Page 1
Advanced Power Meter EM235/PM335/PM17X PRO Series DNP3 Communications Protocol Reference Guide BG0614 Rev. A2 EM235/PM335/PM17X PRO Series_Reference Guide...
Page 2
Every effort has been made to ensure that the material herein is complete and accurate. However, the manufacturer is not responsible for any mistakes in printing or faulty instructions contained in this book. Notification of any errors or misprints will be received with appreciation. For further information regarding a particular installation, operation or maintenance of equipment, contact the manufacturer or your local representative or distributor.
Chapter 1 General General Chapter 1 This document specifies a subset of the DNP3 communications protocol used to transfer data between a master computer station and EM235/PM335/PM17X PRO. The document provides the complete information necessary to develop third-party communications software capable of communication with EM235/PM335/PM17X PRO.
Chapter 2 DNP 3.0 Protocol Implementation DNP 3.0 Protocol Implementation Chapter 2 DNP3 (Distributed Network Protocol) is an open standard designed by Harris Control Division. DNP defines a command-response method of communicating digital information between a master and slave device. Detailed information regarding DNP3 is available in the “Basic 4 Document Set”...
Chapter 2 DNP 3.0 Protocol Implementation 2.2.1 Class 0 Response EM235/PM335/PM17X PRO DNP implementation supports a wide variety of messages. The most common method of getting static object information from the device via DNP is to issue a read Class 0 request.
Chapter 2 DNP 3.0 Protocol Implementation 2.2.3 Device Address Each device on a DNP link must have a unique address. EM235/PM335/PM17X PRO allows a device address in the range of 0 to 65532 to be selected. The DNP master can use addresses 65533 to 65535 for broadcast requests.
Chapter 2 DNP 3.0 Protocol Implementation 2.2.6 Scaling 16-bit Binary Counters Binary counters are stored in the device in 32-bit integer format. Using 16-bit Binary Counter objects can cause over-range errors if the counter value exceeds 32767. Scaling binary counters (see DNP Options setup in Section 3.9) allows changing a binary counter unit from 1 to 1000 in powers of 10 to accommodate a 32-bit counter value to 16-bit object format.
Chapter 2 DNP 3.0 Protocol Implementation The following limitations should be observed: Only one file, either a directory, or a data file, can be open in any time. Close a directory file before reading a data file. The block size in Read responses never exceeds 240 bytes. 2.4.2 Reading Directory Files Directory file names are listed in the following table with the description of the directory contents.
Chapter 2 DNP 3.0 Protocol Implementation 2.4.3 Reading Event Data Files To read an event data file: Issue the OPEN_FILE command to open a file with the desired file name (function 25, object 70, variation 3; response – function 129, object 70, variation 4). Use the received file handle as a file identifier in the following file transfer commands.
Page 11
Chapter 2 DNP 3.0 Protocol Implementation Device Event Log Files File directory name: EV File name template: EV-nnnnn$YYYY-MM-DD-hh-mm-sssss An event file represents an array of 1 to 12 binary structures with the following attributes: Field Description Range Units Type Size, bytes Trigger time, seconds since 1/1/1970 UINT32 Trigger time, fractional seconds in µsec...
Chapter 2 DNP 3.0 Protocol Implementation 2.4.4 Processing errors Any error or timeout that occurs while reading a file causes the file to be automatically closed. Block Number Sequence Data blocks are numbered starting at 0. Blocks must be read in ascending order. You can read the same block several times as long as no request has been sent for the following block.
Chapter 3 DNP Point Map DNP Point Map Chapter 3 Analog Inputs - Basic Set Object : Var. Object : Point Description Options/Range Units Type Notes 30:3 AI:0 V1/V12 voltage 0-Vmax UINT32 30:3 AI:1 V2/V23 voltage 0-Vmax UINT32 30:3 AI:2 V3/V31 voltage 0-Vmax UINT32...
Page 14
Chapter 3 DNP Point Map Object : Var. Object : Point Description Options/Range Units Type Notes 30:3 AI:25 kW import accumulated demand 0-Pmax UINT32 30:3 AI:26 Maximum kVA sliding window demand 0-Pmax UINT32 30:3 AI:27 kVA accumulated demand 0-Pmax UINT32 30:3 AI:28 I1 Maximum ampere demand...
Chapter 3 DNP Point Map Binary Inputs - Basic Set Object : Var. Object : Point Description Range Units Type Notes Relays 01:1 BI:0 Relay #1 status 01:1 BI:1 Relay #2 status … … … 01:1 BI:18 Relay #19 status Digital Inputs 01:1 BI:64...
Chapter 3 DNP Point Map Frozen Binary Counters Object : Var. Object : Point Description Range Units Type Notes Total Energies – Basic Set 21:var FBC:0 kWh import 0-999,999,999 UINT32 21:var FBC:1 kWh export 0-999,999,999 UINT32 21:var FBC:2 kvarh net -999,999,999-999,999,999 UINT32 21:var...
Page 17
Chapter 3 DNP Point Map Object : Var. Object : Point Description Range Units Type Notes 21:var FBC:38659 KWh total 0-999,999,999 UINT32 21:var FBC:38660 kvarh import 0-999,999,999 UINT32 21:var FBC:38661 kvarh export 0-999,999,999 UINT32 21:var FBC:38662 kvarh net -999,999,999-999,999,999 UINT32 21:var FBC:38663 kvarh total...
Chapter 3 DNP Point Map Analog Inputs, Binary Inputs and Counters – Extended Set Object : Var. Object : Point Description Options/Range Units Type Notes 30:4 AI:32768 None UINT16 Special Inputs 30:4 BI:33024 Voltage disturbance 0-100 % Un 30:4 BI:33025 Phase rotation order 0=ERR, 1=POS, 2=NEG Digital Inputs...
Page 19
Chapter 3 DNP Point Map Object : Var. Object : Point Description Options/Range Units Type Notes … 20:5 BC:35343 Counter #16 0-999,999,999 UINT32 Total Energies 20:5 BC:38656 kWh import 0-999,999,999 UINT32 20:5 BC:38657 kWh export 0-999,999,999 UINT32 20:5 BC:38658 kWh net -999,999,999-999,999,999 INT32 20:5...
Page 20
Chapter 3 DNP Point Map Object : Var. Object : Point Description Options/Range Units Type Notes 0.001 30:4 AI:35856 Power factor L2 -1000-1000 INT16 0.001 30:4 AI:35857 Power factor L3 -1000-1000 INT16 0.1% 30:4 AI:35858 V1/V12 voltage THD 0-9999 UINT16 2, 4 0.1% 30:4...
Page 21
Chapter 3 DNP Point Map Object : Var. Object : Point Description Options/Range Units Type Notes 0.1% 30:4 AI:36106 Low current TDD 0-1000 UINT32 30:3 AI:36107 Low L-L voltage 0-Vmax UINT32 0.1% 30:4 AI:36108 Low voltage interharmonics THD 0-9999 UINT32 2, 4 0.1% 30:4...
Page 22
Chapter 3 DNP Point Map Object : Var. Object : Point Description Options/Range Units Type Notes 30:3 AI:36617 Total kvar export 0-Pmax UINT32 30:3 AI:36618 3-phase average L-N/L-L voltage 0-Vmax UINT32 30:3 AI:36619 3-phase average L-L voltage 0-Vmax UINT32 30:3 AI:36620 3-phase average current 0-Imax...
Page 23
Chapter 3 DNP Point Map Object : Var. Object : Point Description Options/Range Units Type Notes 0.001 30:4 AI:37137 Power factor L3 -1000-1000 INT16 0.1% 30:4 AI:37138 V1/V12 voltage THD 0-9999 UINT16 2, 5 0.1% 30:4 AI:37139 V2/V23 voltage THD 0-9999 UINT16 2, 5...
Page 24
Chapter 3 DNP Point Map Object : Var. Object : Point Description Options/Range Units Type Notes 30:3 AI:37387 Low L-L voltage 0-Vmax UINT32 0.1% 30:4 AI:37388 Low voltage interharmonics THD 0-9999 UINT32 2, 5 0.1% 30:4 AI:37389 Low current interharmonics THD 0-9999 UINT32 1-Second High Phase Values...
Page 25
Chapter 3 DNP Point Map Object : Var. Object : Point Description Options/Range Units Type Notes 30:3 AI:37898 3-phase average L-N/L-L voltage 0-Vmax UINT32 30:3 AI:37899 3-phase average L-L voltage 0-Vmax UINT32 30:3 AI:37900 3-phase average current 0-Imax UINT32 1-Second Auxiliary Values 30:3 AI:38144 I4 Current...
Page 26
Chapter 3 DNP Point Map Object : Var. Object : Point Description Options/Range Units Type Notes 30:3 AI:38418 kW import predicted sliding window demand 0-Pmax UINT32 30:3 AI:38419 kvar import predicted sliding window demand 0-Pmax UINT32 30:3 AI:38420 kVA predicted sliding window demand 0-Pmax UINT32 0.001...
Page 27
Chapter 3 DNP Point Map Object : Var. Object : Point Description Options/Range Units Type Notes 30:3 AI:44043 kvar L3 -Pmax-Pmax INT32 30:3 AI:44044 kVA L1 0-Pmax UINT32 30:3 AI:44045 kVA L2 0-Pmax UINT32 30:3 AI:44046 kVA L3 0-Pmax UINT32 0.001 30:4 AI:44047...
Page 28
Chapter 3 DNP Point Map Object : Var. Object : Point Description Options/Range Units Type Notes 0.001 30:4 AI:44293 Total PF lead 0-1000 UINT32 Minimum 1-Cycle Auxiliary Values 30:3 AI:44544 I4 current 0-Imax UINT32 30:3 AI:44545 In current 0-Imax UINT32 0.01Hz 30:4 AI:44546...
Page 29
Chapter 3 DNP Point Map Object : Var. Object : Point Description Options/Range Units Type Notes 0.001 30:4 AI:46095 Power factor L1 0-1000 UINT32 Absolute value 0.001 30:4 AI:46096 Power factor L2 0-1000 UINT32 Absolute value 0.001 30:4 AI:46097 Power factor L3 0-1000 UINT32 Absolute value...
Page 30
Chapter 3 DNP Point Map Object : Var. Object : Point Description Options/Range Units Type Notes 0.01Hz 30:4 AI:46594 Frequency 0-10000 UINT32 0.1% 30:4 AI:46595 Voltage unbalance 0-3000 UINT32 0.1% 30:4 AI:46596 Current unbalance 0-3000 UINT32 30:3 AI:46597 Reserved UINT32 Maximum Demands 30:3 AI:46848...
Page 31
Chapter 3 DNP Point Map Object : Var. Object : Point Description Options/Range Units Type Notes 30:3 AI:47887 Analog input AI13 AI16min-AI16max UINT32 NOTES: When the 4LN3, 4LL3, 3LN3, 3LL3, 3BLN3 or 3BLL3 wiring mode is selected, the voltages will be line-to-neutral; for any other wiring mode, they will be line-to-line. When the 4LN3, 3LN3 or 3BLN3 wiring mode is selected, the voltages will be line-to-neutral;...
Chapter 3 DNP Point Map Factory Device Settings and Identification Object:Var. Object:Point Description Options/Range Units Type Notes Device Identification 30:3 AI:256 Device serial number 0-999999 UINT32 30:3 AI:257 Device model ID 13250/13550 UINT32 Null-terminated string. Each four “EM235”/”PM335/PM17X” 30:3 AI:258-AI:261 Device model name UINT32 characters are...
Page 33
Chapter 3 DNP Point Map Object:Var. Object:Point Description Options/Range Units Type Notes 30:4 AI:280 I1-I3 input overload UINT16 30:4 AI:281 I4 input range 1, 5 UINT16 30:4 AI:282 I4 input overload UINT16 Port Identification 0-2 = serial port COM1-COM3, 3 = IR Port, 4 = Modem port, 30:4 AI:320 Active port number...
Chapter 3 DNP Point Map Device Control Object : Var. Object : Point Description Options/Range Units Type Notes Device Authorization Register 40:1(read) When write: 8-digit password. When read: 0/-1 (Read) AO:192 41:1(write) 0 = access permitted, -1 = authorization required. 0-99999999(Write) Remote Relay Control 10:2(read)
Page 35
Chapter 3 DNP Point Map Object : Var. Object : Point Description Options/Range Units Type Notes Returns zero 10:2(read) BO:86-93 Reserved 0/1 = state OFF/ON PULSE ON 1 12:1(write) CROB:86-93 Returns zero 10:2(read) BO:94-101 Clear pulse counter#9-#16 0/1 = state OFF/ON PULSE ON 1 12:1(write) CROB:94-101...
Page 36
Chapter 3 DNP Point Map Object : Var. Object : Point Description Options/Range Units Type Notes 10:2(read) BO:141 Reserved 0/1 = state OFF/ON 12:1(write) CROB:141 10:2(read) BO:142 Expanded memory fault 0/1 = state OFF/ON 12:1(write) CROB:142 10:2(read) BO:143 CPU EEPROM fault 0/1 = state OFF/ON 12:1(write) CROB:143...
Page 37
Chapter 3 DNP Point Map NOTES: The following restriction should be noted when using object 12 to control the listed points. • The Count byte is ignored. • The Control Code byte is checked: – Pulse On (1) is valid for all points; other codes are invalid and will be rejected. •...
Page 38
Chapter 3 DNP Point Map These self-check alarms are doubled with the corresponding internal indication bits. To manually operate relays, use the Direct-Operate, SBO/Operate or Direct-Operate-No-Acknowledge command to points 0-31 of the Control-Relay-Output-Block object with the Control Code value Latch On. To manually release relays, use the Direct-Operate (or SBO/Operate or Direct-Operate-No-Acknowledge) command to point 0-31 of the Control-Relay-Output-Block object with the Control Code value Latch Off.
Chapter 3 DNP Point Map Device Setup Object:Var. Object:Point Description Options/Range Units Type Notes Basic Setup 40:2 (read) AO:0 Wiring mode UINT16 41:2 (write) 40:1 (read) 0.1 AO:1 PT ratio (primary to secondary ratio) 10-65000 UINT16 41:1 (write) 40:2 (read) 0.1V AO:2 PT secondary (Line-to-Line)
Page 40
Chapter 3 DNP Point Map Object:Var. Object:Point Description Options/Range Units Type Notes 40:2 (read) AO:33 Number of demand periods in a sliding window 1-15 UINT16 41:2 (write) A DI input is considered a pulse or KYZ input. The 40:2 (read) 0 = device clock, AO:34 Demand synchronization source input...
Page 41
Chapter 3 DNP Point Map Object:Var. Object:Point Description Options/Range Units Type Notes 0x0100-0x010F = via tariff inputs DI1-DI16 (bits 0:3 denote the first digital input index used) When read with a calendar tariff 1-16 (does not have effect control option, 40:2 (read) AO:53 Number of tariffs...
Page 42
Chapter 3 DNP Point Map Object:Var. Object:Point Description Options/Range Units Type Notes 0 = 7 bits/even parity, 40:2 (read) AO:116 Data format 1 = 8 bits/no parity, UINT16 41:2 (write) 2 = 8 bits/even parity N/A for COM2- 40:2 (read) 0 = not used, 1 = wait for AO:117 CTS mode...
Page 44
Chapter 3 DNP Point Map Object:Var. Object:Point Description Options/Range Units Type Notes 41:2 (write) 40:2 (read) AO:80 Select/Operate Timeout 2 to 30 (default=10 sec) UINT16 41:2 (write) 40:2 (read) AO:81 Multi Fragment Interval 50 to 500 (default=50 ms) UINT16 41:2 (write) 40:1 (read) AO:82-AO:84 Reserved...
Page 45
Chapter 3 DNP Point Map Object:Var. Object:Point Description Options/Range Units Type Notes Bits 0-1 - DNP Object: 0=none, 1=AI, 2=BI, 3=BC Bit 2 – Object change event scan: 0= disabled, 1=enabled If Event log is Bits 5-6 - DNP event poll enabled, the source class: of a DNP event will...
Page 46
Chapter 3 DNP Point Map Object:Var. Object:Point Description Options/Range Units Type Notes … AO:1245- DNP Class 0 Points Range 32 AO:1247 NOTES: The default object variation indicates the variation that is used for requests with qualifier code 06 (variation 0) when no specific variation is requested by a master station. The sum of all points allocated for change event objects should not exceed 64.
Chapter 3 DNP Point Map 3.10 Generic Data Address Point ID Description Options/Range Units Type Notes Generic Data Point references 0x7400 V1 voltage 0-Vmax UINT32 0x7401 V2 voltage 0-Vmax UINT32 0x7402 V3 voltage 0-Vmax UINT32 0x7404 V12 voltage 0-Vmax UINT32 0x7405 V23 voltage 0-Vmax...
Page 48
Chapter 3 DNP Point Map Address Point ID Description Options/Range Units Type Notes 0.1% 0x7423 V3 interharmonics THD 0-9999 UINT32 0.1% 0x7425 I1 interharmonics THD 0-9999 UINT32 0.1% 0x7426 I2 interharmonics THD 0-9999 UINT32 0.1% 0x7427 I3 interharmonics THD 0-9999 UINT32 0.1% 0x7428...
Page 49
Chapter 3 DNP Point Map Address Point ID Description Options/Range Units Type Notes 0x7513 V12 impulsive voltage 0-Vmax UINT32 0x7514 V23 impulsive voltage 0-Vmax UINT32 0x7515 V31 impulsive voltage 0-Vmax UINT32 0.01% 0x1900 V1 H01 Harmonic voltage, %Un 0-10000 UINT32 0.01% 0x1901 V1 H02 Harmonic voltage, %Un...
Page 50
Chapter 3 DNP Point Map Address Point ID Description Options/Range Units Type Notes 0xC486 Voltage change on phase B/BC, %Un 0.01% UINT32 0xC48B Voltage change on phase C/CA, %Un 0.01% UINT32 NOTES: When the 4LN3, 4LL3, 3LN3, 3LL3, 3BLN3 or 3BLL3 wiring mode is selected, the voltages will be line-to-neutral; for any other wiring mode, they will be line-to-line. When the 4LN3, 3LN3 or 3BLN3 wiring mode is selected, the voltages will be line-to-neutral;...
Chapter 4 Data Scales and Units Data Scales and Units Chapter 4 Code Condition Value/Range Notes Data Scales Voltage Scale PT Ratio, V Vmax Current Scale CT Ratio 1 , A, Imax Current Scale I4 CT Ratio 1 , A, I4max Vmax ...
Chapter 5 Data Formats Data Formats Chapter 5 Format Code Value Description Notes Wiring Mode 3OP2 - 3-wire open delta using 2 CTs (2 element) 4LN3 - 4-wire WYE using 3 PTs (3 element), line-to- neutral voltage readings 3DIR2 - 3-wire direct connection using 2 CTs (2 element) 4LL3 - 4-wire WYE using 3 PTs (3 element), line-to-line voltage readings 3OP3 - 3-wire open delta using 3 CTs (2 1/2 element)
Page 53
Chapter 5 Data Formats Format Code Value Description Notes 16-bit Frozen Counter 16-bit Frozen Counter Without Flag 16-bit Frozen Counter With Time of Freeze Static Analog Input Objects 32-bit Analog Input 32-bit Analog Input Without Flag 16-bit Analog Input 16-bit Analog Input Without Flag Analog Input Change Events 32-bit Analog Change Event Without Time 32-bit Analog Change Event With Time...
Page 54
Chapter 5 Data Formats Format Code Value Description Notes Timestamp Local time in a UNIX-style format. Represents the number of seconds since midnight (00:00:00), January 1, 1970. The time is valid after January 1, 2000. Event Source/Point ID Appendix A Setpoint Operation Events Trigger parameter ID (see EM235/PM335/PM17X 0x0000-0x59FF...
Page 55
Chapter 5 Data Formats Format Code Value Description Notes 0x620F CPU EEPROM fault 0x6210 AC board EEPROM fault 0x6211 I/O board EEPROM fault External Events 0x6300 Power down 0x6308 Power up 0x6309 External reset 0x6318 IRIG-B signal lost 0x6319 IRIG-B time unlocked 0x631A IRIG-B time locked 0x6320...
Page 56
Chapter 5 Data Formats Format Code Value Description Notes 0xF700 Device function/option disabled 0xF800 Device function restarted 0xF900 Device function stopped Control Events 0xA0XX Position change (bits 0:7=switch number) 0xA1XX Operation activated (bits 0:7=switch number) 0xA2XX Operation terminated (bits 0:7=switch number) 0xA3XX Operation terminated by timeout (bits 0:7=switch number) Setpoint Operation Events...
Page 57
Chapter 5 Data Formats Format Code Value Description Notes 0x20 DNP 3.0 options setup 0x21 DNP 3.0 events setup 0x22 DNP 3.0 event setpoints 0x23 Calibration registers 0x24 Date/Time Setup 0x25 Net setup 0x26 AI setup 0x27 Waveform log setup 0x28 PQ log setup 0x29...
Chapter 6 Configuring DNP3 Configuring DNP3 Chapter 6 The PAS software supplied with EM235/PM335/PM17X PRO provides a configuration tool for customizing your device for use with DNP3 client applications. See EM235/PM335/PM17X PRO Operation Manual for more information on installation and operating PAS on your computer. DNP Options From thessss Meter Setup menu select Protocol Setup and click on the DNP Options tab.
Page 59
Chapter 6 Configuring DNP3 Parameter Options Default Description 32-bit The default AI object variation for requests with 32-bit –Flag Analog Input Object 16-bit -Flag qualifier code 06 when no specific variation is 16-bit requested 16-bit –Flag 32-bit -Time The default AI change event object variation for 32-bit +Time Analog Input Change Event 16-bit +Time...
Page 60
Chapter 6 Configuring DNP3 Parameter Options Default Description Defines the maximum number of file entries the device may include in a directory response (the most recent events are always reported). The Max. Directory Entries 10-100 maximum number of entries in a disturbance waveform directory is twice the number specified.
Chapter 6 Configuring DNP3 Configuring DNP Class 0 Response The most common method of getting static object information from the device via DNP is to issue a read Class 0 request. The device allows you to configure the Class 0 response by assigning ranges of points to be polled via Class 0 requests.
Chapter 6 Configuring DNP3 Configuring DNP Event Classes The device generates object change events for any static analog input, binary input, and binary counter point when a corresponding point either exceeds a predefined threshold, or the point status changes. A total of 64 change event points are available for monitoring.
Page 63
Chapter 6 Configuring DNP3 • Delta – a new event is generated when the absolute value of the difference between the last reported point value and its current value exceeds the specified deadband value; • More than (over) - a new event is generated when the point value rises over the specified threshold, and then when it returns below the threshold minus a predefined return hysteresis –...
Appendix A DNP Application Messages Appendix A DNP Application Messages The device is a DNP IED responding to external DNP Master requests. Table A-1 describes EM235/PM335/PM17X PRO application level responses to external requests, including object variations, functions, codes and qualifiers supported by the device. The object and formats are detailed in the DNP Basic 4 Documentation Set.
Page 65
Appendix A DNP Application Messages Object Request Response Function Qualifier Function Qualifier Object Variation Description Code Code Code Code 16-bit Counter Change Event with Time 07,08 Analog Input (respond like 30:3) 32-bit Analog Input 16-bit Analog Input 32-bit Analog Input without flag 16-bit Analog Input without flag Analog Change Event 32-bit Analog Change Event without Time 1...
Page 66
Appendix A DNP Application Messages For this object, the quantity specified in the request must be exactly 1 or an index of 0, as there is only one instance of this object defined in the device. For this object, the qualifier code must specify an index 7 only. Respond with time object 50 variation 2 indicating time until device availability.
Object Group Request Function Codes Response Function Codes Object Variation Request Qualifiers Response Qualifiers Object Name (optional) Vendor Name: SATEC Ltd. Device Name: EM235/PM335/PM17X advanced Power Meter Highest DNP Level Supported: Device Function: Master ◼ Slave For Requests For Responses L2 Device supports READ of each object using either all points (Qualifier = 6) or specific points using qualifier defined in Basic 4 Documentation Set: 00, 01, 03, 04, 07, 17, 27, 08, 18, 28.
Page 68
Appendix B DNP Device Profile Device Profile Document (continued) Timeouts while waiting for: ◼ None Fixed at ________ Variable Configurable Data Link Confirm Complete Appl. ◼ None Fixed at ________ Variable Configurable Fragment Configurable ...
Page 69
Appendix B DNP Device Profile Device Profile Document (continued) Sends Unsolicited Responses: Sends Static Data in Unsolicited Responses: ◼ Never ◼ Never Configurable (attach explanation) When Device Restarts Only certain objects When Status Flags Change Sometimes (attach explanation) ...
Need help?
Do you have a question about the EM235 Series and is the answer not in the manual?
Questions and answers