Air suspension control system for a commercial vehicle, such as a truck, or for a passenger car, the air suspension control system comprising a main control unit for operating the air suspension control system and at least two secondary control units, which are each connected to the main control unit via a separate or shared data connection, the secondary control units each having at least one output for controlling at least one actuator which can be connected to the output, at least one function for generating control signals at the output being stored in each of the secondary control units, and the main control unit having means for retrieving and/or parameterizing the stored functions by sending commands via the data connection, the secondary control units each having at least one input for acquiring sensor data from at least one sensor which can be connected to the input, and the secondary control units each having means for generating control signals at the output according to the sensor signals at the input, characterized in that - the secondary control units are each designed to receive and interpret at least one predefined fixed set of commands from the main control unit and the secondary control units have means for each storing therein a predefined fixed set of functions, one of the commands being interpreted according to the design of a function stored in the secondary control unit, and the secondary control units each have means for transmitting sensor signals to the main control unit, the secondary control units each having means for transmitting the sensor signals to the main control unit after receiving a command sent by the main control unit and received via the data connection, the main control unit having means for checking, at intervals or triggered by a query from a higher-level instance and on the basis of the sensor signals or other data of one of the secondary control units, the correct and/or error-free functioning of this secondary control unit, and - even if control using sensors and actuators can be carried out within the secondary control unit, the main control unit can be used as a control instance for the correct and/or error-free functioning of this secondary control unit. at least two secondary control units, which are each connected to the main control unit via a separate or shared data connection, the secondary control units each having at least one output for controlling at least one actuator which can be connected to the output, at least one function for generating control signals at the output being stored in each of the secondary control units, and the main control unit having means for retrieving and/or parameterizing the stored functions by sending commands via the data connection, the secondary control units each having at least one input for acquiring sensor data from at least one sensor which can be connected to the input, and the secondary control units each having means for generating control signals at the output according to the sensor signals at the input, characterized in that - the secondary control units are each designed to receive and interpret at least one predefined fixed set of commands from the main control unit and the secondary control units have means for each storing therein a predefined fixed set of functions, one of the commands being interpreted according to the design of a function stored in the secondary control unit, and - the secondary control units are each designed to receive and interpret at least one predefined fixed set of commands from the main control unit and the secondary control units have means for each storing therein a predefined fixed set of functions, one of the commands being interpreted according to the design of a function stored in the secondary control unit, and the secondary control units each have means for transmitting sensor signals to the main control unit, the secondary control units each having means for transmitting the sensor signals to the main control unit after receiving a command sent by the main control unit and received via the data connection, the main control unit having means for checking, at intervals or triggered by a query from a higher-level instance and on the basis of the sensor signals or other data of one of the secondary control units, the correct and/or error-free functioning of this secondary control unit, and - even if control using sensors and actuators can be carried out within the secondary control unit, the main control unit can be used as a control instance for the correct and/or error-free functioning of this secondary control unit. - even if control using sensors and actuators can be carried out within the secondary control unit, the main control unit can be used as a control instance for the correct and/or error-free functioning of this secondary control unit.