What the console port on a Pylontech battery tells you — a complete guide

Most people with Pylontech batteries don't even know that the port labeled "Console" or "RS232" is the gateway to complete BMS diagnostics — far more detailed than anything you'll see through an inverter.

How to connect

You will need:

• USB → RS232 converter (TTL level, 3.3 V or 5 V — Pylontech tolerates both)
• RJ45 cable (pinout depends on the battery model)
• Terminal program (115200 baud, 8N1)

After connecting and pressing Enter, you will see a prompt. The password is not public. To access advanced commands, log in as user admin, the password is also not public.

Most useful commands

info — basic identification

Device name       : US2000C
Main Soft version : V1.3
Barcode           : PPTCR03101B16466
Max Dischg Curr   : -90000mA
Max Charge Curr   : 90000mA
Console Port rate : 115200

bat — live data for all cells

Displays the voltage of each cell, currents, temperatures, SOC, and the status of FET transistors. This is the most valuable part — you see exactly which cell is weak.

config — complete BMS configuration

Lists ALL protection thresholds:

• Voltage limits (BOV, BUV, POV, PUV, BHV, BLV…)
• Temperature limits (OT, HT, LT, UT, MOT…)
• Current limits (Charging OC, Discharging OC, SC…)
• Time constants (OC Delay, SC Release…)
• Balancer settings (Balance Start, Balance Volt)
• Sleep mode, data logging

config bov — current BOV value

BOV: 3510 mV
Command completed successfully

data event — alarm history

Displays logs of all events — overvoltage, undervoltage, overcurrent, overheating. With timestamps.

ctrl cfet on/off and ctrl dfet on/off

Controls the charging and discharging FETs. WARNING — this directly disconnects the battery! Only use if you know what you are doing.

What I found out about the BR/RS485 port

There is another port on the battery — labeled "BR" or "RS485". For a long time I thought a binary protocol for more advanced operations would run over it. The reality is different: the BR/RS485 port is a second ASCII console — identical to the Console port, just on a different physical interface. Same commands, same responses, 115200 baud.

I tried:

• Binary Pylontech protocol (frame 7E…) → response "Unknown command"
• Various baud rates (9600, 19200) → garbage or silence
• RS485 half-duplex → does not work, it is full-duplex like RS232

Conclusion: For diagnostics, the Console port is enough. BR/RS485 is just an alternative access point for the same console.

What CANNOT be done via console

• FW update — requires an EPON port and BatteryView software on Windows
• SOC calibration — internal BMS matter, not accessible via console
• Factory reset — the config default command exists, but I don't recommend using it without a good reason

How we use this in PylonCheck

Our monitoring device communicates with the battery specifically via this console port. Every 15 seconds it reads bat data (voltages, currents, temperatures), every 10 minutes it reads config bov for current settings, and at startup it reads info to identify the FW version. Everything is sent to the cloud and the customer sees it in real time on the dashboard. No special software, no VPNs — just open your browser.