MSC90/MSC90A/MSC90T Series Modbus Protocol

Manual (V1.0)
Our Protocol is standard MODBUS protocol with RTU (hexadecimal number) transmission mode. Modbus protocol is a
Master -slave protocol. There is only one device communication at any time. The information exchange is managed by the
master, only which can initiate it and query the slave in turn. When the address is same between the master and slave, the
slave can response to the order message. Direct communication among slaves are impossible. Any order’s header and
terminator are not included in the protocol frame. The start and end of the order message will be identified by the interval
time. When the interval time is equal and longer than 3.5 character, that is to say finishing frame detected. If there is no
slave in the network or CRC check error, there is no return frame received by the master. At this time, the Master confirm
whether it is timed out according timeout setting. If it is timeout, retransmission or an abnormal error window will be made.

The protocol frame as follows:

Slave address Function Code Data CRC16

Slave address: 1 to 247, 1 default ex-work

Each slave address must be unique in the same master network
0 is broadcast address, the slave receives the order and processes it accordingly, but cannot reply to the order message
Function Code: Read and write register codes
Data: transmitted in binary code
CRC16: CRC check, checking from the slave address to last byte of the data, calculating multiple formula codes as A001
(Hex)

Communication port Setting

Communication mode: Asynchronous serial communication interface, such as RS485, RS232 etc.
Baud Rate: 2400 to 9600bps (can be set by parameter BT in our programmer, 9600 default)
Byte data format HEX
. A start bit
. Eight data bit
. One stop bit
No checking
1 * * * * * * * * 1
Start Bit Data Bit (From Low to High) Stop Bit
Order Frame Format (Read, write function by master)
Read Register Frame
Slave Address Function Code Starting Register Address Register Code Number (N) CRC16
1 byte 1 byte 2 byte 2 bytes 2bytes
0---247 03H AddrH, AddrL NH, NL （1---24） CrcL, CrcH
Read Register Response to Frame
Slave Address Function Code Byte Number Register Data CRC16
1 byte 1 byte 1 byte N*2 bytes 2 bytes
1---247 03H N*2 DataH, DataL CrcL, CrcH

1
Write Register Frame
Slave Function Starting Register Register Code Byte Number Register Data CRC16
Address Code Address Number (N)
1byte 1byte 2bytes 2 bytes 1 byte N*2byte 2byte
0---247 10H AddrH, AddrL NH, NL 1---24 N*2 DataH, DataL CrcL, CrcH

Write Register Response to Frame

Slave Address Function Code Starting Register Address Register Code CRC16
Number (N)
1byte 1byte 2 bytes 2 bytes 2bytes
1---247 10H AddrH, AddrL NH, NL 1---24 CrcL, CrcH

Wrong Response to Frame

Slave Address Function Code Error Code CRC16
1byte 1 byte 1byte 2bytes
1---247 Query Function code+80H Table 2 as below CrcL, CrcH

1. Function Code Table 1

Function Code ModBus Name Function Broadcast Maximum value of N in a row
03H Read Holding Registers Read N register value No 24
10H Write Multiple Registers Write N register value No 24

2. Wrong Code Table 2

Wrong Code Description
1 register length exceeded
2 register length exceeded
3 Slave password protection
4 Read or write is not allowed. For example, if some registers are read-only, you cannot send w commands.

3. Register Code Table 3（Only Reading register）

No Parameter Parameter Name Address Type Range Remark
1 Version high bit 2 Read only 2 Byte ASCII Character
2 Version low bit 3 2 Byte ASCII Character
3 Input 1 measuring value 4
4 OUT1 output value 5
5 Input 1 input statue 6 Table 6

6 Input 2 measuring value 7

7 OUT2 output value 8
8 Input 2 input statue 9 Table 6
9 Relay alarming statue 10 Table 7

2
4. Register Code List Table 4（1st Menu Register Codes）
No Parameter Parameter Name Address Type Range Remark
11 LOC Parameters Password 12 Read 0-9999 Default：0（Table 9）
12 ALM1 OUT1 Alarming mode 14 Write 0-4 Default：0（Table 8）
13 ALA1 OUT1 Alarming value 15 -1999-9999 50
14 ALH1 OUT1 Alarming hysteresis value 16 -1999-9999 5
15 ALM2 OUT2 Alarming mode 17 0-4 Default：0 ( Table 8）
16 ALA2 OUT2 Alarming value 18 -1999-9999 50
17 ALH2 OUT2 Alarming hysteresis value 19 -1999-9999 5
12 OUt1 OUT1 output signal type 20 0-4 Default：0（Table 10）
13 OUL1 OUT1 low limit of range 21 -1999-9999 0
14 OUH1 OUT1 high limit of range 22 -1999-9999 1000
15 Out2 OUT2 output signal type 23 0-4 Default：0（Table 10）
16 OUL2 OUT2 low limit of output Range 24 -1999-9999 0
17 OUH2 OUT2 high limit of output Range 25 -1999-9999 1000
Addr Address 26 1-200 1
bAUd Baudrate 27 0-3 Default：2（Table 11）
SUF Math mode 28 0-3 Default：0（Table 12）
KVL1 1 Channel Math coefficient 29 -19.99-99.99 1.00
KVL2 2 Channels Math coefficient 30 -19.99-99.99 1.00
PdIS P V screen display mode 31 0-1 Default：0（Table 13）
18 SdIS SV screen display mode 32 0-3 Default：0（Table 14）
OUtS Output selection 33 0-4 Default：0（Table 15）

5. Register Code List Table 4（2nd Menu Register Codes）

No Parameter Parameter Name Address Type Range Remark
21 Pn Input 1 input type 34 Read 0-48 Default：14（Table16）
22 dp Input 1 Decimal point 35 Write 0-3 0
23 brK OUT1 break-circuit output 36 0-2 Default：1（Table17）
24 PL Input 1 Low limit of PV display 37 -1999-9999 Default：0
25 PH Input 1 High limit of PV display 38 -1999-9999 Default：1000
26 Pb Input 1 display zero point 39 0-4 Default：0
27 PK Input 1 display ratio 40 0.000-9.999 Default：1
35 Reserve
36 FK Input 1 filter coefficient 42 1-30 Default：1
21 Pn Input 2 input type 43 Read 0-16 Default：14（Table16）
22 dp Input 2 Decimal point 44 Write 0-3 0
23 brK OUT2 break-circuit output 45 0-2 Default：1（Table17）
24 PL Input 2 Low limit of PV display 46 -1999-9999 Default：0
25 PH Input 2 Low limit of PV display 47 -1999-9999 Default：1000
26 Pb Input 2 PV display zero point 48 0-4 Default：0
27 PK Input 2 display ratio 49 0.000-9.999 Default：1
35 Reserve
36 FK Input 2 filter coefficient 51 1-30 Default：1
3
Notes: Register address Table description:
1. All data types are signed integer (two bytes).
2. All data with decimal points during communication are replaced by integers. For example, 1.000 is replaced by 1000.
(That is to say, the decimal point is ignored) 27.9 is replaced by 279
3. All register data is hexadecimal number when communication. High byte is transmitted first, then low byte. For example, when
communicating 279, 01H first, then 23H.
4. Read the measured display value (PV). If the input signal is RTD or thermocouple, and the decimal point is 1, it will read 124, which is
12.4

6. Measurement Input Statue Table 6

Reading Value Input 1 Measurement
Bit1 Bit0
xxxx xxxx xxxx xx00B Input 1 is working ok, normal
xxxx xxxx xxxx xx01B Channel is in disconnection
xxxx xxxx xxxx xx10B Channel is in short circuit
xxxx xxxx xxxx xx11B Over high limit of signal

Input 2 Measurement
Bit3 Bit2
xxxx xxxx xxxx 00xxB Input 2 is working ok, normal
xxxx xxxx xxxx 01xxB Channel is in disconnection

Input Display Range

Bi5 Bit4
xxxx xxxx xx00 xxxxB Display is ok
xxxx xxxx xx01 xxxxB Over high limit of display
xxxx xxxx xx10 xxxxB Over low limit of display

7. Relay Alarm Statue Table 7

Reading Value Description
xxxx xxxx xxxx xxx0B OUT1 No alarming
xxxx xxxx xx10 xxx1B OUT1 alarming
xxxx xxxx xx10 xx0xB OUT2 No alarming
xxxx xxxx xx10 xx1xB OUT2 alarming

8. ALM1, ALM2: Relay Alarm Output Mode Setting Table 8

Setting Value Description
1 OUT2 low limit alarming
2 OUT2 high limit alarming
3 OUT1 low limit alarming
4 OUT1 high limit alarming
0 No alarming

4
9. LOC : Password Setting Table 9
Setting Value Password Setting
132 1st, 2nd menu
1024 Calibration password
3003 Isolator unction setting

10. OUT1, OUT2: Output Signal Type Setting Table 10

Signal Code Signal Type
0 4-20mA
1 1-5V
2 0-10mA
3 0-5V
4 0-20mA

11. bAUd : Baud Rate Setting Table 11

Setting Value Baud rate Value
0 2400
1 4800
2 9600
3 19200

12. SUF: Math Mode Setting Table 12

Setting Value Math Mode
0 None
1 Addition and subtraction
2 Multiplication
3 Division

13. PdIS Setting Table 13

Setting Value Description
0 To display PV value of Input 1 and Input2 , shift by move key
1 To display Math value and Input 1 PV value, shift by move key

14. SdIS Setting Table 14

Setting Value Description
0 To display output value in theory, shift by move key
1 To display alarming value, shift by move key
2 To display temperature engineer unit
3 To display Input2 PV value

15. OUtS: Output Selection Setting Table 15

Reading Value Description
0 OUT1 for Input 1 measurement output
OUT2 for Input 2 measurement output
1 OUT1, OUT2 for Input 1 measurement output
2 OUT1, OUT2 for Input 2 measurement output

5
 3 OUT1 for Math value output
OUT2 for Input 2 measurement value output
4 OUT1 for Input 1 measurement value output
OUT2 for Math value output

16. Pn: Input Signal Table 16

Setting Value Signal Type

20 0-20mV
21 0-40mV
22 0-100mV
23 -20mV-20mV
24 -100mV-100mV
25 0-20mA
26 0-10mA
27 4-20mA
28 0-5V
29 1-5V
30 -5-5V
31 0-10V
36 -10V-10V
37 0-75mV
42 -40mV-40mV
46 -75mV-75mV
20 0-20mV

17. brK : Disconnection output setting Table 17

Setting Value Description
0 Keep
1 Maximum
2 Minimum