Easy Modbus- Home
- Modbus register maps
- Intesis (HMS Networks)
- IN485MIT001A000 Mitsubishi Electric Ecodan air-to-water to Modbus RTU / BACnet MS/TP gateway
Heat pump gateway (VRF / split AC gateway) · Modbus register map
Intesis (HMS Networks) IN485MIT001A000 Mitsubishi Electric Ecodan air-to-water to Modbus RTU / BACnet MS/TP gateway Modbus register map
Updated 29 October 2026
This Intesis gateway plugs into the CN105 connector of a Mitsubishi Electric Ecodan air-to-water heat pump and makes it a Modbus RTU server (or a BACnet MS/TP device, chosen by DIP switch). All points are single 16-bit holding registers: system on/off, heat/cool mode, Zone 1 and Zone 2 setpoints and control type, DHW setpoint, eco and boost, water temperatures, compressor and pump status, run hours, flow and energy counters, plus error codes.
This page lists 77 Modbus registers for the Intesis (HMS Networks) IN485MIT001A000 Mitsubishi Electric Ecodan air-to-water to Modbus RTU / BACnet MS/TP gateway — 25 writable — with the table, 0-based wire address, data type, word order, scale, units and access of each, re-typed from Intesis (HMS Networks)’s own free documentation (linked below) and checked against it.
- Manufacturer
- Intesis (HMS Networks)
- Model
- IN485MIT001A000 Mitsubishi Electric Ecodan air-to-water to Modbus RTU / BACnet MS/TP gateway
- Equipment type
- Heat pump gateway (VRF / split AC gateway)
- Registers
- 77 (25 writable)
- Transport
- Modbus RTU
- Default unit ID
- Not stated
- Default serial
- 2400 baud, 8N2
- Documented addressing
- 0-based (the number printed is the address on the wire)
- Also known as
- IN485MIT001A000, Ecodan Modbus, Mitsubishi Ecodan Modbus RTU, Intesis Ecodan, HMS Ecodan gateway
Integration notes: Intesis (HMS Networks) IN485MIT001A000 Mitsubishi Electric Ecodan air-to-water to Modbus RTU / BACnet MS/TP gateway
Plug the supplied cable into CN105 on the Ecodan board, set SW1 position 5 ON for Modbus RTU, pick the baud on SW1 6-8 and the address on SW2 1-6, reboot, then read holding registers with function 03 (max 50 per request) and write one register at a time with 06.
Minimum registers to map
Addresses are 0-based wire addresses. Enough to monitor and run the unit; map more as the job needs.
| Register | Name | Type | Why | Access |
|---|---|---|---|---|
| HR 130 | On/off | UINT16 | System on/off | Read/write |
| HR 142 | Zones mode | UINT16 | Heat/cool mode | Read/write |
| HR 160 | Zone 1 setpoint | INT16 | Zone 1 setpoint | Read/write |
| HR 276 | DHW setpoint | INT16 | DHW setpoint | Read/write |
| HR 180 | Zone 1 reference temperature | INT16 | Zone 1 reference temperature | Read |
| HR 285 | DHW tank temperature | INT16 | DHW tank temperature | Read |
| HR 304 | Outdoor ambient temperature | INT16 | Outdoor temperature | Read |
| HR 107 | Error flag | UINT16 | Error flag | Read |
| HR 109 | Error sub code | UINT16 | Ecodan error code | Read |
| HR 119 | Modbus control lock | UINT16 | Modbus control lock (keep 0) | Read/write |
Enable Modbus control & writes
SW1 position 5 ON selects Modbus RTU (factory default is BACnet MS/TP). Keep register 119 (Modbus control lock) at 0 or BMS commands are ignored.
Byte order & addressing
- Function 16 is accepted only with a quantity of one register.
- At most 50 registers per read.
- Factory serial setting is 2400 baud, 8-N-2; 8-N-1 is detected automatically.
- Temperature scale and unit change with SW2 positions 7 and 8.
Network setup
- SW1 5 = protocol (ON = Modbus RTU); SW1 6-8 = baud (all OFF = 2400 for Modbus).
- SW2 1-6 = Modbus address 1-63 (binary, position 1 = least significant); SW2 7 = x1/x10; SW2 8 = °C/°F.
- SW3 1 ON = 120 ohm termination; SW3 2-3 ON = bus biasing.
- Wire B-, A+ and SG; the gateway is powered from the Ecodan via the 1.5 m CN105 cable, which should not be lengthened.
- DIP changes take effect only after a gateway reboot (or write 1 to register 463).
Watch out for
- Writing 1 to register 118 locks out the Ecodan's own remote control.
- Writing a room temperature to 181/256 switches on virtual temperature; the unit then follows the BMS value.
- In cooling, only control type 0 (flow temperature) is allowed, and only one zone may use room temperature control.
Intesis (HMS Networks) IN485MIT001A000 Mitsubishi Electric Ecodan air-to-water to Modbus RTU / BACnet MS/TP gateway Modbus registers
Address = 0-based wire address (the documented number is shown under it when it differs) · Order: ABCD = high word first, CDAB = low word first · Scale: engineering value = raw × scale.
| Table | Address | Name | Description | Type | Order | Scale | Units | Access | Values / bits |
|---|---|---|---|---|---|---|---|---|---|
| HR | 101 | Indoor unit address | UINT16 | Read/write | |||||
| HR | 107 | Error flag | UINT16 | Read | 0 = No error; 1 = Error present | ||||
| HR | 108 | Error code | Code as shown on Mitsubishi central controllers (hex, e.g. 0x5101); 0 = none. | UINT16 | Read | ||||
| HR | 109 | Error sub code | Code as shown on the Ecodan screen, encoded (hex, e.g. 0x0601 = P1); 0 = none. | UINT16 | Read | ||||
| HR | 114 | Refrigerant error flag | UINT16 | Read | 0 = No error; 1 = Error present | ||||
| HR | 116 | Operating time counter | Heat pump run hours; rolls over to 0 after 65535. | UINT16 | h | Read | |||
| HR | 118 | Remote control lock | 1 = only the BMS can control the unit. | UINT16 | Read/write | 0 = Unlocked; 1 = Locked | |||
| HR | 119 | Modbus control lock | 1 = BMS commands are ignored; keep at 0. | UINT16 | Read/write | 0 = Unlocked; 1 = Locked | |||
| HR | 130 | On/off | Turns the whole Ecodan system on or off. | UINT16 | Read/write | 0 = Off; 1 = On | |||
| HR | 131 | Operation | Demand for climate and/or DHW present. | UINT16 | Read | 0 = Not operating; 1 = Operating | |||
| HR | 140 | Zones on/off | UINT16 | Read | 0 = Off; 1 = On | ||||
| HR | 141 | Zones operation | Demand for climate in any zone. | UINT16 | Read | 0 = Not operating; 1 = Operating | |||
| HR | 142 | Zones mode | Sets both zones to heat or cool. | UINT16 | Read/write | 1 = Heat; 2 = Cool | |||
| HR | 146 | Zone 1 on/off | UINT16 | Read | 0 = Off; 1 = On | ||||
| HR | 147 | Zone 1 operation | UINT16 | Read | 0 = Not operating; 1 = Operating | ||||
| HR | 149 | Zone 1 control type | Cooling allows only flow temperature control. | UINT16 | Read/write | 0 = Flow (outlet water) temperature control; 1 = Room thermostat (room temperature) control; 2 = Weather compensation curve | |||
| HR | 160 | Zone 1 setpoint | Requested Zone 1 temperature. | INT16 | °C | Read/write | |||
| HR | 161 | Zone 1 custom lower limit heat | INT16 | °C | Read/write | ||||
| HR | 162 | Zone 1 custom upper limit heat | INT16 | °C | Read/write | ||||
| HR | 163 | Zone 1 custom lower limit cool | INT16 | °C | Read/write | ||||
| HR | 164 | Zone 1 custom upper limit cool | INT16 | °C | Read/write | ||||
| HR | 169 | Zone 1 applied lower limit heat | Limit currently in force. | INT16 | °C | Read | |||
| HR | 170 | Zone 1 applied upper limit heat | Limit currently in force. | INT16 | °C | Read | |||
| HR | 171 | Zone 1 applied lower limit cool | Limit currently in force. | INT16 | °C | Read | |||
| HR | 172 | Zone 1 applied upper limit cool | Limit currently in force. | INT16 | °C | Read | |||
| HR | 180 | Zone 1 reference temperature | Current control reference for Zone 1. | INT16 | °C | Read | |||
| HR | 181 | Zone 1 Modbus room thermostat ambient | Write a room temperature from the BMS; enables virtual temperature. | INT16 | °C | Write | |||
| HR | 184 | Zone 1 outlet water temperature | Zone 1 flow thermistor. | INT16 | °C | Read | |||
| HR | 185 | Zone 1 inlet water temperature | Zone 1 return thermistor. | INT16 | °C | Read | |||
| HR | 230 | Zone 2 on/off | UINT16 | Read | 0 = Off; 1 = On | ||||
| HR | 231 | Zone 2 operation | UINT16 | Read | 0 = Not operating; 1 = Operating | ||||
| HR | 235 | Zone 2 control type | UINT16 | Read/write | 0 = Flow (outlet water) temperature control; 1 = Room thermostat (room temperature) control; 2 = Weather compensation curve | ||||
| HR | 240 | Zone 2 setpoint | Requested Zone 2 temperature. | INT16 | °C | Read/write | |||
| HR | 254 | Zone 2 reference temperature | INT16 | °C | Read | ||||
| HR | 256 | Zone 2 Modbus room thermostat ambient | Write a room temperature from the BMS; enables virtual temperature. | INT16 | °C | Write | |||
| HR | 258 | Zone 2 outlet water temperature | INT16 | °C | Read | ||||
| HR | 259 | Zone 2 inlet water temperature | INT16 | °C | Read | ||||
| HR | 270 | DHW on/off | UINT16 | Read | 0 = Off; 1 = On | ||||
| HR | 271 | DHW operation | Demand for hot water present. | UINT16 | Read | 0 = Not operating; 1 = Operating | |||
| HR | 276 | DHW setpoint | Requested tank temperature. | INT16 | °C | Read/write | |||
| HR | 277 | DHW custom lower limit | INT16 | °C | Read/write | ||||
| HR | 278 | DHW custom upper limit | INT16 | °C | Read/write | ||||
| HR | 279 | DHW tank lower limit | Absolute minimum supported by the tank. | INT16 | °C | Read | |||
| HR | 280 | DHW tank upper limit | Absolute maximum supported by the tank. | INT16 | °C | Read | |||
| HR | 285 | DHW tank temperature | From the tank thermistor(s). | INT16 | °C | Read | |||
| HR | 290 | DHW eco mode | UINT16 | Read/write | 0 = Off; 1 = On | ||||
| HR | 298 | DHW boost | Tank electric heater on/off. | UINT16 | Read/write | 0 = Off; 1 = On | |||
| HR | 300 | DHW legionella | Anti-legionella cycle running. | UINT16 | Read | 0 = Off; 1 = On | |||
| HR | 304 | Outdoor ambient temperature | From the outdoor unit. | INT16 | °C | Read | |||
| HR | 305 | Refrigerant temperature | In the outdoor unit. | INT16 | °C | Read | |||
| HR | 306 | Outlet water temperature (outdoor unit) | Flow water. | INT16 | °C | Read | |||
| HR | 308 | Inlet water temperature (outdoor unit) | Return water. | INT16 | °C | Read | |||
| HR | 360 | Holiday mode | UINT16 | Read/write | 0 = Off; 1 = On | ||||
| HR | 362 | Emergency operation | UINT16 | Read | 0 = Off; 1 = On | ||||
| HR | 363 | Defrost/normal operation | UINT16 | Read | 0 = Defrost; 1 = Normal operation | ||||
| HR | 365 | 3-way valve | UINT16 | Read | 0 = Climate; 1 = DHW | ||||
| HR | 366 | Backup heater level 1 | UINT16 | Read | 0 = Off; 1 = On | ||||
| HR | 367 | Backup heater level 2 | UINT16 | Read | 0 = Off; 1 = On | ||||
| HR | 369 | Compressor operation | UINT16 | Read | 0 = Off; 1 = On | ||||
| HR | 370 | Compressor operating time | Write 0 to reset; rolls over after 65535. | UINT16 | h | Read/write | |||
| HR | 371 | Pump operation | Circulation pump. | UINT16 | Read | 0 = Off; 1 = On | |||
| HR | 372 | Pump operating time | Write 0 to reset; rolls over after 65535. | UINT16 | h | Read/write | |||
| HR | 373 | Water flow rate | From the flow sensor. | UINT16 | l/h | Read | |||
| HR | 378 | Energy consumption total | Write 0 to reset all energy registers. | UINT16 | kWh | Read/write | |||
| HR | 379 | Energy consumption zones heat | UINT16 | kWh | Read | ||||
| HR | 380 | Energy consumption zones cool | UINT16 | kWh | Read | ||||
| HR | 381 | Energy consumption DHW | UINT16 | kWh | Read | ||||
| HR | 383 | Heat mode supported | UINT16 | Read | 0 = No; 1 = Yes | ||||
| HR | 384 | Cool mode supported | UINT16 | Read | 0 = No; 1 = Yes | ||||
| HR | 385 | DHW supported | UINT16 | Read | 0 = No; 1 = Yes | ||||
| HR | 460 | Device identifier | Reads 0x3100 (12544). | UINT16 | Read | 12544 = IN485MIT001A000 | |||
| HR | 461 | FW version MSB | First two firmware digits (1.2.x.x reads 0x0C). | UINT16 | Read | ||||
| HR | 462 | FW version LSB | Last two firmware digits. | UINT16 | Read | ||||
| HR | 463 | Device reset | Write 1 to restart the gateway. | UINT16 | Read/write | ||||
| HR | 464 | Baud rate | UINT16 | Read | 1 = 2400; 2 = 4800; 3 = 9600; 4 = 19200; 5 = 38400; 6 = 57600; 7 = 76800; 8 = 115200 | ||||
| HR | 465 | Modbus server address | 1-63, from DIP switches. | UINT16 | Read | ||||
| HR | 466 | DIP switch value | SW1/SW2 positions as a binary number. | UINT16 | Read |
Notes on this map
- Temperatures follow DIP switch SW2: position 7 OFF = whole degrees (x1, factory default), ON = tenths (x10, 19.2 = 192); position 8 OFF = °C (default), ON = °F. Units and scale here are for the defaults; use scale 0.1 if you set x10.
- Every register starts at 0x8000 (-32768) until the gateway has read the unit; the manual writes this value as negative, so temperatures are typed signed 16-bit.
- An invalid write resets a temperature register to 0x8000; other registers keep their old value.
- Zone 2 custom, unit and applied limit registers (241-252) mirror Zone 1's (161-172) and are left out to keep the map short; so are the Zone 1 unit limits (165-168), DHW applied limits (281-282) and the gateway-only registers not needed for control.
- Error code (108) is the code shown on Mitsubishi centralised controllers and sub code (109) the Ecodan screen code, both as hex digits in a 16-bit value (e.g. 0x0601 reads 1537 in decimal); the conversion table is in section 10 of the manual.
Check it against the live device. A register map tells you what the controller can expose; the unit in front of you may differ by firmware or options. Read a few registers and compare them with the unit’s own display; for a 32-bit value the float and byte-order decoder shows all four word orders at once, so a wrong word order or scale is obvious. New to this? Read what a register map is and why addresses are off by one.
Questions about the Intesis (HMS Networks) IN485MIT001A000 Mitsubishi Electric Ecodan air-to-water to Modbus RTU / BACnet MS/TP gateway
What Modbus registers does the Intesis (HMS Networks) IN485MIT001A000 Mitsubishi Electric Ecodan air-to-water to Modbus RTU / BACnet MS/TP gateway have?
This map lists 77 registers: 77 holding registers. 25 of them can be written. Registers vary with firmware, options and configuration, so confirm against the device.
Are the Intesis (HMS Networks) IN485MIT001A000 Mitsubishi Electric Ecodan air-to-water to Modbus RTU / BACnet MS/TP gateway Modbus addresses 0-based or 1-based?
The manufacturer's document numbers registers 0-based (the number printed is the address on the wire). Every address on this page is the 0-based wire address you put in the request; the documented number is shown under it where it differs. The manual gives each register a 'Modbus address (base 0)' and a 'PLC address (base 1)' column. This map uses the base-0 value as the wire address, so On/off is address 130 (PLC 131).
What are the minimum Modbus registers to integrate the Intesis (HMS Networks) IN485MIT001A000 Mitsubishi Electric Ecodan air-to-water to Modbus RTU / BACnet MS/TP gateway?
Start with HR 130 On/off (System on/off); HR 142 Zones mode (Heat/cool mode); HR 160 Zone 1 setpoint (Zone 1 setpoint); HR 276 DHW setpoint (DHW setpoint); HR 180 Zone 1 reference temperature (Zone 1 reference temperature); HR 285 DHW tank temperature (DHW tank temperature); HR 304 Outdoor ambient temperature (Outdoor temperature); HR 107 Error flag (Error flag); HR 109 Error sub code (Ecodan error code); HR 119 Modbus control lock (Modbus control lock (keep 0)).
How do I enable Modbus control of the Intesis (HMS Networks) IN485MIT001A000 Mitsubishi Electric Ecodan air-to-water to Modbus RTU / BACnet MS/TP gateway?
SW1 position 5 ON selects Modbus RTU (factory default is BACnet MS/TP). Keep register 119 (Modbus control lock) at 0 or BMS commands are ignored.
Where is the official Intesis (HMS Networks) IN485MIT001A000 Mitsubishi Electric Ecodan air-to-water to Modbus RTU / BACnet MS/TP gateway Modbus documentation?
The source is IN485MIT001A000 User Manual - Mitsubishi Electric Ecodan Air-to-Water Units to BACnet MS/TP and Modbus RTU (User Manual Version 1.0.3), revision 2025-12-02, published free by Intesis (HMS Networks) at https://www.hms-networks.com/docs/default-source/products/intesis/manuals-and-guides---manuals/user-manual-in485mit001a000.pdf.
More Intesis (HMS Networks) Modbus register maps
- VRF / split AC gateway
Intesis (HMS Networks) INMBSDAI001I000 Daikin domestic AC to Modbus RTU gateway
Single Daikin domestic (S21-connector) indoor unit via INMBSDAI001I000, user manual v1.0.2.
Also known as: INMBSDAI001I000, Intesis Daikin domestic Modbus - VRF / split AC gateway
Intesis (HMS Networks) INMBSDAI001R000 Daikin VRV / Sky Air to Modbus RTU gateway
One Daikin VRV or Sky Air indoor unit (or group) on the P1P2 bus via INMBSDAI001R000, user manual v1.0.1.
Also known as: INMBSDAI001R000, Intesis Daikin VRV Modbus - VRF / split AC gateway
Intesis (HMS Networks) INMBSFGL001I000 Fujitsu domestic AC to Modbus RTU gateway
One Fujitsu domestic (RAC) or compatible VRF indoor unit, connected to the CN65/CN12/CN6 socket on the indoor board via INMBSFGL001I000, user manual v1.5 (01/2024).
Also known as: INMBSFGL001I000, FJ-AC-MBS-1, Intesis Fujitsu domestic Modbus - VRF / split AC gateway
Intesis (HMS Networks) INMBSFGL001R000 Fujitsu AC to Modbus RTU gateway
One Fujitsu indoor unit, or a group of up to 16 controlled together as one, on the 3-wire BWR remote-controller bus via INMBSFGL001R000, user manual v2.4 (02/2025).
Also known as: INMBSFGL001R000, Intesis Fujitsu Modbus - VRF / split AC gateway
Intesis (HMS Networks) INMBSHIT001R000 Hitachi AC to Modbus RTU gateway
Intesis (HMS Networks) INMBSHIT001R000 interface on the AB bus of one Hitachi commercial-line indoor unit (or group), per user manual v1.6 (01/2024).
Also known as: INMBSHIT001R000, Hitachi Modbus gateway, Intesis Hitachi - VRF / split AC gateway
Intesis (HMS Networks) INMBSLGE001R000 LG AC to Modbus RTU gateway
One LG indoor unit on the BYR (wired remote) bus via INMBSLGE001R000 (legacy code LG-RC-MBS-1), user manual v1.9 (01/2024).
Also known as: INMBSLGE001R000, LG-RC-MBS-1, Intesis LG Modbus - VRF / split AC gateway
Intesis (HMS Networks) INMBSMHI001R000 Mitsubishi Heavy Industries AC to Modbus RTU gateway
Mitsubishi Heavy Industries indoor units (one, or up to 16 controlled together as one) on the XY remote-controller bus, user manual r6.4 (01/2024).
Also known as: INMBSMHI001R000, MH-RC-MBS-1, Intesis Mitsubishi Heavy Industries Modbus, Intesis MHI Modbus - VRF / split AC gateway
Intesis (HMS Networks) INMBSMIT001I000 Mitsubishi Electric AC to Modbus RTU gateway
One Mitsubishi Electric Domestic, Mr. Slim or City Multi indoor unit via INMBSMIT001I000, user manual r2.8 (11/2024).
Also known as: INMBSMIT001I000, Intesis Mitsubishi Electric Modbus - Heat pump gateway (VRF / split AC gateway)
Intesis (HMS Networks) INMBSPAN001A100 Panasonic Aquarea H/J/K/L/M air-to-water to Modbus RTU gateway
Intesis (HMS Networks) INMBSPAN001A100 gateway connected to Panasonic Aquarea H, J, K, L and M series air-to-water heat pumps, per user manual version 1.0.2 (2026-02-04).
Also known as: INMBSPAN001A100, Aquarea Modbus, Panasonic Aquarea Modbus RTU, Intesis Aquarea, INMBSPAN001A000 (legacy order code) - VRF / split AC gateway
Intesis (HMS Networks) INMBSPAN001R000 Panasonic AC to Modbus RTU gateway
Panasonic / Sanyo ECOi and PACi indoor units (one, or up to 16 controlled together as one) on the R1R2 remote-controller bus, user manual v2.8 (09/2025).
Also known as: INMBSPAN001R000, PA-RC2-MBS-1, Intesis Panasonic Modbus, Intesis Sanyo Modbus - VRF / split AC gateway
Intesis (HMS Networks) INMBSTOS001R000 Toshiba AC to Modbus RTU gateway
Toshiba Digital Inverter (RAV) and VRF indoor units on the AB remote bus via INMBSTOS001R0xx, user manual r2.9 (01/2024).
Also known as: INMBSTOS001R000, INMBSTOS001R0xx, Intesis Toshiba Modbus
Source: IN485MIT001A000 User Manual - Mitsubishi Electric Ecodan Air-to-Water Units to BACnet MS/TP and Modbus RTU · User Manual Version 1.0.3 · rev. 2025-12-02. Register numbers, types, scaling and units are reproduced as published; descriptions are our own.