Grundfos CIM 200, CIU 250, CIM 500, CIU 500, CIU 200 Instructions Manual

...

Download

Page 1

GRUNDFOS INSTRUCTIONS

Modbus for Grundfos pumps

CIM/CIU 200 Modbus RTU CIM/CIU 250 GSM/GPRS CIM/CIU 500 Ethernet for Modbus TCP

Functional profile and user manual

Page 2

English (GB) Functional profile and user manual

Caution

Note

English (GB)

Original functional profile and user manual.

CONTENTS

1. Symbols used in this document

2. Introduction

2.1 About this functional profile

2.2 Assumptions

2.3 Definitions and abbreviations

3. System description

3.1 Modbus

3.2 Modbus RTU (CIM 200)

3.3 Modbus GSM/GPRS (CIM 250)

3.4 Modbus TCP (CIM 500)

4. Specifications

4.1 CIM module general data

4.2 CIM 200 Modbus RTU

4.3 CIM 250 GSM/GPRS

4.4 CIM 500 Modbus TCP

5. Modbus RTU, CIM 200 setup

5.1 Setting the Modbus transmission speed

5.2 Setting the parity

5.3 Modbus address selection

5.4 Termination resistor

5.5 Status LEDs

6. Modbus GSM/GPRS, CIM 250 setup

6.1 Installation

6.2 Status LEDs

7. Modbus TCP, CIM 500 setup

7.1 Connecting the Ethernet cable

7.2 Setting the Industrial Ethernet protocol

7.3 Setting the IP addresses

7.4 Establish connection to the Web server

7.5 Status LEDs

7.6 DATA and LINK LEDs

8. Modbus function code overview

9. Modbus register addresses

9.1 Register block overview

9.2 CIM configuration register block

9.3 CIM status register block

9.4 Pump control register block

9.5 Pump status register block

9.6 Pump data register block

9.7 Sensor-dependent measurements

9.8 Alarm simulation register block

10. Detailed descriptions of registers

10.1 Control mode

10.2 Setpoint

10.3 Alarms and warnings

11. Modbus RTU commissioning, step-by-step guides

11.1 Hardware setup (CIM 200)

11.2 Hardware setup (CIU 200)

11.3 Hardware setup (CIM 250 GSM call-up)

11.4 Hardware setup (CIU 250 GSM call-up)

11.5 Hardware setup (CIM 250 GPRS connection)

11.6 Hardware setup (CIU 250 GPRS connection)

11.7 Modbus TCP communication setup (CIM 500)

11.8 Modbus TCP communication setup (CIU 500)

12. Detailed descriptions of functionality

12.1 GSM

12.2 GPRS

13. Modbus RTU telegram examples

13.1 Modbus telegram overview

13.2 Read holding registers (0x03)

13.3 Read input registers (0x04)

13.4 Write single register (0x06)

13.5 Write multiple registers (0x10)

13.6 Diagnostics (0x08)

13.7 Diagnostics register interpretation

13.8 Diagnostics: Return query data

Page

10 12

13 13 13 14 14 14

16 17 18 18 20 22 24 25

26 27 28

29 29 29 30 30 30 31 31

32 32

35 35 35 36 36 36 37 37

13.9 Reading the CIM configuration register block

13.10 Setting the setpoint

13.11 Setting the control mode

13.12 Starting the E-pump

3 3 3

4 4 4 4

5 5 6 6

7 8 8 8 9

13.13 Stopping the E-pump

14. Fault finding

14.1 Fault finding CIM/CIU 200

14.2 Fault finding CIM/CIU 250

14.3 Fault finding CIM/CIU 500

15. Modbus RTU rotary switch addresses

16. Grundfos alarm and warning codes

1. Symbols used in this document

Warning

If these safety instructions are not observed, it may result in personal injury.

If these safety instructions are not observed, it may result in malfunction or damage to the equipment.

Notes or instructions that make the job easier and ensure safe operation.

37 37 38 38 38

39 41 43

Page 3

2. Introduction

2.1 About this functional profile

This functional profile describes the:

• CIM/CIU 200 Modbus RTU

• CIM/CIU 250 Modbus GSM/GPRS

• CIM/CIU 500 Modbus Ethernet for Modbus TCP for the following Grundfos products:

• Grundfos CRE/CRNE/CRIE, MTRE, CHIE, CME

• Grundfos TPE, TPE Series 2000, NBE/NKE

• Grundfos CUE drive

• Grundfos MAGNA (with add-on GENIbus module)

• Grundfos MAGNA3

• Grundfos UPE Series 2000 (UPE 80-120 and 100-120). In the following, the supported products are referred to as

"E-pumps". The data in this document are subject to change without prior

notice. Grundfos cannot be held responsible for any problems caused directly or indirectly by using information in this functional profile.

2.2 Assumptions

This functional profile assumes that the reader is familiar with commissioning and programming of Modbus devices. The reader should also have some basic knowledge of the Modbus protocol and technical specifications.

It is also assumed that an existing Modbus network with a Modbus master is present.

2.3 Definitions and abbreviations

ARP

Auto-MDIX

CAT5

CAT5e

CAT6 Cable with very high performance. CIM Communication Interface Module. CIU Communication Interface Unit.

CRC

DHCP

DNS

GENIbus Proprietary Grundfos fieldbus standard. GENIpro Proprietary Grundfos fieldbus protocol.

GPRS

Grundfos GO

GSM

H Pressure (Head).

-generation mobile telephony network.

4 Address Resolution Protocol.

Translates IP-addresses to MAC-addresses.

Ensures that both crossover cable types and non-crossover cable types can be used.

Ethernet cable type: Has 4 twisted pairs of wires.

Enhanced CAT5 cable with better performance.

Cyclic Redundancy Check, a data error detection method.

Dynamic Host Configuration Protocol. Used to configure network devices so that they can communicate on an IP network.

Domain Name System. Used to resolve host names to IP addresses.

General Packet Radio Service, technology to achieve TCP/IP communication and internet access via GSM.

A Grundfos handheld remote control device for controlling Grundfos products via infrared or radio. Based on smart phone technology.

Global System for Mobile communications.

Hyper Text Transfer Protocol.

HTTP

IANA Internet Assigned Numbers Authority. IP Internet Protocol. LED Light-Emitting Diode.

MAC

Modbus

Modbus RTU

Modbus TCP

Ping

PUK Personal Unblocking Key (SIM cards). QFlow.

R100

SELV Separated or Safety Extra-Low Voltage.

SELV-E

SIM SIM card, Subscriber Identity Module.

SMA

SMTP Simple Mail Transfer Protocol

SNTP

TCP

TCP/IP

Transmission speed Bits transferred per second, bits/s.

URL

UTC

UTF-8

VPN

The protocol commonly used to navigate the world wide web.

Media Access Control. Unique network address for a piece of hardware.

A serial communications protocol commonly used in industry and building automation systems.

Modbus is a fieldbus used worldwide. The RTU version is used for wired networks (CIM 200) and for call-up connections over telephone networks (CIM 250).

Modbus is a fieldbus used worldwide. The TCP version is adapted for use as an application protocol on TCP/IP using either GPRS (CIM 250) or Ethernet (CIM 500) as basis.

Personal Identification Number (SIM cards).

Packet InterNet Groper. A software utility that tests connectivity between two TCP/IP hosts.

Grundfos handheld infrared remote control.

Separated or Safety Extra-Low Voltage with Earth connection.

SubMiniature version A. Coaxial radio signal cable connection standard.

Simple Network Time Protocol. Used for clock synchronization between computer systems.

Transmission Control Protocol. Protocol suitable for Internet communication and Industrial Ethernet communication.

Transmission Control Protocol/Internet Protocol. Protocol suitable for Internet communication.

Uniform Resource Locator. The IP address used to connect to a server.

Coordinated Universal Time, the primary time standard by which the world regulates clocks and time.

Unicode Transformation Format (character encoding).

Virtual Private Network. A network using the Internet to connect nodes. These systems use encryption and other security mechanisms to ensure that only authorised users can access the network and that the data cannot be intercepted.

English (GB)

Page 4

3. System description

Modbus RTU

RS-485

Modbus RTU

12 34 567

CIM 200

Modbus RTU

GENIbus

RS485

CIU 200

Note

GSM/GPRS

2345

CIM 250

GENIbus

RS-485

CIU 250

GSM/GPRS

Modbus TCP

CIM 500

Modbus TCP

GENIbus

RS485

CIU 500

English (GB)

3.1 Modbus

The system diagrams provide an overview for the different technologies of how to connect the CIM/CIU to the Grundfos E-pump that is to be connected to a Modbus network.

CIM

The CIM solution is an add-on communication module to be installed internally in a Grundfos E-pump, using a 10-pin connection. In this setup, the E-pump will supply power to the CIM. See fig. 1.

For mounting of the CIM add-on module, see the installation and operating instructions for the E-pump in question.

CIU

The CIU solution is a box with a power supply module and a CIM Modbus module. It can either be mounted on a DIN rail or on a wall.

It is used in conjunction with Grundfos E-pumps that do not support an internal, add-on communication module (CIM). See fig. 2.

3.2 Modbus RTU (CIM 200)

3.3 Modbus GSM/GPRS (CIM 250)

TM04 9232 3610TM04 9233 3610

Fig. 3 Principle sketch of CIM 250 Modbus GSM/GPRS

solution with internal add-on CIM module and external antenna. The figure shows a CRE pump.

Fig. 4 Principle sketch of CIU 250 Modbus GSM/GPRS

solution with external antenna. The figure shows a CUE-drive for pumps.

3G/4G are not supported via CIM 250.

Fig. 1 Principle sketch of CIM 200 Modbus RTU solution with

add-on CIM module installed inside the pump. The figure shows a MAGNA3 pump.

Fig. 2 Principle sketch of CIU 200 Modbus RTU solution.

The gfigure shows a CUE-drive for pumps.

The Grundfos CIM/CIU is connected as a Modbus slave directly to the Modbus network.

3.4 Modbus TCP (CIM 500)

TM04 2295 2208TM05 74391013

TM05 7431 1013TM05 7452 1013

Fig. 5 Principle sketch of CIM 500 Modbus TCP solution with

internal add-on CIM module. The figure shows a CRE pump.

Fig. 6 Principle sketch of CIU 500 Modbus TCP solution.

The figure shows a CUE drive for pumps.

Page 5

4. Specifications

4.1 CIM module general data

General data Description Comments

Ambient humidity 30 % to 95 % Relative, non-condensing. Operating temperature -20 °C to +45 °C Storage temperature -25 °C to +70 °C

Battery, lithium-ion

GENIbus visual diagnostics LED2

Power supply (CIU) 24-240 V Located in the CIU. GENIbus connection type (CIU) RS-485, 3-wire + screen Conductors: A, B and Y. CIU box enclosure class IP54 CIU box dimensions (H x W x D) 182 x 108 x 82 mm

The battery will only be charged if the battery temperature is within 0 °C to +45 °C.

4.2 CIM 200 Modbus RTU

The table below provides an overview of the specifications for the Grundfos CIM 200 and CIU 200. For further details, please refer to the specific sections of this functional profile.

Modbus RTU specifications Description Comments

Modbus connector Screw-type terminal

Modbus connection type RS-485, 2-wire + common

Maximum cable length 1200 m Equals 4000 ft.

Slave address 1-247

Line termination On or Off

Recommended cable cross sectional cobber area

Supported transmission speeds

Start bit 1 Fixed value. Data bits 8 Fixed value.

Stop bits 1 or 2

Parity bit Even parity, odd parity* or no parity

Modbus visual diagnostics LED1

Maximum number of Modbus devices 32

Maximum Modbus telegram size 256 bytes

* Can only be set via software.

0.20 - 0.25 mm

1200*, 2400*, 4800*, 9600, 19200, 38400 bits/s

CIM 250 only.

Will be in one of these states: Off, constantly green, flashing red, constantly red. See section 5.5 Status LEDs.

3 pins. See section 5. Modbus RTU, CIM 200 setup.

Conductors: D0, D1 and Common. See section 5. Modbus RTU, CIM 200 setup.

Set via rotary switches SW6 and SW7. See section 5.3 Modbus address selection.

Set via DIP switches SW1 and SW2. See section 5.4 Termination resistor.

AWG24 or AWG23

Set via DIP switches SW4 and SW5. See section 5.1 Setting the Modbus transmission

speed.

Set via DIP switch SW3. See section 5.2 Setting the parity.

Off, flashing green, flashing red, constantly red. See section 5.5 Status LEDs.

Using repeaters, this number can be increased. Legal address range is 1-247.

Total length. Node address and CRC included. See section 13. Modbus RTU telegram examples.

English (GB)

Page 6

4.3 CIM 250 GSM/GPRS

English (GB)

The table below provides an overview of the specifications for the Grundfos CIM/CIU 250. For further details, please refer to the specific sections of this functional profile.

Modbus GSM/GPRS specifications Description Comments

Data protocol Modbus RTU/Modbus TCP GSM call-up uses RTU. GPRS uses TCP.

Slave address Factory 231 (0xE7)

GSM/GPRS visual diagnostics LED1 See section 6.2 Status LEDs.

Maximum Modbus telegram size 260 bytes

4.4 CIM 500 Modbus TCP

The table below provides an overview of the specifications for the Grundfos CIM/CIU 500 for Modbus TCP. For further details, please refer to the specific sections of this functional profile.

Modbus TCP specifications Description Comments

Application layer

Transport layer TCP Internet layer Internet protocol V4 (IPv4) Link layer ARP, media access control (Ethernet)

Ethernet cable

Maximum cable length 100 metres at 10/100 Mbits/s Corresponds to 328 feet. Transmission speed 10 Mbits/s, 100 Mbits/s Auto-detected Industrial Ethernet protocols PROFINET IO, Modbus TCP Selected with rotary switch, section 7.2.

DHCP, HTTP, Ping, FTP, SMTP, SNTP, Modbus TCP

Screened/unscreened, twisted-pair cables, CAT5, CAT5e or CAT6

Can be changed via Modbus register 00003, SoftwareDefinedModbusAddress.

Total Modbus TCP/IP application data unit. See fig. 25.

Rotary switch in position 1.

Supports auto cable-crossover detecting (Auto-MDIX)

Page 7

5. Modbus RTU, CIM 200 setup

1 2 34 5 6 7

SW4 SW5

Fig. 7 CIM 200 Modbus module

Pos. Designation Description

1D1

2D0

3 Common/GND

4SW1/SW2

5 SW3/SW4/SW5

6LED1

7LED2

8SW6

9SW7

A screened, twisted-pair cable must be used. The cable screen must be connected to protective earth at both ends.

Recommended connection

Modbus terminal Colour code Data signal

D1-TXD1 Yellow Positive D0-TXD0 Brown Negative Common/GND Grey Common/GND

Modbus terminal D1 (positive data signal)

Modbus terminal D0 (negative data signal)

Modbus terminal Common/GND

On/off switches for termination resistor

Switches for selection of Modbus parity and transmission speed

Red/green status LED for Modbus communication

Red/green status LED for internal communication between the CIM/CIU 200 and the E-pump

Hex switch for setting the Modbus address (four most significant bits)

Hex switch for setting the Modbus address (four least significant bits)

5.1 Setting the Modbus transmission speed

The transmission speed must be set correctly before the CIM 200 Modbus module is ready to communicate with the Modbus network. DIP switches SW4 and SW5 are used for setting the transmission speed. See fig. 8.

Fig. 8 Modbus transmission speed

DIP switch settings

Available transmission speeds in bits/s: 1200, 2400, 4800, 9600, 19200 and 38400.

The first three transmission speeds are only available via software settings, whereas the last three are available via DIP switches.

TM04 1697 0908

Transmission speed [bits/s] SW4 SW5

9600 OFF ON 19200 OFF OFF 38400 ON OFF Software-defined ON ON

Default transmission speed is 19200 bits per second, as per the Modbus RTU standard.

Software-defined

When SW4 and SW5 are set to "software-defined", writing a value to the holding register at address 00004 will set a new transmission speed.

Use the following values for software-defined transmission speeds:

Software-defined transmission speed

1200 bits/s 0 2400 bits/s 1 4800 bits/s 2 9600 bits/s 3 19200 bits/s 4 38400 bits/s 5

This value is set to 1200 bits/s as default. The communication interface does not support transmission

speeds above 38400 bits/s. The software-defined transmission speed value will be stored in

the communication interface and will remain after a power-off.

Value to set in register 00004

English (GB)

TM04 1710 0908

Page 8

5.2 Setting the parity

Note

SW3

Note

SW6 SW7

SW1 SW2

English (GB)

When software-defined transmission speed is enabled (ON), software-defined parity and stop bits are also enabled.

The parity can be set either manually by using SW3 or via software-defined settings.

Manual setting of parity

Default byte format (11 bits):

• 1 start bit

• 8 data bits (least significant bit sent first)

• 1 parity bit (even parity)

• 1 stop bit. The default setting of the CIM 200 Modbus module is even parity

(1 stop bit). It is possible to change the parity using DIP switch SW3. The parity can be changed to no parity (2 stop bits). See fig. 9.

Fig. 9 Parity

DIP switch settings

5.3 Modbus address selection

A Modbus slave on a Modbus network must have a unique address from 1-247. Address 0 is reserved for broadcasting, and is not a valid slave address.

To set the Modbus address, two hexadecimal rotary switches (SW6 and SW7) are used. See fig. 10.

Fig. 10 Setting the Modbus address

For a complete overview of Modbus addresses, see section

14. Fault finding.

The Modbus address must be set decimally from 1 to 247.

5.4 Termination resistor

The termination resistor is fitted on the CIM 200 Modbus module and has a value of 150 Ω.

TM04 1709 0908

The CIM 200 has a DIP switch with two switches (SW1 and SW2) for cutting the termination resistor in and out. Figure 11 shows the DIP switches in cut-out state.

TM04 1706 0908

Parity SW3

Even parity, 1 stop bit OFF No parity, 2 stop bits ON

Software-defined parity and stop bits

When SW4 and SW5 are set to "software-defined", the value in the holding registers at addresses 00009 and 00010 will override the setting of SW3. See figs 8 and 9.

Software-defined parity

Value to set in register 00009

No parity [default] 0 Even parity 1 Odd parity 2

Software-defined stop bit

Value to set in register 00010

1 stop bit [default] 1 2 stop bits 2

The software-defined parity and stop bit values will be stored in the communication interface and will remain after a power-off.

Before the parity and stop bits can be set via software-defined settings, SW4 and SW5 must be set to ON.

Fig. 11 Cutting the termination resistor in and out

DIP switch settings

Status SW1 SW2

Cut-in ON ON

OFF OFF

Cut-out

ON OFF

OFF ON

Default setting: Termination resistor cut out.

Cable length

Grundfos recommends the following maximum lengths:

Maximum cable length

Bits/s

Terminated cable Unterminated cable

[m/ft] [m/ft]

1200-9600 1200/4000 1200/4000 19200 1200/4000 500/1700 38400 1200/4000 250/800

TM04 1701 0908

To ensure a stable and reliable communication, it is important that only the termination resistor of the first and last units in the Modbus network are cut in.

All switch settings will be effective immediately after setting the values. No power-off needed.

Page 9

5.5 Status LEDs

Note

The CIM 200 Modbus module has two LEDs.See fig. 7.

• Red/green status LED (LED1) for Modbus communication

• Red/green status LED (LED2) for internal communication between the CIM 200 and the Grundfos product.

LED1

Status Description

Off No Modbus communication. Flashing green Modbus communication active. Flashing red Fault in the Modbus communication.

Permanently red

LED2

Status Description

Off The CIM 200 has been switched off.

Flashing red

Permanently red

Permanently green

Fault in the CIM 200 Modbus configuration.

No internal communication between the CIM 200 and the Grundfos product.

The CIM 200 does not support the Grundfos product connected.

Internal communication between the CIM 200 and the Grundfos product is OK.

English (GB)

During start-up, there may be a delay of up to 5 seconds before the LED2 status is updated.

Page 10

6. Modbus GSM/GPRS, CIM 250 setup

23 45

Note

English (GB)

Fig. 12 CIM 250 GSM module (top-side view)

Pos. Designation Description

1 Battery socket 2 SIM card holder 3 SMA connection for GSM antenna

4LED1

Yellow/green status LED for GSM/ GPRS communication

Red/green status LED for internal

5LED2

communication between the CIU 250 and pump

Reset button.

6SW1

Keep the button pressed for 5 seconds to return to default settings.

6.1 Installation

Before installation, make sure that the power supply has been switched off and that it cannot be accidentally switched on.

6.1.1 Fitting a GSM antenna

An antenna must be connected to the CIM 250 to establish connection to the GSM network.

If the CIU 250 is installed in a metal control cabinet, Grundfos recommends fitting an external GSM antenna.

Grundfos offers different kinds of antennas. No antenna is supplied with the CIU 250. It must be ordered separately.

External antenna

Connect the antenna cable to the SMA connection (pos. 1) of the CIM 250. The antenna must be installed outside the control

TM04 2642 1210

cabinet in a position with good reception conditions.

Fig. 13 Fitting an external GSM antenna

TM04 2644 2808

Pos. Description

1 SMA connection for GSM antenna 2 Antenna cable for external GSM antenna

Page 11

6.1.2 Inserting the SIM card

Note

Before inserting the SIM card into the CIM 250, remove the PIN code, or set the PIN code to "4321".

Procedure

1. Insert the SIM card into a mobile phone.

2. Remove the PIN code from the SIM card, or set the PIN code

to "4321". See the manual of the mobile phone.

3. Insert the SIM card into the CIM 250. See fig. 14.

The slanted edge of the SIM card must point downwards (away from the connector).

The connectors on the SIM card must face inwards towards the CIM 250. See fig. 14.

Fig. 14 Inserting the SIM card

Pos. Description

1 SIM card holder 2SIM card

6.1.3 Connecting the battery and power supply

Warning

The CIM 250 must only be connected to SELV or SELV-E circuits.

Warning

The safety precautions listed below must be observed carefully as improper handling of the lithium-ion battery may result in injury or damage from electrolyte leakage, heating ignition or explosion.

These safety precautions must be observed:

• Only insert the approved Grundfos battery pack (97631960).

• Never use this battery pack in other battery chargers.

• Do not dismantle or modify the battery.

• Do not heat or incinerate the battery.

• Do not pierce, crush or cause mechanical damage to the battery.

• Do not short-circuit the battery.

• Do not allow the battery to get wet or be immersed in water.

• Do not strike or throw the battery.

• For long periods of storage, the temperature should be below 45 °C.

TM04 2643 2808

The CIM 250 is fitted with a lithium-ion battery. It is secured by a velcro strap which absorbs vibrations and makes it easier to replace the battery. Connect the battery to the CIM 250 as shown in fig. 15.

If a battery is not connected, the user will not receive any SMS alarm message in case of a power cut.

English (GB)

TM04 2645 2808

Fig. 15 Connecting the battery

The battery will only be charged if the battery temperature is within 0 °C to +45 °C.

Switch on the power supply. The CIM 250 is powered either by the CIU 250 or by the battery.

The LED1 flashes yellow (searching for GSM network). When the connection to the GSM network has been established, the LED1 will pulsate yellow (GSM network active). See fig. 16.

The LED2 must be constantly green, indicating that the CIM 250 has been fitted correctly in the CIU 250.

6.1.4 Configuration

For software configuration of the CIU 250, which includes setting of SMS functions and SCADA communication parameters, see "CIM 25X SMS commands" (supplement to the installation and operating instructions) on the CD-ROM supplied with the GSM module.

Page 12

6.2 Status LEDs

1 sec.

3 sec.

Yel lo w

Green

English (GB)

The CIM 250 GSM module has two LEDs. See fig. 12.

• Yellow/green status LED (LED1) for GSM/GPRS communication.

Red/green status LED (LED2) for internal communication between the CIM 250 and the E-pump.

LED1 (yellow/green)

Fig. 16 LED1 status

Pos. Status Description

1 Flashing yellow Searching for GSM network.

Pulsating yellow

(single pulse)

3 Constantly yellow

Pulsating green

(single pulse) Pulsating green

(double pulse)

6 Green (3 sec.)

Connection to the GSM network has been established.

Call-up connection has been established.

Data are exchanged via GPRS.

Data are exchanged via the call-up connection.

Sending or receiving an SMS message.

TM04 5194 4412

LED2 (red/green)

Status Description

Off The CIM 250 has been switched off.

Flashing red

Constantly red

Constantly green

No communication between the CIM 250 and the E-pump.

The CIM 250 does not support the connected version of the E-pump.

The connection between the CIM 250 and the E-pump is OK.

Page 13

7. Modbus TCP, CIM 500 setup

Note

Ethernet switch

CIM 500

CIM

500 CIM 500

475

Note

Warning

The CIM 500 must only be connected to SELV or SELV-E circuits.

7.2 Setting the Industrial Ethernet protocol

The CIM 500 Ethernet module has a rotary switch for selection of the Industrial Ethernet protocol. See fig. 19.

7.1 Connecting the Ethernet cable

RJ45 plugs and Ethernet cable must be used. The cable shield must be connected to protective earth at both ends.

It is important to connect cable shield to earth through earth clamp or to connect cable shield to earth in the connector.

The CIM 500 is designed for flexible network installation; the built-in two port switch makes it possible to daisy chain from product to product without the need of additional Ethernet switches. The last product in the chain is only connected to one of the Ethernet ports. Each Ethernet port has its own MAC address.

Fig. 17 Example of Industrial Ethernet network

Fig. 19 Selecting the Industrial Ethernet protocol

Pos. Description

0 PROFINET IO (default from factory) 1 Modbus TCP

Reserved, LED1 will be permanently red to indicate an

2..E invalid configuration

Reset to factory default

TM05 6435 4711

Note: The rotary switch has to be set in this position for 20 seconds to reset to factory default. During this period

LED1 will be flashing red and green at the same time to indicate reset will occur.

Every change of the rotary switch setting, when the module is powered on, will cause the module to restart.

7.3 Setting the IP addresses

The CIM 500 Ethernet module is default set up to a fixed IP address. It is possible to change the IP address settings from the built-in web server.

English (GB)

TM05 7431 1013

Default IP settings used by web server

IP-settings for Modbus TCP

TM05 7431 1013

IP address:192.168.1.100 Subnet mask: 255.255.255.0 Gateway: 192.168.1.1

Must be setup by the Web server

Fig. 18 Example of Ethernet connection

Pos. Description Designation

1 Industrial Ethernet RJ45 Connector 1 ETH1 2 Industrial Ethernet RJ45 Connector 2 ETH2 3 Rotary switch for protocol selection SW1 4 Data activity LED for Connector 1 DATA1 5 Link LED for Connector 1 LINK1 6 Data activity LED for Connector 2 DATA2 7 Link LED for Connector 2 LINK2

Green/red status LED for Ethernet

communication

LED 1

Green/red status LED for internal

communication between module and

LED 2

pump.

Page 14

7.4 Establish connection to the Web server

Note

English (GB)

The CIM 500 module can be configured using the built-in Web server. To establish a connection from a PC to CIM 500 the following steps are required:

• Connect the PC and the CIM 500 module using an Ethernet cable.

• Configure the PC Ethernet port to the same subnetwork as the CIM 500, e.g. 192.168.1.101, and the subnet mask to

255.255.255.0. See section A.1 How to configure an IP

address on your PC on page 48.

• Open a standard Internet browser and type 192.168.1.100 in the URL field.

• Log in to the Web server using:

User admin (factory default) Password Grundfos (factory default)

User and password may have been changed from their factory default values.

Fig. 20 CIM 500 connected to PC via Ethernet cable

For Further information how to use the Web server. See section A.2 Web server configuration on page 48.

Both ETH1 and ETH2 can be used to establish a connection to the Web server.

The web server can be accessed while the selected Industrial Ethernet protocol is active.

7.5 Status LEDs

The CIM 500 Ethernet module has two status LEDs, (LED1 and LED2).

See fig. 18.

• Red/green status LED (LED1) for Ethernet communication

• Red/green status LED (LED2) for internal communication between the CIM 500 and the Grundfos product.

LED1

Status Description

Off

Flashing green Modbus TCP communication active.

Permanently red

Permanently red and green

Flashing red and green

LED2

TM05 6436 4712

Status Description

Off The CIM 500 is switched off.

Flashing red

Permanently red

Permanently green

Permanently red and green Memory fault.

No Modbus TCP communication or switched off.

CIM 500 module configuration fault. See section 14.3.1.

Error in firmware download. See section 14.3.1.

Resetting to factory default. After 20 seconds the CIM 500 will restart.

No internal communication between the CIM 500 and the Grundfos product.

The CIM 500 does not support the Grundfos product connected.

Internal communication between the CIM 500 and the Grundfos product is OK.

During start-up, there is a delay of up to 5 seconds before LED1 and LED2 status is updated.

7.6 DATA and LINK LEDs

The CIM 500 Ethernet module has two connectivity LEDs related to each RJ45 Connector. See fig.18.

DATA1 and DATA2

These yellow LEDs indicate data traffic activity.

Status Description

Yellow off No data communication on RJ45 Connector. Yellow

flashing Steady

yellow

LNK1 and LINK2

These green LEDs shows whether the Ethernet cable is properly connected.

Status Description

Green off No Ethernet Link on RJ45 Connector Green on Ethernet Link on RJ45 Connector is OK

Data communication ongoing on RJ45 Connector.

Heavy network traffic on RJ45 Connector.

Page 15

8. Modbus function code overview

Note

The supported function codes are shown in the table below:

Type Code Hex Name

03 0x03 Read holding registers

16-bit data (registers)

Diagnostics 08 08

Reading or writing coils are not supported.

The same data are available in both holding registers and input registers, meaning that either function (0x03 or 0x04) can be used for reading data.

04 0x04 Read input registers 06 0x06 Write single register 16 0x10 Write multiple registers

Diagnostics See section 13.6 Diagnostics (0x08) for subcodes.

English (GB)

Page 16

9. Modbus register addresses

English (GB)

9.1 Register block overview

The Modbus RTU registers are grouped in the following register blocks:

Start address Register block Permissions Description

00001 CIM configuration R/W Configuration of the CIM module. 00021 CIM status R Status registers for the CIM module. 00101 Pump control R/W Registers for control of the E-pump. 00201 Pump status R Registers for reading mode status from the E-pump. 00301 Pump data R Registers for reading measured data values from the E-pump. 00701 Alarm simulation R/W Registers for simulating alarms and warnings in the E-pump.

Page 17

9.2 CIM configuration register block

Registers in this block can be read by means of function codes 0x03 and/or 0x04. They can be written as holding registers with function codes 0x06 and 0x10.

CIM

Address Register name Description

The minimum reply delay from the slave in ms. Value range: 0-10000, i.e. up to 10 seconds reply delay. This delay is

00001 SlaveMinimumReplyDelay

00002 RegisterOffset

00003 SoftwareDefinedModbusAddress

00004 SoftwareDefinedBitRate

00005 AutoAckControlBits

00006 ReadWriteSeparation Not used. - - 00007 ScadaCallBackRegister Not used. - - -

00008 NoDataActivityTimeout

00009 SoftwareDefinedParity

00010 SoftwareDefinedStopBit

00011 ScadaPinCode

typically used in conjunction with a radio modem. The delay value is stored in the device and will remain after a power-off. The delay set here will be added to the internal delay in the device. Default value is 0.

An address offset that is added to all addresses above 00100. Default value is 0. Note: This offset does not affect the CIM configuration register block or the CIM status register block addresses. The register offset value is stored in the device and will remain after a power-off. For most applications, this offset should not be changed.

This register holds the active Modbus address. The default value is 0xE7 (231), and there is normally no need to change this value. Note: For CIM 200, this value is used only when the transmission speed is set to "Software-defined" on DIP switches SW4 and SW5. Otherwise, it will be ignored by the slave.

Modbus software-defined transmission speed enumeration. The software-defined transmission speed value is stored in the device and will remain after a power-off. 0: 1200 bits/s 1: 2400 bits/s 2: 4800 bits/s 3: 9600 bits/s 4: 19200 bits/s 5: 38400 bits/s. Note: This value is used only when the transmission speed is set to "Software-defined" on DIP switches SW4 and SW5 by selecting a value outside the range [0; 247]. Otherwise, it will be ignored by the slave.

Used to select the behaviour of control bit acknowledgements from the CIM/CIU. 0: Disabled. Control bits are not automatically lowered when accepted by the device. The user must lower the triggered control bit manually before the control bit can be triggered again. 1: Enabled. Control bits are automatically lowered when accepted by the device. The user does not have to lower it manually [default].

The elapsed time with no data activity before the module issues a "GPRS restart".

Parity setting to be used when using "software-defined" settings. 0: No parity [default] 1: Even parity 2: Odd parity. Note: For CIM 200, this value is used only when the transmission speed is set to "Software-defined" on DIP switches SW4 and SW5. Otherwise, it will be ignored by the slave.

Stop bit setting to be used when using "software-defined" settings. 0: No stop bit 1: 1 stop bit [default] 2: 2 stop bits. Note: For CIM 200, this value is used only when the transmission speed is set to "Software-defined" on DIP switches SW4 and SW5. Otherwise, it will be ignored by the slave.

PIN code for SCADA systems, etc. If GeneralStatus.ScadaPinCodeEnabled (register 00029, bit 0) is enabled, the correct PIN code must be entered in this register in order to gain access to remote control and configuration. Verify acceptance in GeneralStatus.WriteAccess (register 00029, bit 1). Programming of the SCADA PIN code takes place via the SMS command SETSCADACODE. See "CIM 25X SMS commands" (supplement to the installation and operating instructions) on the CD-ROM supplied with the GSM module.

CIM

200

250

● --

●●●

●● -

● --

●●●

- ● -

● --

- ● -

CIM 500

English (GB)

Page 18

9.3 CIM status register block

English (GB)

Registers in this block can be read by means of function codes 0x03 and/or 0x04. They are read-only. This block can be used for various kinds of fault finding.

Address Register name Description

00021 GENIbusCRCErrorCnt Holds a CRC error counter for the GENIbus connection to the E-pump. ●●● 00022 GENIbusDataErrorCnt Holds a data error counter for the GENIbus connection to the E-pump. ●●● 00023 VersionNumber A Grundfos-specific version number. This is an unsigned integer value. ●●●

00024 ActualModbusAddress

00025 00026

00027 00028

00029

00030 UnitFamily Grundfos product family. ●●● 00031 UnitType Grundfos product type. ●●● 00032 UnitVersion Grundfos product version. ●●●

GENIbusTXcountHI GENIbusTXcountLO

GENIbusRXcountHI GENIbusRXcountLO

GeneralStatus Bit 0: ScadaPinCodeEnabled

GeneralStatus Bit 1: WriteAccess

Holds the current Modbus slave address of the device. Valid value range: 1…247.

Holds a transmit counter for total number of telegrams sent to the E-pump on the GENIbus connection.

Holds a receive counter for total number of telegrams received from the E-pump on the GENIbus connection.

PIN code functionality. 0: No PIN code required. 1: PIN code required to perform remote control and configuration. Activation of SCADA PIN code protection takes place via the SMS command SCADACODE. See "CIM 25X SMS commands" (supplement to the installation and operating instructions) on the CD-ROM supplied with the GSM module.

Remote write access. 0: No write access (the PIN code is incorrect) 1: Full write access (the PIN code is either correct or not enabled).

CIM

CIM 250

CIM 500

200

●●●

- ● -

9.4 Pump control register block

Registers in this block can be read by means of function codes 0x03 and/or 0x04. They can be written as holding registers with function codes 0x06 and 0x10.

Address Register name Description

Control bit that sets local or remote control.

Bit 0: RemoteAccessReq

Bit 1: OnOffReq

Bit 2: ResetAlarm

00101

Bit 4: CopyToLocal

Bit 5: EnableMaxFlowLimit

Bits 6-15: RESERVED -

0: Local 1: Remote (controlled by Modbus master). This bit must be set to 1 if the E-pump is to be controlled by a Modbus master.

Control bit that switches the E-pump on or off. 0: Off (stop) 1: On (start).

Control bit that resets alarms and warnings from the E-pump. 0: No resetting 1: Resetting alarm. This control bit is triggered on rising edge only, i.e. setting logical 0 to 1. See section 9.2 CIM configuration register block, address 00005, for acknowledgement behaviour.

Copies remote settings to local pump settings. Only available on MAGNA3 and MGE model H. 0: Disabled 1: Enabled.

Enables or disables the FLOW

00106. Only available on MAGNA3 and MGE model H. 0: Disabled (only used in control mode FLOW 1: Enabled (used in all control modes).

function. Set the maximum flow limit value in register

LIMIT

)

ADAPT

Page 19

Address Register name Description

Sets the control mode enumeration. Some modes are not supported by all E-pumps. 0: Constant speed 1: Constant frequency 3: Constant head 4: Constant pressure 5: Constant differential pressure

00102 ControlMode

6: Proportional pressure 7: Constant flow 8: Constant temperature 10: Constant level 128: AUTO 129: FLOW 130: Closed-loop sensor. See section 10.1 Control mode.

A state enumeration to control the E-pump operating mode. 0: Auto-control (setpoint control according to selected control mode)

00103 OperationMode

4: OpenLoopMin (running at minimum speed) 6: OpenLoopMax (running at maximum speed). Note: "OnOffReq" has higher priority than "OperationMode", meaning that "OnOffReq" must be set to On for "OperationMode" to have any effect.

Sets the E-pump setpoint. The scale is 0.01 %, so the value must be from 0 to 10000 to represent the entire 0-100 % range.

Closed loop

Percentage of closed-loop feedback sensor range.

00104 Setpoint

Open loop

Percentage of total system performance.

Common examples

4700: 47 % 8000: 80 %. See section 10.2 Setpoint.

RelayControl A register to control the relays. Is bitwise interpreted as follows:

Controls the state of relay 1.

Bit 0: Relay1Control

00105

Bit 1: Relay2Control

0: Closed 1: Open.

Controls the state of relay 2. 0: Closed 1: Open.

Bits 2-15: RESERVED -

Sets the maximum flow limit, FLOW

00106 SetMaxFlowLimit

The value is set in 0.01 m If disabled, it will only be active in FLOW

and MGE model H. 00107 SetPumpUNIX_RTC_HI 00108 SetPumpUNIX_RTC_LO

Sets the real-time clock in the pump in unix format (seconds since 01-01-1970).

Only available on MAGNA3 and MGE model H.

ADAPT

(set FLOW

/h. If enabled, the FLOW

in register 00106)

LIMIT

(must be enabled in register 00101, bit 5).

is active in all control modes.

LIMIT

control mode. Only available on MAGNA3

ADAPT

English (GB)

Page 20

9.5 Pump status register block

English (GB)

Registers in this register block can be read by means of function codes 0x03 and/or 0x04. They are read-only.

Address Register name Description

Bits 0-1: RESERVED -

Indicates if the MaxFlowLimit is enabled (enable with register 00101, bit 5).

Bit 2: MaxFlowLimitEnabled

Bit 3: ResetAlarmAck

Bit 4: SetpointInfluence

Bit 5: AtMaxPower

Bit 6: Rotation

00201

00202 ProcessFeedback

Bit 7: Direction

Bit 8: AccessMode

Bit 9: OnOff

Bit 10: Fault

Bit 11: Warning

Bit 12: RESERVED -

Bit 13: AtMaxSpeed

Bit 14: RESERVED -

Bit 15: AtMinSpeed

Only available on MAGNA3 and MGE model H.

0: Disabled

1: Enabled.

Indicates if a ResetAlarm command was acknowledged by the device. This bit will be set

when the CIU has accepted a ResetAlarm command, and the programmer can clear the

ResetAlarm bit. The ResetAlarmAck bit will automatically be cleared to 0 by the CIU when

the ResetAlarm bit is cleared by the master device, and a new ResetAlarm command can

be attempted by raising ResetAlarm bit again.

0: No acknowledgement

1: Command acknowledged.

This functionality is only used when AutoAcknowledgeEvents is disabled.

See section 9.2 CIM configuration register block.

Indicates if setpoint influence is active.

0: Not active

1: Active.

Indicates if the E-pump is running at its power limit. Only available on MAGNA3 and MGE

model H.

0: Not running at power limit

1: Running at power limit.

Indicates if the E-pump is rotating (running) or not.

0: No rotation

1: Rotation.

Indicates the current rotational direction of the E-pump.

0: Clockwise.

1: Counter-clockwise.

Indicates if the E-pump is locally or remotely controlled.

0: Local (a local control source with higher priority controls the E-pump)

1: Remote (controlled by Modbus master).

Indicates if the E-pump is on or off.

0: Off (stopped, the green LED on the E-pump flashes)

1: On (started, the green LED on the E-pump is on).

Started does not necessarily indicate rotation, for instance in case of low-flow stop.

Indicates if there is a fault or not.

0: No fault

1: Fault (red LED on the E-pump is on).

Indicates if there is a warning or not. The E-pump will continue running even if there is a

warning.

0: No warning

1: Warning (red LED on the E-pump is on).

Indicates if the E-pump is running at maximum speed.

0: No

1: Yes.

Indicates if the E-pump is running at minimum speed.

0: No

1: Yes.

Indicates the actual process feedback from the E-pump.

The scale is 0.01 %, so the valid value range is from 0 to 10000.

This value can be compared with the setpoint value.

Closed loop

Percentage of closed-loop feedback sensor range.

Open loop

Percentage of E-pump performance.

Common examples

4700: 47 %

8000: 80 %.

Page 21

Address Register name Description

Indicates the actual control mode.

0: Constant speed

1: Constant frequency

3: Constant head

4: Constant pressure

5: Constant differential pressure 00203 ControlMode

6: Proportional pressure

7: Constant flow

8: Constant temperature

10: Constant level

128: AUTO

129: FLOW

ADAPT

130: Closed-loop sensor.

Indicates the actual operating mode.

00204 OperationMode

0: Auto-control (setpoint control according to selected control mode)

4: OpenLoopMin (running at minimum speed)

6: OpenLoopMax (running at maximum speed). 00205 AlarmCode The Grundfos-specific alarm code. See section 16. Grundfos alarm and warning codes. 00206 WarningCode The Grundfos-specific warning code. See section 16. Grundfos alarm and warning codes.

Indicates the number of months until the next bearing service (not available on all

Bits 0-7: MonthsToBearingService

E-pumps).

This value can be 0, 1, 3, 6, 12 and 24 months, if available. A value of 24 months means

"24 months or more". A value of 0xFF indicates that the information is not available. 00207

Bit 8: BearingServiceType

Indicates the type of the next bearing service (not available on all E-pumps).

0: Lubricate bearings

1: Change bearings.

Bits 9-15: RESERVED -

00208 RESERVED -

Indicates the unit of the feedback sensor.

0: bar

1: mbar

2: m

3: kPa

4: psi

5: ft

6: m 00209 FeedbackSensorUnit

/h 7: m3/s 8: l/s 9: gpm 10: °C 11: °F 12: % 13: K 14: W.

00210 FeedbackSensorMin

00211 FeedbackSensorMax

Minimum value of the feedback sensor. Unit of the sensor minimum is defined by register

00209. Maximum value of the feedback sensor. Unit of the sensor maximum is defined by register

00209.

English (GB)

Page 22

9.6 Pump data register block

English (GB)

Registers in this block can be read by means of function codes 0x03 and/or 0x04. They are read-only. The table below shows which registers each E-pump type supports.

Table legend

3: Only available on MAGNA3.

3ph

: 3-phase only. CUE: CUE drive only. MGE: Pumps with MGE motor only. G: Only available on model G and later versions. H: Only available on model H and later versions. S: Sensor required.

●: Always available. *: If the E-pump is a TPE Series 2000, the value is estimated

and always available.

Address Register name Description Scale 0.25 - 7.5 kW 11-22 kW + CUE

MAGNA/

UPE

00301 Head Actual system head/pressure. 0.001 bar S S ●

00302 VolumeFlow Actual system flow. 0.1 m

00303 RelativePerformance

Performance relative to maximum performance.

/h S* S* ●

0.01 % ●●●

00304 Speed Motor speed. 1 rpm ●●● 00305 Frequency Actual control signal applied to motor. 0.1 Hz ●●●

00306 DigitalInput

00307 DigitalOutput

00308 ActualSetpoint

Logical value of external digital input signals.

Logical value of external digital output signals.

Actual setpoint (according to control mode).

bits ●●3

0.01 % ●●●

00309 MotorCurrent Actual motor current. 0.1 A ●●3 00310 DCLinkVoltage Frequency converter DC-Link voltage. 0.1 V ●●● 00311 MotorVoltage Motor voltage. 0.1 V ●●- 00312

00313 00314 RemoteFlow Measured flow at external sensor. 0.1 m

PowerHI PowerLO

Total power consumption of the system.

1 W ●●●

/h G + S S -

System inlet pressure (relative to

00315 InletPressure

atmospheric pressure). Has an offset

0.001 bar G + S S -

of -1.000 bar.

00316 RemotePressure

00317 Level

Measured pressure at external sensor (relative to atmospheric pressure).

Tank level. Has an offset of

-100.00 m.

0.001 bar G + S S 3 + S

0.01 m S S -

00318 PowerElectronicTemp Temperature in frequency converter. 0.01 K ●●-

00319 MotorTemp Motor winding temperature. 0.01 K

G + S

3ph

S-

00320 RemoteTemp Temperature at external sensor. 0.01 K S S 00321 ElectronicTemp E-pump electronics temperature. 0.01 K H MGE 3 00322 PumpLiquidTemp Pumped-liquid temperature. 0.01 K G + S S ● 00323 BearingTempDE Bearing temperature, drive end. 0.01 K H + S S 00324 BearingTempNDE Bearing temperature, non-drive end. 0.01 K H + S S 00325 AuxSensorInput Auxiliary sensor input. 0.01 % S S -

00326

00327 00328

00329 00330

SpecificEnergyConsumpti on

OperationTimeHI OperationTimeLO

TotalPoweredTimeHI TotalPoweredTimeLO

Specific energy consumption. 1 Wh/m

Total operating time of the system. 1 hour ●●●

Total power-on time of the system. 1 hour ●●●

00331 Torque Motor torque. 0.1 Nm 00332

00333 00334

00335

EnergyHI EnergyLO

NumberOfStartsHI NumberOfStartsLO

Total energy consumption of the system.

Number of times the E-pump has been started.

00336 Volume Total pumped volume. 0.01 m

H + S CUE + S 3

3ph

● -

1 kWh ●●●

1 start ●●3

H + S CUE + S 3

Page 23

Address Register name Description Scale 0.25 - 7.5 kW 11-22 kW + CUE

Note

00337 RemoteTemp2

Temperature at external temperature sensor 2.

0.01 K H + S - 3 + S

MAGNA/

UPE

00338 UserSetpoint User-selected setpoint. 0.01 % ●●● 00339 Diffpressure Pressure between pump flanges. 0.001 bar H + S - 3 00340 OutletPressure Pressure at pump outlet. 0.001 bar H + S - -

00341 RemotePressure2

00342 LoadPercent

00343 00344

PumpUNIX_RTC_HI PumpUNIX_RTC_LO

Pressure measured by external sensor 2.

Motor current in percent of rated motor current.

Pump time and date in UNIX format (seconds since 01-01-1970 00:00:00).

00345 MaxFlowLimit Actual maximum flow limit. 0.1 m

0.001 bar H + S - -

0.01 % H - 3

1 s H - 3

/h H - 3 00346 RemoteDiffTemp Remote differential temperature. 0.01 K H + S - 00347 InletDiffPressure Inlet differential pressure. 0.001 bar H + S - 00348 OutletDiffPressure Outlet differential pressure. 0.001 bar H + S - 00349 RemoteDiffPressure Remote differential pressure. 0.001 bar H + S - 00350 StorageTankLevel Storage tank level. 0.01 m H + S - 00351 AmbientTemp Ambient temperature. 0.01 K H + S - -

►

00352 00353

00354 00355

HeatEnergyCounter_HI HeatEnergyCounter_LO

HeatPower_HI HeatPower_LO

00356 HeatDiffTemp

►

Total accumulated heat energy in

►

pump life time

1kWh H + S - 3

Actual heat power 1 W H + S - 3

Differential temperature between forward and return pipe used for heat

0.01 K H + S - 3

calculation.

►

: The availability of these measurements requires that the data

register 00302 VolumeFlow is available and that a differential temperature measurement is established by one of the below means:

MGE model H/I:

• Direct measurement, where an analog or temperature input has been configured to Remote differential temperature

• PumpLiquidTemp (register 00322) measured by build in Grundfos sensor and RemoteTemp2 (register 00337) measured by analog or temperature input.

• RemoteTemp1 (register 00320) and RemoteTemp2 (register 00337) measured by analog or temperature input.

MAGNA3: For the calculation an estimated flow value and measurement of

the liquid temperature by the build-in temperature sensor is used. Connection of an external temperature sensor is needed for the pump to calculate the needed differential temperature.

English (GB)

A data value of 0xFFFF indicates "not available".

Estimated flow can be used for monitoring purposes only, but it is not recommended for controlling purposes.

Page 24

9.7 Sensor-dependent measurements

English (GB)

As appears from the table, many of the measurement registers require a particular sensor to be present.

Because a limited number of sensors are available, only a few of the "S" marked data modules will be available simultaneously.

The sections following describe the relation between available Modbus measurement registers and the setup of sensors. The description is split into sections for different pump types, because the approach varies.

Old MAGNA and UPE pump types

• No connection of external sensor possible.

MAGNA3

• Connection of temperature sensor and selection of analog input function "Constant temperature control" will make RemoteTemp2 (00337) measurement available.

• Connection of pressure sensor and selection of analog input function "Constant pressure control" will make RemotePressure1 (00316) measurement available.

CUE and all E-pump types except models H and I

Sensor unit configuration

Modbus data registers generated from sensor measurement

with handheld or PC Tool

Feedback sensor (AI1)

Measuring sensor* (AI2)

Measuring sensor** (AI3)

bar mbar m kPa

Head (00301) FeedTankLevel (00317)

Head (00301) and

FeedTankLevel (00317)

InletPressure (00315)

Head (00301) and FeedTankLevel (00317) or RemotePressure1 (00316)

psi ft

m m l/s

VolumeFlow (00302)

VolumeFlow (00302) or RemoteFlow (00314)

gpm °C °F

RemoteTemp1 (00320) PumpLiquidTemp (00322)

PumpLiquidTemp (00322) or RemoteTemp1 (00320)

% AuxSensorInput (00325) AuxSensorInput (00325) AuxSensorInput (00325)

* CUE and 11-22 kW E-pumps only. ** CUE, 11-22 kW E-pumps and model G only.

Only if "m" or "ft" is selected.

Page 25

E-pump models H and I

Measured parameters (Selected from display or handheld)

Parameter

Pump inlet pressure ● InletPressure (00315) Pump inlet diff. press ● InletDiffPressure (00347) Pump outlet pressure ● OutletPressure (00340) Pump outlet diff press ● OutletDiffPressure (00348) Pump diff. pressure ●●DiffPressure (00339) Remote pressure 1 ● RemotePressure1 (00316) Remote pressure 2 ● RemotePressure2 (00341) Remote diff. pressure ● RemoteDiffpressure (00349) Feed tank level ● FeedTankLevel (00317) Storage tank level ● StorageTankLevel (00350) Pump flow ● VolumeFlow (00302) Remote flow ● RemoteFlow (00314) Pumped liquid temp ●●●●PumpLiquidTemp (00322) Temperature 1 ●● RemoteTemp1 (00320) Temperature 2 ●● RemoteTemp2 (00337) Remote diff. temp ● RemoteDiffTemp (00346) Ambient temperature ●● AmbientTemp (00351) Motor bearing temp. BE ● BearingTempDE (00323) Motor bearing temp. NDE ● BearingTempNDE (00324) Other parameter ● AuxSensorInput (00325)

Analog input AI1, AI2, AI3

Temperature PT100 input T1, T2

Grundfos

built-in sensor

Grundfos

LiqTec sensor

Mapped to Modbus register

English (GB)

9.8 Alarm simulation register block

Alarm simulation can be used to simulate alarms and warnings on the E-pump. This is typically used when testing alarm event handling in BMS/SCADA system controllers. A simulated alarm will not cause the E-pump to stop running, but it will indicate the alarm condition on the bus.

Address Register name Description 0.25 - 7.5 kW 11-22 kW + CUE

00701 Simulation.AlarmCode

00702 Simulation.WarningCode

00708 Simulation.Activate

00709 Simulation.Active

●: Always available.

H: Only available on model H and later versions. 3: Only available on MAGNA3.

Alarm code to simulate. See section 16. Grundfos

alarm and warning codes.

Warning code to simulate. See section 16. Grundfos

alarm and warning codes.

Used to activate alarm simulation with alarms/ warnings selected from registers 00701 and 00702. 0: Deactivate simulation 1: Activate simulation

Status on alarm simulation. 0: Alarm simulation not active 1: Alarm simulation active

●

MAGNA

/UPE

Page 26

10. Detailed descriptions of registers

English (GB)

10.1 Control mode

The supported control modes are described further in this section. The control mode is set with register 00102 and its status can be read from register 00203.

Control modes Description Illustration

Open loop

The setpoint of the E-pump will be interpreted as > Constant speed (0) > Constant frequency (1)

> Constant head (3) > Constant pressure (4) > Constant differential pressure (5)

> Constant flow (7) > Constant temperature (8) > Constant level (10)

setpoint for the performance.

The setpoint value is a percentage of the maximum

performance of the E-pump.

No sensor is required in these modes.

Closed loop

The setpoint of the E-pump will be interpreted as

setpoint for the pressure.

The E-pump will adapt the speed so that the pressure is

constant, regardless of the flow.

A pressure sensor is required.

Closed loop

The setpoint of the E-pump will be interpreted as

setpoint for the flow, temperature or level. Constant flow

is indicated in the diagram.

A relevant sensor is required:

• A flow sensor for flow control

• a temperature sensor for temperature control

• a level sensor for level control.

TM04 2289 2208

TM04 2290 2208

TM04 2288 2208

> Proportional pressure (6)

> AUTO

>FLOW

ADAPT

(128)

(129)

> Closed-loop sensor (130)

H: Pressure (head) Q: Flow

Closed loop

The setpoint of the E-pump will be interpreted as

setpoint in proportional-pressure mode as shown in the

diagram.

A pressure sensor is required.

In this control mode, the setpoint curve is a proportional-

pressure curve where the setpoint has been set from

factory. The AUTO

algorithm in the pump will, over

ADAPT

time, optimise the setpoint value according to the pipe

characteristics of the system. The setpoint curve will

always be adjusted in a downward direction.

This control mode works similar to AUTO

that the flow-limiting function, FLOW

LIMIT

, except

ADAPT

, is always active and limits the flow to the value ActualMaxFlowLimit.

This is a general purpose closed-loop control mode that can be used in cases where the pump is used for a type of control not covered by one of the other control modes.

TM04 2291 2208

TM05 3241 1012

TM05 3242 1012

Page 27

10.2 Setpoint

Sensor

maximum

Minimum

setpoint

Effective setpoint

0 = 0 % 10000 = 100 %Setpoint [%]

10 bar

8 bar

0 = 0 % 10000 = 100 %8000 = 80 %

Maximum

system

performance

50 % system

performance

0 = 0 % 10000 = 100 %5000 = 50 %

The setpoint is written to register 00104 and the actual setpoint can be read from register 00308. Register 00104 setpoint accepts values ranging from 0 to 10000 (0 % to 100 %). This is illustrated in fig. 21. The setpoint is a percentage of the maximum setpoint or sensor maximum (max. = 100 %). The setpoint value can represent speed, pressure, flow, etc., depending on the selected control mode.

A setpoint of 0 does not imply a stop.

Fig. 21 Setpoint

10.2.1 Setpoint examples

Closed loop

If the control mode is set to constant pressure (closed loop), and the pressure sensor is in the range of 0 to 10 bar, a setpoint of 80 % will result in an effective setpoint of 8 bar.

If the sensor range was 0-16 bar, a 50 % setpoint would be 8 bar, a 25 % setpoint would be 4 bar, and so on.

English (GB)

TM04 2373 2508TM04 2371 2508TM04 2372 2508

Fig. 22 Constant pressure

Open loop

If the control mode is set to constant frequency (open loop), the setpoint is interpreted as setpoint for the system performance.

The example shows that a 50 % setpoint equals a 50 % system performance.

Fig. 23 Constant frequency

Page 28

10.3 Alarms and warnings

English (GB)

Address Name Description

00206 WarningCode Code for E-pump warning. 00205 FaultCode Code for E-pump alarm.

In the WarningCode register, the cause of an E-pump warning can be read. A warning has no influence on the E-pump operation.

In the FaultCode register, the cause of an E-pump alarm can be read. An E-pump alarm will always lead to a reaction in the E-pump operation, usually the E-pump will be stopped, but some alarms in some E-pump types have programmable alarm action types.

The complete list of possible alarm/warning codes is shown below. Not all codes apply to all E-pump types.

Code Alarm/warning description

1 Leakage current 2 Missing phase 3 External fault signal 4 Too many restarts

7 Too many hardware shutdowns 14 Electronic DC-link protection activated (ERP) 16 Other 30 Change bearings (specific service information) 31 Change varistor(s) (specific service information) 32 Overvoltage 40 Undervoltage 41 Undervoltage transient 42 Cut-in fault (dV/dt) 45 Voltage asymmetry 48 Overload 49 Overcurrent (i_line, i_dc, i_mo) 50 Motor protection function, general shutdown (MPF) 51 Blocked motor/pump 54 Motor protection function, 3 sec. limit 55 Motor current protection activated (MCP) 56 Underload 57 Dry running 60 Low input power 64 Overtemperature 65 Motor temperature 1 (t_m or t_mo or t_mo1)

Temperature too high, internal frequency converter

module (t_m) 70 Thermal relay 2 in motor (e.g. thermistor) 72 Hardware fault, type 1 73 Hardware shutdown (HSD) 76 Internal communication fault 77 Communication fault, twin-head pump 80 Hardware fault, type 2 83 Verification error, FE parameter area (EEPROM) 85 Verification error, BE parameter area (EEPROM) 88 Sensor fault 89 Signal fault, (feedback) sensor 1 91 Signal fault, temperature 1 sensor 93 Signal fault, sensor 2 96 Setpoint signal outside range

105 Electronic rectifier protection activated (ERP) 106 Electronic inverter protection activated (EIP)

Motor bearing temperature high (Pt100) in drive end

148

(DE)

Code Alarm/warning description

Motor bearing temperature high (Pt100) in non-drive

149

end (NDE)

155 Inrush fault

Communication fault, internal frequency converter

156

module 161 Sensor supply fault, 5 V 162 Sensor supply fault, 24 V 163 Measurement fault, motor protection 164 Signal fault, Liqtec sensor 165 Signal fault, analog input 1 166 Signal fault, analog input 2 167 Signal fault, analog input 3 175 Signal fault, temperature 2 sensor 176 Signal fault, temperature 3 sensor 190 Limit exceeded, sensor 1 191 Limit exceeded, sensor 2 240 Lubricate bearings (specific service information) 241 Motor phase failure 242 Automatic motor model recognition failed

Page 29

11. Modbus RTU commissioning, step-by-step guides

Note

If the sensor configuration is changed, restart the CIM/CIU unit to ensure a correct scaling of the sensor value.

11.1 Hardware setup (CIM 200)

Step Action

1 Install the CIM 200 in the Grundfos pump according to the pump documentation.

3 Select the Modbus slave address (1-247). 4 Select the bit rate of the Modbus slave. 5 Select parity and stop bits of the Modbus slave (even parity with 1 stop bit or no parity with 2 stop bits). 6 If necessary, set line termination. 7 Connect the necessary cables from the CIM 200 to the Modbus network.

The CIM 200 is now ready to be accessed via the Modbus network.

Complete the pump configuration, e.g. sensor configuration and local mode. This can be done either on the pump control panel, via the R100 or Grundfos GO Remote or Grundfos PC Tool E-Products.

Confirm that the GENIbus LED is constantly green and that the Modbus LED is either off (if no master is actively polling the slave) or flashing green (indicating error-free communication).

11.2 Hardware setup (CIU 200)

Step Action

2 Select the Modbus slave address (1-247). 3 Select the transmission speed of the Modbus slave. 4 Select parity and stop bits of the Modbus slave (even parity with 1 stop bit or no parity with 2 stop bits). 5 If necessary, set line termination. 6 Connect the GENIbus cable from the CIU 200 to the E-pump. 7 Connect the necessary cables from the CIU 200 to the Modbus network. 8 Connect the power supply cable to the CIU 200, and switch the unit on.

The CIU 200 is now ready to be accessed via the Modbus network.

Complete the pump configuration, e.g. sensor configuration and local mode. This can be done either via the R100 or Grundfos GO remote control or Grundfos PC Tool E-Products.

Confirm that the GENIbus LED is constantly green and that the Modbus LED is either off (if no master is actively polling the slave) or flashing green (indicating error-free communication).

English (GB)

11.3 Hardware setup (CIM 250 GSM call-up)

Step Action

1 Install the CIM 250 in the Grundfos pump according to the pump documentation. 2 Fit a GSM antenna to the CIM module SMA connector. See section 6.1.1 Fitting a GSM antenna. 3 Insert the SIM card in the CIM 250. See section 6.1.2 Inserting the SIM card. 4 Power on the Grundfos E-pump. 5 Observe that LED2 turns steady green (see section 6.2 Status LEDs), indicating that the CIM module is fitted correctly.

Observe that LED1 blinks yellow and changes to yellow pulsing after approximately 30 s (see section 6.2 Status LEDs),

8 To verify the GSM settings after completion, the SMS command GSMSETTINGS can be used. The CIM 250 is now ready to be accessed from a Modbus RTU master via GSM call-up (or via SMS commands).

indicating that the GSM connection is working. By making a call-up from a phone the connection can be verified (LED1 turns steady yellow).

For configuring the CIM 250 for a call-up connection, follow the instructions in the "CIM 25X SMS commands installation and operating instructions" (included on CIM/CIU support files CD), section 2.1-3.

Page 30

11.4 Hardware setup (CIU 250 GSM call-up)

English (GB)

Step Action

2 Fit a GSM antenna to the CIM module SMA connector. See section 6.1.1 Fitting a GSM antenna. 3 Insert the SIM card in the CIM 250. See section 6.1.2 Inserting the SIM card. 4 Connect the mains cable to the CIU 250 (see the CIU quick guide instruction) and power on the CIU 250. 5 Power on the Grundfos product 6 Observe that LED2 turns steady green (see section 6.2 Status LEDs), indicating that the GENIbus connection is working.

9 To verify the GSM settings after completion, the SMS command GSMSETTINGS can be used. The CIU 250 is now ready to be accessed from a Modbus RTU master via GSM call-up (or via SMS commands).

Connect the GENIbus cable from the CIU 250 to the Grundfos product. See fig. 5 in the "CIU, Communication Interface Unit installation and operating instructions".

Observe that LED1 blinks yellow and changes to yellow pulsing after approximately 30 s (see section 6.2 Status LEDs), indicating that the GSM connection is working. By making a call-up from a phone the connection can be verified (LED1 turns steady yellow).

For configuring the CIU 250 for a call-up connection, follow the instructions in the "CIM 25X SMS commands installation and operating instructions" (included on CIM/CIU support files CD), section 2.1-3.

11.5 Hardware setup (CIM 250 GPRS connection)

Step Action

1 Install the CIM 250 in the Grundfos product according to the product documentation. 2 Fit a GSM antenna to the CIM module SMA connector. See section 6.1.1 Fitting a GSM antenna. 3 Insert the SIM card in the CIM 250. See section 6.1.2 Inserting the SIM card. 4 Power on the Grundfos product 5 Observe that LED2 turns steady green. See section 6.2 Status LEDs.

The CIM 250 is now ready to be accessed from a Modbus TCP master via GPRS (or via SMS commands).

Observe that LED1 blinks yellow and changes to yellow pulsing after approximately 30 s (see section 6.2 Status LEDs), indicating that the GSM connection is working.

For configuring the CIM 250 for a GPRS connection, follow the instructions in the "CIM 25X SMS commands installation and operating instructions" (included on CIM/CIU support files CD), sections 2.1, 2.2 and 2.4.

To verify the GPRS setting after completion, the SMS command GPRSSETTING can be used. To verify that the GPRS connection is working, the SMS command GPRSSTATUS can be used. The connection state should be "Context active" if ready and "Connected" if a Modbus TCP master is already communicating.

11.6 Hardware setup (CIU 250 GPRS connection)

Step Action

1 Connect the GENIbus cable from the CIU 250 to the Grundfos product. See the CIU quick guide instruction. 2 Fit a GSM antenna to the CIM module SMA connector. See section 6.1.1 Fitting a GSM antenna. 3 Insert the SIM card in the CIM 250. See section 6.1.2 Inserting the SIM card. 4 Connect the mains cable to the CIU 250 (see the CIU quick-guide instruction), and power on the CIU 250. 5 Power on the Grundfos product. 6 Observe that LED2 turns steady green (see section 6.2 Status LEDs), indicating that the GENIbus connection is working.

The CIU 250 is now ready to be accessed from a Modbus TCP master via GPRS (or via SMS commands).

Observe that LED1 blinks yellow and changes to yellow pulsing after approximately 30 s (see section 6.2 Status LEDs), indicating that the GSM connection is working.

Page 31

11.7 Modbus TCP communication setup (CIM 500)

Step Action

1 Install the CIM 500 in the Grundfos E-pump according to the pump documentation. 2 Select position 1 at the protocol rotary switch. See section 7.2 Setting the Industrial Ethernet protocol. 3 Power on the E-pump, and observe LED2 turn steady green and LED1 remaining off.

5 Connect one of the CIM 500 Ethernet ports (RJ45) to a PC using an Ethernet cable.

9 In the menu column to the left select: Configuration > Real time Ethernet protocol 10 Type in an IP address belonging to the same subnet as your PC (e.g. 192.168.1.2). 11 Type in the subnet mask 255.255.255.0, and leave the rest of the settings at their factory default values. 12 Click [Submit] to transfer the new settings, and close the Web browser. CIM 500 is now ready to be accessed from a Modbus TCP master via one of its Ethernet ports. Use the IP address selected under

step 9. The Modbus address (Unit ID) in the Modbus TCP telegram is not used.

• The CIM 500 LED 1 will be flashing green when Modbus TCP communication takes place.

• You can use the two Ethernet ports for daisy chaining of CIM 500 modules.

• It is possible to have connection to the Web server simultaneously with a connection to a Modbus TCP master.

• It is possible to have connection to more Modbus TCP masters simultaneously, e.g. to have connection to PC Tool CIM/CIU while connected to another Modbus TCP master.

Complete the pump configuration, e.g. sensor configuration and selection of local Operating mode, local Control mode and local Setpoint (e.g. via Go Remote)

Configure the PC Ethernet port to the same subnetwork as the CIM 500 (e.g. 192.168.1.1) and the subnet mask to

255.255.255.0. See section A.1 How to configure an IP address on your PC on page 48. Open your internet browser and make contact to the CIM 500 Web server.

Default: 192.168.1.100 Log on to the Web server. Default:

User: admin Password: Grundfos.

English (GB)

11.8 Modbus TCP communication setup (CIU 500)

Step Action

1 Check that both CIU 500 unit and the E-pump are powered off. 2 Remove the front cover of the CIU 500 unit. 3 Select position 1 at the CIM 500 module protocol rotary switch. See section 7.2 Setting the Industrial Ethernet protocol.

5 Power on the CIU 500 unit and the E-pump, and observe LED2 turn steady green and LED1 remaining off. 6 Connect one of the CIU 500 Ethernet ports (RJ45) to a PC using an Ethernet cable.

10 In the menu column to the left select: Configuration > Real time Ethernet protocol 11 Type in an IP address belonging to the same subnet as your PC (e.g. 192.168.1.2). 12 Type in the subnet mask 255.255.255.0, and leave the rest of the settings at their factory default values. 13 Click [Submit] to transfer the new settings and close the Web browser. CIM 500 is now ready to be accessed from a Modbus TCP master via one of its Ethernet ports. Use the IP address selected under

step 10. The Modbus address (Unit ID) in the Modbus TCP telegram is not used.

• The CIU 500 LED 1 will be flashing green when Modbus TCP communication takes place.

• You can use the two Ethernet ports for daisy chaining of CIM 500 modules.

• It is possible to have connection to the Web server simultaneously with a connection to a Modbus TCP master.

• It is possible to have connection to more Modbus TCP masters simultaneously, e.g. to have connection to PC Tool CIM/CIU while connected to another Modbus TCP master.

Connect the GENIbus cable from the CIU 500 to the E-pump. See figure 5 in “CIU, Communication Interface Unit installation and operating instructions” or see the CIU quick guide.

Configure the PC Ethernet port to the same subnetwork as the CIM 500 (e.g. 192.168.1.1) and the subnet mask to

255.255.255.0. See section A.1 How to configure an IP address on your PC on page 48. Open your internet browser and make contact to the CIM 500 Web server.

Default: 192.168.1.100. Log on to the Web server. Default:

User: admin Password: Grundfos.

Page 32

12. Detailed descriptions of functionality

Dialling

Connection established

Hang-up

Modbus communication

Silence timeout after 1 min

without communication

GSM network, e.g. SCADA

CIU 250

Hangs.

Hangs up. Session completed.

English (GB)

12.1 GSM

12.1.1 Call-up functional description

The call-up function is used for SCADA system communication via the GSM network. Connection is established when the SCADA system dials the CIU 250. The CIU 250 will automatically "pick up the phone" and wait for data traffic in the form of Modbus RTU telegrams.

If legal data traffic has not been initiated within one minute, the CIU 250 will hang up the line. This silence timeout is active during the whole communication session. Whenever the SCADA system has completed the Modbus communication, it hangs up the line. This is detected by the CIU 250, which also hangs up the line, and the call-up communication session is thereby completed. See fig. 24.

Fig. 24 Illustration of a GSM call-up session

12.1.2 SCADA PIN code protection

It is always possible to get read access via Modbus, but if the CIU 250 is SCADA PIN-code-protected (GeneralStatus register 00029, bit 0 = 1), write access requires that the correct PIN code (ScadaPinCode, register 00011) has been written. Writing the correct PIN code will trigger the write access control, and write access will be open, which can be verified with GeneralStatus, register 00029, bit 1 = 1).

For call-up connections with PIN code protection, the ScadaPinCode register has to be written each time a new call-up is made.

12.1.3 GSM call-up options setup

To prepare the CIU 250 for Modbus communication with a SCADA system via GSM, some settings have to be made via SMS commands:

• Setting a SCADA PIN code: SETSCADACODE <access code> will enable write access protection.

Default is an empty SCADA PIN code, meaning no protection.

• Activating the SCADA PIN code: SCADACODE <ON | OFF>.

Default is "Off".

• Selecting the Modbus address: MODBUSADDR <1-247>

Default value is 231. To verify the SCADA GSM setting after completion, the SMS

command "SCADA" can be used. For details about the use of SMS commands, see "CIM 25X SMS

commands" (supplement to the installation and operating instructions) on the CD-ROM supplied with the GSM module.

12.2 GPRS

12.2.1 What is GPRS and Modbus TCP?

GPRS (General Packet Radio Service) is a wireless, "always on" connection that remains active as long as the CIU 250 is within range of the service. With GPRS it is possible to establish a wireless connection to the Internet and thus enable a remote connection to a SCADA system computer or another PC application. Typical data rates are 32 to 48 kbit/s.

The GPRS itself takes care of the wireless data transfer via the

TM04 4905 2209

GSM network. It plays the same role as Ethernet in a wired network. On top of GPRS is the TCP/IP protocol, which enables easy integration with the Internet. The Modbus TCP protocol is used on the application layer communicating with a TCP port number (default 502). The difference when compared to the fieldbus protocol Modbus RTU is the exclusion of the 16-bit CRC checksum and the adding of a Modbus application program header as illustrated in fig. 25.

Page 33

12.2.2 Subscription

Modbus RTU telegram

Modbus TCP/IP data

Modbus application program header

Modbus TCP/IP application data unit

Slave ID

Func

code ID

Data CRC

Data

Func

code ID

Unit IDLengthProtocol IDTransaction ID

The GSM service providers have different technical solutions for GPRS to choose from. You have to select the service provider and the technical solution that best suit your system, and it must be based on static IP addressing. You will get the following from the GSM service provider:

• A Subscriber Identity Module (SIM card).

• An Access Point Name (APN), e.g. "Internet".

• A user name (is fixed and cannot be changed by the user).

• A password (is fixed and cannot be changed by the user).

• A static IP address. Solutions based on a VPN (Virtual Private Network) involve the

use of special routers, e.g. GRE (Generic Routing Encapsulation) routers, which you will also get from the service provider.

Fig. 25 Modbus TCP telegram

English (GB)

TM04 4907 2209

12.2.3 Installation

To prepare the CIU 250 for GPRS communication, some settings have to be made via SMS commands:

• Select Access Point Name: APN <ascii string> This is always mandatory.

• Select Username: USERNAME <ascii string> The need for a user name depends on your operator and the type of subscription.

• Select Password: PASSWORD <ascii string> The need for a password depends on your operator and the type of subscription.

Some advanced GPRS settings have default values that usually work, but in special cases, it might be necessary to change some of them. This is also done via SMS commands.

• Select Authentication: AUTHENTICATION <NORMAL | SECURE> Only used by some service providers. Default value is "Normal".

• Select Connection type: CONNECTION <SERVER | CLIENT | DISABLE> Default value is "Server".

• Set GPRS roaming: GPRSROAMING: <ON | OFF> Default value is "Off".

• Select Modbus TCP port number: MODBUSPORT <port no.> Default value is 502.

• Select GENIpro port number: GENIPROPORT <port no.> Default value is 49152. This is only relevant when using Grundfos PC Tools.

It is possible to configure the GPRS connection with a single multi-parameter command:

• SETGPRS <parameter 1, parameter 2, parameter 3, …>

– <parameters>:<APN>,<Modbus port>,<GENIproport>,

Example

SETGPRS Grundfos.dk2.tdc,502,49888,Grundfos,4321,normal,server,off

To verify the GPRS setting after completion, the SMS command GPRSSETTING can be used. The command GPRSSTATUS can verify if the GPRS connection is working.

The connection states have the following meaning:

– "Detached": Trying to locate GPRS service. – "Attached": GPRS service located. – "Context active": IP address has been assigned, ready for a

client to establish a socket connection.

– "Connected": A client has established a socket connection.

The system is ready for TCP/IP data exchange (or already exchanging data).

For details about the use of SMS commands, see "CIM 25X SMS commands" (supplement to the installation and operating instructions) on the CD-ROM supplied with the GSM module.

Page 34

12.2.4 Operation

Note

PC Tool, etc.

GSM/GPRS network

Base station APN

CIU 250 with CIM 250 and SIM card

Mobile phone

"Static" IP address

Setup, status and control commands via SMS

GSM/GPRS

"Static" IP address

PC Tool, etc.

SCADA system

Clients

LAN

GRE router

VPN tunnel

Internet

GSM operator

GSM/GPRS network

Base station APN

CIU 250 with CIM 250 module and SIM card

Mobile phone

"Static" IP address

Setup, status and control commands via SMS

GSM/GPRS

English (GB)

When powering on a CIU 250 with the correct GPRS setting, the following GPRS connection sequence will take place:

1. The CIU 250 locates the GPRS service. The connection state

changes from "Detached" to "Attached".

2. The CIU 250 attempts to connect to the APN it has been given

and requests an IP address. The base station looks through its record of legal SIM cards and finds the IP address (the address associated with this SIM card) to assign to the CIU 250. After the CIU 250 has got the IP address, the connection state changes to "Context active".

3. The CIU 250 is now ready for a client (e.g. SCADA system) to

establish a socket connection and begin TCP/IP data exchange. When a client connects the CIU 250, the connection state will change to "Connected", and the GSM status LED1 will indicate when data transfer takes place. See section 5.5 Status LEDs.

When no GPRS data is being transferred, the connection states "Attached", "Context active" and "Connected". All show the same LED1 status (short pulse).

A client, e.g. SCADA, establishes connection to a CIU 250 by specifying the IP address and the TCP port 502. Data transfer is always initiated from the client in the form of a Modbus TCP telegram embedded in a TCP/IP frame and directed to TCP port

502. To the client software, the connection to the CIU 250 is

completely transparent. The protection against unauthorised data access is high.

The access to the GPRS network from the Internet can only take place via the VPN tunnel. See fig. 27. Moreover, data transfer requires a Modbus master client, knowledge of the Modbus functional profile and the use of a SCADA PIN code, if enabled.

The CIU 250 supervises the GPRS system to ensure that it is still working. An automatic procedure ensures restarting of the CIU 250 and repetition of the GPRS connection sequence in case a deadlock situation has occurred. It also closes down socket connections that are left open by the client and unused for more than 24 hours.

It is possible to use SMS communication while GPRS communication is active. However, in the "Connected" state the delay time between reception and reply will increase.

If the connection state is different from "Connected", it is possible to establish a call-up connection. When the call-up connection is established, GPRS data exchange will be blocked until the call-up is terminated by the caller.

A total of three Modbus clients can be connected to the Modbus TCP port of the CIU 250 and communicate simultaneously. Each connection, called a socket connection, is handled independently. If all three sockets are used simultaneously, a "Silence timeout" of only one minute is used to prevent a complete occupation for a long time.

TM04 7309 1510

Fig. 26 GPRS connection from a PC to the CIU 250 directly

via GPRS

Fig. 27 GPRS connection via VPN tunnel

TM04 7129 1510

Page 35

13. Modbus RTU telegram examples

Note

Example of response from slave to master

CRC fields are not shown in the following examples.

The Modbus data model states that registers numbered X are addressed in telegrams as X - 1, e.g. register 00104 (setpoint) is addressed as 00103 in a Modbus telegram.

13.1 Modbus telegram overview

The maximum size of a Modbus RTU telegram is 256 bytes. Telegrams must be separated by a silent interval of at least

3.5 character times.

The standard Modbus RTU telegram format is shown in the table below.

Slave

address

1 byte 1 byte 0 to 252 bytes 2 bytes

A telegram starts with the slave address occupying one byte. Then comes a variable-size data field. For each telegram, a CRC is calculated and appended to the telegram (two bytes total). All bytes in the telegram, except for the CRC itself, are included in the check.

Function

code

The CRC bytes are not shown in the examples in the following sections.

Data CRC

13.2 Read holding registers (0x03)

This function is used for reading holding registers from the slave. The request telegram specifies the starting address (the address

of the first register to be read) and the number of holding registers to read. In the telegram, register addresses start from zero, meaning that registers numbered 0-16 are addressed as 0-15.

The register data in the response message are packed two bytes per register. For each register, the first byte contains the highorder bits while the second byte contains the low-order bits.

Example of request from master to slave

Field Value

Address 0x01

Function code 0x03 Start address HI 0x00 Start address LO 0x6B Quantity HI 0x00 Quantity LO 0x03

In the request, the slave with address 1 is asked to deliver three contiguous registers starting from address 0x006b = 107 (meaning register 108).

Field Value

Address 0x01 Function code 0x03 Byte count 0x06 Register 108 HI 0x00 Register 108 LO 0x01 Register 109 HI 0x00 Register 109 LO 0x01 Register 110 HI 0x00 Register 110 LO 0x01

In the response, the byte count is six since there are three registers of two bytes. All three registers hold the value of 0x0001.

13.3 Read input registers (0x04)

This function is used for reading input registers from the slave. Input registers are read-only registers by definition. The request telegram specifies the starting address (the address of the first register to be read) and the number of holding registers to read. In the telegram, register addresses start from zero, meaning that registers numbered 0-16 are addressed as 0-15.

The register data in the response message are packed two bytes per register. For each register, the first byte contains the highorder bits while the second byte contains the low-order bits.

Example of request from master to slave

Field Value

Address 0x01

Function code 0x04 Start address HI 0x10 Start address LO 0x10 Quantity HI 0x00 Quantity LO 0x03

In the request, the slave with address 1 is asked to deliver three contiguous registers starting from address 0x1010 = 4112 (meaning register 4113).

Example of response from slave to master

Field Value

Address 0x01 Function code 0x04 Byte count 0x06 Register 4113 HI 0x22 Register 4113 LO 0x22 Register 4114 HI 0x22 Register 4114 LO 0x22 Register 4115 HI 0x22 Register 4115 LO 0x22

In the response, the byte count is six since there are three registers of two bytes. All three registers hold the value of 0x2222.

English (GB)

Page 36

13.4 Write single register (0x06)

English (GB)

This function is used for writing a single holding register in the slave. The request telegram specifies the address of the register that is to be written. Register addresses start from zero, meaning that a register numbered 10 is addressed as 9.

The normal response is an echo of the request, indicating that the value was written.

Example of request from master to slave

Field Value

Address 0x01 Function code 0x06 Address HI 0x10 Address LO 0x00 Value HI 0xAF Value LO 0xFE

In the request, the slave with address 1 is asked to write the value of 0xAFFE to the register at address 0x1000.

Example of response from slave to master

Field Value

Address 0x01 Function code 0x06 Address HI 0x10 Address LO 0x00 Value HI 0xAF Value LO 0xFE

The response is an echo of the request.

13.5 Write multiple registers (0x10)

This function is used for writing a block of contiguous holding registers in the slave. Register addresses start from zero, meaning that a register numbered 100 is addressed as 99.

Example of request from master to slave

Field Value

Address 0x01 Function code 0x10 Start address HI 0x00 Start address LO 0x20 Quantity HI 0x00 Quantity LO 0x02 Byte count 0x04 Register 33 HI 0x00 Register 33 LO 0x01 Register 34 HI 0xB0 Register 34 LO 0xB0

In the request, the slave with address 1 is asked to write the value of 0x0001 to the register at address 0x0020 and the value of 0xB0B0 to the register at address 0x0021.

Example of response from slave to master

Field Value

Address 0x01 Function code 0x10 Start address HI 0x00 Start address LO 0x20 Quantity written HI 0x00 Quantity written LO 0x02

The response returns the function code, starting address and quantity of registers written.

13.6 Diagnostics (0x08)

This function provides a test for checking the communication system between the master and the Grundfos slave. It contains a single-byte subcode to identify the test to be performed.

The following subcodes are supported:

Subcode Name

Return query data Data in this request are to be echoed in the

0x00

0x01

0x02

0x04

0x0A

0x0B

0x0C

0x0D

0x0E

0x0F

0x12

0x14

Example of request from master to slave

Field Value

Address 0x01 Function code 0x08 Subcode 0x00 Data 0xAB Data 0xCD

The response is identical to the request.

Example of response from slave to master

Field Value

Address 0x01 Function code 0x08 Subcode 0x00 Data 0xAB Data 0xCD

response. The response must be identical to the request, so this function is often used to verify Modbus communication.

Restart communications All communication counters are cleared, and the device is restarted.

Return diagnostics register Returns the 16-bit diagnostics register. See section

13.7 Diagnostics register interpretation.

Force listen only Forces the device into listen-only mode. This effectively mutes the device, making it unable to communicate on the network. To bring the device back to normal mode, a "Restart communications" command (code 0x08, subcode 0x01) must be issued.

Clear counters and diagnostics register Clears all counters and the diagnostics register (these are also cleared on power-up/restart).

Return bus message count Returns the number of messages detected by the slave.

Return bus CRC error count Returns the number of CRC errors in the slave.

Return bus exception count Returns the number of Modbus exception responses that the slave has transmitted.

Return slave message count Returns the number of messages that the slave has processed.

Return slave no response count Returns the number of messages for which the slave has sent no response.

Return bus character overrun count Returns the number of overruns in the slave.

Clear overrun counter Clears the overrun counter (this is also cleared on power-up/restart).

Page 37

13.7 Diagnostics register interpretation

The diagnostics register is interpreted as follows:

Bit Description

0 Communication failure (with the Grundfos E-pump).

EEPROM self-test failed (the test is carried out when

system is booted).

2 Grundfos E-pump not supported.

Modbus address offset is different from default value, i.e.

it differs from 0. 4 Using software-defined Modbus transmission speed. 5 RESERVED 6 RESERVED 7 RESERVED 8 RESERVED 9 RESERVED

10 RESERVED 11 RESERVED 12 RESERVED 13 RESERVED 14 RESERVED 15 RESERVED

A bit value of 1 means true, unless otherwise specified. The diagnostics register is read using function code 0x08 and subcode 0x02.

13.8 Diagnostics: Return query data

This function is useful to ensure that the communication path and slave configuration are correct. It will echo the request in the response.

In the example, slave address 0x01 is used.

Request from master to slave

Field Value Description

Slave address 0x01 Function code 0x08 Diagnostics Subcode 0x00 Echo request Data 0xAB Test data Data 0xCD Test data

Example of response from slave to master

Field Value Description

Slave address 0x01 Function code 0x08 Diagnostics Subcode 0x00 Echo request Data 0xAB Test data Data 0xCD Test data

If there is no response from the slave, see section 14.1.2 CIM/

CIU 200 Modbus communication faults or 14.2.2 CIM/CIU 250 Modbus GSM/GPRS communication faults.

13.9 Reading the CIM configuration register block

This section shows how to read the first four registers of the CIM configuration register block.

In the example, slave address 0x01 is used.

Request from master to slave

Field Value Description

Slave address 0x01 Function code 0x04 Read input registers Start address HI 0x00 Start address LO 0x00 Quantity HI 0x00 Quantity LO 0x04

Example of response from slave to master

Field Value Description

Slave address 0x01 Function code 0x04 Read input registers Byte count 0x08 8 bytes follow 00001 HI 0x00 00001 LO 0x0A 00002 HI 0x00 00002 LO 0x00 00003 HI 0x00 00003 LO 0x00 00004 HI 0x00 00004 LO 0x04

If there is no response from the slave, see Fault finding, section

14.1.2 CIM/CIU 200 Modbus communication faults or 14.2.2 CIM/ CIU 250 Modbus GSM/GPRS communication faults.

Start address = 0x0001

Number of registers = 0x0004

SlaveMinimumReplyDelay = 0x000A

RegisterOffset = 0x0000

Reserved value = 0x0000

SoftwareDefinedBitRate = 0x0004

13.10 Setting the setpoint

This section shows how to set a new setpoint (reference). In the example, slave address 0x01 is used, and a value of 55 %

(5500 = 0x157C) is set as new setpoint.

Request from master to slave

Field Value Description

Slave address 0x01 Function code 0x06 Write single register Start address HI 0x00 Start address LO 0x67 Value HI 0x15 Value LO 0x7C

Example of response from slave to master

Field Value Description

Slave address 0x01 Function code 0x06 Write single register Start address HI 0x00 Start address LO 0x67 Value HI 0x15 Value LO 0x7C

If there is no response from the slave, see section 14.1.2 CIM/

CIU 200 Modbus communication faults or 14.2.2 CIM/CIU 250 Modbus GSM/GPRS communication faults.

Setpoint address = 00104 (0x0068)

New setpoint value = 5500 (0x157C)

Setpoint address = 00104 (0x0068)

New setpoint value = 5500 (0x157C)

English (GB)

Page 38

13.11 Setting the control mode

English (GB)

This section shows how to set a control mode. In the example, slave address 0x01 is used, and the control mode

is set to 1 (Constant frequency).

Request from master to slave

Field Value Description

Slave address 0x01 Function code 0x06 Write single register Start address HI 0x00 Start address LO 0x65 Value HI 0x00 Value LO 0x01

Example of response from slave to master

Field Value Description

Slave address 0x01 Function code 0x06 Write single register Start address HI 0x00 Start address LO 0x65 Value HI 0x00 Value LO 0x01

If there is no response from the slave, see Fault finding, section

14.1.2 CIM/CIU 200 Modbus communication faults or 14.2.2 CIM/ CIU 250 Modbus GSM/GPRS communication faults.

ControlMode address = 00102 (0x0066)

New ControlMode value = 1 (0x0001)

ControlMode address = 00102 (0x0066)

New ControlMode value = 1 (0x0001)

13.12 Starting the E-pump

This section shows how to start the E-pump. In the example, slave address 0x01 is used. Set the ControlRegister to the following values:

Bit 0: 1 (set the E-pump to remote mode) Bit 1: 1 (start the E-pump) Bit 2: 0 (do not send a reset fault command) Bit 3: 0 (direction = clockwise rotation) Bit 4: 0 (do not copy remote settings to local) Bits 5-15: 0 (reserved values)

13.13 Stopping the E-pump

This section shows how to stop the E-pump. In the example, slave address 0x01 is used. Set the ControlRegister to the following values:

Bit 0: 1 (set the E-pump to remote mode) Bit 1: 0 (stop the E-pump) Bit 2: 0 (do not send a reset fault command) Bit 3: 0 (direction = clockwise rotation) Bit 4: 0 (do not copy remote settings to local) Bits 5-15: 0 (reserved values)

Hence the value to set is 0b0000000000000001 = 0x0001.

Request from master to slave

Field Value Description

Slave address 0x01 Function code 0x06 Write single register Start address HI 0x00 Start address LO 0x64 Value HI 0x00 Value LO 0x01

Example of response from slave to master

Field Value Description

Slave address 0x01 Function code 0x06 Write single register Start address HI 0x00 Start address LO 0x64 Value HI 0x00 Value LO 0x01

If there is no response from the slave, see section 14.1.2 CIM/

CIU 200 Modbus communication faults or 14.2.2 CIM/CIU 250 Modbus GSM/GPRS communication faults.

ControlRegister address = 00101 (0x0065)

ControlRegister value = 1 (0x0001)

ControlRegister address = 00101 (0x0065)

ControlRegister value = 1 (0x0001)

Hence the value to set is 0b0000000000000011 = 0x0003.

Request from master to slave

Field Value Description

Slave address 0x01 Function code 0x06 Write single register Start address HI 0x00 Start address LO 0x64 Value HI 0x00 Value LO 0x03

Example of response from slave to master

Field Value Description

Slave address 0x01 Function code 0x06 Write single register Start address HI 0x00 Start address LO 0x64 Value HI 0x00 Value LO 0x03

If there is no response from the slave, see section 14.1.2 CIM/

CIU 200 Modbus communication faults or 14.2.2 CIM/CIU 250 Modbus GSM/GPRS communication faults.

ControlRegister address = 00101 (0x0065)

ControlRegister value = 3 (0x0003)

ControlRegister address = 00101 (0x0065)

ControlRegister value = 3 (0x0003)

Page 39

14. Fault finding

14.1 Fault finding CIM/CIU 200

Faults in a CIM/CIU 200 can be detected by observing the status of the two communication LEDs. See the table below and section

3.2 Modbus RTU (CIM 200).

14.1.1 LED status

CIM 200 fitted in a Grundfos E-pump

Fault (LED status) Possible cause Remedy

1. Both LEDs (LED1 and LED2) remain off when the power supply is connected.

2. The LED for internal communication (LED2) is flashing red.

3. The LED for internal communication (LED2) is constantly red.

4. The Modbus LED (LED1) is constantly red.

5. The Modbus LED (LED1) is flashing red. a) Fault in the Modbus communication

CIM 200 fitted in the CIU 200

a) The CIM 200 is fitted incorrectly in the

Grundfos E-pump. b) The CIM 200 is defective. Replace the CIM 200. a) No internal communication between the

CIM 200 and the Grundfos E-pump. a) The CIM 200 does not support the

Grundfos E-pump connected. a) Fault in the CIM 200 Modbus

configuration.

(fault in parity or cyclic redundancy

check).

Ensure that the CIM 200 is fitted/connected correctly.

Ensure that the CIM 200 is fitted correctly in the Grundfos E-pump.

Contact the nearest Grundfos company.

• Check the transmission speed (switches SW4 and SW5). If the switches are set to "software-defined", an invalid value may have been set via Modbus. Try one of the preselected transmission speeds, e.g. 19200 bits/s.

• Check that the Modbus address (switches SW6 and SW7) has a valid value [1-247].

• Check the transmission speed (switches SW4 and SW5). See section 5.1 Setting the Modbus

transmission speed.

• Check the parity setting (switch SW3). See section 5.2 Setting the parity.

• Check the cable connection between the CIM 200 and the Modbus network.

• Check the termination resistor settings (switches SW1 and SW2). See section 5.4 Termination resistor.

English (GB)

Fault (LED status) Possible cause Remedy

1. Both LEDs (LED1 and LED2) remain off when the power supply is connected.

2. The LED for internal communication (LED2) is flashing red.

3. The LED for internal communication (LED2) is constantly red.

4. The Modbus LED (LED1) is constantly red.

5. The Modbus LED (LED1) is flashing red. a) Fault in the Modbus communication

a) The CIU 200 is defective.

a) No internal communication between the

CIU 200 and the E-pump

a) The CIU 200 does not support the

E-pump which is connected.

a) Fault in the CIM 200 Modbus

configuration.

(fault in parity or cyclic redundancy check).

Replace the CIU 200.

• Check the cable connection between the E-pump and the CIU 200.

• Check that the individual conductors have been fitted correctly.

• Check the power supply to the E-pump.

Contact the nearest Grundfos company.

• Check that the Modbus address (switches SW6 and SW7) has a valid value [1-247].

• Check the transmission speed (switches SW4 and SW5). See section 5.1 Setting the Modbus

transmission speed.

• Check the parity setting (switch SW3). See section 5.2 Setting the parity.

• Check the cable connection between the CIM 200 and the Modbus network.

• Check the termination resistor settings (switches SW1 and SW2). See section 5.4 Termination resistor.

Page 40

14.1.2 CIM/CIU 200 Modbus communication faults

English (GB)

Fault Possible cause Remedy

1. The slave does not respond to telegrams.

2. The slave responds with exception response 0x01: "Invalid function".

3. The slave responds with exception response 0x02: "Invalid data address".

4. The slave returns data value 0xFFFF (65535).

5. The slave does not change Modbus transmission speed with register 0004.

a) Configuration or wiring error. • Check the visual diagnostics on the Modbus

b) The slave may be in listen-only mode. Either send a restart communications diagnostics

c) If the holding register of address 00001

a) The master is trying to use an unsupported

a) The master is trying to read or write an invalid

b) The register address offset may have been

a) The value is unavailable. A data value of

b) The E-pump is not configured to show the

a) Configuration error. Set the transmission speed switches to "Software-

b) An invalid value may be set in register 00004. See section 5.1 Setting the Modbus transmission

"SlaveMinimumReplyDelay" is set too high, the master may time out before receiving the response from the slave.

function in the CIM/CIU.

data address. If a master tries to read register addresses that are not listed in the tables, the slave will respond with this exception response. Some masters may automatically try to read large blocks in one telegram, which will cause problems if some of the registers in the block are not supported. An example would be reading the CIM configuration and CIM status blocks in one telegram. This is not possible since there are unused addresses between the blocks.

changed from default.

0xFFFF does not necessarily indicate an error condition. It means that the value is unavailable from the E-pump.

value or lacks a sensor to read the value.

slave. Is the Grundfos GENIbus LED flashing green and the Modbus LED off or flashing green?

• Ensure that the cable between the Modbus master and the Modbus slave is connected correctly. See section 5. Modbus RTU, CIM 200

setup for wiring recommendations.

• Ensure that the slave address is configured correctly, and that the correct slave address is used in the Modbus master poll. See section

5.3 Modbus address selection for slave address

selection.

• Ensure that the transmission speed and stop bit/parity settings are configured correctly in both master and slave.

• Ensure that each end of the Modbus trunk cable is terminated, if necessary. See section

5.4 Termination resistor for line termination of

the Grundfos slave.

• Ensure that the bus topology for a Modbus network is correct.

command, or restart the E-pump manually. Increase the timeout span in the master in order to

communicate.

See section 8. Modbus function code overview for supported function codes. Note that reading and writing coils are not supported, so only register functions and diagnostics will be valid.

• Avoid reading or writing invalid data addresses.

• Make sure that register X is addressed as X-1 in Modbus telegrams, according to the Modbus standard.

Read the holding register at address 00002 "Register Offset" to see if this value is different from 0. If so, write the value 0 to this address to make the slave return to the default used in this functional profile.

See section 9. Modbus register addresses for available data.

See section 9.6 Pump data register block for data values that require a sensor.

defined". (Otherwise, the value in register 0004 is ignored by the slave).

speed for invalid values, and set correct value in

Page 41

14.2 Fault finding CIM/CIU 250

Faults in the CIU 250 can be detected by observing the status of the two communication LEDs. See the table below and section

3.3 Modbus GSM/GPRS (CIM 250).

14.2.1 LED status

CIU 250 connected to an E-pump

Fault (LED status) Possible cause Remedy

1. Both LEDs (LED1 and LED2) remain off when the power supply is connected.

2. The LED for internal communication (LED2) is flashing red.

3. The LED for internal communication (LED2) is constantly red.

4. The LED for GSM/GPRS communication (LED1) is flashing yellow. See signal 1 in fig. 16 on page 12.

5. The LED for GSM/GPRS communication is pulsating yellow with single pulse, but the CIM 250 cannot send or receive SMS messages.

a) The CIU 250 is defective.

a) No internal communication between the

CIU 250 and the E-pump.

a) The CIU 250 does not support the

connected version of the E-pump.

a) The SIM card has not been inserted. Insert the SIM card.

b) The SIM card has not been inserted

correctly.

c) The SIM card PIN code is not correct. Enter the correct PIN code.

d) No connection to the GSM network. • Check the connection to the antenna.

a) The CIM 250 has not been initialised. Follow the configuration procedure in

Replace the CIU 250.

• Check the cable connection between the E-pump and the CIU 250.

• Check that the individual conductors have been fitted correctly.

• Check the power supply to the E-pump.

Contact the nearest Grundfos company.

See section 6.1.2 Inserting the SIM card. Insert the SIM card.

See section 6.1.2 Inserting the SIM card.

• Check the GSM coverage of the area using for instance a mobile phone.

• Use an external antenna and experiment with the position.

"CIM 25X SMS commands" (supplement to installation and operating instructions) on the CD-ROM supplied with the GSM module.

English (GB)

CIM 250 fitted in the CIU 250

Fault (LED status) Possible cause Remedy

1. Both LEDs (LED1 and LED2) remain off when the power supply is connected.

2. The LED for internal communication (LED2) is flashing red.

3. The LED for internal communication (LED2) is constantly red.

4. The LED for GSM/GPRS communication (LED1) is flashing yellow. See signal 1 in fig. 16 on page 12.

5. The LED for GSM/GPRS communication is pulsating yellow with single pulse, but the CIM 250 cannot send or receive SMS messages.

a) The CIM 250 is fitted incorrectly in the

Grundfos E-pump. b) The CIM 250 is defective. Replace the CIM 250. a) No internal communication between the

CIM 250 and the Grundfos E-pump. a) The CIM 250 does not support the

Grundfos E-pump connected. a) The SIM card has not been inserted. Insert the SIM card.

b) The SIM card has not been inserted

correctly. c) The SIM card PIN code is not correct. Enter the correct PIN code.

d) No connection to the GSM network. • Check the connection to the antenna.

a) The CIM 250 has not been initialised. Follow the configuration procedure in

Ensure that the CIM 250 is fitted/connected correctly.

Ensure that the CIM 250 is fitted correctly in the Grundfos E-pump.

Contact the nearest Grundfos company.

See section 6.1.2 Inserting the SIM card. Insert the SIM card.

See section 6.1.2 Inserting the SIM card.

• Check the GSM coverage of the area using for instance a mobile phone.

• Use an external antenna and experiment with the position.

"CIM 25X SMS commands" (supplement to installation and operating instructions) on the CD-ROM supplied with the GSM module.

Page 42

14.2.2 CIM/CIU 250 Modbus GSM/GPRS communication faults

English (GB)

Fault Possible cause Remedy

1. The slave does not respond to telegrams.

2. The slave responds with exception response 0x01: "Invalid function".

3. The slave responds with exception response 0x02: "Invalid data address".

4. The slave returns data value 0xFFFF (65535).

5. The slave does not react to control actions or to writing of settings.

a) Configuration or installation error. • Ensure that the CIU 250 has contact with

b) The slave may be in listen-only mode. Either send a restart communications

c) If the holding register of address 00001

a) The master is trying to use an

a) The master is trying to read or write an

a) The availability of data will in some cases

b) With its present configuration or operating

a) The CIU 250 is SCADA PIN-code-

"SlaveMinimumReplyDelay" is set too high, the master may time out before receiving the response from the slave.

unsupported function in the CIM/CIU 250.

invalid data address. If a master tries to read register addresses that are not listed in the tables, the slave will respond with this exception response. Some masters may automatically try to read large blocks in one telegram, which will cause problems if some of the registers in the block are not supported. An example would be reading the CIM configuration and CIM status register blocks in one telegram. This is not possible since there are unused addresses among the blocks.

depend on a configuration or the actual conditions of the system (e.g. trying to request data from a E-pump which is not present will return "data not available" (0xFFFF)).

mode, the E-pump is unable to supply the requested data.

protected (GeneralStatus register 00029, bit 0 = 1), and an incorrect PIN code has been written.

the GSM network. The LED1 should be pulsing yellow. If the LED1 signal is incorrect, see section 6. Modbus GSM/GPRS, CIM 250

setup for correct installation of the

CIM 250.

• Ensure that the correct slave address is used in the Modbus master poll. See register 00003 SoftwareDefinedModbusAddress (factory value is 00231).

diagnostics command, or restart the E-pump manually.

Increase the reply delay in the master, or reduce the "SlaveMinimumReplyDelay" in order to communicate.

See section 13. Modbus RTU telegram

examples for supported function codes.

Note that reading and writing coils are not supported, so only register functions and diagnostics will be valid.

Avoid reading or writing invalid data addresses. Make sure that register X is addressed as X-1 in Modbus telegrams, according to the Modbus standard.

See section 9. Modbus register addresses for available data.

See section 9.6 Pump data register block for data values that require a sensor.

Write access requires a correct PIN code (ScadaPinCode, register 00011). Writing the correct PIN code value will trigger the write access control, and write access will be open, which can be verified with GeneralStatus, register 00029, bit 1 = 1.

Page 43

14.3 Fault finding CIM/CIU 500

Faults in the CIU 500 can be detected by observing the status of the two communication LEDs. See the table below and section 4.4 CIM 500 Modbus TCP.

14.3.1 LED status

CIU 500 connected to an E-pump

Fault (LED status) Possible cause Remedy

1. Both LEDs (LED1 and LED2) remain off when the power supply is connected.

2. The LED for internal communication (LED2) is flashing red.

3. The LED for internal communication (LED2) is permanently red.

4. The Modbus LED (LED1) is permanently red.

5. LED1 is permanently red and green at the same time.

6. LED2 is permanently red and green at the same time.

CIM 500 fitted in the CIU 500

a) The CIM 500 is fitted incorrectly in the

Grundfos product. b) The CIM 500 is defective. Replace the CIM 500. a) No internal communication between the

CIM 500 and the Grundfos product. a) The CIM 500 does not support the

Grundfos product connected. a) Fault in the CIM 500 Modbus TCP

configuration.

a) Error in firmware download. Use the Web server to download the

a) Memory fault.

Check that the CIM 500 is fitted/connected correctly.

Check that the CIM 500 is fitted correctly in the Grundfos product.

Contact the nearest Grundfos company.

Check that the rotary switch SW1 is set to 1. Check that Modbus TCP IP address

configuration is correct. See section A.4 Modbus TCP configuration on page 49.

firmware again.

Replace the CIM 500.

English (GB)

Fault (LED status) Possible cause Remedy

1. Both LEDs (LED1 and LED2) remain off when the power supply is connected.

2. The LED for internal communication (LED2) is flashing red.

3. The LED for internal communication (LED2) is permanently red.

4. The Ethernet LED (LED1) is permanently red.

5. LED1 is permanently red and green at the same time.

6. LED2 is permanently red and green at the same time.

a) The CIU 500 is defective. Replace the CIU 500.

a) No internal communication between the

CIU 500 and the Grundfos product.

a) The CIM 500 does not support the

Grundfos product connected.

a) Fault in the CIM 500 Modbus TCP

configuration.

a) Error in firmware download. Use the Web server to download the

a) Memory fault.

• Check the cable connection between the Grundfos product and the CIU 500.

• Check that the individual conductors have been fitted correctly. e.g. not reversed.

• Check the power supply to the Grundfos product.

Contact the nearest Grundfos company. Check that the rotary switch SW1 is set to 1 Check that Modbus TCP IP address

configuration is correct See section A.4 Modbus TCP configuration on page 49.

firmware again.

Replace the CIM 500.

Page 44

14.3.2 CIM/CIU 500 Modbus TCP communication faults

English (GB)

Fault Possible cause Remedy

1. The slave does not respond to telegrams.

2. The slave responds with exception response 0x01 “Invalid function”.

3. The slave responds with exception response 0x02 “Invalid data address”.

4. The slave returns data value 0xFFFF (65535).

5. The slave does not react to control actions or to writing of settings.

a) Configuration or wiring error. • Check the visual diagnostics on the

Modbus slave. Normal conditions are that the Grundfos GENIbus LED (LED2) is constantly green and that the Modbus TCP LED (LED1) is off or flashing green. If not, see section 14.3.1.

• Make sure that the cable between the Modbus TCP master and the Modbus slave is connected correctly. See section 7.1.

• Ensure that the slave IP address is configured correctly, and that the correct slave IP address is used in the Modbus master poll. See section 7.3.

The master is trying to use an unsupported function in the CIM/ CIU 500.

a) The master is trying to read or write an

invalid data address. If a master tries to read register addresses that are not listed in the tables, the slave will respond with this exception response. Some masters may automatically try to read large blocks in one telegram, which will cause problems if some of the registers in the block are not supported. An example would be reading the CIM configuration and CIM status blocks in one telegram. This is not possible since there are unused addresses between the blocks.

b) The register address offset may have

been changed from default.

a) The value is unavailable. A data value

of 0xFFFF does not necessarily indicate an error condition. It means that the value is unavailable from the E-pump.

b) The E-pump is not configured to show

the value or lacks a sensor to read the value.

The E-pump might be in “Local” mode, in which case Operating mode, Control mode and Setpoint cannot be changed from bus. Register 00201 bit 8 AccessMode must be “1” (=Remote) for bus control to be active.

See section 8. Modbus function code overview for supported function codes. Note that reading and writing coils are not supported, so only register functions and diagnostics will be valid.

Avoid reading or writing invalid data addresses. Ensure that a block of registers starting at address X is addressed as X-1 in Modbus telegrams, according to the Modbus standard.

See section 9. Modbus register addresses for available data.

See section 9.6 Pump data register block for data values that require a sensor.

Set the E-pump in "Remote mode" by setting register 00101 bit 0 RemoteAccessReq to "1" (=Remote). The E-pump should show "Controlled from bus" when status is read by handheld controller Grundfos GO Remote or R100.

Page 45

15. Modbus RTU rotary switch addresses

Caution

Modbus addressSW6SW7

1 0 1 51 3 3 101 6 5 151 9 7 201 C 9 2 0 2 52 3 4 102 6 6 152 9 8 202 C A 3 0 3 53 3 5 103 6 7 153 9 9 203 C B 4 0 4 54 3 6 104 6 8 154 9 A 204 C C 5 0 5 55 3 7 105 6 9 155 9 B 205 C D 6 0 6 56 3 8 106 6 A 156 9 C 206 C E 7 0 7 57 3 9 107 6 B 157 9 D 207 C F 8 0 8 58 3 A 108 6 C 158 9 E 208 D 0

9 0 9 59 3 B 109 6 D 159 9 F 209 D 1 10 0 A 60 3 C 110 6 E 160 A 0 210 D 2 11 0 B 61 3 D 111 6 F 161 A 1 211 D 3 12 0 C 62 3 E 112 7 0 162 A 2 212 D 4 13 0 D 63 3 F 113 7 1 163 A 3 213 D 5 14 0 E 64 4 0 114 7 2 164 A 4 214 D 6 15 0 F 65 4 1 115 7 3 165 A 5 215 D 7 16 10 66 42 116 74 166 A6 216 D8 17 11 67 43 117 75 167 A7 217 D9 18 12 68 44 118 76 168 A8 218 DA 19 13 69 45 119 77 169 A9 219 DB 20 1 4 70 4 6 120 7 8 170 A A 220 D C 21 1 5 71 4 7 121 7 9 171 A B 221 D D 22 1 6 72 4 8 122 7 A 172 A C 222 D E 23 1 7 73 4 9 123 7 B 173 A D 223 D F 24 1 8 74 4 A 124 7 C 174 A E 224 E 0 25 1 9 75 4 B 125 7 D 175 B F 225 E 1 26 1 A 76 4 C 126 7 E 176 B 0 226 E 2 27 1 B 77 4 D 127 7 F 177 B 1 227 E 3 28 1 C 78 4 E 128 8 0 178 B 2 228 E 4 29 1 D 79 4 F 129 8 1 179 B 3 229 E 5 30 1 E 80 5 0 130 8 2 180 B 4 230 E 6 31 1 F 81 5 1 131 8 3 181 B 5 231 E 7 32 2 0 82 5 2 132 8 4 182 B 6 232 E 8 33 2 1 83 5 3 133 8 5 183 B 7 233 E 9 34 2 2 84 5 4 134 8 6 184 B 8 234 E A 35 2 3 85 5 5 135 8 7 185 B 9 235 E B 36 2 4 86 5 6 136 8 8 186 B A 236 E C 37 2 5 87 5 7 137 8 9 187 B B 237 E D 38 2 6 88 5 8 138 8 A 188 B C 238 E E 39 2 7 89 5 9 139 8 B 189 B D 239 E F 40 2 8 90 5 A 140 8 C 190 B E 240 F 0 41 2 9 91 5 B 141 8 D 191 B F 241 F 1 42 2 A 92 5 C 142 8 E 192 C 0 242 F 2 43 2 B 93 5 D 143 8 F 193 C 1 243 F 3 44 2 C 94 5 E 144 9 0 194 C 2 244 F 4 45 2 D 95 5 F 145 9 1 195 C 3 245 F 5 46 2 E 96 6 0 146 9 2 196 C 4 246 F 6 47 2 F 97 6 1 147 9 3 197 C 5 247 F 7 48 3 0 98 6 2 148 9 4 198 C 6 49 3 1 99 6 3 149 9 5 199 C 7 50 3 2 100 6 4 150 9 6 200 C 8

Example: To set the slave address to the value 142, set the rotary switches SW6 and SW7 to "8" and "E", respectively.

Modbus addressSW6SW7

Please note that 0 is not a valid slave address as this is used for broadcasting.

Modbus addressSW6SW7

English (GB)

It is very important to ensure that two devices do not have the same address on the network. If two devices have the same address, the result will be an abnormal behaviour of the whole serial bus.

Page 46

16. Grundfos alarm and warning codes

English (GB)

This is a general Grundfos alarm and warning code list. Not all codes apply to Grundfos E-pumps.

Code Description Code Description Code Description

1 Leakage current 36 Discharge valve leakage 77

2 Missing phase 37 Suction valve leakage 78 Fault, speed plug 3 External fault signal 38 Vent valve defective 79 Functional fault, add-on module 4 Too many restarts 40 Undervoltage 80 Hardware fault, type 2 5 Regenerative braking 41 Undervoltage transient 81 Verification error, data area (RAM)

6 Mains fault 42 Cut-in fault (dV/dt) 82

7 Too many hardware shutdowns 45 Voltage asymmetry 83

PWM switching frequency

reduced

9 Phase sequence reversal 49 Overcurrent (i_line, i_dc, i_mo) 85

10 Communication fault, pump 50

11 Water-in-oil fault (motor oil) 51 Blocked motor/pump 89 Signal fault, feedback sensor 1

Time for service

(general service information)

13 Moisture alarm, analog 53 Stalled motor 91 Signal fault, temperature 1 sensor

Electronic DC-link protection

activated (ERP) Communication fault, main system

(SCADA)

16 Other 56 Underload 94 Limit exceeded, sensor 1

Performance requirement cannot

be met 18 Commanded alarm standby (trip) 58 Low flow 96 Setpoint signal outside range 19 Diaphragm break (dosing pump) 59 No flow 97 Signal fault, setpoint input 20 Insulation resistance low 60 Low input power

21 Too many starts per hour 64 Overtemperature 98

22 Moisture switch alarm, digital 65

23 Smart trim gap alarm 66

24 Vibration 67

25 Setup conflict 68

Load continues even if the motor 26

has been switched off

External motor protector activated 27

(e.g. MP 204)

28 Battery low 71

Turbine operation (impellers 29

forced backwards)

Change bearings (specific service 30

information)

Change varistor(s) (specific 31

service information)

32 Overvoltage 75 Internal supply voltage too low 122

Gas in pump head, deaerating 35

problem

Communication fault, twin-head pump

Verification error, code area (ROM, FLASH)

Verification error, FE parameter area (EEPROM)

48 Overload 84 Memory access error

Verification error, BE parameter area (EEPROM)

Motor protection function, general shutdown (mpf)

52 Motor slip high 90 Signal fault, speed sensor

Motor protection function, 3 sec.

limit Motor current protection activated

(MCP)

57 Dry running 95 Limit exceeded, sensor 2

Motor temperature 1 (t_m or t_mo or t_mo1)

Temperature, control electronics (t_e)

Temperature too high, internal frequency converter module (t_m)

External temperature/water temperature (t_w)

Thermal relay 1 in motor

(e.g. Klixon) Thermal relay 2 in motor

(e.g. thermistor) Motor temperature 2

(Pt100, t_mo2)

72 Hardware fault, type 1 113 Cos φ too low

73 Hardware shutdown (HSD) 120

74 Internal supply voltage too high 121

76 Internal communication fault 123

88 Sensor fault

92 Calibration fault, feedback sensor

93 Signal fault, sensor 2

Signal fault, input for setpoint influence

Signal fault, input for analog

setpoint

104 Software shutdown

Electronic rectifier protection

105

activated (ERP) Electronic inverter protection

106

activated (EIP)

110 Skew load, electrical asymmetry

111 C urrent a symmetr y

112 C os

φ too high

Auxiliary winding fault (single-phase motors)

Auxiliary winding current too high (single-phase motors)

Auxiliary winding current too low (single-phase motors)

Start capacitor, low (single-phase motors)

Page 47

Code Description Code Description Code Description

Run capacitor, low 124

(single-phase motors)

Motor temperature 3 144

(Pt100, t_mo3)

Bearing temperature high (Pt100), 145

in general or top bearing

Bearing temperature high (Pt100), 146

middle bearing

Bearing temperature high (Pt100), 147

bottom bearing

Motor bearing temperature high 148

(Pt100) in drive end (DE)

Motor bearing temperature high 149

(Pt100) in non-drive end (NDE)

Communication fault, add-on 152

module 153 Fault, analog output 187 Signal fault, energy meter 221 Fault, mixer contactor feedback 154 Communication fault, display 188 Signal fault, user-defined sensor 222 Time for service, mixer

155 Inrush fault 189 Signal fault, level sensor 223

Communication fault, internal 156

frequency converter module

157 Real-time clock out of order 191

Hardware circuit measurement 158

fault

CIM fault (Communication 159

Interface Module) 160 GSM modem, SIM card fault 194 Sensor limit 5 exceeded 228 Not used 161 Sensor supply fault, 5 V 195 Sensor limit 6 exceeded 229 Not used 162 Sensor supply fault, 24 V 196 Operation with reduced efficiency 230 Network alarm

Measurement fault, motor 163

protection

164 Signal fault, Liqtec sensor 198

165 Signal fault, analog input 1 199

166 Signal fault, analog input 2 200 Application alarm 236 Pump 1 fault 167 Signal fault, analog input 3 201 External sensor input high 237 Pump 2 fault 168 Signal fault, pressure sensor 202 External sensor input low 238 Pump 3 fault 169 Signal fault, flow sensor 203 Alarm on all pumps 239 Pump 4 fault

Signal fault, water-in-oil (WIO) 170

sensor

171 Signal fault, moisture sensor 205

Signal fault, atmospheric pressure 172

sensor

Signal fault, rotor position sensor 173

(Hall sensor) 174 Signal fault, rotor origo sensor 208 Cavitation 244 Fault, On/Off/Auto switch

175 Signal fault, temperature 2 sensor 209 Non-return valve fault 245

176 Signal fault, temperature 3 sensor 210 High pressure 246

177 Signal fault, smart trim gap sensor 211 Low pressure 247

178 Signal fault, vibration sensor 212

Signal fault, bearing temperature

179

sensor (Pt100), general or top bearing

Signal fault, bearing temperature

180

sensor (Pt100), middle bearing Signal fault, PTC sensor

181

(short-circuited) Signal fault, bearing temperature

182

sensor (Pt100), bottom bearing Signal fault, extra temperature

183

sensor Signal fault, general-purpose

184

sensor

185 Unknown sensor type 219 Pressure relief not adequate

186 Signal fault, power meter sensor 220 Fault, motor contactor feedback

Sensor limit 1 exceeded

190

(e.g. alarm level in WW application) Sensor limit 2 exceeded

(e.g. high level in WW application) Sensor limit 3 exceeded

192

(e.g. overflow level in WW application)

193 Sensor limit 4 exceeded 227 Combi event

197 Operation with reduced pressure 231

Operation with increased power consumption

Process out of range (monitoring/ estimation/calculation/control)

204 Inconsistency between sensors 240

Level float switch sequence inconsistency

206 Water shortage, level 1 242

207 Water leakage 243

Diaphragm tank precharge pressure out of range

213 VFD not ready

214 Water shortage, level 2

215 Soft pressure build-up timeout

216 Pilot pump alarm

Alarm, general-purpose sensor

217

high Alarm, general-purpose sensor

218

low

Maximum number of mixer starts per hour exceeded

Pump fault (due to auxiliary

224

component or general fault) Communication fault, pump

225

module

226 Communication fault, I/O module

Ethernet: No IP address from DHCP server

Ethernet: Auto-disabled due to

232

misuse

233 Ethernet: IP address conflict

Lubricate bearings (specific service information)

241 Motor phase failure

Automatic motor model recognition failed

Motor relay has been forced (manually operated/commanded)

Pump continuous runtime too long

User-defined relay has been forced (manually operated/ commanded)

Power-on notice (device/system has been switched off)

248 Fault, battery/UPS

English (GB)

Subject to alterations.

Page 48

Appendix

Appendix 1

The appendix describes the parts of the CIM 500 web server needed for the configuration of a Modbus TCP Ethernet connection. For other CIM 500 web server features, not specifically related to Modbus TCP, see the CIM 500 Installation & Operating instructions.

A.1 How to configure an IP address on your PC

For connecting a PC to the CIM 500 via Ethernet, the PC must be set up to use a fixed (static) IP address belonging to the same subnetwork as the CIM 500.

1. Open "Control Panel".

2. Enter "Network and Sharing Center".

3. Click [Change adapter settings].

4. Right-click and select "Properties" for Ethernet adapter. Typically "Local Area Connection".

5. Select properties for "Internet Protocol Version 4(TCP/IPv4).

6. Select tab "Alternate Configuration".

7. Configure an IP address and subnet mask to be used by your PC. See fig. 28.

Fig. 28 Example from Windows XP

A.2 Web server configuration

The built-in web server is an easy and effective way to monitor status of the CIM 500 module and configure the available functions and Industrial Ethernet protocols. The web server also makes it possible to update the firmware of the CIM module, and store/restore settings.

To establish a connection from a PC to CIM 500, proceed as follows:

Before configuration

• Check that PC and CIM module are connected via an Ethernet

cable.

• Check that the PC Ethernet port is set to the same network as

the CIM module. For network configuration, see section A.1

How to configure an IP address on your PC.

To establish a connection from a PC to the CIM 500 for the first time, the following steps are required:

1. Open a standard Internet browser and type 192.168.1.100 in the URL address field.

2. Log in to the Web server.

TM05 7422 0913

Page 49

A.3 Login

Note

Fig. 29 Login

User name Enter user name. Default: admin. Password Enter password. Default: Grundfos.

User name and password can be changed on the web server under "Grundfos Management"

A.4 Modbus TCP configuration

Appendix

TM05 6063 4412

Fig. 30 Real Time Ethernet Protocol Configuration - Modbus TCP

Object Description

The default value is 502, the official IANA-assigned Modbus TCP port number. Number 502 will always be

TCP Port Number

IP Address The static IP address for CIM 500 on the Modbus TCP network.

Subnet mask The subnet mask for the CIM 500 module on the Modbus TCP network.

Gateway The default gateway for the Modbus TCP network.

Use DHCP

active implicitly. If you select another value in the Web server configuration field, both the new value and value 502 will be active.

The CIM 500 module can be configured to automatically obtain the IP address from a DHCP server on the network.

TM05 6064 4412

Page 50

Page 51

Argentina

Bombas GRUNDFOS de Argentina S.A. Ruta Panamericana, ramal Campana Centro Industrial Garín - Esq. Haendel y Mozart AR-1619 Garín Pcia. de Buenos Aires Pcia. de Buenos Aires Phone: +54-3327 414 444 Telefax: +54-3327 45 3190

Australia

GRUNDFOS Pumps Pty. Ltd. P.O. Box 2040 Regency Park South Australia 5942 Phone: +61-8-8461-4611 Telefax: +61-8-8340 0155

Austria

GRUNDFOS Pumpen Vertrieb Ges.m.b.H. Grundfosstraße 2 A-5082 Grödig/Salzburg Tel.: +43-6246-883-0 Telefax: +43-6246-883-30

Belgium

N.V. GRUNDFOS Bellux S.A. Boomsesteenweg 81-83 B-2630 Aartselaar Tél.: +32-3-870 7300 Télécopie: +32-3-870 7301

Belarus

Представительство ГРУНДФОС в Минске 220125, Минск ул. Шафарнянская, 11, оф. 56 Тел.: +7 (375 17) 286 39 72, 286 39 73 Факс: +7 (375 17) 286 39 71

E-mail: minsk@grundfos.com

Bosnia/Herzegovina

GRUNDFOS Sarajevo Trg Heroja 16, BiH-71000 Sarajevo Phone: +387 33 713 290 Telefax: +387 33 659 079 e-mail: grundfos@bih.net.ba

Brazil

BOMBAS GRUNDFOS DO BRASIL Av. Humberto de Alencar Castelo Branco, 630 CEP 09850 - 300 São Bernardo do Campo - SP Phone: +55-11 4393 5533 Telefax: +55-11 4343 5015

Bulgaria

Grundfos Bulgaria EOOD Slatina District Iztochna Tangenta street no. 100 BG - 1592 Sofia Tel. +359 2 49 22 200 Fax. +359 2 49 22 201 email: bulgaria@grundfos.bg

Canada

GRUNDFOS Canada Inc. 2941 Brighton Road Oakville, Ontario L6H 6C9 Phone: +1-905 829 9533 Telefax: +1-905 829 9512

China

GRUNDFOS Pumps (Shanghai) Co. Ltd. 50/F Maxdo Center No. 8 XingYi Rd. Hongqiao development Zone Shanghai 200336 PRC Phone: +86 21 612 252 22 Telefax: +86 21 612 253 33

Croatia

GRUNDFOS CROATIA d.o.o. Cebini 37, Buzin HR-10010 Zagreb Phone: +385 1 6595 400 Telefax: +385 1 6595 499 www.grundfos.hr

Czech Republic

GRUNDFOS s.r.o. Čajkovského 21 779 00 Olomouc Phone: +420-585-716 111 Telefax: +420-585-716 299

Denmark

GRUNDFOS DK A/S Martin Bachs Vej 3 DK-8850 Bjerringbro Tlf.: +45-87 50 50 50 Telefax: +45-87 50 51 51 E-mail: info_GDK@grundfos.com www.grundfos.com/DK

Estonia

GRUNDFOS Pumps Eesti OÜ Peterburi tee 92G 11415 Tallinn Tel: + 372 606 1690 Fax: + 372 606 1691

Finland

OY GRUNDFOS Pumput AB Mestarintie 11 FIN-01730 Vantaa Phone: +358-(0)207 889 900 Telefax: +358-(0)207 889 550

France

Pompes GRUNDFOS Distribution S.A. Parc d’Activités de Chesnes 57, rue de Malacombe F-38290 St. Quentin Fallavier (Lyon) Tél.: +33-4 74 82 15 15 Télécopie: +33-4 74 94 10 51

Germany

GRUNDFOS GMBH Schlüterstr. 33 40699 Erkrath Tel.: +49-(0) 211 929 69-0 Telefax: +49-(0) 211 929 69-3799 e-mail: infoservice@grundfos.de Service in Deutschland: e-mail: kundendienst@grundfos.de

HILGE GmbH & Co. KG Hilgestrasse 37-47 55292 Bodenheim/Rhein Germany Tel.: +49 6135 75-0 Telefax: +49 6135 1737 e-mail: hilge@hilge.de

Greece

GRUNDFOS Hellas A.E.B.E. 20th km. Athinon-Markopoulou Av. P.O . B o x 71 GR-19002 Peania Phone: +0030-210-66 83 400 Telefax: +0030-210-66 46 273

Hong Kong

GRUNDFOS Pumps (Hong Kong) Ltd. Unit 1, Ground floor Siu Wai Industrial Centre 29-33 Wing Hong Street & 68 King Lam Street, Cheung Sha Wan Kowloon Phone: +852-27861706 / 27861741 Telefax: +852-27858664

Hungary

GRUNDFOS Hungária Kft. Park u. 8 H-2045 Törökbálint, Phone: +36-23 511 110 Telefax: +36-23 511 111

India

GRUNDFOS Pumps India Private Limited 118 Old Mahabalipuram Road Thoraipakkam Chennai 600 096 Phone: +91-44 2496 6800

Indonesia

PT GRUNDFOS Pompa Jl. Rawa Sumur III, Blok III / CC-1 Kawasan Industri, Pulogadung Jakarta 13930 Phone: +62-21-460 6909 Telefax: +62-21-460 6910 / 460 6901

Ireland

GRUNDFOS (Ireland) Ltd. Unit A, Merrywell Business Park Ballymount Road Lower Dublin 12 Phone: +353-1-4089 800 Telefax: +353-1-4089 830

Italy

GRUNDFOS Pompe Italia S.r.l. Via Gran Sasso 4 I-20060 Truccazzano (Milano) Tel.: +39-02-95838112 Telefax: +39-02-95309290 / 95838461

Japan

GRUNDFOS Pumps K.K. Gotanda Metalion Bldg., 5F, 5-21-15, Higashi-gotanda Shiagawa-ku, Tokyo 141-0022 Japan Phone: +81 35 448 1391 Telefax: +81 35 448 9619

Korea

GRUNDFOS Pumps Korea Ltd. 6th Floor, Aju Building 679-5 Yeoksam-dong, Kangnam-ku, 135-916 Seoul, Korea Phone: +82-2-5317 600 Telefax: +82-2-5633 725

Latvia

SIA GRUNDFOS Pumps Latvia Deglava biznesa centrs Augusta Deglava ielā 60, LV-1035, Rīga, Tālr.: + 371 714 9640, 7 149 641 Fakss: + 371 914 9646

Lithuania

GRUNDFOS Pumps UAB Smolensko g. 6 LT-03201 Vilnius Tel: + 370 52 395 430 Fax: + 370 52 395 431

Malaysia

GRUNDFOS Pumps Sdn. Bhd. 7 Jalan Peguam U1/25 Glenmarie Industrial Park 40150 Shah Alam Selangor Phone: +60-3-5569 2922 Telefax: +60-3-5569 2866

Mexico

Bombas GRUNDFOS de México S.A. de C.V. Boulevard TLC No. 15 Parque Industrial Stiva Aeropuerto Apodaca, N.L. 66600 Phone: +52-81-8144 4000 Telefax: +52-81-8144 4010

Netherlands

GRUNDFOS Netherlands Velu we zo om 35 1326 AE Almere Postbus 22015 1302 CA ALMERE Tel.: +31-88-478 6336 Telefax: +31-88-478 6332 E-mail: info_gnl@grundfos.com

New Zealand

GRUNDFOS Pumps NZ Ltd. 17 Beatrice Tinsley Crescent North Harbour Industrial Estate Albany, Auckland Phone: +64-9-415 3240 Telefax: +64-9-415 3250

Norway

GRUNDFOS Pumper A/S Strømsveien 344 Postboks 235, Leirdal N-1011 Oslo Tlf.: +47-22 90 47 00 Telefax: +47-22 32 21 50

Poland

GRUNDFOS Pompy Sp. z o.o. ul. Klonowa 23 Baranowo k. Poznania PL-62-081 Przeźmierowo Tel: (+48-61) 650 13 00 Fax: (+48-61) 650 13 50

Portugal

Bombas GRUNDFOS Portugal, S.A. Rua Calvet de Magalhães, 241 Apartado 1079 P-2770-153 Paço de Arcos Tel.: +351-21-440 76 00 Telefax: +351-21-440 76 90

Romania

GRUNDFOS Pompe România SRL Bd. Biruintei, nr 103 Pantelimon county Ilfov Phone: +40 21 200 4100 Telefax: +40 21 200 4101 E-mail: romania@grundfos.ro

Russia

ООО Грундф ос Россия, 109544 Москва, ул. Школьная

Тел. (+7) 495 737 30 00, 564 88 00 Факс (+7) 495 737 75 36, 564 88 11

E-mail grundfos.moscow@grundfos.com

Serbia

GRUNDFOS Predstavništvo Beograd Dr. Milutina Ivkovića 2a/29 YU-11000 Beograd Phone: +381 11 26 47 877 / 11 26 47 496 Telefax: +381 11 26 48 340

Singapore

GRUNDFOS (Singapore) Pte. Ltd. 25 Jalan Tukang Singapore 619264 Phone: +65-6681 9688 Telefax: +65-6681 9689

Slovenia

GRUNDFOS d.o.o. Šlandrova 8b, SI-1231 Ljubljana-Črnuče Phone: +386 1 568 0610 Telefax: +386 1 568 0619 E-mail: slovenia@grundfos.si

South Africa

GRUNDFOS (PTY) LTD Corner Mountjoy and George Allen Roads Wilbart Ext. 2 Bedfordview 2008 Phone: (+27) 11 579 4800 Fax: (+27) 11 455 6066 E-mail: lsmart@grundfos.com

Spain

Bombas GRUNDFOS España S.A. Camino de la Fuentecilla, s/n E-28110 Algete (Madrid) Tel.: +34-91-848 8800 Telefax: +34-91-628 0465

Sweden

GRUNDFOS AB Box 333 (Lunnagårdsgatan 6) 431 24 Mölndal Tel.: +46 31 332 23 000 Telefax: +46 31 331 94 60

Switzerland

GRUNDFOS Pumpen AG Bruggacherstrasse 10 CH-8117 Fällanden/ZH Tel.: +41-1-806 8111 Telefax: +41-1-806 8115

Taiwan

GRUNDFOS Pumps (Taiwan) Ltd. 7 Floor, 219 Min-Chuan Road Taichung, Taiwan, R.O.C. Phone: +886-4-2305 0868 Telefax: +886-4-2305 0878

Thailand

GRUNDFOS (Thailand) Ltd. 92 Chaloem Phrakiat Rama 9 Road, Dokmai, Pravej, Bangkok 10250 Phone: +66-2-725 8999 Telefax: +66-2-725 8998

Turkey

GRUNDFOS POMPA San. ve Tic. Ltd. Sti. Gebze Organize Sanayi Bölgesi Ihsan dede Caddesi,

2. yol 200. Sokak No. 204 41490 Gebze/ Kocaeli Phone: +90 - 262-679 7979 Telefax: +90 - 262-679 7905 E-mail: satis@grundfos.com

Ukraine

ТОВ ГРУНДФОС УКРАЇНА 01010 Київ, Вул. Московська 8б,

Тел.:(+38 044) 390 40 50 Фах.: (+38 044) 390 40 59

E-mail: ukraine@grundfos.com

United Arab Emirates

GRUNDFOS Gulf Distribution P.O. Box 16768 Jebel Ali Free Zone Dubai Phone: +971 4 8815 166 Telefax: +971 4 8815 136

United Kingdom

GRUNDFOS Pumps Ltd. Grovebury Road Leighton Buzzard/Beds. LU7 4TL Phone: +44-1525-850000 Telefax: +44-1525-850011

U.S.A.

GRUNDFOS Pumps Corporation 17100 West 118th Terrace Olathe, Kansas 66061 Phone: +1-913-227-3400 Telefax: +1-913-227-3500

Uzbekistan

Представительство ГРУНДФОС в Ташкенте 700000 Ташк ент ул.Усман а Носира 1-й тупик 5 Телефон : (3712) 55-68-15 Факс: (3712) 53-36-35

Revised 18.04.2013

Grundfos companies

Page 52

98367081 0513

ECM: 1113692

www.grundfos.com

The name Grundfos, the Grundfos logo, and be think innovate are registered trademarks owned by Grundfos Holding A/S or Grundfos A/S, Denmark. All rights reserved worldwide. © Copyright Grundfos Holding A/S

Grundfos CIM 200, CIU 250, CIM 500, CIU 500, CIU 200 Instructions Manual

Specifications and Main Features

Frequently Asked Questions

User Manual

1. Symbols used in this document

2. Introduction

2.1 About this functional profile

2.2 Assumptions

2.3 Definitions and abbreviations

3. System description

3.1 Modbus

3.2 Modbus RTU (CIM 200)

3.3 Modbus GSM/GPRS (CIM 250)

3.4 Modbus TCP (CIM 500)

4. Specifications

4.1 CIM module general data

4.2 CIM 200 Modbus RTU

4.3 CIM 250 GSM/GPRS

4.4 CIM 500 Modbus TCP

5. Modbus RTU, CIM 200 setup

5.1 Setting the Modbus transmission speed

5.2 Setting the parity

5.3 Modbus address selection

5.4 Termination resistor

5.5 Status LEDs

6. Modbus GSM/GPRS, CIM 250 setup

6.1 Installation

6.1.1 Fitting a GSM antenna

6.1.2 Inserting the SIM card

6.1.3 Connecting the battery and power supply

6.1.4 Configuration

6.2 Status LEDs

7. Modbus TCP, CIM 500 setup

7.2 Setting the Industrial Ethernet protocol

7.1 Connecting the Ethernet cable

7.3 Setting the IP addresses

7.4 Establish connection to the Web server

7.5 Status LEDs

7.6 DATA and LINK LEDs

8. Modbus function code overview

9. Modbus register addresses

9.1 Register block overview

9.2 CIM configuration register block

9.3 CIM status register block

9.4 Pump control register block

9.5 Pump status register block

9.6 Pump data register block

9.7 Sensor-dependent measurements

9.8 Alarm simulation register block

10. Detailed descriptions of registers

10.1 Control mode

10.2 Setpoint

10.2.1 Setpoint examples

10.3 Alarms and warnings

11. Modbus RTU commissioning, step-by-step guides

11.1 Hardware setup (CIM 200)

11.2 Hardware setup (CIU 200)

11.3 Hardware setup (CIM 250 GSM call-up)

11.4 Hardware setup (CIU 250 GSM call-up)

11.5 Hardware setup (CIM 250 GPRS connection)

11.6 Hardware setup (CIU 250 GPRS connection)

11.7 Modbus TCP communication setup (CIM 500)

11.8 Modbus TCP communication setup (CIU 500)

12. Detailed descriptions of functionality

12.1 GSM

12.1.1 Call-up functional description

12.1.2 SCADA PIN code protection

12.1.3 GSM call-up options setup

12.2 GPRS

12.2.1 What is GPRS and Modbus TCP?

12.2.2 Subscription

12.2.3 Installation

12.2.4 Operation

13. Modbus RTU telegram examples

13.1 Modbus telegram overview

13.2 Read holding registers (0x03)

13.3 Read input registers (0x04)

13.4 Write single register (0x06)

13.5 Write multiple registers (0x10)

13.6 Diagnostics (0x08)