 101: Shunt 1 temperature Option fix1 C +202 Channel 102: Shunt 1 controller error Option fix1 K +204 Channel 103: Shunt 1 valve Option fix0 % +206 Channel 104: Shunt 2 status Option fix Channel 105: Shunt 2 temperature Option fix1 C +210 Channel 106: Shunt 2 controller error Option fix1 K +212 Channel 107: Shunt 2 valve Option fix0 % +214 Channel 108: Shunt 3 status Option fix Channel 109: Shunt 3 temperature Option fix1 C +218 Channel 110: Shunt 3 controller error Option fix1 K +220 Channel 111: Shunt 3 valve Option fix0 %

12 , modbus protocol, Modbus protocol (rev 1).doc 12/ Channel 112: Shunt 4 status Option fix Channel 113: Shunt 4 temperature Option fix1 C +226 Channel 114: Shunt 4 controller error Option fix1 K +228 Channel 115: Shunt 4 valve Option fix0 % +230 Channel 116: Shunt 5 status Option fix Channel 117: Shunt 5 temperature Option fix1 C +234 Channel 118: Shunt 5 controller error Option fix1 K +236 Channel 119: Shunt 5 valve Option fix0 % +238 Channel 120: Shunt 6 status Option fix Channel 121: Shunt 6 temperature Option fix1 C +242 Channel 122: Shunt 6 controller error Option fix1 K +244 Channel 123: Shunt 6 valve Option fix0 % +246 Channel 124: Shunt 7 status Option fix Channel 125: Shunt 7 temperature Option fix1 C +250 Channel 126: Shunt 7 controller error Option fix1 K +252 Channel 127: Shunt 7 valve Option fix0 % +254 Channel 128: Shunt 8 status Option fix Channel 129: Shunt 8 temperature Option fix1 C +258 Channel 130: Shunt 8 controller error Option fix1 K +260 Channel 131: Shunt 8 valve Option fix0 % +262 Channel 132: WCS status Option fix Channel 133: WCS Temperature Option fix1 C +266 Channel 134: WCS Ctrl Error Option fix1 K +268 Channel 135: WCS ctrl signal Option fix0 % +270 Channel 136: Reserved Not used fix Channel 137: TWC status Option fix Channel 138: HW out temp Option fix1 C +276 Channel 139: HW return temp Option fix1 C +278 Channel 140: Reserved Not used fix Channel 141: Reserved Not used fix Channel 142: Reserved Not used fix Channel 143: Reserved Not used fix Channel 144: Reserved Not used fix Channel 145: Reserved Not used fix Channel 146: Timer blocking fix Channel 147: Operational state fix Channel 148: Hot water heater fix Channel 149: CM status fix Channel 150: Cooling tank temp Option fix0 C +300 Channel 151: Temp surplus cooler Option fix0 C +302 Channel 152: Temp cool. tank out Option fix0 C +304 Channel 153: Temp cooling circ. Option fix0 C +306 Channel 154: Shunt valve Option fix0 % +308 Channel 155: Cooling fans Option fix0 % +310 Channel 156: Passive cool. valve Option fix Channel 157: Active cool. valve Option fix Channel 158: Surplus circ. pump Option fix Channel 159: Surplus dump valve Option fix Channel 160: Cooling circ. pump Option fix Channel 161: Cooling integral Option fix Channel 162: Mean fix1 C +324 Channel 163: RH room temp Option fix0 C

13 , modbus protocol, Modbus protocol (rev 1).doc 13/ Channel 164: Relative humidity Option fix0 % +328 Channel 165: Dew point limit Option fix0 C +330 Channel 166: Blocking active c fix Channel 167: Blocking passive c fix Channel 168: Active cooling max pumps fix Channel 169: Controller deviation fix1 C +338 Channel 170: CM sensor 1 alarm trig fix Channel 171: CM sensor 2 alarm trig fix Channel 172: CM sensor 3 alarm trig fix Channel 173: CM sensor 4 alarm trig fix Channel 174: Mean fix1 C +348 Channel 175: Mean fix1 % +350 Channel 176: Mean fix1 C +352 Channel 177: Mean fix1 C min +354 Channel 178: Mean fix1 C +356 Channel 179: Max fix1 C +358 Channel 180: Min fix1 C +360 Channel 181: Mean fix1 C +362 Channel 182: Mean fix Channel 183: Mean fix1 C +366 Channel 184: Mean fix1 C +368 Channel 185: Max fix1 C +370 Channel 186: Min fix1 C +372 Channel 187: Mean fix1 % +374 Channel 188: Mean fix Channel 189: Mean fix Channel 190: Mean fix Channel 191: Mean fix Channel 192: Runtime compressor All fix2 h +384 Channel 193: Runtime hot water All fix2 h +386 Channel 194: Runtime extra heater DO Master fix2 h +388 Channel 195: Comp. runtime extra heater AO Master fix2 h +390 Channel 196: Mean fix1 C +392 Channel 197: Min fix1 C +394 Channel 198: TW Min fix Channel 199: VMin fix Channel 200: Reserved fix (300) DTAVALUE array RW fix# Data value ( Parameter ) +0 Data 001: Start HP1 fix0 +2 Data 002: Delta start HP fix0 +4 Data 003: Start extra heater fix0 +6 Data 004: Full extra heater fix0 +8 Data 005: Start limit fix0 +10 Data 006: Compressor delay fix0 +12 Data 007: Min stop time fix1 +14 Data 008: Min start interval fix0 +16 Data 009: Control press delay fix0 +18 Data 010: Outdoor blocking extraheater fix0 +20 Data 011: Hysteresis extraheater blocking fix0 +22 Data 012: Heat stop limit fix0

14 , modbus protocol, Modbus protocol (rev 1).doc 14/ Data 013: Heat stop hyst fix1 +26 Data 014: Activation time lim fix1 +28 Data 015: Deactiv. time lim fix1 +30 Data 016: Pump exercise interval fix1 +32 Data 017: Pump exercise time fix1 +34 Data 018: Integral max limit fix0 +36 Data 019: Integral dead zone fix0 +38 Data 020: Fast mode fix0 +40 Data 021: Room temp feedback fix0 +42 Data 022: Room set point fix1 +44 Data 023: Top Up function fix0 +46 Data 024: Top Up temp limit fix1 +48 Data 025: Delta limit next HP fix1 +50 Data 026: Extra heater type fix0 +52 Data 027: Heat up delay fix0 +54 Data 028: Burner off delay fix0 +56 Data 029: MaxRetTemp HW Delay fix0 +58 Data 030: Brine control fix0 +60 Data 031: Brine out min temp fix0 +62 Data 032: Brine in min temp fix0 +64 Data 033: Brine in max temp fix0 +66 Data 034: Time limit fix0 +68 Data 035: Pressure/Flow guard fix0 +70 Data 036: Operational mode fix0 +72 Data 037: Hot water production fix0 +74 Data 038: Hot water stop cond. fix0 +76 Data 039: Turn on limit fix0 +78 Data 040: Turn off limit fix0 +80 Data 041: Max system temp fix0 +82 Data 042: Min system temp fix0 +84 Data 043: Calendar offset fix0 +86 Data 044: Shunt 1 controller type fix0 +88 Data 045: Shunt 1 outdoor temp. stop fix0 +90 Data 046: Shunt 1 hysteresis fix1 +92 Data 047: Shunt 1 set point fix0 +94 Data 048: Shunt 1 P-area fix1 +96 Data 049: Shunt 1 I-time fix0 +98 Data 050: Shunt 1 pump exercise time fix Data 051: Shunt 2 controller type fix Data 052: Shunt 2 outdoor temp. stop fix Data 053: Shunt 2 hysteresis fix Data 054: Shunt 2 set point fix Data 055: Shunt 2 P-area fix Data 056: Shunt 2 I-time fix Data 057: Shunt 2 pump exercise time fix Data 058: Shunt 3 controller type fix Data 059: Shtun 3 outdoor temp. stop fix Data 060: Shunt 3 hysteresis fix Data 061: Shunt 3 set point fix Data 062: Shunt 3 P-Area fix Data 063: Shunt 3 I-time fix Data 064: Shunt 3 pump exercise time fix0

15 , modbus protocol, Modbus protocol (rev 1).doc 15/ Data 065: Shunt 4 controller type fix Data 066: Shunt 4 outdoor temp. stop fix Data 067: Shunt 4 hysteresis fix Data 068: Shunt 4 set point fix Data 069: Shunt 4 P-Area fix Data 070: Shunt 4 I-time fix Data 071: Shunt 4 pump exercise time fix Data 072: Shunt 5 controller type fix Data 073: Shunt 5 outdoor temp. stop fix Data 074: Shunt 5 hysteresis fix Data 075: Shunt 5 set point fix Data 076: Shunt 5 P-Area fix Data 077: Shunt 5 I-time fix Data 078: Shunt 5 Pump exercise time fix Data 079: Shunt 6 controller type fix Data 080: Shunt 6 outdoor temp. stop fix Data 081: Shunt 6 hysteresis fix Data 082: Shunt 6 set point fix Data 083: Shunt 6 P-Area fix Data 084: Shunt 6 I-time fix Data 085: Shunt 6 Pump exercise time fix Data 086: Shunt 7 controller type fix Data 087: Shunt 7 outdoor temp. stop fix Data 088: Shunt 7 hysteresis fix Data 089: Shunt 7 set point fix Data 090: Shunt 7 P-Area fix Data 091: Shunt 7 I-time fix Data 092: Shunt 7 pump exercise time fix Data 093: Shunt 8 controller type fix Data 094: Shunt 8 outdoor temp. stop fix Data 095: Shunt 8 hysteresis fix Data 096: Shunt 8 set point fix Data 097: Shunt 8 P-Area fix Data 098: Shunt 8 I-time fix Data 099: Shunt 8 pump exercise time fix Data 100: Lim force HP start fix Data 101: Lim force EH start fix Data 102: Curve offset fix Data 103: WCS Hot-Gas function fix Data 104: WCS setpoint fix Data 105: WCS P-area fix Data 106: WCS D-factor fix Data 107: WCS ctrl start delay fix Data 108: Start temp out fix Data 109: Stop temp out fix Data 110: Start temp return fix Data 111: Stop temp return fix Data 112: Start delay out fix Data 113: Start delay return fix Data 114: Tank set point fix Data 115: Circulation delay fix Data 116: Temp diff limit fix1

16 , modbus protocol, Modbus protocol (rev 1).doc 16/ Data 117: Start passive cool. fix Data 118: Start active cool. fix Data 119: Delta start HP fix Data 120: Passive block limit fix Data 121: Active block limit fix Data 122: Hysteresis passive fix Data 123: Hysteresis active fix Data 124: Config cooling fix Data 125: Cool circ. set point fix Data 126: P-area fix Data 127: I-time fix Data 128: Pump exerc. interval fix Data 129: Pump exerc. time fix Data 130: Dew point control fix Data 131: Stop limit fix Data 132: Cooler set point fix Data 133: P-area fix Data 134: I-time fix Data 135: Master mode fix Data 136: Min valve signal fix Data 137: Tempdiff brine fix Data 138: VVLUseInternalCtrl fix Data 139: VVLCtrlType fix Data 140: Legionella stop temp fix Data 141: CP while heating fix Data 142: Reserved Not used fix Data 143: Reserved Not used fix Data 144: Reserved Not used fix Data 145: Reserved Not used fix Data 146: Reserved Not used fix Data 147: [A_LANG] fix Data 148: Reserved Not used fix Data 149: Reserved Not used fix Data 150: [DEBUG] fix (140) ALARMTRIGLIMIT1 Alarm trig limit 1 array RW fix# +0 Alarm 01: High return temp All fix1 C +2 Alarm 02: Temp diff brine All fix0 +4 Alarm 03: Compressor current All fix0 +6 Alarm 04: Brine pump current All fix0 +8 Alarm 05: High pressure All fix0 +10 Alarm 06: Low pressure All fix0 +12 Alarm 07: Low brine flow Option fix0 +14 Alarm 08: Brine pressure Option fix0 +16 Alarm 09: Compressor heat All fix0 +18 Alarm 10: Hot gas temperature Not used fix0 +20 Alarm 11: Control pressostat All fix0 +22 Alarm 12: Sensor supply temp All fix1 ohm +24 Alarm 13: Sensor return temp All fix1 ohm +26 Alarm 14: Broken outdoor temp Master fix1 ohm +28 Alarm 15: Sensor hot water Master fix1 ohm

17 , modbus protocol, Modbus protocol (rev 1).doc 17/ Alarm 16: Sensor hot gas temp Option fix1 ohm +32 Alarm 17: Sensor brine in All fix1 ohm +34 Alarm 18: Sensor brine out All fix1 ohm +36 Alarm 19: Sensor prim. supply Master fix1 ohm +38 Alarm 20: HPC RM Communication All fix0 +40 Alarm 21: 24 VAC Power fail All fix0 +42 Alarm 22: WCS sensor Error Option fix0 +44 Alarm 23: WCS Controller error Option fix1 K +46 Alarm 24: Sensor Error TWC Option fix0 +48 Alarm 25: TWC out temp Option fix1 C +50 Alarm 26: TWC Return Temp Option fix1 C +52 Alarm 27: Ctrl err cooling c Option fix1 C +54 Alarm 28: Sensor cooling tank Option fix0 +56 Alarm 29: Sensor surplus cool Option fix0 +58 Alarm 30: Sensor cooling t out Option fix0 +60 Alarm 31: Sensor cooling circ. Option fix0 +62 Alarm 32: Reserved Not used fix0 +64 Alarm 33: Reserved Not used fix0 +66 Alarm 34: Shunt 1 sensor Option fix0 +68 Alarm 35: Shunt 1 ctrl err Option fix1 K +70 Alarm 36: Shunt 2 sensor Option fix0 +72 Alarm 37: Shunt 2 ctrl err Option fix1 K +74 Alarm 38: Shunt 3 sensor Option fix0 +76 Alarm 39: Shunt 3 ctrl err Option fix1 K +78 Alarm 40: Shunt 4 sensor Option fix0 +80 Alarm 41: Shunt 4 ctrl err Option fix1 K +82 Alarm 42: Shunt 5 sensor Option fix0 +84 Alarm 43: Shunt 5 ctrl err Option fix1 K +86 Alarm 44: Shunt 6 sensor Option fix0 +88 Alarm 45: Shunt 6 ctrl err Option fix1 K +90 Alarm 46: Shunt 7 sensor Option fix0 +92 Alarm 47: Shunt 7 ctrl err Option fix1 K +94 Alarm 48: Shunt 8 sensor Option fix0 +96 Alarm 49: Shunt 8 ctrl err Option fix1 K +98 Alarm 50: Communication Master Slave fix Alarm 51: High brine in temp Option fix Alarm 52: Low brine in temp Option fix Alarm 53: Low brine out temp Option fix Alarm 54: Slave pump missing Master fix Alarm 55: Reserved Not used fix Alarm 56: Reserved Not used fix Alarm 57: Reserved Not used fix Alarm 58: Reserved Not used fix Alarm 59: Reserved Not used fix Alarm 60: Reserved Not used fix Alarm 61: Reserved Not used fix Alarm 62: Reserved Not used fix Alarm 63: Reserved Not used fix Alarm 64: Reserved Not used fix Alarm 65: Reserved Not used fix Alarm 66: Reserved Not used fix Alarm 67: Reserved Not used fix0

18 , modbus protocol, Modbus protocol (rev 1).doc 18/ Alarm 68: Reserved Not used fix Alarm 69: Reserved Not used fix Alarm 70: Reserved Not used fix (140) ALARMTRIGLIMIT2 Alarm trig limit (70) ALARMTRIGFILTERON Alarm trig filter on (70) ALARMTRIGFILTEROFF Alarm trig filter off +0 array RW fix# See ALARMTRIGLIMIT1 array RW uint sec See ALARMSTATUS array RW uint sec See ALARMSTATUS (240) CURVEVALUEX Curve value, X-axis matrix +0 Curve 01 [10]: Control curve supply temp +0 ValueX ValueX ValueX ValueX ValueX ValueX ValueX ValueX ValueX ValueX Curve 02 [10]: Curve room temp feedback See Curve Curve 03 [10]: Shunt 1 curve setting See Curve Curve 04 [10]: Shunt 2 curve setting See Curve Curve 05 [10]: Shunt 3 curve setting See Curve Curve 06 [10]: Shunt 4 curve setting See Curve Curve 07 [10]: Shunt 5 curve setting See Curve Curve 08 [10]: Shunt 6 curve setting See Curve Curve 09 [10]: Shunt 7 curve setting See Curve Curve 10 [10]: Shunt 8 curve setting See Curve Curve 11 [10]: Reserved See Curve Curve 12 [10]: Reserved See Curve 01 RW fix (240) CURVEVALUEY Curve value, Y-axis +0 Curve 01 [10]: Control curve supply temp +0 ValueY ValueY ValueY ValueY ValueY ValueY ValueY ValueY 08 matrix RW fix5

19 , modbus protocol, Modbus protocol (rev 1).doc 19/ ValueY ValueY Curve 02 [10]: Curve room temp feedback See Curve Curve 03 [10]: Shunt 1 curve setting See Curve Curve 04 [10]: Shunt 2 curve setting See Curve Curve 05 [10]: Shunt 3 curve setting See Curve Curve 06 [10]: Shunt 4 curve setting See Curve Curve 07 [10]: Shunt 5 curve setting See Curve Curve 08 [10]: Shunt 6 curve setting See Curve Curve 09 [10]: Shunt 7 curve setting See Curve Curve 10 [10]: Shunt 8 curve setting See Curve Curve 11 [10]: Reserved See Curve Curve 12 [10]: Reserved See Curve 01

20 , modbus protocol, Modbus protocol (rev 1).doc 20/ Register addressing area (#04: "input register" parameters) Accessible via Modbus command #04. Identical to command #03, except that the memory map starts at instead of (See chapter 2.3). : Word addr should be decremented by when converting to protocol level address. (Protocol level addresses are identical between command #03 and #04).