Various types of cookies are used on our website (and on all other digital platforms including mobile applications). View our new THE INFORMATIVE TEXT ON LPPD AND PRIVACY here. Google Analytics Analytical cookies help us to improve our website by collecting and reporting information on its usage. Advertising (Google Ads, LinkedIn) and Remarketing We use marketing cookies to help us improve the relevancy of advertising campaigns you receive.
I have read the above articles
The TLM Series LoRa RF Modems build a private radio network between Ethernet devices and RS232 / RS485 serial devices. Two or more modems exchange data over LoRa; each modem connects the radio network to its own Ethernet port or serial port. The data passes unchanged, so any protocol can be carried. For Modbus the modem can also convert between Modbus TCP and Modbus RTU.
All settings are made in the embedded web interface. The same interface shows a health summary, the traffic and counters of the modem, lists the other modems it hears, and offers a remote ping, a link test and remote node information for installation (chapter 11 "LoRa Network Discovery"). This manual describes firmware 3.00.01; what changes for a modem with firmware 3.00.00 is listed in 16.3 "Updating from 3.00.00".

NOTE:
Upgrading a modem from firmware 2.x resets its settings to the factory values. Read 16.4 "Upgrading from 2.x" before you upgrade.
| Model | Radio band | BPL link | Power input |
| TLM154 | 868 MHz | No | 5 - 48 V DC (60 V maximum) |
| TLM254 | 868 MHz | No | 100 - 240 V AC (120 - 370 V DC), 50 / 60 Hz |
| TLM655 | 868 MHz | Yes | Three-phase AC, 110 - 240 V, 50 / 60 Hz, or 9 - 36 V DC |
| TLM194 | 2.4 GHz | No | 5 - 48 V DC (60 V maximum) |
| TLM294 | 2.4 GHz | No | 100 - 240 V AC (120 - 370 V DC), 50 / 60 Hz |
| TLM695 | 2.4 GHz | Yes | Three-phase AC, 110 - 240 V, 50 / 60 Hz, or 9 - 36 V DC |
All models have two 10/100Base-T(X) Ethernet ports, one RS232 port and one RS485 port. TLM154 and TLM254 differ in the power input and the operating temperature range (-25 to +70 C for the AC versions, -40 to +85 C for the DC versions), and so do TLM194 and TLM294. TLM655 and TLM695 add a BPL (Broadband Power Line) link that carries Ethernet over the power line (chapter 7 "System Comparison Between CAT5 and BPL Links"). The power inputs and ports are described in chapter 2 "Hardware Features"; chapter 19 "Ordering Information" and chapter 20 "Product Selection" list the order codes.

NOTE:
The firmware differs by radio band and by BPL. The 868 MHz and 2.4 GHz models show different choices on the LoRa Settings page (see the table below), and only TLM655 and TLM695 show BPL Operating Mode on the Network Settings page.

Each modem has one Device Function, chosen on the Operating Mode page. The usual combinations are shown in chapter 9 "Usage Scenarios and Connection Diagrams".
| Device Function | In one sentence |
| LoRa to TCP/UDP Server Gateway | Waits for up to 10 TCP clients (for example a SCADA or a PC program) and passes data between them and the radio network. |
| LoRa to TCP/UDP Client Gateway | Connects by itself to up to 10 TCP or UDP devices and passes data between them and the radio network. |
| LoRa to SERIAL Device Gateway | Passes data between an RS232 or RS485 device and the radio network, optionally with Modbus TCP to RTU conversion, Modbus RTU master to TCP conversion or IEC 62056-21 Mode C baud switching. |
| LoRa Repeater | Receives the LoRa packets addressed to it (or broadcast) and sends them again to its own Tx Group Address / Tx Device Address, to extend the distance between modems that cannot hear each other. A packet it has just repeated is not repeated twice. |
| 868 MHz models (TLM154, TLM254, TLM655) | 2.4 GHz models (TLM194, TLM294, TLM695) | |
| RF Carrier Frequency (Hz) | 863 062 500 to 869 937 500 Hz | 2 402 000 137 to 2 479 999 939 Hz |
| Modulation | LoRa or FSK | LoRa or FLRC |
| LoRa Signal Bandwidth | 125, 250 or 500 kHz | 200, 400, 800 or 1600 kHz |
| LoRa Spreading Factor | SF7 to SF12 | SF5 to SF12 |
| Radio Power Level | 5 to 20 dBm | -18 to 13 dBm |
| User data per LoRa packet | 229 bytes | 109 bytes |
| Listen Before Talk (LBT) | Offered | Not offered |
A longer message is sent as several packets. All modems of one network must use the same radio settings and, if AES Encryption/Decryption Enabled is used, the same 128-bit Encryption Key. The modems are addressed by a group and a device address on the LoRa Settings page (10.6 "LoRa Settings").

NOTE:
The distance that can be bridged depends on the antennas, their height, the terrain and the radio settings. Check each link on site with the link test on the LoRa Status page (11.4 "Link Test").
The TLM Series LoRa RF Modems are built in versions without and with a BPL (Broadband Power Line) link. TLM154, TLM254, TLM194 and TLM294 have Ethernet, serial and LoRa radio; TLM655 and TLM695 add the BPL link.
| 868 MHz models (TLM154, TLM254, TLM655) | 2.4 GHz models (TLM194, TLM294, TLM695) | |
| Frequency range | 863.0625 to 869.9375 MHz | 2402.000137 to 2479.999939 MHz |
| Modulation | LoRa or FSK | LoRa or FLRC |
| LoRa bandwidth | 125, 250, 500 kHz | 200, 400, 800, 1600 kHz |
| LoRa spreading factor | SF7 to SF12 | SF5 to SF12 |
| Transmit power | 5 to 20 dBm | -18 to 13 dBm |
| Sensitivity | down to -138 dBm | down to -130 dBm |
| Link budget | up to 156 dB | up to 142 dB |
| Communication distance | up to 15 km line of sight | more than 12 km line of sight |
| Certification | Radio module pre-certified according to EN 300 220 | Radio module pre-certified according to EN 300 328 |
| Value | |
| Ports | 2 x 10/100Base-T(X), RJ-45, on a built-in switch |
| Standards | IEEE 802.3 (10Base-T), IEEE 802.3u (100Base-TX), IEEE 802.3x flow control |
| MAC table | 1K entries |
| Processing | Store-and-forward |
| Packet buffer | 448 kbit |
| Value | |
| PHY rate | up to 30 Mbps |
| Band | 2 to 28 MHz, up to 432 sub-carriers |
| Modulation | OFDM |
| MAC protocol | CSMA/CA |
| Error correction / encryption | LDPC-C FEC, 128-bit AES |
| Network size | up to 10 hops, 1000 nodes |
| VLAN | IEEE 802.1Q, IEEE 802.1p |
| Models | Input | Notes |
| TLM154, TLM194 | 5 - 48 V DC (60 V maximum) | Reverse polarity protection, thermal shutdown and current limit |
| TLM254, TLM294 | 100 - 240 V AC (120 - 370 V DC), 50 / 60 Hz | Isolation more than 4200 Vrms (5 mA, 1 min), insulation class II |
| TLM655, TLM695 | Three-phase AC, 110 - 240 V, 50 / 60 Hz, or 9 - 36 V DC (DC version) | Power on the terminals L1 and N, see chapter 5 "Top Panel Description" |
| DC models (TLM154, TLM194) | AC models (TLM254, TLM294) | BPL models (TLM655, TLM695) | |
| Enclosure | Metal, IP40 | Metal, IP40 | Metal, IP40 |
| Dimensions (w x d x h) | 43 x 95 x 124 mm | 43 x 95 x 124 mm | 43 x 95 x 124 mm |
| Weight | about 400 g | about 400 g | about 400 g |
| Operating temperature | -40 to +85 C | -25 to +70 C | -25 to +70 C (AC versions), -40 to +85 C (DC version) |
| Storage temperature | -65 to +150 C | -40 to +85 C | -65 to +150 C |
| Operating humidity | 5 to 95 %, non-condensing | 10 to 95 %, non-condensing | 5 to 95 %, non-condensing |
| Mounting | DIN rail | DIN rail | DIN rail |
Every modem has a DIN rail kit on its rear panel.


Then connect the antenna, the Ethernet and serial cables and the power input as described in chapter 4 "Front Panel Description" and chapter 5 "Top Panel Description". All settings are made in the web interface (chapter 10 "Configuration via Web Interface").


The front panel of the BPL models has the same connectors and LEDs as above, plus three BPL LEDs. The SMA antenna connector is female on TLM655 (868 MHz) and male on TLM695 (2.4 GHz).
| LED | Meaning |
| Power | On while the modem is powered (top panel). |
| Console Tx / Rx | Blink while data passes over the console port. |
| LoRa ALIVE | Blinks during normal operation of the radio module. |
| LoRa Tx / Rx | Blink when the radio sends or receives a packet. |
| STATUS | Blinks (once per second) after power-up. Server and client gateway: blinks while no TCP connection is open, on while a TCP connection is open. Serial gateway and repeater: on. |
| Device Tx / Rx | Flash when the modem sends or receives data on the Ethernet side, on the serial line or to and from its radio module, so they also flash with every radio packet. A short Tx and Rx flash about once a second without any traffic is normal: the modem polls its radio module. |
| SERVER | On when Device Function is LoRa to TCP/UDP Server Gateway, off for every other device function. It is set when the modem starts. |
| Ethernet port 1 / port 2 / device | Blink with Ethernet activity on that port. |
| BPL ACTIVITY / LINK / MASTER | TLM655 and TLM695 only, see above. |

NOTE:
In these cases the STATUS LED keeps blinking although the modem works normally: in the server gateway when Enable Modbus Unit ID to Target Device Matching List is on, or while only UDP peers are served; in the client gateway when all its targets are UDP targets.

NOTE:
The console port prints the log only when Log Level is not NONE and Log Output is CONSOLE; the factory default is NONE, so a new modem prints nothing there. Open the port with 115200 baud, 8 data bits, no parity, 1 stop bit. See chapter 18 "Logs and Troubleshooting".

WARNING:
Changing Log Level or Log Output with Change Log Level and Reboot restarts the modem.



The terminals are marked L3, L2, L1 and N. The modem is powered over L1 and N only; L2 and L3 are data terminals. The order of the terminals on the panel is not the same on every hardware version: connect by the marks, not by the position. The AC versions take 110 - 240 V, 50 / 60 Hz; the DC version takes 9 - 36 V DC.
| Version | Power | BPL data |
| P-N (phase to neutral, standard version) | Phase on L1, neutral on N | Over L1 and N as well; L2 and L3 are optional. Example: the master is connected to all phases, the nodes to their own phase. |
| P-P (phase to phase) | Phase on L1, neutral on N | Only over L2 and L3. Connect two phases there for the best performance; if no second phase is available, phase and neutral can be used. |
| DC | 9 - 36 V DC on the two power terminals | Only over the two data terminals, as the P-P version. |
The AC powered version is made with the P-N or the P-P data connection, the DC powered version with the P-P data connection. The order codes are listed in chapter 19 "Ordering Information".
The two buttons are marked RESET TO SERVER and RESET TO CLIENT. With firmware 3.00.01 both do the same: held for more than 5 seconds while the modem is running, either one restores all settings to the factory values and restarts the modem.

WARNING:
A reset with the buttons erases every setting, including the network settings, the web password and the LoRa radio settings (frequency, addresses, AES encryption): after the reset the modem no longer reaches the rest of its LoRa network until those are set again. After the restart the modem is a LoRa to TCP/UDP Server Gateway (also after RESET TO CLIENT) and asks for its address by DHCP; without a DHCP server it uses 192.168.1.1 / 255.255.255.0. Keep a copy of the settings with Download Current Configuration on the Management page.

NOTE:
The same factory reset can be started from the web interface with Restore Factory Configuration on the Management page; Reboot Device there only restarts the modem. See 10.9 "Management".
The modem has two standard 10/100Base-T(X) Ethernet ports with RJ-45 connectors. Use Cat. 3, 4, 5 or 5e UTP cables to connect PCs, servers, switches or routers.
The two ports belong to a small Ethernet switch inside the modem; the modem itself is connected to that switch. Either port can be used, and the second port can connect a further Ethernet device. Because the modem sits behind the switch, it does not notice when a cable is unplugged from a port.
| Cable | Type | Maximum length | Connector |
| 10BASE-T | Cat. 3, 4, 5, 100 ohm UTP | 100 m (328 ft) | RJ-45 |
| 100BASE-TX | Cat. 5, 100 ohm UTP | 100 m (328 ft) | RJ-45 |
With 100BASE-TX and 10BASE-T, pins 1 and 2 transmit data and pins 3 and 6 receive data.
| Pin | Signal |
| 1 | TD+ |
| 2 | TD- |
| 3 | RD+ |
| 4 | Not used |
| 5 | Not used |
| 6 | RD- |
| 7 | Not used |
| 8 | Not used |
TLM655 and TLM695 carry Ethernet over the low voltage power line. Devices on the power line network talk TCP/IP to each other as over a cable, without new cabling. The only setting is BPL Operating Mode on the Network Settings page: MASTER or NODE (factory default: NODE). The modem applies it to its BPL link when it starts, so a new setting takes effect after the modem is restarted (10.9 "Management").

NOTE:
BPL Operating Mode shows the stored value only after the BPL link has confirmed it; until then the field shows NODE. Check the field before you save the Network Settings page, otherwise a modem set to MASTER is saved as NODE.
Set one modem of a power line network to MASTER and all others to NODE.
| CAT5 based system | BPL link based system | |
| Media | CAT5 cable | Power line |
| Bandwidth | 100 Mbps | Up to 30 Mbps |
| New cabling | Yes | No, the existing power line is used |
| Span | Less than 100 m | Less than 600 m |
| Multiple nodes | - | Up to 10 hops / 1000 nodes |
| Encryption | Yes, but difficult to configure | Yes, plug and play |
| Installation | Difficult | Easy, uses the power line |
| Installation cost | High | Low |
| Total cost | High | Low |

NOTE:
The power and data connections of the BPL models (P-N, P-P and DC versions) are described in chapter 5 "Top Panel Description".

WARNING:
Connect a TLM655 or TLM695 to a network over one path only: over the power line or over an Ethernet cable. If it reaches the same network over both, the network has a loop and packets are lost or delayed.
The modem has one RS232 port and one RS485 port on a 5 pin terminal block. They connect serial devices such as RTUs, PLCs and energy meters.
| Contact (from the top) | Port | |
| 1 | A | RS485 |
| 2 | B | RS485 |
| 3 | GND | RS485 and RS232 |
| 4 | RX | RS232 |
| 5 | TX | RS232 |
Only one of the two ports works at a time: tick Enable RS232 or Enable RS485 on the Serial Settings page (the page always keeps exactly one of them ticked) and choose Baud rate (300 to 460800) and Line Control (8_NONE_1, 9_NONE_1, 8_EVEN_1, 8_EVEN_2, 8_ODD_1, 8_ODD_2, 8_NONE_2, 9_NONE_2, and 7_EVEN_1 when no Modbus conversion is enabled). The serial port is used only when Device Function is LoRa to SERIAL Device Gateway; in every other function both ports are off and the Serial Settings page does not appear in the menu. If that function is saved with neither port enabled, the modem enables RS485 with 19200 baud and 8_NONE_1. A new serial setting takes effect after the modem is restarted (10.9 "Management").

3 wire RS232 connection: TX, RX and GND. TX is the modem's output and RX its input: connect TX of the modem to RX of the device, RX of the modem to TX of the device, and GND to GND. The picture numbers the RS232 pins 1 to 3; they are contacts 3 to 5 of the terminal block.
| Pin | Contact (from the top) | Signal |
| 1 | 3 | GND |
| 2 | 4 | RX |
| 3 | 5 | TX |
2 wire RS485 connection (A, B) and GND. The modem switches the RS485 line between sending and receiving itself.
| Pin | Signal |
| 1 | A |
| 2 | B |
| 3 | GND (recommended) |
A TLM network is built from two or more modems that talk to each other over LoRa. Each modem has one Device Function, chosen on the Operating Mode page; the function decides what the modem does with its Ethernet or serial side. The scenarios below show the usual combinations. They are examples - any TCP/IP or RS232 / RS485 device can be connected in the same way.
| Device Function | Gateway side | What the modem does |
| LoRa to TCP/UDP Server Gateway | Ethernet | Waits for TCP clients (up to 10) on its Server Listening Port. Data from the clients is sent over LoRa; data received over LoRa is passed to the connected clients. |
| LoRa to TCP/UDP Client Gateway | Ethernet | Connects by itself to up to 10 target devices (TCP or UDP) listed in TCP/UDP Client Settings. Data received over LoRa goes to every enabled target that is connected (TCP) or ready (UDP) at that moment; the other targets do not get it. Data from the targets is sent over LoRa. |
| LoRa to SERIAL Device Gateway | RS232 or RS485 | Passes serial data to LoRa and back. Optional: Modbus TCP to RTU conversion, Modbus RTU master to TCP conversion, IEC 62056-21 Mode C baud switching. |
| LoRa Repeater | None | Sends every LoRa data packet it receives again over LoRa, to its own target address. |
Every modem has its own address (Group Own Address and Device Own Address) and a target address (Tx Group Address and Tx Device Address) on the LoRa Settings page. Data from the gateway side is sent to the target address, unless one of the matching lists described below or Reply only to sender names another target. Tx Device Address 65535 means all devices of the target group. A factory modem has the own address group 1 / device 1 and the target group 1 / device 65535.
A modem receives the packets sent to its own group and device address and the packets sent to device 65535 of its group. All modems of one network must use the same radio settings (frequency, modulation, bandwidth, spreading factor, error coding) and, if AES encryption is used, the same key.
One LoRa packet carries at most 229 bytes of user data on the 868 MHz models (TLM154, TLM254, TLM655) and 109 bytes on the 2.4 GHz models (TLM194, TLM294, TLM695). In the transparent functions the modem closes a message after a pause in the incoming data (Idle Timeout (ms, 0=off), 100 ms from the factory), at Max Length (0=off) or at the Delimiter Enable character - and at the packet size at the latest. Modbus frames and UDP datagrams longer than one packet are sent as several packets.

NOTE:
A message received over LoRa is held for each connected TCP client in a slot of 512 bytes. If all connected clients are still busy with the previous message, the new message waits in the queue. If at least one client is free, the message goes to the free clients and is dropped for the busy ones. UDP output does not join packets again: a payload longer than one LoRa packet reaches the UDP receiver as several datagrams.

WARNING:
After you save a new Device Function, or switch a conversion option, a matching list, Reply only to sender or Mode C baud switching on or off, the modem keeps working with its old settings until it restarts; its traffic is not stopped. The message after saving lists which settings work at once and which only after a restart. Restart the modem with Reboot Device on the Management page or switch it off and on.
An application on the central side (a SCADA, a PC program, a PLC with a TCP client) reaches a TCP device in the field. Modem A next to the application works as LoRa to TCP/UDP Server Gateway; modem B next to the field device works as LoRa to TCP/UDP Client Gateway and connects to the field device itself.

| Modem | Device Function | Gateway side settings | LoRa addresses (example) |
| A (central) | LoRa to TCP/UDP Server Gateway | Server Listening Port (502 from the factory); Maximum Number of Clients up to 10. The application connects to the IP address of A at this port. | Own 1 / 1, target 1 / 2 |
| B (field) | LoRa to TCP/UDP Client Gateway | Target IP and Target Port of the field device, Enable checked. | Own 1 / 2, target 1 / 1 |
Point to multipoint: set the Tx Device Address of A to 65535 and give every field modem its own device address. Each request then reaches all field modems, so the protocol itself must make sure that only the addressed device answers (for example by the Modbus Unit ID).

NOTE:
Before B connects to a target it checks the target with a ping. A target that does not answer a ping (or a router that blocks it) is shown as HOST UNREACHABLE and is not connected. With UDP Enable (server mode) on A, A also receives UDP datagrams on its UDP Listen Port (5001 from the factory), and every UDP sender takes one of the Maximum Number of Clients places; a UDP sender that stays silent for 5 minutes frees its place. With Maximum Number of Clients 1, the first UDP datagram takes the only place: no TCP client can connect until that UDP sender has been silent for 5 minutes.
RS232 or RS485 devices exchange data over LoRa. Every modem that has a serial device works as LoRa to SERIAL Device Gateway with Enable RS232 or Enable RS485, Baud rate and Line Control set like the device. The central side can also be a TCP application on a LoRa to TCP/UDP Server Gateway modem - the data is the same byte stream.

A Modbus TCP master (SCADA, HMI) reads Modbus RTU slaves in the field. Modem A next to the master works as LoRa to TCP/UDP Server Gateway and passes the Modbus TCP frames unchanged. The field modems work as LoRa to SERIAL Device Gateway with Enable Modbus TCP to RTU Conversion and convert between Modbus TCP and Modbus RTU on their serial line.


NOTE:
If A sends to 65535 and several field modems receive the request, every modem whose slaves do not answer produces its own exception 0x0B when Exception (0x0B) Enable is checked. Use the exception only when each request reaches a single field modem - for example with the routing by Unit ID described next.

NOTE:
The field modem finds the end of an answer from its function code: by the byte count for the function codes 1, 2, 3, 4, 12, 17, 20, 21 and 23 (24: by its two-byte count), as a fixed answer of 8 bytes for 5, 6, 11, 15 and 16, of 10 bytes for 22 and of 5 bytes for 7 and for an exception answer. For function codes without a length field (for example 8 and 43) the answer ends when the serial line has been silent for 35 ms. Every answer must pass the CRC check.
Modem A next to the Modbus TCP master sends each request only to the field modem that serves the addressed slave. A works as LoRa to TCP/UDP Server Gateway with Enable Modbus Unit ID to Target Device Matching List. Its Server Listening Port then serves Modbus TCP requests instead of transparent data. With the option checked the page hides UDP Enable (server mode), Maximum Number of Clients and Data Packing, and shows the Modbus Routing Table (Modbus ID to LoRa target) and the Modbus Response Timeout card. The field modems are set up as in the previous scenario.

| Column | Meaning |
| Modbus ID Range From, Modbus ID Range To | Range of Unit IDs (0 to 255, both ends included). For one slave set both to the same value. |
| Group Address, Device Address | LoRa address of the field modem that serves this range. |
| Enable | Only enabled rows are used. The first enabled row whose range contains the Unit ID wins. |
A field modem can also work as LoRa to TCP/UDP Client Gateway connected to a Modbus TCP slave: it passes the request unchanged to its target and the answer back to A, and A returns it to the master. Enable only one target on that modem and set its Tx Group Address and Tx Device Address to the address of A. The first request after a start can take several seconds longer while the field modem opens the connection to its target (about 7 seconds in our measurement); after that a read of 5 registers took about 1.1 seconds at the factory radio settings.

NOTE:
This list and Enable TCP Socket to Target Device Matching List exclude each other: checking one clears the other. At least one row must stay enabled (At least one routing line must be enabled!). The Buffer Status line of the LoRa Status page counts the routed requests and their timeouts.
A Modbus RTU master on a serial line (a PLC, an HMI, a data logger) reads slaves that sit behind other modems. Modem A next to the master works as LoRa to SERIAL Device Gateway with Enable Modbus RTU Master to TCP Conversion and uses the same Modbus Routing Table (Modbus ID to LoRa target) as the routing by Unit ID.


NOTE:
If the master repeats a request before the answer has arrived, the new request replaces the old one. This option excludes Enable Modbus TCP to RTU Conversion and Mode C baud switching on the same modem.
Several applications on the central side each talk to their own field device, with a protocol that has no address of its own. Modem A works as LoRa to TCP/UDP Server Gateway with Enable TCP Socket to Target Device Matching List. Every row of the TCP Socket to Target Remote Device List opens its own listening TCP port and belongs to one LoRa target.

| Column | Meaning |
| TCP Port | Listening port of this row (factory 5001 to 5010). The application connects to A at this port. |
| Target Group Address, Target Device Address | LoRa address that receives the data of this port (factory group 1, devices 11 to 20). |

NOTE:
If a row uses another group than the Group Own Address of A, the page shows a yellow GROUP MISMATCH band: answers from that group only come back if the field modem is set up for it. The list works only with the server function; with any other function it is switched off when the settings are saved.
A modem in the middle extends the distance between two modems that cannot hear each other. The middle modem R works as LoRa Repeater; it has no Ethernet or serial function.


NOTE:
R has one target address (Tx Group Address / Tx Device Address) for both directions. Plan the addresses so that requests and answers both reach their destination.
Two LoRa networks far apart exchange data over a LAN or WAN. Modem A in network 1 works as LoRa to TCP/UDP Server Gateway; modem B in network 2 works as LoRa to TCP/UDP Client Gateway with the IP address of A as Target IP and the Server Listening Port of A as Target Port.

A meter reading program on the central side reads electricity meters through an optical probe or a serial meter port. Modem A next to the program works as LoRa to TCP/UDP Server Gateway; modem B at the meter works as LoRa to SERIAL Device Gateway with Enable IEC 62056-21 Mode C Baud Switching. B follows the Mode C handshake and changes its serial baud rate to the speed the meter offers.


NOTE:
The sign-on request and the acknowledgement must each reach B as one LoRa message; the idle timeout of Data Packing on A normally ensures this. Keep the delimiter rule off for meter reading: with it on, every line of the readout becomes a separate radio message. Mode C works only with plain transparent serial and cannot be combined with the Modbus options.
All settings of the modem are made with a web browser over the Ethernet port. Every page of the interface is protected by a user name and a password.
A factory modem asks for its address by DHCP: Use Static Address for Device and DHCP Server Enabled are both off. The stored address fields are used as the fall-back address:
| Setting | Factory default |
| Use Static Address for Device | Off (address by DHCP) |
| DHCP Server Enabled | Off |
| Server IP Address | 192.168.1.1 |
| Server Net Mask | 255.255.255.0 |
| Server Gateway Address | 192.168.1.1 |
If no DHCP server answers, the modem uses the stored address as its fall-back address. In this state it has no gateway: Server Gateway Address is the gateway of the modem only with a static address (as DHCP server the modem uses its own address as gateway and hands the field to its clients), so the modem can then be reached only from its own network. With the factory address 192.168.1.1 and the cable connected it waits up to one minute for a DHCP answer before its data services start on the fall-back address. With another stored Server IP Address the data services start on that address without this wait.

NOTE:
A modem that started on the fall-back address and receives a DHCP address later restarts once by itself and then works with the new address. The same happens when the DHCP server hands out a different address.
| Situation | What to do |
| Network with a DHCP server | Connect the modem, then find its address with the abcZ Network Tool (below). The modem is identified by its MAC address. The address can also be looked up in the lease list of the DHCP server: the modem reports the Device Name as its host name, in upper case, cut to 15 characters, and with every character other than letters, digits, - and . replaced by x: the factory name appears as LORAxLMxSERVER. The MAC address of the modem is also shown in the header of every web page. |
| No DHCP server (for example a direct cable to a PC) | Give the PC a fixed address in the network 192.168.1.x (not 192.168.1.1) and open 192.168.1.1. If the modem stays on a direct cable, switch on Use Static Address for Device on Network Settings and restart it. With a static address the modem does not ask for a DHCP server and does not run the gateway check described under 10.5 "Device Status". |
The abcZ Network Tool lists the REDZ devices of a network with their address, MAC address, product and firmware version, so the modem can be found without knowing its address.

A modem with another password is listed with "auth required (password?)" in Product - type its password and scan again. Discover (UDP) is a faster alternative inside the same subnet. The tool is described in full in chapter 17 "Software - abcZ Network Tool".

WARNING:
Change the password after the first login: page Management, card Change Password.
The header of every page shows the product name, the firmware version, the build date of the firmware and the MAC address of the modem.
| Model | Product name in the header |
| TLM154, TLM254 | REDZ TLM Series 868MHz LoRa Based RF Modem |
| TLM655 | REDZ TLM Series 868MHz LoRa Based RF Modem with BPL |
| TLM194, TLM294 | REDZ TLM Series 2.4 GHz LoRa Based RF Modem |
| TLM695 | REDZ TLM Series 2.4 GHz LoRa Based RF Modem with BPL |
The menu on the left has eight entries. Seven are always present; Serial Settings appears only when the Device Function is LoRa to SERIAL Device Gateway.
| Menu entry | Content | Shown |
| Operating Mode | Device name, device function and the options of that function | Always |
| Network Settings | Time server, BPL mode, server ports and IP address settings | Always |
| Serial Settings | RS232 / RS485 selection, baud rate, line control | Only with LoRa to SERIAL Device Gateway |
| Device Status | Health summary, counters, connections | Always |
| LoRa Settings | LoRa addresses, radio settings, AES encryption | Always |
| LoRa Status | Received messages, buffer status, remote modems and radio test tools | Always |
| Security Settings | White list and black list | Always |
| Management | Time, firmware update, configuration file, password, log, restore and reboot | Always |

The Save Configuration button of a page is disabled until a value on that page has been changed. After a click a waiting window is shown while the modem stores the settings, then a message window with an OK button reports the result. The success message appears only after the modem has stored the values and answered.
| Message window | Meaning |
| Success text of the page, for example "Security Settings Changed." | The modem stored the settings and they are in effect. |
| Success text followed by "REBOOT REQUIRED: this setting is applied only at boot - the device keeps running with the previous value until you reboot it." | The settings are stored. The modem keeps working with the previous values until it is restarted (page Management, button Reboot Device). This is the answer of Operating Mode, Network Settings, Serial Settings and LoRa Settings (on the LoRa Settings page some fields take effect at once, see 10.6 "LoRa Settings"). The modem does not restart by itself. |
| Success text followed by "Warning: ... value(s) were rejected by the device and kept their previous value; the other values were saved." | Some values were not accepted (see below); the other values were stored. |
| Failure text of the page followed by a reason in brackets, for example "(Rejected: reboot in progress - please retry after the device restarts)" | Nothing was stored. The text in brackets is the answer of the modem. |
| "Request timed out." | No answer within 15 seconds. Check the connection and save again. |
| "The Device is not ready, please retry later." | The page is still waiting for the answer to an earlier request; wait a moment and press the button again. |

WARNING:
Restart the modem after every save on Operating Mode, Network Settings and Serial Settings: open Management and press Reboot Device, or switch the power off and on. The device function, the serial interface, baud rate and line control and the network addresses are used only after the restart. Some other values (for example Data Packing, Modbus Response Timeout, the routing table and the list targets) are used at once, so until the restart the modem runs with a mix of old and new settings.

NOTE:
A save made while the modem is already restarting is refused and nothing is stored. Wait until the modem is back and save again.

NOTE:
A value the modem does not accept (for example a number out of range) is not stored; the modem keeps its previous value and stores the other values of the page, and the success message adds the warning shown in the table. If every value sent was rejected, the page reports that the save failed ("Rejected: all ... value(s) out of range - nothing saved") and nothing was stored. The page keeps showing the rejected value until it is reloaded.
Holding one of the reset buttons of the modem for more than 5 seconds restores the factory settings and restarts the modem, see 5.4 "Reset Buttons". After the restart the modem is in the factory network state described above and the password is the factory password (admin).
On this page you choose what the modem does (the device function) and set the options of that function. Cards that do not belong to the selected function are hidden. The cards and the menu follow the function selected on the page at once, before you save and before the restart. The Device Status page always shows the function the modem is running.

| Field | Meaning |
| Device ID | Identity number that the radio module reports at start-up, in hexadecimal. Read only. 0x0 means the module has not answered. |
| Device Name | Free name of the modem, 1 to 21 characters. It is also reported as the network host name (upper case, first 15 characters, see 10.1 "Connecting to the Web Interface"); the host name changes only after a restart. Factory default: LORA_LM_SERVER. |
| Device Function | What the modem does with the data. See the table below. Factory default: LoRa to TCP/UDP Server Gateway. |
| Device Function | What the modem does | Cards on this page |
| LoRa to TCP/UDP Server Gateway | The modem listens for TCP connections (and, if enabled, UDP datagrams). Data from a connected client is sent over LoRa; data received over LoRa is sent to the connected clients. While no client is connected, data received over LoRa is dropped. | Two matching-list check boxes, the TCP Socket to Target Remote Device List or the Modbus Routing Table (Modbus ID to LoRa target) with Modbus Response Timeout, and Data Packing. |
| LoRa to TCP/UDP Client Gateway | The modem itself connects to up to 10 TCP or UDP targets. Data received over LoRa is sent to every enabled target; data from the targets is sent over LoRa. | TCP/UDP Client Settings and Data Packing. |
| LoRa to SERIAL Device Gateway | Data between the RS232 or RS485 port and LoRa. Three options turn it into a Modbus gateway or an IEC 62056-21 meter-reading link. | Serial options, and depending on them Data Packing, Modbus Response Timeout and the Modbus Routing Table (Modbus ID to LoRa target). |
| LoRa Repeater | Every LoRa message the modem receives is sent again over LoRa to the target set on the LoRa Settings page (Tx Group Address / Tx Device Address). A message whose content is identical to one repeated within the last 5 s (SF5 to SF7), 20 s (SF8, SF9) or 40 s (SF10 to SF12) is not repeated, whoever sent it. This stops two repeaters from passing the same message back and forth, but it also drops a master's identical poll that is repeated within that time. | None. |

NOTE:
The Serial Settings menu appears only for LoRa to SERIAL Device Gateway. The server port fields on Network Settings appear only for LoRa to TCP/UDP Server Gateway.
Two check boxes choose how data from the network side is addressed on LoRa. Only one of them can be on; checking one clears the other. With both off, everything goes to the target set on the LoRa Settings page.
| Check box | Effect |
| Enable TCP Socket to Target Device Matching List | Shows the TCP Socket to Target Remote Device List. Each row is a separate listening TCP port with its own LoRa target. |
| Enable Modbus Unit ID to Target Device Matching List | The Server Listening Port then accepts Modbus TCP requests instead of transparent data. Each request is sent over LoRa to the remote modem chosen by its Modbus Unit ID in the Modbus Routing Table (Modbus ID to LoRa target). Only one Modbus TCP client connection is served, and requests are handled one at a time. Data Packing, UDP Enable (server mode) and Maximum Number of Clients are hidden in this mode. |
The list has 10 rows. Only as many rows are shown and used as Maximum Number of Clients on the Network Settings page; save that page and reload this one to see more rows.
| Column | Meaning | Range | Factory defaults |
| TCP Port | Listening TCP port of this row. | 1 to 65535 | 5001 to 5010 |
| Target Group Address | LoRa group address of the remote modem. | 1 to 255 | 1 |
| Target Device Address | LoRa device address of the remote modem. | 1 to 65535 | 11 to 20 |
Data from a client connected to the port of a row is sent to that row's target. A LoRa message coming back from that target is delivered only to the client of the same row. A LoRa message from a device that is not in the list is delivered to all connected clients.

NOTE:
If a row uses a group address different from the modem's own group address (set on LoRa Settings), an amber GROUP MISMATCH band appears at the top of the page. It is a warning only: answers from another group reach this modem only if the remote side is set up for it.

Used with Enable Modbus Unit ID to Target Device Matching List (server gateway) and with Enable Modbus RTU Master to TCP Conversion (serial gateway). Each of the 5 rows sends the requests for a range of Modbus Unit IDs to one remote modem. The remote modem serves its local Modbus RTU devices with Enable Modbus TCP to RTU Conversion.
| Column | Meaning | Range |
| Modbus ID Range From | First Unit ID of the range. | 0 to 255 |
| Modbus ID Range To | Last Unit ID of the range. The range includes both ends; for one ID set From = To. | 0 to 255 |
| Group Address | LoRa group address of the remote modem. | 1 to 255 |
| Device Address | LoRa device address of the remote modem. | 1 to 65535 |
| Enable | The row is used only when checked. | - |
Factory content of row 01: Unit IDs 1 to 247 to group 1, device 1. When the routing is switched on and no row is enabled, row 01 is enabled automatically. At least one row must stay enabled; the page refuses to save otherwise ("At least one routing line must be enabled!").
A request whose Unit ID matches no enabled row is answered at once with Modbus exception 0x0A (gateway path unavailable). If the ranges of enabled rows overlap, the first matching row (lowest number) is used.

| Field | Meaning | Range | Factory default |
| Timeout (ms) | How long the modem waits for the answer to a Modbus request. | 100 to 60000 | 1000 |
| Exception (0x0B) Enable | When the answer does not come in time, send Modbus exception 0x0B (gateway target failed to respond) to the requesting side. | - | Off |
| Mode | Time the modem waits |
| Enable Modbus TCP to RTU Conversion (serial side, local RTU devices) | Timeout (ms) |
| Enable Modbus Unit ID to Target Device Matching List (server gateway) | Timeout (ms) plus a radio allowance: 2 s at SF5 to SF7, 8 s at SF8 and SF9, 16 s at SF10 to SF12 |
| Enable Modbus RTU Master to TCP Conversion (serial master) | Timeout (ms) plus the same radio allowance |
In all three modes exception 0x0B is sent only when Exception (0x0B) Enable is checked. With the check box cleared, a request that is not answered in time gets no answer from the modem; the master then runs into its own timeout.
Data arriving from the network or serial side is collected and sent over LoRa as one packet. These rules decide when a packet is closed and sent. A value of 0 switches a rule off. A packet is always closed at the size of one radio fragment: 229 bytes on 868 MHz models, 109 bytes on 2.4 GHz models.
| Field | Rule | Range | Factory default |
| Idle Timeout (ms, 0=off) | Close the packet when no new byte arrived for this time. | 0 to 60000 | 100 |
| Max Length (0=off) | Close the packet when it holds this many bytes. | 0 to 229 (868 MHz models), 0 to 109 (2.4 GHz models) | 0 |
| Delimiter Enable | Close the packet after the delimiter byte. The delimiter stays in the packet. | - | Off |
| Delimiter (hex) | The delimiter byte in hexadecimal. Shown only when the delimiter is enabled. | 00 to FF | 0D |

NOTE:
If you switch all three rules off, the modem sets Idle Timeout (ms, 0=off) back to 100 ms when the page is saved; otherwise short messages would wait in the buffer for ever. The page still shows 0 until it is reloaded.
Shown for LoRa to TCP/UDP Client Gateway. The modem opens the connections to the targets in this table itself.
| Column | Meaning | Factory default |
| Target IP | IP address of the target. | 192.168.1.100 |
| Target Port | TCP or UDP port of the target, 1 to 65535. | 502 |
| UDP | Checked: the target is reached with UDP datagrams. Cleared: with a TCP connection. | Cleared (TCP) |
| Enable | Only enabled rows are used. At least one row must stay enabled. | Row 01 only |
Reply only to sender (check box at the top of the card): data from the targets goes back over LoRa to the modem that sent the last request, instead of the fixed target on the LoRa Settings page. Until the first request has been received, the LoRa Settings target is used. Use it when more than one master polls through this modem. A change is used after the restart. Factory default: off.

NOTE:
Data received over LoRa is sent to every enabled target. The connection state of each target is shown on the Device Status page under TCP Client Status.

With all three check boxes off the serial gateway is transparent: bytes pass unchanged between the serial line and LoRa. Each check box adds a special function; only one of them can be on.
| Check box | What the serial port does |
| Enable Modbus TCP to RTU Conversion | Serves local Modbus RTU slave devices. Modbus TCP requests that arrive over LoRa are converted to RTU on the serial line, the answers are converted back and returned over LoRa. This is the remote end of a Modbus route. |
| Enable Modbus RTU Master to TCP Conversion | A Modbus RTU master is connected to the serial port. Its requests are routed over LoRa by Unit ID with the Modbus Routing Table (Modbus ID to LoRa target) to remote modems that run Enable Modbus TCP to RTU Conversion; the answers come back as RTU frames. |
| Enable IEC 62056-21 Mode C Baud Switching | For meter reading with IEC 62056-21 Mode C over a transparent link. The modem watches the Mode C handshake and switches the serial baud rate to the speed agreed by meter and reader. It returns to the base baud rate after Mode C Idle Revert (s) without traffic or at a new sign-on. |
Mode C Idle Revert (s): idle time after which the serial line returns to the base baud rate, 2 to 255 seconds, factory default 10. Shown only when Mode C is checked.

NOTE:
When Mode C is switched on and saved, the modem sets the serial port once to the usual Mode C base values: 300 baud, 7_EVEN_1, and Delimiter Enable off. You can change them afterwards; your values are kept. Keep the delimiter off for meter reading: with it on, every line of the readout becomes a separate radio message. The pages show the new values only after they are reloaded: reload the browser page before you save again, otherwise the next save writes the old values back (for example Delimiter Enable on).

NOTE:
With one of the two Modbus options, 7_EVEN_1 is not available on the Serial Settings page. If the serial line was set to 7_EVEN_1 it is changed to 8_NONE_1, and a baud rate of 300 is changed to 19200, when the page is saved. Reload the browser page to see the changed values.


WARNING:
The modem does not restart by itself. Until it is restarted it keeps working, without a pause in the traffic, with the device function it started with, although the page already shows the new selection. Restart the modem soon after saving.

NOTE:
When you save the page with LoRa to SERIAL Device Gateway and no serial interface is enabled - always the case when you come from another device function - the modem selects RS485, 19200 baud and 8_NONE_1. After the restart, open Serial Settings and check the interface, baud rate and line control before connecting the serial device.
This page sets the address of the modem, the time server and, for the server gateway, the listening port. Some fields appear only for certain device functions or models.

NTP Server IP or URL: the time server the modem asks for the time (UTC). Enter an IPv4 address or a host name. The field takes up to 63 characters and must not be empty; use a name of 30 characters or less, because the time client of the modem uses only the first 30 characters. Factory default: pool.ntp.org. A new name takes effect after a restart.
The modem compares its clock with the time server 10 minutes after start-up and then every hour. If the difference is 5 seconds or more, the clock is corrected without a restart. The modem needs a working gateway and DNS server to reach a time server given by name. With a static address, set Server Gateway Address and the DNS addresses (Primary DNS Address, Secondary DNS Address) on this page; the modem uses both DNS addresses. In DHCP address mode the DHCP server of the network supplies them. While the modem runs the DHCP server it cannot reach a time server outside its own network.

NOTE:
The modem clock runs in UTC: the time server gives UTC, and there is no time zone setting. Set Device Time on the Management page sends the local time of the PC; while a time server answers, the modem sets its clock back to UTC at the next check.
| Field | Shown when | Meaning | Range / factory default |
| BPL Operating Mode | BPL models (TLM655, TLM695) | Role of the modem in the power-line (BPL) network: NODE or MASTER. | Factory default: NODE |
| Server Listening Port | LoRa to TCP/UDP Server Gateway | TCP port on which clients connect (and the Modbus TCP port with Unit ID routing). Not used when the TCP Socket to Target Remote Device List is on: then each list row has its own port. | 1 to 65535, factory 502 |
| Maximum Number of Clients | LoRa to TCP/UDP Server Gateway without Unit ID routing | How many clients may be connected at the same time. It also sets how many rows of the TCP Socket to Target Remote Device List are used. | 1 to 10, factory 1 |
| UDP Enable (server mode) | LoRa to TCP/UDP Server Gateway without Unit ID routing | Also accept UDP datagrams. Each UDP sender takes one client place: TCP clients and UDP senders together cannot exceed Maximum Number of Clients. A UDP sender that stays silent for 5 minutes frees its place. With Maximum Number of Clients = 1 a UDP sender takes the only place: no TCP client can connect until the sender has been silent for 5 minutes. | Factory default: off |
| UDP Listen Port | UDP checked | UDP port on which datagrams are accepted. | 1 to 65535, factory 5001 |
| DHCP Server Enabled | Always | The modem hands out addresses to devices on its Ethernet side. The modem itself then uses Server IP Address. Checking one of the two boxes clears the other. | Factory default: off |
| Use Static Address for Device | Always | The modem uses the fixed address below instead of DHCP. Checking one of the two boxes clears the other. | Factory default: off |
| Server IP Address, Server Net Mask, Server Gateway Address | Static address or DHCP server checked | Address, net mask and gateway of the modem. Address and net mask are also the fall-back address when DHCP gives no answer. With a static address the gateway is the gateway of the modem; when the modem runs the DHCP server it hands this gateway to its clients (0.0.0.0 = no gateway is handed out). With the factory value 192.168.1.1 the clients are given the modem's own factory address as gateway. | 192.168.1.1 / 255.255.255.0 / 192.168.1.1 |
| Primary DNS Address, Secondary DNS Address | Static address or DHCP server checked | The DNS servers of the modem itself. When the modem runs the DHCP server it also hands Primary DNS Address to its clients (0.0.0.0 = none); Secondary DNS Address is not handed out. | 192.168.1.1 / 192.168.1.1 |
| DHCP Server Range Start Address | DHCP server checked | First address handed out (see 10.3.3 "DHCP server"). | 192.168.1.100 |
Each address is entered as four numbers of 0 to 255.
| Use Static Address for Device | DHCP Server Enabled | Result after restart |
| Off | Off | The modem gets its address by DHCP (factory state). |
| On | Off | The modem uses the fixed address. |
| Off | On | The modem uses Server IP Address and runs a DHCP server. |
The two boxes exclude each other. If the stored settings (for example after a firmware update) or a configuration file have both set, the modem keeps the static address and switches the DHCP server off.
With DHCP Server Enabled the modem serves the network it is connected to:

WARNING:
Run only one DHCP server on a network. Do not enable the DHCP server when the modem is connected to a network that already has one, for example behind a router.

NOTE:
The page notes that UDP output does not keep message boundaries: data larger than one radio fragment (229 B on the 868 MHz models, 109 B on the 2.4 GHz models) arrives as several datagrams.


WARNING:
Restart the modem after saving this page. The new address is used only after the restart; some other values, such as Server Listening Port and Maximum Number of Clients, can already be used before it when connections are opened again. Write the new address down before you restart: if the modem moves to another network or address, the browser has to be pointed to the new address, and the PC may need an address in the new network. If the address is lost, the abcZ Network Tool finds the modem on the network (chapter 17 "Software - abcZ Network Tool").
This page appears only when the device function is LoRa to SERIAL Device Gateway. It sets the serial port of the modem.
| Field | Meaning | Factory default |
| Enable RS232 / Enable RS485 | Choose the electrical interface. Exactly one is checked: checking one clears the other, and clearing one checks the other. | See the note below |
| Baud rate | Speed of the serial line: 300 to 460800 baud. | 115200 |
| Line Control | Data bits, parity and stop bits, for example 8_NONE_1 = 8 data bits, no parity, 1 stop bit. | 8_NONE_1 |
Baud rates offered: 300, 600, 1200, 2400, 4800, 9600, 19200, 38400, 57600, 115200, 230400, 460800.
Line control choices: 7_EVEN_1 (7 data bits, even parity, 1 stop bit; first in the list when it is offered), 8_NONE_1, 9_NONE_1, 8_EVEN_1, 8_EVEN_2, 8_ODD_1, 8_ODD_2, 8_NONE_2, 9_NONE_2. 7_EVEN_1 is offered only for the transparent serial gateway, not with the Modbus options.

NOTE:
Saving Operating Mode with another device function clears both interface check boxes in the stored settings. Saving it with LoRa to SERIAL Device Gateway while no interface is enabled selects RS485, 19200 baud and 8_NONE_1. The check boxes on this page show the stored interface.

WARNING:
The serial port is set up only at start-up. The new interface, baud rate and line control are used after the restart.

This page shows the state of the modem and its traffic counters. The values are read each time the page is opened from the menu and each time Refresh Status is pressed; they are not updated by themselves.
Which counters and connection tables are shown depends on the device function the modem is running, that is the function it had at its last start, not on the selection on the Operating Mode page.
Under the page title a line shows the time of the last refresh, taken from the clock of the PC.

NOTE:
A red band at the top of the page means the LoRa addresses of the modem are still at their factory values ("FACTORY DEFAULTS - device not configured!" or "LoRa addresses are at FACTORY values"). Two modems with factory addresses disturb each other: set the addresses on LoRa Settings. The band can be hidden with the cross at its right end until the page is reloaded.

Below the title four boxes summarise the state of the modem. A coloured dot in each box shows the result: green = normal, amber = worth a check, red = fault, grey = no data yet or not used.
| Box | What it shows |
| LoRa Radio | Time since the last radio frame from another modem, with its group and device address and, when the radio module reports them, RSSI and SNR. Below: the number of LoRa messages received and sent, with the received count as a percentage of the sent count. Green when the last frame is at most 5 minutes old, amber up to 1 hour, red when older; grey "No frame since boot". Amber with a "weak signal" line when more than half of the last (up to 8) frames were weaker than -95 dBm. A line "LoRa RX only ... of TX" appears when more than 100 messages were sent and fewer than 10 percent as many were received. Red "Not serving" while the modem is starting, restarting or has a radio module error, and red "RADIO DEAD" when the radio module did not start (see App Status below). |
| LoRa link | With Acknowledged Transmission (C-Data) on: the number of acknowledged transmissions and of acknowledgement timeouts; green while timeouts are at most 2 percent of the messages sent, amber up to 5 percent, red above. Without it the box shows U-Data (no ACK). Below: messages dropped after the last send retry (TX fail-drop) and messages lost because an internal queue was full (ring lost); either one above 0 makes the box at least amber. These values count from the last start. Right after Reset Logs, if acknowledgement timeouts had been counted, the box is grey until a message has been sent; from then on the timeout percentage is too high, because the timeout count is not reset. |
| Connections (server gateway) | The number of connected clients out of Maximum Number of Clients and the time since the last data; green with at least one client, grey with none. The client addresses are listed. With Modbus Unit ID routing: the time since the last Modbus request (green up to 1 minute, amber up to 10 minutes, red when older), the numbers of requests, answers and timeouts, the Unit ID of the last request and the register count (or exception code) of the last answer. A parked state of App Status (for example SVC PARKED) is shown in the box. |
| Targets (client gateway) | How many of the enabled targets are connected: green when all are, amber when some are, red when none is, grey when no target is enabled. Below: the time since the last data, or the parked state. Connected targets are listed, the others with their state. |
| Connections (serial gateway, repeater) | Not used; the box is grey. |
| Serial / system | Green "No serial errors", or amber "Serial errors" when receive errors, input overflows or invalid Modbus characters were counted on the serial port or on the internal radio-module link. Amber "SERIAL NOISE PARKED" when the serial park state is active. Below: the overflow counts, the error counts and where the log output goes (console or UDP log server address). A CONFIG line repeats the factory-address warning of the red band. |
| Field | Meaning |
| IP Address | Address the modem uses now. |
| App Status | State of the modem software. SERVING_CONNECTIONS is normal operation. Other values (for example WAIT_FOR_NET_READY or LORA_WAITING_FOR_DEVICE_INFO) appear during start-up; CLOSING_CONNECTIONS and RESET_PROCESSOR appear during a restart. |
| Text added to App Status | Meaning |
| (RADIO DEAD - web reboot to retry) | The radio module did not start in three attempts. The modem keeps working without radio. Restart it with Reboot Device. |
| (NET DOWN - link/power to retry) | The network connection failed repeatedly. The modem no longer restarts for it and keeps working without the network. Check the cable, then press Reboot Device or switch the power off and on. |
| (NO LINK - waiting, no reboot) | No Ethernet link at start-up for a function that needs the network. The modem waits for the link. |
| (SVC PARKED - no client/target) | The modem restarted itself twice because no client connected or no target could be reached (see below), and the problem came back a third time. It now stops restarting for this reason; check the clients or targets. The text goes when a client connects or a target is reached, or after Reboot Device. |
| (GATEWAY UNREACHABLE - parked) | DHCP address mode only. The network gateway did not answer in three recovery rounds (each about 15 minutes, see below); the modem restarted itself twice. It keeps working and keeps checking the gateway. While the gateway stays unreachable the modem restarts about every 30 minutes (every second recovery round) to try again. |
| (SERIAL NOISE PARKED - check line/baud) | Serial gateway only. Invalid answers or receive errors on the serial port made the modem restart itself twice, and the problem came back a third time. It now stops restarting for this reason. Check the cabling, the baud rate and the line control. The text goes when a serial Modbus device answers correctly (Enable Modbus TCP to RTU Conversion), or after Reboot Device. |
Several of these texts can appear at the same time.
The modem restarts itself in the following cases; the radio module checks are listed in chapter 18 "Logs and Troubleshooting". The counters on this page start from 0 again after such a restart.
| Case | When the modem restarts | After repeated restarts |
| All functions | The modem has been running for 24 hours since its last start. This restart is planned and happens every day. | No limit. |
| LoRa to TCP/UDP Server Gateway (transparent, without Unit ID routing) | No client has connected for about 1 hour. Every 5 minutes without a client the listening ports are opened again first. | Third time in a row: no more restarts, App Status shows (SVC PARKED - no client/target). |
| LoRa to TCP/UDP Client Gateway | No enabled target has been reachable for about 33 minutes, or, once running, none of the targets has been connected for 5 minutes. | Third time in a row: no more restarts, App Status shows (SVC PARKED - no client/target). |
| DHCP address mode (Use Static Address for Device and DHCP Server Enabled off) | The network gateway has not answered for about 15 minutes, or the modem lost the DHCP address it had received since its start. The modem first renews its DHCP address, then asks for a new one, and restarts only if the gateway still does not answer. | Third round in a row: App Status shows (GATEWAY UNREACHABLE - parked); while the gateway stays unreachable the modem restarts about every 30 minutes (every second recovery round) to try again. |
| Serial gateway with Enable Modbus TCP to RTU Conversion | More than 500 invalid bytes have been received in answers from the serial devices since the last valid answer. | Third time in a row: no more restarts, App Status shows (SERIAL NOISE PARKED - check line/baud). |
| LoRa to SERIAL Device Gateway | Receive errors on the serial port repeat without a pause of 3 seconds, 500 times in a row. | Third time in a row: no more restarts, App Status shows (SERIAL NOISE PARKED - check line/baud). |
| All functions | Receive errors on the radio module link repeat without a pause of 3 seconds, 500 times in a row. | No limit. |

NOTE:
The count of repeated restarts is cleared when a client connects or a target is reached (service cases), when the gateway answers again (gateway case) or when a serial Modbus device answers correctly (serial cases, with Enable Modbus TCP to RTU Conversion). Reboot Device on the Management page clears every count and lets the modem try again. A modem in DHCP address mode that has not yet received any DHCP address since its start (for example a factory modem on a direct cable) does not run the gateway check. See chapter 18 "Logs and Troubleshooting" for the complete list of self-checks and the log messages they write.
Log Counter and Log Status are shown only when logging is switched on (Log Level other than NONE on the Management page). Log Counter is the number of log lines sent to the console or the UDP log server; Log Status is the internal state of the log output, for support.
| Counter | Shown for | What it counts |
| N. of Module UART Errors | All functions | Receive errors on the internal serial link between the processor and the radio module. |
| N. of Module UART Input Overflow Errors | All functions | Bytes from the radio module that did not fit into the receive buffer of that link. |
| N. of Serial UART Input Overflow Errors | All functions | Bytes from the RS232 / RS485 port that did not fit into its receive buffer. |
| N. of CRC Errors on LoRa Messages | All functions | Messages from the radio module that failed the checksum test and were dropped. |
| N. of LoRa Module Command Retries | All functions | Commands to the radio module (start-up configuration, key, clock) that had to be sent again because the module did not answer in time. Repeated radio transmissions are not counted here. |
| N. of Serial UART Errors | LoRa to SERIAL Device Gateway | Receive errors on the RS232 / RS485 port. |
| N. of TCP Disconnections | Server and client gateway | TCP connections that were closed or lost (client gone, target dropped, connection reset after send errors). |
| N. of TCP Output Full Errors | Server and client gateway | Data that could not be written to a TCP connection. The connection is then reset (client gateway: after 6 failed writes in a row to the same target). |
| N. of TCP Input Back-Pressure Events | Server, client and serial gateway | Times the input buffer was full. Server and client gateway: data from the network waits in the connection and is read later; nothing is lost. Serial gateway: Modbus data arriving over LoRa that did not fit was cut off. |
| N. of Gateway Incorrect Modbus Characters Received | Serial gateway with Enable Modbus TCP to RTU Conversion | Bytes of Modbus frames that were invalid and dropped, counted since the start. When more than 500 such bytes collect from wrong answers of the serial devices without a valid answer in between, the modem restarts. |
| N. of Gateway Messages Received Correctly | Server, client and serial gateway | Packets received from the network or serial side and queued for LoRa. |
| N. of LoRa Messages Sent Correctly | Server, client and serial gateway | Messages sent completely over LoRa (with acknowledged transmission: confirmed by the receiving modem). |
| N. of LoRa Messages Received Correctly | All functions | Radio messages received by the radio module, counted before the White/Black list filters. |
| N. of Gateway Messages Sent Correctly | All functions | Packets delivered to the network or serial side (TCP, UDP or serial). |

NOTE:
For LoRa Repeater the page shows the module counters, N. of LoRa Messages Received Correctly and N. of Gateway Messages Sent Correctly; the latter stays 0 because a repeater has no network or serial output. The repeated messages are counted, but the counters for them are not shown. Copies dropped by the repeater are counted on the LoRa Status page.
Shown while the modem runs as LoRa to TCP/UDP Server Gateway. One row per connected client; with Modbus Unit ID routing one row for the Modbus TCP client. The table is read again with every refresh.
| Column | Meaning |
| Ip Address/Port | Address and port of the client. |
| Type | TCP, UDP or Modbus. |
| Local port | Port of the modem the client uses: the listening port of the connection, the UDP Listen Port for a UDP sender, the Server Listening Port for Modbus. |
| Route | Transparent: with the TCP Socket to Target Remote Device List on, the LoRa target of the list row whose port the client uses; otherwise, and always for a UDP sender, "default target" (the target on LoRa Settings). Modbus: the routing table row used by the last request (Unit ID range and LoRa target), or "no route". |
| Last activity | Time since the last data of this connection. |
| Modbus unit | Unit ID of the last request (Modbus only). |
| Last Request, Last Response | Modbus: the last request and the last answer in hexadecimal; a frame longer than 12 bytes is shown as a button with its length that opens and closes the full frame. |
| Bytes in, Bytes out | Transparent (in place of the two Modbus columns): the bytes received from the client and sent to it since the connection was opened. Modbus unit then shows a dash. |
Without a connection the table shows "no client connected" (with Modbus Unit ID routing: "no Modbus client connected").
Shown while the modem runs as LoRa to TCP/UDP Client Gateway. One row per enabled target of the TCP/UDP Client Settings table, read from the modem with every refresh: Target (address and port), Type (TCP or UDP), State, Last activity, and the bytes sent to the target (Bytes out) and received from it (Bytes in) since the last start. Without an enabled target the table shows "no target enabled". The states:
| State | Meaning |
| OPENING CONNECTION | The reachability check (ping) has not finished yet. |
| HOST UNREACHABLE | The target does not answer the reachability check: wrong IP, device off, or a router in between blocks it. |
| WAIT FOR CONNECTION | The target is reachable; the TCP connection is being set up. |
| CONNECTED | The connection is up and data is delivered. |
The targets are brought up one after the other, so with a long list it takes a while until every row shows CONNECTED. A target that drops is retried automatically; a retry can take a few minutes.

The System Diagnostics card (memory figures, start-up diagnostics and recovery counters) is a service display and is hidden in the standard firmware.
| Button | What happens |
| Refresh Status | Reads all values again without reloading the page. The button is disabled while the modem answers; after 15 seconds without an answer the page reports "Status request timed out.", and when the modem answers with an error it reports "Cannot refresh the status page.". |
| Reset Logs | Sets the counters to 0 without a restart; the page reports "Logs have been reset." and refreshes. Not reset: N. of Gateway Incorrect Modbus Characters Received and the values of the LoRa link box. Right after Reset Logs, if acknowledgement timeouts had been counted, the LoRa link box is grey (amber when TX fail-drop or ring lost is above 0) until a message has been sent; from then on the timeout percentage is too high, because the timeout count is not reset. |

NOTE:
All counters start from 0 after every restart of the modem.
The page LoRa Settings holds the radio settings of the modem: its own LoRa address, the default target address, the radio parameters and the AES encryption. The settings are stored with Save Configuration. The own addresses, the radio parameters, Listen Before Talk and the AES encryption are used by the radio after the next restart of the modem. Tx Group Address, Tx Device Address and Acknowledged Transmission (C-Data) take effect as soon as they are saved.


NOTE:
Some labels show a short help text when the mouse pointer rests on them: Listen Before Talk, C-Data, AES encryption and key on this page, and Buffer Status, Link Test and Remote Node on the page LoRa Status.

NOTE:
Some radio parameters are kept at their factory values and are not shown on the page: the radio mode (standard mode with address filtering), the receiver control (receiver always on), the LED control, the packet format (received packets carry signal strength, signal-to-noise ratio and a time stamp) and the power saving mode (off). The values shown on LoRa Status rely on this packet format.
| Field | Range | Factory default | Meaning |
| Group Own Address | 1 to 255 | 1 | Group of this modem. The radio accepts only packets addressed to this group (or to everybody). |
| Device Own Address | 1 to 65535 | 1 | Address of this modem inside its group. Every modem of a group needs its own address. |
| Tx Group Address | 1 to 255 | 1 | Group of the default target: data from the Ethernet or serial side is sent to this group. |
| Tx Device Address | 1 to 65535 | 65535 | Device address of the default target. 65535 sends to every modem of the target group (broadcast). |

NOTE:
Do not use 255 as Group Own Address or 65535 as Device Own Address: these values are reserved as broadcast addresses. The page accepts them, but they are not valid own addresses.
A modem is reached over the radio by the pair group address / device address. Two modems that exchange data point at each other: the Tx addresses of one modem are the own addresses of the other. The target lists on the page Operating Mode can select another target for some connections; without such a list every message goes to the Tx addresses set here.

NOTE:
When Tx Device Address is changed from 65535 to a single modem and saved, the modem also turns on Acknowledged Transmission (C-Data) once. Whenever C-Data is turned on, by this rule or by hand, the 868 MHz models also turn on Listen Before Talk (LBT) once. Both can be turned off again afterwards. The page does not show these automatic changes at once: the boxes stay unchecked until the page is reloaded, although they are stored as checked.
The radio card differs by frequency band. The 868 MHz models (TLM154, TLM254, TLM655) and the 2.4 GHz models (TLM194, TLM294, TLM695) show different fields and different value ranges. The fields that set the radio channel must be the same on all modems that talk to each other.
| Field | 868 MHz models (TLM154, TLM254, TLM655) | 2.4 GHz models (TLM194, TLM294, TLM695) |
| Modulation | LoRa (factory) or FSK | LoRa (factory) or FLRC |
| LoRa Signal Bandwidth (LoRa only) | 125, 250 or 500 kHz, factory 500 kHz | 200, 400, 800 or 1600 kHz, factory 200 kHz |
| FSK Datarate (FSK only) | 50000 bps (factory), 100000 bps or 250000 bps | - |
| FLRC Signal Bandwidth (FLRC only) | - | Six data rates from 0,260 MB/s to 1,300 MB/s, factory 0,260 MB/s 0,3 MHz DSB |
| Radio Power Level | 5 to 20 dBm, factory 10 dBm | -18 to 13 dBm, factory 10 dBm |
| FLRC Error Coding (FLRC only) | - | 1/2 (factory), 3/4 or 1 |
| RF Carrier Frequency (Hz) | 863062500 to 869937500 Hz, factory 869524963 Hz | 2402000137 to 2479999939 Hz, factory 2449999924 Hz |
| LoRa Spreading Factor (LoRa only) | SF7 to SF12, factory SF12 | SF5 to SF12, factory SF12 |
| LoRa Error Coding (LoRa only) | 4/5 (factory), 4/6, 4/7 or 4/8 | 4/5 (factory), 4/6, 4/7 or 4/8 |
| Listen Before Talk (LBT) | Check box, factory off | Not shown (see below) |
| Acknowledged Transmission (C-Data) | Check box, factory off | Check box, factory off |
The fields marked "LoRa only" are shown when Modulation is LoRa; when another modulation is selected they are hidden and the fields of that modulation appear instead.
A frequency outside the range of the model is not accepted: the page shows a message and puts the previous value back.
Listen Before Talk (LBT) makes the radio check that the channel is free before it transmits and wait while another device is sending. It is useful when several devices share the channel or at high spreading factors, where one frame occupies the air for a long time. The threshold is -90 dBm and is not shown on the page. On the 2.4 GHz models the row is not shown: their radio module listens before talk by itself and has no setting for it.
With Acknowledged Transmission (C-Data) the receiving radio confirms every frame sent to a single modem, and a frame that is not confirmed is sent again, up to 3 attempts in all. If the third attempt is not confirmed either, the whole message is dropped and counted as "LoRa TX fail-drop" under Buffer Status. Messages to 65535 (broadcast) are always sent without confirmation, and in the LoRa Repeater function the option is not used. A receiving modem accepts both kinds of frames, so modems with and without this option work together.

NOTE:
If only the confirmation is lost, the frame is sent again and arrives twice. An application that cannot accept a repeated message must filter repeats itself.
With AES Encryption/Decryption Enabled the payload of every LoRa frame is encrypted with a 128-bit key. The field Encryption Key appears when the box is checked. Type the key as 32 hexadecimal digits; a leading 0x and the separators - or : are ignored, and a shorter value is filled up with leading zeros. The page shows the key as 16 pairs of digits separated by -.
All modems that must read each other's traffic need encryption turned on and exactly the same key. Frames encrypted with another key are received by the radio but cannot be decrypted and are dropped. Encryption keeps the content secret; it does not decide which modems may send: a modem with encryption on still accepts unencrypted frames from other modems. Use the lists on the page Security Settings for that.

WARNING:
Every modem leaves the factory with the same key. When you use encryption, enter your own key. The key can be read by everyone who can log in to the web interface and is part of the downloaded configuration file.

NOTE:
Only the settings of the radio module wait for the restart: own addresses, radio parameters, Listen Before Talk and AES encryption. New Tx addresses and the C-Data setting are used at once, although the page asks for a restart after every save on this page. The card Module Information on the page LoRa Status shows the own addresses the radio is really using.

NOTE:
A save that arrives while the modem is already restarting is refused and nothing is stored: the page shows Cannot change LoRa Settings. followed by the reason given by the modem. Wait until the modem has started again and save once more. If the modem refuses only some of the values, the confirmation adds a warning that names how many values kept their previous setting; the other values are saved.
The page LoRa Status shows what the radio receives and offers test tools for the radio link. The values are read when the page is opened and each time Refresh LoRa Status is clicked; they are not updated on their own. The time of the last update is shown under the page title.

| Field | Content |
| Device ID | Identification number of the radio module, in hexadecimal. |
| Group Own Address | Group address the radio is using now. |
| Device Own Address | Device address the radio is using now. |
| Field | Content |
| Message Time | Time stamp the radio attached to the last received LoRa frame. |
| SNR (dB) | Signal-to-noise ratio of that frame. Green from -7 dB, yellow from -15 dB, red below. |
| est. RSSI (dBm) | Received signal strength of that frame. Green from -95 dBm, yellow from -110 dBm, red below. |
| Length | Length of the received radio frame in bytes, including 16 bytes of address and signal data; the payload is 16 bytes shorter. |
| Destination Group Address | Group the frame was addressed to. |
| Destination Device Address | Device address the frame was addressed to (65535 = broadcast). |
| Payload in Hex | Payload bytes in hexadecimal. |
| Payload As ASCII | The same bytes as text; bytes that are not printable are shown as a dot. |
The last message the modem received on its Ethernet or serial side for transmission over the radio, in hexadecimal (Payload in Hex) and as text (Payload As ASCII). The card is not shown in the LoRa Repeater function.
| Part of the line | Meaning |
| GW->LoRa: n% used, n lost | Fill level of the queue of data waiting to be sent over the radio; lost = oldest messages dropped because the queue was full. |
| LoRa->GW: n% used, n lost | Fill level of the queue of received radio data waiting for delivery to TCP, UDP or the serial port; lost as above. |
| REDZ consumed | Status and test frames handled by the modem itself and not passed on. |
| LoRa TX fail-drop | Messages dropped after 3 failed radio send attempts. |
| C-ACK ok / tmo | Acknowledged transmissions confirmed / not confirmed in time. |
| Modbus route: req, timeout | Only with Modbus ID routing in the TCP/UDP server function: requests routed and requests without answer. |
| Repeater dup-drop | Only in the LoRa Repeater function: repeated frames that were not forwarded again. |
A table with one row for each remote modem heard over the radio, up to 32 modems. Its columns are the signal strength and signal-to-noise ratio of the last packet (RSSI, SNR), their running averages (R-avg, S-avg), the number of packets received (RX), the group and device address of the remote modem, the seconds since its last packet (Age) and Details. Details shows, for modems that answered a connection request, the radio module ID, the device function of the remote modem and the IP addresses connected to it.
Request LoRa Connections sends a connection request over the radio to every modem of the group set in Tx Group Address (not to other groups). The request is sent several times. The page waits 25 seconds (Request LoRa Communication List in Progress) and then refreshes the table with the answers. The modem also sends such a request once by itself about one minute after it was switched on or restarted by the user (Reboot Device, Reboot Alternative Firmware, a configuration upload, a change of the log settings or a factory reset), as soon as it is in normal operation, no data is waiting to be sent and no radio frame has been received for 10 seconds. After any other restart (for example one ordered over the radio with Reboot from another TLM, or one the modem made on its own) it does not send this request; click Request LoRa Connections when you need the Details column.
Checks a device on the Ethernet network of a remote TLM. Enter the group and device address of the remote TLM and the IP address to ping in Target IP, then click Ping. The remote TLM pings that IP address on its own network and sends the result back over the radio. The result line shows:
| Result | Meaning |
| WAITING <IP> ... | Request sent, no answer yet. The page asks for the result every 2 seconds. |
| <IP> OK - RTT n ms (incl. LoRa) | remote LAN m ms | The device answered. n is the total time including the radio path, m the ping time on the remote network. |
| <IP> UNREACHABLE | The remote TLM answered, but the device did not reply to the ping, or the remote TLM has no network. |
| <IP> NO RESPONSE (timeout) | No answer from the remote TLM within 15 seconds. |

NOTE:
When the modem refuses Request LoRa Connections, a Remote Ping, a Link Test or a Remote Node request, the page shows Request Failed. followed by the modem's reason in brackets, and for the last three the result line shows Not sent. Reasons: an invalid group or device address, the radio out of service, a link test already running. If Target IP is not a valid IP address, the reason shown speaks of "no recognized field in request"; check the Target IP. If the modem does not answer at all, the result line shows No confirmation from the device.
Measures the radio link to a remote TLM. Enter its group and device address and the number of test frames in Probe Count (1 to 50), then click Start. The modem sends the test frames one after the other; the remote TLM answers each one with the signal values it measured. A frame without answer counts as lost after 3 seconds (SF5 to SF7), 12 seconds (SF8, SF9) or 24 seconds (SF10 to SF12).
| Result | Meaning |
| RUNNING sent/total, echo n ... | Test running: frames sent so far and answers received. |
| DONE - sent n, echo m (p%) | here avg RSSI/SNR: ... | remote: ... | Test finished: success rate, average signal strength and signal-to-noise ratio measured by this modem (here) and by the remote modem (remote). A dash means that no signal values were available. |
For Remote Ping and Remote Node the page stops asking for a result after 3 minutes; for Link Test it waits the number of probes x 24 s + 30 s, but at least 3 minutes, whatever the spreading factor. It then shows "No result - polling stopped (timeout)." in the result line.

NOTE:
For a fair loss figure, run the test with Acknowledged Transmission (C-Data) turned off on both modems: with it on, lost frames are repeated by the radio and the test shows fewer losses than the link really has.
Reads the identity of a remote TLM or restarts it over the radio. Enter its group and device address.
| Button | What happens | Result line |
| Read Info | The remote TLM sends back a summary: device name (N), device function number (DF), firmware version (FW), IP address, own and target LoRa addresses (G, D, TxG, TxD), spreading factor (SF) and its received / sent radio message counters (RX, TX). | OK - followed by the summary, or TIMEOUT - no response when no answer came within 15 seconds. |
| Reboot | After Reboot the remote device? is confirmed, the remote TLM acknowledges and restarts a few seconds later. | OK - Reboot acknowledged - remote device is restarting, or TIMEOUT - no response. |

NOTE:
Read Info reports the device function the remote TLM is running; the other values are its stored settings, so settings saved there but not yet applied by a restart already appear. With a long device name the end of the summary is cut off.
With the device address 65535 or the group address 255, Reboot is a group restart: every TLM of that group (65535), every TLM with that device address in all groups (255), or every TLM in reach (both) receives the request, acknowledges it and restarts. The page then asks a second time and names the case, for example This will restart ALL modems in ALL groups that hear the broadcast. Continue? Only after the second confirmation is the request sent. Before it asks, the page checks the two addresses: the group must be a number from 1 to 255 and the device a number from 1 to 65535.

WARNING:
Reboot restarts the remote TLM: its data connections are interrupted until it has started again; a group restart interrupts every TLM it reaches at the same time. A remote TLM carries out these requests from any TLM that can reach it over the radio; no password is asked. The only protection is the White List / Black List of the remote TLM (page Security Settings), which applies to Remote Ping, Link Test, Read Info and Reboot as well. Remote configuration changes are not possible.

NOTE:
For Remote Ping (device on remote TLM network), Link Test (site survey) and Read Info enter the address of one TLM. With 65535 every TLM of that group in reach answers, and the results of several modems are mixed. Enter group addresses from 1 to 255 and device addresses from 1 to 65535 only. For these three tools the page does not check the fields; the modem refuses a value that is not a number or is above 255 / 65535: nothing is sent and the page shows Request Failed. with the reason. Group 0 and device 0 are not refused.
The page Security Settings limits which remote modems this modem accepts radio data from. The filter compares the device address of the sender of every received LoRa frame with a list of up to 20 addresses; the group address is not compared.
| Setting | Effect |
| White List Enabled | Only frames from the modems in White List Address Table are accepted; all others are dropped. |
| Black List Enabled | Frames from the modems in Black List Address Table are dropped; all others are accepted. |
| Neither checked (factory) | All frames are accepted. |

Only one list can be active: checking one box clears the other, and the table of the checked list appears. Enter each device address as a number; the page converts it to the hexadecimal form 0x0000 to 0xFFFF. Unused rows stay at 0x0000.
Click Save Configuration. The page confirms with Security Settings Changed. The lists are applied at once; no restart is needed. If the save fails, the page shows Cannot Change Security Settings. followed by the reason given by the modem.

NOTE:
Enter the Device Own Address of the remote modems. Because only the device address is compared, a listed address counts for that address in every group.

NOTE:
The password of the web interface is changed on the page Management, card Change Password.
The page Management sets the clock, updates the firmware, saves and loads the configuration, changes the password, sets the log output and restarts or resets the modem.

Time At Start shows the clock of the modem as the modem last read it; Current Local Time shows the clock of the PC when the page was opened. Set Device Time sends the local time of the PC at the moment of the click to the modem and sets its clock while the modem keeps running; it does not restart. The page confirms with Device time has been set. Time At Start shows the new time after the page is reloaded.
If the time cannot be set the page shows Set Device Time Failed! followed by the reason given by the modem, for example "Rejected: reboot in progress - time NOT set" when the modem is just closing down for a restart. The date of the PC must lie in the years 2000 to 2063.

NOTE:
The modem has no time zone setting. When a time server is set on the page Network Settings and reachable, the modem compares its clock with it once an hour and corrects it when the difference is 5 seconds or more. The time server gives UTC, so a local time set with this button is changed back to UTC at the next check. Without an answer from the time server a time set by hand stays as it is.
The modem holds two firmware images: the running one and an alternative one. A firmware update loads a new image into the alternative area while the modem keeps working with the running firmware; the modem changes over only when you click Reboot Alternative Firmware.
| Model | Firmware file |
| TLM154, TLM254 (868 MHz) | TLM154-254_868MHz_v3.00.01.binimg |
| TLM655 (868 MHz, BPL) | TLM655_868MHz_BPL_v3.00.01.binimg |
| TLM194, TLM294 (2.4 GHz) | TLM194-294_2.4GHz_v3.00.01.binimg |
| TLM695 (2.4 GHz, BPL) | TLM695_2.4GHz_BPL_v3.00.01.binimg |

WARNING:
The modem does not check which model a firmware file was made for. It also accepts the file of the other frequency band or of the model with or without BPL. Always select the file of your model from the table above.
In our measurement on a TLM154 (868 MHz) the upload took about 12 seconds. After Reboot Alternative Firmware the modem stopped answering after about 8 seconds and the web page answered again about 11 seconds after the click. Reload the page yourself about 15 seconds after the click and check the firmware version.
| Message | Meaning |
| Error: Firmware Does not Match With Device. | The modem accepted the upload, but the alternative area then shows no valid version and date, or it cannot be started. |
| Error: Cannot Upload Firmware. | The modem answered the upload with an error. |
| Update Failed! Firmware file could be wrong | The upload stopped at 55 or 56 percent. This is where the modem checks the file after writing the first half of it, and stops a wrong or undecryptable file. |
| Connection error! | The connection broke during the upload. |
After a failed or interrupted upload the alternative area is marked as invalid; Reboot Alternative Firmware is then refused with Alternate Firmware Boot Failed! and the reason given by the modem. Upload the file again.
Alternative Firmware Version and Alternative Firmware Date show the firmware in the alternative area; they stay empty while that area holds no valid image. Reboot Alternative Firmware is active only while that area holds a valid image.

WARNING:
Reboot Alternative Firmware restarts the modem a few seconds after the confirmation and starts the other firmware; all connections are interrupted during the restart. The page shows Rebooting... and reloads itself after 5 seconds; if it still shows the old firmware, reload it again once the modem answers. The current settings are taken over only when the first two numbers of the two firmware versions are the same (for example 3.00.x); otherwise the other firmware starts with its own stored settings. The firmware that ran before stays in the modem as the alternative firmware, so you can switch back the same way.
Download Current Configuration saves all settings of the modem in a file named ZTG_<device name>_v<firmware version>.zcfg. The file starts with an identification block that names the product, the firmware version and the device name.

WARNING:
The configuration file contains the password of the web interface and the AES key in plain text. Keep it in a safe place.
Upload Configuration File opens a file dialog. The upload starts as soon as a file is selected; there is no further question. Settings that are not in the file keep their current values. A radio carrier frequency in the file outside the range of the model is replaced with the factory frequency. While the file is being read the modem sends nothing over LoRa; if the upload breaks off, sending starts again after at most 60 seconds. Before anything is stored the modem checks the identification block and the content of the file; a file that is refused is not stored at all, and the modem keeps its settings:
| Answer shown | Meaning |
| Configuration Uploaded - device will restart | File accepted and stored. |
| Configuration Uploaded (warning: file from fw x, device runs y) - device will restart | Accepted; the file was saved by another firmware version. |
| Configuration Uploaded (legacy config - no _meta) - device will restart | Accepted; the file has no identification block, so the product could not be checked. |
| Rejected - product mismatch: file '...', device '...' | Refused, nothing changed: the file comes from another TLM model (for example the other frequency band or the model with or without BPL). |
| Rejected - variant mismatch: file '...', device '...' | Refused, nothing changed: the file names another frequency band or BPL version than this modem. |
| Rejected - layout mismatch: file n, device m | Refused, nothing changed: the file was saved by a firmware with another settings layout. |
| Rejected: reboot in progress - configuration NOT saved | Refused, nothing changed: the modem was already restarting. Upload the file again after the start. |
| Node ID Not Found at line n, pos. m. | Refused, nothing changed: the file contains a name the modem does not know. |
| Unexpected End Of File found at line n, pos. m | Refused, nothing changed: the file is cut or not complete. |
| Error: Cannot Upload Configuration. | The modem did not answer the upload with a result. Try again. |
| Request timed out. | No answer within 15 seconds. Check the connection and upload the file again. |
| Any other text | Refused, nothing changed: the file is damaged or not a configuration file of this modem. |
The page does not reload by itself after the answer: press Close and reload the page after the restart.

WARNING:
An accepted configuration file restarts the modem about 1.5 seconds after the answer. If the file contains other network settings or another password, the modem is reached at the new address and with the new password afterwards (to find the address of a modem, see chapter 17 "Software - abcZ Network Tool").
| Item | Rule |
| User name | admin (fixed, cannot be changed) |
| Factory password | admin |
| Current Password | Must be the password in use. |
| New Password | 1 to 15 characters. Use letters and digits. |
| Confirm New Password | Must be the same as the new password; the field turns green when it matches and red when it differs. |
Change Password becomes active when all three fields are filled and the confirmation matches. The new password is valid at once, without a restart; the page confirms with Password Changed, Next time you login, please use new password. From the next request on, the modem accepts only the new password; when the browser asks for the login, enter the new password.
If the change is refused the page shows Error! Cannot change password. with the reason: "Rejected: current password is incorrect - password NOT changed", "Rejected: new password is empty - password NOT changed" or "Rejected: new password and confirmation do not match - password NOT changed".

WARNING:
Change the factory password after the first login. A forgotten password is set back to admin by a factory reset; without the password use the reset buttons of the modem (5.4 "Reset Buttons"), which do the same as Restore Factory Configuration. The password is also part of the configuration file: uploading a configuration file sets the password stored in that file.
| Field | Values | Factory default |
| Log Level | NONE, ERROR, INFO or DEBUG | NONE |
| Log Output | CONSOLE (console port of the modem) or UDP SERVER (over the network) | CONSOLE |
| UDP Server Port | 1 to 65535 | 7001 |
| UDP Server IP | IP address of the PC that receives the log | 192.168.1.10 |
The log records what the modem does, for troubleshooting. ERROR writes only errors, INFO adds normal events, DEBUG writes everything. With NONE the output fields are hidden. UDP Server Port and UDP Server IP are shown only with UDP SERVER; the modem then sends every log line as a UDP message to the given address and port.
The page checks the entries: a wrong address is answered with You have entered an invalid IP address! and a wrong port with UDP Port should be a number between 1 and 65535; the field then returns to its previous value. How to receive and read the log (console settings, UDP listener and firewall, line format) is described in chapter 18 "Logs and Troubleshooting".

WARNING:
Change Log Level and Reboot stores the log settings and restarts the modem about 1.5 seconds later; connections are interrupted during the restart. The page shows Rebooting... and reloads itself after 5 seconds. If the stored values do not change (for example the same address typed in another form), the page reports Log settings unchanged - no reboot needed. and the modem does not restart.
| Button | What happens |
| Restore Factory Configuration | Sets every setting back to its factory default and restarts the modem. The page asks Reset device to FACTORY configuration? All settings will be erased and the device will reboot. - press Confirm to go on or press Cancel to leave everything as it is. The page then shows Reset to Factory Configuration Command has been sent. and Rebooting.... |
| Reboot Device | Restarts the modem; the settings are kept. The page asks Reboot the device now? and, after the confirmation with Confirm, shows Reboot Device Command has been sent. and Rebooting.... |

WARNING:
Reboot Device starts the restart about 1.5 seconds after the confirmation, in every operating state of the modem (also while it waits for a network or for its targets); all connections are interrupted until the modem has started again. The page reloads itself after 5 seconds; if the modem is not back yet, the browser may show an error - reload the page a little later.

WARNING:
Restore Factory Configuration erases ALL settings - operating mode, network, serial, LoRa, security lists, log settings and the password (back to admin). After the restart the modem asks for its IP address by DHCP; a static address that was set before is gone, and without a DHCP server it uses 192.168.1.1. The page reloads itself after 5 seconds at the old address and may not find the modem there: find it by its MAC address with the abcZ Network Tool (chapter 17 "Software - abcZ Network Tool"). Download the configuration first if you may need it again.
The factory reset does not change the firmware: the running firmware and the alternative firmware stay as they are.
If the modem is just closing down for a restart the command is refused and the page shows "Restore to Factory Failed! (Rejected: reboot in progress - factory restore NOT applied)". Repeat it after the restart.
The LoRa Status page shows which modems a TLM hears and offers four tools to check a network during installation: the connection list with Request LoRa Connections, Ping of an IP device behind a remote modem, a link test and remote node information. All of them work over LoRa between modems with the same radio settings.

Every modem keeps a list of the modems it has received packets from. Each received packet updates the row of its sender; no request is needed for this. The list appears in the card Device Connections over LoRa and is read again with Refresh LoRa Status.
| Column | Content |
| RSSI (dBm), SNR (dB) | Signal strength and signal-to-noise ratio of the last packet of this modem. |
| R-avg, S-avg | Running average of RSSI and SNR. |
| RX | Number of packets received from this modem. |
| Group, Device | LoRa address of the modem. |
| Age (s) | Seconds since the last packet of this modem. |
| Details | Filled after a status request or status answer from that modem: ID (the module ID in hex), the Device Function and, for server and client gateways, Q(n) with the number of TCP connections and their IP addresses (a client gateway lists its connected TCP targets only). |

NOTE:
RSSI, SNR, their averages and RX are shown when the radio module reports the extended packet format (the factory setting). Otherwise these columns show a dash.
| Details shows | Device Function of the remote modem |
| TCP Server | LoRa to TCP/UDP Server Gateway |
| TCP Client | LoRa to TCP/UDP Client Gateway |
| Serial GW | LoRa to SERIAL Device Gateway (with or without a conversion option) |
| Repeater | LoRa Repeater |
| Modbus GW, RTU Master | Reported only by modems with older firmware. |
Request LoRa Connections asks all modems in radio range for their status. The page shows Request LoRa Communication List in Progress for 25 seconds and then reloads the status data. If the modem does not accept the request, the page shows Request Failed. with the reason in brackets instead, for example a radio module out of service.

NOTE:
Each modem also starts one round of five status requests by itself about one minute after it has been switched on or restarted (for example from the web page, after a configuration import or a firmware update), as soon as no data is waiting and it has received no LoRa packet for 10 seconds. Answers do not extend this round. The Details column therefore fills without a click shortly after the network has started. After the daily restart, after a restart ordered over the radio by another modem, and after a restart that the modem makes by itself to recover from a fault, this automatic round is not sent.

NOTE:
If no modem is found, check that all modems use the same radio settings and target group, raise Radio Power Level, and mount the antenna of the central modem high, for example on a pole.
Remote Ping (device on remote TLM network) checks an IP device behind another modem without leaving the web page. Enter the LoRa address of the remote modem (Group Address, Device Address) and the IP address of the device behind it (Target IP), then click Ping.

| Result line | Meaning |
| IDLE | No ping started since the modem started. |
| WAITING <IP> ... | Request sent, answer not yet received. |
| <IP> OK - RTT <n> ms (incl. LoRa) | remote LAN <m> ms | The device answered. n is the total time including both LoRa transfers, m the ping time on the remote Ethernet (below 1 ms is shown as <1 ms). |
| <IP> UNREACHABLE | The remote modem has no network or the device did not answer its ping. |
| <IP> NO RESPONSE (timeout) | No answer from the remote modem within 15 seconds. |

NOTE:
The remote modem handles one ping at a time; a second request arriving meanwhile is ignored and ends with NO RESPONSE. The remote modem must be in direct radio range - a repeater does not pass these frames. If Target IP is not a valid IP address, no ping is started: the page shows Request Failed. with a reason that speaks of "no recognized field in request", and the result line shows Not sent. Check the Target IP.
Link Test (site survey) measures the radio link to one remote modem in both directions. Enter the LoRa address of the remote modem and a Probe Count from 1 to 50 (10 from the factory), then click Start.

At the end the line shows DONE with the number of probes sent, the answers received and the success rate, followed by the average RSSI / SNR measured here (answers from the remote modem) and remote (probes received by the remote modem). Without the extended packet format the averages show a dash.

NOTE:
For an honest loss figure run the test with Acknowledged Transmission (C-Data) switched off: acknowledged transfer repeats lost frames and can hide losses. The page follows the result for the number of probes x 24 s + 30 s, at least 3 minutes. A second Start while a test runs (for example from another browser) is refused. The remote modem must be in direct radio range.
Remote Node (remote TLM management) reads the settings summary of a remote modem or restarts it. Nothing can be changed remotely. Enter the LoRa address of the remote modem and click Read Info or Reboot.

Read Info returns one line, for example OK - N:LORA_LM_SERVER DF:0 FW:3.00.01 IP:192.168.1.1 G:1 D:1 TxG:1 TxD:65535 SF:12 RX:<n> TX:<n>. If the remote modem does not answer within 15 seconds the line shows TIMEOUT - no response.
| Field | Meaning |
| N | Device Name (a long name cuts the end of the line) |
| DF | Device Function the remote modem is running (since its last start): 0 server gateway, 1 client gateway, 2 serial device gateway, 4 repeater |
| FW | Firmware version |
| IP | IP address of the remote modem |
| G, D | Group Own Address, Device Own Address |
| TxG, TxD | Tx Group Address, Tx Device Address |
| SF | LoRa Spreading Factor |
| RX, TX | LoRa messages received and sent since the remote modem started |

WARNING:
Reboot restarts the remote modem. After you confirm Reboot the remote device? the remote modem acknowledges (OK - Reboot acknowledged - remote device is restarting) and restarts shortly after; its connections and LoRa traffic stop until it is up again. No password is asked: any modem of the network with the same radio settings can restart another one. Use the White List on the Security Settings page to accept packets only from known modems.

WARNING:
Do not enter 65535 as Device Address in Remote Ping, Link Test or Remote Node unless you mean it: 65535 addresses every modem of that group in radio range. Reboot then restarts all of them at once, and the results of the other tools cannot be assigned to one modem. For Reboot with device address 65535 or group address 255 the page asks a second time and names the modems that will restart, for example This will restart ALL modems in ALL groups that hear the broadcast. Continue? The other tools do not ask.
This chapter sets up the most common Modbus case step by step: a Modbus TCP master (a SCADA or a PC program) reads a Modbus RTU slave (for example an energy meter) over LoRa. The general description is in 9.3 "Modbus TCP master to Modbus RTU slaves".

| Modem A (central) | Modem B (field) | |
| Connected to | Modbus TCP master over Ethernet | Modbus RTU slave over RS485 |
| Device Function | LoRa to TCP/UDP Server Gateway | LoRa to SERIAL Device Gateway with Enable Modbus TCP to RTU Conversion |
| Own address (group / device) | 1 / 1 | 1 / 2 |
| Target address (group / device) | 1 / 2 | 1 / 1 |
| Modbus work | None - passes the Modbus TCP frames unchanged | Converts Modbus TCP to Modbus RTU and back |
The example slave has the Modbus address 5 and communicates at 9600 baud, 8 data bits, no parity, 1 stop bit. The master reads 5 holding registers (function code 3) from register address 7. Use the values of your own slave where they differ.
Open the web interface of modem A (10.1 "Connecting to the Web Interface") and set the pages below in this order. Click Save Configuration on each page before you go to the next.

NOTE:
Keep Delimiter Enable unchecked for Modbus: Modbus frames are binary and may contain the delimiter byte, which would split a request into two radio messages.




NOTE:
Because the Tx Device Address changes from 65535 to a single modem, saving the page also checks Acknowledged Transmission (C-Data) once, and with it Listen Before Talk (LBT) on the 868 MHz models. Both stay editable. The same happens on modem B.
Open the web interface of modem B and set the pages below in this order.


NOTE:
Set the Serial Settings page after the Operating Mode page. When neither serial port is enabled yet (as on a factory modem), saving Operating Mode with LoRa to SERIAL Device Gateway enables RS485 at 19200 baud, 8_NONE_1; change it to the values of the slave on the Serial Settings page (10.4 "Serial Settings").


The new Device Function, the Modbus conversion, the serial settings and the LoRa settings take effect only after a restart. On the Management page of each modem click Reboot Device and confirm Reboot the device now?.

WARNING:
Reboot Device restarts the modem. The page shows Reboot Device Command has been sent. and the modem cannot be reached for a short time; its connections and LoRa traffic stop until it is up again. Open the page again afterwards.
| Setting in the master | Value in this example |
| IP address | IP address of modem A |
| TCP port | 502 (Server Listening Port of modem A) |
| Unit ID (slave ID) | 5 - modem B uses it as the Modbus RTU slave address |
| Function | 3 (read holding registers), address 7, quantity 5 |
LoRa is slow compared with a cable. The answer time is the sum of 100 ms collection time on modem A, two radio transfers, up to about 100 ms on each modem before a received radio message is passed on, the acknowledgement time when Acknowledged Transmission (C-Data) is on, and the answer time of the slave; the radio transfers grow with the LoRa Spreading Factor and the message length. Set the response timeout of the master longer than Timeout (ms) of modem B plus the two radio transfers, and leave a pause between polls. Start with generous values and shorten them after watching the real answer times. In our measurement with this example at the factory radio settings (SF12; C-Data and, on 868 MHz, LBT switched on by the save), a poll every second left about one request in five unanswered: the request did not reach the slave. With a poll every 3 seconds, a pause of 1 second between polls and a response timeout of 10 seconds in the master, all 118 requests were answered.
Start polling in the master. Then check both modems.


The LoRa Status page of each modem shows the last radio message it received (10.7 "LoRa Status"):
| Field | Modem A shows | Modem B shows |
| Destination Group Address / Destination Device Address | 01 / 0001 (the answer) | 01 / 0002 (the request) |
| Payload in Hex | The Modbus TCP answer: 7 header bytes, then 03 0A and the 10 data bytes of the 5 registers | The Modbus TCP request: 7 header bytes ending in 05 (Unit ID), then 03 00 07 00 05 |
| SNR (dB), est. RSSI (dBm) | Signal quality of modem B | Signal quality of modem A |
Latest Message Received - Gateway Side shows on modem A the last request from the master. On modem B it shows the Modbus TCP answer that modem B made from the answer of the slave (7 header bytes, function code, byte count and data), the exception answer of the slave, or the 0x0B exception frame; it is not the raw RTU answer, and answers that modem B dropped do not appear. To list the other modem with its signal values under Device Connections over LoRa, click Request LoRa Connections: the automatic request after a start waits for a quiet radio and is not sent while the master polls (chapter 11 "LoRa Network Discovery").

In this example modem A passes the radio data on unchanged, so keep every answer within one LoRa packet:
| Function code | 868 MHz models | 2.4 GHz models |
| 3 and 4 (registers) | up to 110 registers per request | up to 50 registers per request |
| 1 and 2 (coils, inputs) | up to 1760 per request | up to 800 per request |
A longer answer is sent by modem B in several packets, and modem A passes each packet to the master as it arrives. If a later packet is lost, the master receives an incomplete frame. Split larger blocks into several requests. With routing by Unit ID on modem A (9.4 "Modbus routing by Unit ID"), modem A instead collects the packets of an answer and passes it to the master only when it is complete; if a packet is lost, the master gets no answer, or exception 0x0B when Exception (0x0B) Enable is checked on modem A.
The same packet size applies to write requests of the master. A write of more than 108 registers (868 MHz models) or 48 registers (2.4 GHz models) with function code 16 is split by modem A into several radio packets. Modem B joins them before it writes the request to the slave, but each part travels as its own radio packet. Keep large writes within one packet as well.
Modem B passes every function code of the master to the slave. It finds the end of the answer of the slave from the function code:
| Function codes | End of the answer |
| 1, 2, 3, 4, 12, 17, 20, 21, 23 | by the byte count in the answer |
| 5, 6, 11, 15, 16 | fixed length of 8 bytes |
| 22 | fixed length of 10 bytes |
| 7 | fixed length of 5 bytes |
| 24 | by the two-byte count in the answer |
| Any other (for example 8 or 43) | when the RS485 line has been silent for more than 35 ms |
Modem B then checks the CRC of the answer before it sends it to modem A.
Modem B passes a Modbus exception answer of the slave (for example 02, illegal data address) on to the master as a Modbus TCP exception answer with the exception code of the slave. The master therefore learns the reason at once and does not wait for a timeout. An exception answer is a valid answer: it does not add to N. of Gateway Incorrect Modbus Characters Received.
An answer with a wrong slave address, a wrong function code or a wrong CRC is dropped. Modem B then keeps waiting until Timeout (ms) runs out; the master sees a timeout, or exception 0x0B when Exception (0x0B) Enable is checked, and further requests wait in the queue that long. The bytes of the dropped answer are added to N. of Gateway Incorrect Modbus Characters Received.

WARNING:
When more than 500 incorrect characters arrive without a valid answer of the slave in between, modem B restarts. Every valid answer, also an exception answer, starts this count again; N. of Gateway Incorrect Modbus Characters Received itself is a running total. A wrong baud rate, a noisy RS485 line or a second device answering with another slave address can therefore restart modem B. After two such restarts in a row modem B stops restarting and keeps running: App Status and the Serial / system box show SERIAL NOISE PARKED. A valid answer of the slave or Reboot Device ends this state. Check the wiring, Baud rate and Line Control and watch this counter during commissioning.
To read slaves behind several field modems, either set the Tx Device Address of modem A to 65535 so that every field modem receives every request, or let modem A route each Unit ID to its field modem (9.4 "Modbus routing by Unit ID"). With 65535, leave Exception (0x0B) Enable unchecked on the field modems: otherwise every field modem whose slaves do not answer sends its own exception.
With routing by Unit ID, modem A also shows the Modbus Response Timeout card. Modem A answers a Unit ID without a matching routing line at once with exception 0x0A. When no answer comes back in time, modem A sends exception 0x0B only if Exception (0x0B) Enable is checked on modem A; it is unchecked at the factory, and the master then sees a timeout.
Recordings of the web interface of a modem with firmware 3.00.01. The videos have no sound; each step is described in the chapter named above the video.
The Management page of a modem: the image file is chosen with Select Firmware File, sent with Upload Firmware and checked by the modem (Checking..., then "Firmware Uploaded"); afterwards Alternative Firmware Version shows the uploaded version. The switch to the new firmware with Reboot Alternative Firmware is not part of the recording. Steps, limits and the upgrade from 2.x: 10.9.2 "Live Firmware Update" and chapter 16 "Firmware Update and Upgrading from 2.x".
The example of chapter 12 "Modbus Communication Example": the settings of modem A and modem B, then a Modbus TCP master program on a PC reading the slave through both modems and, while the master polls, the Device Status pages of both modems and the LoRa Status page of modem B. In the recording the slave is a Modbus RTU slave program on the same PC, connected to the RS485 terminals of modem B through a USB-RS485 adapter, with the slave address and serial settings of the example.
An I/O mirror links two HUR Series Modbus TCP remote I/O devices over a TLM LoRa network: the outputs of one HUR device follow the inputs of the other one.
| Role | HUR devices |
| Output device | HUR158 and HUR258 (8 channel 5-275V AC-DC, 100mA digital optocoupler output); HUR168 and HUR268 (8 channel digital 5A 250VAC/30VDC relay output); HUR595 and HUR695 (5 channel 4-20mA analog output) |
| Input device | HUR358 and HUR458 (8 channel 12-275V AC-DC, 60mA digital optocoupler input); HUR558 and HUR658 (8 channel 0-10V and 0-20mA selectable analog input) |

NOTE:
Pair devices of the same kind: analog with analog, digital with digital.
Between the two HUR devices the TLM modems work as described in 9.1 "TCP/IP devices over LoRa". Both modems use the same radio settings, and each one has the other one as its target address on LoRa Settings.
The first video shows an analog pair on the bench: the current fed into the analog input HUR is set on the analog output HUR through the TLM modems.
The second video shows the configuration of the HUR devices and the TLM modems. It was recorded with firmware 2.x: the TLM pages in it look different and have other names; the names in this manual are those of firmware 3.00.01.
A Modbus TCP program on a PC reads two HUR Series Modbus TCP remote I/O devices in the field over a TLM LoRa network. The TLM modems pass the Modbus TCP frames unchanged.
The two videos below were recorded with firmware 2.x. The TLM pages in them look different and have other names; the names in this manual are those of firmware 3.00.01.
The first video shows the Modbus program reading the two HUR devices.
The second video shows the physical set-up of the same example: three TLM modems, the two HUR devices and the PC with the Modbus program.
There is one firmware file for each radio band, with and without BPL. Use the file whose name contains your model:
| Model | Firmware file |
| TLM154, TLM254 (868 MHz) | TLM154-254_868MHz_v3.00.01.binimg |
| TLM655 (868 MHz, BPL) | TLM655_868MHz_BPL_v3.00.01.binimg |
| TLM194, TLM294 (2.4 GHz) | TLM194-294_2.4GHz_v3.00.01.binimg |
| TLM695 (2.4 GHz, BPL) | TLM695_2.4GHz_BPL_v3.00.01.binimg |

WARNING:
The modem does not check which model a firmware file was made for. It also accepts the file of the other frequency band, or of the model with or without BPL, and then runs firmware that does not fit its radio module. Check the file name against the table above before every update.
The modem holds two firmware images: the running one and an alternative one. An update loads the new file into the alternative area while the modem keeps working; the modem changes over only when you start the alternative firmware. The buttons and messages are described in 10.9 "Management".

WARNING:
Reboot Alternative Firmware restarts the modem about 1.5 seconds after the answer, whatever the modem is doing at that moment. All connections and the radio traffic stop until the new firmware has started.
| Update | What happens to the settings |
| Between versions with the same first two numbers (for example from 3.00.00 to 3.00.01) | The settings are taken over. If the new firmware stores its settings in a different layout, it starts with factory settings instead. |
| Between versions with different first two numbers (for example from 2.x to 3.00.01, from 3.00.01 to a later 3.01.x, or back) | The settings are not taken over. The started firmware uses the settings stored in its own area; a freshly uploaded firmware starts with factory settings. |

NOTE:
The firmware that ran before stays in the modem as the alternative firmware. Reboot Alternative Firmware switches back to it. If both versions have the same first two numbers, the firmware you switch back to takes over the current settings, including changes you made since the update. Otherwise it starts with the settings it had when you left it.

NOTE:
An interrupted or failed upload does not touch the running firmware. The alternative area is then marked invalid and the change-over is refused; upload the file again.
The page files of the web interface carry the firmware build in their address, so the browser loads the new pages after an update. If a page still looks like the old interface, reload it with Ctrl+F5.

A modem with firmware 3.00.00 is updated as described above. The settings, the LoRa addresses and the password are taken over; the modem stays in its radio network and needs no new configuration. A stored value that is outside the range of the model is set back to its factory value at the first start and logged with a CFG norm line - for example Max Length (0=off) above 109 on a 2.4 GHz model.
| Topic | Firmware 3.00.01 (difference to 3.00.00) |
| Restart from the web page | Reboot Device, Reboot Alternative Firmware, Restore Factory Configuration, Change Log Level and Reboot and an accepted configuration file restart the modem in every state. Firmware 3.00.00 carried them out only in normal operation. |
| Parked self-restarts | Reboot Device and Reboot Alternative Firmware end every parked state and give a fresh start. More faults are parked: noise on the serial line and a radio module that stops answering while running; the third time in a row the modem parks instead of restarting. With the gateway still unreachable, a parked modem now restarts about every 30 minutes to try again; firmware 3.00.00 stayed parked without restarting. See chapter 18 "Logs and Troubleshooting". |
| Configuration upload | A file the modem cannot read is refused completely; nothing is stored and the answer names the line of the fault. Firmware 3.00.00 could store such a file partly. |
| Modbus | An exception answer of a Modbus RTU slave is passed to the master. With Enable Modbus Unit ID to Target Device Matching List, exception 0x0B for a missing answer is sent only when Exception (0x0B) Enable is checked, which is off at the factory. See chapter 9 "Usage Scenarios and Connection Diagrams". |
| Pages | Device Status shows a new summary of the radio, the LoRa link and the connections. A restart of a whole LoRa group from LoRa Status asks for a second confirmation. See chapter 10 "Configuration via Web Interface". |
| Log | Some start-up and park lines have new texts. See chapter 18 "Logs and Troubleshooting". |

NOTE:
If your Modbus TCP master relies on exception 0x0B with the routing by Unit ID, check Exception (0x0B) Enable on Operating Mode after the update.
A modem that runs a 2.x firmware is updated the same way: upload the 3.00.01 file of its model and start it with Reboot Alternative Firmware. The 2.x settings are not taken over: firmware 3.00.01 starts with factory settings.
| After the first start | Factory state and what to do |
| IP address | The modem asks for its address by DHCP; without a DHCP server it uses 192.168.1.1 (255.255.255.0). A modem that had a static address is not found at that address any more. Find it as described in chapter 17 "Software - abcZ Network Tool" or 10.1 "Connecting to the Web Interface". |
| Password | admin. Change it on the page Management. |
| LoRa addresses and radio settings | Factory values; the pages show a red band until the LoRa addresses are set. The modem cannot talk to the rest of the radio network until LoRa Settings are entered again. |
| Operating mode, serial and security settings | Factory values. Enter them again. |
| Log | Off (NONE). |

WARNING:
After the upgrade the modem is out of its radio network until it is configured again. Plan one visit per modem for the update and the configuration, and keep the notes of the 2.x settings at hand. If some modems are reached only through the radio link of other modems, update the farthest modem first; otherwise a modem in the middle that is back at factory settings cuts off the modems behind it.
Do not upload a configuration file saved by a 2.x firmware. Firmware 3.00.01 refuses a file it cannot read, but a 2.x file whose entries it happens to know is accepted without any identity check and stored with the settings it does not contain left as they are. Configure the first upgraded modem by hand, download its configuration and use that file for the other modems of the same model.

NOTE:
The 2.x device function "LoRa to Serial Device Gateway with Modbus TCP/RTU Conversion" is no longer a separate entry of Device Function. Select LoRa to SERIAL Device Gateway and tick Enable Modbus TCP to RTU Conversion. A configuration file that still holds the old function is converted to this setting when the modem starts.
| Step | What to do | Why it matters |
| Before the upgrade | ||
| 1. Record every setting | Download the configuration and note the settings of every page by hand or with screenshots: operating mode, network, serial port, LoRa addresses and radio settings with the encryption key, security lists, log. | The 2.x settings are not taken over, and a 2.x configuration file should not be uploaded (see above). |
| 2. Pick the file by model | Use the firmware file whose name contains your model (16.1 "Firmware files"). | Each file fits only the radio band and BPL type of its models. |
| 3. Plan the access after the upgrade | The modem asks for its address by DHCP and uses 192.168.1.1 without a DHCP server. Find it by its MAC address with the abcZ Network Tool (chapter 17 "Software - abcZ Network Tool"). Update the farthest modem of a radio chain first. | A modem that had a static address does not answer there any more. |
| Upgrade | ||
| 4. Upload and start the firmware | Upload the file on Management, then click Reboot Alternative Firmware once. | The modem restarts with the new firmware. Do not click again: wait for the restart and check the version first (16.2 "Updating the firmware"). |
| 5. Read the first start | The red band on the pages is normal now; with the log switched on, so is the line "CONFIG: factory defaults - reconfigure device!". | They show that the LoRa addresses are still at their factory values, not a failed update. |
| Configuration | ||
| 6. Enter the settings again | LoRa Settings, Operating Mode, Network Settings and Serial Settings, then Reboot Device on Management. Enter the security lists, the password and the log settings again as well. | These four pages take effect only after a restart. |
| Verification | ||
| 7. Check the modem | The version line at the top of the page shows 3.00.01. On LoRa Status, Request LoRa Connections lists the other modems of the network. | The modem runs the new firmware and is back in its radio network. |
| Topic | Firmware 3.00.01 |
| Device clock | Set Device Time sets the clock without restarting. When a time server is reachable the modem compares its clock with it every hour and corrects it when the difference is 5 seconds or more. The time server gives UTC and there is no time-zone setting, so the clock and the log run on UTC; a local time set by hand is corrected back to UTC. |
| Automatic restarts | The modem restarts itself after 24 hours of running time. Most self-restarts (no client or target, unreachable gateway, radio module, serial line noise, network faults) are parked the third time in a row instead of restarting (the gateway check still restarts about every 30 minutes to try again); the others have no limit. See chapter 18 "Logs and Troubleshooting". |
| Configuration upload | An accepted file restarts the modem by itself. A file of another TLM model is refused (see below). |
| Port to target list | The list of TCP ports with their LoRa targets works only in LoRa to TCP/UDP Server Gateway; in the other functions the target comes from LoRa Settings. |
| New settings and status cards | Data packing, UDP, Modbus routing and Modbus response timeout on Operating Mode; LBT and C-Data on LoRa Settings (both off at the factory); Remote Ping, Link Test and Remote Node on LoRa Status. See chapter 10 "Configuration via Web Interface". |
A configuration file downloaded from firmware 3.00.01 starts with an identification block. It names the product, the radio variant, the firmware version and build, the size of the settings block and the device name:
"_meta": { "product": "REDZ TLM Series 868MHz LoRa Based RF Modem", "variant": "868", "fw": "3.00.01", "build": "...", "cfg_bytes": ..., "device": "..." },
| Model | Product name in the file | Variant |
| TLM154, TLM254 | REDZ TLM Series 868MHz LoRa Based RF Modem | 868 |
| TLM655 | REDZ TLM Series 868MHz LoRa Based RF Modem with BPL | 868,UNE |
| TLM194, TLM294 | REDZ TLM Series 2.4 GHz LoRa Based RF Modem | 2G4 |
| TLM695 | REDZ TLM Series 2.4 GHz LoRa Based RF Modem with BPL | 2G4,UNE |
Before anything is stored, the modem compares the block with itself. The size of the settings block (cfg_bytes) must match, otherwise the file is refused with "Rejected - layout mismatch: file <n>, device <n>". The product name and the variant must be exactly its own: a file of the other frequency band, or of the model with or without BPL, is refused with "Rejected - product mismatch: file '...', device '...'" and nothing changes. A file of another firmware version with the same settings block size, for example a file saved by firmware 3.00.00, is accepted with a warning: "Configuration Uploaded (warning: file from fw <x>, device runs 3.00.01) - device will restart". The full list of answers is in 10.9 "Management".
A file with a fault in it is refused as a whole and nothing is stored; the answer names the line and the position of the fault. A file without identification block (for example one edited by hand without it) is accepted without the check above; the answer then says "Configuration Uploaded (legacy config - no _meta) - device will restart".

WARNING:
An accepted configuration file restarts the modem about 1.5 seconds after the answer. If the file holds other network settings or another password, the modem is reached with them afterwards.
The abcZ Network Tool is our Windows program for REDZ devices on an Ethernet network. With TLM Series modems it finds them and shows their address, product, firmware version and MAC address, reads the identity of one modem, gives a modem a static address, restarts or resets a modem, and updates the firmware of one modem or of many modems at once. This chapter describes version 1.1.0 and only what you need with a TLM Series LoRa RF modem. Download the tool and its own user guide from the Support page of redz-sc.com (https://redz-sc.com/en/support).
The tool talks to the modem the way a web browser does. Type the password of the modem's web interface in Password on each tab; leave User at admin, because the modem accepts only that user name. The factory password is admin. A modem with another password is listed with "auth required (password?)" in the Product column.
From firmware 3.00.01 on, the modem confirms every command of the tool: it answers whether it carried the command out or why it refused it, and the tool shows that answer. The tool decides by the firmware version it read from the modem; for the commands on the Discovery tab this is the version shown in the Discovery list, so scan again after you have updated a modem. A modem that still runs 3.00.00 does not confirm commands; the tool then reports only that the request reached the modem.
Open the Discovery tab. In IP range type the addresses to search: a network such as 192.168.0.0/24, a range of the last number such as 192.168.0.1-254, a range such as 192.168.0.10-192.168.1.50, or one address. Click Scan (HTTP): the tool reads the start page of every address in the range, so it also finds modems behind a router. Each modem found appears as a row with IP, MAC, Series, Product, Device (the device name), Version, Build date and Status (the result of the last right-click command on that row).

NOTE:
Timeout (s) is the wait per address (2.5 s by default; raise it when modems behind a router are missed) and Parallel the number of addresses asked at once (24 by default). The modem serves at most 7 web connections at a time. Very high Parallel values together with scans repeated one after the other can use up these connections: every modem then looks offline for about a minute and recovers by itself. Raise Parallel only for large ranges and do not repeat scans back to back.
The Series column shows TLM-LM for a TLM Series LoRa RF modem. The tool takes it from the product name: a TLM product whose name contains "LoRaWAN" is shown as TLM-LW. That is the TLM Series LoRaWAN end node, another product with its own firmware; never give a TLM-LW device a modem image or the other way round.
Discover (UDP) is faster: it asks with a broadcast on UDP port 30303, which the modem answers. A broadcast does not cross routers, so it finds only modems in the same subnet as the PC. The modems that answer are then read in the same way as with Scan. A modem that answered the broadcast but could not be read (for example a wrong password or a timeout) shows only its name followed by "(UDP)" in Product; check the password and scan it with Scan (HTTP).

Double-click a row, or right-click it and choose Open Web Page, to open the modem's web interface in your browser; Copy IP copies its address. Series filter (for example TLM-LM) and Find narrow the list. Export CSV saves the selected rows (or all rows shown) as a list for Fleet Update.
A modem that is not found may still be at its factory address 192.168.1.1 in a network without a DHCP server; see 10.1 "Connecting to the Web Interface". Assign Address at Factory IP... on the Discovery tab gives such a device a new address from a PC in another network; its steps are in the tool's own user guide.
On the Single Device Update tab, type the modem's address in Device IP and click Read Identity (safe). The panel Device identity (last read) shows the product name, firmware version, build date, MAC address and device name. Nothing is changed on the modem. If Expected product is empty, the tool fills it with the product name it read; this name protects the firmware update (below). Read Identity is also the way to check a modem after a restart, a new address or a firmware update: the version and build date it shows are the ones the modem runs now. Open Web Page opens the web interface of the modem at Device IP in your browser.

On the Discovery tab, right-click the modem's row and choose Set IP / Subnet / Gateway (one device).... The tool first reads the modem's network settings; the window "Set network - <address>" then shows IP address, Subnet mask and Gateway as they are stored for the static address (Server IP Address, Server Net Mask and Server Gateway Address in 10.3 "Network Settings"). A modem that has its address from a DHCP server shows these stored values, not the address it uses now; a modem that never had a static address shows the factory values 192.168.1.1, 255.255.255.0 and 192.168.1.1.

Type the new values, click Apply and type SET to confirm. If another task of the tool (for example a fleet update) is still running, nothing is written and the log asks you to wait or use Stop. Otherwise the tool turns on Use Static Address for Device, saves the three values (the other network settings are kept) and waits for the modem's answer. With firmware 3.00.01 the log says "network settings confirmed by device (REQ=SAVE_NET, reboot required); rebooting to apply...". If the modem refuses the change, for example because it is restarting at that moment, the log and the Status column show "REFUSED by device:" with the modem's reason, and the tool stops there: nothing was saved and the modem keeps its address. After a confirmed save the tool restarts the modem and looks for it by its MAC address at the new address. It searches the 256 addresses around the new address (for 192.168.5.20: 192.168.5.0 to 192.168.5.255). When it finds the modem there, the log says "now reachable at" with the new address. When it does not, the log warns that the modem was not found by its MAC address, and the Status column shows "IP set? not found at" with the address you typed. While a scan or an update is running, the tool refuses this command; wait until the task ends.

NOTE:
A modem that still runs 3.00.00 does not confirm the save: the log then says only "accepted (HTTP 200; device gives no acknowledgement on this firmware)", which means that the request reached the modem, not that the modem saved it. For such a modem the search by MAC address is the only check.

NOTE:
The tool can find the modem only if the PC can reach the new address. With a subnet mask wider than 255.255.255.0 it still searches only the 256 addresses around the new address. If the modem is not found after the change, look for it at the new address with Scan (HTTP), Read Identity (safe) or your browser, and also at the OLD address: the new address takes effect only when the modem restarts, and the tool does not check that the restart command arrived. A wrong subnet mask or gateway can make the modem unreachable.
Select one or more rows on the Discovery tab, right-click and choose Reboot Device (selected)... or Restore Factory Configuration (selected)..., then confirm; for the factory reset you also type RESTORE. The Status column shows the result for each modem. With firmware 3.00.01 a restart shows a check mark and "reboot: confirmed by device (REQ=REBOOT, reboot required)"; the words "reboot required" only repeat that the modem restarts. "REFUSED by device:" is followed by the modem's reason. "NOT SENT" means the request did not reach the modem; "FAILED (HTTP 401 - password?)" means the modem refused it because of a wrong password. A modem that still runs 3.00.00 gives no confirmation: the column shows a warning sign and "accepted (HTTP 200; device gives no acknowledgement on this firmware)" or "sent, response lost", which is not proof that it restarted. To be sure, wait until the modem is back and click Read Identity (safe) for it, or scan again.

NOTE:
Tool 1.1.0 and a modem with firmware 3.00.01: after Restore Factory Configuration (selected)... the Status column shows a cross and "REFUSED by device: device acknowledged a different request: RESTORE_FACTORY", although the modem accepted the command and resets itself. Check the modem after the reset (see the warning below) instead of repeating the command.

WARNING:
Both commands restart the modem, and every connection through it is dropped until it is back. Restore Factory Configuration (selected)... deletes every setting of the selected modems, including the password, the radio settings and the static address; afterwards a modem takes its address from a DHCP server or stays at 192.168.1.1. Check the number of selected rows before you confirm.
Each TLM Series model has its own firmware image. Use the image of your model:
| Model | Product name shown by the modem | Firmware image |
| TLM154, TLM254 | REDZ TLM Series 868MHz LoRa Based RF Modem | TLM154-254_868MHz_v3.00.01.binimg |
| TLM655 | REDZ TLM Series 868MHz LoRa Based RF Modem with BPL | TLM655_868MHz_BPL_v3.00.01.binimg |
| TLM194, TLM294 | REDZ TLM Series 2.4 GHz LoRa Based RF Modem | TLM194-294_2.4GHz_v3.00.01.binimg |
| TLM695 | REDZ TLM Series 2.4 GHz LoRa Based RF Modem with BPL | TLM695_2.4GHz_BPL_v3.00.01.binimg |
On the Single Device Update tab:
Before it writes, the tool stops when the product name read from the modem is not the expected one (this cannot be overridden), skips a modem that already runs the version in the file name (tick Force (flash even if version matches) to write it anyway) and compares the image with the modem: the product family (an image of the TLM Series LoRaWAN end node is caught the same way), the frequency band (868 MHz or 2.4 GHz) and BPL or no BPL. When they differ it asks in the window Image / device mismatch; answer No and the modem is not touched.

WARNING:
The modem itself accepts the image of every TLM Series model: an 868 MHz modem takes a 2.4 GHz image and a modem without BPL takes a BPL image, and the other way round. The tool's comparison is the only protection. Never answer Yes in Image / device mismatch unless you are sure of the model, and in Fleet Update keep Stop on image/device mismatch ticked.
The image is written into the modem's alternative firmware bank; the running firmware is not touched by the upload. The tool then sends the command to start the new firmware once. Whether the modem confirms this command depends on the firmware it runs before the update: a modem at 3.00.01 answers, and the log shows "confirmed by device (REQ=REBOOT_ALT_FW, reboot required)"; if it refuses (for example because the uploaded image is not valid), the update ends at once with BANK SWITCH REFUSED and the modem keeps its old firmware. A modem that still runs 3.00.00 (the first update to 3.00.01) gives no confirmation: the log says "accepted (HTTP 200; device gives no acknowledgement on this firmware)" and that the version and build stamp decides the outcome. In both cases the tool waits for the restart and compares the version and build date the modem reports with those of the uploaded image; when the modem does not answer at its address, it looks for it by its MAC address in the 256 addresses around it and at the factory address 192.168.1.1. The log ends with "RESULT:" and SUCCESS when the modem reports the version and build date of the uploaded image. If you write an image with the same build date as the one the modem already runs, this check cannot tell whether the modem switched. When the modem did not switch or did not come back in time, the result is NOT CONFIRMED. In that case wait a little and click Read Identity (safe): the version and build date show which firmware the modem runs.


WARNING:
The modem restarts at the end of the update, and every connection through it is dropped until it is back.
With Upload only (no reboot) ticked, the tool writes the image into the alternative bank and stops there: the modem keeps running its current firmware and the result is UPLOADED (no reboot). To start the new firmware later, use Reboot Alternative Firmware on the modem's web interface (see 10.9 "Management"); this restarts the modem.
The result of an update is one of these texts (in the log after "RESULT:", and in the Status column of Fleet Update):
| Result | Meaning | Firmware the modem runs |
| SUCCESS | The modem reports the version and build date of the uploaded image. | the new one |
| SKIPPED (version) | The modem already runs the version of the image; nothing was written. | unchanged |
| UPLOADED (no reboot) | Written into the alternative bank; not started (Upload only). | unchanged |
| IDENTITY READ FAILED | The modem could not be read (address, network or password). | unchanged |
| PRODUCT MISMATCH | The product name differs from Expected product. | unchanged |
| IMAGE/DEVICE MISMATCH | The image is for another family, band or BPL variant. | unchanged |
| IMAGE FILE MISSING | The image file was not found. | unchanged |
| IMAGE INVALID | The modem did not accept the image (it could not decode it). | unchanged |
| ALT IMAGE DISABLED | The uploaded image is not valid in the alternative bank. | unchanged |
| UPLOAD ERROR | The upload broke off (network or timeout). | unchanged |
| BANK SWITCH REFUSED | The modem refused the command to start the new firmware (the reason is in the log), or the command could not be sent; the image waits in the alternative bank. | unchanged |
| NOT CONFIRMED | The start command was sent, but the new version was not seen in time. | check with Read Identity |
| CANCELLED (stopped) | Stopped with Stop. | check with Read Identity |
| UPDATED, FACTORY RESET FAILED | Updated, but the requested factory reset could not be sent or the modem answered it with an error (see the note below). | the new one |

NOTE:
Stop (or Esc) cancels the modems and addresses that are still waiting; the step in progress finishes or times out, and an upload in progress is not aborted (it only writes the alternative bank). A modem whose start command was already sent may restart with the new firmware: check it later with Read Identity (safe).

NOTE:
Factory reset after update deletes every setting of the modem after the update, and its address may change. Leave it off unless you want the factory settings. When the factory reset was sent, the result line reads "SUCCESS (factory reset)"; check the modem afterwards (it now uses the factory settings and may be at another address, see above). When the modem was updated but the factory reset could not be sent or was answered with an error, the result is UPDATED, FACTORY RESET FAILED; as the pilot of a fleet update this result stops the fleet. With tool 1.1.0 this also happens when the modem already ran 3.00.01 before the update: the modem then resets as requested, but the tool reads its confirmation as a refusal (see 17.5 "Restart or reset the modem"). Check such a modem with Read Identity (safe) after the reset.
The Fleet Update tab updates a list of modems from a CSV file with the columns ip, expected_product and image_path (the image path is relative to the CSV file). Export CSV on the Discovery tab writes such a list with the image column empty; fill in the image of each modem's model from the table above. Validate CSV (dry-run) checks the list without writing, and Run Fleet Update starts the update. With a Pilot IP (opt.) the tool updates that modem first and leaves all the others untouched if it fails; the rest are then updated Parallelism (jobs) at a time. Choose a pilot that does not yet run the new version: a skipped pilot counts as a success, and a pilot whose image does not match stops the fleet. With Stop on image/device mismatch ticked, a modem whose image does not match its band or BPL is skipped and the others continue. The other options of this tab (images assigned in the table, Write report CSV, Save CSV...) are described in the tool's own user guide.
The modem writes what it does as text lines. The log is off at the factory. It is switched on in the card LOG of the page Management (10.9 "Management"):
| Field | Use |
| Log Level | ERROR writes faults only, INFO adds normal events, DEBUG writes everything. For troubleshooting INFO is usually enough. |
| Log Output | CONSOLE (console port of the modem) or UDP SERVER (over the network). |
| UDP Server Port, UDP Server IP | With UDP SERVER: port and address of the PC that receives the log. |

WARNING:
Change Log Level and Reboot stores the log settings and restarts the modem when a value has changed. Connections and radio traffic stop during the restart.
| Output | How to receive it |
| CONSOLE | Connect a PC to the console port and open a terminal program at 115200 baud, 8 data bits, no parity, 1 stop bit. |
| UDP SERVER | Start a UDP receiver program on the PC at UDP Server IP and listen on UDP Server Port. Every log line arrives as one UDP message. Lines are sent only while the network of the modem is up; allow the port in the firewall of the PC. Lines written while they cannot be sent (no network, many lines at once) are held only in a short buffer; when it is full, new lines are dropped and a line "LOG ring overflow - line(s) dropped (oldest kept): <n>" follows. |

The video below shows the same steps with a REDZ CKL Series device and the program Packet Sender as the UDP receiver. The names of the fields and of the button in the LOG card are the same on the TLM modem; their order on the page can differ, and the log lines of the CKL device look different from those of the TLM modem described below.
Each line starts with the date and time of the modem clock (day-month-year), then ERR-, INF- or DBG- for the level, then the message. Where a message carries a number, the number follows the text directly:
16-10-26 14:03:12 ERR-NETWD: gateway unreachable, consecutive failures2 16-10-26 14:05:40 INF-NETWD: gateway reachable again (step=0 fail=2 park=0)

NOTE:
A line that is too long for the log is cut and ends with the character ~.
After every start the log contains, near its start, two lines that tell why the modem started. They are written only when the log is on.
BOOT rcon=0x... POR rbt=FRESHBOOT-POR diag streak=0 wdt=... ps=... wc=0x... norm=0
| Word in the BOOT line | Meaning |
| POR | Power was switched on. |
| BOR! | The supply voltage dropped too low while the modem was running. |
| SWR | Software restart: the modem restarted itself or was restarted from the web page. |
| WDTO | The watchdog restarted the modem because the software stopped responding. |
| EXTR | External reset. |
| rbt=FRESHBOOT-POR | First start after a power-on. |
| rbt=FRESHBOOT-NEW | First start of a new firmware build: after a firmware update or after Reboot Alternative Firmware to another build. |
| rbt=FRESHBOOT-LAY | The diagnostic records of the last run could not be read. |
| rbt=f<n>:<n> | The place in the firmware that asked for the restart. Send it to REDZ support. |
| src=WEB | Restart with Reboot Device. |
| src=ALTF | Restart with Reboot Alternative Firmware to the same build. |
| src=IMPO | Restart after a configuration file was accepted. |
| src=SLOG | Restart after Change Log Level and Reboot. |
| src=IPAQ, src=IPCH | Restart because the modem received its DHCP address after starting with 192.168.1.1 (IPAQ) or because its address changed (IPCH). |
| EXCP:... | The previous run ended with a processor fault. Send the line to REDZ support. |
The second line (diag ...) holds service values for REDZ support.
The table lists the messages a user is most likely to meet, with the level at which they appear. <n> stands for a number, <ip> for an address.
| Message | Level | Meaning |
| Start-up and network | ||
| CONFIG: factory defaults - reconfigure device! | ERROR | The LoRa addresses are still at their factory values. Set them on LoRa Settings. |
| CONFIG: only addresses set - rest at factory | INFO | The LoRa addresses are set, all other settings are still at their factory values. |
| NET: DHCP not bound in time - continuing on default IP | ERROR | No DHCP answer within 1 minute after the start; the modem works with 192.168.1.1. |
| NET: no link, no serial role - waiting (no reboot) | ERROR | No Ethernet link at the start in a function without serial port. The modem waits for the link without restarting. |
| NET: no link - serial mode continues on default IP | INFO | No Ethernet link at the start in a serial function; the modem works with 192.168.1.1. |
| ETH link detected after no-link boot - restart for DHCP | INFO | The link came after such a start; the modem restarts once to get its DHCP address. |
| IP acquired: <ip> -> <ip> - restart (listener rebind) | ERROR | The modem started with 192.168.1.1 and has now received a DHCP address. It restarts once to use it. |
| IP changed: <ip> -> <ip> - restarting | ERROR | The DHCP server gave another address. The modem restarts to use it. |
| NETDIAG link=<n> ready=<n> dhcp=<n> ip=<ip> | INFO | The network state changed: link, network ready, DHCP address held (1 = yes) and the address in use. |
| DHCP renew in progress - not interfering | INFO | The modem renews its DHCP address; no action needed. |
| Clients and targets | ||
| TCP Client Connected. Serving connections: <n> | INFO | A client connected to the modem. |
| UDP peer added. Slot:<n> | INFO | A UDP partner sent its first message and was registered. |
| UDP peer rejected (max connections) | INFO | A UDP partner was refused because all client places are in use. |
| TCP Client connected: <n> | INFO | Client function: the modem connected to target number <n>. |
| No client timeout: soft re-listen. Count:<n> | ERROR | Server function: no client for 5 minutes; the modem opens its listening ports again. |
| Deep watchdog (no client): reboot. Relistens:12 | ERROR | Server function: no client for about 1 hour; the modem restarts (see the table below). |
| Deep watchdog (no client): parked, no reboot. Relistens:12 | ERROR | The same, for the third time in a row: the modem does not restart. |
| No host is reachable timeout (seconds): 2000 | ERROR | Client function: none of the enabled targets answered for about 33 minutes; the modem restarts. |
| TCP target connect try timeout (s): 300 | INFO | Client function: a target answers but does not accept the connection for 5 minutes; the modem restarts. |
| Restart due to TCPIP_TCP_IsConnected | INFO | Client function: no target has been connected for 5 minutes; the modem restarts. |
| SVC down x3 (<reason>): reboot off; check clients/targets | ERROR | The client or target problem came back a third time; the modem stops restarting for it. |
| SVC RESTORED: reboot SUPPRESSED x<n> (last: <reason>) | ERROR | A client connected or a target was reached again after that. |
| SVC park cleared by user: streak x<n> (park total <n>) | ERROR | Reboot Device or Reboot Alternative Firmware ended the parked state. |
| Gateway check (DHCP address mode) | ||
| NETWD: gateway unreachable, consecutive failures<n> | ERROR | The network gateway did not answer the check of this minute. |
| NETWD: DHCP renew (lease may be stale) | ERROR | 5 failed checks: the modem renews its DHCP address. |
| NETWD: DHCP re-discover (disable/enable) | ERROR | 5 more failed checks: the modem asks for a new DHCP address; the address is dropped for a moment. |
| NETWD: still unreachable -> reboot | ERROR | 5 more failed checks: the modem restarts. |
| NETWD x3: gw lost - parked, reboot at a round end >=10m | ERROR | Third round in a row: the modem stops restarting for it and keeps checking; it retries one restart at the end of a later round, at least 10 minutes later. |
| NETWD PARK: 10m elapsed, gw still lost - retry reboot | ERROR | While parked, the gateway is still unreachable at the end of a later round; the modem restarts once to try again. |
| NETWD park cleared by user: streak x<n> (park total <n>) | ERROR | Reboot Device or Reboot Alternative Firmware ended the parked state. |
| NETWD: lease lost (no stage yet) - ladder counts (step): <n> | ERROR | The modem had a DHCP address and lost it; the checks count this as an unreachable gateway. |
| NETWD: gateway reachable again (step=<n> fail=<n> park=<n>) | INFO | The gateway answers again. |
| Network faults | ||
| All sockets are invalid. | ERROR | The listening ports of the modem were lost; the modem restarts to open them again. |
| All sockets invalid in NETWD recovery - reboot suppressed | ERROR | The same while the gateway check is asking for a new address; the modem does not restart for it. |
| NET down x3 (<reason>): no net; fix link, web reboot or power-cycle | ERROR | A network fault caused a restart request for the third time in a row; the modem stops restarting for it and keeps working without the network. |
| NET RESTORED: reboot SUPPRESSED x<n> (last: <reason>) | ERROR | The network works again, or a web restart ended the parked state. |
| NET reboot suppressed by active NETWD park | ERROR | The gateway check is parked, so the modem does not restart for other network faults either. |
| Radio module | ||
| Module blind recovery: RESET_RADIO_CONFIG (factory) | ERROR | The radio module did not answer. The modem resets the radio settings of the module, then the module. |
| Module blind recovery: RESET | ERROR | Second step of the same recovery. |
| Restart in MODULE_ERROR_AFTERWARDS | ERROR | The radio module still does not answer; the modem restarts. |
| LORA module DEAD x3: no radio; web REBOOT to retry | ERROR | Third failure in a row: the modem stops restarting. Only the web interface stays reachable; the TCP and serial gateway does not run. Restart it with Reboot Device to try again. |
| LORA DEAD: parked after <n> cycles (<site>) | ERROR | The radio module stopped answering while running, for the third time in a row: the modem stops restarting and works without radio. |
| LORA RESTORED: reboot SUPPRESSED x<n> | ERROR | After a restart the radio module answered again. |
| LORA park cleared by user: SUPPRESSED x<n> | ERROR | Reboot Device or Reboot Alternative Firmware was used to retry the radio. |
| LORA Module:Will send device config | INFO | The modem sends its radio settings to the module. |
| LORA Send U Data Tx Ind. ERROR | ERROR | The radio module reported that it could not send a frame, for example because Listen Before Talk found the channel busy. At most one such line is written every 3 seconds. |
| LORA TX-IND errors not logged (rate limit): <n> | ERROR | <n> more such send errors happened since the last line and were not written one by one. |
| LORA RTC control Restart. !!!!!!!!!!! | ERROR | The radio module has not answered for 60 seconds while running; the modem restarts. |
| Restart due to module busy: <n> | ERROR | The radio module reported busy for more than 3 minutes without a break; the modem restarts. |
| Serial port | ||
| Serial INC CHARS RESTART | ERROR | More than 500 invalid bytes were received in Modbus answers from the serial devices since the last valid answer; the modem restarts. |
| numUartErrorRecoveries_SERIAL Reboot!!500 | ERROR | Receive errors on the serial port repeated 500 times without a pause of 3 seconds; the modem restarts. |
| SERIAL NOISE: parked after <n> cycles (<site>) | ERROR | One of the two serial faults above came back a third time; the modem stops restarting for it. |
| SERIAL alive - noise streak cleared | INFO | A valid answer came from the serial line again. |
| SERIAL park cleared by user: noise x<n> | ERROR | Reboot Device or Reboot Alternative Firmware ended the parked state. |
| numUartErrorRecoveries_MODULE Reboot!!500 | ERROR | The same receive errors on the internal link to the radio module. |
| Daily restart | ||
| RESTART_SYSTEM_TIMEOUT: (S)<n> | INFO | The modem has run for 24 hours and restarts. |
| Web actions and buttons | ||
| Reboot: web request - user | ERROR | Reboot Device was clicked. |
| FW upload start - alt pre-erased; no more log = cut. bytes: <n> | ERROR | A firmware upload has started; the alternative area stays invalid until the upload is complete. |
| FW upload FAILED: <reason>, alt erased @<n> | ERROR | The firmware upload failed; upload the file again. |
| FW upload REJECTED at INIT - image larger than alt bank (flash untouched), bytes: <n> | ERROR | The file is too large to be a firmware file; nothing was written. |
| RbtAltFim REJECTED - alt content stamp invalid | ERROR | Reboot Alternative Firmware was refused because no valid firmware is in the alternative area. |
| XDIAG ... | ERROR | Service values written in the 30 seconds after a firmware upload. They do not mean a fault. |
| Config import OK - restarting to apply | ERROR | A configuration file was accepted and stored. |
| Config import REJECTED - RAM restored from flash | ERROR | A configuration file was refused; nothing was stored. |
| product mismatch - file:'<product>' | ERROR | A configuration file of another TLM model was refused. |
| Config upload: legacy file (no _meta), identity NOT verified | ERROR | A configuration file without identification block was stored. |
| POST value REJECTED (range) <field>=<value> - kept current | ERROR | A value sent from a page was outside its range and was not stored; the setting keeps its value. |
| SAVE rejected: reboot in progress - config write skipped | ERROR | A page was saved while the modem was already restarting; save again after the start. |
| SAVE skipped: every field rejected - flash NOT written | ERROR | A page was saved, but the modem refused every value of it; nothing was stored. |
| CFG norm <setting> val=<n>(0x<n>) | ERROR | A stored or uploaded setting was outside its allowed range or in conflict with another setting and was corrected, mostly to its factory value. The line names the setting and the old value. |
| <tool> rejected: radio parked | ERROR | A LoRa Status tool (REMOTE_PING, LINK_TEST, RNODE_INFO, RNODE_REBOOT or LORA_STATUS) was refused because the radio module is out of service; nothing was sent. |
| <tool> rejected: <n> invalid field(s), not sent | ERROR | A Remote Ping, Link Test or Remote Node request had an invalid group or device address; nothing was sent. |
| LINK_TEST rejected: a test is already running | ERROR | A Link Test was started while another one was still running; the new one was not started. |
| Config import hold cleared: upload cut | ERROR | A configuration upload broke off. LoRa sending, held during the upload, starts again. Nothing was stored; restart the modem so that it works with its stored settings again, or upload the file again. |
| REDZ DIAG: executing remote reboot | ERROR | Another modem restarted this modem over the radio (10.7 "LoRa Status"). |
| RESET_TO_CLIENT_BY_BUTTON: (S)<n> | INFO | A reset button was held for 5 seconds; the modem restores its factory settings and restarts. |
| RESET_TO_SERVER_BY_BUTTON: (S)<n> | INFO | The same for the other reset button. |
The modem restarts itself when a fault does not clear by itself. For the faults that can come back after every restart, it counts the restarts: the third time in a row it stops restarting ("parked") and keeps working with what is left. The App Status line of the page 10.5 "Device Status" then shows the parked state. After a self-restart (also the daily one) the parked text is gone until the fault comes back; the count is kept, so the modem then parks again without restarting. Serial line noise is the exception: its parked text stays after a self-restart.
| Case | When the modem restarts | Third time in a row |
| LoRa to TCP/UDP Server Gateway (transparent) | No client has connected for about 1 hour (every 5 minutes the listening ports are opened again first). | Parked: (SVC PARKED - no client/target) |
| LoRa to TCP/UDP Client Gateway | None of the enabled targets has answered for about 33 minutes, or no target has been connected for 5 minutes. | Parked: (SVC PARKED - no client/target) |
| DHCP address mode (Use Static Address for Device and DHCP Server Enabled off) | The network gateway has not answered for about 15 minutes: after 5 minutes the modem renews its DHCP address, after 10 minutes it asks for a new one, after 15 minutes it restarts. | Parked: (GATEWAY UNREACHABLE - parked). While the gateway stays unreachable the modem still restarts about every 30 minutes to try again. While parked, it does not restart for the network faults below. |
| Radio module does not answer at start-up | After a recovery attempt of 45 seconds (BPL models: 60 seconds). | Parked: (RADIO DEAD - web reboot to retry). Only the web interface stays reachable; the gateway does not run. |
| Radio module while running | No answer for 60 seconds, or more than 500 invalid bytes. | Parked: (RADIO DEAD - web reboot to retry). The gateway keeps running without radio. |
| Serial line noise | More than 500 invalid bytes in answers from the serial devices since the last valid answer (with Enable Modbus TCP to RTU Conversion), or receive errors that repeat 500 times without a pause of 3 seconds. | Parked: (SERIAL NOISE PARKED - check line/baud) |
| Network faults with the cable connected | When the network stack or the listening ports fail. | Parked: (NET DOWN - link/power to retry) |
| DHCP address received or changed | The modem started with 192.168.1.1 and then received a DHCP address, or the DHCP server gave another address. | No limit. |
| Serial function started without Ethernet link | The link comes later; the modem restarts once to get its DHCP address. | Once. |
| Radio module busy, internal radio module link | Busy without a break for more than 3 minutes, or receive errors on the internal link that repeat 500 times without a pause of 3 seconds. | No limit. |
| Remote restart | Another modem restarts this one over the radio (10.7 "LoRa Status"). | No limit. |
| All functions | Every 24 hours of running time, also while a case above is parked. | No limit (planned restart). |

NOTE:
If several cases are parked at the same time, App Status shows all their texts one after the other.
| Parked state | Ends when |
| Client / target | A client connects or a target is reached. |
| Gateway | The gateway answers again. The modem keeps checking it every minute. |
| Radio module | After a restart (for example the daily one or a power cycle) the module answers. |
| Serial line noise | A valid answer comes from the serial line. |
| Network | The network works again. |
| Any | Reboot Device or Reboot Alternative Firmware is used, or the power is switched off and on. |

NOTE:
While the gateway check is parked, the modem still renews and requests its DHCP address every 15 minutes or so; during each request the network connections of the modem are interrupted for a moment.

NOTE:
The Ethernet port of the modem sits behind an on-board switch, so the modem sees a link even when the cable is unplugged. An unplugged cable therefore shows up as an unreachable gateway or missing clients, not as a lost link.

NOTE:
If the modem sees no Ethernet link at the start in LoRa to TCP/UDP Server Gateway or LoRa to TCP/UDP Client Gateway with DHCP address mode, it waits for the link without restarting; App Status shows (NO LINK - waiting, no reboot).

WARNING:
Holding a reset button for 5 seconds restores all factory settings and restarts the modem at once. The LoRa addresses, network settings and password are lost.
When you contact REDZ support, send the log lines around the problem, including the two start-up lines after the restart, and the firmware version shown at the top of the page.
| Order code | Description |
| TLM154 | 868 MHz LoRa RF Modem, 2 x 10/100Base-T(X) Ethernet ports, 1 x RS232 and 1 x RS485, 5 - 48 V DC power input (60 V maximum) |
| TLM254 | 868 MHz LoRa RF Modem, 2 x 10/100Base-T(X) Ethernet ports, 1 x RS232 and 1 x RS485, 100 - 240 V AC (120 - 370 V DC), 50 / 60 Hz power input |
| TLM655-PN-AC | 868 MHz LoRa RF Modem, 2 x 10/100Base-T(X) Ethernet ports and 1 x BPL (Broadband Power Line) link, 1 x RS232 and 1 x RS485, three-phase AC power input, 110 - 240 V, 50 / 60 Hz, phase to neutral (P-N) data connection |
| TLM655-PP-AC | 868 MHz LoRa RF Modem, 2 x 10/100Base-T(X) Ethernet ports and 1 x BPL (Broadband Power Line) link, 1 x RS232 and 1 x RS485, three-phase AC power input, 110 - 240 V, 50 / 60 Hz, phase to phase (P-P) data connection |
| TLM655-PP-DC | 868 MHz LoRa RF Modem, 2 x 10/100Base-T(X) Ethernet ports and 1 x BPL (Broadband Power Line) link, 1 x RS232 and 1 x RS485, 9 - 36 V DC power input, phase to phase (P-P) data connection |
| TLM194 | 2.4 GHz LoRa RF Modem, 2 x 10/100Base-T(X) Ethernet ports, 1 x RS232 and 1 x RS485, 5 - 48 V DC power input (60 V maximum) |
| TLM294 | 2.4 GHz LoRa RF Modem, 2 x 10/100Base-T(X) Ethernet ports, 1 x RS232 and 1 x RS485, 100 - 240 V AC (120 - 370 V DC), 50 / 60 Hz power input |
| TLM695-PN-AC | 2.4 GHz LoRa RF Modem, 2 x 10/100Base-T(X) Ethernet ports and 1 x BPL (Broadband Power Line) link, 1 x RS232 and 1 x RS485, three-phase AC power input, 110 - 240 V, 50 / 60 Hz, phase to neutral (P-N) data connection |
| TLM695-PP-AC | 2.4 GHz LoRa RF Modem, 2 x 10/100Base-T(X) Ethernet ports and 1 x BPL (Broadband Power Line) link, 1 x RS232 and 1 x RS485, three-phase AC power input, 110 - 240 V, 50 / 60 Hz, phase to phase (P-P) data connection |
| TLM695-PP-DC | 2.4 GHz LoRa RF Modem, 2 x 10/100Base-T(X) Ethernet ports and 1 x BPL (Broadband Power Line) link, 1 x RS232 and 1 x RS485, 9 - 36 V DC power input, phase to phase (P-P) data connection |
| Model | Frequency | 5 - 48 V DC (60 V maximum) | 100 - 240 V AC (120 - 370 V DC), 50 / 60 Hz | Three-phase AC, 110 - 240 V, 50 / 60 Hz | 2 x 10/100Base-T(X) Ethernet | 1 x RS232 and 1 x RS485 | BPL link |
| TLM154 | 868 MHz | ● | ● | ● | |||
| TLM254 | 868 MHz | ● | ● | ● | |||
| TLM655 | 868 MHz | ● | ● | ● | ● | ||
| TLM194 | 2.4 GHz | ● | ● | ● | |||
| TLM294 | 2.4 GHz | ● | ● | ● | |||
| TLM695 | 2.4 GHz | ● | ● | ● | ● |

NOTE:
TLM655 and TLM695 are also made with a 9 - 36 V DC power input (P-P data connection); see chapter 19 "Ordering Information" for the order codes of all versions.

NOTE:
The firmware file of each model is listed in 16.1 "Firmware files".
THIS SITE USES COOKIES
Various types of cookies are used on our website (and on all other
digital platforms including mobile applications).
View our new THE INFORMATIVE TEXT ON LPPD AND PRIVACY here.
Google Analytics
Analytical cookies help us to improve our website by collecting and
reporting information on its usage.
Advertising (Google Ads, LinkedIn) and Remarketing
We use marketing cookies to help us improve the relevancy of advertising
campaigns you receive.
I have read the above articles