To read the current security level (register 0x02DC) Query: 01 03 02 DB 00 01 F5 89
Breakdown: node: 01
function code: 03 starting address hi: 02
starting address lo: DB (offset by 1) no. of registers hi: 00
no. of registers lo: 01
CRC hi: F5 CRC lo: 89 Response: 01 03 02 00 02 39 85 Breakdown: node: 01 function code: 03 byte count: 02 Data hi: 00 data lo: 02 CRC hi: 39 CRC lo: 85
The data must then be interpreted. From the table (page 22) we can get the scale, range and offset and subsequently interpret the transmitted value. Scale : 1/bit
Range : 0-3 Offset : 0
1. convert the received data from hex into decimal: 02 (hex) = 400 (decimal) 2. multiply the value by the scale 2 x 1 = 2
3. add the offset, which in this case is 0: 2 + 0 = 2 4. now check that the value falls within the acceptable range: 0 <= 2 <= 3 As such the control panel is at security level 2
To read the level 3 phone in prompt (0x02DE) Query: 01 03 02 DD 00 08 D5 8E
Breakdown: node: 01
function code: 03 starting address hi: 02
starting address lo: DD (offset by 1) no. of registers hi: 00
no. of registers lo: 08
CRC hi: D5
Response: 01 03 10 31 30 35 31 37 36 37 34 38 31 39 35 30 37 39 32 72 3D
Breakdown: node: 01
function code: 03 byte count: 10
data hi: 31 ASCII CHARACTER 1 data lo: 30 ASCII CHARACTER 0 data hi: 35 ASCII CHARACTER 5 data lo: 31 ASCII CHARACTER 1 data hi: 37 ASCII CHARACTER 7 data lo: 36 ASCII CHARACTER 6 data hi: 37 ASCII CHARACTER 7 data lo: 34 ASCII CHARACTER 4 data hi: 38 ASCII CHARACTER 8 data lo: 31 ASCII CHARACTER 1 data hi: 39 ASCII CHARACTER 9 data lo: 35 ASCII CHARACTER 5 data hi: 30 ASCII CHARACTER 0 data lo: 37 ASCII CHARACTER 7 data hi: 39 ASCII CHARACTER 9 data lo: 32 ASCII CHARACTER 2
CRC hi: 72
CRC lo: 3D
Write access password (0x02BC)
This register is used to enter a level 1 or level 2 or level 3 password. Passwords can be 16 characters long. the control panel automatically matches the password to the appropriate security level. This does mean that level 1 and level 2 passwords must be different.
The below example shows how to write a level 1 or level 2 security password of 0123 4567 8901 2345. Query: 01 10 02 BB 00 08 10 30 31 32 33 34 35 36 37 38 39 30 31 32 33 34 35 61 C9
Breakdown: node: 01
function code: 10 starting address hi: 02
starting address lo: BB (offset by 1) no. registers hi: 00
no. registers lo: 08 byte count: 10
preset data hi: 30 ASCII CHARACTER 0 preset data lo: 31 ASCII CHARACTER 1 preset data hi: 32 ASCII CHARACTER 2 preset data lo: 33 ASCII CHARACTER 3 preset data hi: 34 ASCII CHARACTER 4 preset data lo: 35 ASCII CHARACTER 5 preset data hi: 36 ASCII CHARACTER 6 preset data lo: 37 ASCII CHARACTER 7 preset data hi: 38 ASCII CHARACTER 8 preset data lo: 39 ASCII CHARACTER 9 preset data hi: 30 ASCII CHARACTER 0 preset data lo: 31 ASCII CHARACTER 1 preset data hi: 32 ASCII CHARACTER 2 preset data lo: 33 ASCII CHARACTER 3 preset data hi: 34 ASCII CHARACTER 4 preset data lo: 35 ASCII CHARACTER 5
CRC hi: 61
Response: 01 10 02 BB 00 08 B0 52
Breakdown: node: 01
function code: 10 starting address hi: 02
starting address lo: BB (offset by 1) no. registers hi: 00
no. registers lo: 08
CRC hi: B0
CRC lo: 52
To change level the 1 access password (0x02C4)
Passwords can be 16 characters long. Note you must be at level 1 or higher security in order to change this password. The below example shows how to change a level 1 security password to 0000 1111 0000 1111
Query: 01 10 02 C3 00 08 10 30 30 30 30 31 31 31 31 30 30 30 30 31 31 31 31 89 8D
Breakdown: node: 01
function code: 10 starting address hi: 02
starting address lo: C3 (offset by 1) no. registers hi: 00
no. registers lo: 08 byte count: 10
preset data hi: 30 ASCII CHARACTER 0 preset data lo: 30 ASCII CHARACTER 0 preset data hi: 30 ASCII CHARACTER 0 preset data lo: 30 ASCII CHARACTER 0 preset data hi: 31 ASCII CHARACTER 1 preset data hi: 31 ASCII CHARACTER 1 preset data hi: 31 ASCII CHARACTER 1 preset data hi: 31 ASCII CHARACTER 1 preset data hi: 30 ASCII CHARACTER 0 preset data lo: 30 ASCII CHARACTER 0 preset data hi: 30 ASCII CHARACTER 0 preset data lo: 30 ASCII CHARACTER 0 preset data hi: 31 ASCII CHARACTER 1 preset data hi: 31 ASCII CHARACTER 1 preset data hi: 31 ASCII CHARACTER 1 preset data hi: 31 ASCII CHARACTER 1
CRC hi: 89
Response: 01 10 02 C3 00 08 30 4B
Breakdown: node: 01
function code: 10 starting address hi: 02
starting address lo: C3 (offset by 1) no. registers hi: 00
no. registers lo: 08
CRC hi: 30
CRC lo: 4B
To change level 2 access password (0x02CC)
Passwords can be 16 characters long. Note you must be at level 2 or higher security in order to change this password. The below example shows how to change a level 2 security password to 0000 2222 0000 2222
Query: 01 10 02 CB 00 08 10 30 30 30 30 32 32 32 32 30 30 30 30 32 32 32 32 37 CE
Breakdown: node: 01
function code: 10 starting address hi: 02
starting address lo: CB (offset by 1) no. registers hi: 00
no. registers lo: 08 byte count: 10
preset data hi: 30 ASCII CHARACTER 0 preset data lo: 30 ASCII CHARACTER 0 preset data hi: 30 ASCII CHARACTER 0 preset data lo: 30 ASCII CHARACTER 0 preset data hi: 32 ASCII CHARACTER 2 preset data hi: 32 ASCII CHARACTER 2 preset data hi: 32 ASCII CHARACTER 2 preset data hi: 32 ASCII CHARACTER 2 preset data hi: 30 ASCII CHARACTER 0 preset data lo: 30 ASCII CHARACTER 0 preset data hi: 30 ASCII CHARACTER 0 preset data lo: 30 ASCII CHARACTER 0 preset data hi: 32 ASCII CHARACTER 2 preset data hi: 32 ASCII CHARACTER 2 preset data hi: 32 ASCII CHARACTER 2 preset data hi: 32 ASCII CHARACTER 2
CRC hi: 37
Response: 01 10 02 CB 00 08 B1 89
Breakdown: node: 01
function code: 10 starting address hi: 02
starting address lo: CB (offset by 1) no. registers hi: 00
no. registers lo: 08
CRC hi: B1
CRC lo: 89
Write SCADA password (0x02BC)
This register is used to enter a the SCADA password. The SCADA password can be 8 characters long and is padded with 8 space characters. The below example shows how to write a SCADA password of 0000 1234.
Query: 01 10 02 BB 00 08 10 30 30 30 30 31 32 33 34 20 20 20 20 20 20 20 20 F8 DA
Breakdown: node: 01
function code: 10 starting address hi: 02
starting address lo: BB (offset by 1) no. registers hi: 00
no. registers lo: 08 byte count: 10
preset data hi: 30 ASCII CHARACTER 0 preset data lo: 30 ASCII CHARACTER 0 preset data hi: 30 ASCII CHARACTER 0 preset data hi: 30 ASCII CHARACTER 0 preset data lo: 31 ASCII CHARACTER 1 preset data hi: 32 ASCII CHARACTER 2 preset data lo: 33 ASCII CHARACTER 3 preset data hi: 34 ASCII CHARACTER 4 preset data hi: 20 ASCII CHARACTER 'space' preset data lo: 20 ASCII CHARACTER 'space' preset data hi: 20 ASCII CHARACTER 'space' preset data lo: 20 ASCII CHARACTER 'space' preset data hi: 20 ASCII CHARACTER 'space' preset data lo: 20 ASCII CHARACTER 'space' preset data hi: 20 ASCII CHARACTER 'space' preset data lo: 20 ASCII CHARACTER 'space'
CRC hi: F8
Response: 01 10 02 BB 00 08 B0 52
Breakdown: node: 01
function code: 10 starting address hi: 02
starting address lo: BB (offset by 1) no. registers hi: 00
no. registers lo: 08
CRC hi: B0
CRC lo: 52
To write the current security level (0x02DD)
From the table (page 22) we can see that to stop the set we need to write a value of 0 to drop to minimum security level, note that if no level 1 or level 2 passwords have been setup the minimum security level will be 2.
Query: 01 06 02 DC 00 00 49 88
Breakdown: node: 01
function code: 06 starting address hi: 02 starting address lo: DC preset data hi: 00 preset data lo: 00
CRC hi: 49
CRC lo: 88
Response: 01 06 02 DC 00 00 49 88
Breakdown: node: 01
function code: 06 starting address hi: 02 starting address lo: DC preset data hi: 00 preset data lo: 00
CRC hi: 49
CRC lo: 88