Easy Modbus- Home
- Modbus register maps
- Intesis (HMS Networks)
- INMBSPAN001R000 Panasonic AC to Modbus RTU gateway
VRF / split AC gateway · Modbus register map
Intesis (HMS Networks) INMBSPAN001R000 Panasonic AC to Modbus RTU gateway Modbus register map
Updated 24 October 2026
Modbus RTU server that sits on the Panasonic/Sanyo R1R2 remote-controller bus of an ECOi or PACi indoor unit. Holding registers cover on/off, mode, fan, vane, setpoint and limits, room and return temperatures, alarm and error code, filter sign, window-contact logic, outdoor demand limiting and the master/slave pair used for back-up and rotation.
This page lists 46 Modbus registers for the Intesis (HMS Networks) INMBSPAN001R000 Panasonic AC to Modbus RTU gateway — 16 writable — with the table, 0-based wire address, data type, word order, scale, units and access of each, re-typed from Intesis (HMS Networks)’s own free documentation (linked below) and checked against it.
- Manufacturer
- Intesis (HMS Networks)
- Model
- INMBSPAN001R000 Panasonic AC to Modbus RTU gateway
- Equipment type
- VRF / split AC gateway
- Registers
- 46 (16 writable)
- Transport
- Modbus RTU
- Default unit ID
- 1
- Default serial
- 9600 baud, 8N2
- Documented addressing
- 0-based (the number printed is the address on the wire)
- Also known as
- INMBSPAN001R000, PA-RC2-MBS-1, Intesis Panasonic Modbus, Intesis Sanyo Modbus
Integration notes: Intesis (HMS Networks) INMBSPAN001R000 Panasonic AC to Modbus RTU gateway
Wire the gateway to R1R2, check SW3/SW4 for address 1 and 9600 baud, power-cycle, then poll holding registers 0-11 with function 03 and write commands one register at a time with function 06.
Minimum registers to map
Addresses are 0-based wire addresses. Enough to monitor and run the unit; map more as the job needs.
| Register | Name | Type | Why | Access |
|---|---|---|---|---|
| HR 0 | AC unit On/Off | UINT16 | On/off | Read/write |
| HR 1 | AC unit mode | UINT16 | Mode | Read/write |
| HR 2 | AC unit fan speed | UINT16 | Fan speed | Read/write |
| HR 4 | AC unit temperature setpoint | UINT16 | Setpoint | Read/write |
| HR 5 | AC unit temperature reference | UINT16 | Room / control temperature | Read |
| HR 10 | AC unit alarm status | UINT16 | Alarm flag | Read |
| HR 11 | Error code | UINT16 | Error code | Read |
Enable Modbus control & writes
No enable step; register 7 (gateway disablement) must be 0 for commands to reach the unit. The outdoor demand rate feature is switched on with DIP SW1.
Byte order & addressing
- Temperature scale depends on DIP SW4 and the manual is inconsistent about the factory default.
- 8-N-2 by default; 8-N-1 is auto-detected.
- Function 16 is accepted only with a quantity of one register; functions 3 and 4 both read the same holding registers.
- Master/slave registers 4000-4014 only mean something when two indoor units are paired for Panasonic back-up / rotation.
Network setup
- SW3: slave address; SW3/SW4: baud (9600 default).
- SW4: x1/x10, °C/°F and 120 Ω termination.
- DIP changes need a power cycle. R1R2 bus max 500 m, not polarity sensitive; EIA-485 max 1,200 m.
- Fail-safe biasing must come from the Modbus master.
Watch out for
- The gateway only answers once it is connected to a powered indoor unit.
- The manual warns that a Panasonic wired remote on the same R1R2 bus can make communication drop; avoid more than one remote on the bus.
Intesis (HMS Networks) INMBSPAN001R000 Panasonic AC to Modbus RTU gateway Modbus registers
Address = 0-based wire address (the documented number is shown under it when it differs) · Order: ABCD = high word first, CDAB = low word first · Scale: engineering value = raw × scale.
| Table | Address | Name | Description | Type | Order | Scale | Units | Access | Values / bits |
|---|---|---|---|---|---|---|---|---|---|
| HR | 0 | AC unit On/Off | UINT16 | Read/write | 0 = Off; 1 = On | ||||
| HR | 1 | AC unit mode | Available modes depend on the indoor unit. | UINT16 | Read/write | 0 = Auto; 1 = Heat; 2 = Dry; 3 = Fan; 4 = Cool | |||
| HR | 2 | AC unit fan speed | Available speeds depend on the indoor unit. | UINT16 | Read/write | 0 = Auto; 1 = Low; 2 = Mid; 3 = High | |||
| HR | 3 | AC unit vane position | Availability depends on the indoor unit. | UINT16 | Read/write | 0 = Auto; 1 = POS1 (Horizontal); 2 = POS2 (Horizontal); 3 = POS3 (Medium); 4 = POS4 (Vertical); 5 = POS5 (Vertical); 10 = Swing | |||
| HR | 4 | AC unit temperature setpoint | Setpoint 16..32 °C (61..90 °F). SW4 x1 °C assumed (x10: 0.1, or °F). | UINT16 | °C | Read/write | 32768 = Initialisation value / no value (0x8000; manual writes -32768) | ||
| HR | 5 | AC unit temperature reference | Control temperature; mirrors reg 22 when valid. SW4 x1 °C assumed (x10: 0.1, or °F). | UINT16 | °C | Read | 32768 = Initialisation value / invalid sensor value (0x8000) | ||
| HR | 6 | Window contact | Virtual window contact written from Modbus. | UINT16 | Read/write | 0 = Closed; 1 = Open | |||
| HR | 7 | Gateway disablement | Stops the gateway passing commands; stored in NVM. | UINT16 | Read/write | 0 = INMBSPAN001R000 enabled; 1 = INMBSPAN001R000 disabled | |||
| HR | 8 | AC remote control disablement | Blocks the manufacturer's wired remote; stored in NVM. | UINT16 | Read/write | 0 = Remote control enabled; 1 = Remote control disabled | |||
| HR | 9 | AC unit operation time | Hours the unit has been on. | UINT16 | h | Read/write | |||
| HR | 10 | AC unit alarm status | UINT16 | Read | 0 = No alarm condition; 1 = Alarm condition | ||||
| HR | 11 | Error code | Panasonic error (manual section 7); 65535 = communication error. | UINT16 | Read | 0 = No error active; 65535 = Error in communication between the gateway and the AC unit | |||
| HR | 13 | Open window switch-off timeout | Countdown after window opens before switch-off (0..30, default 30). | UINT16 | min | Read/write | |||
| HR | 14 | Modbus RTU baud rate | Baud rate in use (set on DIP switches). | UINT16 | Read | ||||
| HR | 15 | Modbus slave address | Range 1..63. | UINT16 | Read | ||||
| HR | 21 | Max number of fan speeds | UINT16 | Read | |||||
| HR | 22 | External ambient temperature (Modbus) | Room temperature written from a Modbus-side sensor. SW4 x1 °C assumed (x10: 0.1, or °F). | UINT16 | °C | Read/write | 32768 = Initialisation value, no external sensor value (0x8000) | ||
| HR | 23 | AC setpoint temperature | Setpoint currently applied in the indoor unit. SW4 x1 °C assumed (x10: 0.1, or °F). | UINT16 | °C | Read | |||
| HR | 24 | Current AC max setpoint | Upper setpoint limit reported by the unit. SW4 x1 °C assumed (x10: 0.1, or °F). | UINT16 | °C | Read | 32768 = Initialisation value / no value (0x8000; manual writes -32768) | ||
| HR | 25 | Current AC min setpoint | Lower setpoint limit reported by the unit. SW4 x1 °C assumed (x10: 0.1, or °F). | UINT16 | °C | Read | 32768 = Initialisation value / no value (0x8000; manual writes -32768) | ||
| HR | 31 | Window contact status (feedback) | UINT16 | Read | 0 = Not active; 1 = Active (window open) | ||||
| HR | 37 | Auto mode | Mode reported for Auto operation; same value list as register 1. | UINT16 | Read | 0 = Auto; 1 = Heat; 2 = Dry; 3 = Fan; 4 = Cool | |||
| HR | 40 | Window contact On/Off disablement | Whether the open window is currently blocking On/Off. | UINT16 | Read | 0 = Window contact not disabling On/Off; 1 = Window contact disabling On/Off | |||
| HR | 43 | Filter reset | Write 1 to reset the filter sign. | UINT16 | Write | 1 = Reset | |||
| HR | 44 | Filter status | UINT16 | Read | 0 = Off; 1 = Lit | ||||
| HR | 48 | Switch value | Current DIP switch settings. | UINT16 | Read | ||||
| HR | 49 | Device ID | Reads 0x1500. | UINT16 | Read | ||||
| HR | 50 | Software version | UINT16 | Read | |||||
| HR | 65 | Input reference temperature (feedback) | Reference temperature in use. SW4 x1 °C assumed (x10: 0.1, or °F). | UINT16 | °C | Read | 32768 = Initialisation value / no value (0x8000; manual writes -32768) | ||
| HR | 66 | Return path temperature | Indoor unit return-air sensor. SW4 x1 °C assumed (x10: 0.1, or °F). | UINT16 | °C | Read | 32768 = Initialisation value / no value (0x8000; manual writes -32768) | ||
| HR | 67 | Number of indoor units connected | UINT16 | Read | |||||
| HR | 81 | Error address | Indoor unit number reporting the error. | UINT16 | Read | ||||
| HR | 82 | Outdoor demand rate | Outdoor demand limit; 40..150 is the operating range in amps. | UINT16 | A | Read/write | 0 = Thermo Off; 255 = No limit (normal operation) | ||
| HR | 97 | Block periodic sendings | 1 = only forward Modbus writes that change the value (FW 2.3+). | UINT16 | Read/write | 0 = Non-blocked; 1 = Blocked | |||
| HR | 99 | Reset | Write 1 to restart the gateway. | UINT16 | Write | 1 = Reset | |||
| HR | 1150 | Machine mode | Selects auto-changeover or limited-setpoint behaviour. | UINT16 | Read/write | 0 = Normal; 1 = Autochangeover; 2 = Limited setpoint | |||
| HR | 4000 | Indoor unit master address | Back-up/rotation pair: master indoor unit address. | UINT16 | Read | ||||
| HR | 4001 | Indoor unit master force thermo off | UINT16 | Read | 0 = No limit; 1 = Thermo forced off | ||||
| HR | 4002 | Indoor unit master error code | UINT16 | Read | 0 = No error active; 65535 = Communication error | ||||
| HR | 4003 | Indoor unit master setpoint | SW4 x1 °C assumed (x10: 0.1, or °F). | UINT16 | °C | Read | 32768 = Initialisation value / no value (0x8000; manual writes -32768) | ||
| HR | 4004 | Indoor unit master room temperature | SW4 x1 °C assumed (x10: 0.1, or °F). | UINT16 | °C | Read | 32768 = Initialisation value / no value (0x8000; manual writes -32768) | ||
| HR | 4010 | Indoor unit slave address | Back-up/rotation pair: slave indoor unit address. | UINT16 | Read | ||||
| HR | 4011 | Indoor unit slave force thermo off | UINT16 | Read | 0 = No limit; 1 = Thermo forced off | ||||
| HR | 4012 | Indoor unit slave error code | UINT16 | Read | 0 = No error active; 65535 = Communication error | ||||
| HR | 4013 | Indoor unit slave setpoint | SW4 x1 °C assumed (x10: 0.1, or °F). | UINT16 | °C | Read | 32768 = Initialisation value / no value (0x8000; manual writes -32768) | ||
| HR | 4014 | Indoor unit slave room temperature | SW4 x1 °C assumed (x10: 0.1, or °F). | UINT16 | °C | Read | 32768 = Initialisation value / no value (0x8000; manual writes -32768) |
Notes on this map
- The manual declares every register a 16-bit unsigned holding register; the temperature ranges listed never go below zero, so temperatures are UINT16. The 'no value' marker the manual writes as -32768 is raw 0x8000 (32768) and is listed as an enum entry.
- Temperature registers depend on the DIP SW4 setting: x1 °C, x10 °C (decidegrees) or °F (no °F x10). The register-table footnote calls x10 the default, but the DIP-switch table and the quick-start page (all other switches off) give x1 °C as the factory setting, so scale 1 / °C is used. Check the switch on site: if x10 is set use scale 0.1; if °F is set the values are whole °F.
- The manual notes temperatures carry 0.5 °C resolution, which only shows when the x10 setting is used.
- Register 5 (temperature reference) is marked R/W in the register table but described as read-only in the temperature section; it is listed as read-only here.
- Left out: outdoor demand rate max/min (registers 83/84), because the manual only says they are 'portions of 100%' without a usable scale; machine threshold and custom setpoint-limit registers 1151-1156, because the manual gives their defaults in °C/°F but does not say whether they follow the SW4 x1/x10 setting.
- Error code list (Panasonic codes) not reproduced; see manual section 7.
Check it against the live device. A register map tells you what the controller can expose; the unit in front of you may differ by firmware or options. Read a few registers and compare them with the unit’s own display; for a 32-bit value the float and byte-order decoder shows all four word orders at once, so a wrong word order or scale is obvious. New to this? Read what a register map is and why addresses are off by one.
Questions about the Intesis (HMS Networks) INMBSPAN001R000 Panasonic AC to Modbus RTU gateway
What Modbus registers does the Intesis (HMS Networks) INMBSPAN001R000 Panasonic AC to Modbus RTU gateway have?
This map lists 46 registers: 46 holding registers. 16 of them can be written. Registers vary with firmware, options and configuration, so confirm against the device.
Are the Intesis (HMS Networks) INMBSPAN001R000 Panasonic AC to Modbus RTU gateway Modbus addresses 0-based or 1-based?
The manufacturer's document numbers registers 0-based (the number printed is the address on the wire). Every address on this page is the 0-based wire address you put in the request; the documented number is shown under it where it differs. Tables give a 'protocol address' (base 0) and a 'PLC address' (base 1); the protocol address is the wire address and is used for 'documented'.
What are the minimum Modbus registers to integrate the Intesis (HMS Networks) INMBSPAN001R000 Panasonic AC to Modbus RTU gateway?
Start with HR 0 AC unit On/Off (On/off); HR 1 AC unit mode (Mode); HR 2 AC unit fan speed (Fan speed); HR 4 AC unit temperature setpoint (Setpoint); HR 5 AC unit temperature reference (Room / control temperature); HR 10 AC unit alarm status (Alarm flag); HR 11 Error code (Error code).
How do I enable Modbus control of the Intesis (HMS Networks) INMBSPAN001R000 Panasonic AC to Modbus RTU gateway?
No enable step; register 7 (gateway disablement) must be 0 for commands to reach the unit. The outdoor demand rate feature is switched on with DIP SW1.
Where is the official Intesis (HMS Networks) INMBSPAN001R000 Panasonic AC to Modbus RTU gateway Modbus documentation?
The source is Intesis INMBSPAN001R000 Modbus RTU (EIA-485) Interface for Panasonic and Sanyo air conditioners - User Manual (User Manual v2.8 EN), revision 2025-09, published free by Intesis (HMS Networks) at https://www.hms-networks.com/docs/default-source/products/intesis/manuals-and-guides---manuals/user-manual-inmbspan001r000.pdf.
More Intesis (HMS Networks) Modbus register maps
- Heat pump gateway (VRF / split AC gateway)
Intesis (HMS Networks) IN485MIT001A000 Mitsubishi Electric Ecodan air-to-water to Modbus RTU / BACnet MS/TP gateway
Intesis (HMS Networks) IN485MIT001A000 gateway on the CN105 socket of Mitsubishi Electric Ecodan air-to-water heat pumps, set to Modbus RTU, per user manual version 1.0.3 (2025-12-02).
Also known as: IN485MIT001A000, Ecodan Modbus, Mitsubishi Ecodan Modbus RTU, Intesis Ecodan, HMS Ecodan gateway - VRF / split AC gateway
Intesis (HMS Networks) INMBSDAI001I000 Daikin domestic AC to Modbus RTU gateway
Single Daikin domestic (S21-connector) indoor unit via INMBSDAI001I000, user manual v1.0.2.
Also known as: INMBSDAI001I000, Intesis Daikin domestic Modbus - VRF / split AC gateway
Intesis (HMS Networks) INMBSDAI001R000 Daikin VRV / Sky Air to Modbus RTU gateway
One Daikin VRV or Sky Air indoor unit (or group) on the P1P2 bus via INMBSDAI001R000, user manual v1.0.1.
Also known as: INMBSDAI001R000, Intesis Daikin VRV Modbus - VRF / split AC gateway
Intesis (HMS Networks) INMBSFGL001I000 Fujitsu domestic AC to Modbus RTU gateway
One Fujitsu domestic (RAC) or compatible VRF indoor unit, connected to the CN65/CN12/CN6 socket on the indoor board via INMBSFGL001I000, user manual v1.5 (01/2024).
Also known as: INMBSFGL001I000, FJ-AC-MBS-1, Intesis Fujitsu domestic Modbus - VRF / split AC gateway
Intesis (HMS Networks) INMBSFGL001R000 Fujitsu AC to Modbus RTU gateway
One Fujitsu indoor unit, or a group of up to 16 controlled together as one, on the 3-wire BWR remote-controller bus via INMBSFGL001R000, user manual v2.4 (02/2025).
Also known as: INMBSFGL001R000, Intesis Fujitsu Modbus - VRF / split AC gateway
Intesis (HMS Networks) INMBSHIT001R000 Hitachi AC to Modbus RTU gateway
Intesis (HMS Networks) INMBSHIT001R000 interface on the AB bus of one Hitachi commercial-line indoor unit (or group), per user manual v1.6 (01/2024).
Also known as: INMBSHIT001R000, Hitachi Modbus gateway, Intesis Hitachi - VRF / split AC gateway
Intesis (HMS Networks) INMBSLGE001R000 LG AC to Modbus RTU gateway
One LG indoor unit on the BYR (wired remote) bus via INMBSLGE001R000 (legacy code LG-RC-MBS-1), user manual v1.9 (01/2024).
Also known as: INMBSLGE001R000, LG-RC-MBS-1, Intesis LG Modbus - VRF / split AC gateway
Intesis (HMS Networks) INMBSMHI001R000 Mitsubishi Heavy Industries AC to Modbus RTU gateway
Mitsubishi Heavy Industries indoor units (one, or up to 16 controlled together as one) on the XY remote-controller bus, user manual r6.4 (01/2024).
Also known as: INMBSMHI001R000, MH-RC-MBS-1, Intesis Mitsubishi Heavy Industries Modbus, Intesis MHI Modbus - VRF / split AC gateway
Intesis (HMS Networks) INMBSMIT001I000 Mitsubishi Electric AC to Modbus RTU gateway
One Mitsubishi Electric Domestic, Mr. Slim or City Multi indoor unit via INMBSMIT001I000, user manual r2.8 (11/2024).
Also known as: INMBSMIT001I000, Intesis Mitsubishi Electric Modbus - Heat pump gateway (VRF / split AC gateway)
Intesis (HMS Networks) INMBSPAN001A100 Panasonic Aquarea H/J/K/L/M air-to-water to Modbus RTU gateway
Intesis (HMS Networks) INMBSPAN001A100 gateway connected to Panasonic Aquarea H, J, K, L and M series air-to-water heat pumps, per user manual version 1.0.2 (2026-02-04).
Also known as: INMBSPAN001A100, Aquarea Modbus, Panasonic Aquarea Modbus RTU, Intesis Aquarea, INMBSPAN001A000 (legacy order code) - VRF / split AC gateway
Intesis (HMS Networks) INMBSTOS001R000 Toshiba AC to Modbus RTU gateway
Toshiba Digital Inverter (RAV) and VRF indoor units on the AB remote bus via INMBSTOS001R0xx, user manual r2.9 (01/2024).
Also known as: INMBSTOS001R000, INMBSTOS001R0xx, Intesis Toshiba Modbus
Source: Intesis INMBSPAN001R000 Modbus RTU (EIA-485) Interface for Panasonic and Sanyo air conditioners - User Manual · User Manual v2.8 EN · rev. 2025-09. Register numbers, types, scaling and units are reproduced as published; descriptions are our own.