INTELLIGENT CONTROL ZHC4931 User Manual Download

Page: 1 / 60

ZHC4931

User Manual

V1.0

Summary of Contents for ZHC4931

Page 1: ...ZHC4931 User Manual V1 0 ...

Page 3: ...ter mode supports RS485 cascading multiple Modbus devices Compatible with Modbus RTU TCP Support cloud forwarding and cloud networking Support local and remote upgrade Support hardware watchdog Multiple indicators show working status Support domain name address resolution Support setting APN Support signal quality inquiry Support SIM card number query Support heartbeat package Support registration...

Page 4: ...copyright of this manual belongs to Chengdu Zongheng Intelligent Control Technology Co Ltd Anyone who reproduces it without our written consent will bear the corresponding legal responsibility I 1 Product Description 1 2 Quick start 2 3 Product Features 6 Upgrade steps 16 Inquire 55 03 00 12 00 01 29 DB 20 Setting example 26 Effect 27 4 Applications 43 Steps 49 Step 2 50 5 Modbus Instruction frame...

Page 5: ...or specific technical specifications and performance parameters please refer to the ZHC4931 Specification This manual aims to explain some software parameters and equipment function mechanism of ZHC4931 It is recommended that users read this manual carefully before using this product in order to quickly understand the product usage method and work flow Copyright Notice Before the declaration the c...

Page 6: ...c Chengdu Zongheng Intelligent Control Co Ltd II www iotrouter com Modification date June 14 2019 Relevant information ZHC4931 Specification ZHC4931 Wiring Instructions More details https www iotrouter com product21 html ...

Page 7: ...ZHC4931Manual Public Chengdu Zongheng Intelligent Control Co Ltd III www iotrouter com ...

Page 8: ...th Modbus RTU TCP protocol With remote control as the core function and high ease of use users can easily and quickly integrate into their own systems to achieve remote control based on LTE networks 1 2 Appearance P 1 Antenna GPS antenna ZHC4931 supports GPS MAIN LTE network antenna SIM Press the yellow dot next to the SIM card slot to eject the card tray and insert the SIM card DC5 30V terminal b...

Page 9: ... NC is normally closed COM is common DI DI1 2 are 2 way dry wet node detection Shares one COM port AI AI is 1 analog signal input 2 Quick start This chapter is a quick introduction to the ZHC4931 series products It is recommended that users read this chapter and follow the instructions once and you will have a systematic understanding of the equipment 2 1 Hardware environment Test data flow topolo...

Page 10: ...HC4931 through Modbus protocol 2 2 USE Chart 1 Test Initial Parameters ITEM Parameter Network work mode TCP_Client Network data transparent transmission Server Address 115 28 86 143 Server port 55000 Serial working mode Host mode Serial parameters Baud rate 115200 Stop bits 1 Data bits 8 Parity bits None 2 2 1 Serial control Step 1 Open the setting software select the correct serial port number co...

Page 11: ...r com Step 2 Click Search the Modbus address code of the searched device will be displayed in the device address bar If the device address bar is empty check the wiring P4 Search device Step 3 Click Get CFG to get the current configuration of the device P5 Get Device Configuration ...

Page 12: ...4 Click Display to open Auto Refresh to get the current status of the device DO DI AI P6 Obtaining device DO DI AI status Step 5 Control DO relay output P7 Control DO 2 2 1 Network control For ZHC4921 network control function please refer to ZHC4921 Cloud Transparent Transmission Instruction ...

Page 13: ...8 Control closure 55 05 00 10 FF 00 80 2B Response 55 05 00 10 FF 00 80 2B Control disconnect 55 05 00 10 00 00 C1 DB Response 55 05 00 10 00 00 C1 DB 3 2 DI Input 3 2 1 Level detection Register address range 10017 10020 0x0010 0x0013 Support function code 02 read discrete input Detection level The default state of xxxxxw is 1 and the state after input signal is 0 The detection method is 02 functi...

Page 14: ... example Enquiry 55 04 00 30 00 01 3C 11 Query response 7 signal outputs detected 55 04 02 00 07 C9 3E 3 2 3 Key detection Register address range 30081 30082 0x0050 0x0051 Support function code 04 read input register Key detection The default state of the product is 0000 and the state after a key signal press pop is FF00 The detection method is that the 04 function code of the Modbus protocol read...

Page 15: ...Each analog self calibration occupies two register addresses For example the two addresses 0x0212 and 0x213 are AI 1 current 1 self calibration register addresses The two register values are 0x2710 and 0x2710 before delivery The two registers before and after represent the K and B values respectively Calibration current calculation formula Current acquisition value K 0x2710 original current output...

Page 16: ...nction Actively report the value of the enable register address to DO 0xFFFF Inquire 55 06 00 10 FF FF 84 6B Query response 55 06 00 10 FF FF 84 6B OFF DO active reporting function Actively report the value of the enable register address to DO 0x0000 Write in 55 06 00 10 00 00 85 DB Write response 55 06 00 10 00 00 85 DB DO active reporting trigger condition DO active reporting is enabled and DO s...

Page 17: ... OFF DI active reporting function Actively report the value of the enable register address to DI 0x0000 Write in 55 06 01 10 00 00 84 27 Write response 55 06 01 10 00 00 84 27 DI active reporting trigger condition DI active reporting is enabled and DI status changes DI actively report that In particular when the active report data trend is set to Modbus TCP the transaction unit identifier is 0000 ...

Page 18: ...bus RTU protocol message once and resets the period Modbus RTU Message example 55 04 08 00 03 00 01 00 03 00 1A 4F 37 Modbus TCP Message example 00 00 00 00 00 0B 55 04 08 00 03 00 01 00 03 00 1A AI Active report enable register address 40529 0x0210 Support function code 03 read holding register 06 write a single holding register 10 write multiple holding registers Inquire 55 03 02 10 00 01 89 A3 ...

Page 19: ...3C 89 99 Set AI active reporting period to 60s Write in 55 06 02 11 00 3C D5 B2 Write response 55 06 02 11 00 3C D5 B2 AI Active report enable register address 40533 40535 0x0214 0x0216 Support function code 03 read holding register 10 write multiple holding registers Inquire 55 03 02 14 00 03 49 A3 Query response 55 03 06 00 01 0F A0 4E 20 E5 38 Lower limit 4000 Upper limit 20000 Set lower thresh...

Page 20: ... by default Working mode register address 40785 0x0310 Support function code 03 read holding register 06 write a single holding register 10 write multiple holding registers Inquire 55 03 03 10 00 01 88 5F Query response 55 03 02 00 02 08 49 Write in 55 06 03 10 00 01 44 5F Write response 55 06 03 10 00 01 44 5F A HOST MODE P 8 Host mode data flow graph ...

Page 21: ...ct If the issued data cannot be identified by the product it will forward such data to the RS485 bus where the product is located Other devices that are on the same RS485 bus as the product can also send Modbus data address is the product address to communicate with the product If the data cannot be identified by the product this data is forwarded to the server P9 Slave mode data flow graph ...

Page 22: ...nd no longer forwarded 3 6 2 Serial parameters Serial parameter register address 40786 40788 0x311 0x312 Support function code 03 read holding register 10 write multiple holding registers Baud rate 王 Stop bit 王 Data bit 王 Parity bit 王 Inquire 55 03 03 11 00 03 58 5E Query response 55 03 06 00 25 80 01 01 01 1A 21 Write in 55 10 03 11 00 03 06 00 04 B0 01 02 03 B0 E1 Write response 55 10 03 11 00 0...

Page 23: ... needs to apply to our company for the bin file required for the device to run P 10 Local upgrade bin file diagram Upgrade steps Step 1 After connecting the device open the IOTRouter configuration software and select the corresponding product model to enter P11 Local Upgrade Step 1 Step 2 Configure serial parameters Baud rate 115200 Stop bit 1 ...

Page 24: ...e button will switch to the optional state Click the local upgrade button and the log window will prompt related upgrade information At this time there is no need to perform a task operation and wait for the device to automatically perform the upgrade process The user can view the upgrade progress through the progress bar When the upgrade is complete a message will appear in the log window P13 Loc...

Page 25: ...ublic Chengdu Zongheng Intelligent Control Co Ltd 18 www iotrouter com P14 Upgrade completed 3 7 2 Remote upgrade For ZHC4931 remote upgrade function please refer to ZHC4931 Cloud Transparent Transmission Instructions ...

Page 26: ...r address 40018 0x0011 Support function code 03 read holding register 10 write multiple holding registers 06 write single holding register Defaults 0x0002 ZHC4931 DO Restart state setting function parameter introduction CHART 3 DO output state hold function parameter introduction ITEM Parameter range Restart to keep relay status 0x0001 Restart not to keep relay status 0x0002 Inquire 55 03 00 11 00...

Page 27: ...nction parameter introduction CHART 4 Function parameters of DO output status delay time ITEM Parameter range Set DO output state hold time 0 300 65535 Unit s 0 is to disable this function DO output status delay time register address value 0x012C 300 ms DO original state is 0 Issue a command or other way to trigger DO to output a new state 1 DO stays in the new state 1 and flips back to the origin...

Page 28: ...ration P15 Condition control diagram The product supports up to 8 control instructions Condition control register address 1 8 41553 41600 0x0610 0x063F Support function codes 03 read holding registers 10 write multiple holding registers Each instruction occupies 6 registers and the allocation space is as follows CHART 5 Conditional Control Instruction Assignment Store content Enable Input register...

Page 29: ...0020 0x0010 0x0013 Analog 30081 30084 0x0050 0x0053 button Output register type 0 0x01 DO Relay output Output register address 0 00017 00020 0x0010 0x0013 DO Relay output Output action 0 0x01 disconnected 0x02 closed 0x03 flip Output conditions 0 0x01 Follow in the due direction 0x02 Reverse follow 0x03 0x04 0xFF Key action Comparison threshold 0 0x0FA0 0x4E20 4000uA 20000uA Parameter Description ...

Page 30: ...06 10 00 06 4C 92 Forward follow control instruction 01Output action 0F A0 Invalid threshold parameter But must write in 3 Key control When the DI button trigger is detected and the output action is closed the DO relay outputs 1 When the DI button trigger is detected and the output action is open the DO relay outputs 0 When the DI button trigger is detected the output action is flip if the origina...

Page 31: ...relay is 0 if the original state of the DO relay is 0 the new state of the DO relay is 1 Setting instructions 55 10 06 10 00 06 0C FF FF 03 00 10 01 00 10 03 03 0F A0 75 48 Set response 55 10 06 10 00 06 4C 92 5 When the AI acquisition value is less than or equal to the comparison threshold and the output action is closed the DO relay outputs 1 When the AI collection value is less than or equal to...

Page 32: ...C4931Manual Public Chengdu Zongheng Intelligent Control Co Ltd 25 www iotrouter com Setting instructions 55 10 06 10 00 06 0C FF FF 03 00 10 01 00 10 01 04 0F A0 C5 31 Set response 55 10 06 10 00 06 4C 92 ...

Page 33: ...ion space is as follows Chart7 Serial Heartbeat Register Store content Intervals Length Content Length 1 1 8 ZHC4931 serial heartbeat function parameter introduction Chart 8 Parameters of serial heartbeat function ITEM Parameter range Intervals 0 65535 Unit s 0 is to turn off this heartbeat Length 16 bytes Content 0x00 0xFF Setting example Inquire 55 03 03 14 00 28 08 40 Query response 55 03 50 00...

Page 34: ...e 55 10 03 14 00 28 8D 83 Write description Serial heartbeat 1 Heartbeat sending interval with the previous serial port 10s length is 6 bytes Content 0x00 0x00 0x00 0x11 0x22 0x33 Serial heartbeat 2 Heartbeat sending interval with the previous serial port 15s length is 6 bytes Content 0x44 0x55 0x66 0x77 0x88 0x99 Serial heartbeat 3 Not set Serial heartbeat 4 Heartbeat sending interval with the pr...

Page 35: ...rite multiple holding registers Defaults 0x0001 The registration packet occupies 13 register addresses and the allocation space is as follows CHART 9 Register Packet Function Register Storage content Registration package type Registration package location Registration packet length Registration package content Length 1 1 1 10 ZHC4931 registration package function parameter introduction CHART10 Fun...

Page 36: ...quire 55 03 05 55 00 0D 99 07 Query response 55 03 1A 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4A CC Write in 55 10 05 55 00 0D 1A 00 02 00 01 00 09 49 4F 54 72 6F 75 74 65 72 00 00 00 00 00 00 00 00 00 00 00 39 80 Write response 55 10 05 55 00 0D 1C C4 ...

Page 37: ...ace is as follows CHART11 Heartbeat Packet Function Register Storage content Registration package type Registration package time Registration packet length Registration package content Length 1 1 1 10 ZHC4931 heartbeat packet function parameter CHART12 Heartbeat packet function parameter ITEMS Parameter range Heartbeat packet type 0x0001 open Heartbeat packet 0x0002 close Heartbeat packet Heartbea...

Page 38: ...ic Chengdu Zongheng Intelligent Control Co Ltd 31 www iotrouter com Write in 55 10 05 62 00 0D 1A 00 01 00 0A 00 04 70 69 6E 67 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 95 Write response 55 10 05 62 00 0D AD 0A ...

Page 39: ...tional parameters CHART13 Actively reports the data trend and introduces functional parameters ITEMS Parameter Description Parameter range 4G Modbus RTU 4G Server Modbus RTU Protocol data 0x0001 4G Modbus TCP 4G Server Modbus RTU Protocol data 0x0002 485 Modbus RTU Serial RS485 bus Modbus RTU Protocol data 0x0003 485 Modbus TCP Serial RS485 bus Modbus TCP Protocol data 0x0004 Both Modbus RTU 4G Se...

Page 40: ...y ZHC4931 will enter the sleep state and the sleep time is the set interval between reconnection tasks After the sleep time is over the ZHC4931 will try to establish a connection again TCP disconnection reconnection times interval time holding register address 44157 44158 0x103C 0x103D Support function codes 03 read holding registers 10 write multiple holding registers Default value 0x00 0x05 0x00...

Page 41: ...rite response 55 10 10 3C 00 02 88 D0 3 8 9 SIM card number query function Function description query the current SIM card number of the device Default all 0x00 SIM card number query function holding register address 44369 44378 0x1110 0x1119 Support function code 03 read holding register Inquiry 55 03 11 10 00 0A CC E0 Query response 55 03 14 38 39 38 36 30 34 30 34 31 30 31 38 37 30 39 30 30 38 ...

Page 42: ...register Inquiry 55 03 11 1A 00 14 6C EA Query response 55 03 28 22 4C 54 45 22 2C 35 38 2C 2D 38 36 2C 31 35 35 2C 2D 39 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 CE 9D Data area ASCII LTE 58 86 155 9 CHART16 16 Signal strength parameters 1 DATA Parameter Description LTE System NOSERVICE NOSERVICE mode GSM GSM GPRS EDGE mode WCDMA WCDMA HSDPA HSPA mode TDSCDMA TDSCDMA mode LT...

Page 43: ...e_rssi cdma_rssi evdo_rssi an integer indicating the received signal strength These parameters are available for GSM WCDMA LTE CDMA and EV DO mode respectively wcdma_rscp an integer indicating the received signal code power This parameter is available for WCDMA mode wcdma_ecio cdma_ecio evdo_ecio an integer indicating the downlink carrier to interference ratio These parameters are available for WC...

Page 44: ...lligent Control Co Ltd 37 www iotrouter com evdo_sinr an integer indicating the signal to interference plus noise ratio This parameter is available for EV DO mode Note The above 3 table parameters are quoted from EC20_ATC_AT QCSQ AT QTEMP_V1 0 ...

Page 45: ...ter address 44399 0x112F Default value 0x0000 CHART19 GPS enable function parameters ITEMS Parameter range Open GPS 0xFFFF Close GPS 0x0000 GPS data register address 44340 44449 0x112F 0x1160 Support function codes 03 read holding registers 10 write multiple holding registers Enquiry 55 03 11 2F 00 32 FD 3E Query response 55 03 64 30 38 32 36 33 38 2E 30 2C 33 30 2E 35 35 39 39 36 2C 31 30 34 2E 3...

Page 46: ...S positioning mode Quoted from GNGSA GPGSA sentence 2 2D positioning 3 3D positioning 298 54 cog Course Over Ground based on true north Format ddd mm Quoted from GPVTG sentence ddd 000 359 degree mm 00 59 minute 0 0 spkm Speed over ground Format xxxx x unit Km h accurate to one decimal place Quoted from GPVTG sentence 0 0 spkn Speed over ground Format xxxx x unit knots accurate to one decimal plac...

Page 47: ...ork 300ms ON 300ms OFF Establishing TCP connection 600ms ON 200ms OFF Initialize socket 2000ms OFF 100ms ON Normal NET Network connection indicator Network data receiving indicator ALWAYS ON Network data link established ALWAYS OFF Network data link is not established 200ms OFF Received network data DATA Network data sending indicator ALWAYS ON Power on normally ALWAYS OFF Power on abnormally 200m...

Page 48: ...DIInput status indicator ON Dry node DIX and COM short circuit detected Wet node Low input voltage detected OFF Dry node DIX disconnected from COM detected Wet node High input voltage detected AI1 4 AIInput status indicator ALWAYS ON with 4mA current input ALWAYS OFF without 4mA current input ...

Page 49: ...store exit Settings By operating the RESET button the device can return to the factory setting Steps Step 1 Power on the device Step 2 Press and hold the RESET button until the device di di di buzzer sounds three times release the reset button the device restores the factory settings successfully ...

Page 50: ...31 remote server function parameter introduction CHART22 22 Function parameters of remote server ITEM Parameter Description Parameter range communication The mode in which the device is communicating TCP_Client HTTP_Client Server IP domain name Destination server IP domain name 64 bytes Server port Destination server port 65536 Steps Step 1 Modify the Server IP Domain Name and port in the paramete...

Page 51: ...Intelligent Control Co Ltd 44 www iotrouter com Step 2 Click Debug Parameters to restart the device P18 Remote server function diagram 2 Step 3 Log in to the remote server and open the corresponding port P19 Remote server function diagram 3 ...

Page 52: ...ontrol Co Ltd 45 www iotrouter com Step 4 Test the serial port to send transparent data P20 Remote server function diagram 4 Step 5 The remote server sends Modbus RTU TCP protocol to control DO1 to close P21 Schematic diagram of remote server function 5 ...

Page 53: ...5 120 8001 httpman textEcho Test KEY DEVID 123456 data Note The data format sent by the device to the server is DEVID 123456 data xxxxxxxxx The data format issued by the server should be data xxxxxxxxx XXXXXXXXX is hexadecimal data in ASCII format E g Device raw data 0x55 0x03 0x05 0x62 0x00 0x0D 0x28 0xC9 Device HTTP data DEVID 123456 data 55030562000D28C9 If the device resolves that the data doe...

Page 54: ...w iotrouter com Steps Step 1 Modify the Protocol to HTTP in the parameter area of the setting software select HTTP_MODE fill in HTTP_URL and HTTP_KEY and click Save P22 Schematic diagram of HTTP function 1 Step 2 Restart the device P23 Schematic diagram of HTTP function 2 ...

Page 55: ...931Manual Public Chengdu Zongheng Intelligent Control Co Ltd 48 www iotrouter com Step 3 After waiting for NET and DATA to light up use the serial port to send data P24 Schematic diagram of HTTP function 3 ...

Page 56: ... not networking ON OFF Group ID ID of the group device belongs 20 bytes letters numerals Group password Password of the group device belongs 20 bytes letters numerals Group type Type of the group device belongs A B Implementation principle 1 Group devices according to their group ID and password 2 In the same group all type B devices can receive network data sent by all types A devices The followi...

Page 57: ...elligent Control Co Ltd 50 www iotrouter com P25 Digital Radio Configuration Process 1 Step 2 Refer to the following figure to configure the debugging parameters of device A NOTE pay attention to case P26 Digital Radio Configuration Process 2 ...

Page 58: ...bugging parameters of device B with reference to the following figure NOTE pay attention to case P27 Digital Radio Configuration Process 3 Step 5 Restart the device wait until the device s NET light is constantly on indicating that the device has been connected to the ZH Cloud platform then you can send data to the device s serial port to test the data transmission function ...

Page 59: ...ame The ZHC4921 data format follows the general Modbus frame format The device can analyze the Modbus RTU TCP protocol and perform related operations Modbus RTU P28 Modbus RTU Instruction frame Modbus TCP P28 Modbus TCP Instruction frame 5 2 Register allocation For register address allocation please refer to ZHC4921 Register Address Table ...

Page 60: ... www iotrouter com 6 Update History 2019 05 06 Yiru Won V1 0 7 CONTACT US Company Chengdu Zongheng Intelligent Control Technology Co Ltd Address 1 1 1915 Zhidi Getan No 888 Yizhou Avenue High tech Zone Chengdu Sichuan Province Website www iotrouter com Tel 028 83268936 ...

Search results

Summary of Contents for ZHC4931

Reviews:

Related manuals for ZHC4931

Brands by name

Popular brands

INTELLIGENT CONTROL ZHC4931, User Manual

Search results

Summary of Contents for ZHC4931

Reviews:

Related manuals for ZHC4931

Brands by name

Popular brands