Mounting instruction Gateway M-Bus Master AMB8466-M-GMM Release 1.2

Transcription

1 Mounting instruction Gateway M-Bus Master AMB8466-M-GMM Release 1.2 Overview The user interface of the AMB8466-M-GMM consists of 3 LEDs, a push-button and 2 rotary encoder switches. The push-button is reachable through a small aperture in the front panel with the help of a fitting, sharp object. The rotary encoder switches are located behind the lower cover (detachable) near the power supply terminals and are used for the adjustment of operating parameters. Figure 1 Front panel Connection The term master refers to the function of the device on the M-Bus. As the M-Bus master it allows the wire-based query of the attached M-Bus devices ( slaves ). After unpacking and installing the device, the M-bus signals have to be connected to the given terminals (1, 2 or 3, 4 or 5, 6) first. According to the specification the polarity can be neglected. The terminals 1, 3, 5 and 2, 4, 6 are internally connected. The energy is taken by a power supply with a voltage range of 12 V 24 V DC which is has to be connected to the appropriately marked screw terminals. Ensure correct polarity when connecting the supply voltage! After applying the supply voltage, a LED-self-test is performed. During this procedure all LEDs light up once in the order Power Data Error. Afterwards the device enters standard operating mode (green power LED switched on permanently). Start-up After start-up the device first sends SND_NKE-telegrams at speeds of 300, 2400 and 9600 baud via M-Bus in order to reset all attached meters. As long as no meters are registered, the gateway periodically sends radio telegrams containing its own ID via wireless M-Bus (wm-bus). Configuration without special tools In order to register meters in the gateway a wildcard search can be initiated. For this purpose, the left rotary switch has to be set in position 1 first. Afterwards, the transmission speeds used Mounting instruction AMB8466-M-GMM Page 1 of 11 Date: 12/18/2013

2 during the search procedure have to be selected using the right rotary switch. The following table shows the valid settings. Position of left/right rotary switch Transmission speed(s) used during wildcard search [baud] 1/ / /3 9600; / /5 9600; 300 1/6 2400; 300 1/7 9600; 2400; 300 Table 1 M-Bus speed(s) during wildcard search As the last step, the button behind the front panel has to be pushed briefly (< 5 s). The yellow LED flashes, the wildcard search is now active. The duration of the wildcard search depends on the number of connected devices and on the transmission speed of the devices. By pressing the button a second time the search can be canceled. After the search is completed the green power LED flashes 3 times. Afterwards the device reboots. From now on, the registered meters are read out by the master in between it's own emissions and the data is send via radio. The wm-bus transmission mode at delivery state is S mode. To set up the transmission mode the rotary switches have to be set to position 2/0 first. After pressing the button behind the front panel the yellow LED begins to flash. Now the transmission mode can be configured again using the rotary switches according to the following table. Position of left/right rotary switch Mode Frequency [MHz] 0/0 S 868,3 0/1 T 868,95 Table 2 wm-bus Transmission mode After setting the transmission mode the button behind the front panel has to be pressed again. If the configuration is valid, the green power LED flashes 3 times. Else the red error LED flashes 3 times. The device reboots. The transmission delay between each emitted radio telegram is 10 s. With respect to one single meter, this leads to the following formula or Example: t TX = 10 s + (number of the registered meters * 10 s) t TX = 10 s * (number of the registered meters + 1) If 5 meters are registered, every 60 s the same meter is queried and a radio telegram is emitted. The transmission interval can be adjusted using the rotary switches. For this purposes they have to be set to position 3/0 first. After briefly (< 5 s) pressing the button behind the front panel AMB8466-M-GMM_MI_EN_1_2.doc Page 2 of 11 Date: 12/18/2013

3 the yellow LED begins to flash. Now an additional multiplier can be configured by means of the rotary switches: t TX = (10s * Multiplier) * (number of the registered meters + 1) whereas the factor calculates as following: Multiplier = Pos. left rotary switch * 16 + pos. right rotary switch (hexadecimal coding, A = 10, B = 11, F = 15). Valid settings are 0/1 (= 1) to F/F (= 255). Example: If 5 meters are registered and assuming a switch position A/F (10 * = 175), every s the same meter is queried and a radio telegram is emitted. After setting the multiplier the button behind the front panel has to be pressed again. If the value is valid the green power LED flashes 3 times, if not the red error LED flashes 3 times. The device reboots. The default AES Key is 0x a0b0c0d0e0f. Configuration using PC Software and AMB8465-M USB stick The configuration of the AMB8466-M-GMM with the help of the appropriate PC-Software is described in a separate manual. Additional functions Using the rotary switches additional functions can be activated. These functions can be combined in a bit wise manner and become active without a reboot while operating. If no additional function is needed, position 0/0 has to be used. Position of left/right Function rotary switch 0/0 Normal operation 0/1 Sending Installation telegrams after a reboot (according to OMS specification) 0/2 Reserved 0/4 Reserved 0/8 Reserved 1/0 Reserved 2/0 Reserved 4/0 Reserved 8/0 Reserved Table 2 Additional functions Factory reset In order to perform a factory reset the rotary switches have to be set to position F/F. Afterwards the button behind the front panel has to be pressed until all 3 LEDs begin to flash AMB8466-M-GMM_MI_EN_1_2.doc Page 3 of 11 Date: 12/18/2013

4 simultaneously. As soon as the button is released all settings are re-set to factory defaults. The device will then perform a reboot. After this operation the device has to be configured again. Firmware update To do a Firmware update, the button behind the front panel has to be pressed during the device s self-test phase (LED self test after re-boot) until the green power LED and the red error LED are flashing simultaneously. After releasing the button the green and red LED will start to flash alternating. From this point the device tries to establish a connection to the remote station (AMB8465-M, PC und appropriate software). If the device doesn t find a remote station it changes to normal mode after about 10 seconds. Telegram description The telegrams which where send by the AMB8466-M-GMM via wm-bus have the same structure: Link Layer (LLA) Application Layer (ALA) Data... Link Layer (LLA) L- Field C- Field M-Field ID Ver sion Dev. Type Name Size Description [Byte] L-Field 1 Length of the telegram C-Field 1 Control field (telegram type) M-Field 2 Manufacturer ID ID 4 Identification number Version 1 Version Dev.Type 1 Device type The data for the identification of the AMB8466-M-GMM are the same for all devices except for the ID. The M-Field shows the Manufacturer ID of AMBER wireless GmbH (AMB -> 0x05A2). The ID consists of the Prefix of the device (53) and 6 more numbers which are the same as the serial number of the device. The version depends on the FW version which is used by the device. The device type is 0x37 for all devices ( Radio Converter Meter side ). M-Field, ID, Version, Dev.Type are the same for all wm-bus Telegrams and they all contain the address of the AMB8466-M-GMM. Application Layer (ALA) CI- Field ID M-Field Ver sion Dev. Type Acc. No. Stat. Config. Word AMB8466-M-GMM_MI_EN_1_2.doc Page 4 of 11 Date: 12/18/2013

5 Name Size Description [Byte] CI-Field 1 Control information field ID 4 Identification number M-Field 2 Manufacturer ID Version 1 Version Dev.Type 1 Device type ACC.No. 1 Access code Stat. 1 Status Config.Word 2 Configuration word The Control information for every telegram is 0x72 ( Response from Device ). ID, M-Field, Version, Dev.Type contain the data of the meter whose data are transmitted in the radio telegram. If the data originates from the AMB8466-M-GMM itself, the same information as in the Link Layer is used. The access number is increased by 1 with each transmission of the own (AMB8466-M-GMM) telegram in order to allow for the synchronous transmission mode. This is the reason why all telegrams within one transmission cycle have the same access number. The status is taken from the meter. The status of the own telegram is always 0x00. The Configuration word always contains the encryption mode 5 (OMS) and the number of encrypted blocks. Data Data... The data placed in this block is taken from the read out meter or from the AMB8466-M-GMM itself. The data of the meter can t be generally described. However, the first two bytes are always 0x2F (Idle Filler) as specified in the OMS specification. Example for a telegram of a meter Data of the AMB8466-M-GMM: Manufacturer: AMBER wireless GmbH (AMB 0x05A2) ID: Version: 1 Device type: 0x37 Radio Converter Meter side Data of the connected meter: Manufacturer: Sensus Metering Systems (INV 0x25D6) ID: Version: 64 Device type: 0x07 Water AMB8466-M-GMM_MI_EN_1_2.doc Page 5 of 11 Date: 12/18/2013

6 Encrypted: A D F 1B 29 E3 74 FF C0 AF A0 8B 2A F0 23 Decrypted: A D F 2F 0C E Listed: Length information: Control field: Manufacturer: Byte 44 SND-NR: No response expected A2 05 AMB: AMBER wireless GmbH ID: Version: 01 1 Device type: Control information field: 37 Radio Converter Meter side 72 Response From Device 12 Byte Header ID: Manufacturer: Version: Device type: D6 25 INV Sensus Metering Systems 07 Water Access code: 07 7 Status: Configuration word: Idle Filler: Idle Filler: DIF: VIF: 00 0: No errors pending Enc. Mode 5; 1 encrypted block 2F AES Verification 2F AES Verification 0C 8Digit BCD 78 Fabrication Number Data: DIF: VIF: Data: 0E 12Digit BCD 12 Volume * 10^(-4)m³ ,5440m³ The telegrams of the AMB8466-M-GMM are followed after the Idle Filler by a data record which contains the own address. This Data record is structured as follows: DIV 0x07 VIF 0x7A ID M-Field Ver sion Dev. Type If the M-Bus meters which are connected to theamb8466-m-gmm are registered, then there will be more data records. AMB8466-M-GMM_MI_EN_1_2.doc Page 6 of 11 Date: 12/18/2013

7 The first Data record contains the identification data of all meters. This data record uses the Compact Profile. DIF 0x4D VIF 0xFA VIFE 0x1F LV AR SpCtl 0x07 SpVal 0x00 Address(es)... The DIF describes a data record with variable length and the memory location 1. The VIF describes the transmitted data. The VIF shows the address and refers to a VIF extension. This extension (VIFE) shows that this is a Compact Profile. The LVAR-Byte is depending on the number of registered meters. It is calculated as follows: LVAR = number of registered meters * The Spacing Control Byte indicates that within this data 64Bit always (compare DIF 0x07 64Bit Integer) will result an own record. The Spacing Value is 0 because the addresses do not have any differences at the acquisition time. Afterwards, the addresses of the registered meters will follow according to the following format:: ID M-Field Ver sion Dev. Type After the transmission of the identification data of the meters the used M-Bus transmission rates are transmitted. These are also coded using a Compact profile. DIF 0x4D VIF 0xFD VIFE 0x9C VIFE 0x1F LV AR SpCtl 0x02 SpVal 0x00 Speed(s) The DIF describes a data record with variable length and the memory location 1. The VIF describes that the actual VIF can be found at the next byte from the second extension table. This means the actual VIF it is a baud rate. The VIFE 0x1F is the information that the data is transferred in a Compact Profile. The LVAR Byte is depending on the number of the registered meters. It is calculated as follows: LVAR = number of registered meters * The Spacing Control Byte shows that in between the data always 16Bit (compare DIF 0x02 16Bit Integer) would create an own record. The Spacing Value is 0 because the addresses do not have any differences at the acquisition time. After that the transmission speed of the registered meters follows. Example for an own telegram: Data to AMB8466-M-GMM: Manufacturer: AMBER wireless GmbH (AMB 0x05A2) ID: Version: 1 Device type: 0x37 Radio Converter Meter side AMB8466-M-GMM_MI_EN_1_2.doc Page 7 of 11 Date: 12/18/2013

8 Data to the connected meter: Manufacturer: Relay GmbH (REL 0x48AC) ID: Version: 9 Device type: 0x07 Water M-Bus Transmission speed: 9600 Baud Encrypted: A A E1 EF 0D 1E F9 EF FC 49 4C 9A A BF 1E DF 5F 8A B0 EF B 2D D AA 65 FC 6C 69 B CF BA A3 3A A6 0C 3E Decrypted: A A F 2F 07 7A A D FA 1F 0A AC D FD 9C 1F F 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F Listed: Length information: Control field: Manufacturer: Byte 44 SND-NR: No response requested. A2 05 AMB: AMBER wireless GmbH ID: Version: 01 1 Device type: Control information field: 37 Radio Converter Meter side 72 Response From Device 12 Byte Header ID: Manufacturer: Version: 01 1 Device type: Access code: 01 1 Status: Configuration word: Idle Filler: Idle Filler: A2 05 AMB: AMBER wireless GmbH 37 Radio Converter Meter side 00 0: No errors pending Enc. Mode 5; 3 encrypted blocks 2F AES Verification 2F AES Verification Own ID: 07 7A A Registered Meter: 4D FA 1F 0A AC Transmission Speed : 4D FD 9C 1F Additional Idle Filler: 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F AMB8466-M-GMM_MI_EN_1_2.doc Page 8 of 11 Date: 12/18/2013

9 The actual Data records: Own ID: DIF: Bit Integer VIF: 7A Address Data: A Manufacturer AMB;ID ;Version 1;Device type 37 Registered Meter: DIF: 4D Variable Length; Memory location 1 VIF: VIFE: LVAR: Sp.Ctl.: Sp.Val.: Address: type 7 Transmission Speed: DIF: VIF: VIFE: VIFE: LVAR: SP.Ctl.: Sp.Val.: Baud rate: FA Address; Expansion of the VIF 1F Compact profile 0A 10 Byte Bit Integer 00 0 Seconds AC Manufacturer REL;ID ;Version 9;Device 4D Variable Length; Memory location FD Second Expansion table 9C Baud rate; Expansion of the VIFE 1F Compact profile 04 4 Byte Bit Integer 00 0 Seconds x2580: 9600 Baud Encryption The key for the AES128 Encryption which is set when the device is delivered is: (hex) A 0B 0C 0D 0E 0F If meters are registered via wildcard search in AMB8466-M-GMM, each of them will use the key of the AMB8466-M-GMM. This key can be set for each meter with the help of the configuration software. AMB8466-M-GMM_MI_EN_1_2.doc Page 9 of 11 Date: 12/18/2013

10 Overview LED Display Status Description All LEDs out Interruption of the energy supply All LEDs flash one time in a row The device is in start phase ( LED-self-check/test ) Green LED on Normal mode Green LED on Yellow LED flashest Yellow LED flashes Green LED on Data transfer (Radio / M-Bus) Configuration active. Set value depending on the selected parameters and then confirm again with the button. Short circuit at the M-Bus Red LED flashes All LED s flash at the same time Key pressed When the button is released now, the device performs a factory reset. AMB8466-M-GMM_MI_EN_1_2.doc Page 10 of 11 Date: 12/18/2013

11 Important information Disclaimer AMBER wireless GmbH believes the information contained herein is correct and accurate at the time of this printing. However, AMBER wireless GmbH reserves the right to change the technical specifications or functions of its products, or to discontinue the manufacture of any of its products or to discontinue the support of any of its products, without any written announcement and urges its customers to ensure, that the information at their disposal is valid. AMBER wireless GmbH does not assume any responsibility for the use of the described products, neither does it convey any license under its patent rights, or its other intellectual property rights, or any third party rights. It is the customer's responsibility to ensure that his system or his device, in which AMBER wireless products are integrated, complies with all applicable regulations. Trademarks AMBER wireless is a registered trademark owned by AMBER wireless GmbH. All other trademarks, registered trademarks and product names are the sole property of their respective owners. Limitation of use AMBER wireless products are not authorized for use in life support appliances, devices, or other systems where malfunction can reasonably be expected to result in significant personal injury to the user, or as a critical component in any life support device or system whose failure to perform can be reasonably expected to cause the failure of the life support device or system, or to affect its safety or effectiveness. AMBER wireless GmbH customers using or selling these products for use in such applications do so at their own risk and agree to fully indemnify AMBER wireless GmbH for any damages resulting from any improper use or sale. Use of AMBER wireless products commits the user to the terms and conditions set out herein. Copyright 2012, AMBER wireless GmbH. All rights reserved. AMBER wireless GmbH Albin-Köbis-Straße Köln / Germany Tel info@amber-wireless.de Internet AMB8466-M-GMM_MI_EN_1_2.doc Page 11 of 11 Date: 12/18/2013