Home

Grundfos CIU 250 - Energy-efficient pumps for commercial buildings

1. 00001 CIM configuration R W Configuration of the CIM module 00021 CIM status R Status registers for the CIM module 00101 MP 204 control R W Registers for control of the MP 204 00201 MP 204 status R Registers for status from the MP 204 00301 MP 204 data R Registers for measured data values from the MP 204 00701 Alarm simulation R W Registers for alarm and warning simulation a User R W The CIU 250 will not modify this area by itself All addresses contain registers Some are bit interpreted while others are 16 bit values or part of 32 bit values A data value of 65535 OxFFFF indicates not available when reading registers The value of 65535 OxFFFF does not imply a disable when writing values Each register block will be specified in more detail in the following sections 5 2 CIM configuration register block Registers in this block can be read by means of function codes 0x03 and or 0x04 They can be written as holding registers with function codes 0x06 and 0x10 Address Register name Description 00001 SlaveMinimumReplyDelay Not used An address offset that is added to all addresses above 00100 Default value is 0 Note This offset does not affect the CIM configuration register block or the CIM status 00092 RegisterOffset register block addresses The register offset value is stored in the device and will remain after a power off For most applications this offset should not be changed T
2. Address Function Byte Register Register Register Register Register Register code count 4113 HI 4113 LO 4114 HI 4114 LO 4115 HI 4115 LO 0x01 0x04 0x06 0x22 0x22 0x22 0x22 0x22 0x22 In the response the byte count is six since there are three registers of two bytes All three registers hold the value of 0x2222 11 4 Write single register 0x06 This function is used for writing a single holding register in the slave The request telegram specifies the address of the register that is to be written Register addresses start from zero meaning that a register numbered 10 is addressed as 9 The normal response is an echo of the request indicating that the value was written Example of request from master to slave Address Function code Address HI Address LO Value HI Value LO 0x01 0x06 0x10 0x00 OxAF OxFE In the request the slave with address 1 is asked to write the value of OxAFFE to the register at address 0x1000 Example of response from slave to master Address Function code Address HI Address LO Value HI Value LO 0x01 0x06 0x10 0x00 OxAF OxFE The response is an echo of the request 27 11 5 Write multiple registers 0x10 This function is used for writing a block of contiguous holding registers in the slave Register addresses start from zero meaning that a register numbered 100 is addressed as 99 Example of reguest from master to slave Address Function Start Start Quantity Quantity Byte Register Register Regi
3. 00315 Motor Temp2 0 01 K R Motor temperature measured by Pt sensor 00316 LineCurrentAsym 0 1A R Line current asymmetry 00317 CapacitorStart 1 uF R Start capacitor value 00318 CapacitorRun 1 uF R Run capacitor value 00319 CapacitorStartRef 1 pF R Start capacitor reference value result of learning function or preset 00320 CapacitorRunRef 1 pF R Run capacitorireference value result of learning function or preset 00321 LineFrequency 0 1 Hz R Line frequency 00322 VoltageAngleL1L2 1 degree R Voltage angle between L1 L2 00323 VoltageAngleL1L3 1 degree R Voltage angle between L1 L3 00324 CosPhiL1 0 01 R Current phase angle cosine for L1 00325 CosPhiL2 0 01 R Current phase angle cosine for L2 00326 CosPhiL3 0 01 R Current phase angle cosine for L3 00327 CosPhi 0 01 R Power factor 00328 PowerHl 00329 PowerLO 1 W R Power consumption 00330 EnergyHl 00331 EnergyLO 1W R Energy consumption 00332 EnergyTripCounterHl 00333 EnergyTripCounterLO 1 kWh R Energy consumption trip counter 00334 Operation Time e 00335 OperationTimeLO 1 hour R Operating time counter 00336 Total Powered Tims 1 hour R Power on time counter 00337 TotalPoweredTimeLO d 00338 OperationTimeTripCounterHl F d 00339 OperationTimeTripCounterLO ai R Operating timetrip counter 00340 NumberOfStartsHI 00341 NumberOfStartsLO unscaled R Number of starts counter 00342 NumberOfStartsTripCounterHl e 00343 NumberOfStartsTripCounterLO unscale
4. GRUNDFOS INSTRUCTIONS GRUNDFOS 714 BE gt THINK 9 INNOVATE gt Original installation and operating instructions CONTENTS 1 Symbols used in this document 2 Introduction 2 1 About this functional profile 2 2 Assumptions 2 3 Definitions and abbreviations 2 4 System diagram 2 5 Specifications 3 CIM 250 GSM module 3 1 Installation 3 2 LEDs 4 Modbus function code overview 5 Functional profile 5 1 Register block overview 5 2 CIM configuration register block 5 3 CIM status register block 5 4 MP 204 control register block 5 5 MP 204 status register block 5 6 MP 204 data register block 5 7 Alarm simulation register block 5 8 User register block 6 GSM call up connection to SCADA system 6 1 Call up functional description 6 2 SCADA PIN code protection 6 3 GSM call up options setup 7 GPRS connection 7 1 What is GPRS and Modbus TCP 7 2 Subscription 7 3 Installation 7 4 Operation 8 Fault finding 8 1 LED status 8 2 Modbus GSM GPRS communication faults 9 Data item overview 10 Grundfos alarm and warning codes 11 Modbus telegrams and function codes 11 1 Modbus telegram overview 11 2 Read holding registers 0x03 11 3 Read input registers 0x04 11 4 Write single register 0x06 11 5 Write multiple registers 0x10 11 6 Diagnostics 0x08 11 7 Diagnostics register interpretation 12 Modbus telegram examples 12 1 Diagnostics return query data 12 2 Reading the CIM confi
5. 2 Grundfos CIU 250 not supported 3 Modbus address offset is different from default value i e it differs from 0 4 Using software defined Modbus transmission speed 5 RESERVED 6 RESERVED 7 RESERVED 8 RESERVED 9 RESERVED 10 RESERVED 11 RESERVED 12 RESERVED 13 RESERVED 14 RESERVED 15 RESERVED Abit value of 1 means true unless otherwise specified The diagnostics register is read using function code 0x08 and subcode 0x02 29 12 Modbus telegram examples CRC fields are not shown in the following E examples The Modbus data model states that registers Note T numbered X are addressed in telegrams as X 1 e g register 00104 setpoint is addressed as 00103 in a Modbus telegram 12 1 Diagnostics return guery data This function is useful to ensure that the communication path and slave configuration are correct It will echo the reguest in the response In the example slave address 0x01 is used Reguest from master to slave Field Value Description Slave address 0x01 Function code 0x08 Diagnostics Subcode 0x00 Echo reguest Data OxAB Test data Data OxCD Test data Example of response from slave to master Field Value Description Slave address 0x01 Function code 0x08 Diagnostics Subcode 0x00 Echo request Data OxAB Test data Data OxCD Test data If there is no response from the slave see section 9 Data item overview 12 2 Reading the CIM configura
6. 262 679 7905 E mail satis grundfos com Ukraine TOB TH O YKPA HA 01010 Kn B Byn Mockoscbka 86 Ten 38 044 390 40 50 Qax 38 044 390 40 59 E mail ukraine grundfos com United Arab Emirates GRUNDFOS Gulf Distribution P O Box 16768 Jebel Ali Free Zone Dubai Phone 971 4 8815 166 Telefax 971 4 8815 136 United Kingdom GRUNDFOS Pumps Ltd Grovebury Road Leighton Buzzard Beds LU7 8TL Phone 44 1525 850000 Telefax 44 1525 850011 U S A GRUNDFOS Pumps Corporation 17100 West 118th Terrace Olathe Kansas 66061 Phone 1 913 227 3400 Telefax 1 913 227 3500 Usbekistan MpencTaBuTenccTBO TPYH GOC B TawkeHTe 700000 TawkeHT yn YcmaHa Hocupa 1 7 Tynuk 5 Tenecbou 3712 55 68 15 akc 3712 53 36 35 Addresses revised 11 06 2010 Being responsible is our foundation BE gt THINK gt INNOVATE gt Thinking ahead makes it possible Innovation is the essence 97693501 0710 The name Grundfos the Grundfos logo and the payoff Be Think Innovate are registrated trademarks fo ee O owned by Grundfos Management A S or Grundfos A S Denmark All rights reserved worldwide M www grundfos com GRUNDFOS 794
7. See CIM 25X SMS commands supplement to installation and operating instructions on the CD ROM supplied with the GSM module GeneralStatus Remote write access Bit 1 WriteAccess 0 No write access the PIN code is incorrect i 1 Full write access the PIN code is either correct or not enabled 00030 UnitFamily Grundfos product family 00031 UnitType Grundfos product type 00032 UnitVersion Grundfos product version 5 4 MP 204 control register block Registers in this block can be read by means of function codes 0x03 and or 0x04 They can be written as holding registers with function codes 0x06 and 0x10 The MP 204 will react to its last received command no matter whether this command was triggered via Modbus with the R100 remote control or on the MP 204 operator buttons Address Register name Description Control bit that resets alarms and warnings 0 No resetting ControlRegister 1 Resetting alarm Bit 0 ResetAlarm This control bit is triggered on rising edge only i e setting logical 0 to 1 See section 5 2 CIM configuration register block address 00005 for acknowledgement behaviour Control bit that command trips the MP 204 Status is obtained from OperationMode register 00202 ControlRegister 9 io p Bit 1 CommandedTrip 1 Trip This control bit is triggered on rising edge only i e setting logical 0 to 1 See section 5 2 CIM configuration register block address 00005 for acknowledgement behavio
8. bottom bearing Motor bearing temperature high 148 Pt100 in drive end DE 189 Signal fault level sensor 221 Fault mixer contactor feedback Motor bearing temperature high PENSON IMIT exceeded 149 Pt100 in non drive end NDE 190 e g alarm level in WW 222 Time for service mixer application 152 Communication fault add on 191 Sensor limit 2 exceeded 223 Maximum number of mixer starts module e g high level in WW application per hour exceeded SP nile cecuee Pump fault due to auxiliar 153 Fault analog output 192 e g overflow level in WW 224 P y ST component or general fault application 154 Communication fault display 193 Sensor limit 4 exceeded 225 a fault pump 155 Inrush fault 194 Sensor limit 5 exceeded 226 Communication fault UO module en Sommunication fault internal 195 Sensor limit 6 exceeded 227 Combi event frequency converter module 157 Real time clock out of order 196 Operation with reduced efficiency 228 Not used 158 SE circuit measurement 197 Operation with reduced pressure 229 Not used 159 CIM fault Communication 198 Operation with increased power 230 ME Interface Module consumption 160 GSM modem SIM card fault 199 Process out of range monitoring 231 Ethernet No IP address from estimation calculation control DHCP server 168 Signal fault pressure sensor 200 Application alarm 232 Fthernet Ee EE misuse 169 Signal fault flow sensor 201 External sensor input high 233 Ethernet IP address conflict 470 Signal fault
9. 11 1 Modbus telegram overview The maximum size of a Modbus RTU telegram is 256 bytes Telegrams must be separated by a silent interval of at least 3 5 character times The standard Modbus RTU telegram format is shown in the table below Slave address Function code Data CRC 1 byte 1 byte 0 to 252 bytes 2 bytes A telegram starts with the slave address occupying one byte The function code comes next See section 4 Modbus function code overview for supported function codes Then comes a variable size data field For each telegram a CRC is calculated and appended to the telegram two bytes total All bytes in the telegram except for the CRC itself are included in the check The CRC bytes are not shown in the examples in the following sections 26 11 2 Read holding registers 0x03 This function is used for reading holding registers from the slave The reguest telegram specifies the starting address the address of the first register to be read and the number of holding registers to read In the telegram register addresses start from zero meaning that registers numbered 1 16 are addressed as 0 15 The register data in the response message are packed two bytes per register For each register the first byte contains the high order bits while the second byte contains the low order bits Example of request from master to slave Address Function code Start address HI Start address LO Quantity HI Quantity LO 0x01 0x03 0x
10. 3 1 3 Connecting the battery and power supply Warning The CIM 250 must only be connected to SELV or SELV E circuits Warning The safety precautions listed below must be observed carefully as improper handling of the lithium ion battery may result in injury or damage from electrolyte leakage heating ignition or explosion These safety precautions must be observed Only insert the approved Grundfos battery pack 96881516 Never use this battery pack in other battery chargers Do not dismantle or modify the battery Do not heat or incinerate the battery Do not pierce crush or cause mechanical damage to the battery Do not short circuit the battery Do not allow the battery to get wet or be immersed in water Do not strike or throw the battery For long periods of storage the temperature should be below 45 C The CIM 250 is fitted with a lithium ion battery It is secured by a velcro strap which absorbs vibrations and makes it easier to replace the battery Connect the battery to the CIM 250 as shown in fig 5 If the battery is not connected the user will not receive any SMS alarm message in case of a power cut TM04 2645 2808 Fig 5 Connecting the battery The battery will only be charged if the battery E temperature is within 0 C to 45 C Switch on the power supply The CIM 250 is powered either by the CIU 250 or by the battery The LED1 is flashing yellow searc
11. OperationTimeTripCounterHI i hour Reset with ControlRegister 00339 OperationTimeTripCounterLO register 00101 bit 8 00340 NumberOfStartsHI unsealed 00341 NumberOfStartsLO 00342 NumberOfStartsTripCounterHI E Reset with ControlRegister 00343 NumberOfStartsTripCounterLO register 00101 bit 5 00344 AutoRestartsTripCounterHl geiert Reset with ControlRegister 00345 AutoRestartsTripCounterLO register 00101 bit 6 00346 InsulationResistance 10 kQ 00347 PhaseVoltageDistortion 0 01 00348 VoltageMaxLog 0 1V 00349 VoltageMinLog 0 1V Beyer canes B eset wi ontrolRegister 00350 CurrentLineMaxLog 0 1A EE SE 00351 CurrentLineMinLog 0 1A 00352 StartsHourMaxLog unscaled 00353 StartsPerHour unscaled 00354 AutoRestartsPer24h unscaled See section 9 Data item overview for more information on this register block 5 7 Alarm simulation register block Registers in this register block can be read by means of function codes 0x03 and or 0x04 Address Register name Description 00701 SimulationWarningBits1 00702 SimulationWarningBits2 00703 SimulationAlarmBits1 00704 SimulationAlarmBits2 5 8 User register block Address Register name Used to generate simulated alarms warnings Simulated alarms and warnings can be cleared with the ResetAlarm control bit register 00101 bit 0 or by pressing the R button on the MP 204 Bit interpretation like WarningBits1 register 00205 and WarningBits2 register 00206 S
12. The CIU 250 has been switched off Flashing red No communication between the CIU 250 and the MP 204 Constantly red The CIU 250 does not support the connected version of the MP 204 Constantly green The connection between the CIU 250 and the MP 204 is OK The CIU 250 must have finished its start up sequence before the LED2 can be used for status This means that a certain delay may occur before the LED2 turns green after start up of the CIU 250 4 Modbus function code overview The supported function codes are shown in the table below Type Code Hex Name 03 0x03 Read holding registers 04 0x04 Read input registers 16 bit data registers 06 0x06 Write single register 16 0x10 Write multiple registers Diagnostics 08 08 Diagnostics See section 11 6 Diagnostics 0x08 for subcodes Reading or writing coils are not supported The same data are available in both holding registers and input registers meaning that either function 0x03 or 0x04 can be used for reading data Examples illustrating the use of the supported function codes can be found in section 11 Modbus telegrams and function codes Modbus telegram examples illustrating the use of the functional profile can be found in section 12 Modbus telegram examples 5 Functional profile 5 1 Register block overview The Modbus RTU registers are grouped in the following register blocks Start address Register block Permissions Description
13. a GPRS service in the GSM mobile network Grundfos GSM Communication Interface PIN 250 Module built into the CIU 250 CIU 250 Grundfos GSM GPRS Communication Interface Unit CRC Cyclic Redundancy Check A data error detection method Circuit Switched Data Connection is established via a fixed CSD S A connection a physical circuit or a reserved data channel GENIbus Proprietary Grundfos fieldbus standard GPRS General Packet Radio Service TCP IP networking via GSM network Generic Routing Encapsulation A tunnelling protocol that can encapsulate a TCP packet type inside GRE i IP address tunnels creating a virtual point to point link between routers at remote points over the internet GSM Global System for Mobile communications LAN Local Area Network LED Light Emitting Diode Modbus is a fieldbus used worldwide Modbus RTU The RTU version is used for wired networks and for call up connections over telephone networks Modbus is a fieldbus used worldwide Modbus TCP The TCP version is adapted for use as an application protocol on TCP IP MP 204 Grundfos Motor Protector PIN Personal Identification Number SIM cards PUK Personal Unblocking Key SIM cards SELV Separated or Safety Extra Low Voltage SELV E Separated or Safety Extra Low Voltage with Earth connection SIM SIM card Subscriber Identity Module SMA SubMiniature version A Coaxial radio signal
14. connection standard TCP IP Transmission Control Protocol Internet Protocol Protocol suitable for internet communication Transmission speed Bits transferred per second UTF 8 Unicode Transformation Format character encoding VPN Virtual Private Network A network using the internet to connect nodes These systems use encryption and other security mechanisms to ensure that only authorised users can access the network and that the data cannot be intercepted 2 4 System diagram The Grundfos MP 204 is an electronic motor protector The MP 204 is connected to a Grundfos pump The system diagram gives an overview of how to connect the CIU 250 to the Grundfos MP 204 via GENIbus The CIU 250 solution is a box with a power supply module and a CIM 250 module The CIU 250 can either be mounted on a DIN rail or on a wall See fig 1 Remote communication via the CIU 250 can be established by using one of the following options Modbus RTU protocol via a GSM connection Modbus TCP protocol via a GPRS connection SMS commands from a mobile phone Infrared remote communication can also be established with the hand held Grundfos R100 remote control This is out of the scope of this manual Grundfos MP 204 with pump GSM GPRS 4 GENIbus RS 485 MP 204 motor protector CIU P R100 H z o R 3 Pump 2 Fig 1 CIU 250 solution for the MP 204 connected to a pump 2 5 Specifications The table be
15. fault 1 Fault StatusRegister Bit 4 PTC Indicates status of the PTC 0 Closed 1 Open StatusRegister Bit 5 PhaseSequence Indicates the actual phase sequence 0 Phase sequence is right L1 L2 L3 1 Phase sequence is left L3 L2 L1 00202 OperationMode Indicates the actual operating mode 0 Started on normal condition 1 Commanded trip result of control register 00101 bit 1 2 Actuator stop off result of control register 00101 bit 2 3 Protection stop 00203 SystemMode Indicates the actual system mode 0 Power up 1 Operating normal condition 2 MP 204 fault 00204 AlarmCode The Grundfos specific alarm code See section 10 Grundfos alarm and warning codes 00205 WarningBits1 Bit interpreted warnings Bit 0 Maximum voltage Bit 1 Minimum voltage Bit 2 Maximum line current Bit 3 Minimum line current Bit 4 Line current asymmetry Bit 5 RESERVED Bit 6 RESERVED Bit 7 RESERVED Bit 8 Insulation resistance Bit 9 Motor temperature Tempcon Bit 10 Motor temperature PT resistor Bit 11 RESERVED Bit 12 Maximum cos warning limit exceeded Bit 13 Minimum cos warning limit exceeded Bit 14 Starts per hour Bit 15 RESERVED 00206 WarningBits2 Bit interpreted warnings Bit 0 Start capacitor min Bit 1 Run capacitor min Bit 2 RESERVED Bit 3 Tempcon sensor signal fault Bit 4 Pt sensor
16. motor 27 e g MP 204 TH eg thermistor lt Current asymmetry Motor temperature 2 28 Battery low 71 Pt100 t mo2 112 Cos too high Turbine operation 29 impellers forced backwards 72 Hardware fault type 1 113 Cos too low 3o Change bearings i 73 Hardware shutdown HSD 120 EE winding fault specific service information single phase motors 31 Change varistor s i 74 Internal supply voltage too high 121 Auxiliary winding current too high specific service information single phase motors 32 Overvoltage 75 Internal supply voltage too low 122 Auxiliary winding current too low 24 single phase motors Code Description Code Description Code Description 123 Start capacitor low 183 Signal fault extra temperature 215 Soft pressure build up timeout single phase motors sensor 124 Run capacitor low 184 Signal fault general purpose 216 Pilot pump alarm single phase motors sensor Motor temperature 3 Alarm general purpose sensor 144 Pt100 t_mo3 185 Unknown sensor type 217 high 145 Bearing temperature high Pt100 186 Signal fault power meter sensor 218 Alarm general purpose sensor in general or top bearing low 146 Bearing temperature figh Pt190 187 Signal fault energy meter 219 Pressure relief not adequate middle bearing 147 Bearing temperature high Pt100 188 Signal fault user defined sensor 220 Fault motor contactor feedback
17. motor pump 89 Signal fault feedback sensor 1 general service information 13 Moisture alarm analog 52 Motor slip high 90 Signal fault speed sensor Electronic DC link protection d 14 activated ERP 53 Kipped motor 91 Signal fault temperature 1 sensor 15 Communication fault main system 54 Motor protection function 92 Calibration fault feedback SCADA 3 sec limit sensor 16 Other 55 Motor current protection activated 93 Signal fault sensor 2 MCP 17 AE 56 Underload 94 Limit exceeded sensor 1 be met 18 Commanded alarm standby trip 57 Dry running 95 Limit exceeded sensor 2 19 Diaphragm break dosing pump 58 Low flow 96 Setpoint signal outside range 20 Insulation resistance low 59 No flow 97 Signal fault setpoint input 21 Too many starts per hour 64 Overtemperature 98 Signal fault input Tor setpoint influence 22 Moisture switch alarm digital 65 Motor temperature 1 99 Signal fault input for analog t_m or t_mo or t_mo1 setpoint 23 Smart trim gap alarm 66 Makas control electronics 104 Software shutdown 2 Temperature too high internal Electronic rectifier protection 24 Vibration Gr frequency converter module t_m 195 activated ERP External temperature Electronic inverter protection 29 SEHR oF water temperature t_w me activated EIP Load continues even if the motor Thermal relay 1 in motor 26 has Been switched off 69 e g Klixon 110 Skew load electrical asymmetry External motor protector activated Thermal relay 2 in
18. signal fault Bit 5 Service warning Operating time trip counter has exceeded its warning limit Bit 6 Load continues even if the motor has been switched off Bits 7 15 RESERVED 00207 Relays Bit 0 ControlRelay Indicates the status of the motor control relay 0 Relay opened 1 Relay closed power on default after timeout Relays Bit 1 SignalRelay Indicates the status of the alarm signal relay 0 Relay opened power on default 1 Relay closed 11 Address Register name Description AcknowledgeRegister Bit 0 ResetAlarmAck Indicates if a ResetAlarm control bit was acknowledged by the device 0 No acknowledgement 1 Control bit acknowledged This functionality is only used when AutoAckControlBits is disabled See section 5 2 CIM configuration register block address 00005 AcknowledgeRegister Bit 1 TripAck Indicates if a commanded trip control bit was acknowledged by the device 0 No acknowledgement 1 Control bit acknowledged This functionality is only used when AutoAckControlBits is disabled See section 5 2 CIM configuration register block address 00005 AcknowledgeRegister Bits 2 4 RESERVED AcknowledgeRegister Bit 5 ResetStartCounterAck Indicates if a ResetStartCounter control bit was acknowledged by the device 0 No acknowledgement 1 Control bit acknowledged This functionality is only used when AutoAckControlBits is disabled See section 5 2 CIM
19. water in oil WIO 202 External sensor input low 236 Pump 1 fault sensor 171 Signal fault moisture sensor 203 Alarm on all pumps 237 Pump 2 fault 172 A atmospheric press re 204 Inconsistency between sensors 238 Pump 3 fault 173 Signal fault rotor position sensor 205 Level float switch sequence 239 Pump 4 fault Hall sensor inconsistency 174 Signal fault rotor origo sensor 206 Water shortage level 1 240 Lubricate bearings s specific service information 175 Aa ISmMRetamirS sensor 207 Water leakage 241 Motor phase failure 176 Signal fault temperature 3 sensor 208 Cavitation 242 Automatic motor model t_mo3 recognition failed Motor relay has been forced 177 Signal fault Smart trim gap sensor 209 Non return valve fault 243 manually operated commanded 178 Signal fault vibration sensor 210 Overpressure 244 Fault On Off Auto switch Signal fault bearing temperature 179 sensor Pt100 general or 211 Underpressure 245 Pump continuous runtime too long top bearing User defined relay has been 180 Signal fault bearing temperature 212 Diaphragm tank precharge 246 forced manually operated sensor Pt100 middle bearing pressure out of range commanded Signal fault PTC sensor Power on notice device system 181 short circuited 213 ES 24r has been switched off 482 Signal fault bearing temperature 244 Water shortage level 2 248 Fault battery UPS sensor Pt100 bottom bearing 25 11 Modbus telegrams and function codes
20. 00 0x6B 0x00 0x03 In the request the slave with address 1 is asked to deliver three contiguous registers starting from address 0x006b 107 meaning register 108 Example of response from slave to master Function Register Register Register Register Register Register Agaress code Byte count 408 HI 108 LO 109 HI 109 LO 110 HI 110 LO 0x01 0x03 0x06 0x00 0x01 0x00 0x01 0x00 0x01 In the response the byte count is six since there are three registers of two bytes All three registers hold the value of 0x0001 11 3 Read input registers 0x04 This function is used for reading input registers from the slave Input registers are read only registers by definition The reguest telegram specifies the starting address the address of the first register to be read and the number of holding registers to read In the telegram register addresses start from zero meaning that registers numbered 1 16 are addressed as 0 15 The register data in the response message are packed two bytes per register For each register the first byte contains the high order bits while the second byte contains the low order bits Example of request from master to slave Address Function code Start address HI Start address LO Quantity HI Quantity LO 0x01 0x04 0x10 0x10 0x00 0x03 In the request the slave with address 1 is asked to deliver three contiguous registers starting from address 0x1010 4112 meaning register 4113 Example of response from slave to master
21. CIU 250 connected to an MP 204 Fault LED status Possible cause Remedy 1 Both LEDs LED1 and LED2 remain off a The CIU 250 is defective Replace the CIU 250 when the power supply is connected 2 The LED for internal communication a No internal communication between the Check the cable connection between the LED2 is flashing red CIU 250 and the MP 204 MP 204 and the CIU 250 Check that the individual conductors have been fitted correctly Check the power supply to the MP 204 3 The LED for internal communication a The CIU 250 does not support the Contact the nearestGiindios compan LED2 is constantly red connected version of the MP 204 pany 4 The LED for GSM GPRS a The SIM card has not been inserted Insert the SIM card communication LED1 is flashing See section 3 1 2 Inserting the SIM card yellow See signal 1 in fig 6 on page 7 p The SIM card has not been inserted Insert the SIM card correctly See section 3 1 2 Inserting the SIM card c The SIM card PIN code is not correct Enter the correct PIN code See section 3 1 2 Inserting the SIM cara d No connection to the GSM network Check the connection to the antenna Check the GSM coverage of the area with for instance a mobile phone Use an external antenna and experiment with the position 5 The LED for GSM GPRS a The CIM 250 has not been initialised Follow the configuration procedure in communication is pulsating yellow wi
22. Glenmarie Industrial Park 40150 Shah Alam Selangor Phone 60 3 5569 2922 Telefax 60 3 5569 2866 M xico Bombas GRUNDFOS de M xico S A de CN Boulevard TLC No 15 Pargue Industrial Stiva Aeropuerto Apodaca N L 66600 Phone 52 81 8144 4000 Telefax 52 81 8144 4010 Netherlands GRUNDFOS Netherlands Veluwezoom 35 1326 AE Almere Postbus 22015 1302 CA ALMERE Tel 31 88 478 6336 Telefax 31 88 478 6332 e mail info_gni grundfos com New Zealand GRUNDFOS Pumps NZ Ltd 17 Beatrice Tinsley Crescent North Harbour Industrial Estate Albany Auckland Phone 64 9 415 3240 Telefax 64 9 415 3250 Norway GRUNDFOS Pumper A S Stromsveien 344 Postboks 235 Leirdal N 1011 Oslo Tif 47 22 90 47 00 Telefax 47 22 32 21 50 Poland GRUNDFOS Pompy Sp z 0 0 ul Klonowa 23 Baranowo k Poznania PL 62 081 Przezmierowo Tel 48 61 650 13 00 Fax 48 61 650 13 50 Portugal Bombas GRUNDFOS Portugal S A Rua Calvet de Magalh es 241 Apartado 1079 P 2770 153 Paco de Arcos Tel 351 21 440 76 00 Telefax 351 21 440 76 90 Romania GRUNDFOS Pompe Romania SRL Bd Biruintei nr 103 Pantelimon county Ilfov Phone 40 21 200 4100 Telefax 40 21 200 4101 E mail romania grundfos ro Russia OOO pyHaAcboc Poccna 109544 Mockea yn LUkonbHaa 39 Ten 7 495 737 30 00 564 88 00 akc 7 495 737 75 36 564 88 11 E mail grundfos moscow grundfos com Serbia GRUNDFOS Predstavni tvo Beogr
23. Zone Shanghai 200336 PRC Phone 86 021 612 252 22 Telefax 86 021 612 253 33 Croatia GRUNDFOS CROATIA doo Cebini 37 Buzin HR 10010 Zagreb Phone 385 1 6595 400 Telefax 385 1 6595 499 www grundfos hr Czech Republic GRUNDFOS s r o ajkovsk ho 21 779 00 Olomouc Phone 420 585 716 111 Telefax 420 585 716 299 Denmark GRUNDFOS DK A S Martin Bachs Vej 3 DK 8850 Bjerringbro Tif 45 87 50 50 50 Telefax 45 87 50 51 51 E mail info_GDK grundfos com www grundfos com DK Estonia GRUNDFOS Pumps Eesti OU Peterburi tee 92G 11415 Tallinn Tel 372 606 1690 Fax 372 606 1691 Finland OY GRUNDFOS Pumput AB Mestarintie 11 FIN 01730 Vantaa Phone 358 3066 5650 Telefax 358 3066 56550 France Pompes GRUNDFOS Distribution S A Parc d Activit s de Chesnes 57 rue de Malacombe F 38290 St Quentin Fallavier Lyon T l 33 4 74 82 15 15 T l copie 33 4 74 94 10 51 Germany GRUNDFOS GMBH Schl terstr 33 40699 Erkrath Tel 49 0 211 929 69 0 Telefax 49 0 211 929 69 3799 e mail infoservice grundfos de Service in Deutschland e mail kundendienst grundfos de Greece GRUNDFOS Hellas A E B E 20th km Athinon Markopoulou Av P O Box 71 GR 19002 Peania Phone 0030 210 66 83 400 Telefax 0030 210 66 46 273 Hong Kong GRUNDFOS Pumps Hong Kong Ltd Unit 1 Ground floor Siu Wai Industrial Centre 29 33 Wing Hong Street amp 68 King Lam Street Cheung Sha W
24. ad Dr Milutina Ivkovi a 2a 29 YU 11000 Beograd Phone 381 11 26 47 877 11 26 47 496 Telefax 381 11 26 48 340 Singapore GRUNDFOS Singapore Pte Ltd 24 Tuas West Road Jurong Town Singapore 638381 Phone 65 6865 1222 Telefax 65 6861 8402 Slovenia GRUNDFOS d o o landrova 8b Sl 1231 Ljubljana rnu e Phone 386 1 568 0610 Telefax 386 1 568 0619 E mail slovenia grundfos si South Africa Corner Mountjoy and George Allen Roads Wilbart Ext 2 Bedfordview 2008 Phone 27 11 579 4800 Fax 27 11 455 6066 E mail Ismart grundfos com Spain Bombas GRUNDFOS Espa a S A Camino de la Fuentecilla s n E 28110 Algete Madrid Tel 34 91 848 8800 Telefax 34 91 628 0465 Sweden GRUNDFOS AB Box 333 Lunnagardsgatan 6 431 24 M lndal Tel 46 0 771 32 23 00 Telefax 46 0 31 331 94 60 Switzerland GRUNDFOS Pumpen AG Bruggacherstrasse 10 CH 8117 Fallanden ZH Tel 41 1 806 8111 Telefax 41 1 806 8115 Taiwan GRUNDFOS Pumps Taiwan Ltd 7 Floor 219 Min Chuan Road Taichung Taiwan R O C Phone 886 4 2305 0868 Telefax 886 4 2305 0878 Thailand GRUNDFOS Thailand Ltd 92 Chaloem Phrakiat Rama 9 Road Dokmai Pravej Bangkok 10250 Phone 66 2 725 8999 Telefax 66 2 725 8998 Turkey GRUNDFOS POMPA San ve Tic Ltd Sti Gebze Organize Sanayi B lgesi Ihsan dede Caddesi 2 yol 200 Sokak No 204 41490 Gebze Kocaeli Phone 90 262 679 7979 Telefax 90
25. an Kowloon Phone 852 27861706 27861741 Telefax 852 27858664 Hungary GRUNDFOS Hung ria Kft Park u 8 H 2045 T r kb lint Phone 36 23 511 110 Telefax 36 23 511 111 India GRUNDFOS Pumps India Private Limited 118 Old Mahabalipuram Road Thoraipakkam Chennai 600 096 Phone 91 44 2496 6800 Indonesia PT GRUNDFOS Pompa JI Rawa Sumur III Blok III CC 1 Kawasan Industri Pulogadung Jakarta 13930 Phone 62 21 460 6909 Telefax 62 21 460 6910 460 6901 Ireland GRUNDFOS Ireland Ltd Unit A Merrywell Business Park Ballymount Road Lower Dublin 12 Phone 353 1 4089 800 Telefax 353 1 4089 830 Italy GRUNDFOS Pompe Italia S r l Via Gran Sasso 4 I 20060 Truccazzano Milano Tel 39 02 95838112 Telefax 39 02 95309290 95838461 Japan GRUNDFOS Pumps K K Gotanda Metalion Bldg 5F 5 21 15 Higashi gotanda Shiagawa ku Tokyo 141 0022 Japan Phone 81 35 448 1391 Telefax 81 35 448 9619 Korea GRUNDFOS Pumps Korea Ltd 6th Floor Aju Building 679 5 Yeoksam dong Kangnam ku 135 916 Seoul Korea Phone 82 2 5317 600 Telefax 82 2 5633 725 Latvia SIA GRUNDFOS Pumps Latvia Deglava biznesa centrs Augusta Deglava iel 60 LV 1035 R ga T lr 371 714 9640 7 149 641 Fakss 371 914 9646 Lithuania GRUNDFOS Pumps UAB Smolensko g 6 LT 03201 Vilnius Tel 370 52 395 430 Fax 370 52 395 431 Malaysia GRUNDFOS Pumps Sdn Bhd 7 Jalan Peguam U1 25
26. ase motor Phase voltage 00303 PhaseVoltageL3 01V R Three phase moton Phase voltage for L3 Single phase motor Auxiliary winding voltage 00304 PhaseVoltageMean 01V R Three phase motor Mean of the phase voltages Single phase motor Phase voltage for L1 21 Register Identifier Scale R W Description 00305 LineVoltageL1L2 01V R Three phase motor Voltage between L1 L2 Single phase motor Not available 00306 LineVoltageL2L3 01V R Three phase motor Voltage between L2 L3 Single phase motor Not available 00307 LineVoltageL3L1 01V R Three phase motor Voltage between L3 L1 Single phase motor Not available 00308 LineVoltageMean 0 1V R Three phase motor Mean of the line voltages Single phase motor Not available 00309 LineCurrentL1 01A R Three phase motor Line current for L1 Single phase motor Neutral current 00310 LineCurrentL2 01A R Three phase motor Line current for L2 i Single phase motor Current in mains winding 00311 LineCurrentL3 01A R Three phase motor Line current for L3 n Single phase motor Current in auxiliary winding 00312 Vergies n 01A R Three phase motor Mean of the line currents Single phase motor Line current for L1 00313 LineC trentStai 01A R Line start current measured as the peak of the rms value for a period 00314 Motor emp 0 01 K R Motor temperature measured by Tempcon
27. at the correct PIN code ScadaPinCode register 00011 has been written Writing the correct PIN code value will trigger the write access control and write access will be open which can be verified with GeneralStatus register 00029 bit 1 1 For call up connections with PIN code protection the ScadaPinCode register has to be written each time a new call up is made 6 3 GSM call up options setup To prepare the CIU 250 for Modbus communication with a SCADA system via GSM some settings have to be made via SMS commands Setting a SCADA PIN code SETSCADACODE lt access code gt will enable write access protection Default is an empty SCADA PIN code meaning no protection Activating the SCADA PIN code SCADACODE lt ON OFF gt Default is Off Selecting the Modbus address MODBUSADDR lt 1 247 gt Default value is 231 To verify the SCADA GSM setting after completion the SMS command SCADA can be used For details about the use of SMS commands see CIM 25X SMS commands supplement to installation and operating instructions on the CD ROM supplied with the GSM module 15 7 GPRS connection 7 1 What is GPRS and Modbus TCP GPRS General Packet Radio Service is a wireless always on connection that remains active as long as the CIU 250 is within range of the service With GPRS it is possible to establish a wireless connection to the internet and thus enable a remote connection to a SCADA system computer or ano
28. cale Description 00751 00800 UserRegisters 14 This area is for device labelling by the user SCADA system The CIU 250 will not modify this area by itself The user register values are stored in the device and will remain after a power off unscaled 6 GSM call up connection to SCADA system 6 1 Call up functional description The call up function is used for SCADA system communication via the GSM network Connection is established when the SCADA system dials the CIU 250 The CIU 250 will automatically pick up the phone call and wait for data traffic in the form of Modbus RTU telegrams If legal data traffic has not been initiated within one minute the CIU 250 will hang up the line This silence timeout is active during the whole communication session Whenever the SCADA system has completed the Modbus communication it hangs up the line This is detected by the CIU 250 which also hangs up the line and the call up communication session is thereby completed See fig 7 GSM network e g SCADA CIU 250 Silence timeout after 1 min without communication lt Modbus communication gt imi WE Hangup Hangs ur the line 2 Session E completed Fig 7 Illustration of a GSM call up session 6 2 SCADA PIN code protection It is always possible to get read access via Modbus but if the CIU 250 is SCADA PIN code protected GeneralStatus register 00029 bit 0 1 write access requires th
29. configuration register block address 00005 Indicates if a ResetRestartCounter control bit was acknowledged by the device 00208 0 No acknowledgement AcknowledgeRegister 2 Bit 6 ResetRestartCounterack Control bit acknowledged This functionality is only used when AutoAckControlBits is disabled See section 5 2 CIM configuration register block address 00005 Indicates if a ResetLogs control bit was acknowledged by the device AcknowledgeRegister d No acknowledgement Bit 7 ResetLogsAck 1 Control bit acknowledged 9 This functionality is only used when AutoAckControlBits is disabled See section 5 2 CIM configuration register block address 00005 Indicates if a ResetHourCounter control bit was acknowledged by the device AcknowledgeRegister o No acknowledgement Bit 8 ResetHourCounterack 17 Control bit acknowledged This functionality is only used when AutoAckControlBits is disabled See section 5 2 CIM configuration register block address 00005 Indicates if a ResetEnergyCounter control bit was acknowledged by the device AcknowledgeRegister 2 Ne acknowledgement Bit 9 ResetEnergyCounterAck Control bit acknowledged 7 gy This functionality is only used when AutoAckControlBits is disabled See section 5 2 CIM configuration register block address 00005 00236 GSMSignalLevelActual Actual level of GSM signal 00237 GSMSignalLevelAverage Average level of GSM signal 00238 IPAddressHI ere 00239 IPA
30. ct family 00031 UnitType unscaled Grundfos product type 00032 UnitVersion unscaled Grundfos product version MP 204 control register block e Register for control bits GAR ControlRegister bits w See section 5 4 MP 204 control register block MP 204 status register block e Actual modes Ge SES BIS B See section 5 5 MP 204 status register block Actual MP 204 operating mode 00202 OpgratidnMode en B See section 5 5 MP 204 status register block Actual MP 204 system mode SE systemMode E R See section 5 5 MP 204 status register block Grundfos specific alarm code 00204 EE SEN R See section 11 Modbus telegrams and function codes gt Warning bits 09205 WarningBits4 pits R See section 5 5 MP 204 status register block F Warning bits 00206 Warningbits2 bits R See section 5 5 MP 204 status register block 00207 Relays bits R See section 5 5 MP 204 status register block A register that contains acknowledgement bits corresponding 00208 AcknowledgeRegister bits R to control bits See section 5 5 MP 204 status register block 00236 GSMSignalLevelActual 1 Actual level of GSM signal 00237 GSMSignalLevelAverage 1 Average level of GSM signal 00238 IPAddressHI A 00239 IPAddressLO unscaled IP address for GPRS communication MP 204 data register block Three phase motor Phase voltage for L1 00301 FhaseVoltagel1 OSEN R Single phase motor Equals 0 V reference 00302 PhaseVoltageL2 01V R Three phase motor Nase voltage for L2 Single ph
31. d R Number of starts trip counter 00344 AutoRestartsTripCountHl F 00345 AutoRestartsTripCountLO unscaled R Number of automatic restarts trip counter 00346 InsulationResistance 10 kQ R Motor insulation resistance 00347 PhaseVoltageDistortion 0 01 R Phase voltage distortion 00348 VoltageMaxLog 01V R Three phase motor Logged maximum voltage Single phase motor Logged maximum phase voltage 00349 VoltageMinLog 01V R Three phase motor Logged minimum voltage Single phase motor Logged minimum phase voltage 00350 CurrentLineMaxLog 0 1A R Logged maximum line current 00351 CurrentLineMinLog 0 1A R Logged minimum line current 00352 StartsHourMaxLog unscaled R Logged maximum number of starts per hour 00353 StartsPerHour unscaled R Number of starts per hour 22 Register Identifier Scale R W Description 00354 AutoRestartsPer24h unscaled R Number of automatic restarts per 24 hours Alarm simulation register block 00701 SimulationWarningBits1 bits R W Used to generate simulated warnings or alarms 00702 SimulationWarningBits2 bits R W Simulated warnings or alarms can be reset with the 00703 Sansone Bite bi RW ResetAlarm control bit register 00101 bit 0 or by pressing the imulationAlarmBits its R button on the MP 204 00704 SimulationAlarmBits2 bits R W Bit interpretation like WarningBits1 register 00205 and WarningBits2 register 00206 User register block This area is for device labelling by t
32. ddressLO IP address for GPRS communication 12 5 6 MP 204 data register block Registers in this block can be read by means of function codes 0x03 and or 0x04 They are read only The table below shows the availability of the data depending on system configuration Address Register name Scale Notes 00301 PhaseVoltageL1 0 1V 00302 PhaseVoltageL2 0 1V 00303 PhaseVoltageL3 0 1V 00304 PhaseVoltageMean 0 1V 00305 LineVoltageL1L2 0 1V 00306 LineVoltageL2L3 0 1V 00307 LineVoltageL3L1 0 1V 00308 LineVoltageMean 0 1V 00309 LineCurrentL1 0 1A 00310 LineCurrentL2 0 1A 00311 LineCurrentL3 0 1A 00312 LineCurrentMean 0 1A 00313 LineCurrentStart 0 1A 00314 MotorTemp1 0 01 K 00315 MotorTemp2 0 01 K 00316 LineCurrentAsym 0 1 00317 CapacitorStart 1 uF 00318 CapacitorRun 1 uF 00319 CapacitorStartRef 1 uF 00320 CapacitorRunRef 1 uF 00321 LineFrequency 0 1 Hz 00322 VoltageAngleL1L2 1 degree 00323 VoltageAngleL1L3 1 degree 00324 CosPhiL1 0 01 00325 CosPhiL2 0 01 00326 CosPhiL3 0 01 00327 CosPhi 0 01 00328 PowerHl A W 00329 PowerLO 00330 EnergyHl 00331 E o i 00332 EnergyTripCounterHl 1 kWh Reset with ControlRegister 00333 EnergyTripCounterLO register 00101 bit 9 00334 OperationTimeHl i hour 00335 OperationTimeLO 00336 TotalPoweredTimeHI i hour 00337 TotalPoweredTimeLO 00338
33. dy for a client e g SCADA system to establish a socket connection and begin TCP IP data exchange When a client connects the CIU 250 the connection state will change to Connected and the GSM status LED1 will indicate when data transfer takes place See section 3 2 LEDs When no GPRS data is being transferred the connection states Attached Context active and Connected All show the same LED1 status short pulse A client e g SCADA establishes connection to a CIU 250 by specifying the IP address and the TCP port 502 Data transfer is always initiated from the client in the form of a Modbus TCP telegram embedded in a TCP IP frame and directed to TCP port 502 To the client software the connection to the CIU 250 is completely transparent The protection against unauthorised data access is high The access to the GPRS network from the internet can only take place via the VPN tunnel See fig 10 Moreover data transfer requires a Modbus master client knowledge of the Modbus functional profile and the use of a SCADA PIN code if enabled The CIU 250 supervises the GPRS system to ensure that it is still working An automatic procedure ensures restarting of the CIU 250 and repetition of the GPRS connection sequence in case a deadlock situation has occurred It also closes down socket connections that are left open by the client and unused for more than 24 hours It is possible to use SMS communication while GPRS communication is active Howe
34. e installation make sure that the power supply has been switched off and that it cannot be accidentally switched on 3 1 1 Fitting a GSM antenna An antenna must be connected to the CIM 250 to establish connection to the GSM network If the CIU 250 is installed in a metal control cabinet Grundfos recommends to fit an external GSM antenna Grundfos offers different kinds of antennas No antenna is supplied with the CIU 250 It has to be ordered separately External antenna Connect the antenna cable to the SMA connection pos 1 of the CIM 250 The antenna must be installed outside the control cabinet in a position with good reception conditions Oo TITON TMO4 2644 2808 Fig 3 Fitting an external GSM antenna Pos Description 1 SMA connection for GSM antenna 2 Antenna cable for external GSM antenna 3 1 2 Inserting the SIM card Before inserting the SIM card into the CIM 250 remove the PIN code or set the PIN code to 4321 Procedure 1 Insert the SIM card into a mobile phone 2 Remove the PIN code from the SIM card or set the PIN code to 4321 See the manual of the mobile phone 3 Insert the SIM card into the CIM 250 See fig 4 The slanted edge of the SIM card must point Note downwards E The connectors on the SIM card must point downwards towards the CIM 250 See fig 4 TMO4 2643 2808 Fig 4 Inserting the SIM card Pos Description 1 SIM card holder 2 SIM card
35. ed with GeneralStatus register 00029 bit 1 1 9 Data item overview bits enum The data item is bit interpreted The data item has a pre defined enumeration unscaled The data item is unscaled e g a number a counter etc Register Identifier Scale R W Description CIM configuration register block 00001 SlaveMinimumReplyDelay ms R W Minimum Modbus reply delay in ms 00002 RegisterOffset unscaled R W Modbus address offset 00003 ModbusAddress unscaled R W Is used if the rotary switch value is invalid 00004 ModbusBitRate unscaled R W Software defined transmission speed 00005 AutoAckControlBits bool R W Setup of event acknowledgement behaviour r PIN code for SCADA systems etc oogt eelere ES See section 5 3 CIM status register block CIM status register block 00021 GrundfosCRCErrorCnt unscaled R Grundfos GENIbus CRC error counter 00022 GrundfosDataErrorCnt unscaled R Grundfos GENlbus data error counter 00023 VersionNumber unscaled R Version number 00024 ActualModbusAddress unscaled R Actual Modbus slave address 00025 GrundfosTXcountHl 00026 GrundfosTXcountLO unscaled R Grundfos GENIbus transmit counter 00027 GrundfosRXcountHI 00028 GrundfosRXcountLO unscaled R Grundfos GENIbus receive counter PIN code functionality 90929 SeneralStatys pools See section 5 3 CIM status register block 00030 UnitFamily unscaled Grundfos produ
36. eneric Routing Encapsulation which you will also get from the service provider 7 3 Installation To prepare the CIU 250 for GPRS communication some settings have to be made via SMS commands Select Access Point Name APN lt ascii string gt This is always mandatory Select Username USERNAME lt ascii string gt The need for a username depends on your operator and the type of subscription Select Password PASSWORD lt ascii string gt The need for a password depends on your operator and the type of subscription Some advanced GPRS settings have default values that usually work but in special cases it might be necessary to change some of them This is also done via SMS commands Select Authentication AUTHENTICATION lt NORMAL SECURE gt Only used by some service providers Default value is Normal Select Connection type CONNECTION lt SERVER CLIENT DISABLE gt Default value is Server Set GPRS roaming GPRSROAMING lt ON OFF gt Default value is Off Select Modbus TCP port number MODBUSPORT lt port no gt Default value is 502 Select GENIpro port number GENIPROPORT lt port no gt Default value is 49152 This is only relevant when using Grundfos PC Tools It is possible to configure the GPRS connection with a single multi parameter command SETGPRS lt parameter 1 parameter 2 parameter 3 gt lt parameters gt lt APN gt lt Modbus port gt lt GENlpro port gt lt u
37. guration register block 12 3 Tripping the MP 204 12 4 Resetting an alarm 1 Symbols used in this document Page DOAN NO RWNHNND DN ee Cee ee ch SS Go a Oo 3 ch sch annua A A A oe 4 OO OO 0 Boe ooo N N A WWWWWONNNNNNN ND OO OO OO oO OO OO JJ JO OD If these safety instructions are not observed and ensure safe operation Caution it may result in malfunction or damage to the equipment Note Notes or instructions that make the job easier 2 Introduction 2 1 About this functional profile This functional profile describes the CIU 250 GSM GPRS Communication Interface Unit 250 for the Grundfos MP 204 motor protector In the following the CIU 250 is referred to as communication interface The data in this document are subject to change without prior notice Grundfos cannot be held responsible for any problems caused directly or indirectly by using information in this functional profile 2 2 Assumptions This functional profile assumes that the reader is familiar with commissioning and programming Modbus devices The reader should also have some basic knowledge of the Modbus protocol and technical specifications It is also assumed that an existing GSM GPRS network with a Modbus master is present 2 3 Definitions and abbreviations Ob Prefix Ob indicates a binary number Prefix Ox indicates a hexadecimal Ox number Access Point Name APN Name used to identify
38. he user SCADA system 00751 The CIU 250 will not modify this area by itself 00800 UserRegisters e RINY The user register values are stored in the device and will remain after a power off 23 10 Grundfos alarm and warning codes This is a general Grundfos alarm and warning code list Not all codes are available in the MP 204 Code Description Code Description Code Description Gas in pump head deaerating 1 Leakage current 35 76 Internal communication fault problem 2 Missing phase 36 Discharge valve leakage 77 Se faults twin head 3 External fault signal 37 Suction valve leakage 78 Fault speed plug 4 Too many restarts 38 Vent valve defective 79 Functional fault add on module 5 Regenerative braking 40 Undervoltage 80 Hardware fault type 2 6 Mains fault 41 Undervoltage transient 81 Verification error data area RAM Verification error code area 7 Too many hardware shutdowns 42 Cut in fault dV dt 82 ROM FLASH PWM switching frequency Verification error FE parameter 8 gett 45 Voltage asymmetry 83 area EEPROM 9 Phase seguence reversal 48 Overload 84 Memory access error TT on s e Verification error BE parameter 10 Communication fault pump 49 Overcurrent i line i dc i mo 85 area EEPROM 11 Water in oil fault motor oil 507 Motor protection function 88 Sensor fault general shutdown mpf 12 Time Tot Gre d L 51 Blocked
39. he value is stored in the device and will remain after a power off 00003 SetModbusAddress Legal values are 1 247 Default value of this register is OxE7 231 which should normally not be changed 00004 SoftwareDefinedBitRate Not used Used to select the behaviour of control bit acknowledgements from the CIU 250 0 Disabled Control bits are not automatically lowered when accepted by the device The user must lower the triggered control bit manually before the control bit can be triggered again 1 Enabled Control bits are automatically lowered when accepted by the device The user does not 00005 AutoAckControlBits have to lower it manually default General acknowledgement bit information register 00208 when automatic acknowledgement is disabled Acknowledgement bits will be set when the CIU 250 has accepted the corresponding control bits and the user can clear the control bits The acknowledgement bit will automatically be cleared to 0 by the CIU 250 when the control bit is cleared by the master device and a new command can be attempted by raising the control bit again 00006 ReadWriteSeparation Not used 00007 00008 RESERVED 00009 SoftwareDefinedParity Not used 00010 SoftwareDefinedStopBit Not used PIN code for SCADA systems etc If GeneralStatus ScadaPinCodeEnabled register 00029 bit 0 is enabled the correct PIN code must be entered in this register in order to gain access to remote control and 00011 ScadaPinCode configurati
40. hing for GSM network When the connection to the GSM network has been established the LED1 will pulsate yellow GSM network active See fig 6 The LED2 must be constantly green indicating that the CIM 250 has been fitted correctly in the CIU 250 3 1 4 Configuration For software configuration of the CIU 250 which includes setting of SMS functions and SCADA communication parameters see CIM 25X SMS commands supplement to installation and operating instructions on the CD ROM supplied with the GSM module 3 2 LEDs The CIM 250 GSM module has two LEDs See fig 2 Yellow green status LED LED1 for GSM GPRS communication Red green status LED LED2 for internal communication between the CIU 250 and the MP 204 LED1 yellow green Searching for GSM network 1 GSM network active 2 Call up connection active 3 Data via GPRS A Data via call up connection 5 SMS message 6 TM04 5194 2809 _ Yellow El Green Fig 6 LED status Pos Status Description 1 Flashing yellow Searching for GSM network 2 Pulsating yellow single pulse Connection to the GSM network has been established 3 Constantly yellow Call up connection has been established 4 Pulsating green single pulse Data are exchanged via GPRS 5 Pulsating green double pulse Data are exchanged via the call up connection 6 Green 3 sec Sending or receiving an SMS message LED2 red green Status Description Off
41. ith exception a The master is trying to read or write an Avoid reading or writing invalid data response 0x02 Invalid data address invalid data address If a master tries to addresses read register addresses that are not listed in the tables the slave will respond with this exception response Some masters may automatically try to read large blocks in one telegram which will cause problems if some of the registers in the block are not supported An example would be reading the CIM configuration and CIM status register blocks in one telegram this is not possible since there are unused addresses among the blocks 4 The slave returns data value OxFFFF a The availability of data will in some cases See section 9 Data item overview 65535 depend on a configuration or the actual for available data conditions of the system e g trying to request data from a pump which is not present will return data not available OxFFFF b With its present configuration or operating mode the MP 204 is unable to supply the requested data 5 The slave does not react to control a The CIU 250 is SCADA PIN code Write access requires a correct PIN code actions or to writing of settings 20 protected GeneralStatus register 00029 bit 0 1 and an incorrect PIN code has been written ScadaPinCode register 00011 Writing the correct PIN code value will trigger the write access control and write access will be open which can be verifi
42. low gives an overview of the specifications for the Grundfos CIU 250 For further details please refer to the specific sections of this functional profile General data Description Comments Ambient humidity 30 to 95 Relative non condensing Battery lithium ion The battery will only be charged if the battery temperature is within 0 C to 45 C GENlbus visual diagnostics LED2 Will be in one of these states Off constantly green flashing red constantly red See section 3 2 LEDs Modbus GSM GPRS specifications Data protocol Modbus RTU Modbus TCP Modbus connection type GSM GPRS Slave address Factory 231 0xE7 Can be changed via Modbus register 00003 SetModbusAddress Will be in one of these states GSM GPRS visual diagnostics LED1 Off flashing green flashing red constantly red See section 3 2 LEDs Maximum Modbus telegram size 256 bytes Node address and CRC included 3 CIM 250 GSM module TM04 2642 1210 Fig 2 CIM 250 GSM module top side view Pos Designation Description Battery socket SIM card holder SMA connection for GSM antenna A WIN A Yellow green status LED for LEDA GSM GPRS communication Red green status LED for internal communication between the CIU 250 and MP 204 5 LED2 Reset button Keep the button pressed for 5 seconds to return to default settings 6 sW1 3 1 Installation Befor
43. mericana km 37 500 Lote 34A 1619 Garin Pcia de Buenos Aires Phone 54 3327 414 444 Telefax 54 3327 411 111 Australia GRUNDFOS Pumps Pty Ltd P O Box 2040 Regency Park South Australia 5942 Phone 61 8 8461 4611 Telefax 61 8 8340 0155 Austria GRUNDFOS Pumpen Vertrieb Ges m b H GrundfosstraRe 2 A 5082 Gr dig Salzburg Tel 43 6246 883 0 Telefax 43 6246 883 30 Belgium N V GRUNDFOS Bellux S A Boomsesteenweg 81 83 B 2630 Aartselaar T l 32 3 870 7300 T l copie 32 3 870 7301 Belorussia MpencTaBuTenccTBO TPYH GOC B Muncke 220123 Munck yn B Xopyxe 22 ob 1105 Ten 37517 233 97 65 axc 37517 233 97 69 E mail grundfos_minsk mail ru Bosnia Herzegovina GRUNDFOS Sarajevo Trg Heroja 16 BiH 71000 Sarajevo Phone 387 33 713 290 Telefax 387 33 659 079 e mail grundfos bih net ba Brazil BOMBAS GRUNDFOS DO BRASIL Av Humberto de Alencar Castelo Branco 630 CEP 09850 300 Sao Bernardo do Campo SP Phone 55 11 4393 5533 Telefax 55 11 4343 5015 Bulgaria Grundfos Bulgaria EOOD Slatina District Iztochna Tangenta street no 100 BG 1592 Sofia Tel 359 2 49 22 200 Fax 359 2 49 22 201 email bulgaria grundfos bg Canada GRUNDFOS Canada Inc 2941 Brighton Road Oakville Ontario L6H 6C9 Phone 1 905 829 9533 Telefax 1 905 829 9512 China GRUNDFOS Pumps Shanghai Co Ltd 50 F Maxdo Center No 8 XingYi Rd Hongqiao development
44. ntrolRegister value Value LO 0x02 2 0x0002 Example of response from slave to master Field Value Description Slave address 0x01 Function code 0x06 Write single register Start address HI 0x00 ControlRegister address Start address LO 0x64 00101 0x0065 Value HI 0x00 ControlRegister value Value LO 0x02 2 0x0002 If there is no response from the slave see section 9 Data item overview 12 4 Resetting an alarm This section shows how to set the control bit that resets MP 204 alarms In the example slave address 0x01 is used To reset an alarm the ControlRegister register address 00101 bit 0 must be raised Hence the value to set is Ob0000000000000001 0x0001 Request from master to slave Field Value Description Slave address 0x01 Function code 0x06 Write single register Start address HI 0x00 ControlRegister address Start address LO 0x64 00101 0x0065 Value HI 0x00 ControlRegister value Value LO 0x01 1 0x0001 Example of response from slave to master Field Value Description Slave address 0x01 Function code 0x06 Write single register Start address HI 0x00 ControlRegister address Start address LO 0x64 00101 0x0065 Value HI 0x00 ControlRegister value Value LO 0x01 1 0x0001 If there is no response from the slave see section 9 Data item overview Subject to alterations Argentina Bombas GRUNDFOS de Argentina S A Ruta Pana
45. ode a Restart communications command code 0x08 subcode 0x01 must be issued Ox0A Clear counters and diagnostics register Clears all counters and the diagnostics register These are also cleared on power up restart 0x0B Return bus message count Returns the number of messages detected by the slave 0x0C Return bus CRC error count Returns the number of CRC errors in the slave 0x0D Return bus exception count Returns the number of Modbus exception responses that the slave has transmitted 0x0E Return slave message count Returns the number of messages that the slave has processed OxOF Return slave no response count Returns the number of messages for which the slave has sent no response 0x12 Return bus character overrun count Returns the number of overruns in the slave 0x14 Clear overrun counter Clears the overrun counter This is also cleared on power up restart Example of response from master to slave Address Function code Subcode Data Data 0x01 0x08 0x00 OxAB 0xCD The response is identical to the request Example of response from slave to master Address Function code Subcode Data Data 0x01 0x08 0x00 OxAB 0xCD 28 11 7 Diagnostics register interpretation The diagnostics register is interpreted as follows Description Bit 0 Internal communication failure with the Grundfos CIU 250 1 EEPROM self test failed the test is carried out when the system is booted
46. on Verify acceptance in GeneralStatus WriteAccess register 00029 bit 1 Programming of the SCADA PIN code made via the SMS command SETSCADACODE See CIM 25X SMS commands supplement to installation and operating instructions on the CD ROM supplied with the GSM module 5 3 CIM status register block Registers in this block can be read by means of function codes 0x03 and or 0x04 They are read only This block can be used for various kinds of fault finding Address Register name Description 00021 GENIbusCRCErrorCnt Holds a CRC error counter for the connection between the CIU 250 and the MP 204 00022 GENIbusDataErrorCnt Holds a data error counter for the connection between the CIU 250 and the MP 204 00023 VersionNumber A Grundfos specific version number This is an unsigned integer value 00024 ActualModbusAddress Holds the current Modbus slave address of the device Valid value range 1 247 00025 GENIbusTXcountHI Holds a transmit counter for total number of telegrams sent from the CIU 250 to the 00026 GENIbusTXcountLO MP 204 00027 GENIbusRXcountHI Holds a receive counter for total number of telegrams received by the CIU 250 from the 00028 GENIbusRXcountLO MP 204 PIN code functionality 0 No PIN code required GeneralStatus 1 PIN code required to perform remote control and configuration Bit 0 ScadaPinCodeEnabled Activation of SCADA PIN code protection takes place via the SMS command 00029 SCADACODE
47. or acknowledgement behaviour ControlRegister Bit 8 ResetHourCounter Control bit that resets the OperationTimeTripCounterHI LO registers 00338 and 00339 0 No resetting 1 Resetting This control bit is triggered on rising edge only i e setting logical 0 to 1 See section 5 2 CIM configuration register block address 00005 for acknowledgement behaviour ControlRegister Bit 9 ResetEnergyCounter Control bit that resets the EnergyTripCounterHI LO registers 00332 and 00333 0 No resetting 1 Resetting This control bit is triggered on rising edge only i e setting logical 0 to 1 See section 5 2 CIM configuration register block address 00005 for acknowledgement behaviour 5 5 MP 204 status register block Registers in this register block can be read by means of function codes 0x03 and or 0x04 They are read only Address Register name Description 00201 StatusRegister Bit 0 Rotation Indicates if the pump is rotating consuming power or not 0 No rotation 1 Rotation StatusRegister Bit 1 ProtectionEnabled Indicates if the general protection is enabled or disabled 0 Protection disabled 1 Protection enabled Protection can be enabled disabled with ControlRegister register 00101 bit 3 StatusRegister Bit 2 Ready Indicates if the MP 204 is ready or not 0 Not ready 1 Ready StatusRegister Bit 3 Fault Indicates if there is a fault or not 0 No
48. ser name gt lt password gt lt authentication gt lt connection gt lt GPRS roaming gt 16 Example SETGPRS Grundfos dk2 tdc 502 49888 Grundfos 4321 normal server off To verify the GPRS setting after completion the SMS command GPRSSETTING can be used The command GPRSSTATUS can verify if the GPRS connection is working The connection states have the following meaning Detached Trying to locate GPRS service Attached GPRS service located Context active IP address has been assigned ready for a client to establish a socket connection Connected A client has established a socket connection The system is ready for TCP IP data exchange or already exchanging data For details about the use of SMS commands see CIM 25X SMS commands supplement to installation and operating instructions on the CD ROM supplied with the GSM module 7 4 Operation When powering on a CIU 250 with the correct GPRS setting the following GPRS connection sequence will take place 1 The CIU 250 locates the GPRS service The connection state changes from Detached to Attached 2 The CIU 250 attempts to connect to the APN it has been given and requests an IP address The base station looks through its record of legal SIM cards and finds the IP address the address associated with this SIM card to assign to the CIU 250 After the CIU 250 has got the IP address the connection state changes to Context active 3 The CIU 250 is now rea
49. ster Register code address HI address LO HI LO count 33 HI 33 LO 34 HI 34 LO 0x01 0x10 0x00 0x20 0x00 0x02 0x04 0x00 0x01 0xB0 0xB0 In the request the slave with address 1 is asked to write the value of 0x0001 to the register at address 0x0020 and the value of 0xB0BO to the register at address 0x0021 Example of response from slave to master Address Function code Start address HI Start address LO Quantity written HI Quantity written LO 0x01 0x10 0x00 0x20 0x00 0x02 The response returns the function code starting address and quantity of registers written 11 6 Diagnostics 0x08 This function provides a test for checking the communication system between the master and the Grundfos slave It contains a single byte subcode to identify the test to be performed The following subcodes are supported Subcode Name Return query data 0x00 Data in this request are to be echoed in the response The response must be identical to the request so this function is often used to verify Modbus communication Restart communications SEN All communication counters are cleared and the device is restarted 0x02 Return diagnostics register Returns the 16 bit diagnostics register See section 17 7 Diagnostics register interpretation Force Listen Only 0x04 Forces the device into listen only mode This effectively mutes the device making it unable to communicate on the network To bring the device back to normal m
50. th single pulse but the CIM 250 cannot send or receive SMS messages CIM 25X SMS commands supplement to installation and operating instructions on the CD ROM supplied with the GSM module 19 8 2 Modbus GSM GPRS communication faults Fault Possible cause Remedy 1 The slave does not respond to a Configuration or installation error Ensure that the CIU 250 has contact with telegrams the GSM network The LED1 should be pulsing yellow If the LED1 signal is incorrect see section 3 CIM 250 GSM module for correct installation of the CIM 250 Ensure that the correct slave address is used in the Modbus master poll See register 00003 ModbusAddress factory value is 00231 b The slave may be in listen only mode Either send a restart communications diagnostics command or restart the MP 204 manually c If the holding register of address 00001 Increase the reply delay in the master or SlaveMinimumReplyDelay is set too reduce the SlaveMinimumReplyDelay high the master may time out before in order to communicate receiving the response from the slave 2 The slave responds with exception a The master is trying to use an See section 4 Modbus function code response 0x01 Invalid function unsupported function in the CIU 250 overview for supported function codes Note that reading and writing coils are not supported so only register functions and diagnostics will be valid 3 The slave responds w
51. ther PC application Typical data rates are 32 to 48 kbit s The GPRS itself takes care of the wireless data transfer via the GSM network It plays the same role as Ethernet in a wired network On top of GPRS is the TCP IP protocol which enables easy integration with the internet The Modbus TCP protocol is used on the application layer communicating with a TCP port number default 502 The difference when compared to the fieldbus protocol Modbus RTU is the exclusion of the 16 bit CRC checksum and the adding of a Modbus application program header as illustrated in fig 8 Modbus RTU telegram ES T Modbus application program header Modbus TCP IP data Transaction ID ID Protocol ID ee Va ID Bed Data Bed ID Modbus TCP IP application data unit Fig 8 Modbus TCP telegram TM04 4907 2209 7 2 Subscription The GSM service providers have different technical solutions for GPRS to choose from You have to select the service provider and the technical solution that best suit your system and it must be based on static IP addressing You will get the following from the GSM service provider A Subscriber Identity Module SIM card An Access Point Name APN e g internet Ausername is fixed and cannot be changed by the user Apassword is fixed and cannot be changed by the user A static IP address Solutions based on a VPN Virtual Private Network involve the use of special routers e g GRE routers G
52. tion register block This section shows how to read the first four registers of the CIM configuration register block In the example slave address 0x01 is used Request from master to slave Field Value Description Slave address 0x01 Function code 0x04 Read input registers Start address HI 0x00 Start address Start address LO 0x00 0x0001 Quantity HI 0x00 Number of registers Quantity LO 0x04 0x0004 Example of response from slave to master Field Value Description Slave address 0x01 Function code 0x04 Read input registers Byte count 0x08 8 bytes follow 00001 HI 0x00 SlaveMinimumReplyDelay 00001 LO 0x0A 0x000A 00002 HI 0x00 RegisterOffset 00002 LO 0x00 0x0000 00003 HI 0x00 Reserved value 00003 LO 0x00 0x0000 00004 HI 0x00 ModbusBitRate 00004 LO 0x04 0x0004 If there is no response from the slave see section 9 Data item overview 30 12 3 Tripping the MP 204 This section shows how to set the control bit that trips the MP 204 In the example slave address 0x01 is used To trip the MP 204 the ControlRegister register address 00101 bit 1 must be raised Hence the value to set is 060000000000000010 0x0002 Request from master to slave Field Value Description Slave address 0x01 Function code 0x06 Write single register Start address HI 0x00 ControlRegister address Start address LO 0x64 00101 0x0065 Value HI 0x00 Co
53. ur Control bit that switches the pump on and off ControlRegister Status is obtained from OperationMode register 00202 Bit 2 OnOffReq 0 Off stop 1 On start Control bit that enables disables the general protection ControlRegister Status is obtained from StatusRegister register 00201 bit 1 Bit 3 ProtectionEnabled 0 Protection disabled 1 Protection enabled Control bit that resets the NumberOfStartsTripCounterHI LO registers 00342 and 00343 0 No resetting ControlRegister 1 Resetting Bit 5 ResetStartCounter This control bit is triggered on rising edge only i e setting logical O to 1 00101 See section 5 2 CIM configuration register block address 00005 for acknowledgement 10 behaviour ControlRegister Bit 6 ResetRestartCounter Control bit that resets the AutoRestartsTripCounterHI LO registers 00344 and 00345 0 No resetting 1 Resetting This control bit is triggered on rising edge only i e setting logical O to 1 See section 5 2 CIM configuration register block address 00005 for acknowledgement behaviour ControlRegister Bit 7 ResetLogs Control bit that resets the maximum minimum voltage and current logs and maximum number of starts per hour log registers 00348 00349 00350 00351 and 00352 0 No resetting 1 Resetting This control bit is triggered on rising edge only i e setting logical O to 1 See section 5 2 CIM configuration register block address 00005 f
54. ver in the Connected state the delay time between reception and reply will increase If the connection state is different from Connected it is possible to establish a call up connection When the call up connection is established GPRS data exchange will be blocked until the call up is terminated by the caller A total of three Modbus clients can be connected to the Modbus TCP port of the CIU 250 and communicate simultaneously Each connection called a socket connection is handled independently If all three sockets are used simultaneously a Silence timeout of only one minute is used to prevent a complete occupation for a long time GSM GPRS network Base station APN Static IP address Static IP address Mobile phone CIU 250 with CIM 250 module and SIM card Setup status and control commands via SMS Fig 9 GPRS connection from a PC to the CIU 250 directly via GPRS TM04 7309 1910 17 Clients VPN tunnel 4 GSM GPRS network GSM operator Base station APN GRE router GRE router Static IP address Mobile phong CIU 250 with CIM 250 module and SIM card gt Setup status and control commands via SMS Fig 10 GPRS connection via VPN tunnel 18 TM04 7129 1510 8 Fault finding Faults in the CIU 250 can be detected by observing the status of the two communication LEDs See the table below and section 3 2 LEDs 8 1 LED status

Grundfos CIU 250 - Energy-efficient pumps for commercial buildings

Contents

Download Pdf Manuals

Related Search

Related Contents