Grid Switch Blank Vert/Horiz

Clipsal Iconic - Switch Grid Blank Plate, Vertical/Horizontal Mount

Catalogue Number: 3040G
Grid Switch Blank Vert/Horiz
Colour: Per UOM Std.
  • 1 PCE


hide show
Clipsal Iconic
Product or component type
fixing frame
Aesthetic name
Number of gangs
Fixing mode
by screws
Range compatibility
cover plate
Provided equipment
4 mm
71 mm
115 mm
Net weight
0.02 kg
Type of packing
EU RoHS Directive
Environmental Disclosure
Circularity Profile

Documents & downloads

hide show
Filter items
  • All

  • Product Brochures

  • Technical Data Catalogues

  • Technical Leaflet

  • Product Environmental

  • Installation Instruction

  • Operating Manuals

  • Certificates (MSDS)

Frequently Asked Questions

hide show

What is the part number for a 6 gang switch for the Iconic range?

The part number for a 6 gang switch for the Iconic range is - 3046G & 3046C

For further information , visit link below:-
User-added image

User-added image


Is Iconic intermediate mechanism available assembled on a switch plate?

Unfortunately, the Iconic intermediate mechanism is not available assembled on a plate. It can put together using below part numbers;
40MIL  - Clipsal Iconic Intermediate Switch Mechanism, 250V, 10A, LED.
3041G - Clipsal Iconic - Switch-Grid, Vertical/Horizontal Mount, 1 Gang
3041C - Clipsal Iconic - Skin Switch Plate Cover, Vertical/Horizontal Mount, 1 Gang
For further information, please visit the below links:

What are the part numbers to make up a 4 gang switch with LED for the Iconic range?

The part numbers to make up a 4 gang switch with LED for the Iconic range are - 3044G , 40ML & 3044C

For further information visit links below:-
User-added image

What is the part number for Iconic foxtel TV outlet?

The part numbers for Iconic Foxtel TV outlet are 3041G + 3041C-** + 40PFM-TN

3041G Clipsal Iconic - Switch-Grid, Vertical/Horizontal Mount, 1 Gang

3041C-WY Clipsal Iconic - Skin Switch Plate Cover, Vertical/Horizontal Mount, 1 Gang

Clipsal Iconic - TV Antenna Socket, 75 Ohm, F-Type

For further information see:

What does the PDLDBF30BPDOM consists of

 It comes with 1xDBF30, 3x40A RCCBs, 7x20A MCBs, 2x10A MCBs

What part numbers are needed to put together an Iconic 1 gang electronic Pushbutton switch plate (Vivid white)?

Below are the part numbers needed to put together an Iconic 1 gang electronic Pushbutton switch plate :

3041G - Clipsal Iconic - Switch Grid, Vertical/Horizontal Mount, 1 Gang
For further information, please visit


3041C-VW -Clipsal Iconic - Skin Switch Plate Cover, Vertical/Horizontal Mount, 1 Gang, Vivid White
For further information, please visit​

41E350PBES2SM-VW -Clipsal Iconic - Electronic Switch Mechanism, Push Button with ControlLink (without bluetooth) 2-wire, 350W
For further information, please visit

What is the Pin out detail for the Modbus programming cable 110 XCA 20 3000?

The pin out details of the Modbus programming cable 110 XCA 20300 is as shown in the attached.


What is the Maximum number of BMXNOR0200 module which can be installed with a Modicon M580 CPU local rack.

The maximum number of BMXNOR0200 which can be installed within a local rack containing M580 CPU is 6.
It also depends on the model of M580 CPU is being used.

1. BMEP58 6040 can accomodate 6 BMXNOR0200 modules.
2. BMEP58 5040 can accomodate 4 BMXNOR0200 modules.
3. BMEP58 4040 can accomodate 4 BMXNOR0200 modules.
4. BMEP58 4020 can accomodate 4 BMXNOR0200 modules.
5. BMEP58 3040 can accomodate 3 BMXNOR0200 modules.
6. BMEP58 3020 can accomodate 3 BMXNOR0200 modules.
7. BMEP58 2040 can accomodate 2 BMXNOR0200 modules.
8. BMEP58 2020 can accomodate 2 BMXNOR0200 modules. 
9. BMEP58 1020 can accomodate 2 BMXNOR0200 modules. 

What is the maximum Modbus port speed on the M340 CPU?

Modbus port speed up to 38400 baud on all CPU's with embedded Modbus ports. (ex. BMXP341000, BMXP342000, BMXP342010, BMXP342020)

What are the replacement parts needed to make up a XACA871 Pendant Station


How many events does the onboard event log hold?

The event record will hold 30000 events before the log begins to FIFO the events.

Can a data or AV outlet be added on the plate with 800 series integrally switched sockets

No. The joint Australia/New Zealand Wiring Rules (AS/NZS 3000) require that all faceplates comply with AS/NZS 3112, clause 3.2 of which prohibits mixing of these voltage levels on the same faceplate

What is the minimum firmware needed for a PM710 or PM750 to upgrade to the latest firmware?

Product Line
PM700 Series

Firmware Upgrade

The PM700 or PM7 series meters must be at firmware 3.040 or greater in order to upgrade to the latest firmware.

For information on how to upgrade to the latest version see FA237920.

What is the part number for Iconic 3 gang grid and cover assembly (less mechanisms)?

In the Iconic range, switch grid and skin(cover) are sold separately.
Part number of the 3 gang switch grid is 3043G. For further information, please visit
Part number of the skin is 3043C. Skins are available in Vivid White(VW), Warm White(WY), Cool Grey(CY) and Anthracite(AN). 
For further information, please visit


Are light fittings attachable on the Caloundra Sweep fans?

You cannot fit a light to the non-light versions of Caloundra range. The only fan that has a light is the C4HS1300L-WE and this light is integrated into the fan, it is not a kit.
This is a 4000K natural white LED. However, if customers prefer a warmer colour temperature, we also sell a 3000K warm white LED array separately (LEDFANKIT-WW).

What are the A, B, C, D, E, F, G, H, and J ground fault ampere values for the Micrologic 6.0A, 6.0P, and 6.0H on the 1600A Masterpact breaker NW16H2?

Product Line:
Circuit Breakers

Electrical Distribution Equipment.

For all 1200A sensors and greater they are 500A, 640A, 720A, 800A, 880A, 960A, 1040, 1120A, and 1200A respectively.

How do I Monitor Analog Input Over-Under Range conditions on a SCADAPack 350?

Only the Scadapack models 314, 334 and 357 (only AI on the 5606 Lower IO board) have register assignments that monitor the out-of-range status for analog inputs.

The only way to monitor if an analog input has failed, would be to monitor the raw input and look for a zero or full scale value.

For a SP350 using a 5V/20mA register assignment and a 4-20mA input:
The screnshot below shows logic that scales the raw value of input 30001 to produce a scaled value in register 40110 (in mA)

With the 5V/20mA register assignment, a count of 32767 will appear when seeing a full scale value or an out of range value. In either scenario, the mA reading will never go above 20mA which is why the threshold has been set to 19.99mA.

For a SP350 using a 10V/40mA register assignment and a 4-20mA input:

The screnshot below shows logic that scales the raw value of input 30001 to produce a scaled value in register 40110 (in mA)

With the 10V/40mA register assignment, register 30001 can now measure beyond 20mA so it is now possible to tell a full scale value apart from an out of range value. Full scale 20mA now corresponds to a raw input value of 16384. The logic is looking for an out of range condition when it sees 20.01mA or greater.

ETSNZ How many charging records can the EVLink webserver hold?

You are able to view the last 30CDR (Charge Detail Record) regardless of the date. It will also store the last 31 days of load. It will write of the last record when it is full.
The export button in the Charge Data Record tab is used to export all the charging sessions (up to 3000) in the station via a .csv file.


What is the part number for a CAT6A keystone mechanism?

The part number for a CAT6A keystone mechanism is a RJ45SMA6A.

Some of the key features are:
  • Fully compliant to AS/NZS 3080, ISO/IEC 11801, ANSI/TIA/EIA-568-C Series
  • Backward compatible with category 5e products
  • UL 94V-0 rated
  • -40 to 70 deg C Temperature range
  • Nickel plating
  • Copper shielded shutter cap to eliminate alien crosstalk associated with Category 6A
  • Various colours for easier circuit identification
  • Can be used in Multi-user teleco mmunication outlet applications (MUTO) and Consolidation points (CP)
  • Clear insulation displacement connector caps allow for termination verification and assist in cable retention
  • Suitable for use with the Clipsal Category 6A UTP patch panel RJ6AU/24PP and RJ6AU/24PPS
  • Fire retardant UL 94v-0, Plastic
For further information please visit

How is MTBF (Mean Time Between Failures) Calculated?

Goals and Symptoms:

How is MTBF (Mean Time Between Failures) Calculated?

Causes and Fixes:

How is MTBF (Mean Time Between Failures) Calculated?

1. Computed following RDF2000 Reliability model (UTE C 80-810 standard) - EQUIPMENT ambient temperature at 30deg C (86deg F), 60deg C (140deg F) and 85deg C (185deg F)
  • 2. Continuous operation profile: 100% operation rate per year (365d / year, 24h / day) - 12 power on/off per year (1 per month) - No stocking days
  • 3. Intermittent operation profile: 46% operation rate per year (335d / year 12h /day) - 335 power on/off per year (1 per operating day) 30 stocking days
  • 4. MTBF are given in hours

How to use M221 PLC to read 32 bits floating point values from power meters which support Modbus communication protocol?

Power meters which support Modbus protocols uses standard Modbus addressing method. For example, the holding registers are represented from address 40001 to 49999. If this is converted to the IEC61131 syntax, the address range is from %MW0 to %MW9998 which is currently adopted by M221 controller. so we need to take the n-1 register to read the correct value. For example: in the meter register floating point address 3060 is actually %MF3059 in IEC61131 Syntax.

Another difference between power meter and M221 controller regarding floating point addressing is that the least significant word and the most significant word order is opposite. For example: %MW3060 is the LSW and %MW3059 is the MSW for %MF3059 in the meter while it is opposite in the M221 controller. If we would like to read the meter floating point address 3060, we can use Read_Var function block to transfer the value of %MW3059 in the meter to %MW281 in the M221 controller, then transfer the value of %MW3060 in the meter to %MW280 in the M221 controller. Then use %MF280 in the M221 controller to represent the floating point values. 

MGE STS, Galaxy 3000, 4000, 5000 and Galaxy PW; Wiring information for EGX100 to any 66061-supported products

Wiring information for EGX100 to any 66061-supported products

Product line
EGX100 and all products supported by 66061 – STS, Galaxy 3000, 4000, 5000 and Galaxy PW

EGX100 and all products supported by 66061 – STS, Galaxy 3000, 4000, 5000 and Galaxy PW

Wiring information for EGX100 to any 66061-supported products

The 66061 JBUS/Modbus card is configured for 9600, 8, N and 1.  Slave address is 1 and wiring is 2-wire with no parity and termination.  This assumes only one 66061 card or UPS or STS is connected to the enclosure but if more than one change as required.  The JBUS/Modbus card has two female DB9 connectors.  The DB9 on the right side of the card is RS232 for configuration.  The left side DB9 connector is the RS485 connections that the EGX must be wired to.
The EGX Monitoring Enclosure has a CB, power supply and EGX100.  The EGX is configured and has been Modbus communications was factory tested.  The EGX 100 IP address is with subnet mask of  The IP address needs to be configured at the site.  Make sure that the dip switches on the side of the EGX are configured correctly.  One is down (off position) and all others are up. 

EGX layout

The wiring of the devices is below and keep in mind that the 66061 JBUS/Modbus card has a female DB9 so a male DB9 cable is required on the UPS/STS.  The male DB9 connector is not supplied with the UPS but a black terminal block is supplied with the EGX.




Active Alarms are not reporting in System Manager Software (SMS) from Series 2000, 3000, 4000 Circuit Monitors or Series 600, 800 Power Meters. The meter's front display indicates that the alarms is active.


The most common cause for alarms not coming into System Manager Software (SMS) from a device is when the onboard alarm log records are set to 0 (zero). Go to Setup>Device/Routing>configuration then verify that the number of records for the "alarm log" is not zero, 0. Verify that the alarm log is enabled.

This applies to the Series 2000, 3000, 4000 Circuit Monitors and Series 600, 800 Power Meters.
System Manager Software (SMS) v 3.3.x.x and 4.x

Date Created: Unknown
Last Revised: March 19, 2008
Original Author: PMOZONE/PH
All content © 1992-2008 Schneider Electric

Legacy KB System (APS) Data: RESL185061 V2.0, Originally authored by KBAdPM on 06/27/2007, Last Edited by PhHa on 03/20/2008
Related ranges: System Manager 3.3, System Manager 4.0, System Manager 3.2

Current Clamp wiring configuration with ION meters

Goals and Symptoms

Users may order the following current clamps to use with our ION meters:

Model #
Current Range
50mA to 10A AC
1 to 1000A AC
3 to 3000A AC
0.333 VAC
0.333 VAC

These clamp come with three wires
  1. Blue
  2. White
  3. Shield (If ordered separately from the meter).

Which wire is positive and which is negative?

Causes and Fixes

The Blue wire is the POSITIVE wire and should be conencted to I11, I21 or I31
The White wire is the NEGATIVE wire and should be connected to I12,I22 or I32.
The Shield wire can be grounded.

Last Revised: December 13, 2007
Applies To: ION 7300, 7550 / 7650, 8600, 8800
All content © 1992-2007 Schneider Electric

Legacy KB System (APS) Data: RESL190319 V1.0, Originally authored by KBAdPM on 12/11/2007, Last Edited by KBAdPM on 12/11/2007
Related ranges: ION8800, ION8600, ION7550/ION7650, ION7300

No power output from the Matrix-UPS L14-30 or 5-15 receptacles (MX3000/5000)


Matrix-UPS is not providing any output power to the receptacles on the rear of the UPS.

Product Line





There is an ON/OFF circuit breaker switch located on the back plate of the Matrix-UPS IU (Isolation Unit, lower half of the Matrix-UPS) just above the NEMA L14-30 receptacle. This breaker controls the UPS output to the L14-30 receptacle (as well as the NEMA 5-15 receptacles on the Matrix-UPS 3000 model only). On the Matrix-UPS 5000, this switch controls the L14-30 receptacle only. If the Matrix-UPS is powered on and there is no output to the L14-30 receptacle (or any of the 5-15 receptacles on a Matrix-UPS 3000) check this switch to ensure that it is set to ON (to the right). This symptom is often experienced on a new installation.


Close the breakers to restore power to the receptacles.  If the breaker has tripped while the unit was in service, this was due to an overload to the circuit by loads downstream of the Matrix-UPS. Evaluate the circumstances and correct by reducing the number of connected devices.

Serial Terminal Connection Parameters for all NetBotz Appliances


Serial Terminal Connection Parameters for all NetBotz Appliances

Product Line:



Versions as described below
terminal emulation


Terminal emulation (ie. Hyper-Terminal) configuration for communications with NetBotz appliances.


Terminal emulation is often used for initial IP configuration on NetBotz appliances. Hyper-terminal or Putty are often used for this configuration.

Serial Terminal Connection Parameters for all NetBotz Appliances

When connecting to a Netbotz appliance or a NetBotz Central via a serial cable, the terminal settings must be set to:

38400 and 8-N-1

When connecting to a models 300, 303, 310, or 400, you must use a standard serial cable, such as the kind used to connect a modem to a PC.

When connecting to models 320, 420 or 500, you must use a NULL modem cable.

When connecting to models 355, 455, 550, 570 or similar version 3 Netbotz, you must use a USB A-B cable.

The NetBotz 200 uses a Null Modem cable and a baud rate of 9600.

NOTE: When connecting to a NetBotz Central, you must use a NULL modem cable.

Missing CMDVF and CMDLC document number 63230-305-200.

The Series 3000, 4000 Circuit Monitor Instruction Bulletins refer to document 63230-305-200 for information on the displays. The two displays supported are the Circuit Monitor Display Vacuum Florescent (CMDVF) and the Circuit Monitor Display Liquid Crystal (CMDLC). This document was never release so refer to document 63230-305-29 or each meters instruction bulletin for dimensional information on the display and mounting.
63230305200, 63230305029, 6323030529


  • Last Revised: September 9, 2007


    All content © 1992-2007 Schneider Electric

Legacy KB System (APS) Data: RESL188006 V1.0, Originally authored by PhHa on 09/11/2007, Last Edited by PhHa on 09/11/2007
Related ranges: CM3000 series, CM4000 series

What registers hold the serial number for the Series 3000, 4000 Circuit Monitor and Series 800 Power Meter?

Register 3017 and 3018 contain the serial number for each meter. To calculate the serial number read the values as hexadecimal, put the numbers together and convert to decimal.

  • Example: Register 3017 = D93E

    Register 3018 = A7

    Serial # in Hex = A7D93E

    Convert to Decimal Serial Number = 11000126


    Original article#
    Date Created: April 23, 2007
    Last Revised: January 25, 2008
    Original Author: RM
    All content © 1992-2008 Schneider Electric

Legacy KB System (APS) Data: RESL190841 V1.0, Originally authored by PhHa on 01/29/2008, Last Edited by PhHa on 01/29/2008
Related ranges: PM800 series, CM4000 series, CM3000 series

Vista cannot find generic diagram for CM4000 device.

Goals and Symptoms

A CM4000T device is added to an SPM 7.0.1 system. When clicked on in Vista, an error message appears: "A generic diagram for the selected device cannot be found".
In the alarms panel on the web interface, there are links to source devices. Clicking on these links displays a blank page, even if the device is manually pointed to a diagram in Vista.
In Vista, the device type / product field displays a large meaningless number instead of a product type.

Keywords: SPM 7, SPM7, CM4

Causes and Fixes

The most likely cause is that the device is loaded with an old, unsupported firmware. In this old firmware, the device type register had a different address. Hence, SPM cannot determine the device type automatically, causing diagram linkage errors.

It appears that the data returned from the Device Type register is incorrect. This explains why SPM does not know which diagram to use, and why you see the strange numeric value for the device type. SPM Vista polls this register as well as the firmware version to determine which diagram to use.

To confirm these suspicions, the following check can be performed:

First, check the meter's translator file: \ION Enterprise\system\translators\cm4000.xml
Near the top of the file you should see where it looks for "FAC1 Device Type", it should be register [40]3010:

<ModbusInfo IONHandle="4864" Name="FAC1 DeviceType" ModbusAddress="403010" RequestType="R" Format="UINT16" Offset="0x75B3" CacheSpec="C" SetupReg="1" DisableNotAvailableCheck="0" ConfigWrite="1">
<Enumeration Ordinal="15101" Value="CM4000" />
<Enumeration Ordinal="15103" Value="CM4250" />
<Enumeration Ordinal="15111" Value="CM3250" />
<Enumeration Ordinal="15112" Value="CM3350" />
<Enumeration Ordinal="15001" Value="CM4000T" />

Next, use the meter's front panel diagnostic menu to read register 3010. For a CM4000T it should be value 15001 as stated above.

To resolve the issue, update the device firmware to the most recent.

Legacy KB System (APS) Data: RESL209757 V1.0, Originally authored by ViWa on 11/24/2012, Last Edited by ViWa on 11/24/2012
Related ranges: Power Monitoring 7.0

How to determine the Date of Manufacture for a PM800 Series Meters

A user may need to determine the manufacture date of a PM800 series meter

Product Line:
PM800 series meters

Manufacturing Information

The date of manufacture is required by the RMA procedure

*Warning: Installation and maintenance of this device should only be performed by qualified, competent personnel that have appropriate training and experience with high voltage and current devices. Failure to follow the instructions / warnings in the Meter Installation Guide can result in permanent damage to the meter, severe injury or death. 

There are three ways to determine the Date Of Manufacture (DOM) of a PM800 series meter.

1. Front Display
From the front display of the meter, Select "Diagnostic -> Meter Information -> DOM"
You can read the "DOM" registers from the meter:

2. Register Reads
Three registers in the meter contain the DOM information starting at 3019. You can use Modbus tester or any Modbus register reading tool to read three registers (3019, 3020, and 3021). To download Modbus Tester, click on article FA180037

Please use the following template for interpretation:
Register 3019:Hi Byte = Month (1 - 12) ; Register 0:Lo Byte = Day (1 - 31)
Register 3020 :Hi Byte = Year (0 - 199)   ; Register 1:Lo Byte = Hour (0 - 23)
Register 3021 :Hi Byte = Minute (0 - 59) ; Register 2:Lo Byte = Second (0 - 59)

3. Product Information Label
Caution: Take all necessary precautions when exposing live energized circuits
There is a product information label located on the side of the meter body that contains the serial number and date of manufacture for the meter.



How to perform a master reset (memory clear) to the Series 3000, 4000 Circuit Monitor and Series 800 Power Meter.

How to perform a master reset (memory clear) to the Circuit Monitor 3000 and 4000 and Power Meter 800 series.

Product Line
CM3000 series
CM4000 series
PM800 series

Master Reset

Engineer needs to reset the meter to factory setting and reset the memory on the meters.

Warning: This procedure will reset all meter settings back to factory defaults except for the communication settings. 
It is recommended that all settings such as system type, current transformer ratio, potential transformer ratios, energy readings, I/O setup, data log setup, and data logged be recorded before proceeding.

1. Write the decimal value of 9020 to register 8000. This will put the meter into setup mode
2. Write the decimal value 1023 to register 8001. This step tells the meter to clear all information except for the communication settings.
    Optional: To reset all settings including communication settings write a decimal 9999 to register 8001.
3. Write the decimal value 1120 to register 8000. The value 1120 represents the command to clear the parameters set by the contents of register 8001.
4. Wait at least 20 seconds for the meter to reboot before going to step 5.
5. Write a decimal value of 1130 to register 8000.  This will reconfigure the meter with the default factory settings.

Note: This procedure can be performed from the front panel display or communications software, such as Modbus Tester as shown below.

A master reset will clear all the cumulative and derived quantities from the meter, including demand, peak demand, energy, revenue and test mode parameters. In addition, it will reset the meter's event, waveform, and onboard data logs. For PowerLogic meters settings such as the mode will reset back to factory default. Since a master reset doesn't change any settings that might affect communications a master reset should not be used to correct any communications issues.

Why does my Panelmate Plus keypad unit display "Recovery Mode"?

When the Panelmate Plus keypad unit starts up in "Recovery Mode", the message is informing you that the "Executive Firmware" is corrupted and needs to be reloaded. The Panelmate may also be locked in a way that it will always boot up into "Recovery Mode" and you cannot get to the "Offline/Serial Transfer" mode using the normal method. If this occurs, the table below describes the steps that you need to take to get the Panelmate Plus unit back into "Transfer" mode.
· If the unit is a Panelmate Plus 2000, 3000, 4000 or 5000 and the procedure below fails to fix the problem, you will have to download the "Executive Firmware" to the Panelmate Plus unit with the electronics module disconnected from the unit. Reference the appropriate section in the "Modicon Panelmate Plus Hardware Installation Guide" for instructions (see the section titled "Install in an Enclosure") on how to remove and re-attach the electronic module.

Hold down control buttons 1 and 2 (counting from the top down) while simultaneously cycling power on the electronics module (i.e., power switch off and back on again). Continue to hold the control buttons until you see the blue offline selection menu.

At this point, you may place the unit in Transfer mode and download the "Executive Firmware" to it.

What could be causing a device error 513 while attempting to download firmware using DLF-3000?

While upgrading firmware for a Powerlogic meter using DLF-3000, the upgrade is unable to complete due to a Error 513.

Product Line

Firmware Upgrade

This corresponds to a negative acknowledgement from the device. There is either an issue with the serial communication settings, or the ethernet connection is being used by another program.
This is causing a negative acknowledge from the target device.

If this error occurs while connected serially, make sure the protocol mode is PowerLogic and the parity is EVEN.
Using Modbus mode or Parity of NONE will not work over a serial connection.

If this error occurs while connected over ethernet, make sure that there are no ION or SMS services communicating with the device.
With SMS, make sure SMS is not constantly polling, logging, or uploading.
With ION Enterprise or PME, stop the ION Network router service before sending firmware to the meter.

Can the scale factor for the Energy readings be changed on the Series 700 Power Meter?

The scale factor for the Energy reading in the Series 700 Power Meter is automatically adjusted by the meter. The front display will adjust based on the range of the reading. There is a scale register associated to Energy but is not user adjustable. Energy is stored in a 2 register format as a floating point value. Other Meters like the Series 2000, 3000, 4000 Circuit Monitors and the Series 800 Power Meter store Energy in 4 registers with a Modulo 10,000 (mod10) format.

  • Original article# 4712
    Date Created: Unknown
    Last Revised: March 19, 2008
    Original Author: PMOZONE
    All content © 1992-2008 Schneider Electric

Legacy KB System (APS) Data: RESL184650 V2.0, Originally authored by DaMi on 06/17/2007, Last Edited by PhHa on 03/20/2008
Related ranges: PM700 series

Video: How do I read data from a Modbus TCP device using the embedded Ethernet port on a Unity Premium PLC?

Programming Modicon Premium PAC to Read Device Data via Ethernet Port

Product Line:
Premium, Unity Pro

Unity Pro software


To read data from a Modbus TCP device using the Premium PLC with embedded Ethernet port , follow the steps below:
1. Create a Premium project with an embedded Ethernet port on the CPU
2. Create an Ethernet network under "communication" within the project browser
3. Double click on the newly created network and under the "IP configuration" tab, enter the desired IP address and subnet mask
4. Select the "messaging" tab and check the "XWAY profile" option.
5. Enter an XWAY address and IP address under the connection configuration section. The XWAY address comprises of a network and station number. The network number can be between 0 and 127 and the station number must be          between 100 to 163 for Modbus TCP messaging. Example of XWAY address is 1.101
6. Create a section and add the READ_VAR function block
In the example below, the Premium PLC is reading 5 words starting a 40400 in the remote device

READ_VAR (ADR := ADDR('{1.101}SYS'),
          OBJ := '%MW'                          (* Type of objects to read for Premium PLC: '%MW': internal words *)
          NUM := 400                             (* Index of the first object to read. *)
          NB := 5                                     (* Number of objects to read. *)
          GEST := %MW50:4                 (* Exchange management table *) 
          RECP => receive_buffer);          (* Word table containing the value of the objects read. The length of this array must be greater than or equal to NB*) 

%MW52 := 20;  (* The third word of the management table is managed by the user which defines the maximum response time using a time base of 100 ms.*)

Incorrect Power Factor readings in Virtual devices in System Manager Software v 4.0

Goals and Symptoms

Incorrect Power Factor (PF) readings can occur in Virtual devices within SMS (System Manager Software) v 4.0 when associated meters are configured with an alternate VAR sign convention. This article will explain why it occurs and how to resolve the issue.

Causes and Fixes

All PowerLogic meters except for the Series 2000 Circuit Monitor (CM2000) are shipped using the IEEE/IEC VAR sign convention. Meters shipped previous to March 2000 were shipped using the Alternate (CM1/CM2/CM2000/PM600) VAR sign convention. SMS only calculates Power Factor correctly when the IEEE/IEC VAR sign convention is used. Therefore, every meter included in a Virtual device must be configured with the IEEE/IEC VAR sign convention.

The VAR sign convention can be changed through the display of the Series 3000, 4000 Circuit Monitor and the Series 800 Power Meter. To change the VAR sign convention on the CM2000 or PM600 (Series 600 Power Meter) refer to the device reference manual. All devices can be configure over the communications link by reading and writing to the command interface. Refer to the command interface in the device reference manual.


(Removed Image URL: /PubResEXPORT.nsf/2b87ee90be777fc085257c28006ee4ef/d53f7a3a1664fd03c125731000161b27/fl_block_5/0.1AD6?OpenElement&FieldElemFormat=gif)

  • Last Revised:7/5/2007


    All content © 1992-2007 Schneider Electric

Legacy KB System (APS) Data: RESL186559 V1.0, Originally authored by PhHa on 07/06/2007, Last Edited by PhHa on 07/06/2007
Related ranges: System Manager 4.0

What system type should be used for monitoring 2 phases (legs) of a 3-phase 4-wire system?

One solution is to configure the device for a system type 40 (3-phase 4-wire with 3 CTs). Then wire in all three voltage phases and connect the neutral. Then wire the two current phases (CT) to the corresponding current input. The third phase current input will not have a current transformer (CT) connected. More detail should be discussed with your technical support representative before assuming that the above solution covers each scenario.
The phase current will read 0 for the phase that does not have the CT connected.
The individual KW and total KW will be correct.
All total values will be correct like Energy, power, Kvars, and etc.
Only 3 phase average Voltage will be correct. All other average readings can not be used because 0 will be part of the average value.
There will be a current imbalance since one phase will have zero current.

This applies to the Series 2000, 3000, 4000 Circuit Monitors (CM2000, CM3000, CM4000) and the Series 200, 600, 700, 800 Power Meters (PM200, PM600, PM700, PM800)

  • Public
    Original Author: PH
    All content © 1992-2010 Schneider Electric

Legacy KB System (APS) Data: RESL191911 V2.0, Originally authored by PhHa on 05/15/2008, Last Edited by DaMi on 11/02/2010
Related ranges: PM800 series, PM700 series, PM600 series, PM200 series, CM4000 series, CM3000 series, CM2000 series, Engineering Knowledge Applied to Power Management

Video: How to determine which firmware to install on the 66074 NMC is by the color of the PCB

How to determine which firmware to install on the 66074 NMC is by the color of the PCB

Product line:
66074/34003640SE Network Management Card (NMC)

All versions

The hardware revision of the card determines which firmware package can be loaded.

The simplest way to determine which firmware to install on the 66074 NMC is by the color of the PCB.  The original 66074 NMC was green and the newest version of the 66074 NMC is blue. 

If the NMC cannot be removed or is located remotely the NMC firmware can be determined by accessing the NMC web interface and click on "About UPS".  If the NMC has firmware AX to GX (X being any letter from A to Z) it is the original 66074NMC.   The latest or blue board has firmware IA or above which is currently KD.  You must use the correct firmware for the NMC installed.  The UPGRADE tool used to update the firmware will not allow you to update the wrong firmware.  If you have issue updating the firmware then check the firmware on the NMC and the firmware you are uploading are compatible.

Momentum High Speed counter (170AEC92000) sample application using the AEC DFB to configure a counter as a Period Meter (Mode 9) with internal time base.

Goals and Symptoms

This is a sample application which shows the Momentum High Speed Counter module configured as a Period Meter with the AEC DFB. The AEC DFB is bundled with Concept. This example was created using Concept V2.6 SR2.

Facts and Changes

This operating mode measures the duration of a period. To do this, the pulses are counted for the duration of the gate time. Various time bases can be selected according to the duration of the period. There are 5 time bases available, from 1 microsecond to 10,000 microseconds (10 seconds) . This operating mode is used to acquire time measurement for process control.
Note: The time base should be chosen to achieve the desired accuracy and ensure the measuring capability of the counter is not exceeded.
Full as well as half periods can be measured depending on the process.
Full period means: the measurement of a series of pulses from positive to positive edge.
Half period means: the measurement of a series of pulses from positive to the next negative edge.

Causes and Fixes

This example shows how the AEC DFB block can be configured in Concept. This is a simple configuration showing the required parameters to enable Period Meter (Mode 9) with internal time base.

This example assumes that the module's Input and Output references are mapped starting at 30001 for inputs and 40001 for outputs via either the IO map, peer cop, or Ethernet IO Scanner configuration.

Note that not all of the input and output pins are used in this example. Depending on the customer's application, more input and output pins may be necessary.

All of the input variables have been assigned a value corresponding to the desired operating mode via the Reference Data Editor. In this case, the application is measuring a full period with a time base of 10,000 microseconds as denoted by the values of the parameter array registers. Also refer to the TSX Momentum 170AEC92000 User Guide (870USE00800) for more details regarding the configurable parameters.

This example assumes that the Counter 1 hardware enable on Row 1 Terminal 12 has been connected to +24vdc and all the additional wiring is correct. Please refer to the Momentum User Guide for details on the wiring.

Note: This example only shows configuration of Counter 1 on the 170AEC92000. If Counter 2 is required, then a second AEC DFB would have to be added and modified accordingly.

Legacy KB System (APS) Data: RESL172073 V2.0, Originally authored by MiRo on 12/16/2010, Last Edited by DaSo on 12/16/2010
Related ranges: Modicon Momentum

How to clear and disable all CM3000/4000s data log files?

Customer would like to clear and disable data logs.

Product Line

Factory Reset Data Logs

*Warning: All custom logs will be lost.*
Clears all data log files (data and configuration).

  1. Write 32 to register 8001
  2. Write 1120 to register 8000

To write to a register from a computer download Modbus tester from FA180037. Once Modbus Tester is open:

  1. Enter the IP address related to the meter.
  2. Enter the Slave ID (the Com ports unit ID).
  3. Enter 8000 as your Starting Register.
  4. Enter 2 for # of Registers
  5. Click Read.
  6. Enter 1120 in the box to the right of 408000.
  7. Enter 32 in the box to the right of 408001.
  8. Click Write.
To write from the front display:
  1. From the Front Panel Main Menu, select Diagnostics
  2. Select Read/Write Regs. The password prompt displays.
  3. Select your password. The default password is 0.
  4. The Read/Write Registers Screen displays.
  5. Scroll through the register numbers with the arrow buttons
  6. Write 32 to register 8001 by pressing the enter button on register 8001.
    1. The Hex and Dec values begin to blink.
    2. Use the arrow buttons to scroll through the numeric values.
    3. Set the register to 32.
  7. Write 1120 to register 8000 by pressing the enter button on register 8000.
    1. The Hex and Dec values begin to blink.
    2. Use the arrow buttons to scroll through the numeric values.
    3. Set the register to 1120.
  8. Press the menu button to save the changes.
*Reference CM3000 Register List Commands Page (Page 314).
*Reference CM4000 Register List Commands Page (Page 359).

Is there a way to place a PowerLogic meter in test mode (demo mode) to simulate a load?

Is there a way to place a PowerLogic meter in test mode (demo mode) to simulate a load?

Product Line

Powerlogic meter modes

Simulating a load for a Powerlogic Meter

The Series 3000, 4000 Circuit Monitor (CM3000 (CM3), CM4000 (CM4)) and the Series 800 Power Meter (PM800 (PM8)) have a load simulation mode that can be enabled. The 3 phase load simulation will be based on the CT and PT ratios that are in the meter prior to enabling the simulation. 
*Note: PM800 firmware revisions 12.000 and 12.200 do not support demo mode.

How to enable the simulation mode using SMS or a Modbus communication utility:
Write a decimal value of 2 to register 8001
Write a decimal value of 32320 to register 8000.

How to enable the simulation mode from the front panel display of the meter (refer to the device reference manual for instructions on Reading/Writing Registers):
Write a decimal value of 2 to register 8001
Write a decimal value of 32320 to register 8000.
Exit the register write mode but do not save changes. The meter will reset if changes are saved and the simulation mode will be disabled. 

The register write/read screen can be accessed by going to Maintenance (Maint), Diagnostics(Diag), Register (Reg) then entering the password, which is default 0. The register being written to can be changed by using the + soft key to increment the number by one. The <--- soft key can be used to increment the cursor by a factor of 10 (1 to 10 to 100 to 1000). Once the correct register is selected scroll down to the decimal value by pressing the ok soft key. Using the same procedure that was used to change the register value, change the value to be stored into the register. After the value is entered press ok until the cursor returns to the top.This will write the value to the register.

To disable the simulation mode:
Write a decimal 1110 to register 8000 or cycle control power to the meter.

How to change the Display Energy resolution (scale) from Kilowatt hours (kWh) to Megawatt hours (mWh) (or vice-versa) on the front panel display of CM2000, CM3000, CM4000 or PM800 Series Meter?

How to Display Energy as a fixed Kilo (kwh) or Mega (mwh) value on the front panel display of a Series 2000, 3000, 4000 Circuit Monitor or Series 800 Power Meter. (Energy Display Precision)

Product Line
CM2000 Series 
CM3000 Series
CM4000 Series
PM800 Series

Configuring the Resolution or scaling for energy values.

Customer would like to change the scale or resolution of their energy value on the front display to be more precise. 

By default the Series 2000, 3000, 4000 Circuit Monitor and Series 800 Power Meter will auto scale the Watt hour reading from 00,000 kWh to 999.999 MWh. The display of each meter can be configured to display a fixed unit and fixed decimal place. Energy Display Precision can be configured on each meter by writing the values listed below to the each register of the meter.

The values can be written to each meter's registers by using a Modbus Read/Write software, or through the front panel display of the meter. Refer to each device reference manual for details on how to read/write registers from the front panel. 
Here is a link to a Modbus Read/Write Utility called Modbus Tester, which can be used to write to the registers in each meter: FA180037

For CM2000 Series meters:

The CM2000's meter display can be configured for various resolutions (maximum value illustrated for each selection). The chart below shows various resolutions that the energy scale can support.
Write the number from the chart below to register 2027 to make the desired changes.

Values (number) Resolution
10 999999 kilo
11 99999.9 kilo
12 9999.99 kilo
13 999.999 kilo
20 999999 mega
21 99999.9 mega
22 9999.99 mega
23 999.999 mega

EXAMPLE: If you want to view the CM2000's meter display at up to 9999.99 MWh, then you would write a value of 22 to register 2027.

For CM3000, CM4000 or PM800 Series Meters:

In order to change the Energy Display Precision on CM3000, CM4000 or PM800 series meters, 4 different registers need to be written:

1- Write value of 9020 to register 8000
2- Write value of ## to register 3215
3- Write value of 1 to register 8001
4- Write value of 9021 to register 8000 

Replace ## with the number shown below that corresponds to the units you would like to display:

Values (number) Resolution
0 Auto range (default)
10 999999 kilo
11 99999.9 kilo
12 9999.99 kilo
13 999.999 kilo
20 999999 mega
21 99999.9 mega
22 9999.99 mega
23 999.999 mega

All other values will default to auto range.

NOTE: These register values can be written individually or as a block.

Once 9021 is written to register 8000 the meter will reset and the change will take effect.

EXAMPLE: PM820 is default to rotate energy precision by default and customer wants to change it to show fixed Mwh with two decimal place.

1- Register: 8000, Value: 9020
2- Register: 3215, Value: 22
3- Register: 8001, Value 1
4- Register: 8000, Value 9021 

How do you configure the ATV61 for BACnet communications?

How do you configure the ATV61 for BACnet communications?

Product Line:
Altivar 61 with optional BACnet option card.


BACnet setup assistance.

ATV61 implementation of BACnet:


          New Part # VW3A3319 after 2011

Old Part # VW3A3315 before 2011

Compatible with the ATV61 only.  Will not work on an ATV71!

Requires V1.2 or higher software version inside the ATV61.


The new VW3A3319 option card has the preferred 4 pin screw terminal connector.
Pinouts for the new card.
A= -
B= +

The old VW3A3315 option card has a female DB9 connector.  This is not common in the BACnet world and causes problems on many installations.  Recommend Phoenix contact part # SUBCON-PLUS ref 2761389 or equal.


Pin 3 is -

Pin 4 is Ground (actually signal common)

Pin 7 is +


Option card also has 2 "Polarization switches".  These are used to connect the Pull Up and Pull Down resistors on the option card.  Only one device on the RS485 network needs to have these resistors connected in the circuit, and normally that is the controller.  Under normal conditions, leave them both in the Lower position (closer to the heat sink of the drive) unless there are network connection/reliability issues.


There are 8 DIP switches used to set the Address.  Acceptable addresses are between 1 and 127.  The address setting can be read via the keypad in menu 1.9.



Programming in the Drive:


Configuration is done under Menu 1.9: Communications, under the BACN submenu.

Address:   Read only parameter.  Displays the address set by the DIP Switches on the card.

Bit Rate:  Sets the speed of communication between the drive and the master.  Options are AUTO, 9600, 19200, 38400, and 76800.  Default is AUTO.  All devices on the RS485 network must communicate at the same Bit Rate (also known as Baud Rate).

Format:  Read only parameter, this is fixed at 8-N-1.  Stands for 8 Data bits, No Parity, and 1 Stop bit.   All devices on the RS485 network must be set to the same format.

Time-Out:  Adjustable between 0.1 and 60.0 seconds (1 to 600 tenths).  Sets the time before the drive will "Time Out" indicating a loss of communication with the controller.

Instance Number:  Adjustable between 0 and 4194303.  This must be unique for each device on the network, and we recommend it be set higher than the Address.

Max Master:  Adjustable between 0 and 127.  Sets the Maximum number of devices allowed on the network.   Reducing this number can improve network speed and data through put.

Max Info Frames:  Adjustable between 1 and 100.  Sets the time period (# of Frames) that the drive "owns" the Token.   Lower numbers will increase network speed, but may not allow the drive to update all parameters on one scan.  Higher numbers will allow full data transfer, but slower update times. Factory default is supposed to be 10, but we've had several reports of this being set to 1, which causes problems.

Data rate used:  Read Only.  Displays the Bit rate (Baud rate) the drive is actually communicating at.  Useful if using the AUTO setting for Bit Rate.

Frame Counter:  Read Only.  Displays the total number of Frames received by the drive sine the last power on.  If this number is very low, or not increasing, then it indicates network problems.

Invalid Frame Counter:  Read Only. Displays the number of bad frames received since the last power on.  If this number is High or increasing rapidly it indicates network problems.



Experience with the BACnet cards so far:


Difficulty connecting to some controllers (Alerton) at 76800.   Reducing the Bit Rate to 38400 or less seems to correct this issue.   France is checking into this.


Auto Bit Rate setting doesn't always work:   Can happen if there is noise or distortion on the network.  Programming the actual Bit Rate used helps.


8 Series and I/O Profile settings are not supported by the BACnet Option card on ATV61.


ILF (Internal fault) indicates a problem with the drive or option card.  Go to menu 1.10:Diagnostics under More Fault Info to get the details on ATV61


As with all other networks, duplicate addresses and/or duplicate Instance ID's will cause lots of problems.


Proper cable routing must be followed.  Keep network cable away from power wiring, especially the motor leads.


Improper Grounding can be a significant source of noise.  Make sure the drive and the motor are grounded properly.

Sump pumps and inverters

Sump pumps are one of the most common backup requirements for Xantrex customers.

In order to help you plan, size and install your Xantrex solution for your sump pump backup requirement, you will probably need to do a little research.

Sizing the inverter

It is true that 1 horsepower equals 748 watts in all the conversion tables; this doesn't mean that a 1000 watt inverter will run a 1 horsepower motor. Motor loads frequently surge 4 - 6 times their rated running load; and the 748 watts is measured at the output shaft of the motor, not taking losses into account.

In our experience, customers should not try to run a one horsepower motor on anything smaller than a 2500 watt inverter, to account for both the surge and running loads.

As a rule of thumb:

1/4 horsepower motor = at least 1000 watts continuous inverter
1/2 horsepower motor = at least 1500 watts continuous inverter
1/2 - 1 horsepower motor = at least 2500 watts continuous inverter

More than 1 horsepower = speak to the manufacturer of the motor and see if you can get the locked rotor amps for the motor (or the wattage of the startup surge load), which will help a technician assist you in sizing the inverter.

Sizing the battery bank

To find out how big a battery bank you need, determine the following:

How many hours, minimum, you want the sump pump to run
The duty cycle of the sump pump (how many minutes per hour the sump pump is running in the worst case scenario)
The rated running load in watts or amps of the sump pump.


You want the sump pump to run for 4 hours.
It will be running 50% of the time - so effectively you need about 2 hours of battery capacity.
The rated running load of the sump pump is 7.1 amps ac.

Amps convert to watts with the formula 120 x #of amps, in this case 120 x 7.1, yielding 852 watts.

The battery calculator is located on the Xantrex website at

Your battery bank will likely be 12v. If you enter 200 amp hours of battery capacity, and enter 852 watts as the load, and click on "Calculate" you find to your surprise that you will not get 2 hours of run time. Doubling the battery amp hour capacity gives you just over 2 hours of run time, or 4 hours of service based on 50% cycle time.

Possible solution:

2500 watt inverter (Xpower 3000, PROwatt 3000)
Xantrex Truecharge 20+ battery charger
Automatic transfer switch
400 amp hour battery bank
Heavy duty cabling, 400A fuse and fuse block

Total cost (retail) between $1500 and $2000, not including shipping, taxes, inspection or installation.

Putting the system together

If you want the system to be automatic - in other words, you don't have to be in the house for it to start working in the event of a power failure - you will need to purchase an inverter/charger, or a standalone inverter with a transfer switch, or purchase the transfer switch separately. You will need to purchase an appropriately sized battery bank, and if you don't get an inverter charger, a battery charger which will charge the batteries when not in use.

Sump pumps do not require true sine wave to start and function properly.

Many sump pump manufacturers market backup power solutions tailored to their products and customers; however, please remember that turnkey solutions are generally more expensive than systems you put together yourself.

Why choose glycol over water?


Why choose glycol over water?


Product line:

All cooling units that require heat exchangers



All Product models, all serial numbers






Why choose glycol over water?

Advantages of Glycol:

  • Cleanliness - Enclosed glycol systems are not exposed to the typical dirt and ambient particulate of water systems.
  • No Chemical Treatment - Industrial grade glycol is formulated with anti-corrosion additives. The elimination of corrosion greatly reduces maintenance costs.
  • No Filtration - Since glycol systems are closed and dirt-free, no sidestream or full flow filtration is required. This eliminates the costs of filter maintenance and filtration pump power.
  • Maximum Heat Transfer - Did you know that just 1/16" of scale reduces heat transfer by 40%! By keeping all equipment in like-new condition with no scale build-up, glycol guarantees constant peak performance and efficiency.

Disadvantages of Glycol:

  • Cost - Glycol systems are usually slightly more expensive than water systems. There is a one-time initial cost to fill the system with 30-40% glycol.
  • Convenience - In cooling systems where components are frequently disconnected and reconnected, the glycol is typically captured and added back to the system.
  • Heat Transfer Efficiency - Glycol is 5-10% less efficient than water in transferring heat. However, this is more than recouped by the elimination of scale, dirt, and corrosion that can reduce heat transfer!



Note! The specific heat capacity of an ethylene glycol based water solution is less than the specific heat of clean water. For a heat transfer system the circulated volume must be increased.

In a 50% solution with operational temperatures above 36 oF the specific heat capacity is decreased with approximately 20%. The reduced specific heat capacity must be compensated by circulating more fluid.

Automobile antifreeze solutions should not be used in HVAC systems because they contain silicates that may cause fouling. Silicates in automobile antifreeze are used to protect aluminum engine parts.

Note! Distilled or deionized water should be used for ethylene glycol solutions. City water is often treated with chlorine, which is corrosive, and should be avoided.



Setting up Diagnostics for J Series radios


I'm having trouble getting Diagnostics working with Trio J Series radios. What am I missing?


Setting up the computer
  • Navigate to the computer’s network port setup and select the TCP/IPv4 dialog. Ensure the computer is set to a Static IP address, similar to that shown below.
Setting up the gateway radio
  • In the Access Point radio, or whichever radio which you are directly connecting your PC to (this is called the eDiags Gateway radio), go into Setup, then eDiag Setup and enable eDiags. Enter the IP address of your computer (must match the address entered above), then click the Activate Changes button.
Ensure you only enable eDiags in ONE radio at a time. It won't break the network if you enable it in more than one, but will cause some extra unnecessary chatter on the radio system which is not desirable. If you later run eDiags using another radio as the entry point, you must disable eDiags in the first radio, enable it in the second, then go into the TView Database entry for each radio and change the IP address to the new radio.
Setting up TView diagnostics database
  • Open TView Management Suite, then select the Diagnostics software package.
  • Click No if asked you whether you want to open a previously-used database. (unless you DO want to open that previously-created database!)
  • Go to the Settings menu then to eDiags Port Settings. Enter the IP address used by the LAN port of your computer again here. Some computers have more than one LAN card, so we must specify the appropriate port. Note the IP port number is 1040, same as in the radio. Leave this as-is. Click Apply Changes then Exit.
  • Go to the File menu, then New. Select a location to save your radio database and give it a name that means something to you and the system being tested. Then click Save.
  • This opens the Database Setup dialog where you enter all your radios.
  • Enter the Access Point first. Type its name and serial number. You MUST know the serial numbers. Each radio’s serial number is printed on the label on its under-side. If the radios are already installed, you can find the serial numbers by opening the saved cfg files with a program such as WordPad or Excel. Each radio's serial number is in there. (you DID save each radio’s config file in a safe place didn’t you?)
  • Specify the radio model and configuration eg J Series Access Point. For other radios it'll be J Series Remote or Bridge. If a Bridge, it may be a single or dual antenna type.
  • Select the eDiags (Ethernet) communication port. Enter the IP address of the radio you're directly connected to, and on which you have enabled the eDiags feature.
  • If desired you may change any of the Alarm limits. For example you may be using a 24 volt power supply, so the range might be 23 to 25 volts.
  • Click the Apply Changes To Database button, then click Add New to add more radios.
  • Change the radio type to Remote or Bridge as needed. Also ensure you leave the eDiags IP address the same for all radios. Do NOT enter each radio's own IP address. In all cases, leave it at the IP address of the radio that has eDiags configured, and to which your computer is directly connected.
  • When done adding radios, click Exit.
Monitoring the diagnostics
  • Click the Group Poll button. (looks like three people standing in a small group) This will poll each radio in the system one after another. Any alarms show up at the bottom. Alarms can be acknowledged/cleared with buttons at the top. To change polling interval, go to the Settings menu, then Polling Setup.
  • Disable Group Polling by de-selecting the same button. Then click Individual Poll. Select a Remote radio to poll. then click Toggle to turn on polling. You'll get a nice bar graph of values. When done, toggle polling off and exit.
  • Go into the Tools menu then Statistical Performance. You'll see the second tab is the packet error test. Select a remote radio and start polling. It will run until you click Finish.
  • You can then click the Commissioning Report button to get a nice report you can print.
  • Go to the Data Logging menu and select View Trend – J and K Series. Select the desired radio. Drag the pointer at the bottom across to see parameters recorded at specific times and dates.

What is Modbus and How does it work?

What is Modbus and How does it work? 

Product line: 
All Product lines 

All Serial Numbers   



What is Modbus? 

Modbus is a serial communication protocol developed by Modicon published by Modicon® in 1979 for use with its programmable logic controllers (PLCs). In simple terms, it is a method used for transmitting information over serial lines between electronic devices. The device requesting the information is called the Modbus Master and the devices supplying information are Modbus Slaves. In a standard Modbus network, there is one Master and up to 247 Slaves, each with a unique Slave Address from 1 to 247. The Master can also write information to the Slaves.

The official Modbus specification can be found at 

What is it used for?

Modbus is an open protocol, meaning that it's free for manufacturers to build into their equipment without having to pay royalties. It has become a standard communications protocol in industry, and is now the most commonly available means of connecting industrial electronic devices. It is used widely by many manufacturers throughout many industries.Modbus is typically used to transmit signals from instrumentation and control devices back to a main controller or data gathering system, for example a system that measures temperature and humidity and communicates the results to a computer. Modbus is often used to connect a supervisory computer with a remote terminal unit (RTU) in supervisory control and data acquisition (SCADA) systems. Versions of the Modbus protocol exist for serial lines (Modbus RTU and Modbus ASCII) and for Ethernet (Modbus TCP).

How does it work?

Modbus is transmitted over serial lines between devices. The simplest setup would be a single serial cable connecting the serial ports on two devices, a Master and a Slave. 


The data is sent as series of ones and zeroes called bits. Each bit is sent as a voltage. Zeroes are sent as positive voltages and a ones as negative. The bits are sent very quickly. A typical transmission speed is 9600 baud (bits per second).


What is hexadecimal?

When troubleshooting problems, it can be helpful to see the actual raw data being transmitted. Long strings of ones and zeroes are difficult to read, so the bits are combined and shown in hexadecimal. Each block of 4 bits is represented by one of the sixteen characters from 0 to F. 


Each block of 8 bits (called a byte) is represented by one of the 256 character pairs from 00 to FF. 

How is data stored in Standard Modbus?

Information is stored in the Slave device in four different tables. Two tables store on/off discrete values (coils) and two store numerical values (registers). The coils and registers each have a read-only table and read-write table. Each table has 9999 values. Each coil or contact is 1 bit and assigned a data address between 0000 and 270E. Each register is 1 word = 16 bits = 2 bytes and also has data address between 0000 and 270E.


Coil/Register Numbers can be thought of as location names since they do not appear in the actual messages. The Data Addresses are used in the messages. For example, the first Holding Register, number 40001, has the Data Address 0000. The difference between these two values is the offset. Each table has a different offset. 1, 10001, 30001 and 40001. 

What is the Slave ID?

Each slave in a network is assigned a unique unit address from 1 to 247. When the master requests data, the first byte it sends is the Slave address. This way each slave knows after the first byte whether or not to ignore the message. 

What is a function code?

The second byte sent by the Master is the Function code. This number tells the slave which table to access and whether to read from or write to the table.


What is a CRC?

CRC stands for Cyclic Redundancy check. It is two bytes added to the end of every modbus message for error detection. Every byte in the message is used to calculate the CRC. The receiving device also calculates the CRC and compares it to the CRC from the sending device. If even one bit in the message is received incorrectly, the CRCs will be different and an error will result. .

What are the formats of Modbus commands and responses? 


What are data types?

The example for FC03 shows that register 40108 contains AE41 which converts to the 16 bits 1010 1110 0100 0001 Great! But what does it mean? Well, it could mean a few things. Register 40108 could be defined as any of these 16-bit data types:

A 16-bit unsigned integer (a whole number between 0 and 65535) register 40108 contains AE41 = 44,609 (hex to decimal conversion) 

A 16-bit signed integer (a whole number between -32768 and 32767) AE41 = -20,927 (hex to decimal conversion that wraps, if its over 32767 then subtract 65536) 

A two character ASCII string (2 typed letters) AE41 = ® A 

A discrete on/off value (this works the same as 16-bit integers with a value of 0 or 1. The hex data would be 0000 or 0001) Register 40108 could also be combined with

40109 to form any of these 32-bit data types:

A 32-bit unsigned integer (a number between 0 and 4,294,967,295) 40108,40109 = AE41 5652 = 2,923,517,522 

A 32-bit signed integer (a number between -2,147,483,648 and 2,147,483,647) AE41 5652 = -1,371,449,774 

A 32-bit double precision IEEE floating point number. This is a mathematical formula that allows any real number (a number with decimal points) to represented by 32 bits with an accuracy of about seven digits. AE41 5652 = -4.395978 E-11 Here is a spreadsheet IEEE float calculator for inputs of 4 bytes or 2 words. To download a copy, right click and select Save Target As... 

A four character ASCII string (4 typed letters) AE41 5652 = ® A V R More registers can be combined to form longer ASCII strings. Each register being used to store two ASCII characters (two bytes). 

What is byte and word ordering?

The Modbus specification doesn't define exactly how the data is stored in the registers. Therefore, some manufacturers implemented modbus in their equipment to store and transmit the higher byte first followed by the lower byte. (AE before 41). Alternatively, others store and transmit the lower byte first (41 before AE). Similarly, when registers are combined to represent 32-bit data types, Some devices store the higher 16 bits (high word) in the first register and the remaining low word in the second (AE41 before 5652) while others do the opposite (5652 before AE41) It doesn't matter which order the bytes or words are sent in, as long as the receiving device knows which way to expect it. For example, if the number 29,235,175,522 was to be sent as a 32 bit unsigned integer, it could be arranged any of these four ways.

AE41 5652 high byte first high word first

5652 AE41 high byte first low word first

41AE 5256 low byte first high word first

5256 41AE low byte first low word first 

What is a Modbus Map?

A modbus map is simply a list for an individual slave device that defines - what the data is (eg. pressure or temperature readings)

- where the data is stored (which tables and data addresses)

- how the data is stored (data types, byte and word ordering)

Some devices are built with a fixed map that is defined by the manufacturer. While other devices allow the operator to configure or program a custom map to fit their needs. 

What is the difference between Modbus ASCII and Modbus RTU?

Modbus RTU and Modbus ASCII talk the same protocol. The only difference is that the bytes being transmitted over the wire are presented as binary with RTU and as readable ASCII with Modbus RTU. important to note about RTU is that the RTU message does not have a Start_of_text indication. The receiving party  in the communications uses a "silent" time in order to determine the start of a new message. ASCII does have a start-of-text token. Binary messages are shorter than ASCII and therefore theoretically faster to transmit/receive. You may be happy to see update rates of about 100 ms in your HMI/SCADA and could choose either communication.

- use RTU is possible
- use ASCII in case RTU is giving timeout problems on WinNT or when using slow communications media
like 300 bps or dialup modems Most OPC Servers for Modbus support ASCII as well as RTU communications.. 

What are extended register addresses?

Since the range of the analog output holding registers is 40001 to 49999, it implies that there cannot be more than 9999 registers. Although this is usually enough for most applications, there are cases where more registers would be beneficial. Registers 40001 to 49999 correspond to data addresses 0000 to 270E. If we utilize the remaining data addresses 270F to FFFF, over six times as many registers can be available, 65536 in total. This would correspond to register numbers from 40001 to 105536. Many modbus software drivers (for Master PCs) were written with the 40001 to 49999 limits and cannot access extended registers in slave devices. And many slave devices do not support maps using the extended registers. But on the other hand, some slave devices do support these registers and some Master software can access it, especially if custom software is written. 

How does 2-byte slave addressing work?

Since a single byte is normally used to define the slave address and each slave on a network requires a unique address, the number of slaves on a network is limited to 256. The limit defined in the modbus specification is even lower at 247. To get beyond this limit, a modification can be made to the protocol to use two bytes for the address. The master and the slaves would all be required to support this modification. Two byte addressing extends the limit on the number of slaves in a network to 65535. By default, the Simply Modbus software uses 1 byte addressing. When an address greater than 255 is entered, the software automatically switches to 2 byte addressing and stays in this mode for all addresses until the 2 byte addressing is manually turned off. 

How can you send events and historical data?

Enron Modbus includes commands for moving events and historical data.. 

What is Enron Modbus?

Enron Modbus is a modification to the standard Modicon modbus communication protocol developed by Enron Corporation.

See Enron Modbus for details.