Badger Meter Impeller ModHopper R9120-5, User Manual, Page: 10 / 16

Modbus Features
MODBUS FEATURES
Supported Modbus Functions
The R9120-5 transceiver responds to the following Modbus query functions:
• 0x11 Report slave id
• 0x03 read holding registers (multiple) 0x06 preset single register
These should be sufficient to perform all operations (read many values, make single change, and identify) In addition, the
device will respond to with Modbus exceptions for invalid function, value, and register if out-of-bound requests are made
Modbus function
0x11 Slave ID
function will respond with ID=49 "Badger Meter, ModHopper, R9120-5"
Modbus Register List
All Modbus registers are read-only, unless otherwise noted
Data Points
offset
-------
point
-------
type
-------
desc
------------------
0 40001 UINT32 N/V) pulse count 1 MSW
1 40002 UINT32 N/V) pulse count 1 LSW
2 40003 UINT32 N/V) pulse count 2 MSW
3 40004 UINT32 N/V) pulse count 2 LSW(same format as pulse
4 40005 UINT16 inst pulse 1 time (seconds)
5 40006 UINT16 inst pulse 2 time (seconds)
6 40007 UINT16 (R/W) min pulse 1 time (seconds)(write clears min/max)
7 40008 UINT16 (R/W) min pulse 2 time (seconds)
8 40009 UINT16 (R/W) max pulse 1 time (seconds)
9 40010 UINT16 (R/W) max pulse 2 time (seconds)
10 40011 UNIT16 (R/W, N/V) inst pulse count size. (default 5)
100 40101
UINT16
Serial Number (bytes 1,2) (serial number)
101 40102
UINT16
Serial Number (bytes 3,4)
102 40103
UINT16
Serial Number (bytes 5,6)
103 40104
UINT16
firmware version (e.g. v1.03, high byte=major,
lowbyte=minor, 0x8000 flag set for Beta)
104 40105
UINT16
boot count
105 40106
UINT32
mfg date MSW
106 40107
UINT32
mfg date LSW
107 40108
UINT16
radio group id setting (0-6)
108 40109
UINT16
alarm flags (0x01 = boot from watchdog)
109 40110
UINT16
max packet buffers used.
110 40111
UINT32
Radio up time (seconds) MSW
111 40112
UINT32
Radio up time (seconds) LSW
112 40113
UINT16
RF short packets. write 0 to clear stat counters.
(R/W firmware 1.17 or later)
113 40114
UINT16
RS485 short packets
114 40115
UINT16
RF Overrun packets
115 40116
UINT16
RS485 Overrun packets
116 40117
UINT16
RF Timeout packets
117 40118
UINT16
RS485 Timeout packets
offset point type desc
------- ------- ------- ------------------
118 40119 UINT16 RF BadChecksum packets
119 40120 UINT16 RS485 BadChecksum packets
120 40121 UINT16 RF RX Good packets
121 40122 UINT16 RS485 RX Good packets
122 40123 UINT16 RF TX packets
123 40124 UINT16 RS485 T Good packets
124 40125 UINT16 RF TX resend packets
125 40126 UINT16 RS485 TX resend packets
126 40127 UINT16 RF RouteChange packets
127 40128 UINT16 RS485 RouteChange packets
128 40129 UINT16 Number of known nodes. (including ourselves)
129 40130 UINT16 Our modbus address
130 40131 UINT16 R9120 Hardware Version (0=rev-A, 1=rev-B, etc)
131 40132 UINT16 Model number bytes 1,2 (4 registers = 8 char string)
132 40133 UINT16 Model number bytes 3,4 (4 registers = 8 char string)
133 40134 UINT16 Model number bytes 5,6 (4 registers = 8 char string)
134 40135 UINT16 Model number bytes 7,8 (4 registers = 8 char string)
Page 10 June 2016 XMT-UM-02107-EN-01