Modbus Protocol Technical Manual: Entec

Release Date: Jan. 2010 / Manual Revision: 3.
20
MODBUS PROTOCOL
Technical Manual
ENTEC ENTEC
ELECTRIC & ELECTRONIC CO., LTD
Copyright © 2006 by ENTEC ELECTRIC & ELECTRONIC CO., LTD all right reserved. Forerunner Distribution & Automation
MODBUS PROTOCOL http://www.entecene.co.kr
Release Note:
[Sept. 2009] Ver3.12

1. Modify “B. MODBUS Memory Map”.
[Jan. 2010] Ver3.20

1. Modify “B. MODBUS Memory Map” .
ENHANCED TECHNOLOGY i
TABLE OF CONTENTS
A. MODBUS Protocol Technical Specification …………………..……………………………..1
1. Introduction ..………………...…………………………………………………………………1
2. Configuratio ..………..…………………………………………………………………………2
3. Read Binary Status ….…………………………………………………………………………3
4. Read Setting Values ……....……………………………………………………………………4
5. Read Metering Values / Event Data …...……………………………………………………….6

6. Exeute Operation …...………………………………………………………………………….7
7. Write Single Setting Values …..………………………………………………………………10
8. Write Multiple Setting Values …………….……………………………………………………11
9. Remaining Function ...…………………………………………………………………………12

10. Exception Response ……...……………………………………………………………………13
B. MODBUS Memory Map ………………………………………………..................................17
ENHANCED TECHNOLOGY ii
A. MODBUS Protocol Technical Specification
1. Introuction
This is MODBUS Protocol information. EVRC2A-N provides MODBUS and DNP3.0 Protocol as
well as it provides physical layer such as RS232, RS485, RS485 and two serial communication
mode(ASCII, RTU).
It is available to set EVRC2A-N MODBUS Protocol depending upon Communication speed and
Parity bit in different ports. The communication speeds are 1200, 2400, 9600, 19200 and Parity bits
are EVEN, ODD, NO Parity. Each data packet consists of one(1) start bit, eight(8) of data bit,
one(1) stop bit and one Parity bit for Asynchronous communication.
EVRC2A-N has nine(9) Function codes, 512 Registers to read and change settings, and 124 Coils.
ENHANCED TECHNOLOGY 1
2. Configuration
Following Data is Function Code and Register of EVRC2A-N.
Supported Function Code
Table A-1. EVRC2A-N MODBUS FUNCTION CODES
FUNCTION CODE
MODBUS DEFINITION EVRC2A-N DEFINITION
HEX DEC
0x01 1 Read Coil Status Read Binary Status
0x02 2 Read Input Status Read Binary Status
0x03 3 Read Holding Registers Read Setting values
Read Metering Values or Event Data,
0x04 4 Read Input Registers
Temporary Setting Value
0x05 5 Force Single Coil Execute Operation
0x06 6 Preset Single Register Write Single Setting value
0x08 8 Diagnostics Diagnostics
0x10 16 Preset Multiple Registers Write Multiple Setting Values
0x11 17 Report Slave ID Report Slave ID
Table A-2. Register allocation
Register
MODBUS DEFINITION EVRC2A-N DEFINITION
(Decimal)
0000 ~ 0123 Read Coil Status(Read Input Status) Read Binary Status
0000 ~ 0123 Read Coil Status(Read Input Status) Read Binary Status
Read Control Information, Metering Values, Event

1000 ~ 1344 Read Input Registers
Data, Temporary Setting Value
2000 ~ 2168 Read/Write Holding Registers Read/Write Setting values, Event Select, Time
3. Read Binary Status

Description
Read the ON/OFF status of coils in the EVRC2A-N.
The supported function 0x01(0x02) uses the register inputs (0X References, 1X References).
Maximum 100*8 = 800 Point Reads, Broadcast is not supported.
Supported Function and Register
Function 0x01 (Read Coil Status) 0x02 (Read Input Status)

Register 0X References 1X References
The Query Packet specifies the starting address and quantity of point to be read.
Here is an example of a request to read binary 15 ~ 25(System Warning, Protection Enable, ..., Hot
Line Tag Enabled) from slave device 01.
Table A-3. MASTER/SLAVE PACKET FORMAT FOR FUNCTION CODE 01H(02H)
MASTER QUERY FORMAT SLAVE RESPONSE
PACKET FORMAT EXAMPLE(HEX) PACKET FORMAT EXAMPLE (HEX)
SLAVE ADDRESS 01 SLAVE ADDRESS 01
FUNCTION CODE 01(02) FUNCTION CODE 01(02)
STARTING ADDRESS HI 00 BYTE COUNT 02
STARTING ADDRESS LO 0F DATA BYTE #1 4D
NUMBER OF POINTS – HI 00 DATA BYTE #2 02
NUMBER OF POINTS – LO 0A ERROR CHECK (CRC or LRC) ~
ERROR CHECK (CRC or LRC) ~
The slave device responds with the bit values 1, 0, 1, 1, 0, 0, 1, 0, 0 and 1 from binary status
addresses 13h through 23h inclusive. The first byte contains the first eight data bits stored in the
least significant to the most significant bit position. The second byte contains the last two data bits
stored in the least two significant bit positions. Note that the rest of the second byte is zero-filled.
Example
DATA BYTE #2 DATA BYTE #1
Coil 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20
Bit Position 7 6 5 4 3 2 1 0 7 6 5 4 3 2 1 0
Binary Data 0 0 0 0 0 0 1 0 0 1 0 0 1 1 0 1
4. Read Setting Values

Description
There are two ways to read EVRC2A-N Setting value. One is to read it from Input register(1001 ~
1343), which is current operating Setting value and the other is to read it from Holding register()
when changing setting values from direct operate to temporary register.
Read the binary contents of holding registers in the EVRC2A-N.
The supported function 0x03 uses the register points (3X References).
This is area to read setting information which is running or chang it.
Broadcast is not supported.
Function 0x03 (Read Holding Registers) 0x04 (Read Input Registers)

Register 4X References 3X References
The Query Packet specifies the starting address and quantity of registers to be read.
Here is an example of a request to read registers 2008 ~ 2009(1183 ~ 1184 : Load profile event
record and interval) from slave device 01.
Table A-4. MASTER/SLAVE PACKET FORMAT FOR FUNCTION CODE 03H(04H)

MASTER QUERY FORMAT SLAVE RESPONSE FORMAT
PACKET FORMAT EXAMPLE (HEX) PACKET FORMAT EXAMPLE (HEX)
FUNCTION CODE 03(04) FUNCTION CODE 03(04)
STARTING ADDRESS HI 07(04) BYTE COUNT 04
STARTING ADDRESS LO D8(9F) DATA #1 HI 00
NUMBER OF POINTS HI 00 DATA #1 LO 01
NUMBER OF POINTS LO 02 DATA #2 HI 00
ERROR CHECK (CRC or LRC) ~ DATA #2 LO 01
The register data in the response are packed as two bytes per register, with the binary contents right
justified within each byte. For each register, the first byte contains the high order bits and the
second contains the low order bits. The slave device responds with the values 1(ON) and 1(10 min)
from registers 7D8h(49Fh) and 7D9h(4A0) respectively.
Example
DATA #2 HI DATA #2 LO DATA #1 HI DATA #1 LO
Binary Data 0x00 0x01 0x00 0x01
Address(Register) 7D9h(4A0) 7D8h(49Fh)
Register Value 1 1
5. Read Metering Values / Event Data

Description
Read the binary contents of input registers in the EVRC2A-N.
The supported function 0x04 uses the register (3X References).
Recloser system Information, Metering Value, Event Information (Measuring information, Event
information)
Present measuring and event information updated in Recloser.
Maximum100 Word Read, Broadcast is not supported.
Function 0x04 (Read Input Registers)

Register 3X References
The Query Packet specifies the starting address and quantity of registers to be read.
Here is an example of a request to read registers 1001 ~ 1002(Firmware version control and RTU)
from slave device 01.
Table A-5. MASTER/SLAVE PACKET FORMAT FOR FUNCTION CODE 04H
FUNCTION CODE 04 FUNCTION CODE 04
STARTING ADDRESS HI 03 BYTE COUNT 04
STARTING ADDRESS LO E8 DATA #1 HI 01
NUMBER OF POINTS HI 00 DATA #1 LO 90
NUMBER OF POINTS LO 02 DATA #2 HI 00
ERROR CHECK (CRC or LRC) ~ DATA #2 LO 64
The slave device responds with the values 400and 100 from registers 3E8h and 3E9h respectively.
Example
DATA #2 HI DATA #2 LO DATA #1 HI DATA #1 LO
Binary Data 0x00 0x00 0x02 0x2B
Address(Register) 3E9h 3E8h
Register Value 100 400
6. Execute Operation
Description
Force a single coil to either ON or OFF. When broadcast, the function code forces the same coil
reference in all attached EVRC2A-Ns. It operates DO point of Recloser.
Function 0x05 (Force Single Coil)

Register NONE
The Query Packet specifies the coil reference to be forced.

Coils are addressed starting at zero: coil 1 is addressed as 0.
The requested ON/OFF state is specified by a constant in the query data field.
A value of FF 00 hex requests the coil to be ON. A value of 00 00 hex requests the coil to be OFF.
All other values will not affect the coil.
Here is an example of a request to force coil 1 ON in slave device 17. It means the master station
send a command “CLOSE”.
OPERATION CODE HI 00 OPERATION CODE HI 00
OPERATION CODE LO 00 OPERATION CODE LO 00
CODE VALUE HI FF CODE VALUE HI FF
CODE VALUE LO 00 CODE VALUE LO 00
ERROR CHECK (CRC or LRC) ~ ERROR CHECK (CRC or LRC) ~
The response of slave 17 return after the coil state has been forced.
Table A-7. SUMMARY OF OPERATION CODES FOR FUNCTION 05H (1/2)

Operation Tr/Cl
Description Code Field Block Condition
(HEX) Field
CLOSE ON CTR Lock || Mec’ Lock || HotLineTag || Seq’ Running

0000 Pulse ON
OPEN OFF Mec’ Lock
Protection Disable ON CTR Lock
0001 Pulse ON
Protection Enable OFF CTR Lock
Ground Disable ON CTR Lock
0002 Pulse ON
Ground Enable OFF CTR Lock
SEF Disable ON CTR Lock
0003 Pulse ON
SEF Enable OFF CTR Lock
Reclose Disable ON CTR Lock
0004 Pulse ON
Reclose Enable OFF CTR Lock
Control Unlock ON
0005 Pulse ON
Control Lock OFF
Primary Setting Enable ON CTR Lock || Seq’ Running
0006 Pulse ON
Alternate Setting Enable OFF CTR Lock || Seq’ Running
Program 1 Disable ON Note 1)
0007 Pulse ON
Program 1 Enable OFF Note 1)
Program 2 Disable ON Note 2)
0008 Pulse ON
Program 2 Enable OFF Note 2)
Hot Line Tag Disable ON CTR Lock
0009 Pulse ON
Hot Line Tag Enable OFF CTR Lock
000A Target Reset Pulse ON ON
000B Battery test Pulse ON ON AC OFF
000C Reset Max demand value Pulse ON ON
000D Reset energy Pulse ON ON
000E Change Setting Pulse ON ON Seq’ Running Note 3)
000F Opto Input 1 operate Pulse ON ON Note 4)
0010 Opto Input 2 operate Pulse ON ON Note 4)

Table A-7. SUMMARY OF OPERATION CODES FOR FUNCTION 05H (2/2)

NOTE
1) Operation condiction when LOOP function is used.
LOOP is set for SEC, MID : Control available

LOOP is set for TIE : Control available only when OPEN status
LOOP is set for NONE : Control not available

2) Operation condiction when LOOP function is used.
Control available when Program 1 is Enable.

Control not available when LOOP is set for TIE.
3) As changed value by AO signal, changeds present setting value and restart a system
4) If SCADA INPUT HardWare is installed, it is operated.
※ A “Pulse ON” code takes effect immediately when received, therefore timing is irrelevant
5) Block Condition Description
CTR Lock(Control Lock) : CONTROL function is locked status in panel

Mec’ Lock(Mechanism Lock) : Circuit Breaker(Tank) is locked status
Hot Line Tag : Hot Line Tag function is ON status
Seq’ Runing : Currently Sequence is conducting.
AC OFF : External power source is disconnected.
7. Write Single Setting Values

Description
Preset a value into a single holding register. When broadcast, the function presets the same register
reference in all attached EVRC2A-Ns.
Area of Reading or changing(Read/ White) currently running set information.
Function 0x06 (Preset Single Register)

The query packet specifies the register reference to be preset. The requested preset value is
specified in the query data field.
MODBUS MEMORY MAP describes on Appendix. Here shows a master device storing the value
0 at memory map address 2001 to slave device 01. It perform changing the VOC(value of change)
event setting 1 to “OFF” on temporary setting value.
PACKET FORMAT EXAMPLE(HEX) PACKET FORMAT EXAMPLE(HEX)
REGISTER ADDRESS HI 07 REGISTER ADDRESS HI 07
REGISTER ADDRESS LO D0 REGISTER ADDRESS LO D0
PRESET DATA HI 00 PRESET DATA HI 00
PRESET DATA LO 00 PRESET DATA LO 00
ERROR CHECK (CRC or LRC) ~ ERROR CHECK (CRC or LRC) ~
The response of slave 01 returns after the register contents have been preset.
8. Write Multiple Setting Values

Description
Preset values into a sequence of holding register. When broadcast, the function presets the same
register reference in all attached EVRC2A-Ns.
Area of Reading or changing(Read/ White) currently running set information.
Function 0x10 (Preset Multiple Registers)

The query packet specifies the register references to be preset. The requested preset values are
specified in the query data field.
Here is an example of a request to preset two registers starting at 2001 to 00 00 and 01 40 hex, in
slave device 01. It perform changing the VOC(value of change) event setting 1 to “OFF” and VOC
event limit value 1 to “320 xCT” on temporary setting value.

STARTING ADDRESS HI 07 STARTING ADDRESS HI 07
STARTING ADDRESS LO D0 STARTING ADDRESS LO D0
NUMBER OF REGISTER HI 00 NUMBER OF REGISTER HI 11
NUMBER OF REGISTER LO 02 NUMBER OF REGISTER LO 00
BYTE COUNT 04 ERROR CHECK (CRC or LRC) ~
DATA #1 HI 00
DATA #1 LO 00
DATA #2 HI 01
DATA #2 LO 40
The response of slave returns the slave address, function code, starting address, and quantity of
registers preset.
9. Remaining Function
9.1. Diagnostics
Description
Modbus function 08 provides a series of test for checking the communication system between the
master station and IEDs, or for checking various internal error conditions within the slave.
Broadcast is not supported. The query packet specifies a two-byte subfunction code field to define
the type of test to be performed. The slave echoes both the function code and subfunction code in a
normal response. Most of the diagnostic queries use a two-byte data field to send diagnostic data or
control information to the slave.
Supported Function and Subfunctions
Diagnostic
Function
0x08 (Preset Multiple Registers)
0x00 (Return Query Data) Check Communication status in Master.
Subfunction 0x01 (Restart Comm. Option) Communication Device Restart
0x04 (Force Listen Only Mode) Stop the response of Slave.
Here is an example of a request to slave device 01 to Return Query Packet. This uses a subfunction
code of zero (00 00 hex in the two-byte field).
SUBFUNCTION HI 00 SUBFUNCTION HI 00
SUBFUNCTION LO 00 SUBFUNCTION LO 00
DATA HI 00 DATA HI 00
DATA LO C8 DATA LO C8
ERROR CHECK (CRC or LRC) ~ ERROR CHECK (CRC or LRC)
The slave response to the Return Query Packet request is to loopback the same data.
9.2. Report Slave ID
Description
Return a description of the type of controller present at the slave address, the current status of the
slave Run indicator, and other information specific to the slave device. Broadcast is not supported.
Supported Function
Report Slave ID
Function
0x11 (Preset Multiple Registers)
Here is an example of a request to report the ID and status of slave device 01.
ERROR CHECK (CRC or LRC) ~ BYTE COUNT Device specific
SLAVE ID Device specific
00 = OFF
RUN INDICATOR STATUS
FF = ON
ADDITIONAL DATA Device specific
Table A-12. A Summary of Slave IDs and Byte Count

Byte 1 Slave ID 0 : EVRC1A, 1 : EVRC2A, 2 : MCBC1A, 3 : MCBC2A, 4 -255: Undefined.
Byte 2 RUN Indicator 0x00 = OFF, 0xFF = ON
Byte 3
Additional data Address of Output coil
Byte 4
Byte 5
Additional data Maximum quantity of Output coil
Byte 6
Byte 7
Additional data Address of Input status
Byte 8
Byte 9
Additional data Maximum quantity of Input status
Byte 10
Byte 11
Additional data Address of Holding Register
Byte 12
Byte 13
Additional data Maximum quantity of Holding Register
Byte 14
Byte 15
Additional data Address of Input Register
Byte 16
Byte 17
Additional data Maximum quantity of Input Register
Byte 18
10. Exception Response

Description
Communication errors can be occurred when data packet is not properly controlled in Slave device
or packet receives wrong data. In this case, MODBUS RTU defines Error code as below.
Below example is that, Mater send Query packet but it has Setting value reading error from Slave
device 01.
Table A-13. MASTER/SLAVE PACKET FORMAT FOR EXCEPTION RESPONSE

STARTING ADDRESS HI 07 EXCEPTION CODE 02
STARTING ADDRESS LO D1 ERROR CHECK (CRC or LRC) ~
NUMBER OF POINTS HI 00
NUMBER OF POINTS LO 02
Slave device 01 occur an error and returns Exception code 02.

The explanation of Exception codes are as below.
Table A-14. Explanation of Exception codes

Error Code
MODBUS Definition Description
(HEX)
The slave device is not supported the function code of master query
01 ILLEGAL FUNCTION
packet.
The slave device is not supported the address of master query

02 ILLEGAL DATA ADDRESS
packet.
The slave device is not supported the value of data field in master
03 ILLEGAL DATA VALUE
query packet.
The slave device has an error while perform the command from
04 SLAVE DEVICE FAILURE
master station.
The slave device was received without error, but will take a long
05 ACKNOWLEDGE time to process the command. This response is returned to prevent

a timeout error.
The slave device is engaged in processing a long duration

06 DEVICE IS BUSY command. When the slave device is free, the master station
retransmit later.
The slave device cannot process the function code received in the
NAK-NEGATIVE
07 query packet, because the slave device does not have the requested
ACKNOWLEDGE
command available.
The slave device attempted to read extended memory, but detected

08 MEMORY PARITY ERROR
a parity error in the memory.
B. MODBUS Memory Map
Table B-1. MODBUS Memory Map (1/18)

Address
DESCRIPTION RANGE TYPE ACCESS
(Decimal)
BINARY STATUS REGISTERS READONLY
FRONT PANEL ELEMENTS
0000 External AC Power – –
Battery Charger – –
Battery Discharge – –
INST Target – –
Delay Target – –
High Current Target – –
A Phase Target – –
B Phase Target – –
C Phase Target – –
Ground Target – –
0010 SEF Target – –
27 Target – –
59 Target – –
25 Target – –
81 Target – –
Self Check – –
Protection Enabled – –
Ground Enabled – –
SEF Enabled – –
Reclose Enabled – –
0020 Control Locked – –
Remote Enabled – –
Alternate Setting Enabled – –
Program1 Enabled – –
Program2 Enabled – –
HotLineTag Enabled – –
Panel CLOSE key Press – –
Panel OPEN key Press – –

Address
(Decimal)
Panel TARGET RESET key Press – –
Panel BATTERY TEST key Press – –
0030 79 RESET – –
79 CYCLE – –
0032 79 LOCKOUT – –
INPUT ELEMENTS
0033 Reclosing Shot 0 – –
Reclosing Shot 1 – –
Contact(52a) – –
Mechanism Lock – –
0040 Opto Input 1 Asserted – –
Opto Input 2 Asserted – –
0047 Opto Input 8 Asserted – –
PROTECTION ELEMENTS
0048 Phase Fast Time Overcurrent(51P1) – –
Phase Delay Time Overcurrent(51P2) – –
0050 Ground Fast Time Overcurrent (51G1) – –
Ground Delay Time Overcurrent (51G2) – –
Door Open status – –
Negative Sequence Fast Time Overcurrent

– –
(46(51)-1)
Negative Sequence Delay Time

– –
Overcurrent (51Q2)
Phase High Current Lockout(50P2) – –

Address
(Decimal)
Ground High Current Lockout(50G2) – –
Negative Sequence High Current

– –
Lockout(50Q2)
Phase High Current Trip(50P1) – –
Ground High Current Trip(50G1) – –
Negative Sequence High Current

0060 – –
Trip(50Q1)
Sensitive Earth Fault Trip – –
Phase Demand Trip – –
Ground Demand Trip – –
NEQ Demand Trip – –
UnderFrequency Trip – –
Synchronism Check Trip – –
Under voltage 1 Trip – –
Under voltage 2 Trip – –
Over voltage 1 Trip – –
0070 Over voltage 2 Trip – –
CLPU – Loss of Load Diversity

– –
(Outage Condition)
CLPU – Restore Min. Trips Condition – –
CLPU – Loss of Load Diversity

– –
(Outage Condition) T.O
CLPU – Restore Min. Trips Condition T.O – –
CLPU – Phase Overcurrent Elements – –
CLPU – Ground Overcurrent Elements – –
0077 CLPU – Negative Overcurrent Elements – –
OUTPUT ELEMENTS
0078 Relay Output 1 Operated – –
Relay Output 2 Operated – –
0080 Relay Output 3 Operated – –

Address
(Decimal)
Relay Output 8 (ALARM) Operated – –
External OPEN Signal – –
Internal Output Logic 1 – –
0090 Internal Output Logic 4 – –
Internal Trip Logic Output – –
0096 Internal Close Logic Output – –
SYSTEM ELEMENTS
0097 Trip Operation Fail – –
Close Operation Fail – –
Voltage Transformer Fail – –
0100 Battery discharge Status – –
NO Battery – –
Battery Discharge Test Fail – –
Panel sleep mode entered – –
Power down mode entered – –
Gas pressure Low – –
Gas pressure High – –
System power +12V FAIL – –
System power +5 FAIL – –
System power -12V FAIL – –
0110 A/D converter reference vol' 1 FAIL – –
A/D converter reference vol' 2 FAIL – –
System power FAIL – –

Address
(Decimal)
A/D conversion FAIL – –
Perallel EEPROM FAIL – –
Serial EEPROM FAIL – –
Data RAM FAIL – –
Setting RAM FAIL – –
RTC NV RAM FAIL – –
RTC Time FAIL – –
0120 RTC Battery LOW – –
Initial Value FAIL – –
Initial Setting Value FAIL – –
Program Ram FAIL – –
Contact Close Status – –
Contact Open Status – –
OverFrequency Trip – –
0124-0999 Reserved – –
PRODUCTID REGISTERS READONLY
FIRMWARE VERSION
1000 Firmware version(MAIN Part) – DF3
1001 Firmware version(RTU Part) – DF3
METERING VALUE REGISTERS READONLY
CURRENTS AND VOLTAGE
1002 RMS Current Magnitude - A (A) DF1
RMS Current Magnitude - B (A) DF1
RMS Current Magnitude - C (A) DF1
RMS Current Magnitude - G (A) DF1
RMS Current Magnitude - SEF (A) DF1
RMS Current Magnitude - NEQ (A) DF1
Current Angle - A (Degree) DF2
Current Angle - B (Degree) DF2
1010 Current Angle - C (Degree) DF2
Current Angle - G (Degree) DF2

Address
(Decimal)
Current Angle - SEF (Degree) DF2
Current Angle - NEQ (Degree) DF2
RMS Voltage Magnitude - AN (kV) DF3
RMS Voltage Magnitude - BN (kV) DF3
RMS Voltage Magnitude - CN (kV) DF3
RMS Voltage Magnitude - AB (kV) DF3
RMS Voltage Magnitude - BC (kV) DF3
RMS Voltage Magnitude - CA (kV) DF3
1020 Voltage Angle - AN (Degree) DF2
Voltage Angle - BN (Degree) DF2
Voltage Angle - CN (Degree) DF2
Voltage Angle - AB (Degree) DF2
Voltage Angle - BC (Degree) DF2
1025 Voltage Angle - CA (Degree) DF2
POWER
1026 Real Power - A (MW) DF7
Real Power - B (MW) DF7
Real Power - C (MW) DF7
Real Power - 3φ (MW) DF7
1030 Reactive Power - A (MVar) DF7
Reactive Power - B (MVar) DF7
Reactive Power - C (MVar) DF7
Reactive Power - 3φ (MVar) DF7
Apparent Power - A (MVA) DF7
Apparent Power - B (MVA) DF7
Apparent Power - C (MVA) DF7
Apparent Power - 3φ (MVA) DF7
Power factor - A (%) DF6
Power factor - B (%) DF6
1040 Power factor - C (%) DF6
1041 Power factor - 3φ (%) DF6

Address
(Decimal)
ENERGY
1042 Positive Watt-Hour (MW/H) DF5
Negative Watt-Hour (MW/H) DF5
Positive Var-Hour (MVar/H) DF5
1045 Negative Var-Hour (MVar/H) DF5
FREQUENCY
1046 Frequency (Hz) DF3
PRESENT DEMAND
1047 Present Demand Current - A (A) DF1
Present Demand Current - B (A) DF1
Present Demand Current - C (A) DF1
1050 Present Demand Current - G (A) DF1
Present Demand Current - SEF (A) DF1
Present Demand Current - NEQ (A) DF1
Present Demand Real Power - A (MW) DF7
Present Demand Real Power - B (MW) DF7
Present Demand Real Power - C (MW) DF7
Present Demand Real Power - 3φ (MW) DF7
Present Demand Reactive Power - A (MVar) DF7
Present Demand Reactive Power - B (MVar) DF7
Present Demand Reactive Power - C (MVar) DF7
1060 Present Demand Reactive Power - 3φ (MVar) DF7
MAXIMUM DEMAND
1061 Max Demand Current - A (A) DF1
Max Demand Current - B (A) DF1
Max Demand Current - C (A) DF1
Max Demand Current - G (A) DF1
Max Demand Current - SEF (A) DF1
Max Demand Current - NEQ (A) DF1
Max Demand Real Power - A (MW) DF7
Max Demand Real Power - B (MW) DF7

Address
(Decimal)
Max Demand Real Power - C (MW) DF7
1070 Max Demand Real Power - 3φ (MW) DF7
Max Demand Reactive Power - A (MVar) DF7
Max Demand Reactive Power - B (MVar) DF7
Max Demand Reactive Power - C (MVar) DF7
Max Demand Reactive Power – 3φ (Mvar) DF7
Max Demand Current – A Time 1 DFTIME1
Max Demand Current – B Time 1 DFTIME1
Max Demand Current – B Time 2 DFTIME2
1080 Max Demand Current – B Time 3 DFTIME3
Max Demand Current – C Time 1 DFTIME1
Max Demand Current – G Time 1 DFTIME1
Max Demand Current – SEF Time 1 DFTIME1
1090 Max Demand Current – NEQ Time 1 DFTIME1
Max Demand Current – NEQ Time 2 DFTIME2
Max Demand Current – NEQ Time 3 DFTIME3
Max Demand Real Power – A Time 1 DFTIME1
Max Demand Real Power – B Time 1 DFTIME1
Max Demand Real Power – C Time 1 DFTIME1

Address
(Decimal)
1100 Max Demand Real Power – C Time 2 DFTIME2
Max Demand Real Power – C Time 3 DFTIME3
Max Demand Real Power – 3φ Time 1 DFTIME1
Max Demand Real Power - 3φ Time 2 DFTIME2
Max Demand Real Power - 3φ Time 3 DFTIME3
Max Demand Reactive Power – A Time 1 DFTIME1
Max Demand Reactive Power – B Time 1 DFTIME1
Max Demand Reactive Power – B Time 2 DFTIME2
1110 Max Demand Reactive Power – B Time 3 DFTIME3
Max Demand Reactive Power – C Time 1 DFTIME1
Max Demand Reactive Power – 3φ Time 1 DFTIME1
Max Demand Reactive Power – 3φ Time 2 DFTIME2
1116 Max Demand Reactive Power – 3φ Time 3 DFTIME3
MAXIMUM DEMAND (TODAY)
1117 Today Max Demand Current – A (A) DF1
Today Max Demand Current – B (A) DF1
Today Max Demand Current – C (A) DF1
1120 Today Max Demand Current – G (A) DF1
Today Max Demand Current – SEF (A) DF1
Today Max Demand Current – NEQ (A) DF1
Today Max Demand Real Power – A (MW) DF7
Today Max Demand Real Power – B (MW) DF7
Today Max Demand Real Power – C (MW) DF7
Today Max Demand Real Power – 3φ (MW) DF7
Today Max Demand Reactive Power – A(Mvar) DF7
Today Max Demand Reactive Power – B(Mvar) DF7
Today Max Demand Reactive Power – C(Mvar) DF7

Address
(Decimal)
1130 Today Max Demand Reactive Power -3φ(Mvar) DF7
MAXIMUM DEMAND (YESTERDAY)
1131 Yesterday Max Demand Current – A (A) DF1
Yesterday Max Demand Current - B (A) DF1
Yesterday Max Demand Current - C (A) DF1
Yesterday Max Demand Current – G (A) DF1
Yesterday Max Demand Current – SEF (A) DF1
Yesterday Max Demand Current – NEQ (A) DF1
Yesterday Max Demand Real Power – A (MW) DF7
Yesterday Max Demand Real Power – B (MW) DF7
Yesterday Max Demand Real Power – C (MW) DF7
1140 Yesterday Max Demand Real Power – 3φ (MW) DF7
Yesterday Max Demand Reactive Power

DF7
- A (Mvar)

DF7
- B (Mvar)

DF7
- C (Mvar)

1144 DF7
- 3φ (Mvar)
CONTACT WEAR
1145 Phase A Contact wear percentage (%) DF3
Phase B Contact wear percentage (%) DF3
1147 Phase C Contact wear percentage (%) DF3
SYSTEM
1148 Battery Voltage (V) DF7
Control Box Temperature (℃) DF7
1150 Gas Pressure DF7
+12V DF7
-12V DF7
1153 +5v DF7

Address
(Decimal)
EVENT DATA REGISTERS
LAST TRIP CURRENTS
1154 Last Fault Current – A (A) DF1
Last Fault Current – B (A) DF1
Last Fault Current - C (A) DF1
Last Fault Current - G (A) DF1
Last Fault Current - SEF (A) DF1
1159 Last Fault Current - NEQ (A) DF1
1160-1799 Reserved
OPERATION COUNTERS
1800 Trip counter 0-65535 DF1
Fault counter 0-65535 DF1
Restart counter 0-65535 DF1
1803-1999 Reserved
Temporary Setting Value REGISTERS READ/WRITE
RELAY SETUP
Event Recorder
2000 Fault cycle event record 0:OFF,1:ON DF1
Length of prefault in fault cycle 0-14 DF1
Load profile event record 0:OFF,1:ON DF1
2003 Load profile save interval 0:5,1:10,2:15,3:20,4:30,5:60 minite DF1
PROTECTION
OPERATIONS
2004 Operations to lockout - phase 1-5 DF1
Operations to lockout - ground 1-5 DF1
Operations to lockout - SEF 1-5 DF1
Operations to lockout - NEQ 1-5 DF1
Operations - phase fast curve 0-5 DF1
Operations - ground fast curve 0-5 DF1
2010 Operations - NEQ fast curve 0-5 DF1

Address
(Decimal)
INTERVALS
2011 Reclosing time 1 (sec) 50-60000 DF3
Reclosing time 2 (sec) 100-60000 DF3
Reset time from autoreclose cycle (sec) 100-60000 DF3
Reset time from lockout (sec) 100-60000 DF3
2017 Limit time to waiting closing power (sec) 100-60000 DF3
PICKUP CURRENT
2018 Pickup current - phase 0:OFF,4-320 DF3
Pickup current - ground 0:OFF,2-320 DF3
Pickup current - SEF 0:OFF,5-160 DF4
2021 Pickup current - NEQ 0:OFF,4-320 DF3
PHASE FAST
2022 Operations curve – PHASE FAST 0-56(Reference1) DF1
Time dial – PHASE FAST 5-1500 DF3
Constant time adder – PHASE FAST 0-1000 DF3
Minimum response time – PHASE FAST 0-1000 DF3
2026 Select reset method – PHASE FAST 0:INST,1:LINEAR DF1
PHASE DELAY
2027 Operations curve – PHASE DELAY 0-56(Reference1) DF1
Time dial – PHASE DELAY 5-1500 DF3
Constant time adder – PHASE DELAY 0-1000 DF3
Minimum response time – PHASE DELAY 0-1000 DF3
2031 Select reset method – PHASE DELAY 0:INST,1:LINEAR DF1
GROUND FAST
2032 Operations curve – GROUND FAST 0-56(Reference1) DF1
Time dial – GROUND FAST 5-1500 DF3
Constant time adder – GROUND FAST 0-1000 DF3
Minimum response time – GROUND FAST 0-1000 DF3
2036 Select reset method – GROUND FAST 0:INST,1:LINEAR DF1

Address
(Decimal)
GROUND DELAY
2037 Operations curve – GROUND DELAY 0-56(Reference1) DF1
Time dial – GROUND DELAY 5-1500 DF3
Constant time adder – GROUND DELAY 0-1000 DF3
Minimum response time – GROUND DELAY 0-1000 DF3
2041 Select reset method – GROUND DELAY 0:INST,1:LINEAR DF1
SEF ELEMENT
2042 Time delay – SEF ELEMENT 0-1000 DF3
NEG SEQ FAST
2043 Operations curve – NEG SEQ FAST 0-56(Reference1) DF1
Time dial – NEG SEQ FAST 5-1500 DF3
Constant time adder – NEG SEQ FAST 0-1000 DF3
Minimum response time – NEG SEQ FAST 0-1000 DF3
2047 Select reset method – NEG SEQ FAST 0:INST,1:LINEAR DF1
NEG SEQ DELAY
2048 Operations curve – NEG SEQ DELAY 0-56(Reference1) DF1
Time dial – NEG SEQ DELAY 5-1500 DF3
Constant time adder – NEG SEQ DELAY 0-1000 DF3
Minimum response time – NEG SEQ DELAY 0-1000 DF3
2052 Select reset method – NEG SEQ DELAY 0:INST,1:LINEAR DF1
H/C TRIP-PHA
2053 High current trip function - phase 0:OFF,1:TRIP,2:TRIP&ALARM DF1
Pickup current - phase 100-2000 DF3
Time delay - phase 0-1000 DF3
2056 Active trip - phase 0:OFF,1-5 DF1
H/C TRIP-GND
2057 High current trip function - ground 0:OFF,1:TRIP,2:TRIP&ALARM DF1
Pickup current - ground 100-2000 DF3
Time delay - ground 0-1000 DF3
2060 Active trip - ground 0:OFF,1-5 DF1

Address
(Decimal)
H/C TRIP-NEQ
2061 High current trip function - NEQ 0:OFF,1:TRIP,2:TRIP&ALARM DF1
Pickup current - NEQ 100-2000 DF3
Time delay - NEQ 0-1000 DF3
2064 Active trip - NEQ 0:OFF,1-5 DF1
H/C LOCKOUT-PHA
2065 High current lockout function - phase 0:OFF,1:TRIP,2:TRIP&ALARM DF1
Pickup current - phase 100-2000 DF3
Time delay - phase 0-1000 DF3
2068 Active trip - phase 0:OFF,1-5 DF1
H/CLOCKOUT-GND
2069 High current lockout function - ground 0:OFF,1:TRIP,2:TRIP&ALARM DF1
Pickup current - ground 100-2000 DF3
Time delay - ground 0-1000 DF3
2072 Active trip - ground 0:OFF,1-5 DF1
H/C LOCKOUT-NEQ
2073 High current lockout function - NEQ 0:OFF,1:TRIP,2:TRIP&ALARM DF1
Pickup current - NEQ 100-2000 DF3
Time delay - NEQ 0-1000 DF3
2076 Active trip - NEQ 0:OFF,1-5 DF1
COLD LOAD PICKUP
2077 Cold load pickup function 0:OFF,1:TRIP,2:TRIP&ALARM DF1
CLPU Pickup current - phase 100-2000 DF3
CLPU Pickup current - ground 100-2000 DF3
CLPU Pickup current - SEF 100-2000 DF3
CLPU Pickup current - NEQ 100-2000 DF3
CLPU outage time 0-60000 DF3
CLPU RMT time 0-60000 DF3
CLPU RMT Function - phase 0:OFF,1:ON DF1
CLPU RMT Function - ground 0:OFF,1:ON DF1

Address
(Decimal)
CLPU RMT Function - SEF 0:OFF,1:ON DF1
CLPU RMT Function - NEQ 0:OFF,1:ON DF1
2088 CLPU Reset time 0-60000 DF3
PHASE DIRECTION
2089 Direction of current flow - phase 0:OFF,1:FORWARD,2:REVERSE DF1
Maximum torque angle(M.T.A) - phase 0-359 DF1
Minimum polarizing voltage(M.P.V) - phase 0-125 DF3
2092 Block overcurrent under M.P.V - phase 0:NO,1:YES DF1
GROUND DIRECTION
2093 Direction of current flow - ground 0:OFF,1:FORWARD,2:REVERSE DF1
Maximum torque angle(M.T.A) - ground 0-359 DF1
Minimum polarizing voltage(M.P.V) - ground 0-125 DF3
2096 Block overcurrent under M.P.V - ground 0:NO,1:YES DF1
SEF DIRECTION
2097 Direction of current flow - SEF 0:OFF,1:FORWARD,2:REVERSE DF1
Maximum torque angle(M.T.A) - SEF 0-359 DF1
Minimum polarizing voltage(M.P.V) - SEF 0-125 DF3
2100 Block overcurrent under M.P.V - SEF 0:NO,1:YES DF1
NEQ DIRECTION
2101 Direction of current flow - NEQ 0:OFF,1:FORWARD,2:REVERSE DF1
Maximum torque angle(M.T.A) - NEQ 0-359 DF1
Minimum polarizing voltage(M.P.V) - NEQ 0-125 DF3
2104 Block overcurrent under M.P.V - NEQ 0:NO,1:YES DF1
UNDER VOLTAGE1
2105 Under voltage 1 function 0:OFF,1:TRIP,2:TRIP&ALARM DF1
Under voltage 1 Pickup 0-125 DF3
Under voltage 1 Time delay 0-60000 DF3
Under voltage 1 function 0-125 DF3
2109 Under voltage 1 Pickup type 0:1Phase,1:2Phase,2:3Phase DF1
UNDER VOLTAGE2
2110 Under voltage 2 function 0:OFF,1:TRIP,2:TRIP&ALARM DF1

Address
(Decimal)
Under voltage 2 Pickup 0-125 DF3
Under voltage 2 Time delay 0-60000 DF3
Under voltage 2 function 0-125 DF3
2114 Under voltage 2 Pickup type 0:1Phase,1:2Phase,2:3Phase DF1
OVER VOLTAGE1
2115 Over voltage 1 function 0:OFF,1:TRIP,2:TRIP&ALARM DF1
Over voltage 1 Pickup 0-125 DF3
Over voltage 1 Time delay 0-60000 DF3
2118 Over voltage 1 Pickup type 0:1Phase,1:2Phase,2:3Phase DF1
OVER VOLTAGE2
2119 Over voltage 2 function 0:OFF,1:TRIP,2:TRIP&ALARM DF1
Over voltage 2 Pickup 0-125 DF3
Over voltage 2 Time delay 0-60000 DF3
2122 Over voltage 2 Pickup type 0:1Phase,1:2Phase,2:3Phase DF1
FREQUENCY
2123 Under frequency function 0:OFF,1:TRIP,2:TRIP&ALARM DF1
Under frequency Pickup 4000-6500 DF3
Under frequency Time delay 0-60000 DF3
Over frequency Pickup 5000-6500 DF3
Onder frequency Time delay 0-60000 DF3
Frequency Minimum voltage 0-125 DF3
Frequency Minimum current 0-320 DF3
2130 Normal Frequency CLOSE function 0:OFF, 1:ON DF1
2131 Normal Frequency CLOSE Time delay 0.0-6000.0sec DF2
OTHERELEMENT
2132 Sequence coordination function 0:OFF,1:ON DF1
Lockout priority 0:PHASE,1:GROUND DF1
Fault indicator reset method 0:AUTO,1:MANUAL DF1
2135 Manual close Time delay 0-60000 DF3

Address
(Decimal)
MONITORING
DEMAND
2136 Monitoring demand function 0:OFF,1:TRIP,2:TRIP&ALARM DF1
Demand method 0:THERMAL,1:ROLLING DF1
Time interval 0:5,1:10,2:15,3:20,4:30,5:60 DF1
Current demand pickup-phase 0:OFF,4-320 DF3
Current demand pickup-ground 0:OFF,2-320 DF3
2141 Current demand pickup-NEQ 0:OFF,4-320 DF3
SYNCHROCHECK
2142 Synchrocheck function 0:OFF,1:ALARM DF1
Dead line maximum voltage 0-125 DF3
Live line minimum voltage 0-125 DF3
Maximum voltage difference 0-125 DF3
Maximum angle difference 0-100 DF1
Maximum frequency difference 0-500 DF3
2148 Synchrocheck phase 0:R,1:S,2:T DF1
FAULT LOCATOR
2149 Fault Locator 0:OFF,1:ON DF1
2150 Length of Feeder 1-999 DF2
Real impedance of the feeder positive sequence 1-60000 DF2
Imaginary impedance of the feeder positive

1-60000 DF2
sequence
Real impedance of the feeder zero sequence 1-60000 DF2
Imaginary impedance of the feeder zero

2154 1-60000 DF2
sequence
LOOP CONTROL
DF1(0:NONE, 1:SECtionalizer,
2155 Loop Control Type DF1
2:MIDpoint 3:TIEpoint)
Voltage response side to SEC & MID DF1(0:Line VS, 1:Line VL) DF1
DF1(0:Line VS, 1:Line VL, 2:Line

Voltage response side to TIE DF1
VS&VL)

Address
(Decimal)
DF1(0:3PN, 1:3PP, 2:1PN(A),
Line VS wire 3:1PN(B), 4:1PN(C), 5:1PP(AB), DF1
6:1PP(BC), 7:1PP(CA))
2:1PN(A), 3:1PN(B), 4:1PN(C),

Line VL wire DF1
5:1PP(AB), 6:1PP(BC),7:1PP(CA))
2160 Auto change to Alternate Setting at Mid Point DF1 (0:OFF, 1:ON) DF1
DF1 (0:OFF, 1:ON(VS),

Auto change to Alternate Setting at Tie Point DF1
2:ON(VL), 3:ON(BOTH))
LC after manual close DF1 (0:DISABLE, 1:ENABLE) DF1
LC after manual open DF1 (0:DISABLE, 1:ENABLE) DF1
Open time on both dead Line DF3 (1-60000 sec) DF3
Auto restoration Time DF3 (1-60000 sec) DF3
Dead Line maximum voltage DF2 (200-700 %) DF2
Live Line minimum voltage DF2 (500-850 %) DF2
Dead Line Pickup time delay DF3 (1-60000 sec) DF3
Live Line Pickup time delay DF3 (1-60000 sec) DF3
2170 Dead Line Reset time delay DF3 (1-60000 sec) DF3
2171 Non Recloser Time after LC Action DF3 (0-60000 sec) DF3
2172-2999 Reserved
Table B-2. Data Format Description (1/3)

TYPE VALUE DESCRIPTION
DF1 UNSIGNED VALUE
Ex: 1234 stored as 1234
DF2 UNSIGNED VALUE, 1 DECIMAL PLACE
Ex: 123.4 stored as 1234
Ex:12.3456 stored as 123456
DF6 Line Speed
0 1200 bps
1 2400 bps
2 4800 bps
3 9600 bps
4 19200 bps
DF7 D/L Confirm
0 NO
1 YES
2 SOMETIMES
DF8 Unsol MSG, Class 1,2,3
0 DISABLE
1 ENABLE
DF9 Fault Cycle, Load Profile, RMT Func-PHA, GND, SEF, NEQ, Seq' Coordi', Function
0 OFF
1 ON
DF10 L.P save time(m), Time Constant(m)
0 5 min
1 10 min
2 15 min
3 20 min
4 30 min
5 60 min

DF11 Connect Type
0 NONE
1 WYE
2 DELTA
3 CVD
DF12 Phase Rotation
0 ABC
1 ACB
DF13 I1 Func-I8 Func
0 NONE 11 HLT E/D
1 TRIP 12 FI RESET
2 CLOSE 13 BATT LT
3 PROTEC E/D 14 OUT1 RESET
4 GND E/D 15 OUT2 RESET
5 SEF E/D 16 OUT3 RESET
6 REC E/D 17 OUT4 RESET
7 C LOCK E/D 18 OUT5 RESET
8 ALT E/D 19 OUT6 RESET
9 PG1 E/D 20 OUT7 RESET
10 PG2 E/D 21 OUT8 RESET

DF14 O1 Func-O8 Func
0 NONE 18 REC ENABLE
1 TRIP 19 CONTR LOCK
2 CLOSE 20 REM ENABLE
3 FAIL TRIP 21 ALT BNABLE
4 FAIL CLOSE 22 PG1 ENABLE
5 FAIL AC 23 PG2 ENABLE
6 FAIL BATT 24 HLT ENABLE
7 27 25 FAULT INDI
8 59 26 ALARM
9 25 27 52A
10 81 28 INPUT01
11 79RS 29 INPUT02
12 79CY 30 INPUT03
13 79LO 31 INPUT04
14 SELF CHECK 32 INPUT05
15 PRO ENABLE 33 INPUT06
16 GND ENABLE 34 INPUT07
17 SEF ENABLE 35 INPUT08
DF15 O1 Type- O8 Type

0 SELF RESET LATCH
1 PULSE
2 LATCH
DF16 Function
0 TRIP
1 TRIP&ALARM
DF17 Curve

Modbus Protocol Technical Manual: Entec

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Modbus Protocol Technical Manual: Entec

Uploaded by

Copyright:

Available Formats

Release Date: Jan. 2010 / Manual Revision: 3.

[Sept. 2009] Ver3.12

[Jan. 2010] Ver3.20

A. MODBUS Protocol Technical Specification …………………..……………………………..1

5. Read Metering Values / Event Data …...……………………………………………………….6

7. Write Single Setting Values …..………………………………………………………………10

8. Write Multiple Setting Values …………….……………………………………………………11

9. Remaining Function ...…………………………………………………………………………12

B. MODBUS Memory Map ………………………………………………..................................17

A. MODBUS Protocol Technical Specification

Table A-1. EVRC2A-N MODBUS FUNCTION CODES

Table A-2. Register allocation

Read Control Information, Metering Values, Event

3. Read Binary Status

Supported Function and Register

Function 0x01 (Read Coil Status) 0x02 (Read Input Status)

PACKET FORMAT EXAMPLE(HEX) PACKET FORMAT EXAMPLE (HEX)

SLAVE ADDRESS 01 SLAVE ADDRESS 01

FUNCTION CODE 01(02) FUNCTION CODE 01(02)

STARTING ADDRESS HI 00 BYTE COUNT 02

STARTING ADDRESS LO 0F DATA BYTE #1 4D

NUMBER OF POINTS – HI 00 DATA BYTE #2 02

NUMBER OF POINTS – LO 0A ERROR CHECK (CRC or LRC) ~

ERROR CHECK (CRC or LRC) ~

4. Read Setting Values

Supported Function and Register

Function 0x03 (Read Holding Registers) 0x04 (Read Input Registers)

Table A-4. MASTER/SLAVE PACKET FORMAT FOR FUNCTION CODE 03H(04H)

PACKET FORMAT EXAMPLE (HEX) PACKET FORMAT EXAMPLE (HEX)

SLAVE ADDRESS 01 SLAVE ADDRESS 01

FUNCTION CODE 03(04) FUNCTION CODE 03(04)

STARTING ADDRESS HI 07(04) BYTE COUNT 04

STARTING ADDRESS LO D8(9F) DATA #1 HI 00

NUMBER OF POINTS HI 00 DATA #1 LO 01

NUMBER OF POINTS LO 02 DATA #2 HI 00

ERROR CHECK (CRC or LRC) ~ DATA #2 LO 01

ERROR CHECK (CRC or LRC) ~

Binary Data 0x00 0x01 0x00 0x01

Address(Register) 7D9h(4A0) 7D8h(49Fh)

5. Read Metering Values / Event Data

Supported Function and Register

Function 0x04 (Read Input Registers)

PACKET FORMAT EXAMPLE (HEX) PACKET FORMAT EXAMPLE (HEX)

SLAVE ADDRESS 01 SLAVE ADDRESS 01

FUNCTION CODE 04 FUNCTION CODE 04

STARTING ADDRESS HI 03 BYTE COUNT 04

STARTING ADDRESS LO E8 DATA #1 HI 01

NUMBER OF POINTS HI 00 DATA #1 LO 90

NUMBER OF POINTS LO 02 DATA #2 HI 00

ERROR CHECK (CRC or LRC) ~ DATA #2 LO 64

ERROR CHECK (CRC or LRC) ~

Binary Data 0x00 0x00 0x02 0x2B

Address(Register) 3E9h 3E8h

Register Value 100 400

Supported Function and Register

Function 0x05 (Force Single Coil)

The Query Packet specifies the coil reference to be forced.

PACKET FORMAT EXAMPLE (HEX) PACKET FORMAT EXAMPLE (HEX)

SLAVE ADDRESS 11 SLAVE ADDRESS 11

FUNCTION CODE 05 FUNCTION CODE 05

OPERATION CODE HI 00 OPERATION CODE HI 00

OPERATION CODE LO 00 OPERATION CODE LO 00

CODE VALUE HI FF CODE VALUE HI FF