Grundfosliterature 6012947

GRUNDFOS INSTRUCTIONS
Modbus for Grundfos pumps

CIM/CIU 200 Modbus RTU
CIM/CIU 260 3G/4G cellular
CIM/CIU 500 Ethernet for Modbus TCP
Functional profile and user manual

Modbus for Grundfos pumps
Table of contents
English (GB)
Functional profile and user manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Appendix A . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
3
English (GB) Functional profile and user manual
English (GB)
Original functional profile and user manual 13. Modbus RTU telegram examples . . . . . . . . . . . . . . . 37
Table of contents 13.1 Modbus telegram overview. . . . . . . . . . . . . . . . . . . . 37
13.2 Read holding registers, 0x03. . . . . . . . . . . . . . . . . . . 37
1. General information . . . . . . . . . . . . . . . . . . . . . . . . 4 13.3 Read input registers, 0x04 . . . . . . . . . . . . . . . . . . . . 38
1.1 Hazard statements . . . . . . . . . . . . . . . . . . . . . . . . . . 4 13.4 Write single register, 0x06 . . . . . . . . . . . . . . . . . . . . 38
1.2 Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 13.5 Write multiple registers, 0x10 . . . . . . . . . . . . . . . . . . 38
2. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5 13.6 Diagnostics, 0x08 . . . . . . . . . . . . . . . . . . . . . . . . . 39
2.1 About this functional profile. . . . . . . . . . . . . . . . . . . . .5 13.7 Diagnostics register interpretation . . . . . . . . . . . . . . . 39
2.2 Assumptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5 13.8 Diagnostics: return query data . . . . . . . . . . . . . . . . . . 39
2.3 Definitions and abbreviations . . . . . . . . . . . . . . . . . . .5 13.9 Reading the CIM configuration register block . . . . . . . . . 40
13.10 Setting the setpoint . . . . . . . . . . . . . . . . . . . . . . . . 40
3. System description . . . . . . . . . . . . . . . . . . . . . . . .6
13.11 Setting the control mode . . . . . . . . . . . . . . . . . . . . . 40
3.1 Modbus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6
13.12 Starting the E-pump . . . . . . . . . . . . . . . . . . . . . . . . 41
3.2 CIM 200 Modbus RTU . . . . . . . . . . . . . . . . . . . . . . .6
13.13 Stopping the E-pump . . . . . . . . . . . . . . . . . . . . . . . 41
3.3 CIM 260 3G/4G cellular Modbus . . . . . . . . . . . . . . . . .6
3.4 CIM 500 Modbus TCP. . . . . . . . . . . . . . . . . . . . . . . .6 14. Fault finding the product . . . . . . . . . . . . . . . . . . . . 42
14.1 CIM 200 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
4. Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
14.2 CIM/CIU 260 . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
4.1 CIM module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
14.3 CIM 500 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46
4.2 CIM 200 Modbus RTU . . . . . . . . . . . . . . . . . . . . . . .7
4.3 CIM 260 3G/4G cellular . . . . . . . . . . . . . . . . . . . . . . .8 15. Modbus RTU rotary switch addresses . . . . . . . . . . . 48
4.4 CIM 500 Modbus TCP. . . . . . . . . . . . . . . . . . . . . . . .8 16. Disposing of the product . . . . . . . . . . . . . . . . . . . . 49
5. CIM 200 Modbus RTU setup . . . . . . . . . . . . . . . . . . .9 17. Grundfos alarm and warning codes . . . . . . . . . . . . . 50
5.1 Setting the Modbus transmission speed . . . . . . . . . . . . .9
5.2 Setting the stop bits and the parity bit . . . . . . . . . . . . . 10
1. General information
5.3 Modbus address selection . . . . . . . . . . . . . . . . . . . . 10
5.4 Termination resistor . . . . . . . . . . . . . . . . . . . . . . . . 10 Read this document before you install the product.
5.5 Status LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Installation and operation must comply with local
regulations and accepted codes of good practice.
6. CIM 260 3G/4G cellular Modbus setup . . . . . . . . . . . 11
6.1 Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
6.2 Status LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
1.1 Hazard statements
The symbols and hazard statements below may appear in Grundfos
7. CIM 500 Modbus TCP setup . . . . . . . . . . . . . . . . . . 13 installation and operating instructions, safety instructions and
7.1 Connecting the Ethernet cable. . . . . . . . . . . . . . . . . . 13 service instructions.
7.2 Setting the Industrial Ethernet protocol . . . . . . . . . . . . 14
DANGER
7.3 Setting the IP addresses . . . . . . . . . . . . . . . . . . . . . 14
Indicates a hazardous situation which, if not avoided, will
7.4 Establish a connection to the webserver. . . . . . . . . . . . 14
result in death or serious personal injury.
7.5 Status LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
7.6 DATA and LINK LEDs . . . . . . . . . . . . . . . . . . . . . . . 15 WARNING
8. Modbus function code overview . . . . . . . . . . . . . . . 15 Indicates a hazardous situation which, if not avoided,
could result in death or serious personal injury.
9. Modbus register addresses . . . . . . . . . . . . . . . . . . 16
9.1 Register block overview. . . . . . . . . . . . . . . . . . . . . . 16 CAUTION
9.2 CIM configuration register block . . . . . . . . . . . . . . . . . 16 Indicates a hazardous situation which, if not avoided,
9.3 CIM status register block . . . . . . . . . . . . . . . . . . . . . 18 could result in minor or moderate personal injury.
9.4 Cellular network Real Time Clock . . . . . . . . . . . . . . . . 19
The hazard statements are structured in the following way:
9.5 Pump control register block . . . . . . . . . . . . . . . . . . . 20
9.6 Pump status register block . . . . . . . . . . . . . . . . . . . . 22 SIGNAL WORD
9.7 Pump data register block . . . . . . . . . . . . . . . . . . . . . 25 Description of the hazard
9.8 Sensor-dependent measurements . . . . . . . . . . . . . . . 27 Consequence of ignoring the warning
9.9 Alarm simulation register block (not CUE). . . . . . . . . . . 28 • Action to avoid the hazard.
9.10 User register block . . . . . . . . . . . . . . . . . . . . . . . . . 28
10. Detailed descriptions of registers . . . . . . . . . . . . . . 29
10.1 Control mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
10.2 Setpoint in closed-loop control. . . . . . . . . . . . . . . . . . 30
10.3 Setpoint in open-loop control. . . . . . . . . . . . . . . . . . . 30
10.4 Alarms and warnings . . . . . . . . . . . . . . . . . . . . . . . 31
11. Modbus RTU commissioning, step-by-step guides . . . 32
11.1 Hardware setup, CIM 200 . . . . . . . . . . . . . . . . . . . . 32
11.2 Hardware setup, CIU 200. . . . . . . . . . . . . . . . . . . . . 32
11.3 Hardware setup, CIM 260 data connection . . . . . . . . . . 32
11.4 Hardware setup, CIU 260 data connection . . . . . . . . . . 33
11.5 CIM 500 Modbus TCP communication setup . . . . . . . . . 33
11.6 CIU 500 Modbus TCP communication setup . . . . . . . . . 34
12. Detailed descriptions of functionality . . . . . . . . . . . . 34
12.1 APN. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
4
1.2 Notes
English (GB)
Domain Name System. Used to resolve host names
DNS
to IP addresses.
The symbols and notes below may appear in Grundfos installation
and operating instructions, safety instructions and service GENIbus Proprietary Grundfos fieldbus standard.
instructions. GENIpro Proprietary Grundfos fieldbus protocol.
A Grundfos application designed to control Grundfos
Observe these instructions for explosion-proof products. Grundfos GO products via infrared or radio communication.
Available for iOS and Android devices.
H Head (pressure).
A blue or grey circle with a white graphical symbol Hyper Text Transfer Protocol. The protocol
HTTP
commonly used to navigate the world wide web.
indicates that an action must be taken.
IANA Internet Assigned Numbers Authority.
IP Internet Protocol.
A red or grey circle with a diagonal bar, possibly with a
black graphical symbol, indicates that an action must not LED Light-Emitting Diode
be taken or must be stopped. Media Access Control. Unique network address for a
MAC
piece of hardware.
If these instructions are not observed, it may result in A serial communications protocol commonly used in
Modbus
industry and building automation systems.
malfunction or damage to the equipment.
Modbus is a fieldbus used worldwide. The RTU
Modbus RTU
version is used for wired networks and CIM 200.
Modbus is a fieldbus used worldwide. The TCP
Tips and advice that make the work easier. version is adapted for use as an application protocol
Modbus TCP
on TCP/IP using either CIM 260 3G/4G cellular or
CIM 500 Ethernet as basis.
2. Introduction PIN Personal Identification Number. For SIM cards.

Packet InterNet Groper. A software utility that tests
Ping
2.1 About this functional profile the connectivity between two TCP/IP hosts.
This functional profile describes the following modules and units: PUK Personal Unblocking Key. For SIM cards.
• CIM/CIU 200 Modbus RTU Q Flow rate.
• CIM/CIU 260 Modbus 3G/4G cellular SELV Separated or Safety Extra-Low Voltage.
• CIM/CIU 500 Ethernet for Modbus TCP. SIM Subscriber Identity Module. SIM card.
This functional profile applies to the following Grundfos products: SubMiniature version A. Coaxial radio signal cable
SMA
connection standard.
• Grundfos CRE/CRNE/CRIE, MTRE, CHIE, CME
SMTP Simple Mail Transfer Protocol.
• Grundfos TPE, TPE Series 2000, NBE/NKE
Simple Network Time Protocol. Used for clock
• Grundfos CUE drive SNTP
synchronisation between computer systems.
• Grundfos MAGNA3 Transmission Control Protocol. Protocol for Internet
In the following, the supported products are referred to as "E TCP communication and Industrial Ethernet
communication.
pumps".
Grundfos cannot be held responsible for any problems caused Transmission Control Protocol/Internet Protocol.
TCP/IP
Protocol for Internet communication.
directly or indirectly by using information in this functional profile.
Transmission speed Bits transferred per second, bit/s.
2.2 Assumptions Uniform Resource Locator. The IP address used to
URL
This functional profile assumes that the reader is familiar with the connect to a server.
commissioning and programming of Modbus devices. The reader Coordinated Universal Time. The primary time
should also have some basic knowledge of the Modbus protocol UTC standard by which the world regulates clocks and
and technical specifications. time.
It is also assumed that an existing Modbus network with a Modbus Unicode Transformation Format. Character
UTF-8
master is present. encoding.
Virtual Private Network. A network using the Internet
2.3 Definitions and abbreviations to connect nodes. These systems use encryption
VPN and other security mechanisms to ensure that only
authorised users can access the network and that
3G Third-generation mobile telephony network. the data cannot be intercepted.
4G Fourth-generation mobile telephony network.
Address Resolution Protocol. Translates IP
ARP
addresses into MAC addresses.
Ensures that both crossover cable types and non-
Auto-MDIX
crossover cable types can be used.
CAT5 Ethernet cable with four twisted pairs of wires.
CAT5e Enhanced CAT5 cable with better performance.
Ethernet cable compatible with CAT5 and CAT5e
CAT6
and with very high performance.
CIM Communication Interface Module.
CIU Communication Interface Unit.
Cyclic Redundancy Check. A data error detection
CRC
method.
Dynamic Host Configuration Protocol. Used to
DHCP configure network devices so that they can
communicate on an IP network.
5
3. System description 3.3 CIM 260 3G/4G cellular Modbus
English (GB)
3.1 Modbus
The system diagrams provide an overview of the different
technologies and how to connect the module or unit to the Grundfos Cellular
E pump that you connect to a Modbus network.
CIM solution
CIM 260
The Communication Interface Module (CIM) is an add-on
communication module you install internally in a Grundfos
E-pump using a 10-pin connection. In this setup, the E-pump will
supply power to CIM 200.
For mounting of the CIM add-on module, see the installation and
operating instructions for the E-pump in question.
TM080190
CIU solution
The Communication Interface Unit (CIU) is a box with a power
supply module and a CIM Modbus module. You can mount either on
a DIN rail or on a wall. Principle sketch of CIM 260 Modbus cellular solution with internal
You use it in conjunction with Grundfos E-pumps that do not support add-on CIM module and external antenna. The figure shows a
an internal, add-on communication module, CIM. CRE pump
Related information
3.2 CIM 200 Modbus RTU Cellular
GENlbus
3.2 CIM 200 Modbus RTU RS-485
TM080191
CIU 260
CIM 200
TM080188
Modbus RTU Principle sketch of CIU 260 Modbus cellular solution with external
antenna. The figure shows a CUE-drive for pumps
3.4 CIM 500 Modbus TCP

Principle sketch of CIM 200 Modbus RTU solution with add-on
CIM module installed inside the pump. The figure shows a
MAGNA3 pump
CIM 500
Modbus RTU GENlbus

RS-485
Modbus TCP
TM080189
CIU 200
TM080193
Principle sketch of CIU 200 Modbus RTU solution. The figure
shows a CUE-drive for pumps
The CIM module or the CIU unit is connected as a Modbus slave

Principle sketch of CIM 500 Modbus TCP solution with internal
directly to the Modbus network.
add-on module. The figure shows a CRE pump
Modbus TCP GENlbus

RS-485
TM080194
CIU 500
Principle sketch of CIU 500 Modbus TCP solution. The figure

shows a CUE drive for pumps
6
English (GB)
4. Specifications
4.1 CIM module
General data Description Comments

Ambient humidity 30 % to 95 % Relative, non-condensing.
Operating temperature -20 to +45 °C
Storage temperature -25 to +70 °C
You can only charge the battery if the battery
Battery, lithium-ion CIM 260 only.
temperature is between 0 and 45 °C.
The LED will be in one of these states:
GENIbus visual diagnostics LED2
Off, permanently green, flashing red, permanently red.
Power supply (CIU) 24-240 V Located in the unit.
GENIbus connection type (CIU) RS-485, 3-wire + screen Conductors: A, B and Y.
CIU box enclosure class IP54
CIU box dimensions (H × W × D) 182 × 108 × 82 mm
Related information
5.5 Status LEDs
4.2 CIM 200 Modbus RTU

The table below provides an overview of the specifications for Grundfos CIM 200 and CIU 200. For further details, refer to the specific sections
of this functional profile.
Modbus RTU specifications Description Comments

Modbus connector Screw-type terminal 3 pins.
Modbus connection type RS-485, 2-wire + common Conductors: D0, D1 and Common.
Maximum cable length 1200 m Equals 4000 ft.
Slave address 1-247 Set via rotary switches SW6 and SW7.
Line termination On or Off Set via DIP switches SW1 and SW2.
Recommended cable cross-section 0.20 - 0.25 mm2 AWG24 or AWG23
1200 1), 2400 1), 4800 1),
Supported transmission speeds Set via DIP switches SW4 and SW5.
9600, 19200, 38400 bit/s
Start bit 1 Fixed value.
Data bits 8 Fixed value.
Stop bits 1 or 2 Set via DIP switch SW3.
Parity bit Even parity, odd parity 1) or no parity Set via DIP switch SW3.
Modbus visual diagnostics LED1 Off, flashing green, flashing red, permanently red.
Using repeaters, you can increase this number.
Maximum number of Modbus devices 32
Legal address range is 1-247.
Maximum Modbus telegram size 256 bytes Total length. Node address and CRC included.
1) Can only be set via software.
Related information
5. CIM 200 Modbus RTU setup
5.1 Setting the Modbus transmission speed
5.2 Setting the stop bits and the parity bit
5.3 Modbus address selection
5.4 Termination resistor
5.5 Status LEDs
13. Modbus RTU telegram examples
7
4.3 CIM 260 3G/4G cellular
English (GB)
The table below provides an overview of the specifications for Grundfos CIM/CIU 260. For further details, refer to the specific sections of this
functional profile.
Modbus cellular specifications Description Comments

Data protocol Modbus TCP Data connection uses Modbus TCP.
You can change the address via Modbus register 00003,
Slave address Factory 231 (0xE7)
SoftwareDefinedModbusAddress.
Cellular connection visual diagnostics LED1
Maximum Modbus telegram size 260 bytes Total Modbus TCP/IP application data unit.
Related information
6.2 Status LEDs
12.1.1 What is APN and Modbus TCP?

The table below provides an overview of the specifications for Grundfos CIM/CIU 500 for Modbus TCP. For further details, refer to the specific
sections of this functional profile.
Modbus TCP specifications Description Comments

Application layer DHCP, HTTP, Ping, FTP, Modbus TCP Rotary switch in position 1 to select Modbus TCP.
Transport layer TCP
Internet layer Internet protocol V4 (IPv4)
Link layer ARP, media access control (Ethernet)
Ethernet cable CAT5, CAT5e or CAT6 Supports auto cable-crossover detecting (Auto-MDIX)
Maximum cable length 100 metres Corresponds to 328 feet.
Transmission speed 10 Mbit/s, 100 Mbit/s Auto-detected
8
5. CIM 200 Modbus RTU setup 5.1 Setting the Modbus transmission speed
English (GB)
Set the transmission speed correctly before the CIM 200 Modbus
module is ready to communicate with the Modbus network. Use DIP
switches SW4 and SW5 for setting the transmission speed.
TM041710
SW4 SW5
Modbus transmission speed
DIP switch settings

Available transmission speeds in bit/s: 1200, 2400, 4800, 9600,
8
19200 and 38400.
9 The first three transmission speeds are only available via software
settings, whereas the last three are available via DIP switches.
Transmission speed [bit/s] SW4 SW5

9600 OFF ON
19200 OFF OFF
TM041697
38400 ON OFF
1 2 3 4 5 6 7 Software-defined ON ON
CIM 200 Modbus module Default transmission speed is 19200 bits per second, as per the
Modbus RTU standard.
Pos. Designation Description Software-defined

Modbus terminal D1 When SW4 and SW5 are set to "software-defined", writing a value
1 D1 to the holding register at address 00004 will set a new transmission
(positive data signal)
speed.
Modbus terminal D0
2 D0 Use the following values for software-defined transmission speeds:
(negative data signal)
3 Common/GND Modbus terminal Common and GND
Value to set in register
Software-defined transmission speed
On and off switches for termination 00004
4 SW1/SW2
resistor
1200 bit/s 0
Switches for selection of Modbus parity
5 SW3/SW4/SW5 2400 bit/s 1
and transmission speed
4800 bit/s 2
Red and green status LED for Modbus
6 LED1
communication 9600 bit/s 3
Red and green status LED for internal 19200 bit/s 4
7 LED2 communication between CIM/CIU 200
and the E pump 38400 bit/s 5
Hexadecimal rotary switch for setting

This value is set to 1200 bit/s as default.
8 SW6 the Modbus address, four most
significant bits The communication interface does not support transmission speeds
above 38400 bit/s.
Hexadecimal rotary switch for setting
9 SW7 the Modbus address, four least The software-defined transmission speed value is stored in the
significant bits communication interface and remains after a power-off.
Use a screened, twisted-pair cable. Connect the cable screen to When software-defined has been selected, then the
protective earth at both ends. communication speed, parity bit, stop bits and address are
all set via specific registers.
Recommended connection
Related information
Modbus terminal Colour code Data signal
D1-TXD1 Yellow Positive
D0-TXD0 Brown Negative
Common/GND Grey Common/GND
9
5.2 Setting the stop bits and the parity bit 5.3 Modbus address selection
English (GB)
A Modbus slave on a Modbus network must have a unique address

When software-defined transmission speed is enabled from 1-247. Address 0 is reserved for broadcasting, and is not a
(SW4 and SW5 are ON), software-defined parity and stop valid slave address.
bits are also enabled. To set the Modbus address, use two hexadecimal rotary switches
You can set the parity either manually by using SW3 or via (SW6 and SW7).
software-defined settings.
Manual setting of parity

Default byte format (11 bits):
TM041706
• 1 start bit
• 8 data bits (least significant bit sent first) SW6 SW7
• 1 parity bit (even parity)
• 1 stop bit. Setting the Modbus address
The default setting of the CIM 200 Modbus module is even parity (1
stop bit). It is possible to change the parity using DIP switch SW3. For a complete overview of Modbus addresses, see
You can change the parity to no parity (2 stop bits). section Modbus RTU rotary switch addresses.
When software-defined transmission speed is enabled,
software-defined address is also enabled and you set the
address via register 00003.
You must set the Modbus address decimally from 1 to
TM041709
247.
SW3
Parity The termination resistor is fitted on CIM 200 Modbus and has an
effective value of 120 Ω.
DIP switch settings CIM 200 has a DIP switch with two switches, SW1 and SW2, for
cutting the termination resistor in and out.
Parity SW3
Even parity, 1 stop bit OFF
No parity, 2 stop bits ON
TM041701
Software-defined parity and stop bits
When SW4 and SW5 are set to "software-defined", the value in the SW1 SW2
holding registers at addresses 00009 and 00010 will override the
setting of SW3. Cutting the termination resistor in and out
Value to set in register

Software-defined parity DIP switch settings
00009
No parity [default] 0 Status SW1 SW2
Even parity 1 Cut in ON ON
Odd parity 2 OFF OFF

Cut out ON OFF
Value to set in register OFF ON
Software-defined stop bit
00010
1 stop bit [default] 1 Default setting: Termination resistor cut out.
2 stop bits 2 Cable length
We recommend the following maximum lengths:
The software-defined parity and stop bit values are stored in the
communication interface and remain after a power-off.
Maximum cable length
For software-defined parity and stop bits to become Bit/s Terminated cable Unterminated cable
active, you must set SW4 and SW5 to ON. [m/ft] [m/ft]
1200-9600 1200/4000 1200/4000
Related information 19200 1200/4000 500/1700
5.1 Setting the Modbus transmission speed 38400 1200/4000 250/800
To ensure a stable and reliable communication, it is

important that only the termination resistor of the first and
last units in the Modbus network are cut in.
All switch settings will be effective immediately after

setting the values. No power-off is needed.
10
5.5 Status LEDs 6. CIM 260 3G/4G cellular Modbus setup
English (GB)
The CIM 200 Modbus has two LEDs.
• Red and green status LED1 for Modbus communication
• Red and green status LED2 for internal communication between
CIM 200 and the Grundfos product.
LED1
Status Description
Off No Modbus communication.
Flashing green Modbus communication active.
Flashing red Fault in the Modbus communication.
Permanently red Fault in the CIM 200 Modbus configuration.
1
LED2
Status Description
Off CIM 200 has been switched off.
No internal communication between CIM 200 and
Flashing red
the Grundfos product.
TM084023
CIM 200 does not support the Grundfos product
Permanently red 2 3 4 5 7 6
connected.
Internal communication between CIM 200 and the
Permanently green CIM 260 cellular module (top-side view)
Grundfos product is OK.
Pos. Designation Description

During startup, there may be a delay of up to 5 seconds
before the LED2 status is updated. 1 Battery socket
2 SIM card holder
Related information Secondary SMA connection for cellular

3
antenna 2).
Primary SMA connection for cellular antenna.
4
This antenna must always be connected.
Yellow and green status LED for cellular
5 LED1
communication.
Red and green status LED for internal
6 LED2 communication between CIM 260 and the
Grundfos product.
To reset to factory settings, press and hold for
7 SW1
at least 5 seconds.
2) Use this antenna connection only if required by the telecom company.
6.1 Installation
WARNING
Electric shock
Death or serious personal injury
‐ Before installation, make sure that the power supply
has been switched off and that it cannot be
accidentally switched on.
6.1.1 Fitting a cellular antenna

Connect an antenna to CIM 260 to establish connection to the
cellular network.
If CIU 260 is installed in a metal control cabinet, we
recommend fitting an external antenna.
Grundfos offers different kinds of antennas. No antenna is
supplied with CIU 260. You can order it separately.
External antenna
Connect the antenna cable to the SMA connection (pos. 1) of CIM
260. The antenna must be installed outside the control cabinet in a
position with good reception conditions. If required by the telecom
company, connect an additional antenna.
11
6.1.3 Connecting the battery and power supply
English (GB)
WARNING
Flammable material
Death or serious personal injury
‐ The safety precautions listed below must be observed
2 carefully as improper handling of the lithium-ion
battery may result in injury or damage from electrolyte
1 leakage, heating ignition or explosion.
• Only insert the approved Grundfos battery pack (order no.
99499908).
• Never use this battery pack in other battery chargers.
• Do not dismantle or modify the battery.
• Do not heat or incinerate the battery.
• Do not pierce, crush or cause mechanical damage to the
battery.
TM084024
• Do not short-circuit the battery.
• Do not allow the battery to get wet or be immersed in water.
Fitting an external cellular antenna • Do not strike or throw the battery.
• For long periods of storage, the temperature must be below 35
°C.
Pos. Description
You can fit CIM 260 with a lithium-ion battery (order no. 99499908),
Primary SMA connection for the cellular antenna.
1 which will ensure sustained cellular connection with the product in
This antenna must always be connected
which it is mounted, even if the power is switched off. The battery is
2 Secondary SMA connection for the cellular antenna 3). secured by a velcro strap which absorbs vibrations and simplifies
replacement.
3) Use this antenna connection only if required by the telecom company.
If a battery is not connected, the user will not receive any

6.1.2 Inserting the SIM card information in case of a power cut.
Before inserting the SIM card into CIM 260, remove the PIN code,
or set the PIN code to "4321".
Procedure
1. Insert the SIM card into a mobile phone.
2. Remove the PIN code from the SIM card, or set the PIN code to
"4321". See the manual of the mobile phone.
3. Insert the SIM card into CIM 260.
The slanted edge of the SIM card must point downwards,

away from the connector.
TM080060
The connectors on the SIM card must face inwards
towards CIM 260.
Connecting the battery
You can only charge the battery if the battery temperature

2
is within 0 to 45 °C.
Switch on the power supply. CIM 260 is powered either by the

Grundfos product or by the battery.
TM084025
LED1 flashes yellow, searching for a cellular network. When the

connection to the cellular network has been established, LED1
pulsates yellow, the cellular network is active.
Inserting the SIM card LED2 is permanently green, indicating that you have fitted CIM 260
correctly in the Grundfos product.
Pos. Description 6.1.4 Configuration

1 SIM card holder For software configuration of CIM 260, which includes setting of
SMS functions and SCADA communication parameters, see "CIM
2 SIM card
260 SMS commands", which you can download from Grundfos
Product Center.
12
6.2 Status LEDs 7. CIM 500 Modbus TCP setup
English (GB)
The CIM 260 module has two LEDs.
WARNING
• Yellow and green status LED1 for cellular communication. Electric shock
• Red and green status LED2 for internal communication between Death or serious personal injury
CIM 260 and the Grundfos product. ‐ Connect CIM 500 only to SELV circuits.
LED1, yellow and green

7.1 Connecting the Ethernet cable
Use RJ45 plugs and Ethernet cable. Connect the cable shield to
1 protective earth at both ends.
2 It is important to connect the cable shield to earth through

an earth clamp or to connect the cable shield to earth in
3 the connector.
4
CIM 500 is designed for flexible network installation; the built-in two
TM083816
1 second port switch makes it possible to daisy chain from product to product
3 seconds without the need for additional Ethernet switches. The last product
in the chain is only connected to one of the Ethernet ports. Each
Ethernet port has its own MAC address.
LED1 status
Pos. Status Description Ethernet

switch
1 Flashing yellow Searching for cellular network.
Pulsating yellow, single Connection to the cellular network CIM CIM CIM
2 500 500 500
pulse has been established.
TM083815
Pulsating green, single CIM
3 Communication via data connection. 500
pulse
Sending or receiving an SMS
4 Green, 3 seconds
message. Example of Industrial Ethernet network
LED2, red and green

Status Description
Off CIM 260 has been switched off.
No communication between CIM 260 and the
Flashing red
Grundfos product.
CIM 260 does not support the connected version of
Permanently red
The connection between CIM 260 and the Grundfos
Permanently green 5 6
product is OK. 4 7
TM079842
3
1 2 8 9
Example of Ethernet connection
Pos. Description Designation

1 Industrial Ethernet RJ45 connector 1 ETH1
2 Industrial Ethernet RJ45 connector 2 ETH2
3 Rotary switch for protocol selection SW1
4 Data activity LED for connector 1 DATA1
5 Link LED for connector 1 LINK1
6 Data activity LED for connector 2 DATA2
7 Link LED for connector 2 LINK2
Green and red status LED for Ethernet
8 LED1
communication
Green and red status LED for internal
9 communication between the module and the LED2
product.
13
7.2 Setting the Industrial Ethernet protocol
English (GB)
You can use both ETH1 and ETH2 to establish a

The CIM 500 Ethernet module has a rotary switch for selection of
connection to the webserver.
the Industrial Ethernet protocol.
You can access the webserver while the selected

Industrial Ethernet protocol is active.
Related information
A.1. Webserver configuration
7.5 Status LEDs
TM079843
The CIM 500 Ethernet module has two status LEDs: LED1 and
LED2.
• Red and green status LED1 for Ethernet communication
Selecting the Industrial Ethernet protocol • Red and green status LED2 for internal communication between
CIM 500 and the Grundfos product.
Pos. Description LED1
0 PROFINET IO (default)
Status Description
1 Modbus TCP
No Modbus TCP communication or switched
Off
2 BACnet IP off.
3 EtherNet/IP Flashing green Modbus TCP communication active.
Reserved, LED1 will be permanently red to indicate an invalid Permanently red CIM 500 module configuration fault.
4-E
configuration.
Permanently red and green Error in the firmware download.
Reset to default setting
Resetting to factory default.
Note: The rotary switch must be set in this position for 20 seconds Flashing red and green
F After 20 seconds, CIM 500 restarts.
to reset to default setting. During this period LED1 flashes red and
green at the same time to indicate that a reset will occur.
LED2
Status Description
Every change of the rotary-switch setting while the module
Off CIM 500 is switched off.
is powered on will cause the module to restart.
No internal communication between CIM 500
Flashing red
and the Grundfos product.
7.3 Setting the IP addresses CIM 500 does not support the Grundfos
Permanently red
The CIM 500 Ethernet module is by default set to a fixed IP product connected.
address. You can change the IP address settings from the built-in Internal communication between CIM 500
Permanently green
webserver. and the Grundfos product is OK.
Permanently red and green Memory fault.
IP address: 192.168.1.100
Default IP settings used by
Subnet mask: 255.255.255.0
the webserver
Gateway: 192.168.1.1 During startup, there is a delay of up to 5 seconds before
LED1 and LED2 status is updated.
IP settings for Modbus TCP Make the settings via the webserver.
7.4 Establish a connection to the webserver Related information

You can configure CIM 500 using the built-in webserver. To 7.1 Connecting the Ethernet cable
establish a connection from a PC to CIM 500, the following steps 14.3.1 LED status
are required:
• Connect the PC and CIM 500 using an Ethernet cable.
• Configure the PC Ethernet port to the same subnetwork as CIM
500, for example 192.168.1.101, and the subnet mask to
255.255.255.0.
• Open a standard internet browser and type 192.168.1.100 in the
URL field.
• Log in to the webserver using the following:
User name Default: admin

Password Default: Grundfos
User name and password may have been changed from

their default values. If the password hasn't been changed,
you will be prompted to change it to a new and stronger
password.
TM056436
CIM 500 connected to a PC via Ethernet cable
14
7.6 DATA and LINK LEDs
English (GB)
The CIM 500 Ethernet module has two connectivity LEDs related to
each RJ45 connector.
DATA1 and DATA2

These yellow LEDs indicate data traffic activity.
Status Description
Yellow off No data communication on the RJ45 connector.
Yellow flashing Data communication ongoing on the RJ45 connector.
Permanently yellow Heavy network traffic on the RJ45 connector.
LNK1 and LINK2

These green LEDs show whether the Ethernet cable is properly
connected.
Status Description
Green off No Ethernet link on the RJ45 connector.
Green on Ethernet link on the RJ45 connector is OK.
Related information
8. Modbus function code overview

The supported function codes are shown in the table below:
Type Code Hex Name

03 0x03 Read holding registers
16-bit data 04 0x04 Read input registers

(registers) 06 0x06 Write single register
16 0x10 Write multiple registers
Diagnostics 08 08 Diagnostics
Reading or writing coils are not supported.
The same data are available in both holding registers and input
registers, meaning that either function (0x03 or 0x04) can be used
for reading data.
Unless otherwise stated, the data type used for counters

and scaled values is always an unsigned integer.
Related information
13.6 Diagnostics, 0x08
15
English (GB)
9. Modbus register addresses
9.1 Register block overview

The Modbus RTU registers are grouped in the following register blocks:
Start address Register block Permissions Description

00001 CIM configuration R/W Configuration of the CIM module.
00021 CIM status R Status registers for the CIM module.
00101 Pump control R/W Registers for control of the E-pump.
00201 Pump status R Registers for reading mode status from the E-pump.
00301 Pump data R Registers for reading measured data values from the E-pump.
00701 Alarm simulation R/W Registers for simulating alarms and warnings in the E-pump.
00751-800 User registers R/W Registers where the user can freely store data.
All addresses contain 16 bit registers. Some registers are bit-interpreted, consisting of one or more parameters of type bool, while others are
16-bit values or high/low order parts of 32 bit values. When a 32 bit value is split in two 16 bit registers, the names will be labeled HI and LO at
the end of the register name. Re-combining into a 32 bit value is done like this:
Parameter32bit = Parameter16bitHI x 65536 + Parmeter16bitLO
9.2 CIM configuration register block

Registers in this block can be read by means of function codes 0x03 and/or 0x04. They can be written as holding registers with function codes
0x06 and 0x10.
CIM CIM CIM

Address Register name Description
200 260 500
The minimum reply delay from the slave in ms.
Value range: 0-10000, i.e. up to 10 seconds reply delay. This delay is typically used in
00001 SlaveMinimumReplyDelay conjunction with a radio modem. The delay value is stored in the device and remains ● - -
after a power-off. The delay set here is added to the internal delay in the device.
Default value is 0.
00002 RESERVED
This register holds the active Modbus address. The default value is 0xE7 (231), and
there is normally no need to change this value.
00003 SoftwareDefinedModbusAddress Note that for CIM 200, this value is used only when you have set the transmission ● ● -
speed to "Software-defined" on DIP switches SW4 and SW5.
Otherwise, CIM 200 ignores it.
Modbus software-defined transmission speed enumeration.
The software-defined transmission speed value is stored in the device and remains
after a power-off.
0: 1200 bit/s
1: 2400 bit/s
00004 SoftwareDefinedBitRate 2: 4800 bit/s ● - -
3: 9600 bit/s
4: 19200 bit/s
5: 38400 bit/s.
Note that this value is used only when you have set the transmission speed to
"Software-defined" on DIP switches SW4 and SW5. Otherwise, CIM 200 ignores it.
Used to select the behaviour of control bit acknowledgements from the CIM/CIU.
0: Disabled.
Control bits are not automatically lowered when accepted by the device. The user
must lower the triggered control bit manually before the control bit can be triggered
00005 AutoAckControlBits ● ● ●
again.
1: Enabled.
Control bits are automatically lowered when accepted by the device. The user does
not have to lower it manually (default).
00006 RESERVED
00007 RESERVED
The elapsed time with no data activity before the module issues a restart of the APN
00008 NoDataActivityTimeout - ● -
connection.
Parity setting when using "software-defined" settings.
0: No parity (default)
1: Even parity
00009 SoftwareDefinedParity ● - -
2: Odd parity.
Note that for CIM 200, this value is used only when you set the transmission speed to
16
English (GB)
CIM CIM CIM
200 260 500
Stop bit setting when using "software-defined" settings.
0: No stop bit
1: 1 stop bit (default)
00010 SoftwareDefinedStopBit ● - -
2: 2 stop bits.
Note that for CIM 200, this value is used only when you set the transmission speed to
PIN code for SCADA systems, etc.
If GeneralStatus. ScadaPinCodeEnabled (register 00029, bit 0) is enabled, enter the
correct PIN code in this register in order to gain access to remote control and
configuration.
00011 ScadaPinCode - ● -
Verify acceptance in GeneralStatus. WriteAccess (register 00029, bit 1).
You programme the SCADA PIN code via the SMS command "SETSCADACODE".
See "CIM 260 SMS commands", which you can download from Grundfos Product
Center.
Configuration of watchdog timeout.
[5; 3600 s], default: Disabled='0'. Minimum value 5 s
• Watchdog is fed whenever the device is addressed by a valid telegram.
00012 Watchdog • An interruption of telegrams for more than the timeout time activates the ● - ●
watchdog.
• Action: The booster will be set to Local mode.
• Values 1-4 set timeout to 5 s. Values >3600 set timeout value to 3600 s.
For disabling the GENIbus LED2.
00013 GENIbusDiodeOff 0: GENIbus diode LED2 has normal function. ● ● ●
1: GENIbus diode LED2 is permanently switched off.
17
9.3 CIM status register block
English (GB)
Registers in this block can be read by means of function codes 0x03 and/or 0x04. They are read-only. Use this block for various kinds of fault
finding.
Address Register name Description CIM 200 CIM 260 CIM 500
00021 GENIbusCRCErrorCnt Holds a CRC error counter for the GENIbus connection to the E-pump. ● ● ●
00022 GENIbusDataErrorCnt Holds a data error counter for the GENIbus connection to the E-pump. ● ● ●
00023 VersionNumber A Grundfos-specific version number. BCD coded unsigned integer value. ● ● ●
Holds the current Modbus slave address of the device.
00024 ActualModbusAddress ● ● ●
Valid value range: 1-247.
00025 GENIbusTXcountHI Holds a transmit counter for the total number of telegrams sent to the E pump on
● ● ●
00026 GENIbusTXcountLO the GENIbus connection.
00027 GENIbusRXcountHI Holds a receive counter for the total number of telegrams received from the E-
● ● ●
00028 GENIbusRXcountLO pump on the GENIbus connection.
PIN code functionality.
0: No PIN code required.
GeneralStatus 1: PIN code required to perform remote control and configuration.
Bit 0: ScadaPinCodeEnabled Activation of SCADA PIN-code protection takes place via the SMS command
"SCADACODE". See "CIM 260 SMS commands", which you can download from
Grundfos Product Center.
00029 - ● -
Remote write access.
GeneralStatus
0: No write access (the PIN code is incorrect)
Bit 1: WriteAccess
1: Full write access (the PIN code is either correct or not enabled).
GeneralStatus
Login blocked due to too many login attempts.
Bit 2: LoginBlocked
UnitFamily UnitType
00030 UnitFamily 1 Circulator pumps 5 UPE, 3 phase ● ● ●
00031 UnitType 7 Magna, 1 phase ● ● ●
00032 UnitVersion 9 Magna, 1 phase, small ● ● ●
10 MAGNA3
2 E-pump 2 MGE, 1 phase, model C or earlier
3 MGE, 3 phase, model D
4 MGE, 3 phase, large (> 7.5 kW), model F
5 CUE frequency drive
6 MGE, 3 phase, model G
7 MGE model H/I/J
8 CUE II frequency drive
9 MGE model K
7 Motor Protector 1 MP 204
17 Hydro Multi-E 1 Multi-E with 1 phase MGE model G
2 Multi-E with 3 phase MGE model G
21 Hydro/Control MPC 1 CU 351/352 MPC
2 CU 323, Multi-B
3 CU 354, DDD
4 CU xxx MPC II
26 Dedicated Controls 1 CU 361/362
28 CIU xx2 SEG AutoAdapt 1 1 CIU xx2 SEG AutoAdapt wastewater
30 Smart Digital Dosing, DDA 1 Small DDA dosing pump
3 DDA XL dosing pump
4 DDA II dosing pump
38 Circulator twin pump 10 MAGNA3-D
39 Multi pump 7 Multi-E or TPED with MGE model H/I/J
9 Multi-E or TPED with MGE model K
46 LC Controller, water supply 1 LC 242, modular type
2 LC 232, wall mounted type
48 LC Controller, waste water 1 LC 241, modular type
2 LC 231, wall mounted type
65 SQ Controller 1 Pressure control
2 Solar application
18
English (GB)
Address Register name Description CIM 200 CIM 260 CIM 500
State of CIM 260 module battery
0: Battery not present
1: Battery must be replaced
2: Battery charging
00033 BatteryState 3: Battery needs charging, but temperature too high - ● -
4: Battery needs charging, but temperature too low
5: Battery low
6: Battery OK
255: Battery state not available
00034 ProductSoftwareVersionHI Product software version (BCD digit 1-4 aa.bb) ● ● ●
00035 ProductSoftwareVersionLO Product software version (BCD digit 5-8 cc.dd) ● ● ●
00036 ProductSoftwareDayMonth Product software date (BCD ddmm) ● ● ●
00037 ProductSoftwareYear Product software date (BCD yyyy) ● ● ●
9.4 Cellular network Real Time Clock
CIM CIM CIM

200 260 500
00080 SetUNIXRealTimeClockHI Set real time clock (32 bit UNIX format) - ● -
00081 SetUNIXRealTimeClockLO Triggered on value change - ● -
00082 SetRtcSecond Set real time clock - seconds - ● -
00083 SetRtcMinute Set real time clock - minutes - ● -
00084 SetRtcHour Set real time clock - hours - ● -
00085 SetRtcDay Set real time clock - day - ● -
00086 SetRtcMonth Set real time clock - month - ● -
00087 SetRtcYear Set real time clock - year - ● -
00088 Bit 0: SetRtc Triggers setting of real time clock - s/m/h/d/m/y format - ● -
00089 StatusUNIXRealTimeClockHI - ● -
Real time clock (32 bit UNIX format)
00090 StatusUNIXRealTimeClockLO - ● -
00091 StatusRtcSecond Real time clock - seconds - ● -
00092 StatusRtcMinute Real time clock - minutes - ● -
00093 StatusRtcHour Real time clock - hours - ● -
00094 StatusRtcDay Real time clock - day of month - ● -
00095 StatusRtcMonth Real time clock - month - ● -
00096 StatusRtcYear Real time clock - year (after 2000) - ● -
00097 Bit 0: StatusSetRTCAck Acknowledge of set RTC command - ● -
19
9.5 Pump control register block
English (GB)
Registers in this block can be read by means of function codes 0x03 and/or 0x04. They can be written as holding registers with function codes
0x06 and 0x10.

Control bit that sets local or remote control.
0: Local
Bit 0: RemoteAccessReq 1: Remote (controlled by Modbus master).
Set this bit to 1 if a Modbus master should control the E-pump.
You can read the actual status from register 00201 bit 8.
Control bit that switches the E-pump on or off.
0: Off (stop)
Bit 1: OnOffReq
1: On (start).
Control bit that resets alarms and warnings from the E-pump.
0: No resetting
Bit 2: ResetAlarm 1: Resetting alarm.
This control bit is triggered on rising edge only, i.e. setting logical 0 to 1.
See section CIM configuration register block, address 00005, for acknowledgement behaviour.
00101 Control bit that enables copying of remote settings to local pump settings.
Only available on MAGNA3, CUE and MGE model H and later.
0: Disabled
1: Enabled.
Bit 4: CopyToLocal You can read the actual status from register 00201 bit 1.
Note that copy of the Control Context, which is Control mode, Operating mode, On/off and Setpoint, from
the remote setting to the local setting takes place when CopyToLocal has been enabled, but only during a
Remote->Local transition.
It is necessary to introduce such a transition whenever the user wants the local setting to be updated and
stored in the EEPROM.
Control bit that enables or disables the FLOWLIMIT function. Set the maximum flow limit value in register
00106. Only available on MAGNA3 and MGE model H and later.
Bit 5: EnableMaxFlowLimit 0: Disabled (only used in control mode FLOWADAPT)
1: Enabled (used in all control modes).
Bits 6-15: RESERVED -
Sets the control mode enumeration.
Some modes are not supported by all E-pumps.
0: Constant speed
1: Constant frequency
3: Constant head
4: Constant pressure
5: Constant differential pressure
6: Proportional pressure
00102 ControlMode 7: Constant flow
8: Constant temperature
9: Constant differential temperature
10: Constant level
128: AUTOADAPT
129: FLOWADAPT (set FLOWLIMIT in register 00106)
130: Closed-loop sensor.
131: AUTOADAPT(CP)
You can read the actual control mode from register 00203.
A state enumeration to control the E-pump operating mode.
0: Auto-control (setpoint control according to selected control mode)
4: OpenLoopMin (running at minimum speed)
00103 OperationMode 6: OpenLoopMax (running at maximum speed).
Note that "OnOffReq" has higher priority than "OperationMode", meaning that you must set "OnOffReq" to
"On" for "OperationMode" to have any effect.
You can read the actual operation mode from register 00204.
Sets the E-pump setpoint.
The scale is 0.01 %, so the value must be from 0 to 10000 to represent the entire 0-100 % range.
Closed loop:
Percentage of setpoint range.
Open loop
00104 Setpoint
Percentage of nominal frequency.
Common examples
4700: 47 %
8000: 80 %.
You can read the actual setpoint from register 00338 UserSetpoint
20
English (GB)
RelayControl A register to control the relays. It is bitwise interpreted as follows:
Controls the state of relay 1.
0: Closed
Bit 0: Relay1Control
1: Open
Only E-pumps and CUE.
0: Closed
Bit 1: Relay2Control
1: Open
Only CUE, large MGE, MGE model H and later.
00105
0: Closed
Bits 2: Relay3Control
1: Open
Only MGE model H and later.
0: Closed
Bits 3: Relay4Control
1: Open
Only MGE model H and later.
Sets the maximum flow limit, FLOWLIMIT. It must be enabled in register 00101, bit 5.
The value is set in 0.01 m3/h. If enabled, the FLOWLIMIT is active in all control modes. If disabled, the
00106 SetMaxFlowLimit maximum flow limit will only be active in FLOWADAPT control mode.
Read actual value in register 00345
Only available on MAGNA3 and MGE model H and later.
00107 SetPumpUnixRtcHI Sets the real-time clock in the pump in unix format (seconds since 01-01-1970).
00108 SetPumpUnixRtcLO Only available on MAGNA3 and MGE model H and later.
00109 SensorFeedback Closed loop sensor feedback via Modbus, scaling 0.01 %
Sets the proportional gain, Kp. The scale is 0.1.
00110 SetKp
Sets the integral action time, Ti. The scale is 0.1 s.
00111 SetTi
Selection of Direct/Inverse control.
0: Inverse control
00112 SetDirectCtr
1: Direct control
Related information
10.1 Control mode
10.2 Setpoint in closed-loop control
21
9.6 Pump status register block
English (GB)
Registers in this register block can be read by means of function codes 0x03 and/or 0x04. They are read-only.

Indicates if the state of "Low Flow Stop" function is active or not active.
0: Pump is not in "Low Flow Stop" state
Bits 0: LowFlowStop
1: Pump is in "Low Flow Stop" state
Only available on MGE model H and later.
Indicates if the remote settings of setpoint, operating mode, control mode and on/off state will be
automatically copied to local settings.
Bit 1: CopyToLocal 0: Copying disabled
1: Copying enabled.
Indicates if the MaxFlowLimit is enabled. Enable it with register 00101, bit 5.
Bit 2: MaxFlowLimitEnabled
0: Disabled
1: Enabled.
Indicates if a ResetAlarm command was acknowledged by the device. This bit will be set when the CIU has
accepted a ResetAlarm command, and the programmer can clear the ResetAlarm bit. The ResetAlarmAck
bit will automatically be cleared to 0 by the CIU when the ResetAlarm bit is cleared by the master device,
Bit 3: ResetAlarmAck and a new ResetAlarm command can be attempted by raising ResetAlarm bit again.
0: No acknowledgement
1: Command acknowledged.
This functionality is only used when AutoAcknowledgeEvents is disabled.
Indicates if setpoint influence is active.
0: Not active
Bit 4: SetpointInfluence
1: Active.
Indicates if the E-pump is running at its power limit. Only available on MAGNA3 and MGE model H and
later.
Bit 5: AtMaxPower
0: Not running at power limit
1: Running at power limit.
Indicates if the E-pump is rotating, that is running, or not.
Bit 6: Rotation 0: No rotation
00201
1: Rotation.
Indicates the current rotational direction of the E-pump as seen from the ventilator side.
Bit 7: Direction 0: Clockwise.
1: Counterclockwise.
Indicates if the E-pump is locally or remotely controlled.
Bit 8: AccessMode 0: Local (a local control source with higher priority controls the E-pump)
1: Remote (controlled by Modbus master).
Indicates if the E-pump is on or off.
0: Off (stopped, the green LED on the E-pump flashes)
Bit 9: OnOff
1: On (started, the green LED on the E-pump is on).
Started does not necessarily indicate rotation, for instance in case of low-flow stop.
Indicates if there is an alarm or not.
Bit 10: Alarm 0: No alarm
1: Alarm (red LED on the E-pump is on).
Indicates if there is a warning or not. The E-pump will continue running even if there is a warning.
Bit 11: Warning 0: No warning
1: Warning (red LED on the E-pump is on).
State of the "Forced to local" control option
0: Not forced to local
Bit 12: ForcedToLocal
1: Forced to local.
Indicates if the E-pump is running at maximum speed.
Bit 13: AtMaxSpeed 0: No
1: Yes.
Bit 14: RESERVED -
Indicates if the E-pump is running at minimum speed.
Bit 15: AtMinSpeed 0: No
1: Yes.
22
English (GB)
Indicates the actual process feedback from the E-pump.
The scale is 0.01 %, so the valid value range is from 0 to 10000.
This value can be compared with the setpoint value.
Closed loop:
Percentage of closed-loop feedback sensor range.
00202 ProcessFeedback
Open loop
Percentage of E-pump performance.
Common examples
4700: 47 %
8000: 80 %.
Indicates the actual control mode. Not all modes are supported by all E-pump types.
0: Constant speed
1: Constant frequency
3: Constant head
4: Constant pressure
5: Constant differential pressure
6: Proportional pressure
00203 ControlMode 7: Constant flow
8: Constant temperature
9: Constant differential temperature
10: Constant level
128: AUTOADAPT
129: FLOWADAPT
130: Closed-loop sensor.
131: AUTOADAPTCP
Indicates the actual operating mode.
0: Auto-control (Normal, setpoint control according to selected control mode)
00204 OperationMode 4: OpenLoopMin (running at minimum speed)
6: OpenLoopMax (running at maximum speed).
7: Hand mode
00205 AlarmCode The Grundfos-specific alarm code.
00206 WarningCode The Grundfos-specific warning code.
Indicates the number of months until the next bearing service (not available on all E-pumps).
Bits 0-7: MonthsToBearingService This value can be 0, 1, 3, 6, 12 and 24 months, if available. A value of 24 months means "24 months or
more". A value of 0xFF indicates that the information is not available.
00207 Indicates the type of the next bearing service (not available on all E-pumps).
Bit 8: BearingServiceType 0: Lubricate bearings
1: Change bearings.
Dynamic drive state variable:
0: Stopped
1: Accelerating
2: Decelerating
3: Steady state/closed loop
00208 DriveState
4: -
5: Accelerating halt
6: Decelerating halt
7: Start on the run (flying cut-in)
Only MGE motors and CUE drives.
Indicates the unit of the feedback sensor.
0: bar
1: mbar
2: m
3: kPa
4: psi
5: ft
6: m3/h
00209 FeedbackSensorUnit
7: m3/s
8: l/s
9: gpm
10: °C
11: °F
12: %
13: K
14: W.
00210 FeedbackSensorMin Minimum value of the feedback sensor. Unit of the sensor minimum is defined by register 00209.
00211 FeedbackSensorMax Maximum value of the feedback sensor. Unit of the sensor maximum is defined by register 00209.
Nominal pump frequency. The scale is 0.1 Hz.
00212 NomFrequency
23
English (GB)

Minimum pump frequency in % of nominal frequency. The scale is 0.01 %.
00213 MinFrequency
Maximum pump frequency in % of nominal frequency. The scale is 0.01 %.
00214 MaxFrequency
Minimum value of setpoint range in % of sensor maximum value. The scale is 0.01 %.
00215 SetpointRangeMin
Maximum value of setpoint range in % of sensor maximum value. The scale is 0.01 %.
00216 SetpointRangeMax
00217 RESERVED -
00218 RESERVED -
00219 RESERVED -
00220 RESERVED -
State of the flow estimation algoritm
0: Flow estimation within range
00221 FlowEstimationState
1: Flow estimation below range
2: Flow estimation above range
Actual proportional gain. The scale is 0.1.
00222 Kp
Actual integral action time. The scale is 0.1 s.
00223 Ti
Actual selection between Direct/Inverse control.
0: Inverse control
00224 DirectControl
1: Direct control
Related information
17. Grundfos alarm and warning codes
24
9.7 Pump data register block
English (GB)
Registers in this block can be read by means of function codes 0x03 and/or 0x04. They are read-only. The table below shows which registers
each E-pump type supports.
Unless otherwise stated, the data type used for counters and scaled values is always an unsigned integer.
Table legend
3-ph: 3-phase only.
CUE: CUE drive only.
MGE: Pumps with MGE motor only.
G: Only available on model G and later versions.
H: Only available on model H and later versions.
S: Sensor required.
●: Always available.
*: If the E-pump is a TPE Series 2000, the value is estimated and always available.
Address Register name Description Scale 0.25 - 7.5 kW 11-22 kW + CUE MAGNA3
00301 Head Actual system head/pressure. 0.001 bar S S ●
00302 VolumeFlow Actual system flow. 0.1 m3/h S* S* ●
Performance relative to maximum
00303 RelativePerformance 0.01 % ● ● ●
performance.
00304 Speed Motor speed. 1 rpm ● ● ●
00305 Frequency Actual control signal applied to motor. 0.1 Hz ● ● ●
Logical value of external digital input
00306 DigitalInput bits DI 1-4 DI 1-4 DI 1-3
signals.
Logical value of external digital output
00307 DigitalOutput bits DO 1-4 DO 1-2 DO 1-2
signals.
Actual setpoint:
00308 ActualSetpoint Open loop: % of nominal frequency. 0.01 % ● ● ●
Closed loop: % of sensor maximum.
00309 MotorCurrent Actual motor current. 0.1 A ● ● ●
00310 DCLinkVoltage Frequency converter DC-Link voltage. 0.1 V ● ● ●
00311 MotorVoltage Motor voltage. 0.1 V Model G only ● -
00312 PowerHI
Total power consumption of the system. 1W ● ● ●
00313 PowerLO
00314 RemoteFlow Measured flow at external sensor. 0.1 m3/h G+S S -
System inlet pressure, relative to
00315 InletPressure atmospheric pressure. It has an offset of 0.001 bar G+S S -
-1.000 bar.
Measured pressure at external sensor,
00316 RemotePressure1 0.001 bar G+S S S
relative to atmospheric pressure.
00317 FeedTankLevel Feed tank level. Offset -100m. 0.01 m S S -
00318 PowerElectronicTemp Temperature in frequency converter. 0.01 K ● ● -
00319 MotorTemp Motor winding temperature. 0.01 K - CUE + S -
00320 RemoteTemp1 Temperature at external sensor. 0.01 K S S -
00321 ElectronicTemp E-pump electronics temperature. 0.01 K H MGE ●
00322 PumpLiquidTemp Pumped-liquid temperature. 0.01 K G+S S ●
00323 BearingTempDE Bearing temperature, drive end. 0.01 K - CUE + S -
00324 BearingTempNDE Bearing temperature, non-drive end. 0.01 K - CUE + S -
00325 AuxSensorInput Auxiliary sensor input. 0.01 % S S -
00326 SpecificEnergyConsumption Specific energy consumption. 1 Wh/m3 H+S CUE + S ●
00327 OperationTimeHI
Total operating time of the system. 1 hour ● ● ●
00328 OperationTimeLO
00329 TotalPoweredTimeHI
Total power-on time of the system. 1 hour ● ● ●
00330 TotalPoweredTimeLO
00331 Torque Motor torque. 0.1 Nm - ● -
00332 EnergyHI
Total energy consumption of the system. 1 kWh ● ● ●
00333 EnergyLO
25
English (GB)
Address Register name Description Scale 0.25 - 7.5 kW 11-22 kW + CUE MAGNA3
00334 NumberOfStartsHI Number of times the E-pump has been
1 start ● ● ●
00335 NumberOfStartsLO started.
00336 RESERVED -
Temperature at external temperature
00337 RemoteTemp2 0.01 K H+S - S
sensor 2.
User-selected setpoint.
00338 UserSetpoint Open loop: % of nominal frequency. 0.01 % ● ● ●
Closed loop: % of setpoint range.
00339 Diffpressure Pressure between pump flanges. 0.001 bar H+S - ●
00340 OutletPressure Pressure at pump outlet. 0.001 bar H+S - -
00341 RemotePressure2 Pressure measured by external sensor 2. 0.001 bar H+S - -
Motor current in percent of rated motor
00342 LoadPercent 0.01 % H - -
current.
00343 PumpUnixRtcHI Pump time and date in UNIX format
1 second H - ●
00344 PumpUnixRtcLO (seconds since 01-01-1970 00:00:00).
00345 MaxFlowLimit Actual maximum flow limit. 0.1 m3/h H - ●

00346 RemoteDiffTemp Remote differential temperature .. 0.01 K H+S - -
00347 InletDiffPressure Inlet differential pressure. 0.001 bar H+S - -
00348 OutletDiffPressure Outlet differential pressure. 0.001 bar H+S - -
00349 RemoteDiffPressure Remote differential pressure. 0.001 bar H+S - -
00350 StorageTankLevel Storage tank level. Offset -100. 0.01 m H+S - -
00351 AmbientTemp Ambient temperature. 0.01 K H+S - -
00352 HeatEnergyCounter1HI► Total accumulated heat energy in pump
1 kWh H+S - S
00353 HeatEnergyCounter1LO► lifetime (direction 1).
00354 HeatPowerHI►
Actual heat power. 1W H+S - S
00355 HeatPowerLO►
Differential temperature between forward
00356 HeatDiffTemp► 0.01 K H+S - S
and return pipe used for heat calculation.
00357 Volume1HI
Total pumped volume (direction 1). 0.01 m3 H+S CUE + S ●
00358 Volume1LO
00359 HeatEnergyCounter2HI► Total accumulated heat energy in pump
1 kWh H+S - S
00360 HeatEnergyCounter2LO► lifetime (direction 2).
00361 Volume2HI
Total pumped volume (direction 2). 0.01 m3 H+S - ●
00362 Volume2LO
►: The availability of these measurements requires that the data register 00302 VolumeFlow is available and that a differential temperature
measurement is established by one of the below means:
MGE model H and later:

• Direct measurement, where an analog or temperature input has been configured to Remote differential temperature RemoteDiffTemp
(register 00346).
• PumpLiquidTemp (register 00322) measured by build-in Grundfos sensor and RemoteTemp2 (register 00337) measured by analog or
temperature input.
• RemoteTemp1 (register 00320) and RemoteTemp2 (register 00337) measured by analog or temperature input.
MAGNA3:
For the calculation, an estimated flow value and measurement of the liquid temperature by the build-in temperature sensor is used.
Connection of an external temperature sensor is needed for the pump to calculate the needed differential temperature.
A data value of 0xFFFF indicates "not available".
Estimated flow can be used for monitoring purposes only. We do not recommend it for controlling purposes.
26
9.8 Sensor-dependent measurements
English (GB)
Many of the measurement registers require a particular sensor to be present.
Because a limited number of sensors are available, only a few of the "S" marked data modules are available simultaneously.
The following sections describe the relation between available Modbus measurement registers and the setup of sensors. The description is
split into sections for different pump types, because the approach varies.
Old MAGNA and UPE pump types

• No connection of external sensor possible.
MAGNA3
• Connection of temperature sensor and selection of analog input function "Constant temperature control" will make RemoteTemp2 (00337)
measurement available.
• Connection of pressure sensor and selection of analog input function "Constant pressure control" will make RemotePressure1 (00316)
measurement available.
CUE and all E-pump types except models H and later
Modbus data registers generated from sensor measurement

Sensor unit configuration with
handheld or PC Tool Feedback sensor Measuring sensor 4) Measuring sensor 5)
(AI1) (AI2) (AI3)
bar
mbar
m Head (00301) Head (00301) and FeedTankLevel Head (00301) and FeedTankLevel
kPa FeedTankLevel (00317) 6) (00317) 6) or InletPressure (00315) (00317) 6) or RemotePressure1 (00316)
psi
ft
m3/h
m3/s VolumeFlow (00302) or RemoteFlow VolumeFlow (00302) or RemoteFlow
VolumeFlow (00302)
l/s (00314) (00314)
gpm
°C PumpLiquidTemp (00322) or
RemoteTemp1 (00320) PumpLiquidTemp (00322)
°F RemoteTemp1 (00320)
% AuxSensorInput (00325) AuxSensorInput (00325) AuxSensorInput (00325)
4) CUE and 11-22 kW E-pumps only.

5) CUE, 11-22 kW E-pumps and model G only.
6) Only if "m" or "ft" is selected.
27
E-pump models H and later
English (GB)
Measured parameters
(selected from display or handheld) Grundfos built-in Grundfos LiqTec
Mapped to Modbus register
Analog input AI1, AI2, Temperature Pt100 input sensor sensor
Parameter
AI3 T1, T2
Pump inlet pressure ● InletPressure (00315)
Pump inlet diff. press ure ● InletDiffPressure (00347)
Pump outlet pressure ● OutletPressure (00340)
Pump outlet diff. press ure ● OutletDiffPressure (00348)
Pump diff. pressure ● ● DiffPressure (00339)
Remote pressure 1 ● RemotePressure1 (00316)
Remote pressure 2 ● RemotePressure2 (00341)
Remote diff. pressure ● RemoteDiffpressure (00349)
Feed tank level ● FeedTankLevel (00317)
Storage tank level ● StorageTankLevel (00350)
Pump flow ● VolumeFlow (00302)
Remote flow ● RemoteFlow (00314)
Pumped liquid temp ● ● ● ● PumpLiquidTemp (00322)
Temperature 1 ● ● RemoteTemp1 (00320)
Temperature 2 ● ● RemoteTemp2 (00337)
Remote diff. temp ● RemoteDiffTemp (00346)
Ambient temperature ● ● AmbientTemp (00351)
Motor bearing temp. BE ● BearingTempDE (00323)
Motor bearing temp. NDE ● BearingTempNDE (00324)
Other parameter ● AuxSensorInput (00325)
9.9 Alarm simulation register block (not CUE)

Alarm simulation can be used to simulate alarms and warnings on the E-pump. This is typically used when testing alarm event handling in
BMS/SCADA system controllers. Whether the Simulation. AlarmCode register or the Simulation. WarningCode register is used makes no
difference. The pump will in both cases react according to the predefined reaction to the code in question.
For the complete list, see chapter Alarms and warnings.
Not all codes apply to all E-pump types.
Address Register name Description 0.25 - 7.5 kW 11-22 kW MAGNA3

00701 Simulation. AlarmCode Alarm code to simulate. H ● ●
00702 Simulation. WarningCode Warning code to simulate. H ● ●
Used to activate alarm simulation with alarms and warnings
selected from registers 00701 and 00702.
00708 Simulation. Activate H ● ●
0: Deactivate simulation
1: Activate simulation
Status on alarm simulation.
00709 Simulation. Active 0: Alarm simulation not active H ● ●
1: Alarm simulation active
●: Always available.
H: Only available on model H and later versions.
Related information
10.4 Alarms and warnings
9.10 User register block
Address Register name R/W Scale Description

This area is for device labelling by the user.
00751-00800 UserRegisters R/W Unscaled The user area values are stored in the device and will remain
after a power-off.
28
10. Detailed descriptions of registers
English (GB)
10.1 Control mode
The supported control modes are described further in this section. The control mode is set with register 00102 and its status can be read from
register 00203.
Control modes Description Illustration
H
Open loop
The setpoint of the E-pump is interpreted as the setpoint for the
> Constant speed (0) performance.
T
> Constant frequency (1) The setpoint value is a percentage of the maximum performance of
TM079755
the E-pump.
No sensor is required in these modes.
Q
H
Closed loop:
> Constant head (3) The setpoint of the E-pump is interpreted as the setpoint for the
pressure.
> Constant pressure (4)
The E-pump adapts the speed so that the pressure is constant,
TM079756
> Constant differential pressure (5) regardless of the flow.
A pressure sensor is required, except for MAGNA3.
Q
Closed loop: H
The setpoint of the E-pump is interpreted as the setpoint for the

flow, temperature or level. Constant flow is indicated in the
> Constant flow (7) diagram.
> Constant temperature (8) A relevant sensor is required:
TM079754
> Constant level (10) a flow sensor for flow control
a temperature sensor for temperature control
Q
a level sensor for level control
H
Closed loop:
The setpoint of the E-pump is interpreted as the setpoint in
> Proportional pressure (6)
proportional-pressure mode as shown in the diagram.
TM079757
In this control mode, the setpoint curve is a proportional-pressure

curve where the setpoint has been set from factory. The
AUTOADAPT algorithm in the pump will, over time, optimise the
> AUTOADAPT (128) setpoint value according to the pipe characteristics of the system.
The setpoint curve is adjusted in a downward direction.
TM053241
This control mode works similar to AUTOADAPT, except that the

flow-limiting function, FLOWLIMIT, is always active and limits the
> FLOWADAPT (129) flow to the value ActualMaxFlowLimit.
TM053242
This is a general purpose closed-loop control mode that you can

> Closed-loop sensor (130) use in cases where the pump is used for a type of control not
covered by one of the other control mode
H: Pressure (head)
Q: Flow
29
10.2 Setpoint in closed-loop control 10.3 Setpoint in open-loop control
English (GB)
The setpoint is written to register 00104 Setpoint as a percentage The setpoint is written to register 00104 Setpoint as a percentage
value scaled in 0.01 % of the setpoint range. The selected setpoint value scaled in 0.01 % of the nominal frequency fnom represented
is reflected in register 00338 UserSetpoint with the same scaling. by register 00212 NomFrequency. The selected setpoint is reflected
The actual setpoint, whether it has been set via Grundfos GO, the in register 00338 UserSetpoint with the same scaling. From
pump display, the pump buttons or the fieldbus, can be read from fieldbus, it will get whatever value written to Setpoint. From pump
register 00308 ActualSetpoint. It is a percentage value scaled in display and Grundfos GO, it is limited to range [fmin; fmax],
0.01 % of register 00211 FeedbackSensorMax. represented by 00214 MaxFrequency and 00213 MinFrequency.
Generally, the actual setpoint value represents head, pressure, flow, The actual setpoint, whether it has been set via Grundfos GO, the
temperature and so on depending on how the feedback sensor has pump display, the pump buttons or the fieldbus, can be read from
been set to measure. The unit of measure can be read from register register 00308 ActualSetpoint, and it always reflects the frequency
00209 FeedbackSensorUnit. limitations. It equals the value that the pump actually uses.
It is easy to calculate back and forth between the setpoint in percent
and its scaled value: 1 2 3
Xact[unit] = X set[%] × (rmax - rmin) + rmin
Where: 4 100 %
• rmax = SetpointRangeMax × FeedbackSensorMax ×

FeedbackSensorUnit
• rmin = SetpointRangeMin × FeedbackSensorMax × 5
FeedbackSensorUnit
6 7
1 2 3
4
100%
100%
8
TM070155
5
6
7
0%
Setpoint in open-loop control

TM079761
8 Pos. Description
0% Setpoint 9)
1
(Register 00104)
Setpoint in closed-loop control NomFrequency, Hz
2
(Register 00212)
Pos. Description 3 100 %
1 Setpoint 7) (Register 00104) MaxFrequency
4
2 UserSetpoint 7) (Register 00343) (Register 00214)
3 ActualSetpoint 8) (00308) 5 Xset
4 FeedbackSensorMax (Register 00222) MinFrequency

6
(Register 00213)
5 rmax
7 0%
6 Xset
UserSetpoint 9)
7 Xact 8
(Register 00338)
8 rmin
ActualSetpoint 9)
9
(Register 00308)
7) Percentage of setpoint range.
8) Percentage of sensor maximum. 10 Xact
9) Percentage of fnom.
MAGNA3 40-100 example
SetpointRangeMin: 5 %.
For MGE motors and the CUE drive
SetpointRangeMax: 50 %.
• [fmin; fmax] can be adjusted from the pump display and Grundfos
FeedbackSensorMax: 20.
GO.
FeedbackSensorUnit: m.
• With fmax > fnom a setpoint above 100 % is possible, over
rmax = SetpointRangeMax × FeedbackSensorMax ×
synchronous.
FeedbackSensorUnit = 50 % × 20 × m = 10 m
rmin = SetpointRangeMin × FeedbackSensorMax × For MAGNA3
FeedbackSensorUnit = 5 % × 20 × m = 1 m • [fmin; fmax] are fixed.
Xact[unit] = • fmax always equals fnom.
Xset[%] × (rmax- rmin) + rmin
Xset[%] × (10 m - 1 m) + 1 m
Xset[%] × 9 m + 1 m
If Xset[%] has value 40 %, the pump will have an actual setpoint of
40 % × 9 m + 1 m = 4.6 m.
30
10.4 Alarms and warnings
English (GB)
Address Name Description Code Alarm/warning description
00206 WarningCode Code for E-pump warning. 149 Motor bearing temperature high (Pt100) in non-drive end (NDE)
00205 FaultCode Code for E-pump alarm. 155 Inrush fault
156 Communication fault, internal frequency converter module
In the WarningCode register, the cause of an E-pump warning can
157 Real time clock error
be read. A warning has no influence on the E-pump operation.
In the FaultCode register, the cause of an E-pump alarm can be 161 Sensor supply fault, 5 V
read. An E-pump alarm always leads to a reaction in the E pump 162 Sensor supply fault, 24 V
operation. Usually the E-pump is stopped, but some alarms in some 163 Measurement fault, motor protection
E-pump types have programmable alarm action types.
164 Signal fault, LiqTec sensor
The complete list of possible alarm and warning codes is shown
below. Not all codes apply to all E-pump types. 165 Signal fault, analog input 1
166 Signal fault, analog input 2
Code Alarm/warning description 167 Signal fault, analog input 3
1 Leakage current 175 Signal fault, temperature 2 sensor
2 Missing phase 176 Signal fault, temperature 3 sensor
3 External fault signal 190 Limit exceeded, sensor 1
4 Too many restarts 191 Limit exceeded, sensor 2
7 Too many hardware shutdowns 215 Soft pressure buildup timeout
14 Electronic DC-link protection activated (ERP) 240 Lubricate bearings (specific service information)
16 Other 241 Motor phase failure
29 Turbine operation, impellers forced backwards 242 Automatic motor model recognition failed
30 Change bearings (specific service information)
31 Change varistor(s) (specific service information)
32 Overvoltage
40 Undervoltage
41 Undervoltage transient
42 Cut-in fault (dV/dt)
45 Voltage asymmetry
48 Overload
49 Overcurrent (i_line, i_dc, i_mo)
50 Motor protection function, general shutdown (MPF)
51 Blocked motor or pump
54 Motor protection function, 3 sec. limit
55 Motor current protection activated (MCP)
56 Underload
57 Dry-running
60 Low input power
64 Overtemperature
65 Motor temperature 1 (t_m or t_mo or t_mo1)
66 Control electronics temperature high
67 Temperature too high, internal frequency converter module (t_m)
68 Water temperature high
70 Thermal relay 2 in motor, for example thermistor
72 Hardware fault, type 1
73 Hardware shutdown (HSD)
76 Internal communication fault
77 Communication fault, twin-head pump
80 Hardware fault, type 2
83 Verification error, FE parameter area (EEPROM)
84 Memory access error
85 Verification error, BE parameter area (EEPROM)
88 Sensor fault
89 Signal fault, (feedback) sensor 1
91 Signal fault, temperature 1 sensor
93 Signal fault, sensor 2
96 Setpoint signal outside range
105 Electronic rectifier protection activated (ERP)
106 Electronic inverter protection activated (EIP)
148 Motor bearing temperature high (Pt100) in drive end (DE)
31
11. Modbus RTU commissioning, step-by-step
English (GB)
guides
If the sensor configuration is changed, restart the CIM
module or CIU unit to ensure a correct scaling of the
sensor value.
11.1 Hardware setup, CIM 200
Step Action
1 Install CIM 200 in the Grundfos product according to the product documentation.
Complete the product configuration, for example sensor configuration.
2
This can be done either on the pump control panel, via Grundfos GO.
3 Select the Modbus slave address (1-247).
4 Select the bit rate of the Modbus slave.
5 Select parity and stop bits of the Modbus slave, even parity with 1 stop bit or no parity with 2 stop bits.
6 If necessary, set line termination.
7 Connect the necessary cables from CIM 200 to the Modbus network.
Confirm that the GENIbus LED is permanently green and that the Modbus LED is either off, if no master is actively polling the slave, or flashing
8
green, indicating error-free communication.
CIM 200 is now ready to be accessed via the Modbus network.
11.2 Hardware setup, CIU 200
Step Action
Complete the pump configuration, for example sensor configuration and local mode.
1
This can be done either via Grundfos GO or Grundfos PC Tool E-Products.
2 Select the Modbus slave address (1-247).
3 Select the transmission speed of the Modbus slave.
4 Select parity and stop bits of the Modbus slave, even parity with 1 stop bit or no parity with 2 stop bits.
5 If necessary, set line termination.
6 Connect the GENIbus cable from CIU 200 to the E-pump.
7 Connect the necessary cables from CIU 200 to the Modbus network.
8 Connect the power cable to CIU 200, and switch the unit on.
Confirm that the GENIbus LED is permanently green and that the Modbus LED is either off, if no master is actively polling the slave, or flashing
9
green, indicating error-free communication.
CIU 200 is now ready to be accessed via the Modbus network.
11.3 Hardware setup, CIM 260 data connection
Step Action
2 Fit an antenna to the CIM module SMA connector.
3 Insert the SIM card in CIM 260.
4 Power on the Grundfos product.
5 Observe that LED2 turns permanently green.
Observe that LED1 blinks yellow and changes to yellow pulsing after approximately 30 seconds, indicating that the cellular network connection is
6
working.
To configure CIM 260 for a data connection, follow the instructions in the "CIM 260 SMS commands installation and operating instructions", which
7
you can download from Grundfos Product Center.
To verify the APN settings after completion, use the SMS command "APNSETTINGS".
8 To verify that the data connection is working, use the SMS command "APNSTATUS". The connection state must be "Context active" if ready and
"Connected" if a Modbus TCP master is already communicating.
CIM 260 is now ready to be accessed from a Modbus TCP master via a data connection, or via SMS commands.
Related information
6.1.2 Inserting the SIM card
6.2 Status LEDs
32
11.4 Hardware setup, CIU 260 data connection
English (GB)
Step Action
1 Connect the GENIbus cable from CIU 260 to the Grundfos product. See the CIU quick guide instruction.
2 Fit an antenna to the CIM module SMA connector.
3 Insert the SIM card in CIM 260.
4 Connect the mains cable to CIU 260, see the CIU quick-guide instruction, and power on CIU 260.
5 Power on the Grundfos product.
6 Observe that LED2 turns permanently green, indicating that the GENIbus connection is working.
Observe that LED1 blinks yellow and changes to yellow pulsing after approximately 30 seconds, indicating that the cellular network connection is
7
working.
To configure CIM 260 for a data connection, follow the instructions in the "CIM 260 SMS commands installation and operating instructions", which
8
you can download from Grundfos Product Center.
To verify the APN settings after completion, use the SMS command "APNSETTINGS".
9 To verify that the data connection is working, use the SMS command "APNSTATUS". The connection state must be "Context active" if ready and
"Connected" if a Modbus TCP master is already communicating.
CIU 260 is now ready to be accessed from a Modbus TCP master via a data connection, or via SMS commands.
Related information
6.2 Status LEDs
11.5 CIM 500 Modbus TCP communication setup
Step Action
2 Select position 1 at the protocol rotary switch.
3 Power on the product, and observe LED2 turn permanently green and LED1 remaining off.
4 Complete the pump configuration, for example sensor configuration.
5 Connect one of the CIM 500 Ethernet ports (RJ45) to a PC using an Ethernet cable.
6 Configure the PC Ethernet port to the same subnetwork as CIM 500, for example 192.168.1.1, and the subnet mask to 255.255.255.0.
Open your internet browser and make contact to the CIM 500 webserver.
7
Default: 192.168.1.100
Log on to the webserver. Default:
8 User: admin
Password: Grundfos.
9 In the menu column to the left select: Configuration > Real time Ethernet protocol
10 Type in an IP address belonging to the same subnet as your PC, for example 192.168.1.2.
11 Type in the subnet mask 255.255.255.0, and leave the rest of the settings at their factory default values.
12 Click [Submit] to transfer the new settings, and close the internet browser.
CIM 500 is now ready to be accessed from a Modbus TCP master via one of its Ethernet ports. Use the IP address selected under step 9. The Modbus address
(Unit ID) in the Modbus TCP telegram is not used.
CIM 500 LED1 will be flashing green when Modbus TCP communication takes place.
You can use the two Ethernet ports to daisy chain CIM 500 modules.
It is possible to have connection to the webserver simultaneously with a connection to a Modbus TCP master.
It is possible to have connection to more Modbus TCP masters simultaneously, for example to have connection to PC Tool CIM/CIU while connected to another
Modbus TCP master.
Related information
33
11.6 CIU 500 Modbus TCP communication setup
English (GB)
Step Action
1 Check that both CIU 500 unit and the E-pump are powered off.
2 Remove the front cover of CIU 500.
3 Select position 1 at the CIM 500 module protocol rotary switch.
Connect the GENIbus cable from CIU 500 to the E-pump. See the "CIU, Communication Interface Unit installation and operating instructions" or
4
see the CIU quick guide.
5 Power on CIU 500 and the E-pump, and observe LED2 turn permanently green and LED1 remaining off.
6 Connect one of the CIU 500 Ethernet ports (RJ45) to a PC using an Ethernet cable.
7 Configure the PC Ethernet port to the same subnetwork as CIM 500, for example 192.168.1.1, and the subnet mask to 255.255.255.0.
Open your internet browser and make contact to the CIM 500 webserver.
8
Default: 192.168.1.100.
Log on to the webserver. Default:
9 User: admin
Password: Grundfos.
10 In the menu column to the left select: Configuration > Real time Ethernet protocol
11 Type in an IP address belonging to the same subnet as your PC, for example 192.168.1.2.
12 Type in the subnet mask 255.255.255.0, and leave the rest of the settings at their factory default values.
13 Click [Submit] to transfer the new settings, and close the internet browser.
CIM 500 is now ready to be accessed from a Modbus TCP master via one of its Ethernet ports. Use the IP address selected under step 10. The Modbus address
(Unit ID) in the Modbus TCP telegram is not used.
CIU 500 LED1 will be flashing green when Modbus TCP communication takes place.
You can use the two Ethernet ports to daisy chain CIM 500 modules.
It is possible to have connection to the webserver simultaneously with a connection to a Modbus TCP master.
It is possible to have connection to more Modbus TCP masters simultaneously, for example to have connection to PC Tool CIM/CIU while connected to another
Modbus TCP master.
Related information
12. Detailed descriptions of functionality
12.1 APN
12.1.1 What is APN and Modbus TCP?

An APN connection (Access Point Name) is a wireless, "always on" connection that remains active as long as CIU 260 is within range of the
service. With a data connection, it is possible to establish a wireless connection to the Internet and thus enable a remote connection to a
SCADA system computer or another PC application.
The APN connection itself takes care of the wireless data transfer via the cellular network. It plays the same role as Ethernet in a wired
network. We will refer to an APN connection as a data connection, and it also makes use of the TCP/IP protocol, which enables easy
integration with the Internet. The Modbus TCP protocol is used on the application layer communicating with a TCP port number (default 502).
The difference when compared to the fieldbus protocol Modbus RTU is the exclusion of the 16-bit CRC checksum and the adding of a Modbus
application program header as illustrated.
Modbus RTU telegram
Function
Slave ID Data CRC
code ID
Modbus application program header Modbus TCP/IP data
Function
Transaction ID Protocol ID Length Unit ID Data
TM044907
code ID
Modbus TCP/IP application data unit
Modbus TCP telegram
12.1.2 Subscription
You have to select the service provider and the technical solution that best suits your system, and it must be based on static IP addressing.
You will get the following from the service provider:
• A Subscriber Identity Module (SIM card).
• An Access Point Name (APN), for example "Internet".
• A fixed user name that cannot be changed by the user.
• A fixed password that cannot be changed by the user.
• A static IP address.
Solutions based on a VPN, Virtual Private Network, involve the use of special routers, for example GRE, Generic Routing Encapsulation,
routers, which you also get from the service provider.
34
12.1.3 Installation
English (GB)
To prepare CIU 260 for data communication, some settings have to be made via SMS commands:
• Select Access Point Name:
APN <ASCII string>
This is always mandatory.
• Select Username:
USERNAME <ASCII string>
The need for a user name depends on your operator and the type of subscription.
• Select Password:
PASSWORD <ASCII string>
The need for a password depends on your operator and the type of subscription.
• Setting a SCADA PIN code:
SETSCADACODE <access code>
Will enable write access protection. Default is an empty SCADA PIN code, meaning no protection.
• Activating the SCADA PIN code:
SCADACODE <ON | OFF>.
Default is "Off".
• Selecting the Modbus address:
MODBUSADDR <1-247>
Default value is 231.
To verify the SCADA settings after completion, use the SMS command "SCADA".
Some advanced APN related settings have default values that usually work, but in special cases it might be necessary to change some of
them. This is also done via SMS commands.
• Select Authentication:
AUTHENTICATION <NORMAL | SECURE>
Only used by some service providers. Default value is "Normal".
• Select Connection type:
CONNECTION <SERVER | CLIENT | DISABLE>
Default value is "Server".
• Set data roaming:
DATAROAMING: <ON | OFF>
Default value is "Off".
• Select Modbus TCP port number:
MODBUSPORT <port no.>
Default value is 502.
• Select GENIpro port number:
GENIPROPORT <port no.>
Default value is 49152. This is only relevant when using Grundfos PC Tools.
It is possible to configure the APN connection with a single multi-parameter command:
• SETAPN <parameter 1, parameter 2, parameter 3, …>
- <parameters>: <APN>, <Modbus port>, <GENIproport>, <username>, <password>, <authentication>, <connection>, <data roaming>,
<data silence timeout>
Example
SETAPN Grundfos.dk2.tdc,502,49888,Grundfos,4321,normal,server,off, 60.
To verify the APN settings after completion, use the SMS command "APNSETTINGS". The command "APNSTATUS" can verify if the APN
connection is working.
The connection states have the following meaning:
• "Detached": Trying to locate APN connection service.
• "Attached": APN connection service located.
• "Context active": IP address has been assigned, ready for a client to establish a socket connection.
• "Connected": A client has established a socket connection. The system is ready for TCP/IP data exchange, or already exchanging data.
For details about the use of SMS commands, see "CIM 260 SMS commands", which you can download from Grundfos Product Center.
12.1.4 Operation
When powering on CIU 260 with the correct APN setting, the following APN connection sequence will take place:
1. CIU 260 locates the APN service. The connection state changes from "Detached" to "Attached".
2. CIU 260 attempts to connect to the APN it has been given and requests an IP address. The base station looks through its record of legal
SIM cards and finds the IP address, the address associated with this SIM card, to assign to CIU 260. After CIU 260 has got the IP address,
the connection state changes to "Context active".
35
3. CIU 260 is now ready for a client, for example the SCADA system, to establish a socket connection and begin TCP/IP data exchange.
English (GB)
When a client connects CIU 260, the connection state will change to "Connected", and the cellular connection status LED1 indicates when
data transfer takes place.
When no data is being transferred, the connection states "Attached", "Context active" and "Connected".
All show the same LED1 status (short pulse).
A client, for example SCADA, establishes connection to CIU 260 by specifying the IP address and the TCP port 502. Data transfer is always
initiated from the client in the form of a Modbus TCP telegram embedded in a TCP/IP frame and directed to TCP port 502. To the client
software, the connection to CIU 260 is completely transparent.
The protection against unauthorised data access is high. The access to the APN network from the Internet can only take place via the VPN
tunnel. Moreover, data transfer requires a Modbus master client, knowledge of the Modbus functional profile and the use of a SCADA PIN
code, if enabled.
CIU 260 supervises the APN connection to ensure that it is still working. An automatic procedure ensures restarting of CIU 260 and repetition
of the APN connection sequence in case a deadlock situation has occurred. It also closes down socket connections that are left open by the
client and unused for more than 24 hours.
It is possible to use SMS communication while data communication is active. However in the "Connected" state, the delay time between
reception and reply increases.
A total of three Modbus clients can be connected to the Modbus TCP port of CIU 260 and communicate simultaneously. Each connection,
called a socket connection, is handled independently. If all three sockets are used simultaneously, a "Silence time-out" of only one minute is
used to prevent a complete occupation for a long time.
1 3
2 4
8
5
7
TM047309
Data connection directly from a PC to CIU 260
Pos. Description
1 PC Tool, etc.
2 "Static" IP address
3 Cellular network
4
4 Base station APN
5 CIU 260 with CIM 260 and SIM card
6 Cellular network
7 Setup, status and control commands via SMS
8 Mobile phone
5 8
6 9
5 10
7
4
1 11
15 13
3 12
2
TM047129
14
Cellular connection via VPN tunnel
36
English (GB)
Pos. Description
1 Clients
2 SCADA system
3 PC Tool, etc.
4 LAN
5 GRE router
6 VPN tunnel
7 Internet
8 Cellular operator
9 Cellular network
10 Base station APN
11 "Static" IP address
12 CIU 260 with CIM 260 module and SIM card
13 Cellular network
14 Setup, status and control commands via SMS
15 Mobile phone
Related information
5.5 Status LEDs
13. Modbus RTU telegram examples Example of response from slave to master
Field Value
The Modbus data model states that registers numbered X
are addressed in telegrams as X - 1, for example register Address 0x01
00104 (setpoint) is addressed as 00103 in a Modbus Function code 0x03
telegram.
Byte count 0x06
Note that CRC fields are not shown in the following examples. Register 108 HI 0x00
13.1 Modbus telegram overview Register 108 LO 0x01
The maximum size of a Modbus RTU telegram is 256 bytes. Register 109 HI 0x00
Telegrams must be separated by a silent interval of at least 3.5 Register 109 LO 0x01
character times. Register 110 HI 0x00
The standard Modbus RTU telegram format is shown in the table
Register 110 LO 0x01
below.
In the response, the byte count is six since there are three registers
Slave address Function code Data CRC of two bytes. All three registers hold the value of 0x0001.
1 byte 1 byte 0 to 252 bytes 2 bytes
A telegram starts with the slave address occupying one byte. Then
comes a variable-size data field. For each telegram, a CRC is
calculated and appended to the telegram, two bytes total. All bytes
in the telegram, except for the CRC itself, are included in the check.
Note that the CRC bytes are not shown in the examples in the
following sections.
13.2 Read holding registers, 0x03

This function is used for reading holding registers from the slave.
The request telegram specifies the starting address, that is the
address of the first register to be read, and the number of holding
registers to read. In the telegram, register addresses start from
zero, meaning that registers numbered 0-16 are addressed as 0-15.
Example of request from master to slave

Field Value
Address 0x01
Function code 0x03
Start address HI 0x00
Start address LO 0x6B
Quantity HI 0x00
Quantity LO 0x03
In the request, the slave with address 1 is asked to deliver three

contiguous registers starting from address 0x006b: 107, meaning
register 108.
37
13.3 Read input registers, 0x04 13.4 Write single register, 0x06
English (GB)
This function is used for reading input registers from the slave. Input This function is used for writing a single holding register in the
registers are read-only registers by definition. The request telegram slave. The request telegram specifies the address of the register
specifies the starting address, that is the address of the first register that is to be written. Register addresses start from zero, meaning
to be read, and the number of holding registers to read. In the that a register numbered 10 is addressed as 9.
telegram, register addresses start from zero, meaning that registers The normal response is an echo of the request, indicating that the
numbered 0-16 are addressed as 0-15. value was written.
Example of request from master to slave Example of request from master to slave
Field Value Field Value
Address 0x01 Address 0x01
Function code 0x04 Function code 0x06
Start address HI 0x10 Address HI 0x10
Start address LO 0x10 Address LO 0x00
Quantity HI 0x00 Value HI 0xAF
Quantity LO 0x03 Value LO 0xFE
In the request, the slave with address 1 is asked to deliver three In the request, the slave with address 1 is asked to write the value
contiguous registers starting from address 0x1010: 4112, meaning of 0xAFFE to the register at address 0x1000.
register 4113.
Example of response from slave to master
Field Value
Field Value
Address 0x01
Address 0x01
Function code 0x06
Function code 0x04
Address HI 0x10
Byte count 0x06
Address LO 0x00
Register 4113 HI 0x22
Value HI 0xAF
Value LO 0xFE
Register 4114 LO 0x22 The response is an echo of the request.
13.5 Write multiple registers, 0x10
This function is used for writing a block of contiguous holding
registers in the slave. Register addresses start from zero, meaning
In the response, the byte count is six since there are three registers
that a register numbered 100 is addressed as 99.
of two bytes. All three registers hold the value of 0x2222.
Example of request from master to slave
Field Value
Address 0x01
Function code 0x10
Start address LO 0x20
Quantity HI 0x00
Quantity LO 0x02
Byte count 0x04
Register 33 HI 0x00
Register 33 LO 0x01
Register 34 HI 0xB0
Register 34 LO 0xB0
In the request, the slave with address 1 is asked to write the value
of 0x0001 to the register at address 0x0020 and the value of
0xB0B0 to the register at address 0x0021.

Field Value
Address 0x01
Function code 0x10
Start address LO 0x20
Quantity written HI 0x00
Quantity written LO 0x02
The response returns the function code, starting address and

quantity of registers written.
38
13.6 Diagnostics, 0x08 13.7 Diagnostics register interpretation
English (GB)
Only supported by CIM 200 Modbus RTU. The diagnostics register is interpreted as follows:
This function provides a test for checking the communication
system between the master and the Grundfos slave. It contains a Bit Description
single-byte subcode to identify the test to be performed.
0 Communication failure, with the Grundfos E-pump.
The following subcodes are supported:
1 RESERVED
2 Grundfos E-pump is not supported.
Subcode Name
Modbus address offset is different from default value, i.e. it differs from
Return query data 3
0.
0x00 Data in this request are to be echoed in the response. The
response must be identical to the request, so this function is 4 Using software-defined Modbus transmission speed.
often used to verify Modbus communication. 5 RESERVED
Restart communications 6 RESERVED
0x01 All communication counters are cleared, and the device is
restarted. 7 RESERVED
Return diagnostics register 8 RESERVED

0x02
Returns the 16-bit diagnostics register. 9 RESERVED
Force listen only 10 RESERVED
Forces the device into listen-only mode. This effectively mutes 11 RESERVED
0x04 the device, making it unable to communicate on the network.
To bring the device back to normal mode, a "Restart 12 RESERVED
communications" command, code 0x08, subcode 0x01, must 13 RESERVED
be issued.
14 RESERVED
Clear counters and diagnostics register
0x0A Clears all counters and the diagnostics register. These are 15 RESERVED
also cleared on power-up and restart.
Return bus message count
A bit value of 1 means true, unless otherwise specified. The
0x0B diagnostics register is read using function code 0x08 and subcode
Returns the number of messages detected by the slave.
0x02.
Return bus CRC error count
0x0C
Returns the number of CRC errors in the slave. 13.8 Diagnostics: return query data
Return bus exception count This function is useful to ensure that the communication path and
0x0D Returns the number of Modbus exception responses that the slave configuration are correct. It will echo the request in the
slave has transmitted. response.
Return slave message count In the example, slave address 0x01 is used.
0x0E Returns the number of messages that the slave has
processed. Request from master to slave
Return slave no response count Field Value Description
0x0F Returns the number of messages for which the slave has sent Slave address 0x01 -
no response.
Function code 0x08 Diagnostics
Example of request from master to slave Subcode 0x00 Echo request
Field Value Data 0xAB Test data
Address 0x01 Data 0xCD Test data
Function code 0x08

Subcode 0x00
Field Value Description
Data 0xAB
Slave address 0x01 -
Data 0xCD
Function code 0x08 Diagnostics
The response is identical to the request. Subcode 0x00 Echo request

Data 0xAB Test data
Data 0xCD Test data
Field Value
Address 0x01 If there is no response from the slave, see section Fault finding.
Function code 0x08
Subcode 0x00
Data 0xAB
Data 0xCD
Related information
13.7 Diagnostics register interpretation
39
13.9 Reading the CIM configuration register block 13.10 Setting the setpoint
English (GB)
This section shows how to read the first four registers of the CIM This section shows how to set a new setpoint (reference).
configuration register block. In the example, slave address 0x01 is used, and a value of 55 %
In the example, slave address 0x01 is used. (5500: 0x157C) is set as new setpoint.
Request from master to slave Request from master to slave

Field Value Description Field Value Description
Slave address 0x01 - Slave address 0x01 -
Function code 0x04 Read input registers Function code 0x06 Write single register
Start address HI 0x00 Start address Start address HI 0x00 Setpoint address
Start address LO 0x00 = 0x0001 Start address LO 0x67 = 00104 (0x0068)
Quantity HI 0x00 Number of registers Value HI 0x15 New setpoint value

Quantity LO 0x04 = 0x0004 Value LO 0x7C = 5500 (0x157C)
Example of response from slave to master Example of response from slave to master
Function code 0x04 Read input registers Function code 0x06 Write single register
Byte count 0x08 8 bytes follow Start address HI 0x00 Setpoint address
00001 HI 0x00 SlaveMinimumReplyDelay Start address LO 0x67 = 00104 (0x0068)
00001 LO 0x0A = 0x000A Value HI 0x15 New setpoint value

00002 HI 0x00 RegisterOffset Value LO 0x7C = 5500 (0x157C)
00002 LO 0x00 = 0x0000

If there is no response from the slave, see section CIM/CIU 200
00003 HI 0x00 Reserved value Modbus communication faults or CIM/CIU 260 3G/4G cellular
00003 LO 0x00 = 0x0000 communication faults.
00004 HI 0x00 SoftwareDefinedBitRate Related information
00004 LO 0x04 = 0x0004
14.1.2 CIM/CIU 200 Modbus communication faults
14.2.2 CIM/CIU 260 3G/4G cellular communication faults
If there is no response from the slave, see Fault finding, section
CIM/CIU 200 Modus communication faults or CIM/CIU 260 3G/4G
13.11 Setting the control mode
cellular communication faults.
This section shows how to set a control mode.
Related information In the example, slave address 0x01 is used, and the control mode
14.1.2 CIM/CIU 200 Modbus communication faults is set to 1 (Constant frequency).
Request from master to slave
Function code 0x06 Write single register
Start address HI 0x00 ControlMode address:
Start address LO 0x65 = 00102 (0x0066)
Value HI 0x00 New ControlMode value

Value LO 0x01 = 1 (0x0001)

Function code 0x06 Write single register
Start address HI 0x00 ControlMode address:
Start address LO 0x65 = 00102 (0x0066)
Value HI 0x00 New ControlMode value

Value LO 0x01 = 1 (0x0001)
If there is no response from the slave, see Fault finding,

section CIM/CIU 200 Modbus communication faults or CIM/CIU 260
3G/4G cellular communication faults.
Related information
40
13.12 Starting the E-pump 13.13 Stopping the E-pump
English (GB)
This section shows how to start the E-pump. This section shows how to stop the E-pump.
In the example, slave address 0x01 is used. In the example, slave address 0x01 is used.
Set the ControlRegister to the following values: Set the ControlRegister to the following values:
Bit 0: 1 (set the E-pump to remote mode) Bit 0: 1 (set the E-pump to remote mode)
Bit 1: 1 (start the E-pump) Bit 1: 0 (stop the E-pump)
Bit 2: 0 (do not send a reset fault command) Bit 2: 0 (do not send a reset fault command)
Bit 3: 0 (direction: clockwise rotation) Bit 3: 0 (direction: clockwise rotation)
Bit 4: 0 (do not copy remote settings to local) Bit 4: 0 (do not copy remote settings to local)
Bits 5-15: 0 (reserved values) Bits 5-15: 0 (reserved values)
Hence the value to set is 0b0000000000000011: 0x0003. Hence the value to set is 0b0000000000000001: 0x0001.
Request from master to slave Request from master to slave

Function code 0x06 Write single register Function code 0x06 Write single register
Start address HI 0x00 ControlRegister address: Start address HI 0x00 ControlRegister address:
Start address LO 0x64 00101 (0x0065) Start address LO 0x64 00101 (0x0065)
Value HI 0x00 ControlRegister value: Value HI 0x00 ControlRegister value:

Value LO 0x03 3 (0x0003) Value LO 0x01 1 (0x0001)
Example of response from slave to master Example of response from slave to master
Function code 0x06 Write single register Function code 0x06 Write single register
Start address HI 0x00 ControlRegister address: Start address HI 0x00 ControlRegister address:
Start address LO 0x64 00101 (0x0065) Start address LO 0x64 00101 (0x0065)
Value HI 0x00 ControlRegister value: Value HI 0x00 ControlRegister value:

Value LO 0x03 3 (0x0003) Value LO 0x01 1 (0x0001)
If there is no response from the slave, see section CIM/CIU 200 If there is no response from the slave, see section CIM/CIU 200
Modbus communication faults or CIM/CIU 260 3G/4G cellular Modbus communication faults or CIM/CIU 260 3G/4G cellular
communication faults. communication faults.
Related information Related information

14.1.2 CIM/CIU 200 Modbus communication faults 14.1.2 CIM/CIU 200 Modbus communication faults
14.2.2 CIM/CIU 260 3G/4G cellular communication faults 14.2.2 CIM/CIU 260 3G/4G cellular communication faults
41
English (GB)
14. Fault finding the product
14.1 CIM 200

You can detect faults in CIM 200 by observing the status of the two communication LEDs.
Related information
3.2 CIM 200 Modbus RTU
14.1.1 LED status
CIM 200 fitted in a Grundfos E-pump

Fault (LED status) Possible cause Remedy
CIM 200 is fitted incorrectly in the Grundfos E-
Both LED1 and LED2 remain off when pump. Ensure that CIM 200 is fitted and connected correctly.
the power supply is connected.
CIM 200 is defective. Replace CIM 200.
LED2 for internal communication is No internal communication between CIM 200
Ensure that CIM 200 is fitted correctly in the Grundfos E-pump.
flashing red. and the Grundfos E-pump.
LED2 for internal communication is CIM 200 does not support the Grundfos E-pump
Contact the nearest Grundfos company.
permanently red. connected.
• Check the transmission speed, switches SW4 and SW5. If the
switches are set to "software-defined", an invalid value may have
The Modbus LED1 is permanently been set via Modbus. Try one of the preselected transmission
Fault in the CIM 200 Modbus configuration. speeds, for example 19200 bit/s.
red.
• Check that the Modbus address, switches SW6 and SW7, has a
valid value [1-247].
• Check the transmission speed, switches SW4 and SW5.
• Check the parity setting, switch SW3.
Fault in the Modbus communication (fault in
The Modbus LED1 is flashing red. • Check the cable connection between CIM 200 and the Modbus
parity or cyclic redundancy check).
network.
• Check the termination resistor settings, switches SW1 and SW2.
CIM 200 fitted in CIU 200

Both LED1 and LED2 remain off when
CIU 200 is defective. Replace CIU 200.
the power supply is connected.
• Check the cable connection between the E-pump and CIU 200.
The LED2 for internal communication No internal communication between CIU 200
• Check that the individual conductors have been fitted correctly.
is flashing red. and the E-pump
• Check the power supply to the E-pump.
The LED2 for internal communication CIU 200 does not support the E pump which is
Contact the nearest Grundfos company.
is permanently red. connected.
• Check the transmission speed, switches SW4 and SW5. If the
switches are set to "software-defined", an invalid value may have
The Modbus LED1 is permanently been set via Modbus. Try one of the preselected transmission
Fault in the CIM 200 Modbus configuration. speeds, for example 19200 bit/s.
red.
• Check that the Modbus address, switches SW6 and SW7 has a
valid value [1-247].
• Check the transmission speed, switches SW4 and SW5.
• Check the parity setting, switch SW3.
Fault in the Modbus communication (fault in
The Modbus LED1 is flashing red. • Check the cable connection between CIM 200 and the Modbus
parity or cyclic redundancy check).
network.
• Check the termination resistor settings, switches SW1 and SW2.
Related information
42
English (GB)
Fault Possible cause Remedy
• Check the visual diagnostics on the Modbus slave. Is
the Grundfos GENIbus LED flashing green and the
Modbus LED off or flashing green?
• Ensure that the cable between the Modbus master and
the Modbus slave is connected correctly. See section
CIM 200 Modbus RTU setup for wiring
recommendations.
• Ensure that the slave address is configured correctly,
and that the correct slave address is used in the
Configuration or wiring error. Modbus master poll. See section Modbus address
selection for slave address selection.
• Ensure that the transmission speed and stop bit/parity
The slave does not respond to
settings are configured correctly in both master and
telegrams.
slave.
• Ensure that each end of the Modbus trunk cable is
terminated, if necessary. See section Termination
resistor for line termination of the Grundfos slave.
• Ensure that the bus topology for a Modbus network is
correct.
Either send a restart communications diagnostics
The slave may be in listen-only mode.
command, or restart the E-pump manually.
If the holding register of address 00001
Increase the time-out span in the master in order to
"SlaveMinimumReplyDelay" is set too high, the master may
communicate.
time out before receiving the response from the slave.
See section Modbus function code overview for supported
The slave responds with exception The master is trying to use an unsupported function in the function codes. Note that reading and writing coils are not
response 0x01: "Invalid function". module or unit. supported, so only register functions and diagnostics are
valid.
The master is trying to read or write an invalid data
address. If a master tries to read register addresses that
are not listed in the tables, the slave responds with this
exception response. Some masters may automatically try to • Avoid reading or writing invalid data addresses.
read large blocks in one telegram, which will cause
problems if some of the registers in the block are not • Make sure that register X is addressed as X - 1 in
supported. An example would be reading the CIM Modbus telegrams, according to the Modbus standard.
The slave responds with exception
response 0x02: "Invalid data address". configuration and CIM status blocks in one telegram. This is
not possible since there are unused addresses among the
blocks.
Read the holding register at address 00002 "Register
The register address offset may have been changed from Offset" to see if this value is different from 0. If so, write the
default. value 0 to this address to make the slave return to the
default used in this functional profile.
The value is unavailable. A data value of 0xFFFF does not
necessarily indicate an error condition. It means that the See section Modbus register addresses for available data.
The slave returns data value 0xFFFF value is unavailable from the E-pump.
(65535).
The E-pump is not configured to show the value or lacks a See section Pump data register block for data values that
sensor to read the value. require a sensor.
Set the transmission speed switches to "Software-defined".
Configuration error. Otherwise, the value in register 0004 is ignored by the
The slave does not change Modbus slave.
transmission speed with register 0004.
See section Setting the Modbus transmission speed for
An invalid value may be set in register 00004.
invalid values, and set correct value in register 00004.
Related information
43
14.2 CIM/CIU 260
English (GB)
You can detect faults in CIU 260 by observing the status of the two communication LEDs.
Related information
3.3 CIM 260 3G/4G cellular Modbus
14.2.1 LED status
CIU 260 connected to an E-pump

Both LED1 and LED2 remain off when the power
supply is connected.
• Check the cable connection between the E-pump
and CIU 260.
No internal communication between CIU 260 and
The LED2 for internal communication is flashing red. • Check that the individual conductors have been
the E-pump.
fitted correctly.
• Check the power supply to the E-pump.
CIU 260 does not support the connected version of
LED2 for internal communication is permanently red. Contact the nearest Grundfos company.
the E-pump.
The SIM card has not been inserted. Insert the SIM card.
The SIM card has not been inserted correctly. Insert the SIM card.
The SIM card PIN code is not correct. Enter the correct PIN code.
LED1 for cellular communication is flashing yellow. • Check the connection to the antenna.
• Check the cellular coverage of the area using for
No connection to the cellular network. instance a mobile phone.
• Use an external antenna and experiment with the
position.
The LED1 for cellular communication is pulsating Follow the configuration procedure in "CIM 260 SMS
yellow with single pulse, but CIM 260 cannot send or CIM 260 has not been initialised. commands", which you can download from Grundfos
receive SMS messages. Product Center.

Ensure that CIM 260 is fitted and connected
Both LED1 and LED2 remain off when the power CIM 260 is fitted incorrectly in the Grundfos E-pump.
correctly.
CIM 260 is defective. Replace CIM 260.
No internal communication between CIM 260 and Ensure that the CIM 260 is fitted correctly in the
LED2 for internal communication is flashing red.
the Grundfos E-pump. Grundfos E-pump.
CIM 260 does not support the Grundfos E-pump
connected.
Insert the SIM card.
The SIM card has not been inserted.
See section Inserting the SIM card.
Insert the SIM card.
The SIM card has not been inserted correctly.
Enter the correct PIN code.
LED1 for cellular communication is flashing yellow. The SIM card PIN code is not correct.
• Check the connection to the antenna.
• Check the cellular coverage of the area using for
No connection to the cellular network. instance a mobile phone.
• Use an external antenna and experiment with
the position.
The LED1 for cellular communication is pulsating Follow the configuration procedure in "CIM 260 SMS
yellow with single pulse, but CIM 260 cannot send or CIM 260 has not been initialised. commands", which you can download from
receive SMS messages. Grundfos Product Center.
Related information
6.2 Status LEDs
44
English (GB)
• Ensure that CIU 260 has connection to the
cellular network. LED1 must be pulsing yellow. If
the LED1 signal is incorrect, see section CIM
260 3G/4G cellular Modbus setup for correct
installation of the CIM 260.
Configuration or installation error.
• Ensure that the correct slave address is used in
the Modbus master poll.
See register 00003
The slave does not respond to telegrams. SoftwareDefinedModbusAddress (factory value
is 00231).
Either send a restart communications diagnostics
The slave may be in listen-only mode.
command, or restart the E-pump manually.
If the holding register of address 00001
Increase the reply delay in the master, or reduce the
"SlaveMinimumReplyDelay" is set too high, the master
"SlaveMinimumReplyDelay" in order to
may time out before receiving the response from the
communicate.
slave.
See section Modbus RTU telegram examples for
The slave responds with exception response 0x01: The master is trying to use an unsupported function in supported function codes. Note that reading and
"Invalid function". CIM/CIU 260. writing coils are not supported, so only register
functions and diagnostics are valid.
address. If a master tries to read register addresses
that are not listed in the tables, the slave responds with
this exception response. Some masters may Avoid reading or writing invalid data addresses.
The slave responds with exception response 0x02: automatically try to read large blocks in one telegram, Make sure that register X is addressed as X - 1 in
"Invalid data address". which will cause problems if some of the registers in Modbus telegrams, according to the Modbus
the block are not supported. An example would be standard.
reading the CIM configuration and CIM status register
blocks in one telegram. This is not possible since there
are unused addresses among the blocks.
The availability of data will in some cases depend on a
configuration or the actual conditions of the system.
See section Modbus register addresses for available
For example trying to request data from an E-pump
data.
The slave returns data value 0xFFFF (65535). which is not present will return "data not available"
(0xFFFF)).
With its present configuration or operating mode, the See section Pump data register block for data
E-pump is unable to supply the requested data. values that require a sensor.
Write access requires a correct PIN code
CIU 260 is SCADA PIN-code-protected (GeneralStatus (ScadaPinCode, register 00011). Writing the correct
The slave does not react to control actions or to
register 00029, bit 0: 1), and an incorrect PIN code has PIN code value triggers the write access control,
writing of settings.
been written. and write access is open, which can be verified with
GeneralStatus, register 00029, bit 1: 1.
Related information
6. CIM 260 3G/4G cellular Modbus setup
13. Modbus RTU telegram examples
45
14.3 CIM 500
English (GB)
You can detect faults in CIM 500 by observing the status of the two communication LEDs.
Related information
14.3.1 LED status
CIU 500 connected to an E-pump
Both LED1 and LED2 remain off when the power CIM 500 is fitted incorrectly in the Grundfos product. Check that CIM 500 is fitted and connected correctly.
supply is connected. CIM 500 is defective. Replace CIM 500.
No internal communication between CIM 500 and Check that CIM 500 is fitted correctly in the
LED2 for internal communication is flashing red.
the Grundfos product. Grundfos product.
connected.
Check that the rotary switch SW1 is set to 1.
The Modbus LED1 is permanently red. Fault in the CIM 500 Modbus TCP configuration. Check that Modbus TCP IP address configuration is
correct.
LED1 is permanently red and green at the same
Error in the firmware download. Use the webserver to download the firmware again.
time.
Memory fault. Replace CIM 500.
time.

Both LED1 and LED2 remain off when the power
• Check the cable connection between the
Grundfos product and CIU 500.
No internal communication between CIU 500 and
LED2 for internal communication is flashing red. • Check that the individual conductors have been
fitted correctly, for example not reversed.
• Check the power supply to the Grundfos product.
connected.
Check that the rotary switch SW1 is set to 1.
The Ethernet LED1 is permanently red. Fault in the CIM 500 Modbus TCP configuration. Check that Modbus TCP IP address configuration is
correct.
Error in the firmware download. Use the webserver to download the firmware again.
time.
Memory fault. Replace CIM 500.
time.
46
14.3.2 CIM/CIU 500 Modbus TCP communication faults
English (GB)
• Check the visual diagnostics on the Modbus
slave. Normal conditions are that the Grundfos
GENIbus LED2 is permanently green and that
the Modbus TCP LED1 is off or flashing green. If
not, see section LED status.
The slave does not respond to telegrams. Configuration or wiring error. • Make sure that the cable between the Modbus
TCP master and the Modbus slave is connected
correctly.
• Ensure that the slave IP address is configured
correctly, and that the correct slave IP address is
used in the Modbus master poll.
Modbus function code overview for supported
The slave responds with exception response 0x01 The master is trying to use an unsupported function function codes. Note that reading and writing coils
"Invalid function". in CIM/CIU 500. are not supported, so only register functions and
diagnostics are valid.
address. If a master tries to read register addresses
that are not listed in the tables, the slave responds
with this exception response. Some masters may
Avoid reading or writing invalid data addresses.
automatically try to read large blocks in one
Ensure that a block of registers starting at address X
telegram, which will cause problems if some of the
is addressed as X - 1 in Modbus telegrams,
registers in the block are not supported. An example
according to the Modbus standard.
The slave responds with exception response 0x02 would be reading the CIM configuration and CIM
"Invalid data address". status blocks in one telegram. This is not possible
since there are unused addresses among the
blocks.
Read the holding register at address 00002
"Register Offset" to see if this value is different from
The register address offset may have been changed
0. If so, write the value 0 to this address to make the
from default.
slave return to the default used in this functional
profile.
The value is unavailable. A data value of 0xFFFF
does not necessarily indicate an error condition. It See section Modbus register addresses for available
means that the value is unavailable from the E- data.
The slave returns data value 0xFFFF (65535). pump.
The E-pump is not configured to show the value or See section Pump data register block for data values
lacks a sensor to read the value. that require a sensor.
The E-pump might be in "Local" mode, in which
Set the E-pump in "Remote mode" by setting
case Operating mode, Control mode and Setpoint
The slave does not react to control actions or to register 00101 bit 0 RemoteAccessReq to "1" (=
cannot be changed from bus. Register 00201 bit 8
writing of settings. Remote). The E-pump should show "Controlled from
AccessMode must be "1" (=Remote) for bus control
bus" when status is read in Grundfos GO.
to be active.
Related information
7.3 Setting the IP addresses
14.3.1 LED status
47
15. Modbus RTU rotary switch addresses
English (GB)
Modbus Modbus Modbus Modbus Modbus

SW6 SW7 SW6 SW7 SW6 SW7 SW6 SW7 SW6 SW7
address address address address address
1 0 1 51 3 3 101 6 5 151 9 7 201 C 9
2 0 2 52 3 4 102 6 6 152 9 8 202 C A
3 0 3 53 3 5 103 6 7 153 9 9 203 C B
4 0 4 54 3 6 104 6 8 154 9 A 204 C C
5 0 5 55 3 7 105 6 9 155 9 B 205 C D
6 0 6 56 3 8 106 6 A 156 9 C 206 C E
7 0 7 57 3 9 107 6 B 157 9 D 207 C F
8 0 8 58 3 A 108 6 C 158 9 E 208 D 0
9 0 9 59 3 B 109 6 D 159 9 F 209 D 1
10 0 A 60 3 C 110 6 E 160 A 0 210 D 2
11 0 B 61 3 D 111 6 F 161 A 1 211 D 3
12 0 C 62 3 E 112 7 0 162 A 2 212 D 4
13 0 D 63 3 F 113 7 1 163 A 3 213 D 5
14 0 E 64 4 0 114 7 2 164 A 4 214 D 6
15 0 F 65 4 1 115 7 3 165 A 5 215 D 7
16 1 0 66 4 2 116 7 4 166 A 6 216 D 8
17 1 1 67 4 3 117 7 5 167 A 7 217 D 9
18 1 2 68 4 4 118 7 6 168 A 8 218 D A
19 1 3 69 4 5 119 7 7 169 A 9 219 D B
20 1 4 70 4 6 120 7 8 170 A A 220 D C
21 1 5 71 4 7 121 7 9 171 A B 221 D D
22 1 6 72 4 8 122 7 A 172 A C 222 D E
23 1 7 73 4 9 123 7 B 173 A D 223 D F
24 1 8 74 4 A 124 7 C 174 A E 224 E 0
25 1 9 75 4 B 125 7 D 175 B F 225 E 1
26 1 A 76 4 C 126 7 E 176 B 0 226 E 2
27 1 B 77 4 D 127 7 F 177 B 1 227 E 3
28 1 C 78 4 E 128 8 0 178 B 2 228 E 4
29 1 D 79 4 F 129 8 1 179 B 3 229 E 5
30 1 E 80 5 0 130 8 2 180 B 4 230 E 6
31 1 F 81 5 1 131 8 3 181 B 5 231 E 7
32 2 0 82 5 2 132 8 4 182 B 6 232 E 8
33 2 1 83 5 3 133 8 5 183 B 7 233 E 9
34 2 2 84 5 4 134 8 6 184 B 8 234 E A
35 2 3 85 5 5 135 8 7 185 B 9 235 E B
36 2 4 86 5 6 136 8 8 186 B A 236 E C
37 2 5 87 5 7 137 8 9 187 B B 237 E D
38 2 6 88 5 8 138 8 A 188 B C 238 E E
39 2 7 89 5 9 139 8 B 189 B D 239 E F
40 2 8 90 5 A 140 8 C 190 B E 240 F 0
41 2 9 91 5 B 141 8 D 191 B F 241 F 1
42 2 A 92 5 C 142 8 E 192 C 0 242 F 2
43 2 B 93 5 D 143 8 F 193 C 1 243 F 3
44 2 C 94 5 E 144 9 0 194 C 2 244 F 4
45 2 D 95 5 F 145 9 1 195 C 3 245 F 5
46 2 E 96 6 0 146 9 2 196 C 4 246 F 6
47 2 F 97 6 1 147 9 3 197 C 5 247 F 7
48 3 0 98 6 2 148 9 4 198 C 6
49 3 1 99 6 3 149 9 5 199 C 7
50 3 2 100 6 4 150 9 6 200 C 8
Example: To set the slave address to the value 142, set the rotary It is very important to ensure that two devices do not have
switches SW6 and SW7 to "8" and "E", respectively. Note that 0 is the same address on the network. If two devices have the
not a valid slave address as this is used for broadcasting. same address, the result will be an abnormal behaviour of
the whole serial bus.
48
16. Disposing of the product
English (GB)
This product or parts of it must be disposed of in an environmentally
sound way.
1. Use the public or private waste collection service.
2. If this is not possible, contact the nearest Grundfos company or
service workshop.
The crossed-out wheelie bin symbol on a product means that it

must be disposed of separately from household waste. When
a product marked with this symbol reaches its end of life, take
it to a collection point designated by the local waste disposal
authorities. The separate collection and recycling of such
products will help protect the environment and human health.
See also end-of-life information at www.grundfos.com/product-

recycling.
49
17. Grundfos alarm and warning codes
English (GB)
This is a complete list of alarm and warning codes for Grundfos products. For the codes supported by this product, see the alarms and
warnings section.
Code Description Code Description Code Description

1 Leakage current 2 Missing phase 3 External fault signal
4 Too many restarts 5 Regenerative braking 6 Mains fault
7 Too many hardware shutdowns 8 PWM switching frequency reduced 9 Phase sequence reversal
Time for service (general service
10 Communication fault, pump 11 Water-in-oil fault (motor oil) 12
information)
Electronic DC-link protection activated Communication fault, main system
13 Moisture alarm, analog 14 15
(ERP) (SCADA)
16 Other 17 Performance requirement cannot be met 18 Commanded alarm standby (trip)
19 Diaphragm break (dosing pump) 20 Insulation resistance low 21 Too many starts per hour
22 Moisture switch alarm, digital 23 Smart trim gap alarm 24 Vibration
Load continues even if the motor has External motor protector activated
25 Setup conflict 26 27
been switched off (for example MP 204)
Turbine operation (impellers forced Change bearings
28 Battery low 29 30
backwards) (specific service information)
Change varistor(s) Soon time for service
31 32 Overvoltage 33
(specific service information) (general service information)
34 No priming water 35 Gas in pump head, de-aerating problem 36 Outlet valve leakage
37 Inlet valve leakage 38 Vent valve defective 39 Valve stuck or defective
40 Undervoltage 41 Undervoltage transient 42 Cut-in fault (dV/dt)
43 - 44 - 45 Voltage asymmetry
46 - 47 - 48 Overload
Motor-protection function, general
49 Overcurrent (i_line, i_dc, i_mo) 50 51 Blocked motor or pump
shutdown (MPF)
52 Motor slip high 53 Stalled motor 54 Motor-protection function, 3 sec. limit
Motor current protection activated
55 56 Underload 57 Dry running
(MCP)
58 Low flow 59 No flow 60 Low input power
61 - 62 - 63 -
Motor temperature 1 Temperature, control electronics
64 - 65 66
(t_m or t_mo or t_mo1) (t_e)
Temperature too high, internal frequency External temperature or water Thermal relay 1 in motor, for example
67 68 69
converter module (t_m) temperature (t_w) Klixon
Thermal relay 2 in motor, for example Motor temperature 2
70 71 72 Hardware fault, type 1
thermistor (Pt100, t_mo2)
73 Hardware shutdown (HSD) 74 Internal supply voltage too high 75 Internal supply voltage too low
76 Internal communication fault 77 Communication fault, twin-head pump 78 Fault, speed plug
79 Functional fault, add-on module 80 Hardware fault, type 2 81 Verification error, data area (RAM)
Verification error, code area (ROM, Verification error, FE parameter area
82 83 84 Memory access error
FLASH) (EEPROM)
Verification error, BE parameter area
85 86 Fault (add-on) I/O module 87 -
(EEPROM)
88 Sensor fault 89 Signal fault, (feedback) sensor 1 90 Signal fault, speed sensor
91 Signal fault, temperature sensor 1 92 Calibration fault, (feedback) sensor 93 Signal fault, sensor 2
94 Limit exceeded, sensor 1 95 Limit exceeded, sensor 2 96 Setpoint signal outside range
97 Signal fault, setpoint input 98 Signal fault, input for setpoint influence 99 Signal fault, input for analog setpoint
RTC time synchronisation with cellular
100 101 - 102 Dosing pump not ready
network occurred
Electronic rectifier protection activated
103 Emergency stop 104 Software shutdown 105
(ERP)
Electronic inverter protection activated
106 107 - 108 -
(EIP)
109 - 110 Skew load, electrical asymmetry 111 Current asymmetry
Motor heater function activated (frost
112 Cosφ too high 113 Cosφ too low 114
protection)
Too many grinder reversals or grinder
115 116 Grinder motor overtemperature 117 Intrusion (door opened)
reversal attempt failed
Auxiliary winding fault
118 Signal fault, hydrogen sulfide H2S sensor 119 Signal fault, analog input AI4 120
(single phase motors)
50
English (GB)
Auxiliary winding current too high (single- Auxiliary winding current too low (single- Start capacitor, low
121 122 123
phase motors) phase motors) (single-phase motors)
124 Run capacitor, low (single-phase motors) 125 Signal fault, outdoor temperature sensor 126 Signal fault, air temperature sensor
Signal fault, shunt relative pressure
127 128 Strainer clogged 129 -
sensor
130 - 131 - 132 -
133 - 134 - 135 -
136 - 137 - 138 -
139 - 140 - 141 -
Motor temperature 3
142 - 143 - 144
(Pt100, t_mo3)
Bearing temperature high (Pt100), in Bearing temperature high (Pt100), middle Bearing temperature high (Pt100), bottom
145 146 147
general or top bearing bearing bearing
Motor bearing temperature high (Pt100) Motor bearing temperature high (Pt100)
148 149 150 Fault (add-on) pump module
in drive end (DE) in non-drive end (NDE)
151 Fault, display (HMI) 152 Communication fault, add-on module 153 Fault, analog output
Communication fault, internal frequency
154 Communication fault, display 155 Inrush fault 156
converter module
CIM fault (Communication Interface
157 Real-time clock out of order 158 Hardware circuit measurement fault 159
Module)
160 Cellular modem, SIM card fault 161 Sensor supply fault, 5 V 162 Sensor supply fault, 24 V
163 Measurement fault, motor protection 164 Signal fault, LiqTec sensor 165 Signal fault, analog input 1
166 Signal fault, analog input 2 167 Signal fault, analog input 3 168 Signal fault, pressure sensor
169 Signal fault, flow sensor 170 Signal fault, water-in-oil (WIO) sensor 171 Signal fault, moisture sensor
Signal fault, rotor position sensor (Hall
172 Signal fault, atmospheric pressure sensor 173 174 Signal fault, rotor origo sensor
sensor)
Signal fault, temperature sensor 2 Signal fault, temperature sensor 3
175 176 177 Signal fault, Smart trim gap sensor
(t_mo2) (t_mo3)
Signal fault, bearing temperature sensor Signal fault, bearing temperature sensor
178 Signal fault, vibration sensor 179 180
(Pt100), general or top bearing (Pt100), middle bearing
Signal fault, PTC sensor Signal fault, bearing temperature sensor
181 182 183 Signal fault, extra temperature sensor
(short-circuited) (Pt100), bottom bearing
184 Signal fault, general-purpose sensor 185 Unknown sensor type 186 Signal fault, power meter sensor
187 Signal fault, energy meter 188 Signal fault, user-defined sensor 189 Signal fault, level sensor
Limit exceeded, sensor 1 Limit exceeded, sensor 2 Limit exceeded, sensor 3
190 (for example alarm level in WW 191 (for example high level in WW 192 (for example overflow level in WW
application) application) application)
Limit exceeded, sensor 4
193 (for example low level in WW/tank filling 194 Limit exceeded, sensor 5 195 Limit exceeded, sensor 6
application)
Operation with increased power
196 Operation with reduced efficiency 197 Operation with reduced pressure 198
consumption
Process out of range (monitoring,
199 200 Application alarm 201 External sensor input high
estimation, calculation, control)
202 External sensor input low 203 Alarm on all pumps 204 Inconsistency between sensors
205 Level float switch sequence inconsistency 206 Water shortage, level 1 207 Water leakage
208 Cavitation 209 Non-return valve fault 210 High pressure
Diaphragm tank precharge pressure out
211 Low pressure 212 213 VFD not ready
of range
214 Water shortage, level 2 215 Soft pressure buildup time-out 216 Pilot pump alarm
217 Alarm, general-purpose sensor high 218 Alarm, general-purpose sensor low 219 Pressure relief not adequate
220 Fault, motor contactor feedback 221 Fault, mixer contactor feedback 222 Time for service, mixer
Pump fault, due to auxiliary component or
223 Time for service, mixer 224 225 Communication fault, pump module
general fault
226 Communication fault, I/O module 227 Combi event 228 Night flow max. limit exceeded
Ethernet: No IP address from DHCP
229 Water on floor 230 Network alarm 231
server
232 Ethernet: Auto-disabled due to misuse 233 Ethernet: IP address conflict 234 Backup pump alarm
235 Gas detected 236 Pump 1 fault 237 Pump 2 fault
Lubricate bearings
238 Pump 3 fault 239 Pump 4 fault 240
(specific service information)
Motor relay has been forced
241 Motor phase failure 242 Automatic motor model recognition failed 243
(manually operated or commanded)
51
English (GB)

User-defined relay has been forced
244 Fault, On/Off/Auto switch 245 Pump continuous runtime too long 246
(manually operated or commanded)
Power-on notice, (device or system has
247 248 Fault, battery/UPS 249 User-defined event 1
been switched off)
250 User-defined event 2 251 User-defined event 3 252 User-defined event 4
SMS data from DDD sensor not received
253 254 Inconsistent data model
within time limit
52
Appendix A
Appendix A
A.1. Webserver configuration
The built-in webserver offers easy monitoring of the CIM 500 module and makes it possible to configure the selected Industrial Ethernet
protocol. Using the webserver, you can also update the firmware of the CIM 500 module and store or restore settings, among other functions.
To connect a PC to CIM 500, proceed as follows:
1. Connect the PC and the module using an Ethernet cable.
2. Configure the Ethernet port of the PC to the same subnetwork as CIM 500, for example 192.168.1.101.
3. Open a standard Internet browser and type 192.168.1.100 in the URL field.
A.1.1. How to configure an IP address on your PC using Windows 10

1. Search for "Ethernet" in Windows.
2. Select "Change Ethernet setting".
3. Select "Change adapter options".
4. Right-click "Ethernet" and select "Properties".
5. Select properties for "Internet Protocol Version 4 (TCP/IPv4)".
6. Select the "Alternate Configuration" tab and enter the user-configured IP address and subnet mask you would like to assign to your PC.
TM057422
Example from windows 10
53
A.2. Login
Appendix A
For administration of username and password, see also A. 4. User Management.
If you experience problems with logging in to the webserver after a firmware update, perform a factory reset.
TM074522
Login
Object Description
Enter username.
Username
Default: admin.
Enter password. Default: Grundfos.
After the first log in, you are forced to change the password. The password must contain:
• at least 8 and maximum 20 characters
• at least one lower case letter
Password
• at least one upper case letter
• at least one numeric or special character.
When logging in, you have four attempts before a back-off algorithm starts an exponentially increasing time delay
between each attempt. Power cycling CIM 500 resets the back-off algorithm.
Related information
A.4. User Management
54
A.3. Modbus TCP configuration
Appendix A
This web page is used to configure all the parameters relevant to the Modbus TCP protocol standard.
TM074523
Real Time Ethernet Protocol Configuration - Modbus TCP
Object Description
The default value is 502, the official IANA-assigned Modbus TCP port number. The number 502 is always active implicitly.
TCP Port Number
If you select another value in the webserver configuration field, both the new value and value 502 will be active.
Configuration of the static IP address if a DHCP server is not used. Modbus TCP is not allowed to share the IP address with
IP Address
the CIM 500 webserver.
Subnet Mask Configuration of the subnet mask if a DHCP server is not used.
Gateway Configuration of the gateway address if a DHCP server is not used.
The module can be configured to automatically obtain its Modbus TCP network settings from a DHCP server if available on
Use DHCP the network.
Default: DHCP disabled. "Use DHCP" is unchecked.
55
A.4. User Management
Appendix A
A login is required for any change of the CIM 500 settings, and this web page is used to configure the username and password.
It is only possible to configure one user.
TM074527
User management
Related information
A.2. Login
A.5. Update
You can update the firmware by means of the built-in webserver. The binary file is supplied by Grundfos.
To make installation and configuration easier, you can upload the configuration to a PC for backup or distribution to multiple modules.
If you experience problems with logging in to the webserver after a firmware update, perform a factory reset.
TM074526
Update
56
Appendix A
Object Description
Firmware Path to binary firmware image that can be used for updating the module.
Update Click [Update] to start the update. The procedure takes approximately one minute.
File Path to the configuration file.
Download to module Click here to transfer the configuration file to the module.
Upload from device Click here to upload the configuration of the module to a file on your PC.
Restart module By pressing this button, the CIM 500 module performs a power-up reset.
57
Argentina Estonia Lithuania South Africa
Grundfos companies
Bombas GRUNDFOS de Argentina S.A. GRUNDFOS Pumps Eesti OÜ GRUNDFOS Pumps UAB GRUNDFOS (PTY) LTD
Ruta Panamericana km. 37.500industin Peterburi tee 92G Smolensko g. 6 16 Lascelles Drive, Meadowbrook Estate
1619 - Garín Pcia. de B.A. 11415 Tallinn LT-03201 Vilnius 1609 Germiston, Johannesburg
Tel.: +54-3327 414 444 Tel.: + 372 606 1690 Tel.: + 370 52 395 430 Tel.: (+27) 10 248 6000
Fax: +54-3327 45 3190 Fax: + 372 606 1691 Fax: + 370 52 395 431 Fax: (+27) 10 248 6002
E-mail: [email protected]
Australia Finland Malaysia
GRUNDFOS Pumps Pty. Ltd. OY GRUNDFOS Pumput AB GRUNDFOS Pumps Sdn. Bhd. Spain
P.O. Box 2040 Trukkikuja 1 7 Jalan Peguam U1/25 Bombas GRUNDFOS España S.A.
Regency Park FI-01360 Vantaa Glenmarie industrial Park Camino de la Fuentecilla, s/n
South Australia 5942 Tel.: +358-(0) 207 889 500 40150 Shah Alam, Selangor E-28110 Algete (Madrid)
Tel.: +61-8-8461-4611 Tel.: +60-3-5569 2922 Tel.: +34-91-848 8800
Fax: +61-8-8340-0155 France Fax: +60-3-5569 2866 Fax: +34-91-628 0465
Pompes GRUNDFOS Distribution S.A.
Austria Parc d’Activités de Chesnes Mexico Sweden
GRUNDFOS Pumpen Vertrieb Ges.m.b.H. 57, rue de Malacombe Bombas GRUNDFOS de México GRUNDFOS AB
Grundfosstraße 2 F-38290 St. Quentin Fallavier (Lyon) S.A. de C.V. Box 333 (Lunnagårdsgatan 6)
A-5082 Grödig/Salzburg Tel.: +33-4 74 82 15 15 Boulevard TLC No. 15 431 24 Mölndal
Tel.: +43-6246-883-0 Fax: +33-4 74 94 10 51 Parque industrial Stiva Aeropuerto Tel.: +46 31 332 23 000
Fax: +43-6246-883-30 Apodaca, N.L. 66600 Fax: +46 31 331 94 60
Germany Tel.: +52-81-8144 4000
Belgium GRUNDFOS GMBH Fax: +52-81-8144 4010 Switzerland
N.V. GRUNDFOS Bellux S.A. Schlüterstr. 33 GRUNDFOS Pumpen AG
Boomsesteenweg 81-83 40699 Erkrath Netherlands Bruggacherstrasse 10
B-2630 Aartselaar Tel.: +49-(0) 211 929 69-0 GRUNDFOS Netherlands CH-8117 Fällanden/ZH
Tel.: +32-3-870 7300 Fax: +49-(0) 211 929 69-3799 Veluwezoom 35 Tel.: +41-44-806 8111
Fax: +32-3-870 7301 E-mail: [email protected] 1326 AE Almere Fax: +41-44-806 8115
Service in Deutschland: Postbus 22015
Belarus [email protected] 1302 CA ALMERE Taiwan
Представительство ГРУНДФОС в Минске Tel.: +31-88-478 6336 GRUNDFOS Pumps (Taiwan) Ltd.
220125, Минск Greece Fax: +31-88-478 6332 7 Floor, 219 Min-Chuan Road
ул. Шафарнянская, 11, оф. 56, БЦ «Порт» GRUNDFOS Hellas A.E.B.E. E-mail: [email protected] Taichung, Taiwan, R.O.C.
Тел.: +375 17 397 397 3 20th km. Athinon-Markopoulou Av. Tel.: +886-4-2305 0868
+375 17 397 397 4 P.O. Box 71 New Zealand Fax: +886-4-2305 0878
Факс: +375 17 397 397 1 GR-19002 Peania GRUNDFOS Pumps NZ Ltd.
E-mail: [email protected] Tel.: +0030-210-66 83 400 17 Beatrice Tinsley Crescent Thailand
Fax: +0030-210-66 46 273 North Harbour Industrial Estate GRUNDFOS (Thailand) Ltd.
Bosnia and Herzegovina Albany, Auckland 92 Chaloem Phrakiat Rama 9 Road
GRUNDFOS Sarajevo Hong Kong Tel.: +64-9-415 3240 Dokmai, Pravej, Bangkok 10250
Zmaja od Bosne 7-7A GRUNDFOS Pumps (Hong Kong) Ltd. Fax: +64-9-415 3250 Tel.: +66-2-725 8999
BiH-71000 Sarajevo Unit 1, Ground floor, Siu Wai industrial Fax: +66-2-725 8998
Tel.: +387 33 592 480 Centre Norway
Fax: +387 33 590 465 29-33 Wing Hong Street & 68 King Lam GRUNDFOS Pumper A/S Turkey
www.ba.grundfos.com Street, Cheung Sha Wan Strømsveien 344 GRUNDFOS POMPA San. ve Tic. Ltd. Sti.
E-mail: [email protected] Kowloon Postboks 235, Leirdal Gebze Organize Sanayi Bölgesi
Tel.: +852-27861706 / 27861741 N-1011 Oslo Ihsan dede Caddesi
Brazil Fax: +852-27858664 Tel.: +47-22 90 47 00 2. yol 200. Sokak No. 204
BOMBAS GRUNDFOS DO BRASIL Fax: +47-22 32 21 50 41490 Gebze/ Kocaeli
Av. Humberto de Alencar Castelo Branco, Hungary Tel.: +90 - 262-679 7979
630 GRUNDFOS Hungária Kft. Poland Fax: +90 - 262-679 7905
CEP 09850 - 300 Tópark u. 8 GRUNDFOS Pompy Sp. z o.o. E-mail: [email protected]
São Bernardo do Campo - SP H-2045 Törökbálint ul. Klonowa 23
Tel.: +55-11 4393 5533 Tel.: +36-23 511 110 Baranowo k. Poznania Ukraine
Fax: +55-11 4343 5015 Fax: +36-23 511 111 PL-62-081 Przeźmierowo ТОВ "ГРУНДФОС УКРАЇНА"
Tel.: (+48-61) 650 13 00 Бізнес Центр Європа
Bulgaria India Fax: (+48-61) 650 13 50 Столичне шосе, 103
Grundfos Bulgaria EOOD GRUNDFOS Pumps india Private Limited м. Київ, 03131, Україна
Slatina District 118 Old Mahabalipuram Road Portugal Tel.: (+38 044) 237 04 00
Iztochna Tangenta street no. 100 Thoraipakkam Bombas GRUNDFOS Portugal, S.A. Fax: (+38 044) 237 04 01
BG - 1592 Sofia Chennai 600 097 Rua Calvet de Magalhães, 241 E-mail: [email protected]
Tel.: +359 2 49 22 200 Tel.: +91-44 2496 6800 Apartado 1079
Fax: +359 2 49 22 201 P-2770-153 Paço de Arcos United Arab Emirates
E-mail: [email protected] Indonesia Tel.: +351-21-440 76 00 GRUNDFOS Gulf Distribution
PT GRUNDFOS Pompa Fax: +351-21-440 76 90 P.O. Box 16768
Canada Graha intirub Lt. 2 & 3 Jebel Ali Free Zone, Dubai
GRUNDFOS Canada inc. Jln. Cililitan Besar No.454. Makasar, Romania Tel.: +971 4 8815 166
2941 Brighton Road Jakarta Timur GRUNDFOS Pompe România SRL Fax: +971 4 8815 136
Oakville, Ontario ID-Jakarta 13650 S-PARK BUSINESS CENTER, Clădirea
L6H 6C9 Tel.: +62 21-469-51900 A2, etaj 2 United Kingdom
Tel.: +1-905 829 9533 Fax: +62 21-460 6910 / 460 6901 Str. Tipografilor, Nr. 11-15, Sector 1, Cod GRUNDFOS Pumps Ltd.
Fax: +1-905 829 9512 013714 Grovebury Road
Ireland Bucuresti, Romania Leighton Buzzard/Beds. LU7 4TL
China GRUNDFOS (Ireland) Ltd. Tel.: 004 021 2004 100 Tel.: +44-1525-850000
GRUNDFOS Pumps (Shanghai) Co. Ltd. Unit A, Merrywell Business Park E-mail: [email protected] Fax: +44-1525-850011
10F The Hub, No. 33 Suhong Road Ballymount Road Lower
Minhang District Dublin 12 Russia U.S.A.
Shanghai 201106 PRC Tel.: +353-1-4089 800 ООО Грундфос Россия Global Headquarters for WU
Tel.: +86 21 612 252 22 Fax: +353-1-4089 830 ул. Школьная, 39-41 856 Koomey Road
Fax: +86 21 612 253 33 Москва, RU-109544, Russia Brookshire, Texas 77423 USA
Italy Тел. (+7) 495 564-88-00 (495) 737-30-00 Phone: +1-630-236-5500
Columbia GRUNDFOS Pompe Italia S.r.l. Факс (+7) 495 564 8811
GRUNDFOS Colombia S.A.S. Via Gran Sasso 4 Uzbekistan
E-mail [email protected]
Km 1.5 vía Siberia-Cota Conj. Potrero I-20060 Truccazzano (Milano) Grundfos Tashkent, Uzbekistan
Chico, Tel.: +39-02-95838112 Serbia The Representative Office of Grundfos
Parque Empresarial Arcos de Cota Bod. 1A. Fax: +39-02-95309290 / 95838461 Grundfos Srbija d.o.o. Kazakhstan in Uzbekistan
Cota, Cundinamarca Omladinskih brigada 90b 38a, Oybek street, Tashkent
Tel.: +57(1)-2913444 Japan 11070 Novi Beograd Tel.: (+998) 71 150 3290 / 71 150 3291
Fax: +57(1)-8764586 GRUNDFOS Pumps K.K. Tel.: +381 11 2258 740 Fax: (+998) 71 150 3292
1-2-3, Shin-Miyakoda, Kita-ku Fax: +381 11 2281 769
Croatia Hamamatsu www.rs.grundfos.com
GRUNDFOS CROATIA d.o.o. 431-2103 Japan
Buzinski prilaz 38, Buzin Tel.: +81 53 428 4760 Singapore
HR-10010 Zagreb Fax: +81 53 428 5005 GRUNDFOS (Singapore) Pte. Ltd.
Tel.: +385 1 6595 400 25 Jalan Tukang
Fax: +385 1 6595 499 Korea Singapore 619264
www.hr.grundfos.com GRUNDFOS Pumps Korea Ltd. Tel.: +65-6681 9688
6th Floor, Aju Building 679-5 Faxax: +65-6681 9689
Czech Republic Yeoksam-dong, Kangnam-ku, 135-916
GRUNDFOS Sales Czechia and Slovakia Seoul, Korea Slovakia
s.r.o. Tel.: +82-2-5317 600 GRUNDFOS s.r.o.
Čajkovského 21 Fax: +82-2-5633 725 Prievozská 4D 821 09 BRATISLAVA
779 00 Olomouc Tel.: +421 2 5020 1426
Tel.: +420-585-716 111 Latvia sk.grundfos.com
SIA GRUNDFOS Pumps Latvia
Denmark Deglava biznesa centrs Slovenia
GRUNDFOS DK A/S Augusta Deglava ielā 60 GRUNDFOS LJUBLJANA, d.o.o.
Martin Bachs Vej 3 LV-1035, Rīga, Leskoškova 9e, 1122 Ljubljana
DK-8850 Bjerringbro Tel.: + 371 714 9640, 7 149 641 Tel.: +386 (0) 1 568 06 10
Tel.: +45-87 50 50 50 Fax: + 371 914 9646 Fax: +386 (0)1 568 06 19
Fax: +45-87 50 51 51 E-mail: [email protected]
E-mail: [email protected]
www.grundfos.com/DK
98367081
ECM: 1360614
03.2023
www.grundfos.com
Trademarks displayed in this material, including but not limited to Grundfos and the Grundfos logo, are registered trademarks owned by The Grundfos Group. © 2023 Grundfos Holding A/S, all rights reserved.

Grundfosliterature 6012947

Uploaded by

Copyright:

Available Formats

Grundfosliterature 6012947

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Grundfosliterature 6012947

Uploaded by

Copyright:

Available Formats

GRUNDFOS INSTRUCTIONS

Modbus for Grundfos pumps

Functional profile and user manual

2. Introduction PIN Personal Identification Number. For SIM cards.

• CIM/CIU 200 Modbus RTU Q Flow rate.

3.4 CIM 500 Modbus TCP

Modbus RTU GENlbus

The CIM module or the CIU unit is connected as a Modbus slave

Modbus TCP GENlbus

Principle sketch of CIU 500 Modbus TCP solution. The figure

4.1 CIM module

General data Description Comments

4.2 CIM 200 Modbus RTU

Modbus RTU specifications Description Comments

1) Can only be set via software.

Modbus cellular specifications Description Comments

4.4 CIM 500 Modbus TCP

Modbus TCP specifications Description Comments

Modbus transmission speed

DIP switch settings

Transmission speed [bit/s] SW4 SW5

Pos. Designation Description Software-defined

Hexadecimal rotary switch for setting

A Modbus slave on a Modbus network must have a unique address

Manual setting of parity

Value to set in register

Even parity 1 Cut in ON ON

Odd parity 2 OFF OFF

To ensure a stable and reliable communication, it is

All switch settings will be effective immediately after

Pos. Designation Description

Related information Secondary SMA connection for cellular

2) Use this antenna connection only if required by the telecom company.

6.1.1 Fitting a cellular antenna

If a battery is not connected, the user will not receive any

The slanted edge of the SIM card must point downwards,

Connecting the battery

You can only charge the battery if the battery temperature

Switch on the power supply. CIM 260 is powered either by the

LED1 flashes yellow, searching for a cellular network. When the

Pos. Description 6.1.4 Configuration

LED1, yellow and green

2 It is important to connect the cable shield to earth through

Pos. Status Description Ethernet

LED2, red and green

Example of Ethernet connection

Pos. Description Designation

You can use both ETH1 and ETH2 to establish a

You can access the webserver while the selected

7.5 Status LEDs

7.4 Establish a connection to the webserver Related information

User name Default: admin

User name and password may have been changed from

CIM 500 connected to a PC via Ethernet cable

DATA1 and DATA2

LNK1 and LINK2

8. Modbus function code overview

Type Code Hex Name

16-bit data 04 0x04 Read input registers