ESS Bypass switch for n-1 nonstop system use

Been thinking about redundancy in ESS setups quite a bit lately, particularly after a near-miss with my Multiplus-II last winter where a firmware glitch took the whole system down for about six hours — not ideal when you're relying on it full-time in a tiny house.

The standard 1-0-2 changeover switch approach is fine for basic manual bypass, but it doesn't really address n-1 redundancy properly. What I've been mulling over is a dedicated bypass topology where two Multiplus units run in parallel but can be individually isolated without dropping the load — essentially mirrored ESS instances that can hand off cleanly.

The tricky bit with Victron's ESS assistant is that if you're running a shared DC bus with two units, the GX device coordination becomes critical. Pull one unit out of the loop mid-operation and you can get some nasty transients unless the transfer logic is properly sequenced.

A few questions for the room:

• Has anyone actually implemented a make-before-break bypass arrangement with dual Multiplus units in the UK?
• Are you using a Cerbo GX to coordinate the switchover, or something more hardware-level like a motorised changeover?
• Any experience with this in a van or mobile install where weight and space make dual-inverter setups genuinely painful?

I've got a second Multiplus-II 48/3000 sitting on the shelf (picked it up secondhand from a solar installer in Bristol) and I'm seriously considering wiring it in as a hot standby rather than selling it on. Space is tight in the tiny house but the uptime argument is compelling.

Would love to see some schematics if anyone's gone down this road.

@WayneJames that six-hour outage would've been painful — especially mid-winter in something like a shepherd's hut where heating and lighting are critical.

What I've been wondering about for my own setup is whether a properly wired manual bypass contactor between grid input and critical loads makes more sense than relying purely on the Victron ecosystem staying healthy.

Couple of questions though:

• Does implementing a bypass void your MCS certification or any DNO notification you've submitted?
• Has anyone actually done this with a Multiplus-II and kept the wiring compliant with BS 7671?

The firmware issue you mentioned is exactly why I've been hesitant to go all-in on ESS without some kind of manual fallback. Victron's track record is good but no system is bulletproof.

Anyone using an automatic transfer switch instead of manual bypass? Curious whether the transition time causes issues with sensitive loads.

@WayneJames six hours down mid-winter is genuinely grim — been there with my static caravan setup and it's character-building in all the wrong ways.

Quick question though: are you running a single Multiplus-II or have you got headroom to look at a parallel pair? Because the obvious n-1 solution is a second unit in parallel with individual AC bypass switches, so if one throws a tantrum you isolate it and carry on at half capacity.

What's your current battery bank situation? If you're on a 48V Victron/Fogstar setup the bypass architecture is fairly straightforward but the transfer switch selection is where it gets interesting — are you thinking manual changeover or something automatic like a Motorised Transfer Switch?

Also — what triggered the firmware glitch, a VRM remote update gone wrong? Because that's a rabbit hole I've nearly fallen down myself 🐇

@WayneJames this is something I wrestled with on my motorhome build before landing on a workable solution.

What I ended up doing was fitting a proper manual transfer switch — a Mersen or similar rotary type rated for the full inverter output — wired so position 1 is the Multiplus, position 2 bypasses it entirely and feeds from shore power or a backup inverter directly. Takes about three seconds to switch over.

The critical bit people miss: the bypass path needs to be genuinely independent — separate breakers, separate wiring run where practical. Otherwise you're not buying yourself much.

For firmware-glitch scenarios specifically, I'd also strongly recommend keeping a known-good firmware version on a USB stick taped to the enclosure. Victron's VRM lets you roll back remotely if comms are still alive, which has saved me once already.

What's your current shore power arrangement?

@WayneJames on my narrowboat I run a bypass contactor wired ahead of the Multiplus-II so shore power (or my Honda generator) can feed the AC distribution panel directly while the inverter/charger is offline for maintenance or updates. Key thing most people miss: you must interlock the bypass mechanically or electrically to prevent backfeed into the inverter's AC-in — I used a Kraus & Naimer cam switch with physically linked positions so both paths cannot be live simultaneously.

Firmware updates I now do religiously in summer when grid-tie isn't critical. Victron's --update flag via VRM remote console means I can at least schedule the downtime sensibly rather than getting blindsided like you were.

Worth also looking at Victron's own "generator bypass" wiring diagrams in the CCGX manual — they've documented this exact n-1 scenario reasonably well.