SmartLi

Modbus Protocol

Issue 01
Date 2021-03-23

HUAWEI TECHNOLOGIES CO., LTD.

Copyright © Huawei Technologies Co., Ltd. 2021. All rights reserved.
No part of this document may be reproduced or transmitted in any form or by any means without prior
written consent of Huawei Technologies Co., Ltd.

Trademarks and Permissions

and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.
All other trademarks and trade names mentioned in this document are the property of their respective
holders.

Notice
The purchased products, services and features are stipulated by the contract made between Huawei and
the customer. All or part of the products, services and features described in this document may not be
within the purchase scope or the usage scope. Unless otherwise specified in the contract, all statements,
information, and recommendations in this document are provided "AS IS" without warranties, guarantees
or representations of any kind, either express or implied.

The information in this document is subject to change without notice. Every effort has been made in the
preparation of this document to ensure accuracy of the contents, but all statements, information, and
recommendations in this document do not constitute a warranty of any kind, express or implied.

Huawei Technologies Co., Ltd.

Address: Huawei Industrial Base
Bantian, Longgang
Shenzhen 518129
People's Republic of China

Website: https://www.huawei.com
Email: [email protected]

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. i

SmartLi
Modbus Protocol About This Document

About This Document

Purpose
This document describes the protocol for command control and data exchange
between the monitoring module and its dedicated back end.

Intended Audience
This document is intended for development personnel of the monitoring module
and network management system (NMS) as well as the test personnel who must:
Be familiar with the basic principles of serial port communication.
Have experience in using serial port commissioning software.

Symbol Conventions
The symbols that may be found in this document are defined as follows.

Symbol Description

Indicates a hazard with a high level of risk which, if

not avoided, will result in death or serious injury.

Indicates a hazard with a medium level of risk which,

if not avoided, could result in death or serious injury.

Indicates a hazard with a low level of risk which, if

not avoided, could result in minor or moderate injury.

Indicates a potentially hazardous situation which, if

not avoided, could result in equipment damage, data
loss, performance deterioration, or unanticipated
results.
NOTICE is used to address practices not related to
personal injury.

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. ii

SmartLi
Modbus Protocol About This Document

Symbol Description

Supplements the important information in the main

text.
NOTE is used to address information not related to
personal injury, equipment damage, and
environment deterioration.

Change History
Issue Date Description

01 2021-03-23 This issue is the first official release.

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. iii

SmartLi
Modbus Protocol Contents

Contents

About This Document................................................................................................................ ii

1 Description................................................................................................................................ 1
1.1 Protocol Overview................................................................................................................................................................... 1
1.2 Protocol Description............................................................................................................................................................... 1

2 Definition...................................................................................................................................2
3 Physical Interface.................................................................................................................... 3
3.1 MODBUS-RTU.......................................................................................................................................................................... 3
3.1.1 Electrical Standard............................................................................................................................................................... 3
3.1.2 Data Transmission Rate..................................................................................................................................................... 3
3.1.3 Cable Connection................................................................................................................................................................. 4
3.2 MODBUS-TCP............................................................................................................................................................................5
3.2.1 Electrical Standard............................................................................................................................................................... 5
3.2.2 Differences Between TCP and RTU................................................................................................................................ 5

4 Communication Mode at the Physical Layer.................................................................... 7

5 Command Type and Format at the Application Layer................................................... 8
5.1 Function Code List...................................................................................................................................................................8
5.2 Reading Command Format..................................................................................................................................................8
5.3 Command Format for Writing into a Single Register.................................................................................................9
5.4 Command Format for Writing into Multiple Registers.............................................................................................. 9
5.5 Abnormal Feedback Frame............................................................................................................................................... 10
5.5.1 Abnormal Frame Format................................................................................................................................................ 10
5.5.2 Error Code Definitions......................................................................................................................................................11

6 CRC Checksum Algorithm................................................................................................... 15

7 Acquisition Signals................................................................................................................ 16
7.1 Acquisition Signals................................................................................................................................................................ 16
7.1.1 Analog Signals.................................................................................................................................................................... 16
7.1.1.1 System Analog Signals................................................................................................................................................. 16
7.1.1.2 Rack Analog Signals...................................................................................................................................................... 18
7.1.1.3 Battery Module Analog Signals.................................................................................................................................19
7.1.2 Alarms and Status Signals.............................................................................................................................................. 21

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. iv

SmartLi
Modbus Protocol Contents

7.1.2.1 System Alarms and Status.......................................................................................................................................... 21

7.1.2.2 Battery Cabinet Alarms and Status..........................................................................................................................23
7.1.2.3 Battery Module Alarms and Status..........................................................................................................................29

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. v

SmartLi
Modbus Protocol 1 Description

1 Description

1.1 Protocol Overview

1. In the Modbus protocol, register addresses are represented using 16 bits. The
register addresses are described in decimal mode.
2. The Modbus protocol defines read-only collected signals for the system, rack,
and battery modules.
3. When status and alarm signals are invalid, the Modbus transmits 0. When
analog signals are invalid, the Modbus transmits 7FFF for signed numbers and
FFFF for unsigned numbers.

1.2 Protocol Description

This document describes the protocol for command control and data exchange
between the monitoring module and its dedicated back end.
Functions defined in the protocol include:
1. The host sends a read command to obtain relevant information.
2. The host is the master node in the communication process. The information
exchange is done by a question-and-answer method.
3. The slave nodes are distinguished by address. The address ranges from 1 to
254. The default address is 80. On the same communications bus, addresses
of slave nodes must be unique.

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 1

SmartLi
Modbus Protocol 2 Definition

2 Definition

Master node: host computer, which is responsible for communication with slave
nodes.
Slave node: UPS monitoring module, which collects information from the UPS
power module.
RS485: a serial communication standard, which can support half-duplex serial
short-range communication.
Read command: The master node sends a read command to the slave node,
instructing the slave node to return relevant register contents.
Write command: The master node packs parameters and sends them to the slave
node to configure corresponding parameters.
Register address: Each signal or parameter of the slave device corresponds to a
register address, which the master device accesses to obtain relevant information
or configure relevant parameters.
Slave node address: The slave node address is set in the range from 1 to 254

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 2

SmartLi
Modbus Protocol 3 Physical Interface

3 Physical Interface

3.1 MODBUS-RTU

3.1.1 Electrical Standard

The slave node communicates with the master node over the RS485 serial port.
Information transmission modes:
1. Information can be transmitted in RTU mode of the Modbus.
2. Character information can be transmitted in asynchronous mode using the
format of one start bit, eight data bits, and one stop bit (totally 10 bits).

3.1.2 Data Transmission Rate

The baud rate is set to 9600 bit/s by default and can be changed to 19200 bit/s, or
115200 bit/s.

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 3

SmartLi
Modbus Protocol 3 Physical Interface

3.1.3 Cable Connection

Figure 3-1 Cable connection 1

Figure 3-2 Cable connection 2

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 4

SmartLi
Modbus Protocol 3 Physical Interface

Figure 3-3 Connection of three types of data cables

NOTE

When connecting a parallel system to the network management system (NMS), use an
active RS485/232 converter with the isolation function. A hot-swappable RS485/232
converter is not recommended.

3.2 MODBUS-TCP

3.2.1 Electrical Standard

The slave nodes communicate with the master node through the FE port over IP.
Information is transmitted in TCP transmission mode of the Modbus protocol over
port 502. A maximum of two sockets can be connected.
You can enable or disable communication data encryption by choosing Param.
Settings > Advanced Param. > ModbusTCP encryption on the WebUI or
Settings > Advanced Param. > ModbusTCP encryption on the LCD.

3.2.2 Differences Between TCP and RTU

Modbus-TCP is a Modbus protocol carried by TCP. The difference is that MBAP
packet header is added and CRC of the Modbus frame is removed.
When Modbus is applied to TCP/IP, a dedicated MBAP packet header (Modbus
Application Protocol packet header) will be used to identify Modbus application
data unit (ADU). The Modbus-TCP data frame format is defined as follows:

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 5

SmartLi
Modbus Protocol 3 Physical Interface

The MBAP packet header (MBAP is short for Modbus Application Protocol) is
divided into four domains which include seven bytes in total.

Domain Length Description Client Server

Transmissio 2 bytes Indicates Generated by This value is

n symbol transmission of a the client copied during
Modbus query/ response.
response.

Protocol 2 bytes 0: Modbus protocol Generated by This value is

symbol the client copied during
response.

Length 2 bytes Count subsequent Generated by Regenerated

bytes the client by the server
during
response

Unit 1 byte Identification code Generated by This value is

symbol of a remote slave the client copied during
station connected to It is actually response.
the serial port link the Modbus
or other bus. 0 address.
indicates the data
collector.

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 6

SmartLi
Modbus Protocol 4 Communication Mode at the Physical Layer

4 Communication Mode at the Physical

Layer

After the slave nodes are powered on or reset and stably run, they respond to the
read or write command sent from the master node. After the slave nodes receive
related commands, the slave nodes can return requested information to the
master node under normal conditions, or return specific error codes corresponding
to the error types under abnormal conditions.

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 7

SmartLi 5 Command Type and Format at the Application
Modbus Protocol Layer

5 Command Type and Format at the

Application Layer

5.1 Function Code List

Table 5-1 Function code list
Function Code Meaning Remarks

0x03 Reading Supports continuous reading of single or

multiple registers.

0x06 Writing into a Supports writing into a single register.

single register

0x10 Writing into Supports continuous writing into

multiple registers multiple registers.

5.2 Reading Command Format

Table 5-2 Command frame
0 1 2 3 4 5 6 7

ADDR CMD MSB LSB MSB LSB LSB MSB

Controller Function Register start Number of CRC checksum

address Code address registers (n)

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 8

SmartLi 5 Command Type and Format at the Application
Modbus Protocol Layer

Table 5-3 Response frame

0 1 2 3 4 5 6 … L+1 L L L
+2 +3 +4

ADDR CMD Length MSB LS MS LS … MS LS LS MS

B B B B B B B

Control Functio Data First Second … Last CRC

ler n Code length (L register register register checksu
addres = n x 2) value value value m
s

5.3 Command Format for Writing into a Single Register

Table 5-4 Command frame for writing into a single register

0 1 2 3 4 5 6 7

ADDR CMD MSB LSB MSB LSB LSB MSB

Controller Function Register Data CRC checksum

address Code address

Table 5-5 Response frame for writing into a single register

0 1 2 3 4 5 6 7

ADDR CMD MSB LSB MSB LSB LSB MSB

Controller Function Register address Data CRC checksum

address Code

5.4 Command Format for Writing into Multiple

Registers
Table 5-6 Command frame 1 for writing into multiple registers

0 1 2 3 4 5 6 7 8

ADDR CMD MSB LSB MSB LSB Length MSB LSB

Controlle Functi Register Number of Data length First register

r address on start registers (n) (L = n x 2) value
Code address

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 9

SmartLi 5 Command Type and Format at the Application
Modbus Protocol Layer

Table 5-7 Command frame 2 for writing into multiple registers

9 10 … L+5 L+6 L+7 L+8

MSB LSB … MSB LSB LSB MSB

Second register value … Last register value CRC checksum

Table 5-8 Response frame for writing into multiple registers

0 1 2 3 4 5 6 7

ADDR CMD MSB LSB MSB LSB LSB MSB

Controller Function Register start Number of CRC checksum

address Code address registers (n)

5.5 Abnormal Feedback Frame

5.5.1 Abnormal Frame Format

Table 5-9 Abnormal frame format
0 1 2 3 4

ADDR CMD ErrCode LSB MSB

Controller Function Code Error code CRC checksum

address +0x80

NOTE

The Function Code indicates the corresponding read or write command.

The CRC must be performed for all bytes before the CRC field.

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 10

SmartLi 5 Command Type and Format at the Application
Modbus Protocol Layer

5.5.2 Error Code Definitions

Table 5-10 Error codes returned by NEs
Code Name Definition Network Process

0x01 ILLEGAL The function code received in the N/A

FUNCTION query is not an allowable action
for the server. This may be
because the function code is only
applicable to newer devices, and
was not implemented in the unit
selected. It could also indicate
that the server is in the wrong
state to process a request of this
type, for example because it is
not configured and is being
asked to return register values.

0x02 ILLEGAL The data address received in the N/A

DATA query is not an allowable address
ADDRESS for the server. More specifically,
the combination of reference
number and transfer length is
invalid. For a controller with 100
registers, the PDU addresses the
first register as 0, and the last
one as 99. If a request is
submitted with a starting register
address of 96 and a quantity of
registers of 4, then this request
will successfully operate
(address-wise at least) on
registers 96, 97, 98, 99. If a
request is submitted with a
starting register address of 96
and a quantity of registers of 5,
then this request will fail with
Exception Code 0x02 "Illegal
Data Address" since it attempts
to operate on registers 96, 97,
98, 99 and 100, and there is no
register with address 100.

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 11

SmartLi 5 Command Type and Format at the Application
Modbus Protocol Layer

Code Name Definition Network Process

0x03 ILLEGAL A server or slave node receives N/A

DATA illegal data during a query, which
VALUE indicates a fault in the remaining
structure of a combination
request, for example, the implicit
length is incorrect. This does not
mean that a register stores a
value not expected by an
application because the Modbus
protocol does not understand the
meaning of a special value in a
register.

0x04 SERVER An unrecoverable error occurred N/A

DEVICE while the server was attempting
FAILURE to perform the requested action.

0x05 ACKNOWLE Specialized use in conjunction N/A

DGE with programming commands.
The server has accepted the
request and is processing it, but a
long duration of time will be
required to do so. This response
is returned to prevent a timeout
error from occurring in the client.
The client can next issue a Poll
Program Complete message to
determine if processing is
completed.

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 12

SmartLi 5 Command Type and Format at the Application
Modbus Protocol Layer

Code Name Definition Network Process

0x06 SERVER The server does not accept a 1. File upload

DEVICE Modbus request PDU. A client Upon receiving this
BUSY application determines when to error code, the
resend the request. NetEco resends the
command once
every 10 seconds
for a maximum of
six times.
1. File load start
Upon receiving this
error code, the
NetEco resends the
command once
every 3 seconds for
a maximum of
three times. If the
error code persists,
the upgrade
process is regarded
as a failure.
1. File load data
Upon receiving this
error code, the
NetEco resends the
command once
every second for a
maximum of three
times
(configurable).

0x08 MEMORY Specialized use in conjunction Upon receiving this

PARITY with function codes 20 and 21 error code, the
ERROR and reference type 6, to indicate NetEco resends a
that the extended file area failed command for a
to pass a consistency check. The maximum of three
server or slave node cannot read times.
the file, but identifies a parity
verification error in the register.
The client can retry the request,
but service may be required on
the server device.

0x0A GATEWAY Applies to the TCP/IP protocol. N/A

PATH
UNAVAILAB
LE

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 13

SmartLi 5 Command Type and Format at the Application
Modbus Protocol Layer

Code Name Definition Network Process

0x0B GATEWAY Applies to the TCP/IP protocol. N/A

TARGET
DEVICE
FAILED TO
RESPOND

0x80 No An operation is not allowed A device needs to

permission because of a permission be re-authenticated
authentication failure or in the NetEco.
permission expiration.

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 14

SmartLi
Modbus Protocol 6 CRC Checksum Algorithm

6 CRC Checksum Algorithm

unsigned short count_CRC(unsigned char *addr, int num)

unsigned short CRC = 0xFFFF;

int i;

while (num--)

CRC ^= *addr++;

for (i = 0; i < 8; i++)

if (CRC & 1)

CRC >>= 1;

CRC ^= 0xA001;

else

CRC >>= 1;

return CRC;

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 15

SmartLi
Modbus Protocol 7 Acquisition Signals

7 Acquisition Signals

7.1 Acquisition Signals

7.1.1 Analog Signals

7.1.1.1 System Analog Signals

Table 7-1 System analog signals

No. Signal ID Unit Register Read- Data

Address write Type
Attribut
e

1 Reserved - 0 - -

2 Voltage 0.1 V 1 R Unsigned

3 Reserved - 2 - -

4 SOC % 3 R Unsigned

5 SOH % 4 R Unsigned

6 Reserved - 5 R Unsigned

7 Maximum cell 0.001 V 6 R Unsigned

voltage

8 Minimum cell 0.001 V 7 R Unsigned

voltage

9 Maximum cell 0.1°C 8 R Signed

temperature

10 Minimum cell 0.1°C 9 R Signed

temperature

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 16

SmartLi
Modbus Protocol 7 Acquisition Signals

No. Signal ID Unit Register Read- Data

Address write Type
Attribut
e

11 See 7.1.2.1 - 10 R Unsigned

System Alarms.

12 Reserved - 11~13 - -

13 See 7.1.2.1 - 14 R Unsigned

System Status.

14 Reserved - 15~16 - -

15 Battery capacity 1 Ah 17 R Unsigned

16 Reserved - 18 - -

17 Total discharge - 19 R Unsigned

times

18 Total discharge 0.1 Ah 20 R Unsigned

capacity H

19 Total discharge 21 R Unsigned

capacity L

20 Reserved - 22~25 - -

21 Cabinet online - 26 R Unsigned

status

22 Running status 0: Standby 27 R Unsigned

1: Charging
2: Discharging
3: Fault

23 Reserved - 28 - -

24 Battery cabinet - 29 R Unsigned

quantity

25 Reserved - 30~35 - -

26 Current H 0.1 A 36 R Signed

27 Current L 37 R Signed

28 Reserved - 38~39 R -

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 17

SmartLi
Modbus Protocol 7 Acquisition Signals

NOTE

In the HVDC scenario, the battery cabinet online status refers to the battery string online
status.
Battery cabinet online status: Bits 0 to 14 correspond to the online status of battery
cabinets 1 to 15.

7.1.1.2 Rack Analog Signals

Table 7-2 Analog signals of rack 1

No. Signal ID Unit Register Read- Data
Address write Type
Attribut
e

1 Voltage 0.1 V 40 R Unsigned

2 Current 0.1 A 41 R Signed

3 SOC % 42 R Unsigned

4 SOH % 43 R Unsigned

5 Maximum cell 0.001 V 44 R Unsigned

voltage

6 Minimum cell 0.001 V 45 R Unsigned

voltage

7 Maximum cell 0.1°C 46 R Signed

temperature

8 Minimum cell 0.1°C 47 R Signed

temperature

9 Temperature 0.1°C 48 R Signed

10 Battery capacity 1 Ah 49 R Unsigned

11 Modules per rack - 50 R Unsigned

12 Total discharge - 51 R Unsigned

times

13 Total discharge 0.1 Ah 52 R Unsigned

capacity H

14 Total discharge 53 R Unsigned

capacity L

15 Running status 0: Standby 54 R Unsigned

1: Charging
2: Discharging
3: Fault

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 18

SmartLi
Modbus Protocol 7 Acquisition Signals

No. Signal ID Unit Register Read- Data

Address write Type
Attribut
e

16 Reserved - 55~57 R Unsigned

NOTE

In the HVDC scenario, the battery cabinet refers to the battery string.
Calculation of the analog signal address of the battery cabinet (1–12)
Start address of battery cabinet x: 40 + (x – 1) x 18, x = [1, 12]
The analog signals of each battery cabinet occupy 16 registers. The address range is 40–
255.
Calculation of the analog signal address of the battery cabinet (13–15)
Start address of battery cabinet x: 20040 + (x – 12 – 1) x 18, x = [13, 15]
The analog signals of each battery cabinet occupy 16 registers. The address range is 20040–
20093.

7.1.1.3 Battery Module Analog Signals

Table 7-3 Analog signals of battery cabinet 1 – battery module 1

No. Signal ID Unit Register Read- Data
Address write Type
Attribut
e

1 Maximum cell voltage 0.001 V 260 R Unsigned

2 Minimum cell voltage 0.001 V 261 R Unsigned

3 Maximum cell 0.1°C 262 R Signed

temperature

4 Minimum cell 0.1°C 263 R Signed

temperature

5 Voltage 0.01 V 264 R Unsigned

6 SOC % 265 R Unsigned

7 SOH % 266 R Unsigned

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 19

SmartLi
Modbus Protocol 7 Acquisition Signals

NOTE

In the HVDC scenario, the battery cabinet refers to the battery string.
Calculation of the analog signal address of the battery cabinet (1–12)
Formula for calculating the analog signal address of battery cabinet x – battery module y
Start address of battery cabinet x – battery module y: 260 + (x – 1) x 160 + (y – 1) x 10, x =
[1, 12], y = [1, 16]
Each battery module occupies 10 registers. The address range is 260–2179.
Calculation of the analog signal address of the battery cabinet (13–15)
Formula for calculating the analog signal address of battery cabinet x – battery module y
Start address of battery cabinet x – battery module y: 20260 + (x – 12 – 1) x 160 + (y – 1) x
10, x = [13, 15], y = [1, 16]
Each battery module occupies 10 registers. The address range is 20260–20739.
The Huawei-developed lithium battery system supports a maximum of 15 battery cabinets,
and each battery cabinet supports a maximum of 16 battery modules.

Table 7-4 Statistics of battery cabinet 1 – battery module 1

No. Item Unit Register R/W Data Type

Address Attribute

1 Total time for max. cell 0.1 h 5200 R Unsigned

temperature [60,125]°C
5201

2 Total time for max. cell 0.1 h 5202 R Unsigned

temperature [50,60)°C
5203

3 Total time for max. cell 0.1 h 5204 R Signed

temperature [40,50)°C
5205

4 Total time for max. cell 0.1 h 5206 R Signed

temperature [10,40)°C
5207

5 Total time for min. cell 0.1 h 5208 R Unsigned

temperature [0,10)°C
5209

6 Total time for min. cell 0.1 h 5210 R Unsigned

temperature [-40,0)°C
5211

7 Total cell overvoltage - 5212 R Unsigned

alarms

8 Total cell undervoltage - 5213 R Unsigned

alarms

9 Total high temperature - 5214 R Unsigned

alarms (charge)

10 Total high temperature - 5215 R Unsigned

alarms (discharge)

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 20

SmartLi
Modbus Protocol 7 Acquisition Signals

No. Item Unit Register R/W Data Type

Address Attribute

11 Total low temperature - 5216 R Unsigned

alarms (charge)

12 Total low temperature - 5217 R Unsigned

alarms (discharge)

13 Reversed - 5218~521 R Unsigned

9

NOTE

In the HVDC scenario, the battery cabinet refers to the battery string.
Calculation of the analog signal address of the battery cabinet (1–12)
Formula for calculating the analog signal address of battery cabinet x – battery module y
Start address of battery cabinet x – battery module y: 5200 + (x – 1) x 320 + (y – 1) x 20, x
= [1, 12], y = [1, 16]
Each battery module occupies 20 registers. The address range is 5200–9039.
Calculation of the analog signal address of the battery cabinet (13–15)
Formula for calculating the analog signal address of battery cabinet x – battery module y
Start address of battery cabinet x – battery module y: 25200 + (x – 12 – 1) x 320 + (y – 1) x
20, x = [13, 15], y = [1, 16]
Each battery module occupies 20 registers. The address range is 25200–26159.
The Huawei-developed lithium battery system supports a maximum of 15 battery cabinets,
and each battery cabinet supports a maximum of 16 battery modules.

7.1.2 Alarms and Status Signals

7.1.2.1 System Alarms and Status

Table 7-5 System alarms

No. Signal ID Alarm Value Register Bit Read-write Severity

Address Field Attribute

1 Software package 0: Exist 10 0 R Critical

not exist 2 1: Not exist

2 Batt. cabinet 0: Matched 10 1 R Minor

quantity mismatch 1: Not matched
2

3 Battery cabinet 0: Not exist 10 2 R Critical

EPO 1 1: Exist

4 - - - - - -

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 21

SmartLi
Modbus Protocol 7 Acquisition Signals

No. Signal ID Alarm Value Register Bit Read-write Severity

Address Field Attribute

5 Version 0: Normal 10 4 R Critical

incompatible 5 1: Abnormal

6 Version 0: Normal 10 5 R Critical

incompatible 6 1: Abnormal

Table 7-6 System status

No. Signal ID State Value Register Bit Read-write Severity
Address Field Attribute

1 BMS test alarm 0: No 14 0 R

1: Yes

2 Lithium battery 0: No 14 1 R
system battery
EOD 5 1: Yes

3 Lithium battery 0: No 14 2 R
system
overtemperature 1: Yes

4 Lithium battery 0: No 14 3 R
system
overtemperature 1: Yes
protection

5 Lithium battery 0: No 14 4 R
system
undertemperature 1: Yes

6 Lithium battery 0: No 14 5 R
system
overvoltage 1: Yes

7 Lithium battery 0: No 14 6 R
system
overvoltage 1: Yes
protection

8 Lithium battery 0: No 14 7 R
system overcurrent
1: Yes

9 Lithium battery 0: No 14 8 R
system
undervoltage 1: Yes

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 22

SmartLi
Modbus Protocol 7 Acquisition Signals

No. Signal ID State Value Register Bit Read-write Severity

Address Field Attribute

10 Lithium battery 0: No 14 9 R
SOH abnormal
1: Yes

NOTE

Items 1–10 in the system status table indicate the comprehensive status instead of actual
alarms.

7.1.2.2 Battery Cabinet Alarms and Status

Table 7-7 Alarms of battery cabinet 1

No. Signal ID Alarm Value Register Bit Read-write Severity
Address Field Attribute

1 BCB tripping fault 0: Normal 2200 0 R Critical

1
1: Abnormal

2 BCB off 4 0: Normal 2200 1 R Critical

1: Abnormal

3 Battery control 0: Normal 2200 2 R Critical

unit fault 1
1: Abnormal

4 Battery 0: Normal 2200 3 R Critical

overcurrent
protection 1 1: Abnormal

5 Battery 0: Normal 2200 4 R Critical

overcurrent
protection 2 1: Abnormal

6 Battery cabinet 0: Normal 2200 5 R Critical

EPO 1
1: Abnormal

7 Not ready 4 0: Normal 2200 6 R Critical

1: Abnormal

8 Battery control 0: Normal 2200 7 R Critical

unit fault 2
1: Abnormal

9 Battery control 0: Normal 2200 8 R Critical

unit fault 5
1: Abnormal

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 23

SmartLi
Modbus Protocol 7 Acquisition Signals

No. Signal ID Alarm Value Register Bit Read-write Severity

Address Field Attribute

10 Abnormal inter- 0: Normal 2200 9 R Critical

battery cabinet
parallel cable 3 1: Abnormal

11 Battery 0: Normal 2200 10 R Critical

overvoltage
protection 4 1: Abnormal

12 Battery control 0: Normal 2200 11 R Critical

unit fault 3
1: Abnormal

13 Battery control 0: Normal 2200 12 R Critical

unit fault 4
1: Abnormal

14 Abnormal signal 0: Normal 2200 13 R Critical

board 1
1: Abnormal

15 Abnormal inter- 0: Normal 2200 14 R Critical

battery cabinet
parallel cable 1 1: Abnormal

16 Abnormal inter- 0: Normal 2200 15 R Critical

battery cabinet
parallel cable 2 1: Abnormal

17 Abnormal intra- 0: Normal 2201 0 R Critical

battery cabinet
parallel cable 1 1: Abnormal

18 Abnormal intra- 0: Normal 2201 1 R Critical

battery cabinet
parallel cable 2 1: Abnormal

19 Battery control 0: Normal 2201 2 R Critical

unit fault 9
1: Abnormal

20 Abnormal signal 0: Normal 2201 3 R Critical

board 2
1: Abnormal

21 Inter-battery 0: Normal 2201 4 R Minor

cabinet parallel
cable alarm 1 1: Abnormal

22 Abnormal inter- 0: Normal 2201 5 R Critical

battery cabinet
parallel cable 3 1: Abnormal

23 Inter-battery 0: Normal 2201 6 R Minor

cabinet parallel
cable alarm 2 1: Abnormal

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 24

SmartLi
Modbus Protocol 7 Acquisition Signals

No. Signal ID Alarm Value Register Bit Read-write Severity

Address Field Attribute

24 Version 0: Normal 2201 7 R Critical

incompatible 1
1: Abnormal

25 Fan abnormal 14 0: Normal 2201 8 R Critical

1: Abnormal

26 Battery 0: Normal 2201 9 R Minor

overvoltage 3
1: Abnormal

27 Battery 0: Normal 2201 10 R Minor

overcurrent 2
1: Abnormal

28 Low battery 0: Normal 2201 11 R Minor

voltage 5
1: Abnormal

29 Battery 0: Normal 2201 12 R Minor

overcurrent 3
1: Abnormal

30 Battery 0: Normal 2201 13 R Critical

undervoltage
protection 2 1: Abnormal

31 Battery 0: Normal 2201 14 R Critical

overcurrent
protection 3 1: Abnormal

32 Battery 0: Normal 2201 15 R Critical

overvoltage
protection 5 1: Abnormal

33 Battery control 0: Normal 2202 0 R Critical

unit fault 6
1: Abnormal

34 Battery control 0: Normal 2202 1 R Critical

unit fault 7
1: Abnormal

35 Battery control 0: Normal 2202 2 R Critical

unit fault 8
1: Abnormal

36 Version 0: Normal 2202 3 R Critical

incompatible 2
1: Abnormal

37 Version 0: Normal 2202 4 R Critical

incompatible 3
1: Abnormal

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 25

SmartLi
Modbus Protocol 7 Acquisition Signals

No. Signal ID Alarm Value Register Bit Read-write Severity

Address Field Attribute

38 Version 0: Normal 2202 5 R Critical

incompatible 4
1: Abnormal

39 Battery control 0: Normal 2202 6 R Critical

unit fault 10
1: Abnormal

40 Battery control 0: Normal 2202 7 R Critical

unit fault 11
1: Abnormal

41 Battery fuse blown 0: Normal 2202 8 R Critical

2
1: Abnormal

42 Reserved - 2202 9~15 R -

43 Battery reversal 2 0: Normal 2248 0 R Critical

1: Abnormal

44 Switch off 2 0: Normal 2248 1 R Critical

1: Abnormal

45 Battery control 0: Normal 2248 2 R Minor

unit alarm 1
1: Abnormal

46 Version 0: Normal 2248 3 R Critical

incompatible 47
1: Abnormal

47 Battery control 0: Normal 2248 4 R Minor

unit alarm 2
1: Abnormal

48 Battery ground 0: Normal 2248 5 R Critical

fault 3
1: Abnormal

49 Reversed - 2248 6 - -

50 Battery contactor 0: Normal 2248 7 R Critical

fault 1
1: Abnormal

51 Reversed - 2248 8 - -

52 Battery control 0: Normal 2248 9 R Critical

unit fault 14
1: Abnormal

53 Battery control 0: Normal 2248 10 R Minor

unit alarm 3
1: Abnormal

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 26

SmartLi
Modbus Protocol 7 Acquisition Signals

No. Signal ID Alarm Value Register Bit Read-write Severity

Address Field Attribute

54 Battery control 0: Normal 2248 11 R Critical

unit fault 15
1: Abnormal

55 Inner temperature 0: Normal 2248 12 R Minor

alarm 2
1: Abnormal

56 Inner temperature 0: Normal 2248 13 R Minor

alarm 3
1: Abnormal

57 Inner temperature 0: Normal 2248 14 R Minor

alarm 4
1: Abnormal

58 Inner temperature 0: Normal 2248 15 R Critical

abnormal 12
1: Abnormal

59 Inner temperature 0: Normal 2249 0 R Critical

abnormal 13
1: Abnormal

60 Inner temperature 0: Normal 2249 1 R Critical

abnormal 14
1: Abnormal

61 Inner temperature 0: Normal 2249 2 R Critical

alarm 1
1: Abnormal

62 Module quantity 0: Normal 2249 3 R Critical

mismatch 3
1: Abnormal

63 Switch abnormal 0: Normal 2249 4 R Minor

alarm 1
1: Abnormal

64 Switch off 1 0: Normal 2249 5 R Critical

1: Abnormal

65 Water alarm 2 0: Normal 2249 6 R Critical

1: Abnormal

66 Battery control 0: Normal 2249 7 R Critical

unit fault 16
1: Abnormal

67 Temperature 0: Normal 2249 8 R Minor

sensor abnormal 1
1: Abnormal

68 Temperature 0: Normal 2249 9 R Minor

sensor abnormal 2
1: Abnormal

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 27

SmartLi
Modbus Protocol 7 Acquisition Signals

No. Signal ID Alarm Value Register Bit Read-write Severity

Address Field Attribute

69 Temperature 0: Normal 2249 10 R Minor

sensor abnormal 3
1: Abnormal

70 Temperature 0: Normal 2249 11 R Minor

sensor abnormal 4
1: Abnormal

71 Temperature 0: Normal 2249 12 R Minor

sensor abnormal 5
1: Abnormal

72 Temperature 0: Normal 2249 13 R Minor

sensor abnormal 6
1: Abnormal

73 Battery control 0: Normal 2250 0 R Critical

unit fault 17
1: Abnormal

74 - - 2250 1 - -

75 Copper bar 0: Normal 2250 2 R Minor

overtemperature 2
1: Abnormal

76 Battery control 0: Normal 2250 3 R Critical

unit fault 18
1: Abnormal

77 Incorrect battery 0: Normal 2250 4 R Critical

module wiring 1
1: Abnormal

78 Module quantity 0: Normal 2250 5 R Minor

mismatch 4
1: Abnormal

Table 7-8 Status of battery cabinet 1

No. Signal ID State Value Register Bit Read- Severity
Address Field write
Attribute

1 Battery 000: Standby 2203 0 R

Management
Module Status 001: Charging
010: Discharging
011: Fault

2 Battery 0: Not upgraded 2203 3 R

Management
Module Updating 1: Upgrading

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 28

SmartLi
Modbus Protocol 7 Acquisition Signals

No. Signal ID State Value Register Bit Read- Severity

Address Field write
Attribute

3 Battery 0: Not allowed 2203 4 R

Management
Module Update 1: Allowed
Enable

4 Inter-battery 0: Self-check has 2203 5 R

cabinet RS485 failed or wiring is
loopback self- not for self-check.
check status
1: Self-check is
successful.

5 Reserved - 2203 6–15 R

NOTE

In the HVDC scenario, the battery cabinet refers to the battery string.
The formula for calculating the alarm address of a battery cabinet in the Huawei-developed
lithium battery system is as follows:
Calculation of the alarm and status signal address of the battery cabinet (1–12)
Start address of battery cabinet x: 2200 + (x – 1) x 4, x = [1, 12]
Each battery cabinet has three alarm registers and one status register.
Address range: 2200–2247
Three alarm registers and one status register are added for each battery cabinet.
Address range: 2248–2295
Start address: 2248 + (x – 1) x 4, x = [1, 12]
Calculation of the alarm and status signal address of the battery cabinet (13–15)
Start address of battery cabinet x: 22200 + (x – 12 – 1) x 4, x = [13, 15]
Each battery cabinet has three alarm registers and one status register.
Address range: 22200–22211
Three alarm registers and one status register are added for each battery cabinet.
Address range: 22248–22259
Start address: 22248 + (x – 12 – 1) x 4, x = [13, 15]

7.1.2.3 Battery Module Alarms and Status

Table 7-9 Alarms of battery cabinet 1 – battery module 1

No. Signal ID Alarm Value Register Bit Read- Severity

Address Field write
Attribute

1 Battery module 0: Normal 2300 0 R Critical

fault 1 1: Abnormal

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 29

SmartLi
Modbus Protocol 7 Acquisition Signals

No. Signal ID Alarm Value Register Bit Read- Severity

Address Field write
Attribute

2 Battery module 0: Normal 2300 1 R Critical

fault 2 1: Abnormal

3 Battery module 0: Normal 2300 2 R Minor

balance alarm 1 1: Abnormal

4 Battery module 0: Normal 2300 3 R Minor

balance alarm 2 1: Abnormal

5 Battery EOD 5 0: Normal 2300 4 R Critical

1: Abnormal

6 Battery 0: Normal 2300 5 R Minor

undertemperature 1: Abnormal
2

7 Battery 0: Normal 2300 6 R Minor

overtemperature 2 1: Abnormal

8 Battery 0: Normal 2300 7 R Minor

overvoltage 2 1: Abnormal

9 Reserved - 2300 8

10 Reserved - 2300 9

11 Reserved - 2300 10

12 Low battery 0: Normal 2300 11 R Minor

voltage 4 1: Abnormal

13 Battery module 0: Normal 2300 12 R Critical

fault 5 1: Abnormal

14 Battery 0: Normal 2300 13 R Critical

undertemperature 1: Abnormal
protection 1

15 Battery 0: Normal 2300 14 R Critical

overtemperature 1: Abnormal
protection 2

16 Battery 0: Normal 2300 15 R Critical

overvoltage 1: Abnormal
protection 3

17 Battery module 0: Normal 2301 0 R Critical

fault 6 1: Abnormal

18 Reserved - 2301 1 R

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 30

SmartLi
Modbus Protocol 7 Acquisition Signals

No. Signal ID Alarm Value Register Bit Read- Severity

Address Field write
Attribute

19 Reserved - 2301 2 R

20 Battery 0: Normal 2301 3 R Critical

undervoltage 1: Abnormal
protection 1

21 Battery module 0: Normal 2301 4 R Critical

fault 7 1: Abnormal

22 Battery module 0: Normal 2301 5 R Minor

balance alarm 3 1: Abnormal

23 Battery EOD 6 0: Normal 2301 6 R Critical

1: Abnormal

24 Abnormal SOH 3 0: Normal 2301 7 R Minor

1: Abnormal

25 Reserved - 2301 8~15 R -

26 Version 0: Normal 3068 0 R Critical

incompatible 46 1: Abnormal

27 Battery module 0: Normal 3068 1 R Critical

fault 8 1: Abnormal

28 Battery module 0: Normal 3068 2 R Critical

fault 9 1: Abnormal

29 Battery module 0: Normal 3068 3 R Minor

alarm 1 1: Abnormal

30 Intra-battery 0: Normal 3068 4 R Minor

cabinet parallel 1: Abnormal
cable alarm 1

31 Battery module 0: Normal 3068 5 R Minor

alarm 3 1: Abnormal

32 Battery module 0: Normal 3068 6 R Minor

alarm 3 1: Abnormal

33 Battery module 0: Normal 3068 7 R Minor

alarm 4 1: Abnormal

34 Battery module 0: Normal 3068 8 R Minor

alarm 5 1: Abnormal

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 31

SmartLi
Modbus Protocol 7 Acquisition Signals

No. Signal ID Alarm Value Register Bit Read- Severity

Address Field write
Attribute

35 Battery module 0: Normal 3068 9 R Minor

alarm 6 1: Abnormal

36 Battery module 0: Normal 3068 10 R Minor

alarm 7 1: Abnormal

37 Battery module 0: Normal 3068 11 R Critical

fault 10 1: Abnormal

38 Inner temperature 0: Normal 3068 12 R Critical

abnormal 11 1: Abnormal

39 Inner temperature 0: Normal 3068 13 R Minor

alarm 1 1: Abnormal

Table 7-10 Status of battery cabinet 1 – battery module 1

No. Signal ID State Value Register Bit Read- Severity
Address Field write
Attribut
e

1 Updating 0: Upgrading 2302 0 R

1: Not
upgraded

2 Battery 0: Detected 2302 1 R

module not
detected 1: Not
detected

3 Reserved - 2302 2~15 R -

4 Reserved - 2303 - R -

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 32

SmartLi
Modbus Protocol 7 Acquisition Signals

NOTE

In the HVDC scenario, the battery cabinet refers to the battery string.
The formula for calculating the analog signal address of a battery module in the Huawei-
developed lithium battery system is as follows:
Calculation of the alarm and status signal address of the battery cabinet module (1–
12)
Start address of battery cabinet x – battery module y: 2300 + (x – 1) x 64 + (y – 1) x 4, x =
[1, 12], y = [1, 16]
Each battery module has two alarm registers and two status registers.
Address range: 2300–3067
Two alarm registers are added for each battery module.
Address range: 3068–3451
Start address: 3068 + (x – 1) x 2 x 16 + (y – 1) x 2, x = [1, 12], y = [1, 16]
Calculation of the alarm and status signal address of the battery cabinet module (13–
15)
Start address of battery cabinet x – battery module y: 22300 + (x – 12 – 1) x 64 + (y – 1) x
4, x = [13, 15], y = [1, 16]
Each battery module has two alarm registers and two status registers.
Address range: 22300–22311
Two alarm registers are added for each battery module.
Address range: 23068–23073
Start address: 23068 + (x – 12 –1) x 2 x 16 + (y – 1) x 2, x = [13, 15], y = [1, 16]
The Huawei-developed lithium battery system supports a maximum of 15 battery cabinets,
and each battery cabinet supports a maximum of 16 battery modules.

Issue 01 (2021-03-23) Copyright © Huawei Technologies Co., Ltd. 33