IST-100-1 PROTOCOL MANUAL Rev-28871

QUALITROL 509ITM Series
QUALITROL 509ITM Series


Intelligent Transformer Monitor

Protocol Manual: DNP V3.00, Modbus, IEC 60870 &
IEC 61850 Communications
Document ID: IST-100-1 ECN-28871
www.qualitrolcorp.com
Legal
Information in this document is subject to change without notice. This document is provided to purchasers of Qualitrol
products for use in the installation, operation and servicing of such products. No other use, nor any reproduction,
distribution or the making of any derivatives of this document is authorized, without the express prior written permission of
Qualitrol.
Qualitrol endeavors to ensure the accuracy and quality of its published materials; however, no warranty, expressed or
implied, is provided. Qualitrol disclaims any responsibility or liability for any direct or indirect damages resulting from the
use of the information in this manual or products described in it. Mention of any product or brand does not constitute an
endorsement by Qualitrol of that product or brand.
This document was originally composed in English and was subsequently translated into other languages. The fidelity of
subsequent translations cannot be guaranteed. In case of conflict between the English version and another language
version, the English version takes precedence.
©2010 QUALITROL Company LLC, an ISO 9001 system certified company. All rights reserved. Information subject to change without notice.
®
All trademarks are properties of their respective companies, as noted herein. IST-104-1.
Protocol Manual
Contents
Hardware Instructions.................................................................................... 1
OVERVIEW ................................................................................................................ 1
Communications for the Qualitrol 509ITM Series Transformer Monitor ............................ 1
General .............................................................................................................................. 1
About Qualitrol ................................................................................................................... 2
DNP 3.0 Communications .............................................................................. 3
Introduction .............................................................................................................. 3
DNP V3.0 Device Profile ........................................................................................... 3
DNP V3.0 Implementation Table.............................................................................. 6
DNP V3.0 Point List ................................................................................................ 14
Binary Input Points ............................................................................................................. 14
Binary Output Status Points ............................................................................................ 16
Counters .......................................................................................................................... 17
Analog Inputs .................................................................................................................. 18
Analog Output Status Points ........................................................................................... 29
Octet Strings .................................................................................................................... 32
Time and Date .................................................................................................................32
Modbus Protocol .......................................................................................... 33
General .................................................................................................................... 33
Function Codes Supported ................................................................................... 33
Modbus Register Map ............................................................................................ 33
Binary Parameters ........................................................................................................... 33
Analog Parameters .......................................................................................................... 35
String Parameters ........................................................................................................... 49
Protocol Manual

IEC 60870-5-101 Configuration/ Interoperability Guide ............................ 89
Introduction ............................................................................................................ 89
Interoperability ....................................................................................................... 89
System or device .............................................................................................................90
Network Configuration ..................................................................................................... 90
Physical Layer ................................................................................................................. 90
Link Layer ........................................................................................................................ 90
Application Layer .............................................................................................................91
Basic Application Functions ............................................................................................ 96
File transfer ..................................................................................................................... 98
IEC 60870-5-101 I/O DATA MAP ............................................................................ 99
IEC 61850 COMMUNICATIONS .................................................................. 118
Introduction .......................................................................................................... 118
Protocol Manual
Hardware Instructions
OVERVIEW
Communications for the Qualitrol 509ITM Series
Transformer Monitor
General
The 509ITM comes equipped with digital communication capabilities and a four-wire RS485 port
comes on the rear of the device. Optional ports; an asynchronous serial fiber optic port and/or an
Ethernet port can be ordered. (See the 509ITM configuration form when ordering). The hardware
wiring and configuring the software for the ports is explained in the 509ITM Hardware/Software
Manual IST-099-1.
The 509ITM must be configured for the proper communication protocol for each active port using the
Qualitrol ITM Manager Software package supplied with the unit (or downloaded from the Qualitrol
Web Site (www.qualitrolcorp.com). Using the software package the user can configure the 509ITM
for the appropriate protocol, baud rates, data bits, etc. for their system requirements (see the
communication window below). Once the correct parameters have been entered and loaded into the
509ITM the unit must have power cycled before these new values will take affect.
1 www.qualitrolcorp.com
Protocol Manual
About Qualitrol
Qualitrol has been a leader in supplying pressure, liquid level and temperature controls since 1945.
As an ISO 9001 System-certified company, we are committed to providing quality and reliability, both
in our products and in our service.
Protocol Manual
DNP 3.0 Communications

Introduction
The purpose of this document is to describe specific configuration and interoperability information for
an implementation of the Distributed Network Protocol (DNP), Version 3.0 using the DNP 3.0 Slave
Source Code Library. This document provides information on how to communicate via the DNP 3.0
protocol.
This implementation of DNP 3.0 is fully compliant with DNP 3.0 Subset Definition Level 3, and
contains significant functionality beyond Subset Level 3.
DNP V3.0 Device Profile

The following table provides a “Device Profile Document” in the standard format defined in the DNP
3.0 Subset Definitions Document. While it is referred to in the DNP 3.0 Subset Definitions as a
“Document,” it is in fact a table, and only a component of a total interoperability guide. The table, in
combination with the Implementation Table provided in Section 0 and the Point List Tables provided
in Section 0 should provide a complete configuration/interoperability guide for communicating with a
device implanting the DNP 3.0 Slave Source Code Library.
DNP V3.0
DEVICE PROFILE DOCUMENT
Vendor Name: Qualitrol
Device Name: 509ITM
Highest DNP Level Supported: Device Function:
For Requests:
For Responses:
Level 3
Level 3
 Master
 Slave
Protocol Manual
DNP V3.0
Notable objects, functions, and/or qualifiers supported in addition to the Highest DNP Levels
Supported (the complete list is described in the attached table):
For static (non-change-event) object requests, request qualifier codes 07 and 08 (limited quantity), and 17 and 28 (index) are
supported. Static object requests sent with qualifiers 07, or 08, will be responded with qualifiers 00 or 01.
16-bit, 32-bit and Floating Point Analog Change Events with Time may be requested.
Analog Input Deadbands, Object 34, variations 1 through 3, are supported.
Floating Point Analog Output Status and Output Block Objects 40 and 41 are supported.
Sequential file transfer, Object 70, variations 2 through 8, are supported.
Octet String and String Event Objects 110 and 111 are supported.
Virtual Terminal Output and Event Objects 112 and 113 are supported.
Device Attribute Object 0 is supported.
Data Set Objects 85-88 are supported.
Output Event Objects 11, 13, 42 and 43 are supported.
Activate Configuration
Secure Authentication
Maximum Data Link Frame Size (octets): Maximum Application Fragment Size (octets):
Transmitted: 292 Transmitted: Configurable up to 2048

Received 292 Received 2048
Maximum Data Link Re-tries: Maximum Application Layer Re-tries:
 None  None
 Fixed  Configurable
 Configurable from 0 to 65535
Requires Data Link Layer Confirmation:
 Never
 Always
 Sometimes
 Configurable as: Never, Only for multi-frame messages, or Always
Requires Application Layer Confirmation:
 Never
 Always
 When reporting Event Data (Slave devices only)
 When sending multi-fragment responses (Slave devices only)
 Sometimes
 Configurable as: “Only when reporting event data”, or “When reporting event data or
multi-fragment messages.”
Protocol Manual
DNP V3.0
Timeouts while waiting for:
Data Link Confirm:  None  Fixed at ____  Variable  Configurable.

Complete Appl. Fragment:  None  Fixed at ____  Variable  Configurable
Application Confirm:  None  Fixed at ____  Variable  Configurable.
Complete Appl. Response:  None  Fixed at ____  Variable  Configurable
Others: Transmission Delay, configurable

Select/Operate Arm Timeout, configurable
Need Time Interval, configurable
Application File Timeout, configurable
Unsolicited Notification Delay, configurable
Unsolicited Response Retry Delay, configurable
Unsolicited Offline Interval, configurable
Binary Change Event Scan Period, configurable
Double Bit Change Event Scan Period, configurable
Analog Change Event Scan Period, configurable
Counter Change Event Scan Period, configurable
Frozen Counter Change Event Scan Period, configurable
String Change Event Scan Period, configurable
Virtual Terminal Event Scan Period, configurable
Sends/Executes Control Operations:
WRITE Binary Outputs  Never  Always  Sometimes  Configurable

SELECT/OPERATE  Never  Always  Sometimes  Configurable
DIRECT OPERATE  Never  Always  Sometimes  Configurable
DIRECT OPERATE – NO ACK  Never  Always  Sometimes  Configurable
Count > 1  Never  Always  Sometimes  Configurable

Pulse On  Never  Always  Sometimes  Configurable
Pulse Off  Never  Always  Sometimes  Configurable
Latch On  Never  Always  Sometimes  Configurable
Latch Off  Never  Always  Sometimes  Configurable
Queue  Never  Always  Sometimes  Configurable

Clear Queue  Never  Always  Sometimes  Configurable
Attach explanation if 'Sometimes' or 'Configurable' was checked for any operation.

Reports Binary Input Change Events when no Reports time-tagged Binary Input Change Events
specific variation requested: when no specific variation requested:
 Never  Never
 Only time-tagged  Binary Input Change With Time
 Only non-time-tagged  Binary Input Change With Relative Time
 Configurable to send one or the  Configurable
other
Protocol Manual
DNP V3.0
Sends Unsolicited Responses: Sends Static Data in Unsolicited Responses:
 Never  Never
 Configurable  When Device Restarts


Only certain objects
Sometimes (attach explanation)
 When Status Flags Change
 ENABLE/DISABLE UNSOLICITED No other options are permitted.
Function codes supported
Default Counter Object/Variation: Counters Roll Over at:
 No Counters Reported  No Counters Reported

 Configurable  Configurable (attach explanation)
 Default Object  16 Bits
Default Variation:  32 Bits
 Point-by-point list attached  Other Value: _____
 Point-by-point list attached
Sends Multi-Fragment Responses:
 Yes
 No
 Configurable
Sequential File Transfer Support:
Append File Mode  Yes No

Custom Status Code Strings Yes  No
Permissions Field  Yes No
File Events Assigned to Class  Yes No
File Events Send Immediately  Yes No
Multiple Blocks in a Fragment Yes  No
Max Number of Files Open 1
DNP V3.0 Implementation Table

The following table identifies which object variations, function codes, and qualifiers the DNP 3.0 Slave
Source Code Library supports in both request messages and in response messages. For static (non-
change-event) objects, requests sent with qualifiers 00, 01, 06, 07, or 08, will be responded with
qualifiers 00 or 01. Requests sent with qualifiers 17 or 28 will be responded with qualifiers 17 or 28.
For change-event objects, qualifiers 17 or 28 are always responded.
In the table below, text shaded as 00, 01 (start stop) indicates Subset Level 3 functionality (beyond
Subset Level 2).
In the table below, text shaded as 07, 08 (limited qty) indicates functionality beyond Subset Level 3.
Protocol Manual
REQUEST RESPONSE
OBJECT
(Library will parse) (Library will respond with)
Object Variation Function Qualifier Codes Function Qualifier Codes
Description
Number Number Codes (dec) (hex) Codes (dec) (hex)
0 1-253 Device Attribute Specific 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
06 (no range, or all) 17, 28 (index –
07, 08 (limited qty) see note 1)
17, 27, 28 (index)
2 (write) 00, 01 (start-stop)
0 254 Device Attribute - Non-Specific All 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
Attributes Request 06 (no range, or all) 17, 28 (index –
17, 27, 28 (index)
0 255 Device Attribute – List of Attribute 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
Variations 06 (no range, or all) 17, 28 (index –
17, 27, 28 (index)
1 0 Binary Input – Any Variation 1 (read) 00, 01 (start-stop)
22 (assign 06 (no range, or all)
class) 07, 08 (limited qty)
17, 27, 28 (index)
1 1 Binary Input 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
(default – 06 (no range, or all) 17, 28 (index –
see note 1) see note 2)
07, 08 (limited qty)
17, 27, 28 (index)
1 2 Binary Input with Status 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
2 0 Binary Input Change – Any Variation 1 (read) 06 (no range, or all)
2 1 Binary Input Change without Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
07, 08 (limited qty) 130 (unsol. resp)
2 2 Binary Input Change with Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
2 3 Binary Input Change with Relative Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
(default – 07, 08 (limited qty) 130 (unsol. resp)
see note 1)
3 0 Double Bit Input – Any Variation 1 (read) 00, 01 (start-stop)
17, 27, 28 (index)
3 1 Double Bit Input 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
3 2 Double Bit Input with Status 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
4 0 Double Bit Input Change – Any Variation 1 (read) 06 (no range, or all)
4 1 Double Bit Input Change without Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index )
4 2 Double Bit Input Change with Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index )
4 3 Double Bit Input Change with Relative 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index )
(default – Time 07, 08 (limited qty) 130 (unsol. resp)
see note 1)
10 0 Binary Output – Any Variation 1 (read) 00, 01 (start-stop)
17, 27, 28 (index)
Protocol Manual
REQUEST RESPONSE
OBJECT
Description
10 1 Binary Output 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
1 (write 00, 01 (start-stop)
10 2 Binary Output Status 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
11 0 Binary Output Change – Any Variation 1 (read) 06 (no range, or all)
11 1 Binary Output Change without Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index )
see note 1)
11 2 Binary Output Change with Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index )
12 0 Control Relay Output Block 22 (assign 00, 01 (start-stop)
class) 06 (no range, or all)
17, 27, 28 (index)
12 1 Control Relay Output Block 3 (select) 17, 28 (index) 129 (response) echo of request
4 (operate)
5 (direct op)
6 (dir. op, noack)
12 2 Pattern Control Block 3 (select) 7 (limited quantity) 129 (response) echo of request
4 (operate)
5 (direct op)
6 (dir. op, noack)
12 3 Pattern Mask 3 (select) 00, 01 (start- 129 (response) echo of request
4 (operate) stop)
5 (direct op)
6 (dir. op, noack)
13 0 Binary Output Command Event – Any 1 (read) 06 (no range, or all)
Variation 07, 08 (limited qty)
13 1 Binary Output Command Event without 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index )
Time 07, 08 (limited qty) 130 (unsol. resp)
13 2 Binary Output Command Event with 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index )
20 0 Binary Counter – Any Variation 1 (read) 00, 01 (start-stop)
22 (assign class) 06 (no range, or all)
17, 27, 28 (index)
7 (freeze) 00, 01 (start-stop)

8 (freeze noack) 06 (no range, or all)
9 (freeze clear) 07, 08 (limited qty)
10 (frz. cl. noack)
20 1 32-Bit Binary Counter (with Flag) 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
20 2 16-Bit Binary Counter (with Flag) 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
20 5 32-Bit Binary Counter without Flag 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
20 6 16-Bit Binary Counter without Flag 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
Protocol Manual
REQUEST RESPONSE
OBJECT
Description
21 0 Frozen Counter – Any Variation 1 (read) 00, 01 (start-stop)
17, 27, 28 (index)
21 1 32-Bit Frozen Counter (with Flag) 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
21 2 16-Bit Frozen Counter (with Flag) 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
21 5 32-Bit Frozen Counter with Time Of 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-
Freeze 06 (no range, or all) stop)
07, 08 (limited qty) 17, 28 (index –
17, 27, 28 (index) see note 1)
21 6 16-Bit Frozen Counter with Time Of 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-
Freeze 06 (no range, or all) stop)
07, 08 (limited qty) 17, 28 (index –
17, 27, 28 (index) see note 1)
21 9 32-Bit Frozen Counter without Flag 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
21 10 16-Bit Frozen Counter without Flag 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
22 0 Counter Change Event – Any Variation 1 (read) 06 (no range, or all)
22 1 32-Bit Counter Change Event without 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
see note 1)
22 2 16-Bit Counter Change Event without 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
22 5 32-Bit Counter Change Event with Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
22 6 16-Bit Counter Change Event with Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
23 0 Frozen Counter Event (Variation 0 is 1 (read) 06 (no range, or all)
used to request default variation) 07, 08 (limited qty)
23 1 32-Bit Frozen Counter Event 1 (read) 06 (no range, or all) 129 (response) 17,28 (index)
see note 1)
23 2 16-Bit Frozen Counter Event 1 (read) 06 (no range, or all) 129 (response) 17,28 (index)
23 5 32-Bit Frozen Counter Event with Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
23 6 16-Bit Frozen Counter Event with Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
30 0 Analog Input - Any Variation 1 (read) 00, 01 (start-stop)
17, 27, 28 (index)
30 1 32-Bit Analog Input 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
30 2 16-Bit Analog Input 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
Protocol Manual
REQUEST RESPONSE
OBJECT
Description
30 3 32-Bit Analog Input without Flag 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
30 4 16-Bit Analog Input without Flag 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
30 5 short floating point 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
30 6 long floating point 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
32 0 Analog Change Event – Any Variation 1 (read) 06 (no range, or all)
32 1 32-Bit Analog Change Event without 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
see note 1)
32 2 16-Bit Analog Change Event without 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
32 3 32-Bit Analog Change Event with Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
32 4 16-Bit Analog Change Event with Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
32 5 short floating point Analog Change 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
Event without Time 07, 08 (limited qty) 130 (unsol. resp)
32 6 long floating point Analog Change Event 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
without Time 07, 08 (limited qty) 130 (unsol. resp)
32 7 short floating point Analog Change 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
Event with Time 07, 08 (limited qty) 130 (unsol. resp)
32 8 long floating point Analog Change Event 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
with Time 07, 08 (limited qty) 130 (unsol. resp)
34 0 Analog Input Deadband (Variation 0 is 1 (read) 00, 01 (start-stop)
used to request default variation) 06 (no range, or all)
17, 27, 28 (index)
34 1 16 bit Analog Input Deadband 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
2 00, 01 (start-stop)
(write) 07, 08 (limited qty)
17, 27, 28 (index)
34 2 32 bit Analog Input Deadband 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
17, 27, 28 (index)
34 3 Short Floating Point Analog Input 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
Deadband 06 (no range, or all) 17, 28 (index –
17, 27, 28 (index)
17, 27, 28 (index)
40 0 Analog Output Status 1 (read) 00, 01 (start-stop)
17, 27, 28 (index)
Protocol Manual
REQUEST RESPONSE
OBJECT
Description
40 1 32-Bit Analog Output Status 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
40 2 16-Bit Analog Output Status 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
see note 1 see note 2)
17, 27, 28 (index)
40 3 short floating point Analog Output Status 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
40 4 long floating point Analog Output Status 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
17, 27, 28 (index)
41 0 Analog Output Block 22 (assign 00, 01 (start-stop)
class) 06 (no range, or all)
17, 27, 28 (index)
41 1 32-Bit Analog Output Block 3 (select) 17, 28 (index) 129 (response) echo of request
4 (operate) 27 (index)
5 (direct op)
6 (dir. op, noack)
41 2 16-Bit Analog Output Block 3 (select) 17, 28 (index) 129 (response) echo of request
4 (operate) 27 (index)
5 (direct op)
6 (dir. op, noack)
41 3 short floating point Analog Output Block 3 (select) 17, 27, 28 (index) 129 (response) echo of request
4 (operate)
5 (direct op)
6 (dir. op, noack)
41 4 long floating point Analog Output Block 3 (select) 17, 27, 28 (index) 129 (response) echo of request
4 (operate)
5 (direct op)
6 (dir. op, noack)
42 0 Analog Output Event – Any Variation 1 (read) 06 (no range, or all)
42 1 32-Bit Analog Output Event without 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
42 2 16-Bit Analog Output Event without 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
see note 1
42 3 32-Bit Analog Output Event with Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
42 4 16-Bit Analog Output Event with Time 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
42 5 short floating point Analog Output Event 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
42 6 long floating point Analog Output Event 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
42 7 short floating point Analog Output Event 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
42 8 long floating point Analog Output Event 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
43 0 Analog Output Command Event – Any 1 (read) 06 (no range, or all)
Variation 07, 08 (limited qty)
43 1 32-Bit Analog Output Command Event 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
(default – without Time 07, 08 (limited qty) 130 (unsol. resp)
see note 1
Protocol Manual
REQUEST RESPONSE
OBJECT
Description
43 5 short floating point Analog Output 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
Command Event without Time 07, 08 (limited qty) 130 (unsol. resp)
43 6 long floating point Analog Output 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
Command Event without Time 07, 08 (limited qty) 130 (unsol. resp)
43 7 short floating point Analog Output 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
Command Event with Time 07, 08 (limited qty) 130 (unsol. resp)
43 8 long floating point Analog Output 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
Command Event with Time 07, 08 (limited qty) 130 (unsol. resp)
50 0 Time and Date
50 1 Time and Date 1 (read) 07, (limited qty = 1) 129 (response) 07 (limited qty = 1)
(default –
see note 1)
2 (write) 07 (limited qty = 1)
50 3 Time and Date Last Recorded Time 2 07 (limited qty)

(write)
51 1 Time and Date CTO 129 (response) 07 (limited qty)

130 (unsol. resp) (qty = 1)
51 2 Unsynchronized Time and Date CTO 129 (response) 07 (limited qty)
130 (unsol. resp) (qty = 1)
52 1 Time Delay Coarse 129 (response) 07 (limited qty)

(qty = 1)
52 2 Time Delay Fine 129 (response) 07 (limited qty)
(qty = 1)
60 0 Not Defined
60 1 Class 0 Data 1 (read) 06 (no range, or all)
20 (enbl. unsol.) 06 (no range, or all)
21 (dab. unsol.)
22 (assign class)

21 (dab. unsol.)
22 (assign class)
21 (dab. unsol.)
22 (assign class)
70 0 File Event – Any Variation 1 06 (no range, or all)
(read) 07, 08 (limited qty)
class)
70 2 File Authentication 29 5b (free-format) 129 (response) 5B (free-format)

(authenticate)
70 3 File Command 25 5b (free-format)

(open)
27
(delete)
70 4 File Command Status 26 5b (free-format) 129 (response) 5B (free-format)
(close) 130 (unsol. resp)
30 (abort)
Protocol Manual
REQUEST RESPONSE
OBJECT
Description
70 5 File Transfer 1 5b (free-format) 129 (response) 5B (free-format)
(read) 130 (unsol. resp)
2
(write)
70 6 File Transfer Status 129 (response) 5B (free-format)

130 (unsol. resp)
70 7 File Descriptor 28 (get file 5b (free-format) 129 (response) 5B (free-format)
info) 130 (unsol. resp)
70 8 File Specification String 31(activate 5b (free-format)
config)
80 1 Internal Indications 1 (read) 00, 01 (start-stop) 129 (response) 00, 01(start-stop)
2 (write) 00 (start-stop)
(see note 3) index=4 or 7
85 0 Data Set Prototype 1 00, 01 (start-stop)
(read) 06 (no range, or all)
17, 27, 28 (index
85 1 Data Set Prototype 1 00, 01 (start-stop) 129 (response) 5B (free-format)
17, 27, 28 (index
2 (write) 5b (free-format)
86 0 Data Set Descriptor 22 (assign class) 00, 01 (start-stop)

06 (no range, or all)
17, 27, 28 (index
86 1 Data Set Descriptor - Contents 1 00, 01 (start-stop) 129 (response) 5B (free-format)
17, 27, 28 (index
86 2 Data Set Descriptor – Characteristics 1 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
(read) 06 (no range, or all) 17, 28 (index –
17, 27, 28 (index
86 3 Data Set Descriptor – Point Index 1 00, 01 (start-stop) 129 (response) 5B (free-format)
Attributes (read) 06 (no range, or all)
17, 27, 28 (index
87 0 Data Set – Present Value 1 00, 01 (start-stop)

17, 27, 28 (index
87 1 Data Set – Present Value 1 00, 01 (start-stop) 129 (response) 5B (free-format)
17, 27, 28 (index
88 0 Data Set Event 1 06 (no range, or all)

(read) 07, 08 (limited qty)
88 1 Data Set Event - Snapshot 1 06 (no range, or all) 129 (response) 5B (free-format)
(read) 07, 08 (limited qty) 130 (unsol. resp)
91 1 Activate Status 129 (response) 07 (limited qty)
Protocol Manual
REQUEST RESPONSE
OBJECT
Description
110 string Octet String Object 1 (read) 00, 01 (start-stop) 129 (response) 00, 01 (start-stop)
length 22 (assign class) 06 (no range, or all)
17, 27, 28 (index
2 (write) 00, 01 (start-stop)
17, 27, 28 (index)
111 string Octet String Event Object 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
length 07, 08 (limited qty) 130 (unsol. resp)
112 string Virtual Terminal Output Block 2 (write) 00, 01 (start-stop)
length 07, 08 (limited qty)
17, 27, 28 (index)
113 string Virtual Terminal Event Data 1 (read) 06 (no range, or all) 129 (response) 17, 28 (index)
length 07, 08 (limited qty) 130 (unsol. resp)
120 1 Authentication Challenge 32 (auth 5b (free-format) 131 (challenge) 5b (free-format)
challenge) 132(unsol. challenge
120 2 Authentication Reply 33 (auth reply) 5b (free-format) 129 (response) 5b (free-format)
120 3 Authentication Aggressive Mode 5b (free-format) 131 (challenge) 5b (free-format)
Request 132(unsol. challenge
120 4 Authentication Session Key Status 1 (read) 5b (free-format)
Request
120 5 Authentication Session Key Status 129 (response) 5b (free-format)
120 6 Authentication Session Key Change 129 (response) 5b (free-format)
120 7 Authentication Error 34 (auth 5b (free-format) 129 (response) 5b (free-format)
challenge)
No Object (function code only) 13 (cold restart)
No Object (function code only) 14 (warm restart)
No Object (function code only) 23 (delay meas.)
No Object (function code only) 24
(record current
time)
Note 1: A Default variation refers to the variation responded when variation 0 is requested and/or in
class 0, 1, 2, or 3 scans. Default variations are configurable; however, default settings for the
configuration parameters are indicated in the table above.
Note 2: For static (non-change-event) objects, qualifiers 17 or 28 are only responded when a request
is sent with qualifiers 17 or 28, respectively. Otherwise, static object requests sent with qualifiers 00,
01, 06, 07, or 08, will be responded with qualifiers 00 or 01. (For change-event objects, qualifiers 17
or 28 are always responded.)
Note 3: Writes of Internal Indications are only supported for index 4 or 7 (Need Time IIN1-4 or
Restart IIN1-7)
DNP V3.0 Point List

The tables below identify all the default data points provided by the implementation of the DNP 3.0
Slave Source Code Library.
Binary Input Points

The default binary input event buffer size is set to allow 100 events.
BINARY INPUT; OBJ 1; VAR 0, 1, 2

POINT POINT VARIABLE DESCRIPTION
0 RELAY 1 ENABLED 1 = ENABLED; 0 = DISABLED
Protocol Manual

8 RELAY 1 ACTUATED 1 = ACTUATED; 0 = NOT ACTUATED
16 SYSTEM STATUS RELAY 1 = ACTUATED; 0 = NOT ACTUATED
17 HEATER STATUS 1 = ENABLED; 0 = DISABLED
18 RELAY 1 LATCHING FEATURE 1 = ENABLED; 0 = DISABLED
26 RELAY 1 AUTO/MANUAL 1 = MANUAL OPERATION; 0 = AUTOMATIC
34 EVENT RECORD 1 1 = TRIGGERED; 0 = NOT TRIGGERED
42 INPUT MODULE 1 READ ERROR 1 = ERROR DURING READ; 0 = VALID READ
Protocol Manual

50 INPUT MODULE 1 SCALING FEATURE ENABLED 1 = ACTIVE; 0 = NOT ACTIVE
Binary Output Status Points

The following table lists the Binary Output Status Points (Object 10).
While Binary Output Status Points are included here for completeness, they are not often polled by
DNP 3.0 Masters. It is recommended that Binary Output Status points represent the most recent
DNP “commanded” value for the corresponding Control Relay Output Block point. Because many, if
not most, Control Relay Output Block points are controlled through pulse mechanisms, the value of
the output status may in fact be meaningless. Binary Output Status points are not recommended to
be included in class 0 polls.
As an alternative, it is recommended that “actual” status values of Control Relay Output Block points
be looped around and mapped as Binary Inputs. (The “actual” status value, as opposed to the
“commanded” status value, is the value of the actuated control. For example, a DNP control
command may be blocked through hardware or software mechanisms; in this case, the actual status
value would indicate the control failed because of the blocking. Looping Control Relay Output Block
actual status values as Binary Inputs has several advantages:
 it allows actual statuses to be included in class 0 polls,
 it allows change event reporting of the actual statuses, which is a more efficient and time-
accurate method of communicating control values,
Protocol Manual
 and it allows reporting of time-based information associated with controls, including any delays
before controls are actuated, and any durations if the controls are pulsed.
The default select/control buffer size is large enough to hold 10 of the largest select requests
possible.
BINARY OUTPUT; OBJ 10; VAR 0, 1, 2

8 INPUT MODULE MAX/MIN RESET PULSE/RESET (1)
17 LATCHED RELAYS RESET PULSE/RESET (1)
18 COOLING MONITOR MAX/MIN RESET PULSE/RESET (1)
19 INPUT MODULE 1 ENABLED 1 = ENABLED; 0 = DISABLED
Counters
The following table lists both Binary Counters (Object 20) and Frozen Counters (Object 21). When a
freeze function is performed on a Binary Counter point, the frozen value is available in the
corresponding Frozen Counter point. The default Binary Counter and Frozen Counter event buffer
sizes are set to 30.
Protocol Manual
BINARY COUNTER; OBJ 20; VAR 0, 1, 2, 3, 4, 5, 6

TRANSLIFE 1; TRANSFORMER LIFE TOTAL LIFE CONSUMPTION CALCULATED; TRANSLIFE
0 CONSUMPTION 1
1 CONSUMPTION 2
2 CONSUMPTION 3
3 TOTAL TRANSFORMER OPERATING HOURS CUMULATIVE TRANSFORMER OPERATING HOURS
Analog Inputs
The following table lists Analog Inputs (Object 30). It is important to note that 16-bit and 32-bit
variations of Analog Inputs, Analog Output Control Blocks, and Analog Output Statuses are
transmitted through DNP as signed numbers.
The “Default Deadband,” and the “Default Change Event Assigned Class” columns are used to
represent the absolute amount by which the point must change before an analog change event will be
generated, and once generated in which class poll (1, 2, 3, or none) will the change event be
reported.
The default analog input event buffer size is set 30.
ANALOG INPUT; OBJ 30; VAR 0, 1, 2, 3, 4, 5, 6

0 RELAY 1, SETPOINT 1 VALUE SETPOINT IN THE 1ST COLUMN OF THE MATRIX
8 RELAY 1, HYSTERESIS 1 VALUE HYSTERESIS IN THE 1ST COLUMN OF THE MATRIX
ALL MODULES BUT CT, WINDING TEMPERATURE IF THE MODULE IS A CT, WINDING TEMPERATURE
16 INPUT MODULE 1 PRESENT VALUE OR INPUT MODULE 1 PRESENT WINDING TEMP
17 INPUT MODULE 1 MINIMUM VALUE OR INPUT MODULE 1 MINIMUM WINDING TEMP
18 INPUT MODULE 1 MAXIMUM VALUE OR INPUT MODULE 1 MAXIMUM WINDING TEMP
19 0 OR INPUT MODULE 1 PRESENT CURRENT
20 0 OR INPUT MODULE 1 MAXIMUM CURRENT
Protocol Manual

56 DIFFERENTIAL CALCULATION 1 PRESENT VALUE
57 DIFFERENTIAL CALCULATION 1 MINIMUM VALUE
58 DIFFERENTIAL CALCULATION 1 MAXIMUM VALUE
68 HOTTEST PRESENT WINDING TEMPERATURE OF ALL ACTIVE CT, TEMPERATURE MODULES
69 RELAY 1, SETPOINT 2 VALUE SETPOINT IN THE 2ND COLUMN OF THE MATRIX
Protocol Manual

77 RELAY 1, HYSTERESIS 2 VALUE HYSTERESIS IN THE 2ND COLUMN OF THE MATRIX
85 RELAY 1, SETPOINT 3 VALUE SETPOINT IN THE 3RD COLUMN OF THE MATRIX
93 RELAY 1, HYSTERESIS 3 VALUE HYSTERESIS IN THE 3RD COLUMN OF THE MATRIX
101 RELAY 1, SETPOINT 4 VALUE SETPOINT IN THE 4TH COLUMN OF THE MATRIX
109 RELAY 1, HYSTERESIS 4 VALUE HYSTERESIS IN THE 4TH COLUMN OF THE MATRIX
117 TRANSLIFE 1 CONSUMED LIFE FOR LAST HOUR CALCULATED CONSUMED LIFE FOR LAST HOUR
Protocol Manual

118 TRANSLIFE 1 CONSUMED LIFE FOR LAST DAY CALCULATED CONSUMED LIFE FOR LAST DAY
119 TRANSLIFE 1 REMAINING TRANSFORMER LIFE (20 YEARS - CONSUMED LIFE)
120 TL1 CRITICAL WINDING TEMP SETPOINT 1 1ST CRITICAL SPT TO CALCULATE TIME TO REACH
121 TL1 CRITICAL WINDING TEMP SETPOINT 2 2ND CRITICAL SPT TO CALCULATE TIME TO REACH
122 TL1 CRITICAL WINDING TEMP SETPOINT 3 3RD CRITICAL SPT TO CALCULATE TIME TO REACH
CALCULATED TIME TO 1ST SPT FOR GIVEN
123 TL1 TIME TO CRITICAL SETPOINT 1 CONDITIONS
CALCULATED TIME TO 2ND SPT FOR GIVEN
CALCULATED TIME TO 3RD SPT FOR GIVEN
144 COOLING BANK 1 PRESENT RUNNING CURRENT COOLING BANK 1 PRESENT/STEADY STATE CURRENT
145 COOLING BANK 1 MINIMUM RUNNING CURRENT COOLING BANK 1 MINIMUM STEADY STATE CURRENT
146 COOLING BANK 1 MAXIMUM RUNNING CURRENT COOLING BANK 1 MAXIMUM STEADY STATE CURRENT
147 CB1 RUNNING CURRENT UPPER SETPOINT COOLING BANK 1 STEADY STATE CURRENT SETPOINT
148 CB1 RUNNING CURRENT LOWER SETPOINT COOLING BANK 1 STEADY STATE CURRENT SETPOINT
149 CB1 PRESENT PEAK INRUSH CURRENT VALUE COOLING BANK 1 PRESENT PEAK INRUSH CURRENT
150 CB1 MINIMUM PEAK INRUSH CURRENT VALUE COOLING BANK 1 MINIMUM PEAK INRUSH CURRENT
151 CB1 MAXIMUM PEAK INRUSH CURRENT VALUE COOLING BANK 1 MAXIMUM PEAK INRUSH CURRENT
152 CB1 INRUSH CURRENT UPPER SETPOINT VALUE COOLING BANK 1 PEAK INRUSH CURRENT SETPOINT
153 CB1 INRUSH CURRENT LOWER SETPOINT VALUE COOLING BANK 1 PEAK INRUSH CURRENT SETPOINT
Protocol Manual

184 TAP POSITION -16 AVERAGE MAKE CURRENT AVERAGE MAKE CURRENT FOR TAP POSITION (-16)
200 TAP POSITION +0 AVERAGE MAKE CURRENT AVERAGE MAKE CURRENT FOR TAP POSITION (+0)
Protocol Manual

217 TAP POSITION -16 AVERAGE BREAK CURRENT AVERAGE BREAK CURRENT FOR TAP POSITION (-16)
233 TAP POSITION +0 AVERAGE BREAK CURRENT AVERAGE BREAK CURRENT FOR TAP POSITION (+0)
250 LTC HI-ALARM RUN CURRENT UPPER SETPOINT LTC HIGH-PRIORITY STEADY STATE UPPER SETPOINT
251 LTC LO-ALARM RUN CURRENT UPPER SETPOINT LTC LOW-PRIORITY STEADY STATE UPPER SETPOINT
Protocol Manual

252 LTC HI-ALARM RUN CURRENT LOWER SETPOINT LTC HIGH-PRIORITY STEADY STATE LOWER SETPOINT
253 LTC LO-ALARM RUN CURRENT LOWER SETPOINT LTC LOW-PRIORITY STEADY STATE LOWER SETPOINT
LTC HI-ALARM INRUSH CURRENT UPPER LTC HIGH-PRIORITY INRUSH CURRENT UPPER
254 SETPOINT SETPOINT
LTC LO-ALARM INRUSH CURRENT UPPER LTC LOW-PRIORITY INRUSH CURRENT UPPER
LTC HI-ALARM INRUSH CURRENT LOWER LTC HIGH-PRIORITY INRUSH CURRENT LOWER
LTC LO-ALARM INRUSH CURRENT LOWER LTC LOW-PRIORITY INRUSH CURRENT LOWER
258 MOD 1; FIBER PROBE 1 PRESENT TEMPERATURE HOT SPOT MODULE 1; 1ST PROBE PRESENT TEMP
259 MOD 1; FIBER PROBE 1 MINIMUM TEMPERATURE HOT SPOT MODULE 1; 1ST PROBE MINIMUM TEMP
260 MOD 1; FIBER PROBE 1 MAXIMUM TEMPERATURE HOT SPOT MODULE 1; 1ST PROBE MAXIMUM TEMP
261 MOD 1; FIBER PROBE 2 PRESENT TEMPERATURE HOT SPOT MODULE 1; 2ND PROBE PRESENT TEMP
262 MOD 1; FIBER PROBE 2 MINIMUM TEMPERATURE HOT SPOT MODULE 1; 2ND PROBE MINIMUM TEMP
263 MOD 1; FIBER PROBE 2 MAXIMUM TEMPERATURE HOT SPOT MODULE 1; 2ND PROBE MAXIMUM TEMP
264 MOD 1; FIBER PROBE 3 PRESENT TEMPERATURE HOT SPOT MODULE 1; 3RD PROBE PRESENT TEMP
265 MOD 1; FIBER PROBE 3 MINIMUM TEMPERATURE HOT SPOT MODULE 1; 3RD PROBE MINIMUM TEMP
266 MOD 1; FIBER PROBE 3 MAXIMUM TEMPERATURE HOT SPOT MODULE 1; 3RD PROBE MAXIMUM TEMP
267 MOD 1; FIBER PROBE 4 PRESENT TEMPERATURE HOT SPOT MODULE 1; 4TH PROBE PRESENT TEMP
268 MOD 1; FIBER PROBE 4 MINIMUM TEMPERATURE HOT SPOT MODULE 1; 4TH PROBE MINIMUM TEMP
269 MOD 1; FIBER PROBE 4 MAXIMUM TEMPERATURE HOT SPOT MODULE 1; 4TH PROBE MAXIMUM TEMP
Protocol Manual

TEMP WHERE CONSUMED LIFE EQUALS OPERATING
306 LIFE CONSUMPTION UNITY TEMPERATURE LIFE
LTC HI-ALARM TOTAL TAP COUNT SETPOINT
307 VALUE LTC HIGH-PRIORITY TOTAL TAP COUNT SETPOINT
LTC LO-ALARM TOTAL TAP COUNT SETPOINT
308 VALUE LTC LOW-PRIORITY TOTAL TAP COUNT SETPOINT
LTC HI-ALARM MOTOR ACTUATION SETPOINT
309 VALUE LTC HIGH-PRIORITY MOTOR ACTUATION COUNT SPT
LTC LO-ALARM MOTOR ACTUATION SETPOINT
310 VALUE LTC LOW-PRIORITY MOTOR ACTUATION COUNT SPT
311 LTC TAP PERIOD TIME PERIOD TO MEASURE LTC TAP COUNTS
312 LTC PRESENT COUNTS TOTAL COUNTS IN PRESENT TAP PERIOD
313 LTC PREVIOUS COUNTS TOTAL COUNTS IN THE PREVIOUS TAP PERIOD
TRANSLIFE 1; TEMPERATURE PROFILE, 1ST
314 RANGE TOTAL WINDING TEMP TIME IN LOWEST TEMP RANGE
TRANSLIFE 1; TEMPERATURE PROFILE, 2ND
315 RANGE TOTAL WINDING TEMP TIME IN 2ND TEMP RANGE
TRANSLIFE 1; TEMPERATURE PROFILE, 3RD
316 RANGE TOTAL WINDING TEMP TIME IN 3RD TEMP RANGE
TRANSLIFE 1; TEMPERATURE PROFILE, 4TH
317 RANGE TOTAL WINDING TEMP TIME IN 4TH TEMP RANGE
325 RANGE TOTAL WINDING TEMP TIME IN HIGHEST TEMP RANGE
Protocol Manual

TOTAL # OF TIMES THE COOLING FANS HAVE
350 COOLING BANK 1 TOTAL ACTUATION COUNTS ENGAGED
351 COOLING BANK 1 ACTUATION SETPOINT VALUE TOTAL ACTUATION COUNT SETPOINT
352 COOLING BANK 1 TOTAL SYSTEM RUN TIME TOTAL # OF HOURS THAT THE FANS HAVE BEEN ON
353 COOLING BANK 1 RUN TIME SETPOINT VALUE TOTAL RUN TIME SETPOINT
366 LTC, TAP POSITION -16 TOTAL TAP COUNTS TOTAL TAP COUNTS FOR TAP POSITION (-16)
Protocol Manual

382 LTC, TAP POSITION +0 TOTAL TAP COUNTS TOTAL TAP COUNTS FOR TAP POSITION (+0)
399 LTC, TAP POSITION -16 TOTAL RUN TIME TOTAL RUN TIME FOR TAP POSITION (-16)
415 LTC, TAP POSITION +0 TOTAL RUN TIME TOTAL RUN TIME FOR TAP POSITION (+0)
Protocol Manual

432 LTC, TOTAL MOTOR ACTUATION COUNTS TOTAL NUMBER OF MOTOR ACTUATION COUNTS
433 FIRMWARE REVISION FOR THIS 509ITM UNIT
Protocol Manual

Analog Output Status Points

The following table lists the Analog Output Status Points (Object 40).
While Analog Output Status Points are included here for completeness, they are not often polled by
DNP 3.0 Masters. It is recommended that Analog Output Status points represent the most recent
DNP “commanded” value for the corresponding Analog Output Control Block point. Analog Output
Status points are not recommended to be included in class 0 polls.
As an alternative, it is recommended that “actual” status values of Analog Output Control Block points
be looped around and mapped as Analog Inputs. (The “actual” status value, as opposed to the
“commanded’ status value, is the value of the actuated control.) For example, a DNP control
command may be blocked through hardware or software mechanisms; in this case, the actual status
value would indicate the control failed because of the blocking. Looping Analog Relay Output Block
actual status values as Analog Inputs has several advantages:
 it allows actual statuses to be included in class 0 polls,
 it allows change event reporting of the actual statuses, which is a more efficient method of
communicating control values,
 and, if analog change events with time variations are supported by the DNP master, it allows
reporting of time-based information associated with controls, including delays before the controls
are actuated.
The default select/control buffer size is large enough to hold 10 of the largest select requests
possible.
ANALOG OUTPUT; OBJ 40; VAR 0, 1, 2, 3, 4

Protocol Manual

Protocol Manual

78 COOLING BANK 1 RUN TIME SETPOINT VALUE COOLING BANK 1 TOTAL RUN TIME SETPOINT
Protocol Manual

109 LTC HI-ALARM TOTAL RUN TIME SETPOINT VALUE LTC HIGH-PRIORITY TOTAL RUN TIME SETPOINT
110 LTC LO-ALARM TOTAL RUN TIME SETPOINT VALUE LTC LOW-PRIORITY TOTAL RUN TIME SETPOINT
Octet Strings
The default string event buffer size is set to allow 10 events.
OCTET STRING; OBJ 110; VAR STRING LENGTH

0 SERIAL NUMBER UP TO 12 CHARACTERS
1 MANUFACTURE DATE OF THE UNIT UP TO 8 CHARACTERS
2 SUBSTATION NAME UP TO 16 CHARACTERS
3 EQUIPMENT NAME UP TO 16 CHARACTERS
Time and Date

TIME AND DATE; OBJ 50; VAR 0, 1
0 TIME AND DATE
Protocol Manual
Modbus Protocol
General
Qualitrol supports the Modbus RTU transmission mode in which the message is
placed by the transmitting device into a frame that has a known beginning and
ending point. This allows the 509ITM unit to begin at the start of the message, read
the address portion and determine which device is addressed and to know when the
message is completed. Partial messages can be detected and errors can be set as
a result.
To assist with the development of the Modbus communication for the user, there is a
web site, http://www.win-tech.com/html/demos.htm that offers evaluation software for
most applications.
Function Codes Supported

01 Read Coil Status
02 Read Input Status
03 Read Holding Registers
04 Read Input Registers
05 Force Single Coil
06 Preset Single Register
15 Force Multiple Coils
16 Preset Multiple Registers
Modbus Register Map

Binary Parameters
REG # VARIABLE R/W DESCRIPTION
10 RELAY 1 ENABLED READ 1 = ENABLED; 0 = DISABLED
Protocol Manual

18 RELAY 1 ACTUATED READ 1 = ACTUATED; 0 = NOT ACTUATED
26 SYSTEM STATUS RELAY READ 1 = ACTUATED; 0 = NOT ACTUATED
27 HEATER STATUS READ 1 = ENABLED; 0 = DISABLED
28 RELAY 1 LATCHING FEATURE READ 1 = ENABLED; 0 = DISABLED
36 EVENT RECORDER 1 READ 1 = TRIGGERED; 0 = NOT TRIGGERED
Binary Parameters
50 RELAY 1 ENABLED RD/WR 1 = ENABLED; 0 = DISABLED
58 INPUT MODULE MAX/MIN RESET RD/WR PULSE/RESET (1)
59 COOLING MONITOR MAX/MIN RESET RD/WR PULSE/RESET (1)
60 LATCHED RELAYS RESET RD/WR PULSE/RESET (1)
61 RELAY 1 AUTO/MANUAL RD/WR 1 = MANUAL OPERATION; 0 = AUTOMATIC
Protocol Manual

69 INPUT MODULE 1 ENABLED/DISABLED RD/WR 1 = ENABLED; 0 = DISABLED
77 INPUT MODULE 1 READ ERROR READ 1 = READ ERROR; 0 = VALID READ
85 INPUT MODULE 1 SCALING ENABLED READ 1 = SCALING ENABLED; 0 = DISABLED
Analog Parameters
Values in registers 100 thru 693 have been scaled according to their function to offer the greatest
possible resolution. If the description of the value has a (N) then there is no scaling. A (10X) means
the value has been multiplied by 10 and needs to be divided by 10 to read the actual value (e.g. if the
value in the 509ITM is 123.4 then it will be transmitted 1234). A (100X) means the value was
multiplied by 100 and needs to be divided by 100 to read the actual value (e.g. if the value in the
509ITM is 12.34 then it will be transmitted as 1234).

100 RELAY 1, SETPOINT 1 VALUE RD/WR SETPOINT IN THE 1ST COLUMN OF THE MATRIX (10X)
108 RELAY 1, HYSTERESIS 1 VALUE RD/WR HYSTERESIS IN THE 1ST COLUMN OF THE MATRIX (10X)
Protocol Manual

116 INPUT MODULE 1 PRESENT VALUE READ OR INPUT MODULE 1 PRESENT WINDING TEMP (10X)
117 INPUT MODULE 1 MINIMUM VALUE READ OR INPUT MODULE 1 MINIMUM WINDING TEMP (10X)
118 INPUT MODULE 1 MAXIMUM VALUE READ OR INPUT MODULE 1 MAXIMUM WINDING TEMP (10X)
119 0 READ OR INPUT MODULE 1 PRESENT CURRENT (10X)
120 0 READ OR INPUT MODULE 1 MAXIMUM CURRENT (10X)
Protocol Manual

156 DIFFERENTIAL CALCULATION 1 PRESENT VALUE READ (10X)
157 DIFFERENTIAL CALCULATION 1 MINIMUM VALUE READ (10X)
158 DIFFERENTIAL CALCULATION 1 MAXIMUM VALUE READ (10X)
168 HOTTEST PRESENT WINDING TEMPERATURE READ OF ALL ACTIVE CT, TEMPERATURE MODULES (10X)
169 TRANSLIFE 1 CONSUMED LIFE FOR LAST HOUR READ CALCULATED CONSUMED LIFE FOR LAST HOUR (100X)
170 TRANSLIFE 1 CONSUMED LIFE FOR LAST DAY READ CALCULATED CONSUMED LIFE FOR LAST DAY (100X)
171 TRANSLIFE 1 REMAINING TRANSFORMER LIFE READ (20 YEARS - CONSUMED LIFE) (100X)
1ST CRITICAL SPT TO CALCULATE TIME TO REACH
172 TL1 CRITICAL WINDING TEMP SETPOINT 1 RD/WR (10X)
2ND CRITICAL SPT TO CALCULATE TIME TO REACH
3RD CRITICAL SPT TO CALCULATE TIME TO REACH
175 TL1 TIME TO CRITICAL SETPOINT 1 READ CONDITIONS (100X)
Protocol Manual

196 FIRMWARE REVISION FOR THIS 509ITM UNIT READ (100X)
COOLING BANK 1 PRESENT/STEADY STATE CURRENT

200 COOLING BANK 1 PRESENT RUNNING CURRENT READ (10X)
COOLING BANK 1 MINIMUM STEADY STATE CURRENT
201 COOLING BANK 1 MINIMUM RUNNING CURRENT READ (10X)
COOLING BANK 1 MAXIMUM STEADY STATE CURRENT
202 COOLING BANK 1 MAXIMUM RUNNING CURRENT READ (10X)
COOLING BANK 1 STEADY STATE CURRENT SETPOINT
203 CB1 RUNNING CURRENT UPPER SETPOINT RD/WR (10X)
204 CB1 RUNNING CURRENT LOWER SETPOINT RD/WR (10X)
COOLING BANK 1 PRESENT PEAK INRUSH CURRENT
205 CB1 PRESENT PEAK INRUSH CURRENT VALUE READ (10X)
COOLING BANK 1 MINIMUM PEAK INRUSH CURRENT
206 CB1 MINIMUM PEAK INRUSH CURRENT VALUE READ (10X)
COOLING BANK 1 MAXIMUM PEAK INRUSH CURRENT
207 CB1 MAXIMUM PEAK INRUSH CURRENT VALUE READ (10X)
COOLING BANK 1 PEAK INRUSH CURRENT SETPOINT
208 CB1 INRUSH CURRENT UPPER SETPOINT VALUE RD/WR (10X)
209 CB1 INRUSH CURRENT LOWER SETPOINT VALUE RD/WR (10X)
Protocol Manual

240 RELAY 1 SETPOINT, 2nd COLUMN OF MATRIX RD/WR SETPOINT IN THE 2ND COLUMN OF THE MATRIX (10X)
HYSTERESIS IN THE 2ND COLUMN OF THE MATRIX
248 RELAY 1 HYSTERESIS, 2nd COLUMN OF MATRIX RD/WR (10X)
256 RELAY 1 SETPOINT, 3rd COLUMN OF MATRIX RD/WR SETPOINT IN THE 3RD COLUMN OF THE MATRIX (10X)
HYSTERESIS IN THE 3RD COLUMN OF THE MATRIX
264 RELAY 1 HYSTERESIS, 3rd COLUMN OF MATRIX RD/WR (10X)
Protocol Manual

272 RELAY 1 SETPOINT, 4th COLUMN OF MATRIX RD/WR SETPOINT IN THE 4TH COLUMN OF THE MATRIX (10X)
HYSTERESIS IN THE 4TH COLUMN OF THE MATRIX
280 RELAY 1 HYSTERESIS, 4th COLUMN OF MATRIX RD/WR (10X)
288 TAP POSITION -16 AVERAGE MAKE CURRENT READ AVERAGE MAKE CURRENT FOR TAP POSITION (-16) (N)
Protocol Manual

304 TAP POSITION +0 AVERAGE MAKE CURRENT READ AVERAGE MAKE CURRENT FOR TAP POSITION (+0) (N)
AVERAGE BREAK CURRENT FOR TAP POSITION (-16)
321 TAP POSITION -16 AVERAGE BREAK CURRENT READ (N)
328 TAP POSITION -9 AVERAGE BREAK CURRENT READ AVERAGE BREAK CURRENT FOR TAP POSITION (-9) (N)
337 TAP POSITION +0 AVERAGE BREAK CURRENT READ AVERAGE BREAK CURRENT FOR TAP POSITION (+0) (N)
Protocol Manual

AVERAGE BREAK CURRENT FOR TAP POSITION (+10)
347 TAP POSITION +10 AVERAGE BREAK CURRENT READ (N)
LTC HIGH-PRIORITY STEADY STATE UPPER SETPOINT
354 LTC HI-ALARM RUN CURRENT UPPER SETPOINT RD/WR (10X)
LTC LOW-PRIORITY STEADY STATE UPPER SETPOINT
355 LTC LO-ALARM RUN CURRENT UPPER SETPOINT RD/WR (10X)
LTC HIGH-PRIORITY STEADY STATE LOWER SETPOINT
356 LTC HI-ALARM RUN CURRENT LOWER SETPOINT RD/WR (10X)
LTC LOW-PRIORITY STEADY STATE LOWER SETPOINT
357 LTC LO-ALARM RUN CURRENT LOWER SETPOINT RD/WR (10X)
358 SETPOINT RD/WR SETPOINT (10X)
HOT SPOT MODULE 1; 1ST PROBE PRESENT TEMP
362 MOD 1; FIBER PROBE 1 PRESENT TEMPERATURE READ (10X)
363 MOD 1; FIBER PROBE 1 MINIMUM TEMPERATURE READ HOT SPOT MODULE 1; 1ST PROBE MINIMUM TEMP (10X)
HOT SPOT MODULE 1; 1ST PROBE MAXIMUM TEMP
364 MOD 1; FIBER PROBE 1 MAXIMUM TEMPERATURE READ (10X)
HOT SPOT MODULE 1; 2ND PROBE PRESENT TEMP
HOT SPOT MODULE 1; 2ND PROBE MINIMUM TEMP
366 MOD 1; FIBER PROBE 2 MINIMUM TEMPERATURE READ (10X)
HOT SPOT MODULE 1; 2ND PROBE MAXIMUM TEMP
HOT SPOT MODULE 1; 3RD PROBE PRESENT TEMP
HOT SPOT MODULE 1; 3RD PROBE MINIMUM TEMP
HOT SPOT MODULE 1; 3RD PROBE MAXIMUM TEMP
HOT SPOT MODULE 1; 4TH PROBE PRESENT TEMP
372 MOD 1; FIBER PROBE 4 MINIMUM TEMPERATURE READ HOT SPOT MODULE 1; 4TH PROBE MINIMUM TEMP (10X)
HOT SPOT MODULE 1; 4TH PROBE MAXIMUM TEMP
Protocol Manual

HOT SPOT MODULE 2; 1ST PROBE PRESENT TEMP
387 MOD 2; FIBER PROBE 1 MINIMUM TEMPERATURE READ HOT SPOT MODULE 2; 1ST PROBE MINIMUM TEMP (10X)
HOT SPOT MODULE 2; 1ST PROBE MAXIMUM TEMP
HOT SPOT MODULE 2; 2ND PROBE PRESENT TEMP
HOT SPOT MODULE 2; 2ND PROBE MINIMUM TEMP
HOT SPOT MODULE 2; 2ND PROBE MAXIMUM TEMP
HOT SPOT MODULE 2; 3RD PROBE PRESENT TEMP
HOT SPOT MODULE 2; 3RD PROBE MINIMUM TEMP
HOT SPOT MODULE 2; 3RD PROBE MAXIMUM TEMP
TEMP WHERE CONSUMED LIFE EQUALS OPERATING

450 LIFE CONSUMPTION UNITY TEMPERATURE READ LIFE (N)
451 LTC TAP PERIOD READ TIME PERIOD TO MEASURE LTC TAP COUNTS (N)
452 LTC PRESENT COUNTS READ TOTAL COUNTS IN PRESENT TAP PERIOD (N)
453 LTC PREVIOUS COUNTS READ TOTAL COUNTS IN THE PREVIOUS TAP PERIOD (N)
454 INSTALLED DIGITAL SENSORS READ BIT 16 = FIBER MOD 1 INSTALLED; BIT 15 = MOD 2 (N)
455 PRESENT YEAR READ TODAY'S YEAR IN THE 509ITM UNIT (N)
Protocol Manual

456 PRESENT MONTH READ TODAY'S MONTH IN THE 509ITM UNIT (N)
457 PRESENT DATE READ TODAY'S DAY IN THE 509ITM UNIT (1 - 31) (N)
458 PRESENT HOUR READ PRESENT HOUR (0 - 23) (N)
459 PRESENT MINUTE READ PRESENT MINUTE (0 - 59) (N)
460 PRESENT SECOND READ PRESENT SECOND (0 - 59) (N)
461 TOTAL NUMBER OF TAPS IN THE LTC READ (E.G. 33, 17, 9) (N)
MODULE NUMBER IF THERE IS AN AMBIENT SENSOR
462 AMBIENT TEMPERATURE MODULE NUMBER READ (N)
465 COOLING EXERCISER RUN TIME READ MINUTES FAN EXERCISER WILL RUN WHEN ACTIVE (N)
DAYS BETWEEN EXERCISER RUN TIME BEING ACTIVE
466 COOLING EXERCISER CYCLE TIME READ (N)
467 COOLING EXERCISER START TIME READ HOUR TO BEGIN FAN EXERCISER IN MILITARY TIME (N)
468 STARTING MONTH FOR SEASONAL SETPOINT READ RELAY FEATURE (1 - 12) (N)
469 STARTING DAY FOR SEASONAL SETPOINT READ RELAY FEATURE (1 - 31) (N)
470 ENDING MONTH FOR SEASONAL SETPOINT READ RELAY FEATURE (1 - 12) (N)
471 ENDING DAY FOR SEASONAL SETPOINT READ RELAY FEATURE (1 - 31) (N)
472 AMBIENT TEMPERATURE FORECAST SETPOINT READ RELAY FEATURE (N)
# OF HOURS TO EXCEED SETPOINT FOR ACTIVE
473 AMBIENT TEMPERATURE THRESHOLD HOURS READ FEATURE (N)
ROLLING PERIOD IN HOURS TO MEASURE THRESHOLD
474 AMBIENT TEMPERATURE MEASUREMENT PERIOD READ TEMP (N)
MODULE NUMBER MEASURING AMBIENT MODULE NUMBER IF THERE IS AN AMBIENT SENSOR
475 TEMPERATURE READ (N)
CB1 RUNNING CURRENT UPPER SETPOINT COOLING BANK 1 STEADY STATE CURRENT SETPOINT
516 VALUE RD/WR (10X)
CB1 RUNNING CURRENT LOWER SETPOINT COOLING BANK 1 STEADY STATE CURRENT SETPOINT
AVERAGE RUNNING CURRENT FROM LEARN MODE
532 CB1 RUNNING CURRENT AVERAGE READ (10X)
Protocol Manual

533 CB1 INRUSH CURRENT AVERAGE READ AVERAGE INRUSH CURRENT FROM LEARN MODE (10X)
534 CB1 DIFFERENTIAL TEMPERATURE SETPOINT RD/WR DIFFERENTIAL SETPOINT FOR COOLING BANK 1 (10X)
DIFFERENTIAL HYSTERESIS FOR COOLING BANK 1
535 CB1 DIFFERENTIAL TEMPERATURE HYSTERESIS RD/WR (10X)
560 CURRENT LOOP 1 CONTROL SIGNAL READ VALUE OF SIGNAL CONTROLLING LOOP 1 (10X)
564 CURRENT LOOP 1 MINIMUM SCALING RANGE READ MINIMUM SCALING VALUE FOR CURRENT LOOP 1 (10X)
568 CURRENT LOOP 1 MAXIMUM SCALING RANGE READ MAXIMUM SCALING VALUE FOR CURRENT LOOP 1 (10X)
AMBIENT LOOKBACK FEATURE SETPOINT FOR RELAY 1

600 RELAY 1 AMBIENT SETPOINT VALUE RD/WR (10X)
608 RELAY 1 SEASONAL SETPOINT VALUE RD/WR SEASONAL SETPOINT VALUE (10X)
Protocol Manual

632 RELAY 1 ACTUATION DELAY - HOURS VALUE RD/WR ACTUATION DELAY - HOURS (N)
640 RELAY 1 ACTUATION DELAY - MINUTES VALUE RD/WR ACTUATION DELAY - MINUTES (N)
648 RELAY 1 ACTUATION DELAY - SECONDS VALUE RD/WR ACTUATION DELAY - SECONDS (N)
691 TRANSLIFE 1 PRESENT CONSUMED LIFE RATE READ INSTANTANEOUS LIFE RATE (100X)
Analog Parameters
For Registers 702 thru 847 the parameters are 32 bits long with the even registers holding the low
word and the high registers holding the high word (e.g. 702 low word; 703 high word).

TRANSLIFE 1; TRANSFORMER LIFE TOTAL LIFE CONSUMPTION CALCULATED; TRANSLIFE 1
702 CONSUMPTION READ (N)
Protocol Manual

708 TOTAL TRANSFORMER OPERATING HOURS READ CUMULATIVE TRANSFORMER OPERATING HOURS (N)
710 COOLING BANK 1 TOTAL ACTUATION COUNTS READ ENGAGED (N)
712 COOLING BANK 1 ACTUATION SETPOINT VALUE READ TOTAL ACTUATION COUNT SETPOINT (N)
714 COOLING BANK 1 TOTAL SYSTEM RUN TIME READ TOTAL # OF HOURS THAT THE FANS HAVE BEEN ON (N)
716 COOLING BANK 1 RUN TIME SETPOINT VALUE READ TOTAL RUN TIME SETPOINT (N)
LIFE 'A' VALUE FOR CALCULATING CONSUMED LIFE
742 TRANSLIFE VARIABLE 'A' VALUE READ (10X)
LIFE 'B' VALUE FOR CALCULATING CONSUMED LIFE
744 TRANSLIFE VARIABLE 'B' VALUE READ (10X)
TRANSLIFE 1; TEMPERATURE PROFILE, 1ST TOTAL WINDING TEMP TIME IN LOWEST TEMP RANGE
748 RANGE READ (N)
750 RANGE READ TOTAL WINDING TEMP TIME IN 2ND TEMP RANGE (N)
752 RANGE READ TOTAL WINDING TEMP TIME IN 3RD TEMP RANGE (N)
754 RANGE READ TOTAL WINDING TEMP TIME IN 4TH TEMP RANGE (N)
TRANSLIFE 1; TEMPERATURE PROFILE, 12TH TOTAL WINDING TEMP TIME IN HIGHEST TEMP RANGE
770 RANGE READ (N)
772 RANGE READ (N)
Protocol Manual

794 RANGE READ (N)
796 RANGE READ (N)
818 RANGE READ (N)
820 COOLING BANK 1 ACTUATION SETPOINT VALUE RD/WR TOTAL ACTUATION COUNT SETPOINT (N)
822 COOLING BANK 1 RUN TIME SETPOINT VALUE RD/WR COOLING BANK 1 TOTAL RUN TIME SETPOINT (N)
836 VALUE RD/WR LTC HIGH-PRIORITY TOTAL TAP COUNT SETPOINT (N)
838 VALUE RD/WR LTC LOW-PRIORITY TOTAL TAP COUNT SETPOINT (N)
LTC HI-ALARM TOTAL RUN TIME SETPOINT
840 VALUE RD/WR LTC HIGH-PRIORITY TOTAL RUN TIME SETPOINT (N)
LTC LO-ALARM TOTAL RUN TIME SETPOINT
842 VALUE RD/WR LTC LOW-PRIORITY TOTAL RUN TIME SETPOINT (N)
LTC HI-ALARM MOTOR ACTUATION SETPOINT LTC HIGH-PRIORITY MOTOR ACTUATION COUNT SPT
844 VALUE RD/WR (N)
846 VALUE RD/WR LTC LOW-PRIORITY MOTOR ACTUATION COUNT SPT (N)
Protocol Manual
String Parameters
850 SERIAL NUMBER; 12 ASCII CHARACTERS READ SERIAL NUMBER[1] / SERIAL NUMBER[0]
851 SERIAL NUMBER CONTINUED READ SERIAL NUMBER[3] / SERIAL NUMBER [2]
856 MANUFACTURED DATE; 8 ASCII CHARACTERS READ MANUFACTURED DATE[1] / MANUFACTURED DATE [0]
857 MANUFACTURED DATE CONTINUED READ MANUFACTURED DATE[3] / MANUFACTURED DATE [2]
860 SUBSTATION NAME; 16 ASCII CHARACTERS READ SUBSTATION NAME[1] / SUBSTATION NAME[0]
861 SUBSTATION NAME CONTINUED READ SUBSTATION NAME[3] / SUBSTATION NAME[2]
868 EQUIPMENT NAME; 16 ASCII CHARACTERS READ EQUIPMENT NAME[1] / EQUIPMENT NAME[0]
869 EQUIPMENT NAME CONTINUED READ EQUIPMENT NAME[3] / EQUIPMENT NAME[2]
876 MODEL NUMBER; 8 ASCII CHARACTERS READ MODEL NUMBER[1] / MODEL NUMBER[0]
877 MODEL NUMBER CONTINUED READ MODEL NUMBER[3] / MODEL NUMBER[2]
Registers 900 thru 907 have the hex codes of the hardware types for the input modules. The types
are explained in the description side of the registers

900 INPUT MODULE 1 HARDWARE TYPE READ 00 = NONE; 01 = 4-20mA; 02 = 0-1mA; 03 = 0-10VDC;
901 INPUT MODULE 2 HARDWARE TYPE READ 04 = 0-100mVDC; 05 = CT, CURRENT; 06 = CT, TEMP;
902 INPUT MODULE 3 HARDWARE TYPE READ 07 = POTENTIOMETER; 08 = 100 OHM RTD; 09 = 10 OHM
903 INPUT MODULE 4 HARDWARE TYPE READ RTD; 0A = DRY SWITCH DETECTION; 0B = POWERED
904 INPUT MODULE 5 HARDWARE TYPE READ SWITCH DETECTION; 0C = 100 OHM RTD WINDING
905 INPUT MODULE 6 HARDWARE TYPE READ TEMP; 0D = 10 OHM RTD WINDING TEMP; 0E = LTC
Protocol Manual

906 INPUT MODULE 7 HARDWARE TYPE READ RESISTOR BRIDGE; 0F = 0-140VAC; 10 = 0-320VAC;
11 = LTC 0-1mA; 12 = LTC 4-20mA; 13 = FIBER OPTIC
907 INPUT MODULE 8 HARDWARE TYPE READ TEMP
Registers 908 thru 979 are packed numbers. For example: reading register 908 gives a decimal
number of 3122. Converting this to hex gives 0C32. Split the bytes in half and it would read 12
hours and 32 minutes.

908 INPUT MODULE 1 MAXIMUM VALUE TIME & DATE READ HOURS BYTE / MINUTES BYTE
909 INPUT MODULE 1 MAXIMUM VALUE TIME & DATE READ SECONDS BYTE / MONTHS BYTE
910 INPUT MODULE 1 MAXIMUM VALUE TIME & DATE READ DAYS BYTE / YEARS BYTE
932 INPUT MODULE 1 MINIMUM VALUE TIME & DATE READ HOURS BYTE / MINUTES BYTE
933 INPUT MODULE 1 MINIMUM VALUE TIME & DATE READ SECONDS BYTE / MONTHS BYTE
934 INPUT MODULE 1 MINIMUM VALUE TIME & DATE READ DAYS BYTE / YEARS BYTE
Protocol Manual

INPUT MODULE 1 MAXIMUM CURRENT TIME &
956 DATE READ HOURS BYTE / MINUTES BYTE
957 DATE READ SECONDS BYTE / MONTHS BYTE
958 DATE READ DAYS BYTE / YEARS BYTE
Protocol Manual

Analog Parameters
For registers 1000 thru 1133 the parameters are 32 bits long with the even registers holding the low
word and the high registers holding the high word (e.g. 1000 low word; 1001 high word).
1000 LTC, TAP POSITION -16 TOTAL TAP COUNTS READ TOTAL TAP COUNTS FOR TAP POSITION (-16)
1032 LTC, TAP POSITION +0 TOTAL TAP COUNTS READ TOTAL TAP COUNTS FOR TAP POSITION (+0)
1066 LTC, TAP POSITION -16 TOTAL RUN TIME READ TOTAL RUN TIME FOR TAP POSITION (-16)
Protocol Manual

1098 LTC, TAP POSITION +0 TOTAL RUN TIME READ TOTAL RUN TIME FOR TAP POSITION (+0)
1132 LTC, TOTAL MOTOR ACTUATION COUNTS READ TOTAL NUMBER OF MOTOR ACTUATION COUNTS
Analog Parameters
Registers 1134 to 1143 are scaled analog values (e.g. N, 10X, 100X, 1000X)

1134 LTC PREVIOUS MOTOR RUN CURRENT READ MOTOR RUN CURRENT FROM LAST ACTUATION (10X)
MOTOR INRUSH CURRENT FROM LAST ACTUATION
1135 LTC PREVIOUS MOTOR INRUSH CURRENT READ (10X)
1136 LTC PREVIOUS MOTOR RUN TIME READ MOTOR ACTUATION TIME FROM LAST ACTUATION (10X)
1137 LTC HI-ALARM DIFFERENTIAL SETPOINT VALUE RD/WR DIFFERENTIAL SETPOINT VALUE FOR HI-ALARM (10X)
LTC HI-ALARM DIFFERENTIAL HYSTERESIS DIFFERENTIAL HYSTERESIS VALUE FOR HI-ALARM
1139 LTC LO-ALARM DIFFERENTIAL SETPOINT VALUE RD/WR DIFFERENTIAL SETPOINT VALUE FOR LO-ALARM (10X)
LTC LO-ALARM DIFFERENTIAL HYSTERESIS DIFFERENTIAL HYSTERESIS VALUE FOR LO-ALARM
1141 LTC HI-ALARM MOTOR RUN TIME SETPOINT RD/WR MOTOR RUN TIME SETPOINT FOR HI-ALARM (N)
1142 LTC LO-ALARM MOTOR RUN TIME SETPOINT RD/WR MOTOR RUN TIME SETPOINT FOR LO-ALARM (N)
Protocol Manual
String Parameters
1200 INPUT MODULE 1 NAME; 7 ASCII CHARACTERS READ INPUT MODULE 1 NAME[1] / INPUT MODULE 1 NAME[0]
1201 INPUT MODULE 1 NAME; CONTINUED READ INPUT MODULE 1 NAME[3] / INPUT MODULE 1 NAME[2]
1203 INPUT MODULE 1 NAME; CONTINUED READ INPUT MODULE 1 ZERO / INPUT MODULE 1 NAME[6]
HOT SPOT MODULE 1; PROBE 1 NAME; 7 ASCII
1232 CHARS READ MODULE 1; PROBE 1 NAME[1] / PROBE 1 NAME[0]
HOT SPOT MODULE 1; PROBE 1 NAME;
1233 CONTINUED READ MODULE 1; PROBE 1 NAME[3] / PROBE 1 NAME[2]
1235 CONTINUED READ MODULE 1; PROBE 1 ZERO / PROBE 1 NAME[6]
Protocol Manual

Protocol Manual

HOT SPOT MODULE 1; PROBE 1 DESCRIPTION; 24
1296 CHAR READ MODULE 1; PROBE 1 DESC[1] / PROBE 1 DESC[0]
HOT SPOT MODULE 1; PROBE 1 DESCRIPTION;
1297 CONT. READ MODULE 1; PROBE 1 DESC[3] / PROBE 1 DESC[2]
Protocol Manual

Protocol Manual

Protocol Manual

Protocol Manual

Protocol Manual

Protocol Manual

Analog Parameters
Registers 1500 thru 1507, see appropriate scaling (e.g. N, 10X, 100X, 1000X)

IF INPUT MODULE A CT TYPE; HOLDS SENSOR VALUE
1500 INPUT MODULE 1; CT CLAMP-ON RATING VALUE READ (N)
String Parameters
Registers 1508 thru 1523.

INPUT MODULE 1 MEASUREMENT UNITS; 3 ASCII
1508 CHAR READ INPUT MODULE 1; UNITS[1] / UNITS[0]
INPUT MODULE 1 MEASUREMENT UNITS;
1509 CONTINUED READ INPUT MODULE 1; ZERO / UNITS[2]
Protocol Manual

Analog Parameters
Registers 1524 thru 2315; see appropriate scaling (e.g. N, 10X, 100X, 1000X)

INPUT MODULE 1 OIL TEMPERATURE ADDER IF CT INPUT MODULE; POINTER TO OIL TEMP
1524 POINTER READ MEASUREMENT (N)
1532 INPUT MODULE 1; COOLING STAGE 2 RELAY # READ IF CT ADVANCED CALCULATION; RELAY NUMBER (N)
Protocol Manual

1600 INPUT MODULE 1; CT RATIO PRIMARY # READ IF CT MODULE TYPE; HOLDS CT RATIO # (1000X)
1616 INPUT MODULE 1; CT RATIO SECONDARY # READ IF CT MODULE TYPE; HOLDS CT RATIO # (1000X)
1632 INPUT MODULE 1; SCALING OFFSET VALUE READ SCALING OFFSET CALIBRATION VALUE (1000X)
1648 INPUT MODULE 1; SCALING GAIN VALUE READ SCALING GAIN CALIBRATION VALUE (1000X)
Protocol Manual

INPUT MODULE 1; WINDING RISE SIMPLE CALCULATION WINDING RISE TEMPERATURE

2100 TEMPERATURE READ (100X)
2108 INPUT MODULE 1; CURRENT FACTOR READ SIMPLE CALCULATION CURRENT FACTOR (100X)
2116 INPUT MODULE 1; WINDING TIME CONSTANT READ SIMPLE CALCULATION WINDING TIME CONSTANT (N)
INPUT MODULE 1; OIL RISE TEMPERATURE;
2124 STAGE 1 READ COOLING STAGE 1 OIL RISE TEMPERATURE (100X)
Protocol Manual

INPUT MODULE 1; OIL RISE TIME CONSTANT;
2156 STAGE 1 READ COOLING STAGE 1 OIL RISE TIME CONSTANT (N)
Protocol Manual

2188 INPUT MODULE 1; CURRENT FACTOR; STAGE 1 READ COOLING STAGE 1 ADVANCED CURRENT FACTOR (100X)
Protocol Manual

INPUT MODULE 1; WINDING RISE TEMP; STAGE COOLING STAGE 1; ADVANCED WINDING RISE TEMP
2220 1 READ (100X)
2221 2 READ (100X)
2222 3 READ (100X)
2223 4 READ (100X)
2224 1 READ (100X)
2225 2 READ (100X)
2226 3 READ (100X)
2227 4 READ (100X)
2228 1 READ (100X)
2229 2 READ (100X)
2230 3 READ (100X)
2231 4 READ (100X)
2232 1 READ (100X)
2233 2 READ (100X)
2234 3 READ (100X)
2235 4 READ (100X)
2236 1 READ (100X)
2237 2 READ (100X)
2238 3 READ (100X)
2239 4 READ (100X)
2240 1 READ (100X)
2241 2 READ (100X)
2242 3 READ (100X)
2243 4 READ (100X)
2244 INPUT MODULE 7; WINDING RISE TEMP; STAGE READ COOLING STAGE 1; ADVANCED WINDING RISE TEMP
Protocol Manual

1 (100X)
2245 2 READ (100X)
2246 3 READ (100X)
2247 4 READ (100X)
2248 1 READ (100X)
2249 2 READ (100X)
2250 3 READ (100X)
2251 4 READ (100X)
INPUT MODULE 1; WINDING CALC EXPONENT;
2252 STAGE 1 READ COOLING STAGE 1; ADVANCED CALC EXPONENT (10X)
2277 INPUT MODULE 7; WINDING CALC EXPONENT; READ COOLING STAGE 2; ADVANCED CALC EXPONENT (10X)
Protocol Manual

STAGE 2
INPUT MODULE 1; WINDING TIME CONSTANT;
2284 STAGE 1 READ COOLING STAGE 1; WINDING TIME CONSTANT (N)
2310 INPUT MODULE 7; WINDING TIME CONSTANT; READ COOLING STAGE 3; WINDING TIME CONSTANT (N)
Protocol Manual

STAGE 3

HOT SPOT MODULE 1; PROBE 1; MIN TIME &
2316 DATE READ MINIMUM VALUE; HOURS BYTE / MINUTES BYTE
2317 DATE READ MINIMUM VALUE; SECONDS BYTE / MONTHS BYTE
2318 DATE READ MINIMUM VALUE; DAYS BYTE / YEARS BYTE
HOT SPOT MODULE 1; PROBE 1; MAX TIME &
2319 DATE READ MAXIMUM VALUE; HOURS BYTE / MINUTES BYTE
2320 DATE READ MAXIMUM VALUE; SECONDS BYTE / MONTHS BYTE
2321 DATE READ MAXIMUM VALUE; DAYS BYTE / YEARS BYTE
Protocol Manual

Protocol Manual

Protocol Manual

Binary Parameters
Registers 2600 thru 2607 have the hex codes of the hardware types for the input modules. The types
are explained in the description side of the registers

2600 INPUT MODULE 1 HARDWARE TYPE READ 00 = NONE; 01 = 4-20mA; 02 = 0-1mA; 03 = 0-10VDC;
2601 INPUT MODULE 2 HARDWARE TYPE READ 04 = 0-100mVDC; 05 = CT, CURRENT; 06 = CT, TEMP;
2602 INPUT MODULE 3 HARDWARE TYPE READ 07 = POTENTIOMETER; 08 = 100 OHM RTD; 09 = 10 OHM
2603 INPUT MODULE 4 HARDWARE TYPE READ RTD; 0A = DRY SWITCH DETECTION; 0B = POWERED
2604 INPUT MODULE 5 HARDWARE TYPE READ SWITCH DETECTION; 0C = 100 OHM RTD WINDING
2605 INPUT MODULE 6 HARDWARE TYPE READ TEMP; 0D = 10 OHM RTD WINDING TEMP; 0E = LTC
Protocol Manual

2606 INPUT MODULE 7 HARDWARE TYPE READ RESISTOR BRIDGE; 0F = 0-140VAC; 10 = 0-320VAC;
2607 INPUT MODULE 8 HARDWARE TYPE READ 11 = LTC 0-1mA; 12 = LTC 4-20mA; 13 = FIBER OPTIC TEMP
Analog Parameters
Values in registers 2608 thru 2935 have been scaled according to their function to offer the greatest
possible resolution. If the description of the value has a (N) then there is no scaling. A (10X) means
the value has been multiplied by 10 and needs to be divided by 10 to read the actual value (e.g. if the
value in the 509ITM is 123.4 then it will be transmitted 1234). A (100X) means the value was
multiplied by 100 and needs to be divided by 100 to read the actual value (e.g. if the value in the
509ITM is 12.34 then it will be transmitted as 1234).
ALL MODULES BUT CT, WINDING
TEMPERATURE IF THE MODULE IS A CT, WINDING TEMPERATURE
OR INPUT MODULE 9 PRESENT WINDING TEMP
2608 INPUT MODULE 9 PRESENT VALUE READ (10X)
OR INPUT MODULE 9 MAXIMUM WINDING TEMP
2610 INPUT MODULE 9 MAXIMUM VALUE READ (10X)
OR INPUT MODULE 10 MINIMUM WINDING TEMP
2614 INPUT MODULE 10 MINIMUM VALUE READ (10X)
Protocol Manual

INPUT MODULE 9; CT CLAMP-ON RATING IF INPUT MODULE A CT TYPE; HOLDS SENSOR

2648 VALUE READ VALUE (N)
INPUT MODULE 10 OIL TEMPERATURE IF CT INPUT MODULE; POINTER TO OIL TEMP
2657 ADDER POINTER READ MEASUREMENT (N)
INPUT MODULE 9; COOLING STAGE 2 RELAY IF CT ADVANCED CALCULATION; RELAY NUMBER
2664 # READ (N)
2665 # READ (N)
2666 # READ (N)
INPUT MODULE 10; COOLING STAGE 2 IF CT ADVANCED CALCULATION; RELAY NUMBER
2667 RELAY # READ (N)
Protocol Manual

Protocol Manual

INPUT MODULE 9; WINDING RISE SIMPLE CALCULATION WINDING RISE

2720 TEMPERATURE READ TEMPERATURE (100X)
SIMPLE CALCULATION WINDING TIME CONSTANT
2736 INPUT MODULE 9; WINDING TIME CONSTANT READ (N)
INPUT MODULE 10; WINDING TIME SIMPLE CALCULATION WINDING TIME CONSTANT
2737 CONSTANT READ (N)
Protocol Manual

Protocol Manual

INPUT MODULE 10; OIL RISE TIME
2780 CONSTANT; STAGE 1 READ COOLING STAGE 1 OIL RISE TIME CONSTANT (N)
INPUT MODULE 9; CURRENT FACTOR; COOLING STAGE 1 ADVANCED CURRENT FACTOR
2808 STAGE 1 READ (100X)
Protocol Manual

INPUT MODULE 9; WINDING RISE TEMP; COOLING STAGE 1; ADVANCED WINDING RISE TEMP
Protocol Manual

INPUT MODULE 9; WINDING CALC COOLING STAGE 1; ADVANCED CALC EXPONENT
2872 EXPONENT; STAGE 1 READ (10X)
Protocol Manual

INPUT MODULE 9; WINDING TIME
2904 CONSTANT; STAGE 1 READ COOLING STAGE 1; WINDING TIME CONSTANT (N)
Protocol Manual

INPUT MODULE 9 MAXIMUM VALUE TIME &
Protocol Manual

INPUT MODULE 9 MINIMUM VALUE TIME &
Protocol Manual

INPUT MODULE 9 MAXIMUM CURRENT TIME
3048 & DATE READ HOURS BYTE / MINUTES BYTE
3049 & DATE READ SECONDS BYTE / MONTHS BYTE
3050 & DATE READ DAYS BYTE / YEARS BYTE
Protocol Manual

String Parameters
Registers 3072 thru 3119.
INPUT MODULE 9 NAME; 7 ASCII INPUT MODULE 1 NAME[1] / INPUT MODULE 1
3072 CHARACTERS READ NAME[0]
INPUT MODULE 1 NAME[3] / INPUT MODULE 1
3073 INPUT MODULE 9 NAME; CONTINUED READ NAME[2]
3100 INPUT MODULE 16 NAME; 7 ASCII READ INPUT MODULE 8 NAME[1] / INPUT MODULE 8
Protocol Manual

CHARACTERS NAME[0]
INPUT MODULE 9 MEASUREMENT UNITS; 3

3104 ASCII CHAR READ INPUT MODULE 1; UNITS[1] / UNITS[0]
Protocol Manual
IEC 60870-5-101 Configuration/

Interoperability Guide
Introduction
The purpose of this document is to describe the specific implementation of the IEC 60870-5-101 for
the 509ITM (an IEC 60870-5-101 Slave device).
This document and the documents listed below provide complete information on how to communicate
with the 509ITM via the IEC 60870-5-101 protocol.
 IEC 60870-5-101 = Companion standard for basic telecontrol tasks
 IEC 60870-5-5 = Basic Application Functions
 IEC 60870-5-2 = Link Transmission Procedures
 IEC 60870-5-4 = Definition and Coding of Application Information Elements
 IEC 60870-5-3 = General Structure of Application Data
 IEC 60870-5-1 = Transmission Frame Formats
Interoperability
The pages in this section have been extracted from the 60870-5-101 © IEC:2003, Section 8. The
section numbers below have been purposely retained from that document for reference.
This companion standard presents sets of parameters and alternatives from which subsets have to
be selected to implement particular telecontrol systems. Certain parameter values, such as the
number of octets in the COMMON ADDRESS of ASDUs represent mutually exclusive alternatives.
This means that only one value of the defined parameters is admitted per system. Other parameters,
such as the listed set of different process information in command and in monitor direction allow the
specification of the complete set or subsets, as appropriate for given applications. This Clause
summarizes the parameters of the previous Clauses to facilitate a suitable selection for a specific
application. If a system is composed of equipment stemming from different manufacturers it is
necessary that all partners agree on the selected parameters.
The selected parameters should be marked in the white boxes as follows:
 Function or ASDU is not used

 Function or ASDU is used as standardized (default)
R Function or ASDU is used in reverse mode
B Function or ASDU is used in standard and reverse mode
Protocol Manual
The possible selection (blank, X, R, or B) is specified for each specific Clause or parameter.
System or device
System definition
Controlling station definition (master)
Controlled station definition (slave)
Network Configuration
 Point-to-point  Multipoint-party line
 Multiple point-to-point  Multipoint-star
Physical Layer
Transmission Speed (control direction)
Unbalanced interchange Unbalanced interchange Balanced interchange
Circuit V.24/V.28 Circuit V.24/V.28 Circuit X.24/X.27
Standard Recommended if >1 200 bit/s
 100 bit/s  2400 bit/s  2400 bit/s 
56000 bit/s
 200 bit/s 4800 bit/s  4800 bit/s 
64000 bit/s
 300 bit/s 9600 bit/s  9600 bit/s
 600 bit/s  19200 bit/s
1200 bit/s  38400 bit/s
Transmission speed (monitor direction)
Unbalanced interchange Unbalanced interchange Balanced interchange
Circuit V.24/V.28 Circuit V.24/V.28 Circuit X.24/X.27
Standard Recommended if >1 200 bit/s
 100 bit/s  2400 bit/s  2400 bit/s 
56000 bit/s
 200 bit/s 4800 bit/s  4800 bit/s 
64000 bit/s
 300 bit/s 9600 bit/s  9600 bit/s
 600 bit/s  19200 bit/s
1200 bit/s  38400 bit/s
Link Layer
Frame format FT 1.2, single character 1 and the fixed time out interval are used exclusively in this
companion standard.
Link transmission procedure Address field of link

 Balanced transmission  Not present (balanced transmission only)
 Unbalanced transmission  One octet
 Two octets
Protocol Manual
 Structured
  Unstructured
Frame length
255 Maximum length L (control direction)
255 Maximum length L (monitor direction)
Configurable Time during which repetitions are permitted (Trp) or number of repetitions
 The standard assignment of ASDUs to class 2 messages is used as follows:

Type identification Cause of transmission
9, 11, 13, 21 <1>
 A special assignment of ASDUs to class 2 messages is used as follows:

1,3,5,7,9,11,13,20,21,110,111 <2>
,112
Note: In response to a class 2 poll, a controlled station may respond with class 1 data when there is
no class 2 data available.
Application Layer
Transmission mode for application data
Mode 1 (Least significant octet first), as defined in clause 4.10 of IEC 60870-5-4, is used exclusively
in this companion standard.
Common address of ASDU

 One octet  Two octets
Information object address
 One octet  structured
 Two octets  unstructured
 Three octets
Cause of transmission
 One octet  Two octets (with originator address)
Set to zero in case of no originator address
Protocol Manual
Selection of standard ASDUs

Process information in monitor direction
<1>:= Single-point information M_SP_NA_1
<2>:= Single-point information with time tag M_SP_TA_1
<3>:= Double-point information M_DP_NA_1
<4>:= Double-point information with time tag M_DP_TA_1
<5>:= Step position information M_ST_NA_1
<6>:= Step position information with time tag M_ST_TA_1
<7>:= Bit string of 32 bit M_BO_NA_1
<8>:= Bit string of 32 bit with time tag M_BO_TA_1
<9>:= Measured value, normalized value M_ME_NA_1
<10>:= Measured value, normalized value with time tag M_ME_TA_1
<11>:= Measured value, scaled value M_ME_NB_1
<12>:= Measured value, scaled value with time tag M_ME_TB_1
<13>:= Measured value, short floating point value M_ME_NC_I
<14>:= Measured value, short floating point value with time tag M_ME_TC_1
<15>:= Integrated totals M_IT_NA_1
<16>:= Integrated totals with time tag M_IT_TA_1
<17>:= Event of protection equipment with time tag M_EP_TA_1
<18>:= Packed start events of protection equipment with time tag M_EP_TB_1
<19>:= Packed output circuit information of protection equipment with time tag M_EP_TC_1
<20>:= Packed single-point information with status change detection M_PS_NA_1
<21>:= Measured value, normalized value without quality descriptor M_ME_ND_1
<30>:= Single-point information with time tag CP56Time2a M_SP_TB_1
<31>:= Double-point information with time tag CP56Time2A M_DP_TB_1
<32>:= Step position information with time tag CP56Time2A M_ST_TB_1
<33>:= Bit string of 32 bit with time tag CP56Time2A M_BO_TB_1
<34>:= Measured value, normalized value with time tag CP56Time2A M_ME_TD_1
<35>:= Measured value, scaled value with time tag CP56Time2A M_ME_TE_1
<36>:= Measured value, short floating point value with time tag CP56Time2A M_ME_TF_1
<37>:= Integrated totals with time tag CP56Time2A M_IT_TB_1
<38>:= Event of protection equipment with time tag CP56Time2A M_EP_TD_1
<39>:= Packed start events of protection equipment with time tag CP56time2A M_EP_TE_1
<40>:= Packed output circuit information of protection equipment with time M_EP_TF_1
tag
Protocol Manual
Process information in control direction

<45>:= Single command C_SC_NA_1
<46>:= Double command C_DC_NA_1
<47>:= Regulating step command C_RC_NA_1
<48>:= Set point command, normalized value C_SE_NA_1
<49>:= Set point command, scaled value C_SE_NB_1
<50>:= Set point command, short floating point value C_SE_NC_1
<51>:= Bitstring of 32 bit C_BO_NA_1
System information in monitor direction

<70>:= End of initialization M_EI_NA_1
System information in control direction

<100>:= Interrogation command C_IC_NA_1
<101>:= Counter interrogation command C_CI_NA_1
<102>:= Read command C_RD_NA_1
<103>:= Clock synchronization command C_CS_NA_1
<104>:= Test command C_TS_NB_1
<105>:= Reset process command C_RP_NC_1
<106>:= Delay acquisition command C_CD_NA_1
Parameter in control direction
<110>:= Parameter of measured value, normalized value P_ME_NA_1

<111>:= Parameter of measured value, scaled value P_ME_NB_1
<112>:= Parameter of measured value, short floating point value P_ME_NC_1
<113>:= Parameter activation P_AC_NA_1\
File transfer
<120>:= File ready F_FR_NA_1

<121>:= Section ready F_SR_NA_1
<122>:= Call directory, select file, call file, call section F_SC_NA_1
<123>:= Last section, last segment F_LS_NA_1
<124>:= Ack file, ack section F_AF_NA_1
<125>:= Segment F_SG_NA_1
<126>:= Directory F_DR_TA_1
Protocol Manual
Type identification and cause of transmission assignments

(station-specific parameters)
request by group <n> counter request
unknown information object address

unknown common address of ASDU
return info caused by a remote cmd
return info caused by a local cmd
interrogated by group <number>
unknown cause of transmission

unknown type identification
deactivation confirmation
activation confirmation
activation termination
request or requested
background scan
periodic, cyclic
spontaneous
deactivation
file transfer
activation
initialized
20 37
1 2 3 4 5 6 7 8 9 10 11 12 13 to to 44 45 46 47
36 41
<1> M_SP_NA_1 X X X X X X
<2> M_SP_TA_1 X X X X
<3> M_DP_NA_1 X X X X X X
<4> M_DP_TA_1 X X X X
<5> M_ST_NA_1 X X X X X X
<6> M_ST_TA_1 X X X X
<7> M_BO_NA_1 X X X X
<8> M_BO_TA_1 X X
<9> M_ME_NA_1 X X X X X
<10> M_ME_TA_1 X X
<11> M_ME_NB_1 X X X X X
<12> M_ME_TB_1 X X
<13> M_ME_NC_1 X X X X X
<14> M_ME_TC_1 X X
<15> M_IT_NA_1 X X
<16> M_IT_TA_1 X X
<17> M_EP_TA_1 X
<18> M_EP_TB_1 X
<19> M_EP_TC_1 X
<20> M_PS_NA_1 X X X X X X
<21> M_ME_ND_1 X X X X X
<30> M_SP_TB_1 X X X X
<31> M_DP_TB_1 X X X X
<32> M_ST_TB_1 X X X X
Protocol Manual


background scan
periodic, cyclic
spontaneous
deactivation
file transfer
activation
initialized
20 37
1 2 3 4 5 6 7 8 9 10 11 12 13 to to 44 45 46 47
36 41
<33> M_BO_TB_1 X X
<34> M_ME_TD_1 X X
<35> M_ME_TE_1 X X
<36> M_ME_TF_1 X X
<37> M_IT_TB_1 X X
<38> M_EP_TD_1 X
<39> M_EP_TE_1 X
<40> M_EP_TF_1 X
<45> C_SC_NA_1 X X X X X X X X X
<46> C_DC_NA_1 X X X X X X X X X
<47> C_RC_NA_1 X X X X X X X X X
<48> C_SE_NA_1 X X X X X X X X X
<49> C_SE_NB_1 X X X X X X X X X
<50> C_SE_NC_1 X X X X X X X X X
<51> C_BO_NA_1 X X X X X X X X X
<70> M_EI_NA_1* X
<100> C_IC_NA_1 X X X X X X X X X
<101> C_CI_NA_1 X X X X X X X
<102> C_RD_NA_1 X X X X X
<103> C_CS_NA_1 X X X X X X X
<104> C_TS_NA_1 X X X X X X
<105> C_RP_NA_1 X X X X X X
<106> C_CD_NA_1 X X X X X X X
<110> P_ME_NA_1
<111> P_ME_NB_1
<112> P_ME_NC_1
<113> P_AC_NA_1
Protocol Manual


background scan
periodic, cyclic
spontaneous
deactivation
file transfer
activation
initialized
20 37
1 2 3 4 5 6 7 8 9 10 11 12 13 to to 44 45 46 47
36 41
<120> F_FR_NA_1
<121> F_SR_NA_1
<122> F_SC_NA_1
<123> F_LS_NA_1
<124> F_AF_NA_1
<125> F_SG_NA_1
<126> F_DR_TA_1*
* Blank or X only
Basic Application Functions

Station initialization
 Remote initialization
Cyclic data transmission
 Cyclic data transmission
Read procedure
 Read procedure
Spontaneous transmission
 Spontaneous
Double transmission of information objects with cause of transmission spontaneous
The following type identifications may be transmitted in succession caused by a single status
change of an information object. The particular information object addresses for which double
transmission is enabled are defined in a project-specific list.
Protocol Manual
 Double-point information M_DP_NA_1, M_DP_TA_1 and M_DP_TB_1

 Step position information M_ST_NA_1, M_ST_TA_1 and M_ST_TB_1
 Bit string of 32 bit M_BO_NA_1, M_BO_TA_1 and M_BO_TB_1
 Measured value, normalized value M_ME_NA_1, M_ME_TA_1, M_ME_ND_1 &
M_ME_TD_1
 Measured value, scaled value M_ME_NB_1, M_ME_TB_1 and M_ME_TE_1
 Measured value, short floating point number M_ME_NC_1, M_ME_TC_1, and
M_ME_TF_1
Station interrogation
 global
 group 1  group 7  group 13
 group 2  group 8  group l4
 group 5  group 11
 group 6  group 12 Information object addresses assigned to each
group must be show in a separate table
Clock synchronization
 Clock synchronization
 Day of week used
 RES1, GEN (time tag substituted/ not substituted) used
 SU-bit (summertime) used
Command transmission
 Direct command transmission  Select and execute command
 Direct set point command transmission  Select and execute set point command
 C_SE_ACTTERM used
 No additional definition
 Short pulse duration (duration determined by a system parameter in the outstation)
 Long pulse duration (duration determined by a system parameter in the outstation)
 Persistent output
Transmission of Integrated totals
 Mode A: Local freeze with spontaneous
 Mode B: Local freeze with counter
 Mode C Freeze and transmit by counter interrogation
 Mode C Freeze by counter-interrogation command, frozen values reported
 Counter read
Protocol Manual
 Counter freeze without reset

 Counter freeze without reset
 Counter reset
 General request counter
 Request counter group 1
Parameter loading
 Threshold value
 Smoothing factor
 Low limit for transmission of measured value
 High limit for transmission of measured value
Parameter activation
 Act/deact of persistent cyclic or periodic transmission of the addressed object
Test procedure

Test procedure
File transfer
File transfer in monitor direction
 Transparent file
 Transmission of disturbance data of protection
 Transmission of sequences of events
 Transmission of sequences of recorded analog values
File transfer in control direction
 Transparent file
Background scan
 Background scan
Acquisition of transmission delay
 Acquisition of transmission delay
Protocol Manual
IEC 60870-5-101 I/O DATA MAP

BINARY INPUT
I/O ADD DATA VARIABLE DESCRIPTION
16 SYSTEM STATUS RELAY 1 = ACTUATED; 0 = NOT ACTUATED
17 HEATER STATUS 1 = ENABLED; 0 = DISABLED
42 INPUT MODULE 1 ENABLED/DISABLED 1 = ENABLED; 0 = DISABLED
Protocol Manual
BINARY INPUT
BINARY OUTPUT
58 INPUT MODULE MAX/MIN RESET PULSE/RESET (1)
59 COOLING MONITOR MAX/MIN RESET PULSE/RESET (1)
60 LATCHED RELAYS RESET PULSE/RESET (1)
BINARY INPUT
77 INPUT MODULE 1 READ ERROR 1 = READ ERROR; 0 = VALID READ
Protocol Manual
BINARY INPUT
85 INPUT MODULE 1 CUSTOM SCALING 1 = ENABLED; 0 = DISABLED
ANALOG INPUT
I/O
ADD DATA VARIABLE DESCRIPTION
Protocol Manual
ANALOG INPUT
I/O
168 HOTTEST PRESENT WINDING TEMPERATURE OF ALL ACTIVE CT, TEMPERATURE MODULES
Protocol Manual
ANALOG INPUT
I/O
Protocol Manual
ANALOG INPUT
I/O
223 TL1 TIME TO CRITICAL SETPOINT 1 CALCULATED TIME TO 1ST SPT FOR GIVEN CONDITIONS
224 TL1 TIME TO CRITICAL SETPOINT 2 CALCULATED TIME TO 2ND SPT FOR GIVEN CONDITIONS
225 TL1 TIME TO CRITICAL SETPOINT 3 CALCULATED TIME TO 3RD SPT FOR GIVEN CONDITIONS
Protocol Manual
ANALOG INPUT
I/O
Protocol Manual
ANALOG INPUT
I/O
LTC HI-ALARM INRUSH CURRENT UPPER
354 SETPOINT LTC HIGH-PRIORITY INRUSH CURRENT UPPER SETPOINT
LTC LO-ALARM INRUSH CURRENT UPPER
355 SETPOINT LTC LOW-PRIORITY INRUSH CURRENT UPPER SETPOINT
LTC HI-ALARM INRUSH CURRENT LOWER
356 SETPOINT LTC HIGH-PRIORITY INRUSH CURRENT LOWER SETPOINT
LTC LO-ALARM INRUSH CURRENT LOWER
357 SETPOINT LTC LOW-PRIORITY INRUSH CURRENT LOWER SETPOINT
Protocol Manual
ANALOG INPUT
I/O
Protocol Manual
ANALOG INPUT
I/O
406 LIFE CONSUMPTION UNITY TEMPERATURE TEMP WHERE CONSUMED LIFE EQUALS OPERATING LIFE
411 LTC TAP PERIOD TIME PERIOD TO MEASURE LTC TAP COUNTS
412 LTC PRESENT COUNTS TOTAL COUNTS IN PRESENT TAP PERIOD
413 LTC PREVIOUS COUNTS TOTAL COUNTS IN THE PREVIOUS TAP PERIOD
Protocol Manual
ANALOG INPUT
I/O
450 COOLING BANK 1 TOTAL ACTUATION COUNTS TOTAL # OF TIMES THE COOLING FANS HAVE ENGAGED
Protocol Manual
ANALOG INPUT
I/O
Protocol Manual
ANALOG INPUT
I/O
532 LTC, TOTAL MOTOR ACTUATION COUNTS TOTAL NUMBER OF MOTOR ACTUATION COUNTS
533 FIRMWARE REVISION FOR THIS 509ITM UNIT
534 INSTALLED DIGITAL SENSORS
535 SYSTEM DATE YEAR VALUE
536 SYSTEM DATE MONTH VALUE
537 SYSTEM DATE DAY VALUE
538 SYSTEM TIME HOUR VALUE
539 SYSTEM TIME MINUTE VALUE
540 SYSTEM TIME SECOND VALUE
541 TOTAL PHYSICAL NUMBER OF TAPS # OF TAPS IN LTC; E.G. 33, 17, 9
542 AMBIENT TEMPERATURE MODULE NUMBER
543 TRANSLIFE LIFE CONSUMPTION 'A' VARIABLE
544 TRANSLIFE LIFE CONSUMPTION 'B' VARIABLE
545 COOLING EXERCISER RUN TIME MINUTES FAN EXERCISER WILL RUN WHEN ACTIVE
546 COOLING EXERCISER CYCLE TIME DAYS BETWEEN EXERCISER RUN TIME BEING ACTIVE
547 COOLING EXERCISER START TIME HOUR TO BEGIN FAN EXERCISER IN MILITARY TIME
548 STARTING MONTH FOR SEASONAL SETPOINT RELAY FEATURE (1 - 12)
549 STARTING DAY FOR SEASONAL SETPOINT RELAY FEATURE (1 - 31)
550 ENDING MONTH FOR SEASONAL SETPOINT RELAY FEATURE (1 - 12)
551 ENDING DAY FOR SEASONAL SETPOINT RELAY FEATURE (1 - 31)
552 AMBIENT TEMPERATURE FORECAST SETPOINT RELAY FEATURE
553 AMBIENT TEMPERATURE THRESHOLD HOURS # OF HOURS TO EXCEED SETPOINT TO BECOME ACTIVE
ROLLING PERIOD IN HOURS TO MEASURE THRESHOLD
554 AMBIENT TEMPERATURE MEASUREMENT PERIOD TEMP
555 MODULE # MEASURING AMBIENT TEMPERATURE MODULE # IF THERE IS AN AMBIENT SENSOR
556 COOLING BANK 1 AVERAGE RUNNING CURRENT CB1 AVERAGE STEADY STATE CURRENT VALUE
557 COOLING BANK 1 AVERAGE INRUSH CURRENT CB1 AVERAGE INRUSH CURRENT VALUE
558 COOLING BANK 1 DIFFERENTIAL SETPOINT CB1 DIFFERENTIAL SETPOINT VALUE
559 COOLING BANK 1 DIFFERENTIAL HYSTERESIS CB1 DIFFERENTIAL HYSTERESIS VALUE
Protocol Manual
ANALOG INPUT
I/O
572 CURRENT LOOP 1 CONTROL SIGNAL VALUE OF SIGNAL CONTROLLING LOOP 1
576 CURRENT LOOP 1 MINIMUM SCALING RANGE MINIMUM SCALING VALUE FOR CURRENT LOOP 1
580 CURRENT LOOP 1 MAXIMUM SCALING RANGE MAXIMUM SCALING VALUE FOR CURRENT LOOP 1
584 RELAY 1 AMBIENT SETPOINT VALUE AMBIENT LOOKBACK FEATURE SETPOINT
588 RELAY51 AMBIENT SETPOINT VALUE AMBIENT LOOKBACK FEATURE SETPOINT
592 RELAY 1 SEASONAL SETPOINT VALUE SEASONAL SETPOINT VALUE
600 RELAY 1 ACTUATION DELAY - HOURS VALUE ACTUATION DELAY - HOURS
608 RELAY 1 ACTUATION DELAY - MINUTES VALUE ACTUATION DELAY - MINUTES
Protocol Manual
ANALOG INPUT
I/O
616 RELAY 1 ACTUATION DELAY - SECONDS VALUE ACTUATION DELAY - SECONDS
624 LTC PREVIOUS MOTOR RUN CURRENT MOTOR RUN CURRENT FROM LAST ACTUATION
625 LTC PREVIOUS MOTOR INRUSH CURRENT MOTOR INRUSH CURRENT FROM LAST ACTUATION
626 LTC PREVIOUS MOTOR RUN TIME MOTOR ACTUATION TIME FROM LAST ACTUATION
627 LTC HI-ALARM DIFFERENTIAL SETPOINT VALUE DIFFERENTIAL SETPOINT VALUE FOR HI-ALARM
628 LTC HI-ALARM DIFFERENTIAL HYSTERSIS VALUE DIFFERENTIAL HYSTERESIS VALUE FOR HI-ALARM
629 LTC LO-ALARM DIFFERENTIAL SETPOINT VALUE DIFFERENTIAL SETPOINT VALUE FOR LO-ALARM
630 LTC LO-ALARM DIFFERENTIAL HYSTERSIS VALUE DIFFERENTIAL HYSTERESIS VALUE FOR LO-ALARM
631 LTC HI-ALARM MOTOR RUN TIME SETPOINT MOTOR RUN TIME SETPOINT FOR HI-ALARM
632 LTC LO-ALARM MOTOR RUN TIME SETPOINT MOTOR RUN TIME SETPOINT FOR LO-ALARM
ANALOG OUTPUTS
I/O
Protocol Manual
ANALOG OUTPUTS
I/O
Protocol Manual
ANALOG OUTPUTS
I/O
LTC HIGH-PRIORITY INRUSH CURRENT UPPER
801 LTC HI-ALARM INRUSH CURRENT UPPER SETPOINT SETPOINT
802 LTC LO-ALARM INRUSH CURRENT UPPER SETPOINT LTC LOW-PRIORITY INRUSH CURRENT UPPER SETPOINT
LTC HIGH-PRIORITY INRUSH CURRENT LOWER
803 LTC HI-ALARM INRUSH CURRENT LOWER SETPOINT SETPOINT
LTC LOW-PRIORITY INRUSH CURRENT LOWER
804 LTC LO-ALARM INRUSH CURRENT LOWER SETPOINT SETPOINT
805 LTC HI-ALARM TOTAL TAP COUNT SETPOINT VALUE LTC HIGH-PRIORITY TOTAL TAP COUNT SETPOINT
806 LTC LO-ALARM TOTAL TAP COUNT SETPOINT VALUE LTC LOW-PRIORITY TOTAL TAP COUNT SETPOINT
809 LTC HI-ALARM TOTAL RUN TIME SETPOINT VALUE LTC HIGH-PRIORITY TOTAL RUN TIME SETPOINT
810 LTC LO-ALARM TOTAL RUN TIME SETPOINT VALUE LTC LOW-PRIORITY TOTAL RUN TIME SETPOINT
Protocol Manual
ANALOG OUTPUTS
I/O
823 RELAY51 AMBIENT SETPOINT VALUE AMBIENT LOOKBACK FEATURE SETPOINT
835 LTC HI-ALARM DIFFERENTIAL SETPOINT VALUE DIFFERENTIAL SETPOINT VALUE FOR HI-ALARM
836 LTC HI-ALARM DIFFERENTIAL HYSTERSIS VALUE DIFFERENTIAL HYSTERESIS VALUE FOR HI-ALARM
837 LTC LO-ALARM DIFFERENTIAL SETPOINT VALUE DIFFERENTIAL SETPOINT VALUE FOR LO-ALARM
838 LTC LO-ALARM DIFFERENTIAL HYSTERSIS VALUE DIFFERENTIAL HYSTERESIS VALUE FOR LO-ALARM
839 LTC HI-ALARM MOTOR RUN TIME SETPOINT MOTOR RUN TIME SETPOINT FOR HI-ALARM
840 LTC LO-ALARM MOTOR RUN TIME SETPOINT MOTOR RUN TIME SETPOINT FOR LO-ALARM
INTEGRATED TOTALS
I/O
TRANSLIFE 1; TRANSFORMER LIFE
1000 CONSUMPTION TOTAL LIFE CONSUMPTION CALCULATED; TRANSLIFE 1
1003 TOTAL TRANSFORMER OPERATING HOURS CUMULATIVE TRANSFORMER OPERATING HOURS
1012 LTC HI-ALARM TOTAL TAP COUNT SETPOINT LTC HIGH-PRIORITY TOTAL TAP COUNT SETPOINT
1013 LTC LO-ALARM TOTAL TAP COUNT SETPOINT LTC LOW-PRIORITY TOTAL TAP COUNT SETPOINT
1014 LTC HI-ALARM TOTAL RUN TIME SETPOINT LTC HIGH-PRIORITY TOTAL RUN TIME SETPOINT
Protocol Manual
INTEGRATED TOTALS
I/O
1015 LTC LO-ALARM TOTAL RUN TIME SETPOINT LTC LOW-PRIORITY TOTAL RUN TIME SETPOINT
1016 LTC HI-ALARM MOTOR ACTUATION SETPOINT LTC HIGH-PRIORITY MOTOR ACTUATION COUNT SETPOINT
1017 LTC LO-ALARM MOTOR ACTUATION SETPOINT LTC LOW-PRIORITY MOTOR ACTUATION COUNT SETPOINT
Protocol Manual
IEC 61850 COMMUNICATIONS

Introduction
IEC 61850 is an Ethernet protocol therefore to function properly the 509ITM must have the Ethernet
option installed on the device. Once verifying that the Ethernet is installed then the communication
port must be configured through the ITM Manager Software Suite. Start the software and enter the
Customer-Setup section. In the Customer-Setup click on the Communications button and see the
following window.
Protocol Manual
Select the Ethernet tab and enter the IP Address, Subnet Mask and the Gateway addresses.
Protocol Manual
Click on the IEC 61850 tab to see the following window.
Protocol Manual
Enter the passwords if required. To configure the client for IEC 61850 reference the following
documents:
IST-100-2 509ITM Model Implementation Conformance Statement
IST-100-3 509ITM Protocol Implementation Conformance Statement
IST-100-4 509ITM Protocol Implementation eXtra Information for Testing
IST-100-5 509ITM TISSUES Implementation Conformance Statement
IST-100-6 509ITM Devices Organization
Protocol Manual
QUALITROL® Field Services

QUALITROL® provides on-site commissioning/ start-up and comprehensive maintenance contracts to all customers
worldwide. To further improve reliability, an extended warranty is available on selected products commissioned by
QUALITROL®.
QUALITROL® Educational Services
®
QUALITROL professional training (designed to achieve hands-on performance based objectives) prepares operations,
maintenance, and engineering personnel to install, test, configure, operate and maintain QUALITROL® products.
QUALITROL® Accelerated Delivery
®
QUALITROL provides accelerated delivery on many products and services including replacements, spare parts and
repairs.
About Qualitrol:
Qualitrol manufactures substation and transformer monitoring and protection devices used by electric utilities and
manufacturing companies. It is the global leader in sales and installations of transformer asset protection equipment, fault
recorders and fault locators. Established in 1945, Qualitrol produces thousands of different types of products on demand,
each customized to customers' unique requirements.
©2008 QUALITROL Company LLC, an ISO 9001 system certified company. All rights reserved. Information subject to change without notice.
®
All trademarks are properties of their respective companies, as noted herein. IST-099-1.

IST-100-1 PROTOCOL MANUAL Rev-28871

Uploaded by

Copyright:

Available Formats

You might also like

IST-100-1 PROTOCOL MANUAL Rev-28871

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

IST-100-1 PROTOCOL MANUAL Rev-28871

Uploaded by

Copyright:

Available Formats

QUALITROL 509ITM Series

QUALITROL 509ITM Series

Intelligent Transformer Monitor

Analog Parameters .......................................................................................................... 63

DNP 3.0 Communications

DNP V3.0 Device Profile

Transmitted: 292 Transmitted: Configurable up to 2048

Data Link Confirm:  None  Fixed at ____  Variable  Configurable.

Others: Transmission Delay, configurable

Sends/Executes Control Operations:

WRITE Binary Outputs  Never  Always  Sometimes  Configurable

Count > 1  Never  Always  Sometimes  Configurable

Queue  Never  Always  Sometimes  Configurable

Attach explanation if 'Sometimes' or 'Configurable' was checked for any operation.

 No Counters Reported  No Counters Reported

Sequential File Transfer Support:

Append File Mode  Yes No

DNP V3.0 Implementation Table

7 (freeze) 00, 01 (start-stop)

2 (write) 07 (limited qty = 1)

50 3 Time and Date Last Recorded Time 2 07 (limited qty)

51 1 Time and Date CTO 129 (response) 07 (limited qty)

52 1 Time Delay Coarse 129 (response) 07 (limited qty)

20 (enbl. unsol.) 06 (no range, or all)

70 2 File Authentication 29 5b (free-format) 129 (response) 5B (free-format)

70 3 File Command 25 5b (free-format)

70 6 File Transfer Status 129 (response) 5B (free-format)

86 0 Data Set Descriptor 22 (assign class) 00, 01 (start-stop)

87 0 Data Set – Present Value 1 00, 01 (start-stop)

88 0 Data Set Event 1 06 (no range, or all)

91 1 Activate Status 129 (response) 07 (limited qty)

DNP V3.0 Point List

Binary Input Points

BINARY INPUT; OBJ 1; VAR 0, 1, 2

BINARY INPUT; OBJ 1; VAR 0, 1, 2

BINARY INPUT; OBJ 1; VAR 0, 1, 2

Binary Output Status Points

BINARY OUTPUT; OBJ 10; VAR 0, 1, 2

BINARY COUNTER; OBJ 20; VAR 0, 1, 2, 3, 4, 5, 6

ANALOG INPUT; OBJ 30; VAR 0, 1, 2, 3, 4, 5, 6

ANALOG INPUT; OBJ 30; VAR 0, 1, 2, 3, 4, 5, 6

ANALOG INPUT; OBJ 30; VAR 0, 1, 2, 3, 4, 5, 6

ANALOG INPUT; OBJ 30; VAR 0, 1, 2, 3, 4, 5, 6

ANALOG INPUT; OBJ 30; VAR 0, 1, 2, 3, 4, 5, 6

ANALOG INPUT; OBJ 30; VAR 0, 1, 2, 3, 4, 5, 6

ANALOG INPUT; OBJ 30; VAR 0, 1, 2, 3, 4, 5, 6

ANALOG INPUT; OBJ 30; VAR 0, 1, 2, 3, 4, 5, 6

ANALOG INPUT; OBJ 30; VAR 0, 1, 2, 3, 4, 5, 6

ANALOG INPUT; OBJ 30; VAR 0, 1, 2, 3, 4, 5, 6

ANALOG INPUT; OBJ 30; VAR 0, 1, 2, 3, 4, 5, 6

ANALOG INPUT; OBJ 30; VAR 0, 1, 2, 3, 4, 5, 6

Analog Output Status Points

ANALOG OUTPUT; OBJ 40; VAR 0, 1, 2, 3, 4

ANALOG OUTPUT; OBJ 40; VAR 0, 1, 2, 3, 4

ANALOG OUTPUT; OBJ 40; VAR 0, 1, 2, 3, 4

ANALOG OUTPUT; OBJ 40; VAR 0, 1, 2, 3, 4

OCTET STRING; OBJ 110; VAR STRING LENGTH

Time and Date

Function Codes Supported