Modbus Protocol

For All LCI units

5385750_00 - 1603
INDEX

PREFACE ..................................................................................................................................................3

1. TERMS AND DEFINITIONS..................................................................................................................................................3

2. BRIEF INTRODUCTION OF THE BMS SYSTEM .....................................................................................................................4

3. NETWORK TOPOLOGY ..................................................................................................................................................4

3.1. GENERAL ...................................................................................................................................................4
3.2. TOPOLOGICAL STRUCTURE .................................................................................................................................4
3.2.1 TOPOLOGICAL STRUCTURE CONSISTING OF MAX. 255 COMMUNICATION MODULES ..................4
3.2.2 TOPOLOGICAL STRUCTURE CONSISTING OF MIN. 255 COMMUNICATION MODULES ...................4

4. MODBUS PROTOCAL FORMAT ..................................................................................................................................5

4.1 GENERAL ...................................................................................................................................................5
4.2 PROTOCAL INTERFACE ...................................................................................................................................5
4.3 HARDWARE INTERFACE ..................................................................................................................................5
4.4 UNIVERSAL COMMUNICATION ......................................................................................................................5
4.5 MODBUS STANDARD PROTOCAL FORMAT ..................................................................................................5
4.5.1 COIL (BIT) ..............................................................................................................................................5
4.5.2 REGISTER (WORD, 16 BIT) .....................................................................................................................5
4.5.3 READ COILS (READ BIT) ......................................................................................................................5
4.5.4 WRITE COILS (WRITE BIT) .....................................................................................................................5
4.5.5 READ REGISTERS (READ WORD) .........................................................................................................5
4.5.6 WRITE REGISTERS (WRITE WORD) .......................................................................................................6
4.5.7 ALARM RESPONSE ................................................................................................................................6

5. COMMUNICATION PROTOCAL FOR ALL LCI............................................................................................................6

5.1 GENERAL ...................................................................................................................................................6
5.2 PRECAUTIONS BEFORE THE DEVELOPMENT OF THE BMS INTERFACE FOR ALL LCI ....................................6
5.3 DEFINITION OF EFFECTIVE DATA ....................................................................................................................6
5.3.1 DATA AND ADDRESS DISTRIBUTION OF THE ANALOG VALUES: (WORD 0~WORD X) ...............................7
5.3.2 DATA AND ADDRESS DISTRIBUTION OF SWITCHING VALUES: (BIT 0~BIT 1495)...........................................11

6. COMMON FAILURES OF BMS SYSTEM.......................................................................................................................20

A. ANNEX ..................................................................................................................................................21
A.1 CRC CALCULATIONMETHOD ........................................................................................................................21
A.2 CALCULATION OF THE CRC PROGRAM STEPS .............................................................................................21
A.3 CRC EXAMPLE (ONLY FORREFERENCE) ........................................................................................................21
PREFACE • Device Address: It indicates the address of the Modbus com-
munication module, throught which the master unit can iden-
This protocol specifies the communication format and data format tify each communication module in the network. Address ran-
for the Modbus communication of All LCI. This protocol is applica- ge: 1~255. Address 0 is the address of broadcast (it can be
ble to All LCI. Please pay attention to the following 3 points before received by all communication modules).
developing the BMS software:
• Broadcast: When the master unit sends out a control frame,
1. Controllers for the IDUs of this series have been integrated with then all salve units in the network can receive it and then all
MODBUS interface, so there is no need to connect communi- performs this control action (but no reply is given). The device
cation modules. In this context, communication module indi- address for the broadcast frame is 0.
cates the module that is integrated by the controllers. Please
be noted. • Function Code: It is used to identify the function of the com-
munication frame. See the following table for the function co-
2. Make sure you have read the precautions before developing des covered in this protocal.
the BMS interface of each unit, e.g. section 5.1.2 “Precautions
before the Development of the BMS Interface for All LCI”.
Fucntion
Description
Code
3. Please contact AERMEC to confirm the compatibility of the
BMS system. Read coils (read bit) 0x01

Notice:This product is subject to change without prior notice.

Read registers (read word) 0x03
Write coils (write bit) 0x0f
Write registers (write word) 0x10

Table 1: Function Code

1. TERMS AND DEFINITIONS
• Modbus communication: Modbus is a protocol used for in- • Starting Address: It indicates the starting address of the register
dustrial communication and a distributed control system. (coil: bit address; register: word address). The data translation
Modbus network is a master-slave network, which allows the starts from the high-order eight bits to the low-order eight bits.
communication between one mater unit and one or multiple
slave units to realize data interchange. The Modbus commu- • Data Size: It indicates the counting number of to-be-operated
nication is realized in a request-response way, that is, each data starting from the starting address (coil: bit count; register:
request sent by the master unit is corresponding to a response word count). The data translation starts from the high-order
replied by the salve unit. eigth bits to the low-order eight bits.

• ASCII Mode: Under this mode, as for the communication via • Byte Count: It indicates the count number of effective bytes
the Modbus, eight bits in one piece of information can be during the data transmission.
transimitted as two ASCII characters.
• Effective Data: It indicates the control data, statuss data, etc.
• RTU Mode: Under this mode, eight bits can be divided into
two 4-bit hexadecimal characters. The advantage of the RTU • Alarm Code: It indicates the error type which is detected by
mode is that, with the same baud rate the transmitted cha- the communication module when the master unit is sending
racter density is higher than that in the ASCII mode. Each pie- the request frame.
ce of information should be tramsmitted continuously.
• CRC: It indicates the cyclic redundancy code consisting of
• Master Unit: It indicates the device which sends out the re- two bytes. The data translation starts from the low-order eight
quest to dbus, like a PC. bits to the high-order eight bits. See Annex A for more detaila
about its calculation.
• Slave Unit: It indicates the device which needs Modbus com-
munication interface and is capable of responding to the re- • Request Frame: It is the request sent by the master unit to the
quest sent by the master unit, like a communication module, communication module.
which is taken as an example in this protocol.
• Communicaiton Frame: It is the collection of continuosly
• Coil: It is expressed by one bit, like the switch bit, failure bit, transmitted bytes during the communication.
etc. The coil is a universal expression of the Modbus proto-
col and actually it is a one-bit data value, namely Boolean, • BMS: Building management system
switching value.

• Register: It is expressed by two bytes (16 bits), like temperature,

mode, etc. The register is a universal expression of the Modbus
protocol and actually it is a word (16 bits), or an analog value.

3
2. BRIEF INTRODUCTION OF THE BMS SYSTEM 3. NETWORK TOPOLOGY
The Modbus monitoring system of All LCI is capable of controlling
up to 255 sets of units at the same time. The interface RS485 of 3.1 GENERAL
Modbus communication protocal, provided by the long-distance As shown in Fig.1, the whole network consists of two parts: units’
monitoring system, can de directly connected with the BMS or network and Modbus network. The IDUs are with MODBUS interface
AERMEC monitoring system, that is, can control up to 255 units and and have to be selected by setting address mode through the wi-
display their running statuss at the same time. The control function red controller so that the communication data of the two networ-
of the BMS/PC is equal to that of the unit itself. In other words, BMS/ ks can be interchanged. See the corresponding section in unit’s
PC and units can both control the functions of units at them same service manual for the detailed setting method. There are at most
time. However, the command sent later takes the priority. 255 comunication modules in one monitoring system, that is, only
255 indoor units can be connected. When there are more than
255 units, a new network can be established through another port
which is also capable of connecting 255 communication modules.

3.2 TOPOLOGICAL STRUCTURE

3.2.1 Topological Structure Consisting of Max. 255 Communication Modules

BMS system

Lighting Fire Vent Elevator Electricity

MODBUS Protocol

Device Device Device

address 1 address 2 address 255

Unit 1 Unit 2 Unit 255

3.2.2 Topological Structure Consisting of Min. 255 Communication Modules

BMS system

Lighting Fire Vent Elevator Electricity

Port 1 Port 2 Port N

MODBUS Protocol MODBUS Protocol

Addr. Addr. Addr. Addr.
1 255 1 255 Network N

Unit 1 Unit 255 Unit 1 Unit 255

Network 1 Network 2

4
4. MODBUS PROTOCAL FORMAT 4.5 MODBUS STANDARD PROTOCAL FORMAT

4.1 GENERAL 4.5.1 Coil (Bit)

Modbus has actually become an industrial communication stan-
dard because it is not only fully opened and used widely but also
Address Corresponding Byte Values
simple and can be debugged flexibly. Besides, as for the commu-
nication of multiple units, Modbus can be developed fast and also Bit 0 Byte 0.0 1
can be conveniently connected with devices which support this
Bit 1 Byte 0.1 0
protocal. There are two communication modes: RTU and ASCII.
The former one is asopted for the BMS interface. Bit 2 Byte 0.2 1
Bit 3 Byte 0.3 0
4.2 PROTOCAL INTERFACE Bit 4 Byte 0.4 1
The protocal interface is the Modbus RTU protocal.
Bit 5 Byte 0.5 0
Bit 6 Byte 0.6 1
4.3 HARDWARE INTERFACE Bit 7 Byte 0.7 0
Bit 8 Byte 1.0 1
1. Communication Interface: RS485
2. Communication Mode: Bit 9 Byte 1.1 0
• baud rate: 9600 bit/s (In some special case, other baud rate
Bit 10 Byte 1.2 1
can be selected but the communication mechanism should
be in accord with this protocal.) Bit 11 Byte 1.3 0
• Start Bit: 1
Bit 12 Byte 1.4 1
• Data Bit: 8
• Check Bit: None Bit 13 Byte 1.5 0
• Stop Bit:1
Bit 14 Byte 1.6 1
Bit 15 Byte 1.7 0
4.4 UNIVERSAL COMMUNICATION .... .... ....

Table 2: Coil Data

Start Stop
Addr. Function Data
time CRC time 1. “Coil”indicates the data of some flag bit or failure bit, etc.
Code Code Area
interval Interval 2. The unit of data is bit and each bit has a corresponding ad-
T1-T2-T3-T4 1 Byte 1 Byte n Byte 2 Byte T1-T2-T3-T4 dress.
3. The data bit exists in the byte of the communication frame
Frame Format of Modbus under RTU Mode and each byte is composed of eight bits. The high-order byte
is corresponding to the high-order bit whereas the low-order
Under the RTU mode, there ia at least 3.5ms dead time before the byte is corresponding to the low-order bit. See table 2 for
data transmission, which can be figured throught the adopted more details.
baud rate (like T1-T2-T3-T4 in the table above) and there is another 4. The master unit can operate one bit among the communica-
3.5ms dead time after the transmission of the last character. After tion data or multiple bits at the same time.
that, another set of data can be transimitted. 5. The bit count which the master unit can read or transmit is less
The whole set of data should be transmitted continuously. If there is than Byte×8. The ineffective data bit of the last byte should
a pause more than 1.5ms during the transmission, the receiver will be cleared when the effective data of the communication
jump to the transmission of the next set of data. If the dead time is frame is transmitted or read. For instance, when nine bits (the
less than 3.5ms, the transmission would fail as the CRC for the infor- vaule of each is 1) are read or transmitted, then two bytes
mation combination is ineffective. are needed. The first one is “1111 1111”and the second one
is “0000 0001”. For the last byte, the ineffective bits “0” should
be cleared.

5
4.5.2 Register (Word, 16 bit) 4.5.4 Write Coils (Write bit)

Address Corresponding Byte Values Function Code: 0x0F

Note: The master unit writes coil data into the communication mo-
Byte 0 dule and also supports the broadcast.
Word 0 AA 55
Byte 1
Byte 0 Device Function Starting Data Byte Effective
CRC
Word 1 AA 55 Address Code Address Size count data
Byte 1
1 Byte 1 Byte 2 Byte 2 Byte 1 Byte n Byte 2 Byte
Byte 0
Word 2 55 AA Table 6: Request Frame
Byte 1
.... .... ....
Device Function Starting Data
CRC
Address Code Address Size
Table 3: Registers Data
1 Byte 1 Byte 2 Byte 2 Byte 2 Byte
1. The unit of the register is “word” which has a corresponding Table 7: Response Frame
address starting from 0.
2. When the master unit reads a word, it needs to read two bytes
Note: The response frame has the same device address, function
from the high-order eight bits to the low-order eight bits.
code, starting address and data size as the request frame.
3. When the master unit transmits or reads the request frame, it
can transmit or read one or multiple continuous words in the
For example: Set eleven consecutive bits to “1” from the device 10
data list.
and starting at the address 6, as follows:

Request Frame:
0A (device address) 0F (function code) 00 06 (starting address) 00
4.5.3 Read Coils (Read bit) 0B (data size) 02 (byte count) FF 07 (effective data) 97 A0 (CRC)

Device Function Starting Data Response Frame:

CRC 0A (device address) 0F (function code) 00 06 (starting address) 00
Address Code Address Size
0B (data size) F5 76 (CRC)
1 Byte 1 Byte 2 Byte 2 Byte 2 Byte
• The last byte is “0000 0111”, among which the ineffective bits
Table 4: Request Frame “0” should be cleared.

Device Function Starting Data

CRC
Address Code Address Size
4.5.5 Read Registers (Read word)
1 Byte 1 Byte 1 Byte n Byte 2 Byte
Function Code: 0x03
Table 5: Corresponding Frame
Note: Read the register data but do not support the broadcast.

• Starting Address: It is the starting place where to read a series Device Function Starting Data
CRC
of bits. Address Code Address Size
• Data Size: it indicates the count number of bits.
1 Byte 1 Byte 2 Byte 2 Byte 2 Byte
• For example: Read ten bits from the coil 5 of the device 10
(see table 2 for the coil data), as follows: Table 8: Request Frame
Request frame:
0A (device address) 01 (function code) 00 05 (starting address) 00 Device Function Byte Effective
CRC
0A (data size) AD 77 (CRC) Address Code count data
1 Byte 1 Byte 1 Byte n Byte 2 Byte
Response Frame:
0A (device address) 01 (function code) 02 (byte count) AA 02 (ef- Table 9: Response Frame
fective data) E3 5C (CRC)
• Starting address: It indicates the starting address to read the
• The last byte is “0000 0010”, among which the ineffective bits data block.
“0” should be cleared. • Data size: It indicates the count number of words with the ma-
ximum of 127 each time.
For example: Read two continuous words (see table 3 for the re-
gisters data) from the device 10 and starting at the address 1, as
follow:

Request Frame:
0A( device address) 03 (function code) 00 01(starting address) 00
02 (data size) 94 B0 (CRC)

Response Frame:
0A (device address) 03 (function code) 04 (byte count) AA 55 55
AA (effective data) CE 14 (CRC)

6
4.5.6 Write Registers (Write word) 5. COMMUNICATION PROTOCAL FOR
ALL LCI
Function Code: 0x10
Note: Write control data from the master unit into the register and
support broadcast. 5.1 GENERAL
All LCI has integrated BMS interface into the indoor units. As Modbus
protocal interface is provided, there is no need to connect com-
Device Function Starting Data Byte Effective munication modules. However, it’s necessary to do some settings
CRC
Address Code Address Size count data through wired controllers. Please refer to the relevant service ma-
1 Byte 1 Byte 2 Byte 2 Byte 1 Byte n Byte 2 Byte nual for the setting methods. The long-distance monitoring system
for All LCI can be used to monitor AERMEC’s All LCI or be incorpo-
Table 10: Request Frame rated into user’s BMS system. By monitoring the PC or BMS system,
user can realize a centralized management and control on up to
255 sets of All LCI. It is a highly efficient tool for the management of
Device Function Starting Data an intelligent air conditioning system in modern buildings.
CRC
Address Code Address Size Through this interface, it can not only realize the long-distance mo-
1 Byte 1 Byte 2 Byte 2 Byte 2 Byte nitoring to units, including units’ running temperature, compressor
statuss and error statuss, but also can enable units’ settings remo-
Table 11: Response Frame tely, like temperature setting, mode setting, on/off setting, mode
shield setting, on/off shield setting, etc.
Note: The response frame has the same device address, function In the protocal, “R” indicates “read only” and “W/R” indicates “wri-
code, starting address and data size as the request frame. te and read”.

For example: write three words (0x12, 0x23, 0x34) from the device
10 and starting at the address 2, as follow:
5.2 Precautions before the Development of the BMS
Request Frame: Interface for All LCI (★)
0A (device address) 10 (function code) 00 02 (starting address) 00 1. Cooling Only Unit: Heating instruction is invalid. It is recom-
03 (data size) 06 (byte count) 00 12 00 23 00 34 (effective data) 15 mended that the monitoring software can tell this operation
DF (CRC) is invalid.
2. When the format of the alarm response frame received by the
Response Frame: BMS system is 0x04, it indicates that there is communication
0A (device address) 10 (function code) 00 02 (starting address) 00 failure between units and the communication module.
03 (data size) 20 B3 (CRC) 3. Cooling mode: When the setting for energy saving under coo-
ling is active, the temperature set by long-distance monitoring
must be higher than the temperature lower limit for energy
4.5.7 Alarm Response saving, otherwise units will not response to the command. It is
suggested that the BMS software can tell the setting fails.
4. Heating mode: When the setting for energy saving under he-
Note: The master unit sends out a request frame in order to receive
ating is active, the temperature set by long-distance monito-
a normal response, but when the communication module detects
ring must be lower than the temperature upper limit for ener-
a failure, an alarm response will be sent back.
gy saving, otherwise units will not response to the command.
Function code: Set the hightest-order bit to “1”, which is the value
It is suggested that the BMS software can tell the setting fails.
figured through the operation of the request frame’s function code
5. When the BMS system needs to cancel or set one of the two
and 0x80 (The function code of normal response will be back as it is).
flag bits of energy saving, When the BMS system needs to can-
cel or set one of the two flag bits of energy saving, the two
Device Function Alarm flag bits need to be cancelled or set simultaneously.
CRC
Address Code code 6. When unit is in fan mode or auto mode, sleep setting will be
1 Byte 1 Byte 1 Byte 2 Byte invalid.
7. When unit is in auto mode, the setting of long-distance tem-
Table12: Alarm Response Frame perature shield will be invalid.
8. Under power-off statuss, when X-fan function is energized, fan
motor will run for 2min.
Alarm Code Name Description 9. All data sent by the BMS system to the communication modu-
The transmitted data is le should be verified if it is effective.
0x03 Illegal data incorrect or beyond the data 10. After the communication module is powered on again and
range. before receiving any effective data, the alarm code 04 will
be reported.
There is communication failure
Salve device between the communication
0x04
failure module and the air conditio-
ning unit. 5.3 Definition of Effective data
The data for the Modbus communication protocal can be divided
Table 13: Alarm Codes into two types: switching value and register. The register indicates
the values of temperature, valves and other continuous or multi-
For example: The master unit is to read 128 words from the device mode values. Switching value indicates the value which has only
10 and starting at the address 0. If it is out of the readable range of two status, like the temperature sensor error (with only two status:
Modbus, alarm frame will be sent back as follows: abnormal or normal).

Request Frame:
0A (device address) 03 (function code) 00 00 (starting address) 00
80 (data size) 45 11 (CRC)

Response Frame:
0A (device address) 83 (device address) 03 (alarm code) 70 F3 (CRC)

7
5.3.1 Data and Address Distribution of the Analog Values: (Word 0~Word X)

ATTENTION: Pay special attention before devepment to the data marked with ★ (see paragraph 5.2)

Acess Type
(R-read
Data Data type
Addr. only, Range Accuracy Unit ★ Remarks
meaning (actual value)
W/R-
write/read)

Word 0 R Reserved / / / /
Word 1 R Reserved / / / /
Unsigned,
Word 2 W/R Unit ON/OFF 0xAA = Unit on; 0x55 = Unit off / /
integer type
Word 3 R Reserved / / / /
Transmission value=actual value,
Ambient Signed,
Word 4 R actual value: transmission 0,1 °C
temp. integer type
value=temp value×10
Transmission
value=actual value, actual value: If
connected with central controller, Unsigned,
Word 5 R IDU Addr. 1 /
address range is 1-16; if connected integer type
with PC address mode, address range
is 1-255
Word 6 R Reserved / / / /
Word 7 R Reserved / / / /
Word 8 R Reserved / / / /
Word 9 R Reserved / / / /
Word 10 R Reserved / / / /
Word 11 R Reserved / / / /
Word 12 R Reserved / / / /
Word 13 R Reserved / / / /
Word 14 R Reserved / / / /
Word 15 R Reserved / / / /
Word 16 R Reserved / / / /
Transmission value=actual value, ac- Broadcast
tual value: 001: cooling; 010: heating; Unsigned ★ data
Word 17 W/R Set mode / /
011: drying; 100: fan only; 101: auto integer type (1)
mode
Word 18 R Reserved / / / /
Transmission
Set fan value=actual value, actual value: 0: Unsigned
Word 19 W/R / /
speed auto 1: speed 1; 2: speed 2; 3: speed integer type
3; 4: speed 4; 5: speed 5; 6: turbo
Transmission
value=actual value, actual va- Unsigned
Word 20 W/R Set temp 1 °C
lue:16-30, under low-temp drying, it is integer type
12°C, under absence mode, it is 8°C.
Word 21 R Reserved / / / /
Transmission value=actual value,
actual value:
0000---off,
0001---15 air swing, 0010--- 1 position,
Up and Unsigned
Word 22 W/R 0011--- 2 position, 0100--- 3 position, / /
Down swing integer type
0101---4 position, 0110---5 position,
0111---35 air swing, 1000---25 air swing,
1001---24 air swing, 1010---14 air swing,
1011---13 air swing
Transmission
value=actual value, actual value:
0000---off (default value after power
Left and on), 0001---air swing at same direction Unsigned
Word 23 WR / /
right swing 0010---1 position, 0011---2 position, integer type
0100---3 position, 0101---4 position,
0110---5 position, 1100---15 position,
1101---air swing at opposite direction

8
ATTENTION: Pay special attention before devepment to the data marked with ★ (see paragraph 5.2)

Acess Type
(R-read
Data Data type
Addr. only, Range Accuracy Unit ★ Remarks
meaning (actual value)
W/R-
write/read)
Transmission
Fresh air value=actual value, actual value: Unsigned,
Word 24 W/R / /
valve status 0~10, 0: indicates fresh air valve, 10 integer type
modes of fresh air
Transmission value=actual value, ac-
tual value:0: no sleep mode; 1: sleep Unsigned, ★
Word 25 W/R Sleep mode / /
mode 1; 2: sleep mode 2; 3: sleep integer type (5)
mode 3
Word 26 W/R Reserved / / / /
Word 27 W/R Reserved / / / /
Word 28 W/R Reserved / / / /
Word 29 W/R Reserved / / / /
Word 30 W/R Reserved / / / /
Word 31 W/R Reserved / / / /
Word 32 W/R Reserved / / / /
Word 33 W/R Reserved / / / /
Transmission
Clear value=actual value, actual value: 00: Unsigned,
Word 34 W/R / /
function no clean function; 10-39: contamina- integer type
tion grade
Temp.
lower limit Transmission
Unsigned, ★
Word 35 W/R for energy value=actual value, actual value: 1 °C
integer type (3)
saving under 16~30
cooling
Temp.
upper limit Transmission
Unsigned, ★
Word 36 W/R for energy value=actual value, actual value: 1 °C
integer type (3) Broadcast
saving under 16~30
data
heating
Word 37 R Reserved / / / /
Word 38 R Reserved / / / /
Transmission
value=actual value, actual value:
01: air return temp sensor for indoor
ambient temp
Selection
10: wired controller temp sensor for Unsigned,
Word 39 R of ambient / /
indoor ambient temp integer type
temp sensor
11: air return temp sensor for cooling,
drying and fan mode, select wired
controller temp sensor for heating and
auto mode
Word 40 R Reserved / / / /
Word 41 R Reserved / / / /
Word 42 R Reserved / / / /
Word 43 R Reserved / / / /
Word 44 R Reserved / / / /
Word 45 R Reserved / / / /
Word 46 R Reserved / / / /
Word 47 R Reserved / / / /
Word 48 R Reserved / / / /
Outdoor
Transmission
outdoor am- Signed, units
Word 49 R value=actual value, actual value: 1 °C
bient temp integer type response
-100--155
data
Word 50 R Reserved / / / /
Word 51 R Reserved / / / /

9
 Acess Type
(R-read
Data Data type
Addr. only, Range Accuracy Unit ★ Remarks
meaning (actual value)
W/R-
write/read)

Word 52 R Reserved / / / /
Word 53 R Reserved / / / /
Word 54 R Reserved / / / /
Word 55 R Reserved / / / /
Word 56 R Reserved / / / /
Word 57 R Reserved / / / /
Word 58 R Reserved / / / /
Word 59 R Reserved / / / /
Word 60 R Reserved / / / /
Word 61 R Reserved / / / /
Word 62 R Reserved / / / /
Word 63 R Reserved / / / /
Word 64 R Reserved / / / /
Word 65 R Reserved / / / /
Word 66 R Reserved / / / / Outdoor
units
Word 67 R Reserved / / / / response
Word 68 R Reserved / / / / data

Word 69 R Reserved / / / /
Word 70 R Reserved / / / /
Word 71 R Reserved / / / /
Word 72 R Reserved / / / /
Word 73 R Reserved / / / /
Word 74 R Reserved / / / /
Word 75 R Reserved / / / /
Word 76 R Reserved / / / /
DRED 0: no DRED function; 1:DRED1 mode; Unsigned
Word 77 R / /
function 2:DRED2 mode; 3:DRED3 mode. integer type
Word 78 R Reserved / / / /
Word 79 R Reserved / / / /
Word 80 R Reserved / / / /
Word 81 R Reserved / / / /
Indoor
Ambient Transmission
Signed, units iden-
Word 82 R temp at port value=actual value, actual value: 0,1 °C
integer type tification
of air return transmission=(temp value)×10
data
Ambient Transmission
Signed,
Word 83 R temp of light value=actual value, actual value: 0,1 °C
integer type
board transmission=(temp value)×10
Word 84 R Reserved / / / /
Word 85 R Reserved / / / /
Word 86 R Reserved / / / /
Word 87 R Reserved / / / /
Word 88 R Reserved / / / /
Word 89 R Reserved / / / /
Word 90 R Reserved / / / /
Word 91 R Reserved / / / /
Word 92 R Reserved / / / /

10
5.3.2 Data and Address Distribution of Switching Values: (Bit 0~Bit 1495)

ATTENTION: Pay special attention before devepment to the data marked with ★ (see paragraph 5.2)

Acess Type
(R-read
Addr. Data Parametry
Addr. only, Range ★ Remarks
Bit meaning type
W/R-
write/read)

R bit 0 Reserved / /
R bit 1 Reserved / /
R bit 2 Reserved / /
R bit 3 Reserved / /
Byte 0
R bit 4 Reserved / /
R bit 5 Reserved / /
R bit 6 Reserved / /
R bit 7 Reserved / /
Whether or not
R bit 8 Outdoor unit 0: no, 1: yes
has flag bit? Status
Whether or not the parameter
R bit 9 master wired control- 0: no, 1: yes
ler has flag bit?
R bit 10 Reserved / /
Byte 1 R bit 11 Reserved / /
R bit 12 Reserved / /
Whether or not the
Status
R bit 13 slave wired controller 0: no, 1: yes
parameter
has flag bit?
R bit 14 Reserved / /
R bit 15 Reserved / /
R bit 16 Reserved / /
1 (current status is locked by long-
distance monitoring or the household
W/R bit 17 Remote lock
charging system),
0 (no above lock or it is unlocked)
R bit 18 Remote temp shield 1: with shield, 0: without shield Status Broadcast
Byte 2 R bit 19 Remote mode shield 1: with shield, 0: without shield parameter data
Remote
R bit 20 1: with shield, 0: without shield
On/Off shield
Remote energy
R bit 21 1: with shield, 0: without shield
saving shield
R bit 22 Reserved / /
R bit 23 Reserved / /
W/R bit 24 Absence mode 0: off; 1: on /
W/R bit 25 Healthy function 0: off; 1: on
Comfortable and
W/R bit 26 energy saving: 0: off; 1: on
I-Demand
W/R bit 27 Turbo 0: off; 1: on
Byte 3 E-heating 0: permit e-heating on; Status
W/R bit 28
permission mark 1: not permit e-heating on parameter

★
W/R bit 29 X-fan 0: off; 1: on
(7)
W/R bit 30 Silent 0: off; 1: on
Low temp drying
W/R bit 31 0: off; 1: on
mode

11
ATTENTION: Pay special attention before devepment to the data marked with ★ (see paragraph 5.2)

Acess Type
(R-read
Addr. Data Parametry
Addr. only, Range ★ Remarks
Bit meaning type
W/R-
write/read)
Energy saving under ★
W/R bit 32 0: off; 1: on
cooling is active (7)
Energy saving under ★
W/R bit 33 0: off; 1: on
heating is active (4)
Buttons lock
W/R bit 34 1: on; 0: off
(childlock) status
Byte 4 On/Off memoring Status
W/R bit 35 0: memorize, 1: not memorize
status parameter
W/R bit 36 °C/°F flag bit 1: °C; 0: °C
R bit 37 Reserved /
R bit 38 Reserved /
R bit 39 Reserved /
R bit 40 Timer status 1: with timer; 0: without timer
R bit 41 Reserved / /

R bit 42 Reserved / /
R bit 43 Reserved / /
R bit 44 Reserved / /
Byte 5
R bit 45 Reserved / /
Gate control system
R bit 46 1: yes; 0: no
is provided or not?
Status
Human body sensing parameter
R bit 47 check module is 1: yes; 0: no
provided or not? Broadcast
data
R bit 48 Reserved / /
R bit 49 Timer On flag 1: active; 0: not active
R bit 50 Timer Off flag 1: active; 0: not active
Status
0: indoor ambient temperature is the
Indoor ambient parameter
air return ambient temperature
R bit 51 temperature in
1: indoor ambient temperature is the
current mode
temperature at wired controller
Byte 6
R bit 52 Reserved / /
R bit 53 Reserved / /
R bit 54 Reserved / /
Low standby power
consumption control
R bit 55 1: mode 2; 0: mode 1 /
function
(1W standby)
R bit 56 Reserved / /
R bit 57 Reserved / /
R bit 58 Reserved / /
R bit 59 Reserved / /
Byte 7
R bit 60 Reserved / /
R bit 61 Reserved / /
R bit 62 Reserved / /
R bit 63 Reserved / /

12
ATTENTION: Pay special attention before devepment to the data marked with ★ (see paragraph 5.2)

Acess Type
(R-read
Addr. Data Parametry
Addr. only, Range ★ Remarks
Bit meaning type
W/R-
write/read)

R bit 64 Reserved / /
Wired controller Failure
R bit 65 1: yes; 0: no
temp sensor error parameter

R bit 66 Reserved / /
R bit 67 Reserved / /
Byte 8
R bit 68 Reserved / /
R bit 69 Reserved / /
Wired controller Failure
R bit 70 1: yes; 0: no
memory chip error parameter

R bit 71 Reserved / /
Status
W/R bit 72 Cancel timer 0: do not cancel, 1: cancel
parameter

R bit 73 Reserved / /
0: mode 1-simple air swing; 1: mode
Up & down Status
W/R bit 74 2-fixed angle air swing and small area Broadcast
swing mode parameter
air swing data
Byte 9
R bit 75 Reserved / /
R bit 76 Reserved / /
R bit 77 Reserved / /
R bit 78 Reserved / /
R bit 79 Reserved / /
R bit 80 Reserved / /
R bit 81 Reserved / /
R bit 82 Reserved / /
R bit 83 Reserved / /
Byte 10
R bit 84 Reserved / /
R bit 85 Reserved / /
R bit 86 Reserved / /
R bit 87 Reserved / /
R bit 88 Reserved / /
R bit 89 Reserved / /
R bit 90 Reserved / /
R bit 91 Electric heating 1: yes 0: no Indoor
units board
Byte 11 R bit 92 Water pump 1: on; 0: off identifica-
R bit 93 Fresh air valve switch 1: turn on; 0: turn off Status tion
parameter
Cold plasma
R bit 94 1: turn on; 0: turn off
generator
R bit 95 Error output status 1: yes 0: no

13
ATTENTION: Pay special attention before devepment to the data marked with ★ (see paragraph 5.2)

Acess Type
(R-read
Addr. Data Parametry
Addr. only, Range ★ Remarks
Bit meaning type
W/R-
write/read)

R bit 96 Reserved / /
Indoor evaporator
R bit 97 1: yes 0: no
temp sensor error
Indoor air rturn temp Failure
R bit 98 1: yes 0: no
sensor error parameter

Light board ambient

R bit 99 1: yes 0: no
Byte 12 temp sensor error
R bit 100 Reserved / /
Water overflow
R bit 101 1: yes 0: no
protection Failure
Flag bit of IDU parameter
R bit 102 1: yes 0: no
memory ship error
R bit 103 Reserved / /
R bit 104 Jumper cap error 1 error, 0 normal Failure
R bit 105 Indoor fan error 1: yes 0: no parameter

R bit 106 Reserved / /

R bit 107 Reserved / /
Byte 13 Status
R bit 108 Unit needs cleaning 1: yes 0: no
parameter

R bit 109 Reserved / /

R bit 110 Reserved / /
R bit 111 Reserved / / Indoor
R bit 112 Card in/out status 0: card out, 1: card in units board
identifica-
Is there people in tion
R bit 113 0: no, 1: yes Status
the room?
parameter
0: low static pressure; 1: high static
R bit 114 Static pressure type
pressure
Byte 14 R bit 115 Reserved / /
R bit 116 Reserved / /
R bit 117 Reserved / /
R bit 118 Reserved / /
R bit 119 Reserved / /
Communication
R bit 120 failure with master 1: yes 0: no
wired controller
Communication
Failure
R bit 121 failure with slave 1: yes 0: no
parameter
wired controller
Communication
Byte 15 R bit 122 failure with 1: yes 0: no
Outdoor unit
R bit 123 Reserved / /
R bit 124 Reserved / /
R bit 125 Reserved / /
R bit 126 Reserved / /
R bit 127 Reserved / /

14
ATTENTION: Pay special attention before devepment to the data marked with ★ (see paragraph 5.2)

Acess Type
(R-read
Addr. Data Parametry
Addr. only, Range ★ Remarks
Bit meaning type
W/R-
write/read)

R bit 128 Reserved / /

R bit 129 Reserved / /
R bit 130 Reserved / /
R bit 131 Reserved / /
Byte 16
R bit 132 Reserved / /
R bit 133 Reserved / /
R bit 134 Reserved / /
Indoor
R bit 135 Reserved / / units board
R bit 136 Reserved / / identifica-
tion
R bit 137 Reserved / /
R bit 138 Reserved / /
R bit 139 Reserved / /
Byte 17
R bit 140 Reserved / /
R bit 141 Reserved / /
R bit 142 Reserved / /
R bit 143 Reserved / /
R bit 144 Reserved / /
R bit 145 Reserved / /
R bit 146 Reserved / /
Status
R bit 147 Outdoor fan status 1: on 0: off
Byte 18 parameter

R bit 148 Reserved / /

R bit 149 Reserved / /
R bit 150 4-way valve status 1: on 0: off Status
R bit 151 Compressor status 1: on 0: off parameter

Compressor
discharge
R bit 152 1: yes 0: no ODU
temperature
protection response
informa-
Fluorine shortage tion
R bit 153 1: yes 0: on
protection
DC fan motor
R bit 154 1: yes 0: on
protection
4-way valve reverse Failure
Byte 19 R bit 155 1: yes 0: on
error protection parameter

Over power
R bit 156 1: yes 0: on
protection
R bit 157 Over load protection 1: yes 0: on
Low pressure
R bit 158 1: yes 0: on
protection
High pressure
R bit 159 1: yes 0: on
protection

15
ATTENTION: Pay special attention before devepment to the data marked with ★ (see paragraph 5.2)

Acess Type
(R-read
Addr. Data Parametry
Addr. only, Range ★ Remarks
Bit meaning type
W/R-
write/read)
Evaporator
R bit 160 anti-freezing 1: yes 0: on
protection
Outdoor ambient
R bit 161 1: yes 0: on
temp sensor error
Discharge temp
R bit 162 1: yes 0: on
sensor error
Condenser temp Failure
R bit 163 1: yes 0: on
Byte 20 sensor error parameter
Error of copper pipe
temp sensor for
R bit 164 1: yes 0: on
the outdoor heat
exchanger
R bit 165 Jumper cap error 1: yes 0: on
Outdoor units
R bit 166 1: yes 0: on
memory chip error
R bit 167 Reserved / /
R bit 168 Reserved / /
R bit 169 Reserved / /
ODU
R bit 170 Reserved / / response
R bit 171 Reserved / / informa-
tion
Byte 21 R bit 172 Reserved / /
R bit 173 Reserved / /
Drive communication Failure
R bit 174 1: yes 0: on
failure parameter

R bit 175 Reserved / /

R bit 176 SAVE status 1: yes 0: on
Status
Cooling only heat parameter ★
R bit 177 0: cool and heat 1: cool only
pump flag bit (1)
R bit 178 Reserved / /
Status
R bit 179 System defrosting 1: yes 0: on
parameter
Byte 22 R bit 180 Reserved / /
R bit 181 Reserved / /
Low power Status
R bit 182 1: ready 0: not
consumption status parameter

AC input phase
Failure
R bit 183 sequence protection 1: yes 0: no
parameter
(phase loss or reverse)

16
ATTENTION: Pay special attention before devepment to the data marked with ★ (see paragraph 5.2)

Acess Type
(R-read
Addr. Data Parametry
Addr. only, Range ★ Remarks
Bit meaning type
W/R-
write/read)
Inverter compressor
drive DC busbar volta-
R bit 184 1 failure, 0 normal
ge overlow protection
or voltage drop off error
Inverter compressor
R bit 185 drive DC busbar volta- 1 failure, 0 normal
ge overhigh protection
Inverter compressor
R bit 186 drive alternate current 1 failure, 0 normal
protection (input side)
Byte 23 Inverter compressor
R bit 187 1 failure, 0 normal
drive IPM protection
Inverter compressor
R bit 188 1 failure, 0 normal
drive PFC protection
Inverter compressor
R bit 189 1 failure, 0 normal Failure
startup failure
parameter
Inverter compressor
R bit 190 1 failure, 0 normal
phase loss protection
Inverter compressor
R bit 191 1 failure, 0 normal
drive module reset
Inverter compressor
R bit 192 1 failure, 0 normal
over-current protection
Inverter compressor
R bit 193 1 failure, 0 normal
power protection
Inverter compressor
R bit 194 drive current check 1 failure, 0 normal ODU
circuit failure response
Inverter compressor informa-
R bit 195 1 failure, 0 normal tion
Byte 24 out-of-step protection
R bit 196 Compressor stalling 1 failure, 0 normal
R bit 197 Reserved / /
Inverter compressor
R bit 198 drive module high 1 failure, 0 normal
temperature protection Failure
Inverter compressor parameter
R bit 199 drive module tempera- 1 failure, 0 normal
ture sensor failure
R bit 200 Reserved / /
Inverter compressor low
R bit 201 1 failure, 0 normal
intensity field
Inverter compressor
R bit 202 1 failure, 0 normal
drive frequency limit
Inverter compressor
R bit 203 1 failure, 0 normal Status
drive frequency demultiply
parameter
Byte 25 Inverter compressor
R bit 204 drive AC input low vol- 1 failure, 0 normal
tage frequency limit
Inverter compressor
R bit 205 1 under charge, 0 charged
drive under charge
R bit 206 Reserved / /
Power type of inver-
Status
R bit 207 ter compressor drive 1 tri-phase, 0 single phase
parameter
AC input

17
ATTENTION: Pay special attention before devepment to the data marked with ★ (see paragraph 5.2)

Acess Type
(R-read
Addr. Data Parametry
Addr. only, Range ★ Remarks
Bit meaning type
W/R-
write/read)
Inverter compressor
Failure ★
R bit 208 drive storage chip 1 failure, 0 normal
parameter (1)
failure
R bit 209 Reserved / /
Inverter compressor
R bit 210 drive charged circuit 1 failure, 0 normal
failure
Inverter compressor
drive AC input
R bit 211 1 failure, 0 normal
voltage abnormal
protection
Temperature sensor
Byte 26 failure of inverter
R bit 212 1 failure, 0 normal
compressor drive
electric box Failure
Inverter compressor parameter
R bit 213 drive AC input zero 1 failure, 0 normal
cross protection
Temperature
R bit 214 1 failure, 0 normal
drift protection
Sensor connection
protection (electric
current sensor is not
R bit 215 1 failure, 0 normal
connected to the
corresponding U
phase or V phase)
R bit 216 Reserved / /
ODU
R bit 217 Reserved / / response
R bit 218 Reserved / / informa-
tion
R bit 219 Reserved / /
Byte 27
R bit 220 Reserved / /
R bit 221 Reserved / /
R bit 222 Reserved / /
R bit 223 Reserved / /
R bit 224 Reserved / /
R bit 225 Reserved / /
R bit 226 Reserved / /
R bit 227 Reserved / /
Byte 28
R bit 228 Reserved / /
R bit 229 Reserved / /
R bit 230 Reserved / /
R bit 231 Reserved / /
R bit 232 Reserved / /
R bit 233 Reserved / /
R bit 234 Reserved / /
R bit 235 Reserved / /
Byte 29
R bit 236 Reserved / /
R bit 237 Reserved / /
R bit 238 Reserved / /
R bit 239 Reserved / /

18
ATTENTION: Pay special attention before devepment to the data marked with ★ (see paragraph 5.2)

Acess Type
(R-read
Addr. Data Parametry
Addr. only, Range ★ Remarks
Bit meaning type
W/R-
write/read)

R bit 240 Reserved / /

R bit 241 Reserved / /
R bit 242 Reserved / /
ODU
R bit 243 Reserved / / response
Byte 30
R bit 244 Reserved / / informa-
tion
R bit 245 Reserved / /
R bit 246 Reserved / /
R bit 247 Reserved / /

19
6. COMMON FAILURES OF BMS SYSTEM

Failures Possible Causes Corrective Actions

Some communication cord is not twisted

Replace the cord with the twisted pair.
pair
The crystal head of the communication
Press down the crystal head properly
cord is not pressed down properly
The communication cord between indoor Solder the disconnected communication
and outdoor units is disconnected cord
The communication cord is broken Solder the broken communication cord
Based on the provided protocol BMS shows there
is communication error and it fails to display any It is not the two cords in the middle of the Wired the two cords in the middle of
operation status for all or some units and fails to crystal head that are wired the crystal head
control all or some units Repair the short-circuit communication
The communication cord is short-circuit
cord
The twisted pairs are too close with the
Separate the twisted pairs and the power
power cord (less than 15cm), resulting in
cord. If impossible, it is recommended to
too much interference which causes the
shield them with the steel pipe
communication failure
Some communication interfaces are
Reconnect the communication interface
connected improperly
After the replacement of the chip of the
outdoor unit or resetting of the DIP switch, Re-energize the unit
the unit is not re-energized
The serial port of the communication sof- Replace the serial port or modify the
The wiring is in good condition, but there tware fails to match with that of the PC setting of the serial port of the software
is no information displayed for all or some The unit address of the software does
units and the software shows there is Modify the set unit address of the software
not match with the actual unit address
communication failure
The unit is not energized Energize the unit
No chip is plugged in the indoor or Replug the chip and power on the unit
outdoor unit, or it is plugged reversely again
The unit address is wrong or repeated Modify the improperly set unit address
The wiring and other devices are in good
A repeater may be is needed or the
condition, but there is no information Install the repeater correctly
repeater is connected improperly
displayed for some device
No information is displayed and there is a
Check the wiring and follow the
alarm indicating the communication fai- The communication A and B are
principle of line A-to-line A and line
lure. Besides the TX lamp on the converter connected reversely or incorrectly
B-to-line B
lights all the time
Although the communication cord,
Check the model of the wireless remote
devices and the installation are in good
Incompatible display or controller is used controller and the wired controller, If
condition, there is still communication
not, make a replacement
failure on the software

20
A. ANNEX

A.1 CRC CalculationMethod

Calculation Method of CRC: The CRC is first preloading a 16-bit
register to all 1’s. Then successively transact each 8–bit bytes of
the message. During calculating the CRC, each 8–bit character is
exclusive ORed with the register contents. Then the result is shifted
in the direction of the least significant bit (LSB), with a zero filled
into the most significant bit (MSB) position. The LSB is extracted and
examined. If the LSB is a 1, the register is then exclusive ORed with a
preset, fixed value. If the LSB was a 0, no exclusive OR takes place.
This process is repeated until eight shifts have been performed. Af-
ter the last (eighth) shift, the next 8–bit character is exclusive ORed
with the register’s current value, and the process repeats for eight
shifts as described above. The final contents of the register, after
all the characters of the message have been applied, is the CRC
value. During transmission and reception of data in CRC, low order
byte is in the front.

A.2 Calculation of the CRC program steps

1. Preload a 16–bit register with FFFF hex (all 1’s). Call this the
CRC register.
2. Exclusive OR the first 8–bit byte of the message with the low–
order byte of the 16–bit CRC register, putting the result in the
CRC registers.
3. Shift the CRC register one bit to the right (toward the LSB),
zero–filling the MSB. Extract and examine the LSB.
4. (If the LSB was 0): Repeat Step 3 (another shift). (If the LSB was
1): Exclusive OR the CRC register with the polynomial value
A001 (1010 0000 0000 0001).
5. Repeat Steps 3 and 4 until 8 shifts have been performed. When
this is done, a complete 8–bit byte will have been processed.
6. Repeat Steps 2 and 5 to process the next 8-bit data.
7. The final obtained CRC register is CRC.

A.3 CRC Example (Only forReference)

Parameters: Data (Starting address of the block data), Data Size (Byte count of the block data)

Return: CRC Calculating Result

uint16 CRC_Calculate(uint8 *data, uint16 dataSize) {

uint8 i;
uint8 temp;
uint16 j;
uint16 CRCode;
CRCode=0xffff;
for(j=0;j<dataSize;j++){
CRCode = CRCode^data[j];
for( i = 0; i < 8; i++ ){
temp = CRCode & 0x0001;
CRCode = (CRCode >> 1);
if(temp ==1){
CRCode = (CRCode^0xA001);// 0xA001 is a preset multinomial, a constant value
}
}
}
return CRCode;
}

21