King Pigeon S175, User Manual

Page 1: ...S175 S375 User Manual Ver 1 5 Date Issued 2020 07 29 King Pigeon Hi Tech Co Ltd www IOT Solution com GSM 3G 4G LTE Cellular IoT Gateway ...

Page 2: ... Start to Configure 11 6 2 Setting Self checking 13 6 3 Configuration software interface and running 14 Basic Settings 14 Number Settings 15 T H Trigger Settings 16 T H Alarm Settings 17 Timer Settings 18 Interlock Settings 19 RS485 Serial Port Settings 19 Slave Settings 20 Register Settings 22 Cellular network Settings 22 Ethernet Settings only for S37X 24 Historical Record 25 7 Configuration and...

Page 3: ...thernet as Modbus TCP master 2019 9 23 V28 V1 3 1 Modified Cellular network Settings default parameter 2 Adding MQTT protocol instruction 2020 04 09 V28 V1 3 Revised MQTT data release format 2020 7 29 V28 V1 3 Remove S173 174 S373 S374 This handbook has been designed as a guide to the installation and operation of S17X S37X GSM SMS GPRS 3G 4G Cellular IoT Gateway Statements contained in the handbo...

Page 4: ...O tags Boolean 16 Bit 32 Bit 64 Bit S175 1 2 8G 64 128 64 64 S375 1 2 1 8G 64 128 64 64 S175E 1 2 8G 64 128 64 64 S375E 1 2 1 8G 64 128 64 64 Notice 1 Default version is GSM GPRS module inside 2 For 3G WCDMA 4G LTE version please tell our sales where would you like to use them 3 The S175 375E series has no communication module so it can t call and SMS to alarm ...

Page 5: ...s a remote RS485 data transmission remote extend I O tags control remote smart PLC meters monitoring The Cellular IoT Modbus Gateway S17X S37X supports 2 RS485 transparent data transmission and performs as Modbus Slave over GPRS 3G 4G NB IoT network and RS485 serial port Moreover the Cellular IoT Modbus RTU can be used as Modbus RTU Master to reading smart meters I O modules PLC and converts to SM...

Page 6: ...onitoring communication with Slaves Provides 1 channel 9 36VDC power source output for external device saving wiring cost Automatically resend the data while communication interrupt or failure and failure will alert by SMS text to users Supports remotely restart the RTU and configure operate it by SMS commands remotely 10 SMS Alert and auto dial numbers for receiving alarm message can program to r...

Page 7: ...nterfaces 1 USB Port Protocols SMS GPRS UDP TCP Modbus RTU Modbus TCP and more equipment protocols can be added according to requirements Ethernet only for S37X 1 RJ45 Ethernet port for connect internet WAN or LAN RS485 2 RS485 Support Transparent transmission and Modbus RTU Slave Modbus RTU Master Temp Hum Inputs Temperature range 40 C to 80 C Humidity Range 0 100 RH Power Outputs 1 Port for exte...

Page 8: ... Ltd Ver 1 3 GSM SMS GPRS 3G 4G Cellular IoT Gateway 5 Physical Layout and Installation Diagram 5 1Control Unit size Front view Left side view Right side view Upward view Bottom view 5 2Interface definition Function Description Top view ...

Page 9: ... AM230x Function Description GND GND 485_1 B 485_1 B data 485_1 A 485_1 A data GND GND 485_2 B 485_2 B data 485_2 A 485_2 A data DC_OUT Power source output port Negative electrode DC_OUT Power source output port positive electrode DC_IN External DC Power input port negative electrode DC_IN External DC Power input port positive electrode 5 3LED Indicator Definition ...

Page 10: ...is ON disarmed is OFF Run RTU running status indicator ON or OFF stands for RTU halted flicks slowly stands for RTU running RS485 1 When transmitting data by RS485 the LED will flick otherwise it is off RS485 2 When transmitting data by RS485 the LED will flick otherwise it is off Switch Button Definition Power Switch For switch ON or OFF the RTU Upgrade Firmware Switch For upgrade firmware purpos...

Page 11: ... on to check the LEDs status according to above mentioned LED Definitions keep switch on it during the programming 2 The PC Configuration in the CD please click it to run Also can download from www GPRS M2M com under S17X S37X page directly Below is the steps to setup the parameters by PC Configuration please follow it step by step 6 1 Start to Configure Step1 Install the Configuration software Th...

Page 12: ... it Enter the password default is 1234 Then you can enter the configuration page as below Notice If display the below windows then means the RTU connect to the PC failure The reasons are below 1 USB Driver installation failure 2 USB Cable connection is disconnected 3 The Upgrade Firmware Switch at Load side not at Work side 4 Power Switch switched off or DC Power Connection is disconnected Step6 C...

Page 13: ... tool erased the firmware Can t enter into working mode 1 The Upgrade Firmware Switch at Load side not at Work side Solution Switch the power switch to OFF Upgrade switch to Work side Power switch to ON Can t find COM Port 1 Have not installed driver 2 PC system problem cause driver installation failure can t support Apple OS system 3 Check USB line and try other common driver software such as Dri...

Page 14: ...ave it for the second RTU then you can load profile directly to save you time Default Click it to recovery the parameters to factory defaults Notice 1 After setting or revising parameter need to click the Save button of this page for saving parameters in device 2 Before export profile need to read Slaves configuration details first to avoid Slaves information missing 3 Easy way to revise parameter...

Page 15: ...when power on Tick it stands for once the RTU powered up the RTU will enter into Arm Mode automatically Auto Arm after disarmed Fill the timeout to enter into Armed Mode automatically after disarmed operation This is useful for security protection applications Tips Arm Under this mode any alarm occurrence will send SMS and dial the authorized numbers immediately And execute the programmed I O outp...

Page 16: ...or while external DC Power loss will send SMS to this number Power Recovery Tick it stands for while external DC Power recovery will send SMS to this number Cellular network Failure Tick it stands for while GPRS connection re try 3 times and still failure will send SMS to this number Relay Switch Tick it stands for while relay is activated will send SMS to this number Slave Alarm Tick it stands fo...

Page 17: ...d out at the transducer s specification Minimum The transducer s minimum measure range E g 50 Celsius degree Usually it can be found out at the transducer s specification Current Value Stands for input s current value of the transducers Threshold High The high value reached need to alarm Example set 50Celsius degree to alert Threshold Low The low value reached need to alarm Example set 30Celsius d...

Page 18: ...utomatically or it with repeat this action according to the interval time Tick it stands for enable this timer event Reminder When GPRS 3G 4G data transmission protocol is King Pigeon IoT RTU Protocol the periodically auto upload default enable and upload every 5 minutes Tick stands for enable this timer function otherwise is disable Weekly Hour Minute Stands for what day and at what time does the...

Page 19: ...er SMS report but finally not get the SMS Solution Have no ticked the Timer Reporting SMS Content in first Basic Parameter Settings page Interlock Settings This page is for setup if what happen then what action does the RTU should execute it is a programmable logic events Total can program up to 40 logic events for automatically control purposes Event Stands for if this occurrence Action Stands fo...

Page 20: ...polling command Time out When RS485 used as Master after sending command to slave the longest time waiting for slave data back If longer than this setting value will ensure slave no response Slave Error ACK time When RS485 used as Master if no response time between Master and Slave longer than this value will send SMS to authorize number Slave Settings This page is for adding revising and deleting...

Page 21: ...n Code Stand for Modbus RTU protocol function code command for slave reading and writing Register Starting Address The starting register address for slave data reading and writing Mapping Register Qty How many data quantity need to read used for mapping to device register address Mapping Address Starting Address Stand for mapping the slave start register data to the device start mapping address Ma...

Page 22: ...mmunication with monitoring software or clould via GPRS 3G 4G as below 1 Modbus RTU Protocol means Modbus RTU over TCP commucation with upper computer system For example connect to www my m2m com cloud server Domain modbus dtuip com Port 6651 2 Modbus TCP Protocol commucation with upper computer system For example connect to www my m2m com cloud server Domain modbus dtuip com Port 6655 3 King Pige...

Page 23: ...ogin message otherwise it will continue send login message according to Reconnection Times still not response will offline once time then try to reconnect according to Server Offline 3 Times Device Reconnection Time Logout Packets Once server send to device device will be offline Heartbeat Packets Heartbeat content to avoid network offline Heartbeat ACK Packets Once set device need response within...

Page 24: ...Close optional Communication protocol Disable Modbus RTU protocol IoT RTU protocol or Modbus TCP protocol optional Connection mode TCP or UDP optional Local listening port it can be used to set a port number to listen to the visitor s data the default is 502 02 Advanced Settings Retransmission times After setting heartbeat and login message if server no response the times which server will send da...

Page 25: ... send login message according to Reconnection Times still not response will offline once time then try to reconnect according to Server Offline 3 Times Device Reconnection Time Heartbeat Interval Network keep online heartbeat interval time 06 Ethernet Slave Settings IP The IP address of Modbus slave Port The port of Modbus slave 07 MQTT Setting MQTT Client ID The device ID that needs to be subscri...

Page 26: ...rds Save as CSV Historical records export as CSV file Erase RTU Records Click this button will erase all device historical records be careful 7 Configuration and Reset The Load Profile and Export Profile is very useful while you need to program bulks of RTU with similar parameters The Default function can reset the device to factory default status 7 1 Export Profile Click Export Profile button cho...

Page 27: ... 27 of 55 King Pigeon Hi Tech Co Ltd Ver 1 3 GSM SMS GPRS 3G 4G Cellular IoT Gateway Then it will display as below after a moment 7 2 Load Profile Click Load Profile button chose the file which need to load ...

Page 28: ...set When device is on connect the PC configuration software click the Default button on software to reset It will restore all parameters of the device to the factory default initial value Please contact King Pigeon sales if forget password website www gprs m2m com 8 Connection and Application 8 1 Wire Connection 8 1 1 Power wire connection ...

Page 29: ...nput S17X S37X supports one channel temperature and humidity input for sensor AM230X as below 8 2 Quickly Verify Device Communication Function Connect power supply to the device then switch on the device run the configuration software and log in In Basic Settings page click Read the RTU Time Write the RTU Time to write the correct time to the device Choose Arm automatically when power on Then clic...

Page 30: ...m card switch on the device after the device register network successfully the phone number can receive SMS sent by the device If you cut off the device power the phone number will receive power failure SMS sent by the device That shows the device work normally 8 3 Modbus RTU Slave Application Device support Modbus RTU slave function can be connected to HMI SCADA DCS MES system It can be used for ...

Page 31: ...odbus protocol as below 3 In Serial Port setting page set device parameter as below A RS485 used as Modbus RTU Slave B Baud Rate Data Bit Parity Bit Stop Bit setting should be corresponding with HMI otherwise commucation will be failure If multiple Masters all Masters parameter should corresponding with device C No need set Scan Rate Time Out Slave Fault Verify Time D Click Save button 4 In HMI co...

Page 32: ...rning Data 2 04 B6H Returning power supply voltage value 16 CRC Verify 2 3A 46H CRC0 CRC1 low byte in front high behind Example Inquiry device power supply voltage value then Server Send 01 04 00 0E 00 01 50 09 01 Device address 04 Read input register 00 0E Origin register address 00 01 Read 1 input register value 50 09 CRC verify Device Answer 01 04 02 04 B6 3A 46 01 Device address 04 Read input ...

Page 33: ...perature and humidity real value is 28 3 66 2 92 6A CRC verify 8 4 Modbus RTU Master Application When RS485 as Modbus RTU Master can extend I O tags support slaves for connecting Remote I O data acquisition module Smart meter Power monitoring module Smart transducer Can mapping register value from Slave to Master these registers can be setup high or low threshold value and NC NO type moreover can ...

Page 34: ...r refer to port setting part Serial Port Setting In Serial Port setting page choose RS485 port as Modbus RTU Master Baud Rate Data Bit Parity Bit and Stop Bit parameter need to be same as connected device Scan Rate Time Out and Slave Failure Verify Time can be set as default Step5 Back to Slave Mapping page as below right click the line to add Click Add Slave as below ...

Page 35: ... then add the analog 16 Bit Step6 Right click the line to edit the slave Click the Editor Slave to set channel name alarm SMS content recovery SMS content and relay active etc as below Step7 Restart the device enter into working mode device running according parameter setting include alarm SMS and call If set the network communication function then can remote transmit data to cloud server via GPRS...

Page 36: ...oil Return Byte Length 1 02H Return Data Length Returning Data 2 73 01H 16CRC Verify 2 5D 0CH CRC0 CRC1 low byte in front high behind Example Start from address 64 read 10 Boolean mapping data value then Server send 01 01 00 40 00 0A BD D9 01 Device address 01 Read holding coil 00 40 Read Boolean data start from address 64 00 0A Serial to read 10 Boolean status BD D9 CRC verify Device answer 01 01...

Page 37: ...EX Description Device Address 1 01H 01H Device according to the data Master send Function Code 1 05H Write single holding coil Boolean Mapping Register Address 2 00 40H Range 0040H 007FH Write value 2 FF 00H This value FF 00H or 00 00H FF 00H stands for write 1 00 00H stands for write 0 16 CRC Verify 2 8D EEH CRC0 CRC1 low byte in front high behind Example Modify Boolean mapping address 64 status ...

Page 38: ...is Decimal data 20000 00 0A Read 10 register value D3 2F 16 Bit CRC verify Device answer 01 03 14 00 14 00 1E 00 28 00 32 00 4B 00 41 00 0A 00 25 00 14 00 2A FB 34 01 Device address 03 Read holding register 14 Returning 20 byte 00 14 00 1E 00 28 00 32 00 4B 00 41 00 0A 00 25 00 14 00 2A Returning data Register Mapping Address 20000 20001 20002 20003 20004 20005 20006 20007 20008 20009 Value 00 14 ...

Page 39: ...dress 20000 register value 00 64 Write Decimal value 100 9E C3 16 Bit CRC verify Device answer 01 06 4E 20 00 64 9E C3 01 Device address 06 Modify single holding register value 4E 20 R Modify address 20000 register value 00 64 Modify to Decimal value 100 9E C3 16 Bit CRC verify If need to modify multi data type mapping address pls check function code 16 in Modbus protocol 8 5 Modbus TCP Master App...

Page 40: ...lave Setting In Slave page right click the line to add as below Click Add Slave as below If one slave have multi register then need to add separately according to register type For example Mxxx remote I O module with digital and analog inputs need to add the digital Boolean first then add the ...

Page 41: ...ng slaves device switched off on to restart is necessary 8 5 1 Read Boolean Mapping Address Data Master Send Data Format Content Bytes Data H HEX Description Transaction ID 2 00 00H Identification of Modbus requests responses transactions Protocol Identifier 2 00 00H 00 00 Modbus protocol Data Length 2 00 06H The length of subsequent data Device Address 1 01H 01H Device Range 1 247 according to se...

Page 42: ...gth of subsequent data 01 Device address 01 The function code of reading Boolean 02 Return Data Length 73 01 Return 10 Boolean status High byte stands for low address data low address stands for high address According to Modbus protocol fix 73 01H real value to be 01 73H converter to Binary as below Register mapping address Invalid Invalid Invalid Invalid Invalid Invalid 73 72 Value 0 0 0 0 0 0 0 ...

Page 43: ...erver send 00 00 00 00 00 06 01 05 00 40 FF 00 00 00 Transaction ID 00 00 Protocol Identifier 00 00 stands for Modbus protocol 00 06 The length of subsequent data 01 Device address 05 Write holding coil 00 40 The mapping address which need to revise FF 00 Write 1 Device answer 00 02 00 00 00 06 01 05 00 40 FF 00 00 00 Transaction ID 00 00 Protocol Identifier 00 00 stands for Modbus protocol 00 06 ...

Page 44: ...r starting address current is Decimal data 20000 00 0A Read 10 register value Device answer 00 00 00 00 00 17 01 03 14 00 14 00 1E 00 28 00 32 00 4B 00 41 00 0A 00 25 00 14 00 2A 00 00 Transaction ID 00 00 Protocol Identifier 00 00 stands for Modbus protocol 00 17 The length of subsequent data 01 Device address 03 Read holding register 14 Returning 20 byte 00 14 00 1E 00 28 00 32 00 4B 00 41 00 0A...

Page 45: ...r send 00 00 00 00 00 06 01 06 4E 20 00 64 00 00 Transaction ID 00 00 Protocol Identifier 00 00 stands for Modbus protocol 00 06 The length of subsequent data 01 Device address 06 Modify single holding register value 4E 20 Modify address 20000 register value 00 64 Write Decimal value 100 Device answer 00 00 00 00 00 06 01 06 4E 20 00 64 00 00 Transaction ID 00 00 Protocol Identifier 00 00 stands f...

Page 46: ... need set Scan Rate Time Out Slave Fault Verify Time D Click Save button Reminder The device ID which connect to RS485 can t be same with S257 s device ID 8 7 Device connect to cloud Application Device can connect to cloud and SCADA via GPRS 3G 4G network also can connect to clients own server and King Pigeon www My M2M com cloud server King Pigeon my m2m com cloud as sample below King Pigeon my m...

Page 47: ...tact King Pigeon Sales for Login Message Writing 3 Click Save Settings in the menu then switch device off 4 Switch the device on enter into working mode then Slave and Master I O can connect to network 5 Need enter MQTT parameter when choose MQTT protocol Server domain IP device connecting port Server 2 as back up Only support Primary Server 1 Secondary Server 2 now when server 1 connecting failur...

Page 48: ...nit received the SMS Command will return SMS to confirmation if no SMS return please check your command or resend again 8 The SMS commands that you will certainly use in the GSM units are the following SMS Commands For Program and Operation the S17X S37X SMS Command List The SMS commands will be used for remote control the RTU are below 1 Commands error return SMS Event Return SMS Content Any inco...

Page 49: ...eries number T tel number Notice Series number 0 9 Tel1 Tel2 Tel3 13570810254 Tel4 Tel5 Inquiry password A Return all numbers Delete password A series number Return 0 4 or 5 9 numbers 9 Setup Daily Report time SMS Command Return SMS Content Setup password DR series number T time Notice Series number 0 9 e g 1234DR1T12 30 Daily SMS Report at xx xx Inquiry password DR Delete password DRDEL 10 Set Se...

Page 50: ...e Holding Coil Function Code 01 Function Code 05 Function Code 15 Boolean Register Address Decimal Definition Flag MQTT Description 64 Boolean 64 REG64 Boolean type slave mapping address can mapping slave input coil and holding coil status 65 Boolean 65 REG65 Same as above 125 data similar as above Same as above 127 Boolean 127 REG127 Same as above 16 Bit Slave Register Assignment Table Read and W...

Page 51: ...98 32 Bit data 20198 REG20198 Same as above Same as above 20200 32 Bit data 20200 REG20200 Same as above Same as above 60 data similar as above Same as above Same as above 20254 32 Bit data 20254 REG20254 Same as above Same as above 64 Bit Slave Register Assignment Table Holding Register 64 Bit Register Address Decimal Definition Flag MQTT Data Type Description 20256 64 Bit data 20256 REG20256 Sor...

Page 52: ...ker is the server and the message publisher can be the subscriber at the same time Devices use MQTT communication through only two steps 1 Devices publish the Topic through a proxy server 2 Users can create a account on the proxy server to subscribe to the device to achieve monitoring Publisher S37X Broker King Pigeon cloud2 0 Subscriber User account Publish message Subscribe message Publish messa...

Page 53: ... the type is divided into the following 1 The numeric character is value followed by data value 2 The positioning character is lat longitude followed by longitude value lng latitude is followed by latitude value 3 The switch character is switcher followed by data value 4 The string character is str followed by data value Flag the character is flag followed by flag For example KingPigeon Cloud 2 0 ...

Page 54: ...ce control sensorDatas sensorsId 211267 cloud platform sensor ID value 225 switch type data 0 is off 1 is closed flag REG20116 flag down down platform downlink message Note The data sent by the device control must contain three types of information sensor ID data type flag flag and downlink message packet Sensor ID The character is sensorsID and the ID is automatically generated according to the p...

Page 55: ...ilt communication module easily upgrade Gsm to 3G or 3G to 4G network 15 Warranty 1 This system is warranted to be free of defects in material and workmanship for one year 2 This warranty does not extend to any defect malfunction or failure caused by abuse or misuse by the Operating Instructions In no event shall the manufacturer be liable for any alarm system altered by purchasers The End Any que...