- Home
- Modbus register maps
- Intesis (HMS Networks)
- INMBSPAN001A100 Panasonic Aquarea H/J/K/L/M air-to-water to Modbus RTU gateway
Heat pump gateway (VRF / split AC gateway) · Modbus register map
Intesis (HMS Networks) INMBSPAN001A100 Panasonic Aquarea H/J/K/L/M air-to-water to Modbus RTU gateway Modbus register map
Updated 29 October 2026
This Intesis interface connects to a Panasonic Aquarea hydro unit and presents it as a Modbus RTU server. All points are single 16-bit holding registers: system on/off and operating mode, zone setpoints and actual temperatures, DHW tank on/off and setpoint, water temperatures, present power draw, error code, unit configuration, and requests such as powerful, quiet and sterilisation. Some registers apply only to newer K/L/M series units.
This page lists 51 Modbus registers for the Intesis (HMS Networks) INMBSPAN001A100 Panasonic Aquarea H/J/K/L/M air-to-water to Modbus RTU gateway — 18 writable — with the table, 0-based wire address, data type, word order, scale, units and access of each, re-typed from Intesis (HMS Networks)’s own free documentation (linked below) and checked against it.
- Manufacturer
- Intesis (HMS Networks)
- Model
- INMBSPAN001A100 Panasonic Aquarea H/J/K/L/M air-to-water to Modbus RTU gateway
- Equipment type
- Heat pump gateway (VRF / split AC gateway)
- Registers
- 51 (18 writable)
- Transport
- Modbus RTU
- Default unit ID
- 1
- Default serial
- 9600 baud, 8N2
- Documented addressing
- 0-based (the number printed is the address on the wire)
- Also known as
- INMBSPAN001A100, Aquarea Modbus, Panasonic Aquarea Modbus RTU, Intesis Aquarea, INMBSPAN001A000 (legacy order code)
Integration notes: Intesis (HMS Networks) INMBSPAN001A100 Panasonic Aquarea H/J/K/L/M air-to-water to Modbus RTU gateway
Connect the gateway to the Aquarea hydro unit and the RS-485 bus, set the address on SW3 P1-P6 (default 1), then read holding registers with function 03 and write single registers with function 06: register 0 for on/off, 4 for mode, 12 and 33 for zone and tank setpoints.
Minimum registers to map
Addresses are 0-based wire addresses. Enough to monitor and run the unit; map more as the job needs.
| Register | Name | Type | Why | Access |
|---|---|---|---|---|
| HR 0 | System on/off | UINT16 | System on/off | Read/write |
| HR 4 | Operating mode | UINT16 | Operating mode | Read/write |
| HR 12 | Zone 1 setpoint temperature | INT16 | Zone 1 setpoint | Read/write |
| HR 14 | Zone 1 actual temperature | INT16 | Zone 1 actual temperature | Read |
| HR 33 | Tank water setpoint | INT16 | Tank setpoint | Read/write |
| HR 32 | Tank water temperature | INT16 | Tank temperature | Read |
| HR 1 | Outdoor temperature | INT16 | Outdoor temperature | Read |
| HR 2 | Outlet water temperature | INT16 | Outlet water temperature | Read |
| HR 70 | Current error status | UINT16 | Error status | Read |
| HR 52 | Error code | UINT16 | Error code | Read |
Enable Modbus control & writes
No software enable. Set the address and baud on the DIP switches with the gateway unpowered; it is powered by the Aquarea unit.
Byte order & addressing
- Function 16 works only with a quantity of one register.
- Factory serial setting is 9600 baud, 8-N-2; 8-N-1 is detected automatically.
- Temperature scale and unit change with DIP switch SW4.
- Register 70 reads 1 (error) until the gateway has communicated with the Aquarea unit.
Network setup
- SW3 P1-P6: Modbus address in binary (P1 = least significant bit).
- SW3 P7-P8 plus SW4 P3: baud rate (9600 default).
- SW4 P1 = x1/x10, P2 = °C/°F, P4 = 120 ohm termination.
- Switch the gateway off (power down the Aquarea) before changing DIP switches.
Watch out for
- Zone 1/Zone 2 on/off (register 9) only applies when two zones are configured.
- Many registers from 105 upward exist only on K, L or M series units.
Intesis (HMS Networks) INMBSPAN001A100 Panasonic Aquarea H/J/K/L/M air-to-water to Modbus RTU gateway Modbus registers
Address = 0-based wire address (the documented number is shown under it when it differs) · Order: ABCD = high word first, CDAB = low word first · Scale: engineering value = raw × scale.
| Table | Address | Name | Description | Type | Order | Scale | Units | Access | Values / bits |
|---|---|---|---|---|---|---|---|---|---|
| HR | 0 | System on/off | UINT16 | Read/write | 0 = Off; 1 = On | ||||
| HR | 1 | Outdoor temperature | -127 to 127 °C. | INT16 | °C | Read | |||
| HR | 2 | Outlet water temperature | Flow water, -127 to 127 °C. | INT16 | °C | Read | |||
| HR | 3 | Inlet water temperature | Return water, -127 to 127 °C. | INT16 | °C | Read | |||
| HR | 4 | Operating mode | Values 1-7 can be written; 8-11 are read-only states. | UINT16 | Read/write | 1 = Heat; 2 = Heat + tank; 3 = Tank; 4 = Cool + tank; 5 = Cool; 6 = Auto; 7 = Auto + tank; 8 = Auto heat; 9 = Auto heat + tank; 10 = Auto cool; 11 = Auto cool + tank | |||
| HR | 5 | Heat mode water temperature setting method | UINT16 | Read/write | 1 = Compensation curve; 2 = Direct | ||||
| HR | 6 | Cool mode water temperature setting method | UINT16 | Read/write | 1 = Compensation curve; 2 = Direct | ||||
| HR | 9 | Zone 1/Zone 2 on/off | Only with two zones configured (register 82 = 2). | UINT16 | Read/write | 1 = Zone 1 on / Zone 2 off; 2 = Zone 1 off / Zone 2 on; 3 = Zone 1 on / Zone 2 on | |||
| HR | 10 | Zone 1 sensor | UINT16 | Read | 1 = Water temperature; 2 = External room sensor; 3 = Internal room sensor; 4 = Room thermistor; 5 = Pool sensor | ||||
| HR | 11 | Zone 2 sensor | UINT16 | Read | 1 = Water temperature; 2 = External room sensor; 3 = Internal room sensor; 4 = Room thermistor; 5 = Pool sensor | ||||
| HR | 12 | Zone 1 setpoint temperature | Water shift, water, room or pool setpoint, depending on setup and mode. | INT16 | °C | Read/write | |||
| HR | 13 | Zone 2 setpoint temperature | Water shift, water, room or pool setpoint, depending on setup and mode. | INT16 | °C | Read/write | |||
| HR | 14 | Zone 1 actual temperature | Room, water or pool value matching the setpoint type. | INT16 | °C | Read | |||
| HR | 15 | Zone 2 actual temperature | Room, water or pool value matching the setpoint type. | INT16 | °C | Read | |||
| HR | 16 | Zone 1 temperature setting mode | UINT16 | Read | 1 = Room temperature; 2 = Compensation curve (water); 3 = Direct (water); 4 = Pool temperature | ||||
| HR | 17 | Zone 2 temperature setting mode | UINT16 | Read | 1 = Room temperature; 2 = Compensation curve (water); 3 = Direct (water); 4 = Pool temperature | ||||
| HR | 18 | Zone 1 min setpoint | Lower limit for the current setpoint type. | INT16 | °C | Read | |||
| HR | 19 | Zone 1 max setpoint | Upper limit for the current setpoint type. | INT16 | °C | Read | |||
| HR | 20 | Zone 2 min setpoint | Lower limit for the current setpoint type. | INT16 | °C | Read | |||
| HR | 21 | Zone 2 max setpoint | Upper limit for the current setpoint type. | INT16 | °C | Read | |||
| HR | 30 | Tank on/off | Domestic hot water tank. | UINT16 | Read/write | 0 = Off; 1 = On | |||
| HR | 32 | Tank water temperature | Current DHW tank temperature. | INT16 | °C | Read | |||
| HR | 33 | Tank water setpoint | 40 to 55 or 75 °C depending on unit. | INT16 | °C | Read/write | |||
| HR | 34 | Tank heater | UINT16 | Read | 1 = Internal; 2 = External | ||||
| HR | 35 | Tank min setpoint | INT16 | °C | Read | ||||
| HR | 36 | Tank max setpoint | INT16 | °C | Read | ||||
| HR | 45 | Tank mode energy consumption | Present power draw in tank mode. | UINT16 | W | Read | |||
| HR | 46 | Heat mode energy consumption | Present power draw in heat mode. | UINT16 | W | Read | |||
| HR | 47 | Cool / heat recovery mode energy consumption | Present power draw in cool mode. | UINT16 | W | Read | |||
| HR | 52 | Error code | 0 = none; 1xxx = Uxx, 2xxx = Hxx, 3xxx = Fxx. | UINT16 | Read | ||||
| HR | 64 | De-ice status | UINT16 | Read | 0 = Off; 1 = On | ||||
| HR | 70 | Current error status | Reads 1 until the gateway has talked to the unit. | UINT16 | Read | 0 = No error; 1 = Error | |||
| HR | 81 | Tank connection | UINT16 | Read/write | 0 = No; 1 = Yes | ||||
| HR | 82 | Number of zones | UINT16 | Read/write | 1 = 1 zone; 2 = 2 zones | ||||
| HR | 83 | Zone 1 setup | UINT16 | Read/write | 1 = Room; 2 = Pool | ||||
| HR | 84 | Zone 2 setup | UINT16 | Read/write | 1 = Room; 2 = Pool | ||||
| HR | 85 | Direction | Where the heat pump is currently delivering heat. | UINT16 | Read | 1 = Room; 2 = Tank | |||
| HR | 86 | Outdoor type | UINT16 | Read | 1 = STD; 2 = TCAP; 3 = HWT | ||||
| HR | 111 | SG Ready control pattern | K series onward. | UINT16 | Read | 1 = Normal; 2 = HP stop; 3 = Capacity 1; 4 = Capacity 2 | |||
| HR | 112 | Water pressure | 0-5080 mbar; K series onward. | UINT16 | mbar | Read | |||
| HR | 117 | Model series | UINT16 | Read | 1 = H series; 2 = J series; 3 = K series; 4 = L series; 5 = M series | ||||
| HR | 183 | Water outlet temperature target | INT16 | °C | Read | ||||
| HR | 197 | Powerful (request) | Temporary boost. | UINT16 | Read/write | 1 = Off; 2 = On 30 min; 3 = On 60 min; 4 = On 90 min | |||
| HR | 198 | Quiet (request) | UINT16 | Read/write | 1 = Off; 2 = Level 1; 3 = Level 2; 4 = Level 3 | ||||
| HR | 200 | System reset (request) | UINT16 | Write | 0 = No request; 1 = Request | ||||
| HR | 202 | Sterilization (request) | Starts a tank sterilisation cycle. | UINT16 | Write | 0 = No request; 1 = Request | |||
| HR | 460 | Gateway ID | Reads 3328 (0x0D00). | UINT16 | Read | 3328 = INMBSPAN001A100 | |||
| HR | 463 | Gateway reset | Write 1 to restart the gateway. | UINT16 | Read/write | ||||
| HR | 464 | Baud rate | UINT16 | Read | 0 = 2400; 1 = 4800; 2 = 9600; 3 = 19200; 4 = 38400; 5 = 57600; 6 = 76800; 7 = 115200 | ||||
| HR | 465 | Gateway Modbus server address | 1-63. | UINT16 | Read | ||||
| HR | 466 | DIP switch value | Switch positions as a binary number. | UINT16 | Read |
Notes on this map
- The download link's file name says v1-0-0 but the PDF it serves is version 1.0.2 dated 2026-02-04; the addresses here are from 1.0.2.
- Temperatures follow DIP switch SW4: P1 ON = tenths of a degree (x10, Celsius only), P2 ON = Fahrenheit; both OFF (factory) = whole °C. Units and scale here are for the default; use scale 0.1 if x10 is set.
- Temperature ranges go below zero (-127 to 127 °C), so temperatures are typed signed 16-bit. Invalid readings are 0x8000 on signed registers and 0xFFFF on unsigned ones.
- What register 12/13 (zone setpoint) and 14/15 (actual) mean depends on zone setup (83/84), setting mode (16/17) and operating mode (4): room, water, water shift or pool; see the table on p. 30.
- For registers whose values are range-checked, an out-of-range write is moved to the nearest limit (writing 6 to a 0-5 register applies 5).
- Left out: the 32-bit energy totals 120-131 and 366-373 (two registers each, word order not stated); compressor total on time 184-185 (split into MSB/LSB registers with a 24-bit range, packing not stated); the compensation-curve, bivalent, SG Ready capacity and M-series-only settings (150-438) - read them from the manual if needed.
Check it against the live device. A register map tells you what the controller can expose; the unit in front of you may differ by firmware or options. Read a few registers and compare them with the unit’s own display; for a 32-bit value the float and byte-order decoder shows all four word orders at once, so a wrong word order or scale is obvious. New to this? Read what a register map is and why addresses are off by one.
Questions about the Intesis (HMS Networks) INMBSPAN001A100 Panasonic Aquarea H/J/K/L/M air-to-water to Modbus RTU gateway
What Modbus registers does the Intesis (HMS Networks) INMBSPAN001A100 Panasonic Aquarea H/J/K/L/M air-to-water to Modbus RTU gateway have?
This map lists 51 registers: 51 holding registers. 18 of them can be written. Registers vary with firmware, options and configuration, so confirm against the device.
Are the Intesis (HMS Networks) INMBSPAN001A100 Panasonic Aquarea H/J/K/L/M air-to-water to Modbus RTU gateway Modbus addresses 0-based or 1-based?
The manufacturer's document numbers registers 0-based (the number printed is the address on the wire). Every address on this page is the 0-based wire address you put in the request; the documented number is shown under it where it differs. Each register is listed with a 'Modbus address (base 0)' (protocol address) and a 'PLC address (base 1)'. This map uses the base-0 value as the wire address: System on/off is address 0 (PLC 1).
What are the minimum Modbus registers to integrate the Intesis (HMS Networks) INMBSPAN001A100 Panasonic Aquarea H/J/K/L/M air-to-water to Modbus RTU gateway?
Start with HR 0 System on/off (System on/off); HR 4 Operating mode (Operating mode); HR 12 Zone 1 setpoint temperature (Zone 1 setpoint); HR 14 Zone 1 actual temperature (Zone 1 actual temperature); HR 33 Tank water setpoint (Tank setpoint); HR 32 Tank water temperature (Tank temperature); HR 1 Outdoor temperature (Outdoor temperature); HR 2 Outlet water temperature (Outlet water temperature); HR 70 Current error status (Error status); HR 52 Error code (Error code).
How do I enable Modbus control of the Intesis (HMS Networks) INMBSPAN001A100 Panasonic Aquarea H/J/K/L/M air-to-water to Modbus RTU gateway?
No software enable. Set the address and baud on the DIP switches with the gateway unpowered; it is powered by the Aquarea unit.
Where is the official Intesis (HMS Networks) INMBSPAN001A100 Panasonic Aquarea H/J/K/L/M air-to-water to Modbus RTU gateway Modbus documentation?
The source is INMBSPAN001A100 User Manual - Panasonic Aquarea H/J/K/L/M Air-to-Water Units to Modbus RTU (User Manual Version 1.0.2), revision 2026-02-04, published free by Intesis (HMS Networks) at https://www.hms-networks.com/docs/default-source/products/intesis/manuals-and-guides---manuals/inmbspan001a100-user-manual-v1-0-0-en.pdf.
More Intesis (HMS Networks) Modbus register maps
- Heat pump gateway (VRF / split AC gateway)
Intesis (HMS Networks) IN485MIT001A000 Mitsubishi Electric Ecodan air-to-water to Modbus RTU / BACnet MS/TP gateway
Intesis (HMS Networks) IN485MIT001A000 gateway on the CN105 socket of Mitsubishi Electric Ecodan air-to-water heat pumps, set to Modbus RTU, per user manual version 1.0.3 (2025-12-02).
Also known as: IN485MIT001A000, Ecodan Modbus, Mitsubishi Ecodan Modbus RTU, Intesis Ecodan, HMS Ecodan gateway - VRF / split AC gateway
Intesis (HMS Networks) INMBSDAI001I000 Daikin domestic AC to Modbus RTU gateway
Single Daikin domestic (S21-connector) indoor unit via INMBSDAI001I000, user manual v1.0.2.
Also known as: INMBSDAI001I000, Intesis Daikin domestic Modbus - VRF / split AC gateway
Intesis (HMS Networks) INMBSDAI001R000 Daikin VRV / Sky Air to Modbus RTU gateway
One Daikin VRV or Sky Air indoor unit (or group) on the P1P2 bus via INMBSDAI001R000, user manual v1.0.1.
Also known as: INMBSDAI001R000, Intesis Daikin VRV Modbus - VRF / split AC gateway
Intesis (HMS Networks) INMBSFGL001I000 Fujitsu domestic AC to Modbus RTU gateway
One Fujitsu domestic (RAC) or compatible VRF indoor unit, connected to the CN65/CN12/CN6 socket on the indoor board via INMBSFGL001I000, user manual v1.5 (01/2024).
Also known as: INMBSFGL001I000, FJ-AC-MBS-1, Intesis Fujitsu domestic Modbus - VRF / split AC gateway
Intesis (HMS Networks) INMBSFGL001R000 Fujitsu AC to Modbus RTU gateway
One Fujitsu indoor unit, or a group of up to 16 controlled together as one, on the 3-wire BWR remote-controller bus via INMBSFGL001R000, user manual v2.4 (02/2025).
Also known as: INMBSFGL001R000, Intesis Fujitsu Modbus - VRF / split AC gateway
Intesis (HMS Networks) INMBSHIT001R000 Hitachi AC to Modbus RTU gateway
Intesis (HMS Networks) INMBSHIT001R000 interface on the AB bus of one Hitachi commercial-line indoor unit (or group), per user manual v1.6 (01/2024).
Also known as: INMBSHIT001R000, Hitachi Modbus gateway, Intesis Hitachi - VRF / split AC gateway
Intesis (HMS Networks) INMBSLGE001R000 LG AC to Modbus RTU gateway
One LG indoor unit on the BYR (wired remote) bus via INMBSLGE001R000 (legacy code LG-RC-MBS-1), user manual v1.9 (01/2024).
Also known as: INMBSLGE001R000, LG-RC-MBS-1, Intesis LG Modbus - VRF / split AC gateway
Intesis (HMS Networks) INMBSMHI001R000 Mitsubishi Heavy Industries AC to Modbus RTU gateway
Mitsubishi Heavy Industries indoor units (one, or up to 16 controlled together as one) on the XY remote-controller bus, user manual r6.4 (01/2024).
Also known as: INMBSMHI001R000, MH-RC-MBS-1, Intesis Mitsubishi Heavy Industries Modbus, Intesis MHI Modbus - VRF / split AC gateway
Intesis (HMS Networks) INMBSMIT001I000 Mitsubishi Electric AC to Modbus RTU gateway
One Mitsubishi Electric Domestic, Mr. Slim or City Multi indoor unit via INMBSMIT001I000, user manual r2.8 (11/2024).
Also known as: INMBSMIT001I000, Intesis Mitsubishi Electric Modbus - VRF / split AC gateway
Intesis (HMS Networks) INMBSPAN001R000 Panasonic AC to Modbus RTU gateway
Panasonic / Sanyo ECOi and PACi indoor units (one, or up to 16 controlled together as one) on the R1R2 remote-controller bus, user manual v2.8 (09/2025).
Also known as: INMBSPAN001R000, PA-RC2-MBS-1, Intesis Panasonic Modbus, Intesis Sanyo Modbus - VRF / split AC gateway
Intesis (HMS Networks) INMBSTOS001R000 Toshiba AC to Modbus RTU gateway
Toshiba Digital Inverter (RAV) and VRF indoor units on the AB remote bus via INMBSTOS001R0xx, user manual r2.9 (01/2024).
Also known as: INMBSTOS001R000, INMBSTOS001R0xx, Intesis Toshiba Modbus
Source: INMBSPAN001A100 User Manual - Panasonic Aquarea H/J/K/L/M Air-to-Water Units to Modbus RTU · User Manual Version 1.0.2 · rev. 2026-02-04. Register numbers, types, scaling and units are reproduced as published; descriptions are our own.