Milesight EM300-TH Environment Monitoring Sensor
Specifications
- Model: EM300 Series
Models Available
- EM300-TH: Temperature and Humidity Sensor
- EM300-MCS: Magnet Switch Sensor
- EM300-SLD: Spot Leak Detection Sensor
- EM300-ZLD: Zone Leak Detection Sensor
- EM300-MLD: Membrane Leak Detection Sensor
- EM300-DI: Pulse Counter Sensor
- EM300-CL: Capacitive Level Sensor
- Safety Certifications: CE, FCC, RoHS
Safety Precautions
- The device must not be disassembled or remodeled.
- Change the default password (123456) for security.
- Avoid placing the device near naked flames or extreme temperatures.
- Ensure proper installation of batteries to prevent damage.
- Avoid subjecting the device to shocks or impacts.
Declaration of Conformity
The EM300 series complies with CE, FCC, and RoHS standards.
Contact Information
Email: iot.support@milesight.com
Support Portal: support.milesight-iot.com
- Tel: 86-592-5085280
- Fax: 86-592-5023065
- Address: Building C09, Software Park III, Xiamen 361024, China
User Manual Revision History
| Date | Doc Version | Description |
|---|---|---|
| Oct. 14, 2020 | V 1.0 | Initial version |
Frequently Asked Questions (FAQ)
Q: What should I do if the device is not functioning properly?
A: Check the battery installation, ensure proper sensor placement, and contact technical support if issues persist.
Applicability
This guide is applicable to EM300 series sensors shown as follows, except where otherwise indicated.
| Model | Description |
| EM300-TH | Temperature and Humidity Sensor |
| EM300-MCS | Magnet Switch Sensor |
| EM300-SLD | Spot Leak Detection Sensor |
| EM300-ZLD | Zone Leak Detection Sensor |
| EM300-MLD | Membrane Leak Detection Sensor |
| EM300-DI | Pulse Counter Sensor |
| EM300-CL | Capacitive Level Sensor |
Safety Precautions
Milesight will not shoulder responsibility for any loss or damage resulting from not following the instructions of this operating guide.
- The device must not be disassembled or remodeled in any way.
- In order to protect the security of the device, please change device password when first configuration. The default password is 123456.
- The device is not intended to be used as a reference sensor, and Milesight will not should responsibility for any damage which may result from inaccurate readings.
- Do not place the device close to objects with naked flames.
- Do not place the device where the temperature is below/above the operating range.
- Make sure electronic components do not drop out of the enclosure while opening.
- When installing the battery, please install it accurately, and do not install the reverse or wrong model.
- Make sure both batteries are newest when install, or battery life will be reduced.
- The device must never be subjected to shocks or impacts.
Declaration of Conformity
EM300 series is in conformity with the essential requirements and other relevant provisions of the CE, FCC, and RoHS.
Copyright © 2011-2023 Milesight. All rights reserved.
All information in this guide is protected by copyright law. Whereby, no organization or individual shall copy or reproduce the whole or part of this user guide by any means without written authorization from Xiamen Milesight IoT Co., Ltd. 
For assistance, please contact
Milesight technical support:
Email: iot.support@milesight.com Support Portal: support.milesight-iot.com Tel: 86-592-5085280
Fax: 86-592-5023065
Address: Building C09, Software Park III,Xiamen 361024, China
Revision History
| Date | Doc Version | Description |
| Oct. 14, 2020 | V 1.0 | Initial version |
| Oct. 21, 2020 | V 1.1 | Model name change and pictures replace |
| Nov. 19, 2020 | V 2.0 | Layout replace |
| Mar. 4, 2021 | V 2.1 | Layout update |
| July 5, 2021 | V 2.2 | Delete USB Type-C description |
| Dec. 7, 2021 | V 2.3 | Add alarm setting, change SN to 16 digits |
| Nov. 24, 2022 | V 2.4 |
|
| Oct. 31, 2023 | V 2.5 |
|
Product Introduction
Overview
EM300 series is a sensor mainly used for outdoor environment through wireless LoRaWAN® network. EM300 device is battery powered and designed for multiple mounting ways. It is equipped with NFC (Near Field Communication) and can easily be configured by a smartphone.
Sensor data are transmitted in real-time using standard LoRaWAN® protocol. LoRaWAN® enables encrypted radio transmissions over long distance while consuming very little power. The user can obtain sensor data and view the trend of data change through Milesight IoT Cloud or through the user’s own Network Server.
Features
- Up to 11 km communication range
- Easy configuration via NFC
- Standard LoRaWAN® support
- Milesight IoT Cloud compliant
- Low power consumption with 4000mAh replaceable battery
Hardware Introduction
Packing List
If any of the above items is missing or damaged, please contact your sales representative.
Hardware Overview
GPIO Wiring (EM300-DI) 
Dimensions(mm)
Power Button
Note: The LED indicator and power button are inside the device. Turn on/off and reset can also be configured via NFC.
| Function | Action | LED Indication |
| Turn On | Press and hold the button for more than 3 seconds. | Off → On |
| Turn Off | Press and hold the button for more than 3 seconds. | On → Off |
| Reset | Press and hold the button for more than 10 seconds. | Blinks quickly. |
| Check
On/Off Status |
Quickly press the power button. | Light On: Device is on. |
| Light Off: Device is off. |
Operation Guide
NFC Configuration
EM300 series can be monitored and configured via NFC. Please refer the following steps to complete configuration.
- Download and install “Milesight ToolBox” App from Google Play or Apple Store.
- Enable NFC on the smartphone and launch Milesight ToolBox.
- Attach the smartphone with NFC area to the device and click NFC Read to read device information. Basic information and settings of the device will be shown on ToolBox App if it’s recognized successfully. You can read and configure the device by tapping the Read/Write device on the App. In order to protect the security of the device, please change password when first configuration. The default password is 123456.
Note
- Ensure the location of smartphone NFC area and it’s recommended to take off phone case.
- If the smartphone fails to read/write configurations via NFC, keep the phone away and back to try again.
- EM300 series can also be configured by dedicated NFC reader provided by Milesight IoT or you can configure it via TTL interface inside the device.
LoRaWAN Settings
EM300 series support to configure join type, App EUI, App Key and other information. You can also keep all settings by default.
| Parameters | Description |
| Device EUI | Unique ID of the device which can also be found on the label. |
| App EUI | Default App EUI is 24E124C0002A0001. |
| Application Port | The port used for sending and receiving data, default port is 85. |
| Join Type | OTAA and ABP mode are available. |
| Application Key | Appkey for OTAA mode, default is 5572404C696E6B4C6F52613230313823. |
| Device Address | DevAddr for ABP mode, default is the 5th to 12th digits of SN. |
| Network Session
Key |
Nwkskey for ABP mode, default is 5572404C696E6B4C6F52613230313823. |
| Application
Session Key |
Appskey for ABP mode, default is 5572404C696E6B4C6F52613230313823. |
| LoRaWAN Version | V1.0.2 and V1.0.3 are available. |
| Work Mode | It’s fixed as Class A. |
| RX2 Data Rate | RX2 data rate to receive downlinks or send D2D commands. |
| RX2 Frequency | RX2 frequency to receive downlinks or send D2D commands. Unit: Hz |
| Supported Frequency | Enable or disable the frequency to send uplinks. If frequency is one of CN470/AU915/US915, enter the index of the channel to enable in the input
box, making them separated by commas. |
Examples:
Null: Indicate that all channels are disabled
|
|
|
Channel Mode |
Select Standard-Channel mode or Single-Channel mode. When Single-Channel
mode is enabled, only one channel can be selected to send uplinks. |
| Spread Factor | If ADR is disabled, the device will send data via this spread factor. |
|
Confirmed Mode |
If the device does not receive ACK packet from network server, it will resend data once. |
| Rejoin Mode | Reporting interval ≤ 35 mins: the device will send a specific number of LinkCheckReq MAC packets to the network server every reporting interval or every double reporting interval to validate connectivity; If there is no response, the device will re-join the network.
Reporting interval > 35 mins: the device will send a specific number of LinkCheckReq MAC packets to the network server every reporting interval to validate connectivity; If there is no response, the device will re-join the network. |
|
Set the number of packets sent |
When the rejoin mode is enabled, set the number of LinkCheckReq packets to send.
Note: the actual sending number is Set the number of packet sent + 1. |
| ADR Mode | Allow network server to adjust datarate of the device. |
| Tx Power | Transmit power of device. |
Note:
- Please contact sales for device EUI list if there are many units.
- Please contact sales if you need random App keys before purchase.
- Select OTAA mode if you use Milesight IoT Cloud to manage devices.
- Only OTAA mode supports rejoin mode.
Basic Settings
Go to Device > Setting > General Settings to change the reporting interval, etc.
| Parameters | Description |
|
Reporting Interval |
Reporting interval of transmitting current sensor values to network
server. Range: 1-1080 mins, Default: 10 mins (EM300-TH/MCS/SLD/ZLD/ DI), 1080 mins (EM300-MLD) |
| Temperature Unit | Change the temperature unit displayed on the ToolBox. Note:
|
| Data Storage | Disable or enable data storage locally. |
| Data Retransmission | Disable or enable data retransmission. |
| Change Password | Change the password for ToolBox App to write this device. |
| Parameters | Description |
|
Reporting Interval |
Reporting interval of transmitting battery level and liquid status to
network server. Range: 1-1440 mins, Default: 1440 mins |
| Full Liquid Calibration | When the liquid is full, click the Calibrate button to record the full status. After calibrated, the device will report a calibration result packet.
Note:
|
| Change Password | Change the password for ToolBox App to write this device. |
Interface Settings (EM300-DI)
Go to Device > Settings > Interface Settings to modify configurations.
| Parameters | Description |
| Interface Type | Change the interface type of GPIO interface as Counter or Digital. |
|
Pulse Filter |
When the function is enabled, pulse with a rate of more than 250us can
be counted. |
| Modify Count Value | Set the initial counting value. |
| Set the value that converts pulses to a specific water consumption. | |
| Pulse Value |  |
| Conversion | Water_conv Unit Pulse_conv |
| Note: water_conv=water conversion value, pulse_conv=pules conversion | |
| value. |
Advanced Settings
Calibration Settings
EM300-TH/MCS/SLD/ZLD/DI supports temperature and humidity calibration. The device will add the calibration value to raw value and upload the final values to network server.
Threshold & Alarm Settings
EM300 series supports various types of alarm settings.
- Temperature Threshold Alarm:
EM300-TH/MCS/SLD/ZLD/DI supports temperature threshold alarm settings. When current temperature is over or below the threshold value, the device will report the threshold alarm packet once instantly. Only when the threshold alarm is dismissed and re-triggered, the device will report the alarm again.
Parameters Description Collect Interval
The interval to detect temperature after threshold alarm triggers. This interval should be less than reporting interval.
- EM300-MCS/SLD/ZLD/MLD:
Parameters Description Alarm Reporting
After enabled, the device will report the alarm packet when the door status changes to open or water is detected to leak.
Alarm Reporting Interval
The interval to report digital status after alarm triggers. This interval should be less than reporting interval. Alarm Reporting Times Alarm packet report times after alarm triggers. - EM300-DI:
When interface type is Digital:
Parameters Description Alarm Reporting After enabled, the device will report the alarm packet according to digital change options.
Alarm Reporting Interval The interval to report digital status after alarm triggers. This interval should be less than reporting interval.
Alarm Reporting Times Alarm packet report times after alarm triggers. When interface type is Pulse
Parameters Description Duration for Water Flow Determination/s If the pulse counter does not increase for this duration time, the device will judge current status as “Water Outage”; otherwise, the device will judge current status as “Water Flow”.
Water Flow Timeout Alarm If the “Water Flow” status has passed the timeout interval, the device will report a water flow timeout alarm packet. If the water flow status stops during next timeout interval, the device will report the alarm dismiss packet; otherwise, it will report an alarm packetagain. Water Outage Timeout Alarm If the “Water Outage” status has passed the timeout interval, the device will report a water outage timeout alarm packet. If the water outage status stops during next timeout interval, the device will report the alarm dismiss packet; otherwise, it will report an alarm packet again. - EM300-CL:
| Parameters | Description |
| Alarm Reporting | After enabled, the device will report the alarm packet when the
liquid level of container is lower than the installation height of detection electrode sheet. |
| Status Detection Interval | The interval to detect liquid status after alarm triggers. |
| Alarm Reporting Times | Alarm packet report times after alarm triggers. |
| Alarm Dismiss Report | After enabled, the device will report the alarm dismiss packet once
when the liquid of container is changed to full. |
Data Storage
EM300 series (except EM300-CL) supports storing data records locally and exporting data via ToolBox App. The device will record the data according to reporting interval and even join network.
- Go to Device > Status of ToolBox App to click Sync to sync the time.
Besides, when device LoRaWAN® version is set as 1.0.3, the device will send MAC commands to ask the network server for the time every time it joins the network. - Go to Device > Setting > General Settings to enable data storage feature.
- Go to Device > Maintenance, click Export, then select the data time range and click Confirm to export data. ToolBox App can only export last 14 days’ data.
Data Retransmission
EM300 series (except EM300-CL) supports data retransmission to ensure network server can get all data even if network is down for some times. There are two ways to get the lost data:
- Network server sends downlink commands to to enquire the historical data for specifying time range, see section Historical Data Enquiry;
- When network is down if no response from LinkCheckReq MAC packets for a period of time, the device will record the network disconnected time and re-transmit the lost data after device re-connects the network.
Here are the steps for data retransmission
- Enable data storage feature and data retransmission feature;
- Go to Device > Setting > General Settings to enable rejoin mode feature and set the number of packets sent. Take below as an example, the device will send LinkCheckReq MAC packets to the network server regularly to check for any network disconnection; if there is no response for 8+1 times, the join status will change to de-active and the device will record a data lost time point (the time it reconnected to the network).
- After the network connected back, the device will send the lost data from the point in time
when the data was lost according to the reporting interval.
Note
- If the device is rebooted or re-power when data retransmission is not completed, the device will re-send all retransmission data again after device is reconnected to the network;
- If the network is disconnected again during data retransmission, it will only send the latest disconnected data;
- The retransmission data format is started with “20ce” or “21ce”, please refer to see section Historical Data Enquiry.
- Data retransmission will increase the uplinks and shorten the battery life.
Milesight D2D Settings
Milesight D2D protocol is developed by Milesight and used for setting up transmission among Milesight devices without gateway. When the Milesight D2D settings is enabled, EM300 series (except EM300-CL) can work as D2D controller to send control commands to trigger Milesight D2D agent devices.
- Configure RX2 datarate and RX2 frequency in LoRaWAN® settings, it is suggested to change the default value if there are many LoRaWAN® devices around.
- Go to Device > Setting > D2D Settings to enable Milesight D2D feature.
- Define an unique D2D key which is the same as Milesight D2D agent devices. (Default D2D key: 5572404C696E6B4C6F52613230313823)
- Enable one of status mode and configure 2-byte hexadecimal Milesight D2D command. When the status is triggered, EM300 series sensor will send this control command to corresponding Milesight D2D agent devices. Take EM300-ZLD as example below:
Note:
- If you enable LoRa Uplink, a LoRaWAN® uplink packet that contains corresponding alarm status will be sent to gateway after the Milesight D2D control command packet. Otherwise, the alarm packet will not send to LoRaWAN® gateway.
- If you want to enable Temperature Threshold Trigger Status: Trigger or Temperature Threshold Trigger Status: not triggered, please enable and configure temperature threshold feature under Threshold Settings.
- For EM300-DI, if you want to enable water flow or outage settings, please enable and configure water flow threshold feature under Threshold Settings.
Maintenance
Upgrade
- Download firmware from Milesight website to your smartphone.
- Open Toolbox App and click Browse to import firmware and upgrade the device.
Note
- Operation on ToolBox is not supported during an upgrade.
- Only Android version ToolBox supports the upgrade feature.
Backup
EM300 devices support configuration backup for easy and quick device configuration in bulk. Backup is allowed only for devices with the same model and LoRaWAN® frequency band.
- Go to Template page on the App and save current settings as a template. You can also edit the template file.
- Select one template file which saved in the smartphone and click Write, then attach to another device to write configuration.
Note: Slide the template item left to edit or delete the template. Click the template to edit the configurations. 
Reset to Factory Default
Please select one of following methods to reset device:
Via Hardware: Hold on power button (internal) for more than 10s until LED blinks.
Via ToolBox App: Go to Device > Maintenance to click Reset, then attach smart phone with NFC area to device to complete reset. 
Note: Reset operation will not clean the stored data, please click Data Cleaning to clear data if necessary. 
Installation
EM300 Device Installation
- Attach EM300 device to the wall and mark the two holes on the wall. The connecting line of two holes must be a horizontal line.
- Drill the holes according to the marks and screw the wall plugs into the wall.
- Mount the EM300 to the wall via mounting screws.
- Cover the mounting screws with screw caps.
Besides, it can also be mounted to a wall via 3M tape or be mounted to a pole via cable tie.
Sensor Installation
EM300-MLD/SLD/ZLD
Refer to Water Leakage Sensor Installation Guide.
EM300-MCS
Fix the two magnet parts with 3M tape or screws, the two parts should be aligned.
EM300-CL
Attach the detection electrode sheet to the wall of the container seamlessly, aligning it with the bottom of the container to detect the liquid capacity. The detection electrode sheet can be fixed to the container wall using 3M tape, and then covered with protective foam on the outside. Or you can first attach the protective foam to the outside of the detection electrode sheet and then fix them to the container wall using a cable tie. 
Note:
- This product is not applicable to metal conductive metal containers, absorbent non-metal material containers (cement, wood board, ceramic, tiles, bricks, etc.) or liquid in bags.
- This product is applicable to the containers made up of insulating non-metallic materials and with flat surfaces and uniform thickness, like plastic, glass, acrylic, etc.
- It is suggested that the side walls of container do not exceed 3mm.
- Avoid the detection electrode sheet facing the liquid inlet or the path of the liquid inlet flow.
- Clean the container to avoid the detection results to be affected by silt or other debris.
- Avoid detection electrode sheet to be attached by detection liquids, or this will affect the detection results.
- If the detection liquid is too thick, it will hang to the side wall of container, and will delay the time of leak detection and alarm.
- Keep the distance of both detection electrode sheets more than 15cm to avoid detection interference if you have two EM300-CL sensors.
Device Payload
All data are based on following format (HEX), the Data field should follow little-endian:
| Channel1 | Type1 | Data1 | Channel2 | Type2 | Data2 | Channel 3 | … |
| 1 Byte | 1 Byte | N Bytes | 1 Byte | 1 Byte | M Bytes | 1 Byte | … |
For decoder examples please find files on https://github.com/Milesight-IoT/SensorDecoders
Basic Information
EM300 series sensors report basic information of sensor whenever joining the network.
| Channel | Type | Description |
| ff | 0b (Power On) | ff, this means the device is on |
| 01(Protocol Version) | 01=>V1 | |
| 09 (Hardware Version) | 01 40 => V1.4 | |
| 0a(Software Version) | 01 14 => V1.14 | |
| 0f(Device Type) | 00: Class A, 01: Class B, 02: Class C | |
| 16(Device SN) | 16 digits |
| ff0bff ff0101 ff166136c40091605408 ff090300 ff0a0101 ff0f00 | |||||
| Channel | Type | Value | Channel | Type | Value |
| ff | 0b
(Power On) |
ff | ff | 01
(Protocol Version) |
01
(V1) |
| Channel | Type | Value | Channel | Type | Value |
| ff | 16
(Device SN) |
6136c400916054
08 |
ff | 09
(Hardware Version) |
0300
(V3.0) |
| Channel | Type | Value | Channel | Type | Value |
|
ff |
0a
(Software Version) |
0101 (V1.1) |
ff |
0f (Device Type) | 00
(Class A) |
Sensor Data
EM300-TH/MCS/xLD
| Item | Channel | Type | Description |
| Battery Level | 01 | 75 | UINT8, Unit: % |
| Temperature | 03 | 67 | INT16/10, Unit: °C |
| Humidity | 04 | 68 | UINT8/2, Unit: %RH |
| Water Leakage | 05 | 00 | 00: Not leak, 01: Leaked |
| Magnet Status | 06 | 00 | 00: Close, 01: Open (Separate) |
Examples:
- Periodic packet: reports according to reporting interval. EM300-MCS:
| 03671001 046871 060000 | |||||
| Channel | Type | Value | Channel | Type | Value |
|
03 |
67
(Temperature) |
10 01 => 01 10 =
272/10=27.2°C |
04 |
68
(Humidity) |
113/2=56.5%RH |
| Channel | Type | Value | |||
| 06 | 00 | 00=close | |||
EM300-MLD:
| 05 00 00 | ||
| Channel | Type | Value |
| 05 | 00(Water Leakage Status) | 00=No leak |
- Battery level packet:
- Report once with sensor data after joining the network;
- Report every 6 hours;
- Report once when the battery level is below 10%.
| 01 75 64 | ||
| Channel | Type | Value |
| 01 | 75(Battery) | 64 => 100% |
- Temperature threshold alarm packet: reports once when temperature reaches the threshold.
| 03671001 | ||
| Channel | Type | Value |
| 03 | 67 | 10 01 => 01 10 = 272/10=27.2°C |
- Magnet or water leakage change packet: reports the change immediately and according to alarm settings.
| Item | Channel | Type | Description |
| Battery Level | 01 | 75 | UINT8, Unit: % |
| Temperature | 03 | 67 | INT16/10, Unit: °C |
| Humidity | 04 | 68 | UINT8/2, Unit: %RH |
| Digital Input | 05 | 00 | 00: Low, 01: High |
| Pulse Counter | 05 | c8 | UINT32, for firmware V1.2 and before |
| Pulse Counter | 05 | e1 | 8 Bytes, water_conv(2B) + pulse_conv (2B) + Water consumption (4B)
Water/Pulse_conv: UINT16/10, see description on Pulse Value Conversion Water consumption: Float32 Note:
|
|
DI Alarm |
85 | 00 | 2 Bytes,Byte 1: 01=High, 00=Low,Byte 2: 01=Alarm, 00=Alarm dismiss |
| Pulse Alarm | 85 | e1 | 9 Bytes, water_conv(2B) + pulse_conv (2B) + Water consumption (4B) + Alarm Status (1B) Alarm Status:01- Water outage timeout alarm02- Water outage timeout alarm dismiss 03-Water flow timeout alarm04-Water flow timeout alarm dismiss |
EM300-DI
Examples
- Periodic packet: reports according to reporting interval (10 min by default).
EM300-DI (Digital)
| 03671e01 046894 050001 | |||||
| Channel | Type | Value | Channel | Type | Value |
|
03 |
67
(Temperature) |
1e 01 => 01 1e =
286/10=28.6°C |
04 |
68
(Humidity) |
94/2=47%RH |
| Channel | Type | Value | |||
| 05 | 00 | 01=High | |||
EM300-DI (Counter)
| 03671e01 046894 05e10a000a0000005b43 | |||||
| Channel | Type | Value | Channel | Type | Value |
|
03 |
67
(Temperature) |
1e 01 => 01 1e =
286/10=28.6°C |
04 |
68
(Humidity) |
94/2=47% |
| Channel | Type | Value | |||
| 05 | e1(Counter) | Water_conv & Pulse_conv: 0a00=>10/10=1
Water consumption: 00 00 5b 43=>43 5b 00 00=219 |
|||
- Temperature threshold alarm packet: reports once when temperature reaches the threshold.
| 03671001 | ||
| Channel | Type | Value |
| 03 | 67
(Temperature) |
10 01 => 01 10 = 272 *0.1=27.2°C |
- Pulse alarm packet: reports the change immediately and according to threshold settings.
| 85e10a000a0000005b43 01 | ||
| Channel | Type | Value |
|
85 |
e1(Counter) |
Water_conv & Pulse_conv: 0a00=>10/10=1 Water consumption: 00 00 5b 43=>43 5b 00 00=219
Alarm Status: 01-Water outage timeout alarm |
EM300-CL
| Item | Channel | Type | Description |
| Battery Level | 01 | 75 | UINT8, Unit: % |
| Liquid Level Status | 03 | ed | 00: Uncalibrated, 01: Full, 02: Empty,ff: Sensor error or not connect |
| Calibration Status | 04 | ee | 00: Failure; 01: Success |
| Liquid Level Alarm | 83 | ed | 2 Bytes,Byte 1: 00=Uncalibrated, 01=Full, 02=Empty, ff=Sensor error or not connectByte 2: 01=Alarm, 00=Alarm dismiss |
Examples:
- Periodic packet: reports according to reporting interval (1440 min by default).
| 017564 03ed01 | |||||
| Channel | Type | Value | Channel | Type | Value |
| 01 | 75 | Battery level: 64 => 100% | 03 | ed | Liquid status: 01=full |
- Alarm packet: reports according to alarm settings.
| 83ed00 | ||
| Channel | Type | Value |
| 83 | ed | Liquid status: 01=empty |
Downlink Commands
EM300 series sensors support downlink commands to configure the device. The application port is 85 by default.
EM300-TH/MCS/xLD
| Command | Channel | Type | Description |
| Reboot | ff | 10 | ff |
| Collect Interval | ff | 02 | 2 Bytes, unit: s |
| Report Interval | ff | 03 | 2 Bytes, unit: s |
| Threshold Alarm | ff | 06 | 9 Bytes, CTRL (1B) + Min (2B) + Max
(2B) +00000000(4B) |
| CTRL:Bit2~0:00 – disable01 – below (minimum threshold) 010 – over (maximum threshold) 011 – within100 – below or over Bit 5~3:001 – Temperature010 – Magnet or water leakage Bit 7~6: 00 | |||
| D2D Setting | ff | 79 | 4 Bytes, Number(1B)+Function(1B)+D2D Command(2B)Number:01 -Temperature threshold trigger 02 -Temperature threshold doesn’t trigger03 – Status trigger04 -Status doesn’t trigger Function:00 -Disable01 -Only use D2D03 -Use D2D&LoRaWAN Uplink |
| Data Storage | ff | 68 | 00: disable, 01: enable |
| DataRetransmission | ff | 69 | 00: disable, 01: enable |
| Data Retransmission Interval | ff | 6a | 3 BytesByte 1: 00Byte 2-3: interval time, unit: s range: 30~1200s (600s by default) |
Examples:
- Set reporting interval as 20 minutes.
ff03b004
| Channel | Type | Value |
| ff | 03 (Report Interval) | b0 04 => 04 b0 = 1200s= 20 minutes |
- Reboot the device.
| ff10ff | ||
| Channel | Type | Value |
| ff | 10 (Reboot) | ff (Reserved) |
- Set a temperature threshold as below 15°C or over 30°C.
| ff 06 0c96002c0100000000 | ||
| Channel | Type | Value |
| CTRL:0c =>00 001 100 | ||
|
ff |
06 (Set Threshold Alarm) | 001=temperature threshold 100 = below or over
Min:96 00=> 00 96 =150/10= 15°C |
| Max: 2c 01=>01 2c = 300/10=30°C | ||
Set D2D settings of temperature threshold trigger.
| ff 79 01011001 | ||
| Channel | Type | Value |
| ff | 79 (D2D settings ) | Number: 01=temperature threshold trigger Function: 01=only use D2D
D2D Command: 1001=>0110 |
EM300-DI
| Command | Channel | Type | Description |
| Reboot | ff | 10 | ff |
| Collect Interval | ff | 02 | 2 Bytes, unit: s |
| Report Interval | ff | 03 | 2 Bytes, unit: s |
| UTC Time Zone | ff | 17 | 2 Bytes, INT16/10 |
| Data Storage | ff | 68 | 00: disable, 01: enable |
| Data
Retransmission |
ff |
69 |
00: disable, 01: enable |
| Data Retransmission Interval |
ff |
6a |
3 Bytes
Byte 1: 00 Byte 2-3: interval time, unit: s range: 30~1200s (600s by default) |
| Interface Type | ff | c3 | 01: Digital, 02: Counter |
| Pulse Digital Filter | ff | a3 | 0100-disable, 0101-enable |
| Modify Initialcounting value | ff | 92 | 01+Initial counting value (4B) |
| Pulse Value Conversion | ff | a2 | 9 BytesByte 1: 00=disable, 01=enable Byte 2-3: Water_convByte 4-5: Pulse_convByte 6-9: Unit, ASCII code |
| Pulse counter | ff | 4e | 0100-Clean the count0101-Stop counting 0102-Start counting |
| Temperature Threshold Alarm | ff | 06 | 9 Bytes, CTRL (1B) + Min (2B) + Max (2B) +00000000(4B)CTRL:Bit2~0:00 – disable01 – below (minimum threshold) 010 – over (maximum threshold) 011 – within100 – below or overBit 7~3: 00001 |
| Water Flow Threshold Alarm | ff | a1 | 7 Bytes, 01+Number (1B)+Enable(1B)+ Timeout Interval (4B)Number:00 -Water flow threshold setting 01 -Water flow timeout alarm 02 -Water outage timeout alarmEnable: 00 -Disable, 01 -EnableTimeout Interval: UINT32, unit: min |
| Duration for Water FlowDetermination | ff | a4 | Bytes, unit: s |
| D2D Setting | ff | 79 | 4 Bytes, Number(1B)+Enable(1B)+D2D Command(2B)Number:01 -Water outage timeout alarm |
|
Example:s
- Set reporting interval as 20 minutes.
| ff03b004 | ||
| Channel | Type | Value |
| ff | 03 | b0 04 => 04 b0 = 1200s= 20 minutes |
- Reboot the device
| ff10ff | ||
| Channel | Type | Value |
| ff | 10 | ff (Reserved) |
- Set time zone.
| ff17ecff | ||
| Channel | Type | Value |
| ff | 17 | ec ff => ff ec = -20/10=-2
The time zone is UTC-2 |
- Set pulse conversion: 1ml=10 pulses.
| ffa2 01 0a00 6400 6d6c0000 | ||
| Channel | Type | Value |
| ff | a2 | 01=Enable Water_conv: 0a00=>00 0a=10/10=1
Pulse_conv: 6400=>0064=100/10=10 Unit: 6d 6c 00 00=>ml (hex to ascii) |
- Set a temperature threshold as below 15°C or over 30°C.
| ff 06 0c96002c0100000000 | ||
| Channel | Type | Value |
| ff | 06 | CTRL:0c =>11 001 100 |
| 100 = below or above Min:96 00=> 00 96 =150/10= 15°C
Max: 2c 01=>01 2c = 300/10=30°C |
- Enable water outage timeout alarm and set timeout interval as 10 minutes.
| ffa1 01 0001 00000000 ff a1 01 0201 0a000000 | ||
| Channel | Type | Value |
| ff | a1 | 00=Water flow threshold setting01=Enable |
| ff | a1 | 02=Water outage timeout alarm 01=Enable0a 00 00 00=>00 00 00 0a=10 minutes |
- Set D2D settings of water outage timeout alarm
| ff 79 01011001 | ||
| Channel | Type | Value |
| ff | 79 | Number: 01=Water outage timeout alarm Function: 01=Enable D2D
D2D Command: 1001=>0110 |
EM300-CL
| Command | Channel | Type | Description |
| Reboot | ff | 10 | ff |
| Reporting Interval | ff | 8e | 00 + Interval Time(2B), unit: min |
| Status Detection Interval | ff | bb | 00 + Interval Time(2B), unit: min Note: this interval time should be lessthan reporting interval. |
| Alarm Reporting | ff | 7e | 5 Bytes, CTRL (1B) + 0000 + Alarm Reporting Times (2B)CTRL:00=Disable,01=Enable alarm reporting, disable alarm dismiss report81=Enable alarm reporting and alarmdismiss report |
| Full Liquid Calibration | ff | 62 | ff |
Examples:
- Set reporting interval as 20 minutes.
| ff8e 00 1400 | ||
| Channel | Type | Value |
| ff | 8e (Reporting Interval) | 14 00=>00 14=>20 mins |
- Reboot the device.
| ff10ff | ||
| Channel | Type | Value |
| ff | 10 (Reboot) | ff |
- Enable alarm reporting, set reporting times as 5 and enable alarm dismiss report .
| ff7e 81 0000 0500 | ||
| Channel | Type | Value |
| ff | 7e | 81=Enable alarm reporting and alarm dismiss report
0500=>00 05=5 reporting times |
Historical Data Enquiry
EM300 series sensor supports sending downlink commands to enquire historical data for specified time point or time range. Before that, ensure the device time is correct and data storage feature was enabled to store the data.
Command format
| Channel | Type | Description |
| fd | 6b (Enquire data in time point) | 4 Bytes, unix timestamp |
| fd | 6c (Enquire data in time range) | Start time (4 bytes) + End time (4 bytes), Unix timestamp |
| fd | 6d (Stop query data report) | ff |
| ff | 6a (Report Interval) | 3 Bytes,Byte 1: 01Byte 2: interval time, unit: s, range: 30~1200s (60s by default) |
Reply format
| Channel | Type | Description |
| fc | 6b/6c | 00: data enquiry success01: time point or time range invalid 02: no data in this time or time range |
| 20 | ce (Historical Data) | Data time stamp (4B) + Data Contents (Mutable) |
| 21 | ce (EM300-DIHistorical Data) | Data time stamp (4B) + Temperature(2B) +Humidity(1B)+ Alarm Type (1B) + Interface Type(1B) + Digital(1B)+ Water_conv (2B) + Pulse_conv (2B) + Water consumption(4B) |
Data format
| Sensor | Description |
| EM300-TH | Temperature(2B) + Humidity(1B) |
| EM300-MCS | Temperature(2B) + Humidity(1B) + Door Status(1B) |
| EM300-SLD/EM300-ZLD | Temperature(2B) + Humidity(1B) + Leakage Status(1B) |
| EM300-MLD | Leakage Status(1B) |
| EM300-DI (With firmware version 1.2 and before) | Temperature(2B) + Humidity(1B) + Interface Type(1B) + Counter(4B) + Digital(1B) |
Note:
- For EM300-DI model:
Interface Type: 00=digital, 01=counter
Alarm Type: 00=No, 01=water outage timeout alarm, 02=water outage timeout dismiss alarm, 03=water flow timeout alarm, 04=water flow timeout dismiss alarm, 05=DI alarm, 06=DI dismiss alarm. - The device only uploads no more than 300 data records per range enquiry.
- When enquiring the data in time point, it will upload the data which is closest to the search point within the reporting interval range. For example, if the device’s reporting interval is 10 minutes and users send command to search for 17:00’s data, if the device find there is data stored in 17:00, it will upload this data; if not, it will search for data between 16:50 to 17:00 and upload the data which is closest to 17:00.
Example
- Enquire historical data between 2022/10/28 14:15:00 to 2022/10/28 15:45:00.
| fd6c 64735b63 7c885b63 | ||
| Channel | Type | Value |
| Start time: 64735b63 => 635b7364 = | ||
| fd | 6c (Enquire data in time
range) |
1666937700 =2022/10/28 14:15:00
End time: 7c885b63 => 635b887c = |
| 1666943100 =2022/10/28 15:45:00 | ||
Reply
| fc6c00 | ||
| Channel | Type | Value |
| fc | 6c (Enquire data in time range) | 00: data enquiry success |
| 21ce 0d755b63 0801 57 00 02 00 0a00 6400 3333af41 | |||
| Channel | Type | Time Stamp | Value |
| Temperature: 0801=>0108=26.4 °C | |||
| Humidity: 57=>87=43.5%RH | |||
| Alarm Type: 00=No | |||
| ce (EM300-DI | 0d755b63 => | Interface Type: 02=Counter | |
| 21 | Historical | 2022/10/28 | Digital: None |
| Data) | 14:22:05 | Water_conv: 0a00=>000a=10/10=1 | |
| Pulse_conv: 6400=>0064=100/10=10 | |||
| Water consumption: | |||
| 3333af41=>41af3333=21.9 | |||
Documents / Resources
 |
Milesight EM300-TH Environment Monitoring Sensor [pdf] User Manual EM300-TH Environment Monitoring Sensor, EM300-TH, Environment Monitoring Sensor, Monitoring Sensor, Sensor |
 |
Milesight EM300-TH Environment Monitoring Sensor [pdf] User Guide EM300-TH, EM300-MCS, EM300-SLD, EM300-ZLD, EM300-DI, EM300-TH Environment Monitoring Sensor, EM300-TH, Environment Monitoring Sensor, Monitoring Sensor, Sensor |