Energy meter · Modbus register map

Siemens SENTRON PAC2200 Modbus register map

Updated 16 October 2026

Short answer

DIN-rail three-phase power monitoring device sold in Modbus TCP, Modbus RTU and other interface variants, some with MID approval. Live values are IEEE floats and energy counters are IEEE doubles. This map covers voltages, currents, powers, frequency, status, demand and load-profile values, total and per-phase tariff energy, transformer and communication settings, and the command registers.

This page lists 146 Modbus registers for the Siemens SENTRON PAC2200 — 19 writable — with the table, 0-based wire address, data type, word order, scale, units and access of each, re-typed from Siemens’s own free documentation (linked below) and checked against it.

Manufacturer: Siemens
Model: SENTRON PAC2200
Equipment type: Energy meter
Registers: 146 (19 writable)
Transport: Modbus TCP, Modbus RTU
Default unit ID: 126
Default serial: 19200 baud, 8N2
TCP port: 502
Documented addressing: 0-based (the number printed is the address on the wire)
32-bit word order: ABCD high word first (big-endian)
Also known as: 7KM PAC2200
Source document: SENTRON 7KM Power Monitoring Device PAC2200 Equipment Manual · L1V30415167B-06 · rev. 2022-12

Download CSV all columns JSON Manufacturer PDF ↗

Integration notes: Siemens SENTRON PAC2200

Integration in brief

On TCP variants, give the meter an address (DHCP is on by default) and poll port 502; on RTU variants use address 126 at 19200 8N2 unless changed. Read floats from offset 1 and energy doubles from offset 801, high word first.

Minimum registers to map

Addresses are 0-based wire addresses. Enough to monitor and run the unit; map more as the job needs.

Register	Name	Type	Why	Access
HR 1	Voltage UL1-N	FLOAT32 ABCD	Voltage L1-N	Read
HR 13	Current L1	FLOAT32 ABCD	Current L1	Read
HR 55	Frequency	FLOAT32 ABCD	Frequency	Read
HR 65	Total active power	FLOAT32 ABCD	Total active power	Read
HR 801	Active energy import tariff 1	FLOAT64 ABCD	Active energy import tariff 1 (double)	Read
HR 205	Device diagnostics and device status	UINT32 ABCD	Device diagnostics and status	Read

Enable Modbus control & writes

Modbus is the device's built-in interface. Set the MODBUS TCP or MODBUS RTU parameters in the device settings menu. Write access over the bus can be blocked by password protection, the IP filter or hardware write protection, which is toggled only with the SW key.

Byte order & addressing

Offsets are wire addresses: offset 1 is requested as address 1 (40002 in 1-based tools).
Floats and doubles are big-endian, high word first.
Energy counters are 64-bit IEEE doubles in Wh/varh/VAh.

Network setup

RS485 factory settings: address 126, 19200 baud, 8N2, response time 0 ms.
Ethernet factory settings: DHCP ON, Modbus port 502 (0...65534 configurable), IP filter OFF, HTTP port 80.
With the IP filter on, write requests from outside the meter's subnet are rejected.

Watch out for

Exception code F0 means write protection is active.
Latched diagnostic bits in offset 205 stay set until acknowledged through offset 60007.
Enabling or disabling password protection must be confirmed with the SW key on the device within 15 minutes.

Siemens SENTRON PAC2200 Modbus registers

Address = 0-based wire address (the documented number is shown under it when it differs) · Order: ABCD = high word first, CDAB = low word first · Scale: engineering value = raw × scale.

146 of 146 shown

Siemens SENTRON PAC2200 Modbus register map
Table	Address	Name	Description	Type	Order	Units	Access	Values / bits
DI	108	Relevant parameter changes		BIT			Read	0 = Not active; 1 = Active
DI	110	Maximum pulse rate exceeded (stored)		BIT			Read	0 = Not active; 1 = Active
DI	111	Restart of the device		BIT			Read	0 = Not active; 1 = Active
DI	112	Resetting of energy counter by user		BIT			Read	0 = Not active; 1 = Active
DI	117	Maximum pulse rate exceeded		BIT			Read	0 = Not active; 1 = Active
DI	122	SNTP not synchronized		BIT			Read	0 = Not active; 1 = Active
DI	123	Wait for user action		BIT			Read	0 = Not active; 1 = Active
DI	124	No synchronization pulse		BIT			Read	0 = Not active; 1 = Active
DI	125	Device configuration menu is active		BIT			Read	0 = Not active; 1 = Active
DI	126	Voltage overload		BIT			Read	0 = Not active; 1 = Active
DI	127	Current overload		BIT			Read	0 = Not active; 1 = Active
DI	128	Date/time inaccurate		BIT			Read	0 = Not active; 1 = Active
DI	130	Hardware write-protected		BIT			Read	0 = Not active; 1 = Active
DI	131	Modbus communication write-protected		BIT			Read	0 = Not active; 1 = Active
DI	200	Digital input 0		BIT			Read	0 = Not active; 1 = Active
DI	300	Digital output 0		BIT			Read	0 = Not active; 1 = Active
HR	1	Voltage UL1-N	Phase-to-neutral voltage L1.	FLOAT32	ABCD	V	Read
HR	3	Voltage UL2-N		FLOAT32	ABCD	V	Read
HR	5	Voltage UL3-N		FLOAT32	ABCD	V	Read
HR	7	Voltage UL1-L2		FLOAT32	ABCD	V	Read
HR	9	Voltage UL2-L3		FLOAT32	ABCD	V	Read
HR	11	Voltage UL3-L1		FLOAT32	ABCD	V	Read
HR	13	Current L1	Phase current L1.	FLOAT32	ABCD	A	Read
HR	15	Current L2		FLOAT32	ABCD	A	Read
HR	17	Current L3		FLOAT32	ABCD	A	Read
HR	19	Apparent power L1		FLOAT32	ABCD	VA	Read
HR	21	Apparent power L2		FLOAT32	ABCD	VA	Read
HR	23	Apparent power L3		FLOAT32	ABCD	VA	Read
HR	25	Active power L1		FLOAT32	ABCD	W	Read
HR	27	Active power L2		FLOAT32	ABCD	W	Read
HR	29	Active power L3		FLOAT32	ABCD	W	Read
HR	31	Reactive power L1		FLOAT32	ABCD	var	Read
HR	33	Reactive power L2		FLOAT32	ABCD	var	Read
HR	35	Reactive power L3		FLOAT32	ABCD	var	Read
HR	37	Power factor L1		FLOAT32	ABCD		Read
HR	39	Power factor L2		FLOAT32	ABCD		Read
HR	41	Power factor L3		FLOAT32	ABCD		Read
HR	55	Frequency	Line frequency.	FLOAT32	ABCD	Hz	Read
HR	57	Average voltage UL-N		FLOAT32	ABCD	V	Read
HR	59	Average voltage UL-L		FLOAT32	ABCD	V	Read
HR	61	Average Current		FLOAT32	ABCD	A	Read
HR	63	Total apparent power		FLOAT32	ABCD	VA	Read
HR	65	Total active power	Sum of active power over all phases.	FLOAT32	ABCD	W	Read
HR	67	Total reactive power		FLOAT32	ABCD	var	Read
HR	69	Total power factor	Overall power factor.	FLOAT32	ABCD		Read
HR	71	Neutral Current		FLOAT32	ABCD	A	Read
HR	205	Device diagnostics and device status	Packed status bits; latched bits are cleared via offset 60007.	UINT32	ABCD		Read	bit 8 = Relevant parameter changes (latched, acknowledge); bit 10 = Maximum pulse rate exceeded (latched, acknowledge); bit 11 = Restart of the device (latched, acknowledge); bit 12 = Energy counter reset by user (latched, acknowledge); bit 17 = Maximum pulse rate exceeded; bit 22 = SNTP not synchronized; bit 23 = Waiting for user interaction; bit 24 = No synchronization pulse; bit 25 = Device configuration menu active; bit 26 = Voltage overload; bit 27 = Current overload; bit 29 = Update active; bit 30 = Hardware write protection active; bit 31 = Modbus communication write-protected
HR	207	Status of the digital outputs		UINT32	ABCD		Read	bit 0 = Output 0
HR	209	Status of the digital inputs		UINT32	ABCD		Read	bit 0 = Input 0
HR	211	Active tariff		UINT32	ABCD		Read	0 = Tariff 1; 1 = Tariff 2
HR	215	Universal counter	Writable to preset.	UINT32	ABCD		Read/write
HR	217	Relevant parameter changes counter		UINT32	ABCD		Read
HR	219	Counter all parameter changes		UINT32	ABCD		Read
HR	231	Configurable energy counter	Counter whose source is set by offset 50051.	FLOAT32	ABCD	kWh, kvarh	Read
HR	265	Daily profile counter		UINT32	ABCD		Read
HR	267	Monthly profile counter		UINT32	ABCD		Read
HR	269	Annual profile counter		UINT32	ABCD		Read
HR	501	Cumulated average active power import	Average active power import over the last completed period.	FLOAT32	ABCD	W	Read
HR	503	Cumulated average reactive power import		FLOAT32	ABCD	var	Read
HR	505	Cumulated average active power export		FLOAT32	ABCD	W	Read
HR	507	Cumulated average reactive power export		FLOAT32	ABCD	var	Read
HR	509	Maximum active power reading during the period		FLOAT32	ABCD	W	Read
HR	511	Minimum active power reading during the period		FLOAT32	ABCD	W	Read
HR	513	Maximum reactive power reading during the period		FLOAT32	ABCD	var	Read
HR	515	Minimum reactive power reading during the period		FLOAT32	ABCD	var	Read
HR	517	Length of the current measuring period	Length of the current measuring period.	UINT32	ABCD	s	Read
HR	519	Time Since Start of the active demand period		UINT32	ABCD	s	Read
HR	547	OID for the current period		UINT32	ABCD		Read
HR	549	Active energy - import current period		FLOAT32	ABCD	Wh	Read
HR	551	Reactive energy - import current period		FLOAT32	ABCD	varh	Read
HR	553	Active energy - export current period		FLOAT32	ABCD	Wh	Read
HR	555	Reactive energy - export current period		FLOAT32	ABCD	varh	Read
HR	557	Length of the load profile period		UINT32	ABCD	ms	Read
HR	559	Inform. flag bytes current period		UINT32	ABCD		Read
HR	561	Total active energy - import tariff 1, current period		FLOAT64	ABCD	Wh	Read
HR	565	Total active energy - import tariff 2, current period		FLOAT64	ABCD	Wh	Read
HR	569	Total reactive energy - import tariff 1, current period		FLOAT64	ABCD	varh	Read
HR	573	Total reactive energy - import tariff 2, current period		FLOAT64	ABCD	varh	Read
HR	577	Total active energy - export tariff 1, current period		FLOAT64	ABCD	Wh	Read
HR	581	Total active energy - export tariff 2, current period		FLOAT64	ABCD	Wh	Read
HR	585	Total reactive energy - export tariff 1, current period		FLOAT64	ABCD	varh	Read
HR	589	Total reactive energy - export tariff 2, current period		FLOAT64	ABCD	varh	Read
HR	597	Total active energy - export tariff 1 + 2, current period		FLOAT64	ABCD	Wh	Read
HR	801	Active energy import tariff 1	IEEE double; rolls over at 1.0e12 Wh.	FLOAT64	ABCD	Wh	Read
HR	805	Active energy import tariff 2		FLOAT64	ABCD	Wh	Read
HR	809	Active energy export tariff 1		FLOAT64	ABCD	Wh	Read
HR	813	Active energy export tariff 2		FLOAT64	ABCD	Wh	Read
HR	817	Reactive energy import tariff 1		FLOAT64	ABCD	varh	Read
HR	821	Reactive energy import tariff 2		FLOAT64	ABCD	varh	Read
HR	825	Reactive energy export tariff 1		FLOAT64	ABCD	varh	Read
HR	829	Reactive energy export tariff 2		FLOAT64	ABCD	varh	Read
HR	833	Apparent energy tariff 1		FLOAT64	ABCD	VAh	Read
HR	837	Apparent energy tariff 2		FLOAT64	ABCD	VAh	Read
HR	841	L1 active energy import tariff 1		FLOAT64	ABCD	Wh	Read
HR	845	L1 active energy import tariff 2		FLOAT64	ABCD	Wh	Read
HR	849	L1 active energy export tariff 1		FLOAT64	ABCD	Wh	Read
HR	853	L1 active energy export tariff 2		FLOAT64	ABCD	Wh	Read
HR	857	L1 reactive energy import tariff 1		FLOAT64	ABCD	varh	Read
HR	861	L1 reactive energy import tariff 2		FLOAT64	ABCD	varh	Read
HR	865	L1 reactive energy export tariff 1		FLOAT64	ABCD	varh	Read
HR	869	L1 reactive energy export tariff 2		FLOAT64	ABCD	varh	Read
HR	873	L1 apparent energy tariff 1		FLOAT64	ABCD	VAh	Read
HR	877	L1 apparent energy tariff 2		FLOAT64	ABCD	VAh	Read
HR	881	L2 active energy import tariff 1		FLOAT64	ABCD	Wh	Read
HR	885	L2 active energy import tariff 2		FLOAT64	ABCD	Wh	Read
HR	889	L2 active energy export tariff 1		FLOAT64	ABCD	Wh	Read
HR	893	L2 active energy export tariff 2		FLOAT64	ABCD	Wh	Read
HR	897	L2 reactive energy import tariff 1		FLOAT64	ABCD	varh	Read
HR	901	L2 reactive energy import tariff 2		FLOAT64	ABCD	varh	Read
HR	905	L2 reactive energy export tariff 1		FLOAT64	ABCD	varh	Read
HR	909	L2 reactive energy export tariff 2		FLOAT64	ABCD	varh	Read
HR	913	L2 apparent energy tariff 1		FLOAT64	ABCD	VAh	Read
HR	917	L2 apparent energy tariff 2		FLOAT64	ABCD	VAh	Read
HR	921	L3 active energy import tariff 1		FLOAT64	ABCD	Wh	Read
HR	925	L3 active energy import tariff 2		FLOAT64	ABCD	Wh	Read
HR	929	L3 active energy export tariff 1		FLOAT64	ABCD	Wh	Read
HR	933	L3 active energy export tariff 2		FLOAT64	ABCD	Wh	Read
HR	937	L3 reactive energy import tariff 1		FLOAT64	ABCD	varh	Read
HR	941	L3 reactive energy import tariff 2		FLOAT64	ABCD	varh	Read
HR	945	L3 reactive energy export tariff 1		FLOAT64	ABCD	varh	Read
HR	949	L3 reactive energy export tariff 2		FLOAT64	ABCD	varh	Read
HR	953	L3 apparent energy tariff 1		FLOAT64	ABCD	VAh	Read
HR	957	L3 apparent energy tariff 2		FLOAT64	ABCD	VAh	Read
HR	961	Secondary total of active energy - import (MID register)	Secondary total, as used for the MID register.	FLOAT64	ABCD	Wh	Read
HR	965	Secondary total of active energy - export (MID register)	Secondary total, as used for the MID register.	FLOAT64	ABCD	Wh	Read
HR	49999	Rated current display range	1...10000 A.	UINT32	ABCD	A	Read/write
HR	50001	Connection type		UINT32	ABCD		Read/write	0 = 3P4W; 4 = 1P2W
HR	50011	Primary current	5 A devices: 1...99999 A, writable. 65 A devices: fixed, read-only.	UINT32	ABCD	A	Read/write
HR	50013	Secondary current	5 A devices: 1 A or 5 A. 65 A devices: fixed, read-only.	UINT32	ABCD	A	Read/write
HR	50021	Load profile demand period	1, 2, 3, 4, 5, 6, 10, 12, 15, 20, 30 or 60 min.	UINT32	ABCD	min	Read
HR	50023	Synchronization		UINT32	ABCD		Read	0 = No synchronization; 1 = Synchronization via bus; 2 = Synchronization via digital input; 3 = Synchronization via internal clock
HR	60001	Device reset	Restarts the device; Modbus address is kept.	UINT16			Write
HR	60005	Load profile synchronization	Bus sync pulse; value is the period length.	UINT16		min	Write
HR	60006	Switching tariff		UINT16			Write	0 = Main tariff; 1 = Secondary tariff
HR	60007	Acknowledge diagnostics bits	Clears latched bits of offset 205; 0...FFFFh.	UINT16			Write
HR	60009	Switching command for vector group	High byte = group 0...99, low byte 1 = ON, 0 = OFF.	UINT16			Write
HR	62991	DHCP ON/OFF	Reads/writes 0 or 1; the register table does not say which value is ON.	UINT32	ABCD		Read/write
HR	63001	IP address	IPv4 address packed into 32 bits.	UINT32	ABCD		Read/write
HR	63003	Subnet mask		UINT32	ABCD		Read/write
HR	63005	Gateway		UINT32	ABCD		Read/write
HR	63009	Password protection ON/OFF	Reads 0 or 1; the register table does not say which value is ON.	UINT32	ABCD		Read
HR	63135	MODBUS RTU address	1...247; RS485 variants only.	UINT32	ABCD		Read/write
HR	63137	MODBUS RTU baud rate	RS485 variants only.	UINT32	ABCD		Read/write	0 = 4800; 1 = 9600; 2 = 19200; 3 = 38400; 4 = 57600; 5 = 115200
HR	63139	MODBUS RTU data bits / parity / stop bits	RS485 variants only.	UINT32	ABCD		Read/write	0 = 8N2; 1 = 8E1; 2 = 8O1; 3 = 8N1
HR	63141	MODBUS RTU response time	0...255 ms; RS485 variants only.	UINT32	ABCD	ms	Read/write
HR	65290	Hardware write protection ON/OFF	Write with FC 0x10; takes effect only after pressing SW on the device.	UINT32	ABCD		Read/write	0 = ON; 1 = OFF

Notes on this map

The register tables do not name a word order. We record ABCD (high word first) on PAC2200-specific evidence from its own manual: the Modbus FC 0x64 example frames (Appendix A.1, pp. 125-127) transmit unsigned longs (stated as big endian), floats and doubles most-significant byte first, e.g. a Wh double as 41 41 B4 EB 44 67 2E 00, and the FC 0x03 status structure at offset 205 puts byte 0 at mask 0x01000000. The FC 0x03 register order itself is not printed, so confirm with a known reading on site. The same order is confirmed for the PAC3200 by Siemens examples 40614428.
Addressing sources (PAC3200 examples): https://cache.industry.siemens.com/dl/files/428/40614428/att_923701/v2/40614428_Set22_DOC_v14_en.pdf ; https://cache.industry.siemens.com/dl/files/762/109779762/att_1028292/v1/109779762_LOGO_ModbusTCP_DOC_en.pdf ; S7-1200 library description: https://cache.industry.siemens.com/dl/files/428/40614428/att_15029/v1/40614428_librarydescription_s7-1200_modbustcp_v1d0_en.pdf
Factory settings: RTU variants use address 126, 19200 baud, 8N2, response time 0 ms; TCP variants ship with DHCP on and Modbus port 502.
Measured variables answer to FC 0x03 and FC 0x04 and are listed as holding registers. Commands 60001-60009 use FC 0x06; register 65290 uses FC 0x10.
Bits of the 32-bit status words use the bit number of the whole value (bit 0 = mask 0x00000001, bit 24 = mask 0x01000000).
The float copies of the energy counters (2801-2883) are omitted: several rows print units that contradict the name (active energy in varh, reactive in Wh).
Offset 593 is omitted: it is named active energy but printed with unit varh.
Offsets 545 and 799 (Unix time stamps), 60010 (format and length disagree), the FC 0x14 aggregation file block (30001+) and the FC 0x64 log readout are omitted.
Discrete input 129 is printed twice with two names (device/firmware update); it is left out. The manual marks discrete inputs 108-112 as RW, but FC 0x02 is read-only, so they are listed as read-only.
Register 60000 (reset to factory settings) exists but is deliberately not listed.
Registers 50011/50013 are writable only on 5 A devices; on 65 A devices they are read-only.
Offset 60008 (switching outputs) is omitted: its printed range (0FFh...1FFh) contradicts its byte description (byte 0 = 0 for output 0.0), so the command word cannot be built with certainty.
Offset 50147 (digital output timeout) is omitted: the two settings tables give different ranges (1...18000 s and 0.1...18000), which leaves its scaling uncertain. The function exists: an output switched over Modbus resets after the timeout; 0 disables it.
Registers 62991 (DHCP) and 63009 (password protection) are listed with range 0/1 only; the register table does not map the values to ON/OFF.

Check it against the live device. A register map tells you what the controller can expose; the unit in front of you may differ by firmware or options. Read a few registers and compare them with the unit’s own display; for a 32-bit value the float and byte-order decoder shows all four word orders at once, so a wrong word order or scale is obvious. New to this? Read what a register map is and why addresses are off by one.

Questions about the Siemens SENTRON PAC2200

What Modbus registers does the Siemens SENTRON PAC2200 have?

This map lists 146 registers: 16 discrete inputs, 130 holding registers. 19 of them can be written. Registers vary with firmware, options and configuration, so confirm against the device.

Are the Siemens SENTRON PAC2200 Modbus addresses 0-based or 1-based?

The manufacturer's document numbers registers 0-based (the number printed is the address on the wire). Every address on this page is the 0-based wire address you put in the request; the documented number is shown under it where it differs. Siemens lists every value by its register 'offset', which is the 0-based address sent in the request. Offset 1 (voltage L1-N) is requested as address 1, which a 1-based tool shows as 40002. The PAC2200 manual does not state this itself; it uses the same offset scheme and the same measured-value offsets as the PAC3200, for which two official Siemens application examples confirm it: entry 40614428 (Set 22, Table 3-12: offset 65 read at S7 MB_CLIENT address 40001 + 65) and entry 109779762 (LOGO! example, p. 13: offset 1 entered as LOGO! register 2).

What byte order does the Siemens SENTRON PAC2200 use for 32-bit values?

Multi-register values in this map use ABCD (high word first (big-endian)). Set your client to this order for every 32/64-bit value in the table.

What are the minimum Modbus registers to integrate the Siemens SENTRON PAC2200?

Start with HR 1 Voltage UL1-N (Voltage L1-N); HR 13 Current L1 (Current L1); HR 55 Frequency (Frequency); HR 65 Total active power (Total active power); HR 801 Active energy import tariff 1 (Active energy import tariff 1 (double)); HR 205 Device diagnostics and device status (Device diagnostics and status).

How do I enable Modbus control of the Siemens SENTRON PAC2200?

Where is the official Siemens SENTRON PAC2200 Modbus documentation?

The source is SENTRON 7KM Power Monitoring Device PAC2200 Equipment Manual (L1V30415167B-06), revision 2022-12, published free by Siemens at https://cache.industry.siemens.com/dl/files/835/109746835/att_1123515/v2/MAN_L1V30415167B-06_en_en-US.pdf.

More Siemens Modbus register maps

Source: SENTRON 7KM Power Monitoring Device PAC2200 Equipment Manual · L1V30415167B-06 · rev. 2022-12. Register numbers, types, scaling and units are reproduced as published; descriptions are our own.

Siemens SENTRON PAC2200 Modbus register map

Integration notes: Siemens SENTRON PAC2200

Minimum registers to map

Enable Modbus control & writes

Byte order & addressing

Network setup

Watch out for

Siemens SENTRON PAC2200 Modbus registers

Notes on this map

Questions about the Siemens SENTRON PAC2200

More Siemens Modbus register maps

Siemens SENTRON PAC3200

Siemens SINAMICS G120 / G120C (Modbus RTU)

Siemens SINAMICS V20 inverter (Modbus RTU)

Siemens VersiCharge AC series wallbox (Modbus map)