Reading Selec, Schneider & Eastron Power Meters via Modbus RS485 to MQTT/SCADA (Register Map Guide)

In real-world mechanical & electrical (M&E) contracting, Energy Service Company (ESCO) audits, and factory digitalization projects across Vietnam and Southeast Asia, almost no manufacturing facility uses 100% identical power meter models across every switchboard. The Main Switchboard (MSB) in the substation room is typically equipped with high-end Schneider Electric (PM5110, PM5350, PM2220) panel meters installed during initial plant construction; sub-distribution boards (DBs) added during workshop expansions frequently use Selec MFM384 / MFM384-C meters; meanwhile, rooftop solar tie-in panels or individual machine feeders often utilize DIN-rail mounted Eastron SDM630MCT or Chint DTSU666 meters.

Although every manufacturer's datasheet states "Supports RS485 Modbus RTU Communication," when a System Integrator (SI) or MES software engineer arrives on site with a generic serial converter, commissioning routinely stalls for days due to 4 critical hardware and protocol pitfalls:

• UART Framing & Parity Mismatch Traps (11-bit vs. 10-bit Character Frames): European manufacturers like Schneider Electric strictly enforce the official Modbus.org serial specification, which mandates an 11-bit RTU character frame: 1 Start bit + 8 Data bits + 1 Even Parity bit + 1 Stop bit (8-E-1, factory default baudrate 19200 bps). Conversely, Selec and Chint ship with factory defaults of 9600 bps, 8-N-1 (only 10 bits per character, no parity bit). Wiring these meters onto the same physical twisted pair without unifying their UART parameters via the front-panel menu causes continuous framing collisions and bus lockups.
• 1-Based Documentation vs. 0-Based Wire PDU Offset Traps: Schneider's register map tables document Phase A Current at register 3000 (corresponding to Holding Register 43000), but on the physical RS485 wire your Master device must transmit start address 2999 (0x0BB7). By contrast, Chint DTSU666 manuals list hexadecimal 0-based PDU offsets directly (such as 0x2000)—so subtracting 1 on a Chint meter shifts your read window into the wrong register!
• IEEE 754 32-Bit Floating-Point (Float32) Byte/Word Endianness Traps: The original Modbus specification only defined 16-bit (2-byte) registers and never standardized how two consecutive 16-bit registers should be combined into a 32-bit floating-point number. Consequently, each manufacturer implements its own word ordering (Big-Endian ABCD vs. Word-Swapped CDAB), causing unconfigured SCADA/PLC software to display wild exponential garbage or negative numbers.
• High-Current Contactor Switching Transients & VFD IGBT Harmonics (EMI): Factory main distribution panels carry thousands of Amperes, heavy magnetic contactors switching inductive motor loads, and Variable Frequency Drives (VFDs) generating high-frequency IGBT common-mode noise. Low-cost, non-isolated RS485-to-Ethernet converters suffer permanent UART transceiver latch-up or blown silicon within hours of installation.

To guarantee 24/7 uninterrupted energy submetering over a 5-to-10-year industrial lifecycle without disrupting the factory's corporate IT firewall or losing kWh billing logs during internet blackouts, the hardware architecture must be engineered into 3 isolated tiers as illustrated below:

Before landing twisted-pair signal wires onto the meter terminals, field engineers must verify the exact RS485 terminal numbering and unify the three mandatory serial parameters—Slave ID, Baudrate, and Parity—via the front-panel pushbuttons on every meter:

3.1. Selec MFM384 / MFM384-C Multifunction Meter (India)

• Rear Terminal Block RS485 Pinout: Terminal 13 is RS485 (+) / A, and Terminal 14 is RS485 (-) / B (on certain newer hardware revisions of the MFM384-C, always inspect the laser-etched wiring diagram on the side enclosure label to confirm the exact + / - terminal pair).
• Entering the Front-Panel Communication Configuration Menu: Press and hold the V / Esc key or the Enter + Down key combination for 3 seconds to enter Configuration Mode (the default factory password is 1000 or 0010):
  • Slave ID (Address): Set a unique integer from 1 to 247 (never duplicate an ID on the same RS485 trunk).
  • Baudrate: Select 9600 bps (recommended for cable runs exceeding 100 meters) or 19200 bps.
  • Parity & Stop Bits: Select None (8-N-1) or Even (8-E-1) (must match every other meter sharing the same RS485 port).
• Critical Engineering Note on Current Transformer (CT) Ratios on Selec MFM384: On standard MFM384 firmware, the current, power, and kWh values returned via Modbus registers are already multiplied internally by the CT Primary / CT Secondary ratio programmed on the meter's LCD menu. If a panel technician leaves CT Primary = 5A on the LCD instead of configuring the actual 400/5A CT ratio, all Modbus kWh telemetry will be under-reported by a factor of 80!

3.2. Schneider Electric PowerLogic PM2120 / PM2220 / PM5110 / PM5350

• Rear Terminal Block RS485 Pinout:
  • On PM2120 / PM2220 models: Terminal D1 (+) connects to RS485 A (+); Terminal D0 (-) connects to RS485 B (-); Terminal C / Common connects to the isolated 0V signal reference / shield drain.
  • On PM5110 / PM5350 models: Terminal D1 / + connects to RS485 A (+); Terminal D0 / - connects to RS485 B (-); Terminal S / Shield connects to the cable shield drain wire.
• Navigating the Communication Setup Menu on PM2220 / PM5350: Press Maint → Setup (Default Password: 0000) → Comm:
  • Addr (Slave Address): Set between 1 and 247.
  • Baud (Baudrate): Factory default is 19200 bps (change to 9600 bps if daisy-chained with mixed third-party meters on a long cable run).
  • Parity: Factory default is Even (8-E-1). If the RS485 trunk is shared with legacy devices that only support 8-N-1, change this parameter on the Schneider meter to None and verify that Stop Bits match the Gateway Master port settings.

3.3. DIN-Rail Power Meters: Eastron SDM630MCT & Chint DTSU666

• On Eastron SDM630MCT / SDM630-Modbus V2: Signal terminals B (-), A (+), and G (GND) are located on the lower pluggable terminal strip. Press and hold the Set button for 3 seconds (default password: 1000) to configure Addr (001–247), bd (2.4 / 4.8 / 9.6 / 19.2 / 38.4 kbps), and Prty (None / Even / Odd).
• On Chint DTSU666 (3-Phase 4-Wire DIN-Rail Meter): Terminal 24 is RS485 A (+) and Terminal 25 is RS485 B (-). Press the SET key and enter code 701 to access the communication menu: set protocol framing (Prot = n.1 for 8-N-1, or Prot = E.1 for 8-E-1) and baudrate (bAud = 9600).

The reference matrix below compiles the exact real-time measurement and cumulative energy register addresses verified by DeviceLab's R&D hardware team across hundreds of live industrial switchboards. Note that the 0-Based Wire PDU Address column shows the exact integer or hexadecimal offset that must be entered into your IoT Gateway or PLC Modbus Master configuration:

To help embedded firmware developers, PLC programmers, and MES/SCADA backend engineers inspect raw bit/byte traffic on the RS485 bus, let us examine a real hexadecimal capture polling Total Active Power (P_Total) from a Schneider Electric PM2220 meter (Slave ID = 1) at documented register 3060 (which translates to 0-based PDU address 3059 = 0x0BF3, reading 2 consecutive 16-bit registers using Function Code 0x03):

// 1. Master Request Frame sent from Gateway DL-GW200 to Schneider PM2220 (8 Hex Bytes):
// [SlaveID] [FuncCode] [StartAddr_Hi] [StartAddr_Lo] [Qty_Hi] [Qty_Lo] [CRC_Lo] [CRC_Hi]
   01        03         0B             F3             00       02       36       2E

// 2. Slave Response Frame returned by Schneider PM2220 (9 Hex Bytes):
// [SlaveID] [FuncCode] [ByteCount] [Reg1_Hi] [Reg1_Lo] [Reg2_Hi] [Reg2_Lo] [CRC_Lo] [CRC_Hi]
   01        03         04          42        F6        E6        66        B9       84

// 3. Decoding the 4 payload bytes [42 F6 E6 66] as an IEEE 754 Float32 value:
// - For Schneider / Eastron (Big-Endian ABCD): Concatenate directly as 0x42F6E666 = 123.45 kW
// - For Selec MFM384 (Word-Swapped CDAB): The two 16-bit registers arrive as [E6 66] first, [42 F6] second.
//   You must swap the two 16-bit Words back into [42 F6 E6 66] before casting to IEEE 754 Float32.

Below is a production-ready reference implementation in Python (for SCADA/MQTT backend engineers) and C (for embedded MCU/PLC programmers) that cleanly decodes all four IEEE 754 Float32 byte/word permutations (ABCD, CDAB, BADC, DCBA):

import struct

def decode_modbus_float32(reg_hi_16: int, reg_lo_16: int, byte_order: str = "ABCD") -> float:
    """
    Decodes two consecutive 16-bit Modbus registers into an IEEE 754 Float32 engineering value.
    - Schneider PM2xxx/PM5xxx, Eastron SDM630, Chint DTSU666: byte_order = 'ABCD'
    - Selec MFM384 / MFM384-C: byte_order = 'CDAB'
    """
    a = (reg_hi_16 >> 8) & 0xFF
    b = reg_hi_16 & 0xFF
    c = (reg_lo_16 >> 8) & 0xFF
    d = reg_lo_16 & 0xFF

    order_map = {
        "ABCD": bytes([a, b, c, d]),  # Big-Endian (High Word first - Schneider, Eastron)
        "CDAB": bytes([c, d, a, b]),  # Word-Swapped (Low Word first - Selec MFM384)
        "BADC": bytes([b, a, d, c]),  # Byte-Swapped within Words
        "DCBA": bytes([d, c, b, a]),  # Full Little-Endian
    }
    raw_bytes = order_map.get(byte_order.upper(), bytes([a, b, c, d]))
    return round(struct.unpack(">f", raw_bytes)[0], 3)

# Verification with register pair 0x42F6 and 0xE666:
print(decode_modbus_float32(0x42F6, 0xE666, "ABCD"))  # Output: 123.45 (kW)

When bench-testing 1 or 2 power meters on an office desk with a 1-meter patch cord, almost any USB-to-RS485 dongle works. However, when pulling 300 meters of cable across 3–4 MSB/DB switchboards inside an operating factory with 15–25 daisy-chained meters, engineers frequently encounter intermittent timeouts on the farthest meters, or complete RS485 bus lockup every time a large air compressor or VFD ramps up. The root causes lie in three physical layer mechanisms:

6.1. Common-Mode Voltage Shift Exceeding the -7V to +12V Transceiver Window

An MSB switchboard inside the transformer substation room and a sub-distribution panel (DB) located 150 meters away on the production floor always exhibit a Ground Potential Difference (GPD) ranging from several Volts to puluhan Volts during earth-leakage events or heavy inductive switching transients. Standard RS485 transceiver ICs can only tolerate a common-mode voltage range of -7V to +12V. If you use a non-isolated RS485 converter, ground-equalizing currents flow directly through the A/B signal conductors, saturating the differential input stage, corrupting CRC checksums, or permanently burning out the transceiver chip. The mandatory engineering cure is deploying an Edge Gateway equipped with independent 3.0kVrms galvanic optical isolation on every RS485 port combined with grounding the cable metallic shield at a single point only at the Gateway cabinet.

6.2. Signal Reflections Caused by Star/Tree Wiring and Missing 120Ω Termination Resistors

Many electrical installation crews accustomed to pulling 220VAC lighting circuits inadvertently wire RS485 communication cables using T-junction splices (Star or Tree topology) from a central junction box down to individual meters. At digital transition speeds (nanosecond rise times), every T-branch creates a severe impedance discontinuity that causes square-wave edges to reflect back andforth along the stub, superimposing ringing noise onto subsequent data bits. To guarantee clean eye-diagrams on the bus:

• Always route the RS485 cable continuously in-and-out from Meter 1 to Meter 2 to Meter 3 (true linear Daisy-Chain). At each meter's A+ and B- screw terminals, crimp both the incoming and outgoing conductors together into a single insulated twin-ferrule (bootlace pin terminal) so the bus remains unbroken even if a terminal screw is loosened.
• Switch the onboard 120Ω Termination DIP switch = ON at the Gateway RS485 port (the beginning of the trunk) and install a 120Ω / 0.5W metal-film resistor across the A+ and B- terminals of the very last power meter at the far end of the cable run.

6.3. Frame Collisions Caused by Slave Transceiver Turnaround Delay

Microcontroller-based power meters such as the Selec MFM384 require approximately 5ms to 15ms after transmitting their final CRC byte to switch the RS485 transceiver's DE/RE direction pin from Transmit mode back to Receive mode. If the Master Gateway fires the next Modbus poll command immediately (with an inter-frame delay under 2ms), the leading bytes of the new request collide with the previous slave's decaying driver state, causing cascading timeouts. On DeviceLab's DL-GW200 Edge Gateway, the Inter-Frame Turnaround Delay is pre-tuned to 20ms–50ms and paired with a Contiguous Block-Read Engine (fetching up to 40 registers in a single Modbus transaction), allowing the gateway to poll 20 power meters completely in under 1.5 seconds with zero packet loss.

When preparing technical proposals and Bills of Materials (BOM) for factory EMS/BMS or Scope 2 carbon accounting projects, M&E contractors, System Integrators, and software vendors can evaluate the 3 primary hardware architectures below:

When deploying the industrial DL-GW200 or DL-GW400 Edge Gateway, raw Modbus registers polled from mixed Selec, Schneider, Eastron, and Chint meters are automatically converted into a unified MQTT JSON schema (including a buffered boolean flag that lets your cloud ingestion pipeline distinguish real-time telemetry from Store-and-Forward historical backfill packets):

{
  "gateway_id": "DL-GW200-MSB01",
  "site_code": "FACTORY_B2B_PARTNER_01",
  "timestamp": "2026-10-18T14:30:00Z",
  "buffered": false,
  "meters": [
    {
      "slave_id": 1,
      "model": "Schneider_PM2220",
      "feeder_name": "Substation_1250kVA_Main_MSB",
      "status": "ONLINE",
      "v_l1_n": 231.2,
      "v_l2_n": 230.8,
      "v_l3_n": 231.5,
      "v_ll_avg": 400.4,
      "i_l1": 842.5,
      "i_l2": 838.0,
      "i_l3": 845.2,
      "p_total_kw": 546.8,
      "q_total_kvar": 142.3,
      "pf_total": 0.968,
      "freq_hz": 50.02,
      "active_energy_kwh": 1489250.4
    },
    {
      "slave_id": 2,
      "model": "Selec_MFM384",
      "feeder_name": "DB_Air_Compressor_Station",
      "status": "ONLINE",
      "v_ll_avg": 398.9,
      "i_avg": 164.2,
      "p_total_kw": 102.4,
      "pf_total": 0.912,
      "active_energy_kwh": 328410.8
    }
  ]
}

6-Point Switchboard Site Survey Checklist for SI & ESCO Engineers:

1. Photograph the front bezel and side part-number label of every existing panel meter: Verify whether each meter actually includes an onboard RS485 transceiver (for example, the Selec MFM384-C includes RS485 Modbus, whereas the base MFM384 non-C variant may omit the RS485 port).
2. Record the Current Transformer (CT) primary/secondary ratio on every outgoing feeder: Inspect the physical CT nameplates inside the busbar compartment (e.g., 1600/5A, 400/5A, 150/5A) to verify that the meter's programmed CT ratio matches reality.
3. Identify un-metered feeders requiring retrofit submetering: Plan non-intrusive DIN-rail meters paired with split-core CTs or DeviceLab's multi-circuit DL-P300 power monitor so installation can be completed without shutting down plant power.
4. Measure RS485 cable routing distances between sub-DBs and the Gateway panel: If distribution boards are scattered across separate factory buildings where trenching signal cable is impractical, group nearby panels onto independent 4G LTE Edge Gateways.
5. Check 4G LTE cellular signal strength (RSSI/RSRP) inside the substation room: Substation rooms are often enclosed in thick reinforced concrete or sheet metal; always bring a 3m–5m magnetic-base external 4G antenna to mount outside the steel switchboard enclosure.
6. Confirm the software integration architecture: Decide whether telemetry will stream via MQTT TLS to the partner's private cloud broker or activate a custom-branded tenant on DeviceLab's White-Label EMS Platform.