HMS Networks (Intesis) · Protocol gateway
INMBSTOS001R000 – Toshiba VRF and Digital systems to Modbus RTU interface Modbus register map
Default configuration
- Protocol
- RS485
- Port
- 502
- Unit ID
- 1
- Addressing
- 0-based
- Byte order
- Big endian
- Word order
- High word first
- Baud rate
- 9600
- Parity
- None
- Data bits
- 8
- Stop bits
- 2
This device has an RS-485 interface. Reach it through a Modbus RTU-to-TCP gateway, configured with the factory serial settings above.
Register map
| Address | Count | Name | Type | Unit | Scale | Access |
|---|---|---|---|---|---|---|
| 0 | 1 | AC unit on/off 0 = off, 1 = on. | UInt16 | - | 1 | RW |
| 1 | 1 | AC unit mode 0 = Auto, 1 = Heat, 2 = Dry, 3 = Fan, 4 = Cool; the available values depend on the indoor unit. | UInt16 | - | 1 | RW |
| 2 | 1 | AC unit fan speed 0 = Auto, 1 = Low, 2 = Mid, 3 = High. | UInt16 | - | 1 | RW |
| 3 | 1 | AC unit vane position 1 = POS1 (horizontal), 2 = POS2 (horizontal), 3 = POS3 (medium), 4 = POS4 (vertical), 5 = POS5 (vertical), 6 = POS6, 7 = POS7, 10 = Swing. | UInt16 | - | 1 | RW |
| 4 | 1 | AC unit temperature setpoint -32768 = initialization value; 16..32 °C (raw 160..320 at the factory degC x10 setting), 61..90 °F. | Int16 | °C | 0.1 | RW |
| 5 | 1 | AC unit temperature reference -32768 = the value from the indoor unit's own sensor is invalid; when register 22 carries a valid value this register takes it over. | Int16 | °C | 0.1 | RW |
| 6 | 1 | Window contact 0 = closed (default), 1 = open. | UInt16 | - | 1 | RW |
| 7 | 1 | Gateway disablement 0 = INMBSTOS001R000 enabled (default), 1 = disabled. Stored in non-volatile memory. | UInt16 | - | 1 | RW |
| 8 | 1 | AC remote control disablement 0 = remote control enabled (default), 1 = disabled. Stored in non-volatile memory. | UInt16 | - | 1 | RW |
| 9 | 1 | AC unit operation time 0..65535 hours, counts the time the indoor unit is in the 'On' state. Stored in non-volatile memory. | UInt16 | h | 1 | RW |
| 10 | 1 | AC unit alarm status 0 = no alarm condition, 1 = alarm condition. | UInt16 | - | 1 | R |
| 11 | 1 | Error code 0 = no error; 65535 (= -1) = communication error between gateway and AC indoor unit; any other value is listed in the manual's error-code table. | UInt16 | - | 1 | R |
| 13 | 1 | 'Open Window' switch-off timeout 0..30 minutes; factory setting 30. | UInt16 | min | 1 | RW |
| 14 | 1 | Modbus RTU baud rate 2400 / 4800 / 9600 (default) / 19200 / 38400 / 57600 / 76800 / 115200 bps; above 19200 needs firmware 2.3 or newer. | UInt16 | - | 1 | R |
| 15 | 1 | Modbus slave address 1..63. | UInt16 | - | 1 | R |
| 21 | 1 | Max number of fan speeds Number of fan speeds the indoor unit offers. | UInt16 | - | 1 | R |
| 22 | 1 | Indoor unit ambient temperature from external sensor -32768 = no external sensor value; otherwise a temperature supplied from the Modbus side. | Int16 | °C | 0.1 | RW |
| 23 | 1 | AC real temperature setpoint Equals register 5 in practice: the gateway implements no virtual temperature, so the user value is what the indoor unit uses. | Int16 | °C | 0.1 | R |
| 49 | 1 | Device ID 0x1F00. | UInt16 | - | 1 | R |
| 50 | 1 | Software version Gateway firmware version. | UInt16 | - | 1 | R |
| 97 | 1 | Block periodic sendings 0 = non-blocked (default), 1 = blocked. | UInt16 | - | 1 | RW |
Read this device live with Modbus Connect, free for Windows, macOS and Linux
Related guides
Notes
Source: HMS Networks / Intesis user manual 'INMBSTOS001R0xx Toshiba VRF and Digital systems to Modbus RTU Interface', r2.9, section 4.2 'Modbus Registers' (4.2.1 control and status, 4.2.2 configuration). The gateway is Modbus RTU (RS-485) and exposes its own fixed holding-register map that mirrors the indoor unit; reach it through a Modbus RTU-to-TCP gateway using the factory serial settings above (9600 bps, 8-N-2, Modbus server address 1; the gateway auto-detects 8-N-1 and 8-N-2). All registers are 16-bit unsigned holding registers, big-endian. The addresses in this file are the manual's base-0 'protocol addresses' (the manual also prints a base-1 'PLC address', which is always this address + 1). Temperature registers are signed 16-bit and their magnitude follows the gateway's DIP switches (degC x1, degC x10 or degF), so the 0.1 scale factors below assume the factory default degC x10; with the x1 setting the readings are whole degrees. The manual's section 4.3 'advanced registers' block is left out on purpose: those addresses are computed per indoor unit as (IU-1)*25+4000 and only exist for the non-default indoor-unit type selected on SW1, so they are not a fixed part of the map.