Modbus register maps for meters, drives and inverters

Vendors

• ABB4 maps
• Autonics1 map
• Carlo Gavazzi3 maps
• Chint1 map
• Danfoss2 maps
• Deep Sea Electronics1 map
• DEIF1 map
• Delta Electronics3 maps
• Eastron4 maps
• Emerson2 maps
• Endress+Hauser2 maps
• Eurotherm1 map
• Fronius2 maps
• GoodWe1 map
• Growatt1 map
• Huawei1 map
• INVT1 map
• Janitza1 map
• JK BMS1 map
• KOSTAL1 map
• KROHNE1 map
• Lovato Electric1 map
• Mitsubishi Electric1 map
• Omron1 map
• Raritan1 map
• Schneider Electric10 maps
• Selec1 map
• Siemens4 maps
• SMA2 maps
• SmartGen1 map
• Socomec1 map
• SolarEdge1 map
• SolaX Power1 map
• Solis (Ginlong)1 map
• Sungrow1 map
• Victron Energy1 map
• WEG1 map
• Yaskawa2 maps

Energy meters

• ABB B23 / B24 70 registers Three-phase DIN-rail energy meters from ABB's B series, available in direct-connected and transformer-connected versions. The B23 and B24 manual covers active, reactive and apparent energy counters, tariffs, instantaneous electrical values and meter settings over Modbus RTU on an RS485 interface.
• Carlo Gavazzi EM210 (PFA and PFB models) 50 registers Three phase DIN rail energy meter with an RS485 Modbus RTU port. The map covers phase and system voltage, current, power, power factor, frequency, import and export energy and the serial and transformer settings.
• Carlo Gavazzi EM24 DIN (PFA, PFB and X models) 78 registers Three phase DIN rail energy analyzer with an RS485 Modbus RTU port. The map covers phase and system voltage, current, power, power factor, frequency, four-tariff energy counters, digital input counters, demand values and setup.
• Carlo Gavazzi EM340 65 registers Three phase DIN rail energy meter from the EM300 family with an optional RS485 Modbus RTU port. The map covers phase and system voltage, current, power, power factor, frequency, import and export energy, tariffs and meter setup.
• Chint DTSU666 43 registers DIN rail three phase smart meter with an RS485 Modbus RTU port, described in the manual for internal energy monitoring in industrial sites, hotels, schools and large public buildings. It reports line and phase voltage, current, active and reactive power, power factor, frequency and forward and reverse active energy. The user manual covers the DTSU666.001 three phase four wire meter and the DSSU666.001 three phase three wire meter. The map lists the regular address table only; Note 2 of the manual says the primary data address and other addresses are in a detailed communication protocol that the manual does not include.
• Eastron SDM120-Modbus 32 registers Single phase DIN rail energy meter with an RS485 Modbus RTU port. It reports voltage, current, power, power factor, frequency, import and export energy and power demand.
• Eastron SDM230-Modbus 33 registers Single phase two-module DIN rail energy meter with an RS485 Modbus RTU port. It reports voltage, current, active, apparent and reactive power, power factor, frequency, import and export energy and demand values.
• Eastron SDM630-Modbus V2 81 registers DIN rail three phase energy meter for 3P4W, 3P3W and 1P2W systems with an RS485 Modbus RTU port. It reports voltage, current, power, power factor, frequency, harmonic distortion and import and export energy counters.
• Eastron SDM72D-M 56 registers DIN rail three phase four wire energy meter with an RS485 Modbus RTU port, pulse output and resettable energy counters. This map follows the SDM72D-M-2 Modbus protocol section, which lists voltage, current, power, power factor, frequency, import, export and resettable energy as 32-bit floats. The older SDM72D-M and SDM72D-M-1 manuals list only a subset of these registers.
• Fronius Smart Meter SunSpec (float) 47 registers Modbus map for an energy meter (for example a Fronius Smart Meter) connected to a Fronius Datamanager over Modbus RTU and read over Modbus TCP as SunSpec meter model 211/212/213 (float setting). It lists the common block, AC currents, voltages, power, frequency, power factor and total energy counters. Registers marked not supported in the vendor table are omitted.
• Schneider Electric iEM3155 75 registers DIN-rail energy meter for direct connection up to 63 A, with four-quadrant energy, current, voltage, power and frequency measurement. It supports up to four tariffs, has one programmable digital input and one programmable digital output, an overload alarm and an RS-485 Modbus RTU port.
• Schneider Electric iEM3255 82 registers DIN-rail energy meter that measures through 1 A or 5 A current transformers and can also be connected through voltage transformers. It reports four-quadrant energy, current, voltage, power and frequency, supports up to four tariffs, has one programmable digital input and one programmable digital output, an overload alarm and an RS-485 Modbus RTU port.
• Schneider Electric iEM3355 75 registers DIN-rail energy meter for direct connection up to 125 A, with four-quadrant energy, current, voltage, power and frequency measurement. It supports up to four tariffs, has one programmable digital input and one programmable digital output, an overload alarm and an RS-485 Modbus RTU port.
• Selec MFM384 107 registers Panel mounted three phase multifunction meter for 3 phase 4 wire, 3 phase 3 wire, 2 phase 3 wire and 1 phase 2 wire systems. The communication model (MFM384-C) has an RS485 Modbus RTU port. Its register list covers voltage, current, power, power factor, frequency, energy, maximum and minimum demand, harmonic distortion, and the configuration and reset parameters. The register list has no unit column and the manual states no scaling: power and energy units follow the parameter names printed there (kW, kVA, kVAr, kWh, kVAh, kVArh), and volts, amps and hertz are the units shown on the display.

Power meters

• ABB M1M 20 / M1M 30 75 registers Panel-mounted multifunction power meters from ABB's M1M range. The Modbus manual covers energy counters, real-time electrical values, harmonic distortion, digital I/O, device information and communication settings. The M1M 20 and M1M 30 come in RS-485 and Ethernet versions.
• Lovato Electric DMG210 79 registers Three-phase digital multimeter. Lovato's DMG Modbus protocol document says the DMG110 and DMG210 support Modbus RTU and Modbus ASCII on the RS-485 port, and its tables mark each address for the DMG110/DMG210 column together; this map keeps the addresses marked for the DMG210 and does not include the DMG300 to DMG900 or DMG6xx-only rows, the min/max/average/demand blocks or the harmonics tables.
• Schneider Electric EasyLogic PM1200 88 registers Three-phase digital power meter, the Modbus RTU model of the EasyLogic PM1000 series (the PM1000 has no communications). It reports current, voltage, power, power factor, frequency, THD, demand, energy integrators, run and on hours and power interruption counts, and its setup values can be read and written over RS-485.
• Schneider Electric PM3255 88 registers DIN-rail power and energy meter that measures through 1 A or 5 A current transformers and can also be connected through voltage transformers. It reports current, voltage, power, power factor, frequency, harmonic distortion, demand and four-quadrant energy, and adds two digital inputs, two digital outputs and an RS-485 Modbus RTU port.
• Schneider Electric PM5100 series 201 registers Panel mount power and energy meter family with one digital output. Per the user manual only the PM5110 and PM5111 have a serial Modbus port (the PM5100 shows none), and the register list column used here is the PM5110_11 column. It covers current, voltage, power, power factor, frequency, THD, demand, min and max values, accumulated energy and alarm status.
• Schneider Electric PM5560 82 registers Front panel mounted power and energy meter in a 96 x 96 mm case, with four digital inputs, two digital outputs, dual Ethernet ports and a serial port. It reports current, voltage, power, power factor, frequency, harmonic distortion, demand and energy, and works as a Modbus TCP to Modbus RTU gateway.
• Siemens SENTRON PAC2200 185 registers Compact three-phase power monitoring device for low-voltage networks. It reports voltages, currents, power, power factor, frequency, two-tariff energy counters per phase and in total, and has diagnostics, settings and I&M identification data. Depending on the version it has an Ethernet port (Modbus TCP), an RS485 port (Modbus RTU) or M-BUS.
• Siemens SENTRON PAC3200 86 registers Panel-mounted three-phase power monitoring device for low-voltage networks. It measures voltages, currents, power, power factor, frequency, harmonic distortion and tariff-based energy counters, and has a built-in Ethernet port.
• Socomec DIRIS A-40 71 registers Panel mounted multifunction power meter for single and three phase networks with RS485 Modbus RTU. The map covers network voltages, load currents, power and power factor, import and export energy, tariffs and logical inputs and outputs.

Variable frequency drives

• ABB ACS355 43 registers Compact ABB machinery drive for 0.37 to 22 kW motors. The embedded fieldbus interface speaks Modbus RTU and maps the control word, status word, two references, selectable actual values and every drive parameter to 4xxxx holding registers.
• ABB ACS580 66 registers General-purpose AC drive from ABB with a standard control program. The embedded fieldbus interface speaks Modbus RTU over EIA-485 and gives access to control and status words, two references, two actual values, and every drive parameter through a mapped register range.
• Danfoss VLT AutomationDrive FC 302 119 registers Frequency converter with a built-in RS-485 port that can run Modbus RTU. The Design Guide for FC 301 and FC 302 describes control word, bus reference, status word and main actual value registers, FC profile coils, and access to every drive parameter at ten times its number. This map lists the fixed area plus a representative set of monitor, motor, ramp, limit, communication and identity parameters; the full parameter list is in the Programming Guide.
• Danfoss VLT Micro Drive FC 51 91 registers Compact AC drive with a built-in RS-485 port that can run Modbus RTU. Drive parameters are mapped to holding registers at ten times the parameter number, and the control and status words are available both as holding registers and as coils.
• Delta Electronics VFD-C2000 56 registers Vector control AC motor drive with a built-in RS-485 Modbus port for ASCII and RTU. The communication address list gives a control command word, a frequency command, fault, status and live monitor registers, and every drive parameter at an address built from its group and number. This file lists the fixed command and status area plus a selection of key parameters; the full parameter list is in the manual.
• Delta Electronics VFD-E 31 registers General purpose AC motor drive with a built-in RS-485 serial port (RJ-45) for Modbus ASCII and RTU. The address list gives a command word, a frequency command, an error code, status and live monitor values, and every drive parameter at an address built from its group and number. This file lists the fixed command and status area plus the main communication and basic parameters; the full parameter list is in the manual.
• Delta Electronics VFD-MS300 58 registers Compact AC motor drive with a built-in RS-485 Modbus port for ASCII and RTU. The communication address list gives a command word, a frequency command, live status and monitor values, and every drive parameter at an address built from its group and number.
• INVT Goodrive20 GD20 122 registers General purpose variable frequency drive. The map covers the communication control and setting addresses, the state word and fault code, the live monitoring addresses, the P17 status viewing group, the present and past fault types, and the key P00, P02, P07 and P14 function codes. Function code addresses follow the group and index rule in section 7.4.1; the full function code list is in the manual.
• Mitsubishi Electric FR-D700 45 registers Small general-purpose inverter series with an RS-485 port on the PU connector that can run Modbus RTU as a slave. The Modbus map covers run and speed commands, live monitor values, the fault history and every inverter parameter.
• Schneider Electric Altivar 12 ATV12 101 registers Variable speed drive for asynchronous motors. The map covers the control and status words, speed and frequency references, output frequency, current, power and thermal states, fault code and fault history, identification, the Modbus line parameters and the communication scanner, and key motor, ramp, speed and PID settings. The full parameter list is in the communication parameters file.
• Schneider Electric Altivar Machine ATV320 90 registers Variable speed drive for asynchronous and synchronous motors. The map covers the drive control and status words, speed and frequency references, motor measurements, fault code and fault history, identification, the Modbus line parameters and a set of key motor, ramp and speed settings. The full parameter list is in the communication parameters file.
• Schneider Electric ATV312 49 registers Variable speed drive for asynchronous motors. The communication variables listed here cover the control and status words, frequency and speed references, motor measurements, fault codes, ramp and motor settings, and the Modbus line parameters.
• Siemens SINAMICS G120 63 registers Modular low-voltage AC converter family from Siemens. Control units with an RS485 port (such as the CU240B-2 and CU240E-2) can act as a Modbus RTU slave and expose process data, converter data, diagnostics and the technology controller through fixed holding registers.
• Siemens SINAMICS V20 116 registers Compact low-voltage inverter with a built-in RS485 port that can run as a Modbus RTU slave. The manual gives a fixed register table (40001 to 40559) for control, status, setpoints, ramp times, PID settings, fault codes and measured values, each linked to an inverter parameter.
• WEG CFW500 42 registers Compact AC drive with a built-in RS-485 Modbus RTU slave port. Every drive parameter is exposed as a 16-bit holding register, so monitoring values, setpoints, the control word and the speed reference are all read and written the same way.
• Yaskawa GA500 68 registers Compact AC micro drive with a built-in RS-485 MEMOBUS/Modbus RTU slave port. The map covers the run and frequency command registers, live monitor and fault bit words, and parameter registers including the communication settings.
• Yaskawa V1000 93 registers Compact vector control AC drive with a built-in RS-422/RS-485 MEMOBUS/Modbus RTU slave port. The data table covers the run and frequency command registers, drive status, fault and alarm bit words, live monitors, fault codes and the Enter command, and the parameter registers listed here include the communication settings (H5). This file lists the data table plus selected parameters; the full parameter list is in the manual.

Solar inverters

• Fronius Datamanager SunSpec inverter (float) 161 registers Modbus map of a Fronius inverter read through the Fronius Datamanager over Modbus TCP or Modbus RTU. It holds the SunSpec common block, inverter model 111/112/113 (float setting), nameplate, basic settings, extended measurements, immediate controls, multiple MPPT and basic storage control models, plus the Fronius specific registers and site totals. Fronius meters on the same Datamanager use a separate map. The tables are the float setting; the integer with scale factor setting uses models 101 to 103 and different addresses.
• GoodWe Hybrid Inverter (EMS protocol) 85 registers GoodWe hybrid inverters expose a Modbus map for third-party energy management systems. Read-only registers give PV, grid, battery, meter and BMS values; writable registers set the battery power mode, export limit and battery protection limits.
• Growatt Inverter RTU Protocol II 303 registers Growatt inverter Modbus RTU map from the document Growatt Inverter Modbus RTU Protocol V1.24. It lists holding registers (settings, protection limits, identity) and input registers (PV, grid, energy, fault and storage data). Page 3 of the document says which register ranges each inverter family uses (TL-X/TL-XH MIN, TL3-X MAX/MID/MAC, storage MIX/SPA/SPH); this file covers the common first group, the 3000 block for TL-X and TL-XH, and the main storage block, and many rows are marked for particular models. The same register number can mean different things on different families, so check the family ranges first.
• Huawei SUN2000 66 registers The Huawei SUN2000 family of string solar inverters share one Modbus interface definition. It gives read access to PV string, grid and energy values, plus status and alarm words, and write access to grid scheduling and start or stop commands.
• KOSTAL PIKO IQ / PLENTICORE plus 171 registers KOSTAL Modbus TCP interface of PIKO IQ and PLENTICORE inverters, covering the native register table with live AC, DC, battery and power meter values, yields, setpoints for active and reactive power, external battery management, battery limitation and plant (Multi Device Control) registers. The document also describes a SunSpec interface (models 1, 103, 113, 120, 123, 160, 203, 802); its model contents are not tabulated there, so no SunSpec rows are included. Availability of individual registers depends on the model and software version, see the notes.
• SMA Sunny Tripower 60 49 registers The SMA Sunny Tripower 60 is a three-phase commercial PV inverter. Through the Inverter Manager gateway it exposes a SunSpec inverter model 103 map over Modbus TCP with AC and DC measurements, energy yield, temperatures and vendor status and event words.
• SolarEdge SunSpec Inverter 45 registers SolarEdge inverters can expose their monitoring data to a non-SolarEdge logger through a read-only SunSpec map over Modbus RTU or Modbus TCP. The map covers AC and DC measurements, energy, temperature and operating state.
• SolaX Power X1 and X3 energy storage inverters 198 registers One Modbus register map from SolaX for its single-phase (X1) and three-phase (X3) energy storage inverters. The document lists the inverters that share the map by name and inverter ID. It covers firmware and serial data, status and fault words, PV, grid, meter, battery and energy history values, and the common operating settings. The inverter reports its own type code, and some registers apply only to X1 or only to X3. This file is a selection of the document, not every register: battery serial numbers, time of use and charge period tables, generator, VPP, parallel and other settings are left out.
• Solis (Ginlong) Grid-connected PV inverters (RS485 protocol) 148 registers The Solis RS485_MODBUS protocol for its grid-connected PV inverters in all power ranges, for machines manufactured after mid-2023. It gives read access to energy counters, DC and MPPT inputs, phase values, status and fault bit fields, and read and write access to the clock, the on or off command and the active power, reactive power and power factor controls. Solis publishes its hybrid inverter Modbus table as a separate document, which this file does not cover.
• Sungrow SG CX/RT/RS String Inverters 80 registers Sungrow residential and commercial string inverters share one Modbus register definition. Read-only running data such as MPPT inputs, AC output, energy and working state sits in input registers; settings such as start or stop, power limits and reactive power control sit in holding registers.

Flow meters

• Emerson Micro Motion Series 1000/2000 59 registers Coriolis mass flow transmitters in the Micro Motion MVD family, including the Series 1000 and 2000 transmitters and the core processor, report mass flow, volume flow, density, temperature, totals and diagnostics over Modbus. This map is the manufacturer's list of mapped coils, discrete inputs, float pairs, integer registers and text registers.
• Emerson Rosemount 8732EM 310 registers Rosemount 8732EM magnetic flowmeter transmitter with Modbus communication. Table C-1 and Table C-2 of the reference manual list its registers and coils: status words, flow rate, three totalizers, diagnostic values, Smart Meter Verification results, configuration settings, device identification, variable slots and the Modbus communication parameters.
• Endress+Hauser Proline Promag 400 Modbus RS485 72 registers Electromagnetic flowmeter transmitter from the Proline Promag 400 family with a Modbus RS485 interface. Registers cover volume and mass flow, conductivity, three totalizers, unit selections, diagnostics, device information and the Modbus communication settings.
• Endress+Hauser Proline Promass 100 227 registers Coriolis flowmeter transmitter from the Proline Promass 100 family with a Modbus RS485 interface. Registers cover mass, volume and corrected volume flow, density, temperature, viscosity and concentration values, three totalizers, unit selections, process and measurement settings, diagnostics, device information and the Modbus communication settings.
• KROHNE IFC 300 81 registers IFC 300 signal converter for electromagnetic flowmeters, sold with OPTIFLUX and WATERFLUX flow sensors, fitted with the RS485 Modbus interface card. Registers cover flow speed, volume and mass flow, conductivity, three counters, converter and calibration commands, process input filter and diagnosis settings, and the Modbus communication parameters.

Rack PDUs

• Raritan PX3 63 registers Intelligent rack PDU family with per-inlet, per-outlet and per-breaker metering, switched outlets and peripheral sensor ports. The PX2 and PX3 families expose these readings and outlet controls through a Modbus/TCP server.

Analyzers

• Janitza UMG 96RM-E 87 registers Panel mounted power analyzer for low-voltage networks with RS485 Modbus RTU. It reports voltages, currents, power, energy by phase, power factor, harmonic distortion, temperature inputs and I/O status.

Temperature controllers

• Autonics TK Series 85 registers Panel-mount PID temperature controllers with heating and cooling outputs and an optional RS-485 port. The communication manual lists the coil, discrete input, input register and holding register map for the TK series over Modbus RTU.
• Eurotherm 3216 76 registers Compact PID temperature controller in the Eurotherm 3200 series with thermocouple, RTD and millivolt inputs, up to four alarms and an optional EIA232 or EIA485 Modbus RTU port. The user manual lists each parameter with its decimal Modbus address and shares the map across the 3216, 3208, 32h8 and 3204.
• Omron E5CC 67 registers Panel-mount digital temperature controller from the E5@C family with thermocouple, RTD and analog inputs, PID control and several alarm outputs. This map covers the Modbus RTU variable area, including process value, set points, alarms, status words and communications settings.

Batteries and battery management systems

• JK BMS RS485 general protocol V1.1 125 registers Modbus RTU over RS485 protocol of JK BMS (JIKONG, Chengdu Jikong Technology) battery management systems. The document is a general protocol and does not list product models; the vendor's download page names V1.0 for firmware V11.36. It defines four register blocks: settings at 0x1000, live data at 0x1200, device information at 0x1400 and write only commands at 0x1600. Per-cell values, protection thresholds, alarms, SOC and capacity are listed. The document also lists the per-cell connection and balance wire resistance registers, the protocol selection registers and the voltage and current calibration commands, but this file leaves them out.
• SMA Sunny Island 4.4M / 6.0H / 8.0H 216 registers The SMA Sunny Island 4.4M, 6.0H and 8.0H are battery inverters. Their SMA Modbus profile exposes battery state of charge, voltage, current and temperature, grid, load and generator status, power and energy counters, and writable battery, generator, grid and external active power setpoint parameters.

Generator controllers

• Deep Sea Electronics DSE7320 MKII 140 registers The DSE7320 MKII is an automatic mains (utility) failure control module with RS232 and RS485 Modbus RTU ports. DSE's operator manual says the module register table is available on request, so this map uses DSE's GenComm register standard (document SP-228, titled DSE7310 GENCOMM), which defines the registers by page. It covers communications status, generating set status, basic, extended and derived instrumentation, accumulated counters, system control keys, identity strings and the named alarm conditions. The document is shared by many DSE families and does not list per model which registers the DSE7320 MKII implements, so unimplemented registers return the sentinel values described in the document. The document never names the DSE7320 MKII: the rows are chosen from its allocations headed 72xx/73xx and 72xx/73xx/61xx/74xx MKII (page 154), the generic 8xxx/7xxx/6xxx allocation (pages 6 and 7) and the all-product tables, and applying them to the 7320 MKII is an inference from those family headings. Register values for read-only flags on registers 256, 259 and 264 follow the document's note for 72xx/73xx modules. Identity strings are listed as read only, but the document says they may be read/write or read only depending on the product.
• DEIF AGC 150 179 registers The DEIF AGC 150 is an advanced genset controller with a Modbus server. This map covers the GEN (genset) column of DEIF's AGC 150 Modbus server tables: generator voltage, current, power and energy, running hours and counters, engine communication values, alarm and mode bit words, control command words, remote command coils and status flags. The tables also cover BTB, mains, GEN-H, ENG and ATS controller types, and thousands of further addresses (power management, alarm strings, parameters by offset) that are not listed here.
• SmartGen HGM9520N 312 registers The SmartGen HGM9520N is a genset paralleled (with mains) controller. SmartGen publishes one communication protocol document for the HGM9510N, HGM9520N and HGM9530N, and this map follows it: status and alarm bit words, seven alarm class fields, generator, mains and busbar voltage, current, power and frequency, engine and ECU values, running hours, energy counters, controller clock, DM1 and DM2 diagnostic codes, and remote command coils. Rows where the document distinguishes the HGM9520N from the other two models are marked in their notes.

Other devices

• Victron Energy GX devices (Venus OS) 222 registers Modbus TCP server built into Victron GX devices. It exposes system totals and each connected Victron product under its own unit ID: Multi and Quattro inverter/chargers on VE.Bus, battery monitors and managed batteries, solar chargers, grid meters, PV inverters, tank sensors and the ESS control settings. This file lists 222 selected registers from Victron's register workbook (revision 55); other services in the workbook, such as generator sets, EV chargers, DC/DC converters, alternators, heat pumps, temperature sensors and Multi RS, are not listed here.

Modbus Poll simulator templates

The slave simulator in Modbus Poll ships with test layouts for a few common devices. They are not the manufacturers' own maps and each page says so.

• Simulator templateABB AZL4027 registers
• Simulator templateEmerson Daniel 100011 registers
• Simulator templateEndress+Hauser Promag 10W DN507 registers
• Simulator templateRaritan PX3-5902V12 registers
• Simulator templateSchneider Electric PM556016 registers
• Simulator templateSMA STP 60-US-1020 registers