Professional Documents
Culture Documents
SMP Gateway
Copyright Cooper Power Systems 2007, hardware, software and manual The information in this document applies to software version 4.0 or later and is subject to change without notice.
GUI-00316-00001 T, version 16
Contents
Welcome 1
SMP models.........................................................................................................................1 Related documentation ........................................................................................................2 Getting assistance with our products ...................................................................................3 Getting started......................................................................................................................3 Document overview.............................................................................................................4
Principles of operation
Introduction .........................................................................................................................7 Logical architecture .............................................................................................................7 Masters and slaves.................................................................................................7 Introducing the SMP in the automation system.....................................................8 SMP internals ........................................................................................................8 Communication components ...............................................................................10 Configuring the SMP.........................................................................................................11 Step 1 The transparent SMP .............................................................................12 Using the SMP as a protocol translator ...............................................................14 Using the SMP as a data concentrator or device multiplexer ..............................15 Using the SMP as a communications gateway ....................................................16 Putting it all together ...........................................................................................17 Securing the substation........................................................................................17
19 21
Starting SMP Manager and logging on..............................................................................21 Main window .....................................................................................................................22 Adding an SMP..................................................................................................................22 Information provided by the SMP gateway icon ...............................................................23 Customizing the display.....................................................................................................24 Adding or removing a column.............................................................................24 SMP Gateway User Manual i
27
Introduction .......................................................................................................................27 Creating master protocol instances ....................................................................................29 Creating a master protocol instance from a template ..........................................29 Creating a master protocol instance manually.....................................................30 Configuring the master protocol general settings ................................................30 Configuring the data points................................................................................................32 Adding data points from a protocol template ......................................................33 Creating a template from a master protocol instance.........................................................34 Duplicating a master protocol instance..............................................................................34 Configuring the communication links ...............................................................................35 Configuring the serial port interfaces ..................................................................35 Configuring the operation of the serial ports .......................................................36 Configuring TCP/IP connections.........................................................................37 Associating a master protocol instance with a communications link.................................38 Testing the configuration ...................................................................................................39 Validating and saving the configuration..............................................................39 Sending the configuration to the SMP gateway...................................................40 Retrieving an SMP gateway configuration file....................................................40 Working with SMP Config grids .......................................................................................41 Selecting cells and lines.......................................................................................41 Duplicating a line ................................................................................................41 Copying a value to a group of cells .....................................................................41 Resequencing a group of lines.............................................................................42 Deleting an item ..................................................................................................44 Using tooltips ......................................................................................................44
45
Information provided by SMP Log....................................................................................45 SMP Log features ..............................................................................................................46 Searching in SMP Log.........................................................................................46 Printing a log .......................................................................................................46 Saving a log file...................................................................................................46 Viewing multiple log folders at once...................................................................47 Changing how the time is displayed....................................................................47
ii
49
Information provided by SMP Trace .................................................................................50 SMP Trace features............................................................................................................51 Searching in SMP Trace......................................................................................51 Printing a trace.....................................................................................................51 Recording a live trace..........................................................................................51 Saving all the scrolled information......................................................................52 Changing how the time is displayed....................................................................52
53
Information provided by SMP Stats ..................................................................................54 SMP Stats features.............................................................................................................54 Resetting statistics ...............................................................................................54 Printing statistics .................................................................................................54 Changing how the time is displayed....................................................................54
57
Applying a filter to a data point display.............................................................................58 Acknowledging data point value changes..........................................................................58
61
Creating slave protocol instances.......................................................................................61 Configuring slave protocol instances.................................................................................61 Subscribing to the master data points ................................................................................62 Configuring the data points................................................................................................64 Configuring the communication links ...............................................................................64 Setting up a TCP/IP connection...........................................................................64 Associating a slave protocol instance with a communications link ...................................65 Validating and activating the configuration.......................................................................65 Testing the configuration ...................................................................................................65
67
Introduction .......................................................................................................................67 Configuring the slave SMP................................................................................................68 Configuring the master SMP .............................................................................................69
Security
72
Meeting NERC CIP requirements .....................................................................................72 Managing the security configuration of one or more SMP gateways ................................73 Getting started .....................................................................................................73 Accessing the Login Information dialog box ......................................................74 Appropriate Use banner in the Login dialog box ................................................74 Defining your authentication policy ....................................................................75 Groups and privileges..........................................................................................77 Editing user groups and privileges ......................................................................78 Managing user groups and privileges ..................................................................79 Validating and saving the security configuration ................................................81 Sending the security configuration to one or more SMP gateways .....................81 Retrieving the security configuration of an SMP gateway ..................................83 Removing the security configuration from one or more SMP gateways .............83 Unlocking a user account ....................................................................................84 Viewing the security log......................................................................................85 File certification and integrity checking ............................................................................85 Introduction .........................................................................................................85 Detecting an integrity check failure.....................................................................85 Recovering from an integrity failure ...................................................................86 VPN connections and the SMP gateway firewall ..............................................................86 Introduction .........................................................................................................86 Customizing the firewall and VPN connections..................................................86 Connecting and disconnecting VPN when the firewall is enabled ......................90 Connecting and disconnecting VPN when the firewall is disabled .....................91 Substation network security considerations.......................................................................92 Setting up a secure substation LAN ....................................................................92 Using the SMP Tools through a substation LAN firewall...................................93 Locking incoming RAS and passthru connections ............................................................95 Locking or unlocking all incoming RAS dialup connections..............................95 Locking or unlocking a passthru connection .......................................................96
97
Introduction .......................................................................................................................97 Principles of operation .......................................................................................................98 Setting up passthru connections.........................................................................................99 Configuring SMP passthru ..................................................................................99 Installing a loopback cable, if necessary ...........................................................100
iv
Setting up a list of applications and loopback connections ...............................101 Connecting to the device..................................................................................................103 Testing the passthru connection.......................................................................................104 Deactivating the SMP passthru connection .....................................................................104
105
Defining the system folders .............................................................................................105 Configuring the master protocol event file processing ....................................................106
109
Introduction .....................................................................................................................109 Configuring an Annunciator in SMP Config ...................................................................110 Touch screen configuration in SMP Config ......................................................110 Creating the Annunciator ..................................................................................110 Setting General parameters................................................................................111 Setting Alarm inputs..........................................................................................112 Annunciator Pages editor.................................................................................................113 The Alarm tab....................................................................................................114 The Readings tab ...............................................................................................116 Setting cell contents...........................................................................................117 Displaying static text or colors ..........................................................................118 Displaying analog data points............................................................................119 Displaying binary data points ............................................................................121 Formatting groups of cells.................................................................................121 Selecting the display font ..................................................................................123 Connecting to the Annunciator option into the SMP gateway.........................................124 Calibrating the touch screen ............................................................................................124 Using the Annunciator Interface......................................................................................125 Navigation .........................................................................................................125 Interface displayed in all the pages....................................................................125 The Alarms page ...............................................................................................125 The Readings page ............................................................................................129 The Blocked page ..............................................................................................129 The History page ...............................................................................................130 System States page ............................................................................................131
133
Introduction .....................................................................................................................133 The SMP Automation Functions module ........................................................................133 Adding an Automation Functions instance........................................................134 Defining an automation function.......................................................................135 Understanding automation function settings .....................................................138 Logic Processor .................................................................................................138 The Soft PLC ...................................................................................................................145 The CoDeSys development environment ..........................................................146 Using CoDeSys to create SMP automation scripts............................................147
149
Redundancy
151
Introduction .....................................................................................................................151 Redundant group operation..............................................................................................151 Redundant IEDs ................................................................................................152 Priority...............................................................................................................153 Grouping 2 SMPs for redundancy ...................................................................................154 Introduction .......................................................................................................154 Setting up two SMPs with SMP Manager .........................................................154 The Redundancy column ...............................................................................157 Hot standby......................................................................................................................158 Managing redundancy .....................................................................................................159 Forcing an active SMP to become a standby SMP............................................159 Additional failover conditions ...........................................................................159 Modifying the redundancy settings of an existing group...................................160 Ungrouping 2 SMP gateways ............................................................................160 Testing and validating the configuration ...........................................................160 Checking the redundancy status through the front panel...................................160 Testing a redundant network .............................................................................161
163
vi
Time synchronization
165
Setting the clock in your SMP .........................................................................................165 Concerning daylight saving time in 2007..........................................................165 Why synchronize the SMP gateway? ..............................................................................166 IRIG-B and GPS accuracy...............................................................................................167 What is SNTP? ................................................................................................................168 Setting up SNTP on the SMP gateway ............................................................................168 Monitoring the SNTP status ............................................................................................169
171
Windows XP setup procedures ........................................................................................171 Setting up a dial-up (modem) connection..........................................................171 Setting up a direct serial connection..................................................................174 Windows 2000 setup procedures .....................................................................................176 Setting up a dial-up (modem) connection..........................................................176 Setting up a direct serial connection..................................................................178
181
Specifying which serial ports have modems....................................................................182 Creating a modem pool....................................................................................................182 Adding a modem to a modem pool..................................................................................184 Adding a modem pool master connection........................................................................185 Adding a modem pool slave connection ..........................................................................185
186
Software architecture of the SMP Gateway.....................................................................186 Procedure update checklist ..............................................................................................186 Updating the SMP Tools on the PC.................................................................................187 Updating the SMP software on the SMP Gateway ..........................................................187 Updating the SMP firmware..............................................................................187 Updating the SMP gateway application ............................................................190 Updating the configuration file..........................................................................190
191
Updating your license information ..................................................................................191 Updating the SMP gateway application...........................................................................193
194
vii
SMP Manager features.....................................................................................................194 Setting SMP Manager options .........................................................................................194 SMP Config features........................................................................................................196 System data points ...........................................................................................................196 SMP Loader.....................................................................................................................199 Using SMP Loader ............................................................................................199 Transferring files to the SMP gateway ..............................................................202 Log file ..............................................................................................................203 Updating bootstraps under unusual circumstances............................................203
Troubleshooting
205
Introduction .....................................................................................................................205 Getting additional help ......................................................................................205 Creating an SMP gateway report file...............................................................................206 Viewing an SMP gateway report file...............................................................................207 Startup problems..............................................................................................................207 No configuration file .........................................................................................207 Protocols failed..................................................................................................208 Critical component missing ...............................................................................209 Safe mode ..........................................................................................................209 Communication problems................................................................................................209 Physical layer ....................................................................................................209 Link layer ..........................................................................................................210 Protocol layer ....................................................................................................210 Problems with data validity .............................................................................................211 Problems executing a control operation...........................................................................211
viii
Figures
Figure 1 Figure 2 Figure 3 Figure 4 Figure 5 Figure 6 Figure 7 Figure 8 Figure 9 Figure 10 Figure 11 Figure 12 Figure 13 Master and slave systems .............................................................................................8 The SMP as a Master-and-slave system .......................................................................8 The SMP real-time data exchange ................................................................................9 SMP communication components ..............................................................................10 The transparent SMP ..................................................................................................12 Additional SMP functions ..........................................................................................13 The SMP protocol translator.......................................................................................14 The SMP data concentrator ........................................................................................15 The SMP communications gateway ...........................................................................16 The SMP substation gateway......................................................................................17 The SMP substation gateway with a firewall .............................................................18 Network security ........................................................................................................92 Using a passthru connection .......................................................................................98
ix
Welcome
Congratulations on acquiring your new SMP gateway! You now have unlimited connectivity for all the equipment in your substation. In this manual, we will show you how to use the SMP to integrate existing and new RTUs, IEDs, PLCs and control centers into a single modern, homogeneous substation automation system. You will learn how to set up your SMP as a:
Protocol Translator The SMP translates standard or proprietary device protocols to control center protocols such as DNP3, TEJAS, IEC-60870-5-101/103/104 or IEC-61850 (UCA 2.0). Data Concentrator The SMP collects the data from all connected devices, regardless of protocol, and makes it available to control centers using LAN, WAN, modem or serial connections. Terminal Server The SMP supports centralized maintenance, monitoring and control of all devices by using the pass-thru communications mode. Substation Communications Gateway The advanced capabilities of the SMP make it the ideal choice for any substation automation project.
SMP models
There are currently 3 SMP models:
The SMP 4 has 4 ports. It comes in a compact and economical format that allows it to be installed directly within relay protection enclosures. There is also an optional internal modem available, which allows the SMP 4 to communicate with a SCADA or device via a dialup connection. The SMP 16, which can be mounted in a 19-inch rack, comes in two versions, both of which have the same basic characteristics:
The SMP 16/CP is a gateway that offers 16 RS-232/422/485 universal serial ports, 2 Ethernet ports and an integrated modem. The SMP 16/SG has, in addition, expansion slots where accessories and options can be added to make it an ideal communications gateway for all your automation projects. 1
Both versions can also be equipped with the PM option, a new 1.1 GHz Pentium-M processor, that improves the gateway's speed tenfold. This is ideal for high-capacity application or complex automation schemes.
The manual applies to all models, and differences are indicated where applicable. Refer to your SMP installation guide for a detailed description of your particular SMP model.
Related documentation
This manual provides you with the basic information you need to get started with your SMP gateway. To reduce paper use, we have included the following related documentation on the CDROM you received with the product. Should you want printed documents, you can order them from Cybectec using reference number P-DPRN-0102. Your Documentation folder contains the following related documents:
SMP 4-20 SMP 8-40 Installation Guide, GUI-00316-00027 T. This document gives you detailed instructions on installing and setting up the SMP 4-20 or SMP 8-40. SMP 4 Installation Guide, GUI-00316-00026 T. This document gives you detailed instructions on installing and setting up the SMP 4. SMP 16 Installation Guide, GUI-00316-00032 T. This document gives you detailed instructions on installing and setting up the SMP 16/CP or the SMP 16/SG. SIOM Adding Serial Ports to Your SMP, AUT-00123-00432 T. This document describes how to add serial ports to an SMP 4-20 or SMP 8-40. SMP 16 GPS Clock Option Installation Guide AUT-00316-0047-T. This document describes how to install the wiring and setup the software if you have the GPS clock option for the SMP 16. Master Protocol Common Concepts. This document describes the concepts and settings common to the protocols used by most substation devices. Separate documents describe the protocol-specific settings. SMP 4 Diagnostics Reference Guide, GUI-00316-00040 T. This document takes you through the steps required to run diagnostic tests on the SMP 4. SMP 16 Diagnostics Reference Guide, GUI-00316-00036 T. This document takes you through the steps required to run diagnostic tests on the SMP 16. SMP 4-20 SMP 8-40 Diagnostics Reference Guide, GUI-00316-00024 T. This document takes you through the steps required to run diagnostic tests on the SMP 4-20 or SMP 8-40.
Getting started
When you receive your SMP, you have to go through several steps before you can perform the tasks described in this document. Namely, you have to do the following:
Unpack the SMP. Install the SMP. Set-up the SMP. Install the PC software. Make the SMP Tools aware of your new SMP gateway. Load the SMP firmware.
SMP 4-20 SMP 8-40 Installation Guide, GUI-00316-00027 T SMP 4 Installation Guide, GUI-00316-00026 T. SMP 16 Installation Guide, GUI-00316-00032 T.
Make sure you have performed all the steps described in those documents before proceeding with the material explained in the present document.
Document overview
Once you have performed all the steps explained in your SMP installation guide, you are ready to perform the following tasks, as described in this user manual:
Define the hardware. Configure the master protocol instances that will communicate with your substation devices. Configure the data points. Set-up the communication links between the SMP and the substation devices. Associate master protocol instances with communication links. Validate, activate and test your configuration.
The SMP log files. Protocol exchanges. Communication statistics. Data points, using a Web browser.
Configure your SMP so that it can communicate with one or more control centers:
Configure a slave protocol instance for each control center. Have each control center subscribe to the data points. Associate slave protocol instances with communication links.
You will also become familiar with the following SMP features:
Security. Passthru connections. DFR and event file processing. Automation functions. Design a local HMI on the SMP 16 Redundancy. SNMP exporting. Time synchronization. SMP access through a direct or dial-up connection. SMP access through a dial-up connection for DNP3 and IEC 60870-5-101 protocols.
You will also learn how to update the SMP software and tools, and to troubleshoot any problems you may encounter with your SMP gateway.
Principles of operation
Introduction
Electrical power utilities face a number of challenges when attempting to automate their substations. They have legacy devices that they want to continue using. They want to integrate new devices. They may want to add one or more control centers. They may want to use a local HMI in order to keep a close watch on all events that occur in the substation. There are a number of problems to contend with: connectivity, protocol incompatibilities, interoperability problems, security considerations, logistics for migration, downtime, and not the least of which, total project cost. The SMP gateway has been specifically designed to address all these issues. It is the ideal product to ensure a smooth, safe and cost-effective approach to substation modernization. Indeed, you can use a step-by-step approach. You decide which steps to take, in which order, and when.
Logical architecture
The SMP is designed to meet all the requirements for power substation automation. It has an open architecture that allows you to easily add new protocols, devices, local area networks, wide area networks, and control centers. In this section, we will describe the logical architecture of the SMP gateway and we will see how it implements all the functions required of a substation gateway.
SCADA
MASTER
SLAVE
DEVICE
Figure 1
MASTER
SLAVE
MASTER
SLAVE
DEVICE
Figure 2
SMP internals
The SMP's internal architecture is based on a series of software components called protocol components. Slave protocol components implement all the functions necessary to process
requests received from a SCADA or control center. Master protocol components implement the functions necessary to poll devices and send control requests. Cybectec provides components for most standard protocols, such as DNP3, MODBUS, IEC-60870-5-101/103/104 and IEC 61850, as well as a large number of proprietary protocols such as SEL, ABB TEN BYTE, Motorola MDAC, and more. The master protocol component polls the device and stores the data that it retrieves in an internal database, called the Real-Time Data Exchange (RTDX). The RTDX is much more than a simple data store. Besides storing the current value of all the device data points, it also stores the different types of information than can be provided by a substation device, such as the quality and timestamp of the data. It also stores information such as device tags used for control functions.
SCADA
SLAVE PROTOCOL
MASTER PROTOCOL
DEVICE
Figure 3
Communication components
SMP protocol components process the messages exchanged among the control centers and the devices. However, these messages can be transmitted using various communication methods. For instance, the MODBUS protocol can be used on a TCP/IP network or on an RS-232 serial link. SMP communication components implement all the functions required to communicate with a device or control center using a variety of communication technologies. Cybectec provides communication components for asynchronous serial ports, RS-232, RS-422, RS-485, TCP/IP and modems.
SCADA
DEVICE
Figure 4
10
Identifying the SMP model and the installed options. Creating a master protocol component for each device that is connected to the SMP. Defining all the data points in the device. Defining the communications link to be used to connect the device to the SMP. Creating a slave protocol component for each SCADA or control center. Defining the data points that the SMP will report to the SCADA. Defining the communications link to be used to connect to the SCADA. Adding a firewall and optionally a security server that supports corporate network users.
Thus, the configuration settings define the functions that the SMP performs. These settings are stored in a file that you load onto the SMP. The flexibility of the SMP architecture is the basis of Cybectecs step-by-step substation modernization strategy. In the following sections, we will show you how you can configure the SMP to perform all the functions required of a substation gateway.
11
RS-232 CONNECTION
MODBUS SLAVE
MODBUS MASTER
RS-232 CONNECTION
DEVICE
Figure 5
In this configuration, the master component polls the device and stores the values in the RTDX. The slave component processes the SCADA polling requests and sends the values provided by the device. There is not much use for a transparent SMP. However, it contains much more than the components that we described previously. Simply by adding the SMP to the substation, you now have access to the following advanced functions:
Centralized automation functions, using the built-in Automation functions or the IEC 61131-3 Soft PLC logic processor. Real-time data display, using the built-in web server.
12
Transparent access to devices, using the passthru server, for local or remote IED maintenance. SNMP support to monitor communication status. Sophisticated HMI, interactive diagrams, data logging and reporting, using Cybectecs Visual Substation software. Sophisticated Windows tools for remote or local maintenance. A sophisticated security server to support corporate network users.
Even more important, the transparent SMP is the first step in integrating new substation devices to your existing SCADA and automation system.
SCADA
INTERNET EXPLORER
RS-232 CONNECTION
MODBUS SLAVE
WEB SERVER
VISUAL SUBSTATION
PASSTHRU
REAL-TIME DATA EXCHANGE MAINTENANCE TOOLS MODBUS MASTER IEC 1131 SOFT PLC SNMP
RS-232 CONNECTION
STATS
LOGS
TRACES
DEVICE
Figure 6
13
TCP/IP CONNECTION
DNP3 SLAVE
MODBUS MASTER
RS-232 CONNECTION
DEVICE
Figure 7
14
TCP/IP CONNECTION
DNP3 SLAVE
MODBUS MASTER
SEL MASTER
RS-232 CONNECTION
RS-232 CONNECTION
DEVICE
DEVICE
Figure 8
15
RS-232 CONNECTION
TCP/IP CONNECTION
MODBUS SLAVE
DNP3 SLAVE
MODBUS MASTER
RS-232 CONNECTION
DEVICE
Figure 9
16
SCADA
SCADA
RS-232 CONNECTION
TCP/IP CONNECTION
MODBUS SLAVE
DNP3 SLAVE
WEB SERVER
VISUAL SUBSTATION
LOCAL HMI
PASSTHRU
MODBUS MASTER
SEL MASTER
SNMP
RS-232 CONNECTION
RS-232 CONNECTION
STATS
LOGS
TRACES
DEVICE
DEVICE
MAINTENANCE TOOLS
Figure 10
Comply with authentication and authorization policies. Set-up a firewall to protect from substation LAN security breaches. Monitor and lock out remote connections; and have a file integrity check on the SMP files. 17
The access inside the firewall protection has additional layers of protection, so that only a few users of your choice will have the possibility to modify parameters inside the substation.
Figure 11
In the following chapters, we will learn how to configure the SMP to perform these functions.
18
To assist you with the tasks you will want to perform with the SMPs in your organization, we have provided you with our suite of SMP Tools. The SMP Tools are Microsoft Windows-based programs that make it easy for you to configure the SMP gateway and perform maintenance functions. They run on a PC, are simple to use, and provide advanced features that allow you to rapidly configure all the devices and communication links in your substation. They can be used locally or remotely through a LAN, WAN or VPN. When security is activated, users must log in before they can use any function. The Cybectec SMP Tools include the following applications:
SMP Manager Manages all the SMPs in your organization. It displays the state of each SMP, manages their configuration files, allows you to group two SMPs together to achieve redundancy, and is used to invoke the configuration and maintenance tools for any SMP to which it is connected. From SMP Manager, you can also start Internet Explorer to view the data points, logs and traces in real time, and you can start a Telnet session in order to set-up certain advanced features such as dial-up access or IRIG-B signal output type. SMP Config Used to configure the SMP. It has a spreadsheet-like grid that you use to specify the devices and control centers connected to the SMP, their protocols, their communication links and their data points. Advanced editing functions make it easy for you to enter the data points. Template editing allows you to pre-define standard devices with standard data points, thereby reducing labor intensity and the possibility of errors. 61850 Config Used to configure the IEC 61850 and UCA 2.0 protocols on the SMP. SMP Log Used to browse through and manage the log files maintained by the SMP. All significant events are logged, including local and remote control events, system failures, special protocol events, and so on. SMP Stats Used to browse through and manage a large variety of dynamically updated statistics, ranging from full communication statistics for each link to the processor load for each protocol component. SMP Trace Used to browse through the real-time traces generated by the SMP. SMP Trace can display 19
detailed traces of all protocol and communications link activity. Traces are displayed in both hexadecimal and application protocol format. The tracing functions are similar to those usually provided by protocol analyzers, with the notable exception that they can be used remotely at any time on any SMP and that they decode information at the application level. As such, they constitute an excellent commissioning or debugging tool.
SMP Connect Used to establish passthru connections with any IED connected to an SMP, for the purpose of doing remote configuration and maintenance of IEDs using manufacturer-provided software. SMP Loader Used with the SMP 4-20 and SMP 8-40 to load new versions of most of the SMP firmware components, and with the SMP 4, SMP 16/CP and SMP 16/SG, to load the secondary bootstrap program. Refer to Appendix A and to your SMP installation guide for details on using SMP Loader.
The next chapter will discuss how to create a list of SMP gateways with SMP Manager, and will then explain how to do a complete configuration of your SMP using SMP Config.
20
SMP Manager
SMP Manager is the doorway to your SMPs. It runs on your PC, as do all the tools you launch through SMP Manager. You are already familiar with the application, since you added your new SMP to the list of SMP gateways managed by SMP Manager when you installed your SMP. This section goes over a few of the points that were covered in your SMP installation guide, and provides additional information.
On the Windows taskbar, click Start. Point to Programs, then Cybectec, and then SMP Tools. In the SMP Tools menu, click SMP Manager.
The SMP Manager main screen appears and shortly after the Login Information dialog box appears.
21
Main window
The following figure shows a typical SMP Manager window.
The list of SMP gateways and the tools that are currently running for each SMP gateway in the list. The current status of each SMP in the list (started, failed, safe mode, max safe mode, on standby, and various intermediate states). The SMP model: SMP 4-20, SMP 8-40, SMP 4, SMP 16/CP or SMP 16/SG. The IP address and redundancy status of any SMPs you have grouped together for the purpose of redundancy. This information is available only if your license supports redundancy. This column is not available by default. Whether the SMP's built-in firewall is active and whether VPN is connected or disconnected. This information is available only if your version of the SMP software supports the SMPs security features. The firewall information is not available by default
You can choose which columns you want to display and their order of appearance, with a right click on the column header.
Adding an SMP
Creating a list of the SMP gateways you want to monitor is easy. Proceed as follows for each SMP gateway you want to add to the list:
In the SMP Manager Gateway menu, click Add to add your SMP gateway to the list.
22
Enter the name by which you want to identify your SMP gateway in Gateway Name. The Configuration file is the file that will be opened by default in SMP Config. If you change its name afterwards through the File menu, you must come back to this dialog box and change the name in the Configuration File text box, so it opens the right file at startup. In the First Address box, type the IP address of the first Ethernet port. You can also type the address of the second Ethernet port in the Second Address box, although it is not necessary to do so. If the SMP gateway cannot be directly accessed through the network, but requires a dialup connection, check the box The gateway is connected over a remote dial-up to prevent SMP Manager from polling the gateway for its status. Click Add.
The SMP gateway gets added to the list, and SMP Manager automatically detects the model of the new SMP and in the case of an SMP 4, whether an internal modem is installed.
23
Icon
Description
therefore, send an SMP gateway report file with any request for technical support. A device, flashing yellow and green LEDs and a yellow telephone. SMP Manager is connected to the SMP gateway via remote dialup. A device and a telephone, greyed. The SMP gateway is configured for remote dialup but not currently connected to SMP Manager. A device, red LEDs and a yellow telephone. SMP Manager is unable to establish a connection with the SMP gateway over the remote dialup connection.
Description
The list of SMP gateways and, if you request it, the tools that are currently running for each SMP gateway in the list. The IP address of any SMPs you have grouped together in SMP Manager. This column is not available by default. The current status of each SMP in the list (started, failed, safe mode, max safe mode, on standby, and various intermediate states). The SMP model: SMP 4-20, SMP 8-40, SMP 4, SMP 16/CP or SMP 16/SG. Whether the SMP's built-in firewall is active. This information is available only if your version of the SMP software supports the SMPs security features. If the SMP is connected to SMP Manager using VPN or not. This column shows the virtual address given to the redundancy group. If the address is modified, the new address will appear beside the old one, separated by an arrow. Upon the next reboot, the device will be grouped under the new address only. This column shows whether the security is activated or not, if it is global or local, and how recent it is.
IP Address
Status
Platform Firewall
VPN Group
Security
Right-click any column heading. In the shortcut menu, locate the column you are interested in. Put or remove a checkmark to add or remove the column to or from the display.
Click the column heading of the column you want to relocate. Drag the heading to the target location.
25
Introduction
As we saw under Principles of operation, you have to configure the SMP before you can use it. For this, you use SMP Config to define the characteristics of your SMP and the functions it has to perform. The configuration is stored in a file that is then loaded onto the SMP, where it is stored in non-volatile flash memory. Using SMP Config, you will perform the following configuration steps:
For an SMP 4-20, SMP 8-40, or an SMP 16/SG define the hardware options installed. Create a master protocol instance for each device to be supported. Define each data point on each device. Configure the communications link to be used to connect to each device. Create a slave protocol instance for each SCADA or control center. Configure the communications link to be used to connect to the SCADA. Map the device data points to SCADA data points.
You will then use SMP Manager to send the configuration file to the SMP. Note: There can only be one instance of SMP Config running at any given time. If you launch the tool for a given SMP and then launch it again for a second SMP, SMP Config will prompt you to save any changes you have made, close the configuration file of the first SMP, and then open the configuration file of the second SMP.
Start SMP Manager. In the SMP Manager application window, click your SMP gateway. In the Tools menu, click SMP Config to start the application.
27
The SMP Config display includes 3 panes. The left pane is a tree structure of all the configuration topics. The top right pane displays the settings for the topic you have selected in the left pane. The bottom right pane appears when your request that the configuration be validated; it displays error and warning messages. The gateway name is the name you assigned when you added the SMP gateway in SMP Manager. The configuration file name on the title bar was also assigned when you added the SMP gateway in SMP Manager. If you open the Master Protocols and Slave Protocols branches, you will see that the tree structure offers you a fixed set of protocols. These are the protocols currently supported by your product license.
28
You can use a template, which eases the task of configuring the master protocol instance, by automatically entering the points list for the device. SMP Config provides templates for a number of common substation devices. If no template is available, you will need to enter the points list. If you are configuring a number of devices of the same type, you can save the first device configuration as a template that you will then use to enter the other devices.
Once you have added a master protocol instance and entered its data points (manually or via a template), you can click a particular data point type in the left pane and see the list of data points and their settings in the right pane, as shown next.
In the left pane, open the Master Protocols branch, to display the list of master protocols provided under your product license. In the left pane, click the protocol for which you want to add an instance. The list of all defined master protocol instances appears in the right pane. In the Tools menu, click New Instance From Template.
29
Choose the appropriate template, and click Open. In the dialog box, enter:
The name of the new instance. The device prefix. The device prefix is a string that identifies the device and is used as a prefix for all of its data point names. The prefix ensures that every name in the system is unique. An explanation of the usage of prefixes is provided under Configuring the master protocol general settings, in the next sections.
The new instance appears in the left pane. If you open its tree structure and click the various physical data point types, all the data points supported by the device will be displayed in the right pane.
In the left pane, open the Master Protocols branch, to display the list of master protocols provided under your product license. In the left pane, click the protocol for which you want to add an instance. The list of all defined master protocol instances appears in the right pane. In the right pane, enter the name of the new instance at the end of the list of names, and press the Tab key on your keyboard.
The new protocol instance is added in the left pane, under the protocol type you had selected. If you expand its tree branch and click an item, the corresponding protocol settings will be displayed in the right pane. Note that if you click a physical data point type in the left pane, the right pane will display an empty row since you will have to add the physical data points manually.
In the left pane, click General to display the list of general settings for the selected protocol. In the right pane, enter a Device Prefix. The string you enter will be used as a prefix for all the I/O point names of the device. It is mandatory for each instance of a protocol. It is used to distinguish data point names that are on the same device type, but on multiple physical devices. The device prefix ensures that every data point name in the system is unique. Device prefixes are described in the following section, Adding data points from a protocol template.
30
A typical substation automation project requires the configuration of thousands of data points. You can significantly reduce the effort by carefully planning how to name devices and data points. Cybectec tools provide additional functionality if the names of data points are based on some type of convention. For our engineering projects, we use a naming convention such as the following:
A data source name, such as the substation name: MAPLE, CEDAR. A voltage level: 220 or 25. A device name: L1 to indicate a line, T1 to indicate a transformer, F1 to indicate a feeder, BUS for a bus bar. A signal name: V_phsA_mag to indicate the phase A voltage magnitude, A_phsA_mag to indicate the phase A current magnitude, Pos_st to indicate the status of a breaker or a line switch.
With such a convention, a data point called CEDAR_220_BUS_V_phsA_mag clearly indicates the voltage magnitude of phase A on the 220 kV bus of the CEDAR substation. A data point called MAPLE_025_F1_Pos_st indicates the status of the breaker switch of feeder 1 at the MAPLE substation.
Still in the General settings, enter the scanning settings. For instance, to configure a MODBUS master protocol, you would provide settings such as the following:
A Device Address, typically 1. A MODBUS Type, typically RTU Serial. A Scan Interval, typically 1000 ms.
A complete description of all settings is provided in the document entitled Master Protocol Common Concepts. Protocol-specific settings are described in individual documents, such as DNP3 Master Protocol.
Click Start, on the Windows taskbar. Point to All Programs, then Cybectec, then SMP Tools, and then Documentation. In the Documentation menu, click Protocols.
Click the document you want to read. In the File menu of the explorer window, click Open with Acrobat.
Your Adobe Acrobat program starts up and displays the document in a window.
31
A physical data point represents a real-life value, implemented on an external device. You need to identify all the device data points, either manually or using a device template. A logical data point is a value managed by the SMP. These data points are built-in and cannot be modified, but they can be disabled. Analog inputs are measured values. The system keeps 2 values for each analog measurement obtained: a raw value, which is usually the value retrieved from the device, and a calculated value expressed in engineering units, obtained using the following standard formula: Engineering value = Raw Value X Scaling Factor + Offset Binary inputs represent the state of a data point. The state is either ON or OFF. Analog and binary outputs are typically initiated by a slave component, which sends a control request originating from a control center, to the master component involved. When you create a data point, you specify the type of data and you indicate how the SMP will retrieve it. General properties such as name, type and units, are independent of the type of device or protocol used. Protocol-specific properties indicate how the SMP will retrieve the data from the device. Each protocol uses its particular form of addressing, such as index values or data offsets. For example, to add a data point for a MODBUS device:
Click the appropriate branch under the protocol instance. In the right pane, enter the name of the data point and fill in all the appropriate settings. For instance, to define an analog input you would provide the following settings:
The name of the data point, such as BUS_VA. SMP Config will automatically add the device prefix to this name, thereby generating the full name of the data point. The input source, such as Input Registers. The input format, such as Unsigned Integer. The input size, such as 16 or 32 bits. The word offset in the MODBUS device memory. The scaling information required to convert the raw value to engineering units. The Units and Description strings used to provide meaningful data displays.
32
A complete description of all settings is provided in the document entitled Master Protocol Common Concepts. Protocol-specific settings are described in individual documents, such as Modicon Modbus Master Protocol. A complete description of system data points can be found in System data points on page 196 of this manual. To access the various protocol documents:
Click Start, on the Windows taskbar. Point to Programs, then Cybectec, then SMP Tools, and then Documentation. In the Documentation menu, click Protocols.
In the left pane, click the protocol instance to which you want to add the data points. In the Tools menu, click New Points from Template.
In the Templates folder for the protocol type you selected, choose the .tpl file you want to use, and click Open.
A dialog box appears, prompting you for the optional prefix and suffix to be added to every new data point name. The upper portion of the dialog box provides information about the open template file, while the lower portion shows warning and error messages.
The new data points now appear in their respective categories under the selected protocol instance, and their names contain the specified prefix and suffix. Note that the prefix and suffix are not applied to logical data points, and that the logical data points are reset every time you add data points from a protocol template. You should, therefore, configure these data points once you have completed the list of physical data points.
33
In the File menu, click Save As Template. Choose the Templates folder in which you want to store the template, and click Save.
Note that a template file can contain only one protocol instance. So if you want to create templates for several protocol instances, create a new configuration for each one and save individual templates.
In the left pane, click the protocol instance you want to duplicate. In the Tools menu, click Duplicate.
A dialog box appears, prompting you for the instance name and device prefix, as shown in the following.
Enter the name and prefix of the protocol instance, and click OK.
34
Click Serial Ports in the left pane, to display all the available ports. For each port, choose the type of interface to be used. Most substation devices typically use either Asynchronous RS-232 or Asynchronous RS-422/485. If you are using a serial port for a touch screen, select ELO Touchscreen.
The SMP 16 provides 16 serial ports, identified as A01 through A16. It also has a modem port labeled Modem, which has a Modem Asynchronous interface. The SMP 16/SG can also house up to 2 additional serial ports boards, that will be identified as B01 to B16 and D01 to D16. The SMP 4 and SMP 4-20 both provide 4 built-in serial ports. These ports are identified as COM1 Board A through COM4 Board A. The SMP 4 also provides a built-in console serial port. This port is identified as Built-in Console 1 Board A. This feature allows you to use the Console port as a standard serial port. If the SMP 4 has an internal modem, then it provides 3 built-in serial ports and 1 built-in modem port. These ports are also identified as COM1 Board A through COM4 Board A; however, the Interface column in the right pane indicates that the interface for COM4 Board A is Modem Asynchronous.
The SMP 8-40 provides 4 additional ports named COM1 Board B through COM4 Board B. The SMP 4-20 and SMP 8-40 SIOM use IPack modules to provide additional ports in groups of 8. The ports in the first group are called IPack_A1 Board A through IPack_A8 Board A. The ports in the second group are called IPack_B1 Board A through IPack_B8 Board A. The SMP 8-40 supports two additional groups of ports called IPack_A1 Board B through IPack_A8 Board B and IPack_B1 Board B to IPack_B8 Board B.
Description
Use this value to indicate that the serial port is dedicated to establishing a standard asynchronous RS-232 connection.
35
Interface
Asynchronous RS-422/485
Description
Use this value to indicate that the serial port is dedicated to establishing an asynchronous RS-422 or RS-485 connection. This value indicates that the port is used for modem asynchronous communication. The value is automatically assigned to the Modem port of an SMP 16 and to the COM4 Board A port of an SMP 4 equipped with an internal modem. Use this value to indicate that the serial port is configured to accept incoming direct serial connections. This type of connection allows you to use the SMP Tools as if you were connected to the SMP via a normal network connection. By default, the console port is always configured for RAS. Refer to the SMP 4 Installation Guide, GUI-00316-00026 T, or to the SMP 16 Installation Guide, GUI-00316-00032 T, for instructions on setting up a RAS IP address pool. Then refer to Remote access to the SMP gateway, page 171, in the present manual, for the step-by-step installation procedure. Constraint for the SMP 4-20 and the SMP 8-40: An SMP CPU board can support up to 4 different bit rates for the serial ports located on the front panel. This means that if you specify that the console serial port is configured for RAS, only 3 other bit rates will be available for the remaining 4 serial ports on Board A and that if all the other Board A serial ports are used, 2 of the 5 serial ports must have the same bit rate. Note that if you set the console serial port to Reserved and you do, in fact, accept incoming direct serial connections on the console serial port as well as on the 4 remaining serial ports, the SMP gateway application will disable the console port connection. This constraint obviously does not apply to Board B, since it has 4 serial ports and there are 4 bit rates available.
Modem Asynchronous
Redundancy
Use this value to indicate that the serial port is reserved for connecting 2 SMPs together as a redundancy group. See Error! Not a valid result for table., page 149. Use this value to indicate that the serial port is reserved for purposes other than those stated previously.
Reserved
In the left pane, open the Connections branch to display all the supported connection types. Click Asynchronous Serial Ports to display the list of available ports. Note that if you choose Redundancy as the interface for a serial port, that port will not appear in the list of Asynchronous Serial Ports, as it will be reserved for connecting the 2 SMPs that will be grouped together. In the right pane, enter the settings for the selected serial ports. The required settings are usually provided in the device manufacturers reference manual:
36
If you are using RS-485 2-wire communication, choose RS-485. If you are using RS-485 4-wire communication, choose RS-422. Choose the device communication settings: baud rate, byte size, parity and number of stop bits, such as 9600 baud, 8 bits, no parity, and 1 stop bit. Choose the device hardware handshaking mode:
If the link type is RS-232, most devices do not use handshaking, so you should keep the default values: RTS to Always On, DTR to Always On, and CTS to Ignore. If the link type is RS-422, set RTS to Always On. You shouldnt have any problem if you keep the other default values: DTR to Always On, and CTS to Ignore. If the link type is RS-485, set RTS to TX Request. You shouldnt have any problem if you keep the other default values: DTR to Always On, and CTS to Ignore.
If you are using RS-422 or RS-485 communication, specify whether or not you will be using line terminators. Refer to your SMP installation guide for a discussion of termination resistors.
In the left pane, click Connections, and then on TCP/IP Masters, to display the list of defined connections. In the right pane, enter the settings for the new TCP/IP connection in an empty row of the grid:
Provide a significant name for the connection If you are setting up an SMP 8-40, specify whether you will be using board A or board B to interface with the network. Enter the IP address of the device. Enter the logical port number of the device. This information is provided by the device manufacturer.
37
In the left pane, click Connection Usage. In the right pane, for each master protocol instance under Master Connection Usage, put a checkmark for the appropriate connection.
Note: If you have several devices that share a multidrop link, each device must have a different device address.
38
If your configuration contains any errors, messages will appear in the Messages pane, as shown next.
Correct any errors and repeat the process until the configuration is error-free.
Note: You cannot save a configuration file that contains errors. This feature is intended to prevent you from inadvertently loading an invalid configuration file onto an SMP gateway. However, you can save your configuration file if the message pane displays warnings only.
39
Click your SMP gateway in the SMP Manager application window. In the Gateway menu, click Send Configuration File and choose your configuration file, which has been saved in the location you specified in the Gateway Properties dialog box.
After sending the file to the SMP gateway, SMP Manager informs you that you have to restart your SMP gateway for the new application to go into effect.
In the Restart Gateway dialog box, choose Shutdown and Restart to have the SMP restart in normal mode. All restarts are automatically logged in the SMPs internal log file. You can enter a comment to indicate why you restarted the SMP. This comment will be added to the event log.
The SMP gateway will go through a series of startup steps, which will be displayed in the Status column of your SMP gateway. When startup is complete, if your configuration file is correct, the Status column will show Started, to indicate that the SMP has started normally. If your configuration file is incorrect, the Status column will indicate that there is a problem. There are a number of conditions that can prevent the SMP from activating a configuration. For instance, the hardware settings may not match the actual physical configuration of the SMP. If the SMP does not start up normally, turn to Troubleshooting, page 205. Now that you have a working configuration file with all the master data points, you can use the other SMP Tools and Internet Explorer to see what is going on with the SMP and with the connected device.
Click the SMP gateway in the list of SMP gateways. In the Gateway menu, click Get Configuration File.
In the Configuration Download dialog box, SMP Manager displays the available configuration files. The current configuration file is identified by the .par suffix, while the previous configuration file is identified by .old. You might also see files with the extension .txt and .ait.
Choose the .old file, and click the OK button. In the Save As dialog box, specify the name and path where the configuration file is to be stored. The name of the configuration file on the SMP gateway is used as the default name.
40
Click single cell you wish to select. To select several cells, hold down the CTRL key while clicking the cells. To select part of a column or part of a row, click the first cell, hold down SHIFT and click the last cell you wish to select.
Click the header of the line you want to select. To select several rows or columns, hold down the CTRL key while clicking their header. To select a group of rows or columns in a sequential order, select the header of the first one, hold down the SHIFT key and select the last one.
Duplicating a line
Proceed as follows to duplicate a line:
Click the header of the line you want to duplicate. In the Edit menu, click Duplicate Line.
The line is duplicated after the last line in the display. In the following example, we clicked on a line and clicked the Duplicate Line command twice, so the line appears twice at the bottom of the list.
41
Click the cell to which you want to copy a value. If you are selecting more than one cell, use the Ctrl key or the Shift key on your keyboard, as per standard Windows procedure. In the Edit menu, click Select Cells. This makes the cells turn gray, as shown next.
Click in the cell that contains the value you want to copy. In the example, we clicked in the CI_01 Scale cell.
In the Edit menu, click Change Selection. The value is copied to the selected cells.
Note: If you have selected a group of cells and would like to add other cells to the group:
Select the desired cells using the Ctrl key or the Shift key on your keyboard, per the standard Windows procedure. In the Edit menu, click Add to selection.
Click the cell with Index no. 8. Hold down the Shift key of your keyboard and click the last cell in the column. In the Edit menu, click Select Cells. The cells turn gray. In the Edit menu, click Resequence Selection. A dialog box appears, in which you must specify the starting sequence number (7) and the increment (1). The result is shown next.
43
Deleting an item
To delete a line in a grid:
In the right pane, click the header of the line you want to delete. Press the Del key on your keyboard, and confirm your intention of deleting the row.
The list of instances of this protocol type appears in the right pane.
In the right pane, click the protocol instance you want to delete. Press the Del key on your keyboard, and confirm your intention of deleting the row.
The protocol instance disappears from both panes. To delete a serial port connection: By their very nature, serial port connections cannot be deleted in the same way. To delete a serial port connection, you have to reserve the corresponding serial port for another usage:
In the left pane, click Serial Ports. In the right pane, choose Reserved in the Interface list of the serial port.
Using tooltips
SMP Config provides context tooltips. These tooltips are not displayed on the status bar but rather appear when you point with the mouse to a cell in any grid. This type of tooltip normally displays the editing criteria for the field. For example, it may tell you that the value must fall between 10 and 1000, that the default value is 500 ms, that the field is mandatory if a certain other field contains a checkmark, and so on. So they will assist you in editing grids. Here is a sample tooltip:
This feature is a great time and effort saver, as it spares you from having to wait until you try to validate or save your SMP configuration before finding out that you have a number of errors.
44
The SMP gateway maintains an internal log of all significant events. Using SMP Log, you can select and view the various log files in real time. You can view, print, search and save all or any information in this application. To start SMP Log and view the SMP log files, proceed as follows:
Click your SMP gateway in the SMP Manager application window. In the Tools menu, click SMP Log.
Click a log in the left pane, to view its contents in the right pane.
The Startup log records all the steps that the SMP performed when it last started. The log indicates which configuration file was loaded and which protocol components were configured and started. You should consult the startup log each time you change the SMP configuration, in order make sure it is a success.
45
The Reset log records the time and reason for each SMP restart. It indicates whether the reset occurred because of a power failure, a request from the front panel button, a remote request, a watchdog trip, or a fatal hardware or software problem. The Control log records the steps that the SMP performed in response to a local or remote control request. The Security log records all events that concern the security options such as authentication failures, file integrity check and much more.
The other SMP log files contain information that can help you and our technical support team in identifying problems.
From the menu View, click Search. Type a keyword in the text box and click the Search button. All the results will become highlighted, the first one will be lighter. To go to the next result, click Search Next in the View menu or press F3. To go to the previous result, click Search Previous in the View menu or press F3. Once you have found, click Cancel Search from the View menu and only the selected result will remain highlighted.
Printing a log
To print a log:
Select a folder. From the menu View, select Save As. SMP Gateway User Manual
46
Type a name for the file, you can use a different extension such as .csv or .txt.
Select folders, using the shift or the ctrl key. All folders content will be displayed, merged in on screen.
From the View menu, click Time Display Options. From the Time Display Options dialog box, select the type of display from the Time Display Format drop box: you can choose between the local time and SMP UTC. Normally, your gateway is set in UTC, but you can display the information how you wish it.
47
Using SMP Trace, you can view a continuous stream of protocol exchanges between the SMP and the substation devices, or between the SMP and the control center. At this stage, however, since you have only configured master protocol instances, you will only see the protocol exchanges that take place between the SMP and the substation devices. You can have the information displayed in UTC or local time, highlight the lines that contain specific keywords, and you can clear the current display. SMP Trace can generate a continuous log of all the events you are tracing, to a text file on your PC. It can also print or save to a text file, a snapshot of the traced events that occurred since the last time you cleared the display. To start SMP Trace and view the protocol exchanges:
Click your SMP gateway in the SMP Manager application window. In the Tools menu, click SMP Trace.
49
In the left pane, put a checkmark next to the item for which you want to view the protocol exchanges.
If you click a folder, everything within the folder is automatically selected. Using SMP Trace, you can view a detailed trace of all the system activity. The following traces provide information that you will find useful during the configuration and maintenance of your SMP gateway.
Master and Slave Protocol traces display the high-level information exchanges that occur between the SMP and the other system components to which it is connected. These application-level traces are similar to those provided by a protocol analyzer. They describe the requests sent to a device and the values retrieved. The Slave Protocols folder appears only if the protocol is defined. Connection traces display the data being exchanged between the SMP and a device. These low-level traces describe, in hexadecimal format, the byte stream sent and received to and from a device.
50
From the menu View, click Search. You can also press CTRL-F. Type a keyword in the text box and click the Search button. All the results will become highlighted, the first one will be lighter. You can click the Pause/Resume button in the toolbar to stop the screen from scrolling; this command is also available from the View menu. To go to the next result, click Search Next in the View menu or press F3. To go to the previous result, click Search Previous in the View menu or press F3. Once you have found, click Cancel Search from the View menu and only the selected result will remain highlighted.
Note: SMP Trace will keep highlighting matching results as long as you have not canceled the search. You can either deselect the binoculars in the toolbar or stop the search from the View menu.
Printing a trace
From the Record menu, select Start or click the red button in the toolbar. You are prompted for a file name.
51
You can also choose to save it inside the SMP's memory by selecting Record to SMP. For example, if you have an SMP 4 with a modem in a pole outdoors and you need to save 24 hours worth of activities, most of the time long distance costs are prohibitive. Use this option and connect again 24 hours later to pick up your data. When you wish to stop the recording, click the red button again or Stop in the Record menu.
Select a folder. From the menu File, select Save As. Type a name for the file, it will be saved in the .txt format.
From the View menu, click Time Display Options. From the Time Display Options dialog box, select the type of display from the Time Display Format drop box: you can choose between the local time and SMP UTC. Normally, your gateway is set in UTC, but you can display the information how you wish it.
52
The SMP stores a large number of real-time statistics and internal counters to help you analyze the performance of your SMP gateway and assist you in troubleshooting your configuration. Using SMP Stats, you can view, in real time, various statistics about the communication links and about the protocol exchanges that take place between the SMP gateway and the devices or control centers. You can have the information displayed in UTC or local time. You can also print the statistics, reset them, or save them to a text file for subsequent analysis. To start SMP Stats and view the statistics:
Click your SMP gateway in the SMP Manager application window. In the Tools menu, click SMP Stats.
In the left pane, click the item for which you want to view the statistics.
The statistics are displayed in the right pane and you can see them change dynamically.
53
The Connections folder contains counters and statistics about the performance of the SMP communication components. The Network (TCPIP) folder contains the list of all the network connections you defined under Connections, with SMP Config. The Serial (Asynchronous) folder contains the list of all the serial connections. The Modem Pool folder contains the list of any modem pools and modems you may have defined with SMP Config. You can configure modem pools and modem usage only if you purchase a modem support option for your SMP. The items in these folders provide an easy way to monitor the communication status of the SMP. For example, you can look at the Receive counter and Transmit counter values to determine whether the SMP is exchanging data with a connected device or control center. The Master Protocols and Slave Protocols folders contain counters and statistics about each instance of a protocol component. Each protocol component contains protocol-specific items that describe the messages exchanged with a device or control center. (The Slave Protocols folder is missing, in the example, because we have to define slave protocol components first.) The System folder contains counters and statistics about the operation of the SMP hardware and software.
Resetting statistics
You can reset certain statistics, such as global RTDX or web server statistics:
From the menu View, select Reset; or click the 'X' button; or press CTRL-X.
Printing statistics
To print a statistics:
54
From the Time Display Options dialog box, select the type of display from the Time Display Format drop box: you can choose between the local time and SMP UTC. Normally, your gateway is set in UTC, but you can display the information how you wish it.
55
The SMPs built-in web server provides an easy way to view the log files and statistics using your Internet Explorer web browser. It is also the easiest way to view the analog and digital input and output points in real time. To view the data points, you start Internet Explorer.
Click your SMP gateway in the SMP Manager application window. In the Tools menu, click Internet Explorer.
57
The web server window has a number of tabs at the top that allow you to switch to different data views. If you have password security, everything will be deactivated until you enter a valid username and password.
The About tab gives you key information about your SMP gateway, such as its current state, at what time it started up, and the master and slave protocol instances contained in your configuration. The Analog Input, Analog Output, Binary Input, and Binary Output tabs display the current value of all the SMP data points. The Logs tab displays the contents of the internal SMP log files. The data is the same as that provided by the SMP Log program. The Statistics tab displays the real-time statistics of the SMP. The data is the same as that provided by the SMP Stats program.
Note: The eSMP web server requires version 5.0 or a later version of the Microsoft Internet Explorer web browser. JRE (Java Runtime Environment) must also be installed on your computer. See your SMP installation guide for details.
Click in the checkbox of each point you want to display. Click Apply Filter, located at the top left above the window.
The window contents are refreshed, showing only the points you chose. To remove a data point from the filtered display:
Click the appropriate tab, to choose the type of data. Put a checkmark in the Auto Ack. box located at the top right, above the data point display.
Data points will now be highlighted when their value changes, and the display will return to normal after a short delay. To manually acknowledge value changes for a particular type of data point:
Click the appropriate tab, to choose the type of data. Make sure there is no checkmark in the Auto Ack. box.
Data points will now be highlighted when their value changes. They will remain highlighted until you acknowledge the change of value.
Click Acknowledge, located at the top left above the data point display, to remove all highlighting.
59
Now that we have seen how to configure master protocol instances, test the SMP configuration and view the data, we will see how to configure a slave protocol instance in order to forward the device data to a SCADA or control center.
In the left pane, under Slave Protocols, click the protocol for which you want to add an instance. In the right pane, enter the name of the new instance at the end of the list of names, and press the Tab key on your keyboard.
The new protocol instance is added to the left pane, under the protocol type you had selected. If you expand the protocol instance branch, SMP Config displays the protocol settings.
In the left pane, click General, to display the list of general settings for the selected slave protocol instance. In the right pane, enter the protocol settings. For instance, to configure a DNP3 slave component, you would provide settings such as: 61
The Link Address, which identifies the logical slave device. The address has to match the address used by the control center to communicate with the SMP. The Master Link Address, which identifies the control center. Whether or not you want to support Unsolicited Reporting.
In the left pane, click Default Variations. In the right pane, specify how you want the data points to be reported. For example, you may want to specify that when there is a change to an analog input point, you want the change reported as a 32-bit value, with the time at which the event took place.
A complete description of the protocol-specific settings is available in individual documents, such as DNP3 Slave Protocol. To access the various protocol documents:
Click Start, on the Windows taskbar. Point to Programs, then Cybectec, then SMP Tools, and then Documentation. In the Documentation menu, click Protocols.
In the left pane, click the slave protocol instance. In the Tools menu, click Subscribe To.
62
Click in the Master I/O list, to display the list of data points defined for each master protocol instance. Choose the data points you want to forward to the control center. Use the Ctrl and Shift keys on your keyboard, to extend your selection. Click the dialog boxs right arrow button.
The data points you choose are added to the Slave I/O list. If, for example, you click a binary input point in the Master I/O list, the point is added to Binary Inputs, in the Slave I/O list. Normally, a data point that has been transferred to the Slave I/O list disappears from the Master I/O list. However, if you want the transferred data points to continue being displayed in the Master I/O list:
If you change your mind, you can remove a data point from the Slave I/O list as follows:
Click the data point in the Slave I/O list. Click the dialog boxs left arrow button.
The data point is removed from the Slave I/O list and reinserted in the appropriate data point list for the appropriate master.
63
In the left pane, click the data point type, to display a list of all the data points and their settings. There are different settings for each protocol. However, you should at least check the address or index assigned to each data point. For instance, the following settings are provided for a DNP3 data point:
Each data point is automatically assigned an Index value according to the subscription order. You should ensure that these index values correspond to those expected by the control center. The Event Class setting groups data points together for subsequent reporting to the control center.
In the left pane, click TCP/IP Slaves, under Connections, to display the list of defined connections. Enter the settings for the new TCP/IP connection in an empty row of the grid:
Specify a significant name for the connection. Specify the logical port number to be used.
64
In the left pane, click Connection usage. In the right pane, for each slave protocol instance under Slave Connection Usage, put a checkmark for the appropriate connection.
Validating and saving the configuration, page 39. Sending the configuration to the SMP gateway, page 40.
Using SMP Log, check the Startup log, to see whether the slave component was started correctly. Using SMP Stats, open the Slave Protocols folder and check whether the slave component is processing any data. Using SMP Stats, open the Connections folder, and check whether any data is being exchanged through the slaves communications link. Using SMP Trace, open the Slave Protocols folder, and check whether the component is receiving requests from the control center. Using the web browser, Using SMP Trace, open the Connections folder, and check whether any data is being exchanged through the slaves communications link.
65
See the following sections for instructions on how to proceed to view the information:
Viewing the SMP log files, page 45. Viewing protocol exchanges in real time, page 49. Viewing communication statistics in real time, page 53. Using a web browser to view data in real time, page 57.
A particularly effective way to test a slave protocol instance is to use the SMP itself to set up a master protocol instance to poll the slave. Using this approach and the SMP Tools, you can easily examine the effect of the various protocol features, such as report by exception.
66
Introduction
It is possible to connect two SMPs together, by the means of the Interconnections option in SMP Config. In the case of an SMP Gateway, Interconnections will allow you to increase the number of IEDs to more than 128, for example. A slave Interconnections option has to be configured in one SMP, and a master Interconnections option is to be configured in the other SMP. This type of connection can be accomplished with such protocols as DNP3, but masters and slaves have to be in perfect synchronization. With Interconnections, points do not have to be specified one by one in the slave.
DNP3 SLAVE PARK AVENUE INTERCONNECTIONS MASTER INTERCONNECTIONS SLAVE CEDAR CREEK MASTER
SLAVE
IEDs
If you move from the device up to the SCADA, you will see how the master-slave configuration must be designed for this to work. In the example above, you can see a SCADA, a first SMP called Park Avenue, a second SMP called Cedar Creek, and an IED. The main steps are the following, using the example: SMP Gateway User Manual 67
In the device's master, create an Interconnections slave. Create its connection, associate it in connection usage. Create an Interconnections master in your SMP gateway. Import points. Give them a prefix to identify the different SMP when you see its readings in the web browser. Create its connection, associate it in connection usage.
In SMP Config, under Slave Protocols, select Interconnections. Under Name in the right pane, type the master SMP's name (in the example, Park Avenue) and click again the Interconnections branch. A new branch will appear under Interconnections, name after what was just typed. Expand it and select Clients.
Under Type, select SMP Gateway. Under Client name, type the client name (in the example, Park Avenue).
68
Collapse the Slave Protocol branch and expand Connections, then select TCP/IP Slaves. Under name, type the TCP/IP slave's name. For example, you can name it Interconnections. Under Port, type 6655.
Click the Connection Usage branch. Under Slave Connection Usage in the right pane, you will see Park Avenue. Scroll to the right and select the checkbox for the TCP/IP slave's name (in the example, the name is Interconnections).
The procedure is identical for a slave protocol component that uses a serial communications link (see Configuring the communication links, page 35).
Select the master SMP; in the example it is called Park Avenue. From the Tools menu, select SMP Config. Configure the Interconnections master: 69
In SMP Config, under Master Protocols, select Interconnections. Under Name in the right pane, type the slave's name (in this example it is Cedar Creek) and click again the Interconnections branch. A Cedar Creek branch will appear under Interconnections. Expand it and select General. Type a prefix for the other SMP to distinguish its points. In this example, you can type You_.
From the Tools menu, select Configure. Select the configuration file for the slave (ex. SMP Cedar Creek 's file would be Cedar Creek.par). The Update Data Points dialog box will appear, listing all the possible points that can be "interconnected". Click Update.
Collapse the Master Protocol branch and expand Connections, then select TCP/IP Masters. Under name, type the TCP/IP master's name. For example, you can name it Interconnections. Under IP Address, type the slave's (Cedar Creek) IP address. Under Port, type 6655.
70
Click the Connection Usage branch. Under Master Connection Usage, you will see Cedar Creek. Scroll to the right and select the Interconnections checkbox.
Save the configuration file and close SMP Config; send the configuration file to the SMP gateway using SMP Manager (see Updating the configuration file on page 190).
Send the configuration files to each SMP gateway. To see if it works, open a web browser in SMP Manager for Park Avenue. You should see points with the prefix YOU_, coming from Cedar Creek's IED.
71
Security
Introduction
The greatest benefits from IED integration can be derived when substation data becomes available to users at the enterprise level. However, widespread data access can become an important security risk if it is compromised. In August 2003, the North American Electric Reliability Council (NERC) issued the NERC 1200 Urgent Action Cyber Security Standard in order To reduce risks to the reliability of the bulk electric systems from any compromise of critical cyber assets (computers, software and communication networks) that support those systems. The NERC 1200 standard evolved into NERC 1300, and is now known as NERC CIP-002-1 to CIP-009-1 Cyber Security Standards. These standards describe measures that utilities will have to implement, as well as a strict timeline for implementation. This chapter describes the advanced security features that Cybectec has implemented since version 4 of the SMP gateway software and tools, in order to provide utilities with a secure, NERC-compliant, solution to integrating their substation devices. It then takes you through the steps required to customize the security settings to suit the needs of your organization, and provides some general guidelines on setting up a secure substation LAN.
Authentication and authorization Each user is authenticated by the SMP gateway via a user name and a password. Strong passwords, individual user accounts, user groups, and detailed group permissions protect critical system functions from unauthorized access. All access attempts are logged, and accounts are locked out in the event of multiple failed attempts. Protection from substation LAN security breaches The SMP gateway is protected by a built-in firewall and a built-in VPN server. All TCP/IP ports are blocked, except those required for control center communication and SMP status monitoring. All communication
72
between the SMP gateway and the SMP Tools goes through an encrypted VPN tunnel, even when the SMP is in passthru mode.
Monitoring and locking of remote connections Modem and passthru access is continuously monitored, and can be enabled or disabled by the control center. All accesses are logged and limited to authorized users. Integrity checking All SMP software and firmware components are signed in order to ensure their authenticity and integrity. All executable files are also continuously monitored to prevent execution of unauthorized code.
Defining your authentication policy. Customizing the various user groups and privileges. Identifying your users, setting their passwords, and assigning them to user groups. Validating and saving the security configuration on your PC. Sending your security configuration to one or more SMP gateways.
Retrieve the security configuration of an SMP gateway and storing it locally. Disable the security configuration of one or more SMP gateways. Unlock a user account that has been locked out following failed login attempts.
73
In the File menu, click Change Current Login. The Login Information dialog box appears.
If security is configured on the gateway, logging in will acknowledge your rights from a list of authorized users so you can change settings. It is then highly recommended to check Always show this dialog box at startup because if you need to change settings you will already be logged in with the rights to do so. You will automatically be prompted for you credentials whenever you start the application. If you cleared the checkbox Always show this dialog box at startup, you will no longer be prompted at startup. It is more practical if no security is configured and that you do not plan it in a near future.
Create a text file named Appropriate Use Notice.txt in the folder (drive)\Program Files\Cybectec\SMP Tools\Manager\. In the text file, type the text required by the security policies of your company. When you restart the SMP Manager, the Login Information dialog box will contain the message you just typed in the text file.
74
To define your authentication policy for the very first time and assign a name to your security configuration:
Log into SMP Manager (see Starting SMP Manager and logging on, page 21).
The username and password you enter will automatically be assigned security management privileges. This will allow you to set up your authentication policy and your user groups and privileges.
The Authentication Policy dialog box appears, as shown in the next illustration, and you are ready to enter the information.
Log into SMP Manager with an authorized username and password. Only a person with security management privileges can modify the authentication policy. In the Edit menu, click Security Configuration.
In the Security menu of the Security Configuration Editor window, click Authentication Policy.
75
Description
This section of the dialog box provides a description of the security configuration, and shows when the security configuration was last modified. Use this box to enter a meaningful description for your security configuration. This description will appear on the title bar of the Security Configuration Editor window as soon as you close the dialog box. This read-only box indicates which SMP Manager user last modified the security configuration. This read-only box indicates the date and time when the security configuration was last modified. This section of the dialog box specifies the login requirements a user has to meet in order to be authenticated. The password must contain at least the number of characters specified in this box. A checkmark specifies that the password must contain characters from at least 3 out of the following categories:
Description
Modified by
Date modified
76
Element
Account Lock group box
Description
This section of the dialog box specifies whether a user account is to be locked out from SMP gateway access if the user fails to log in properly and if so, what are the locking and unlocking parameters. If you remove the checkmark from this box, the user account will not be locked out even after numerous failed login attempts. All the other boxes in this section will become unavailable. Specifies the number of times a user can enter incorrect login information before the user account is locked out. The system will lock out the user account if the user makes the maximum number of login attempts within the number of minutes specified here. A checkmark specifies that a locked user account will be automatically unlocked by the system. A locked user account will be automatically unlocked after the number of minutes specified here.
Maximum number of failed login attempts Lock account if max failed logins within
The dialog box closes, the description of your security configuration appears on the title bar of the Security Configuration Editor window, and your authentication policy goes into effect as soon as it is sent to the concerned SMP(s).
Privilege
Security Management System Management
Description
Update security configuration: users, groups, and privileges; unlock user accounts. Update firmware, software, license and components; configure redundancy, firewall, VPN, RAS, SNTP, and SNNP; access Telnet and FTP servers. Update SMP gateway configuration file.
Groups
Administrators
Administrators
Configuration
Administrators, technicians.
77
Privilege
Read only
Description
Read SMP gateway configuration file only.
Groups
Administrators, technicians, operators. Administrators, technicians, operators. Administrators, protection engineers. Administrators, technicians, operators, guests. Administrators, operators. Administrators, technicians, protection engineers, operators.
Diagnostic
Device maintenance
Perform direct IED maintenance via passthru connections. Monitor and access web access to SMP gateway central database.
Monitoring
Operation
Perform control, tag management and force operation on I/O points. Obtain remote access via dial-up or VPN.
Remote access
One predefined user, namely an administrator with full privileges. 5 predefined user groups, each with predefined privileges. Privileges are described in the Security Configuration Editor
You may want to add, delete or rename the user groups and change their privileges to reflect the security policy of your particular organization. Proceed as follows:
The Security Configuration Editor window appears. If you click a user group in the left pane, the right pane shows the privileges assigned to this group and gives a description of each privilege.
78
To rename a group:
In the left pane, click the group. In the Group menu, click Rename. Enter the new name. You cannot rename the Administrators group.
Note:
To delete a group:
In the left pane, click the group. In the Group menu, click Delete.
You will be advised if there are any users assigned to the group you are about to delete. Note: You cannot delete the Administrators group.
In the Group menu, click New. Enter the name of the new group.
You cannot add, delete or rename privileges. However, you can choose which predefined privileges you want to assign to a particular group. To do this:
In the left pane, click the user group. In the right pane, add or remove checkmarks.
79
In the User menu, click New. Enter the name of the new user.
To rename a user:
In the left pane, click the user. In the User menu, click Rename. Enter the new user name.
To delete a user:
In the left pane, click the user. In the User menu, click Delete. You cannot delete the user called Administrator.
Note:
In the left pane, click the user. In the right pane, add or remove checkmarks, as shown next.
In the left pane, click the user. In the User menu, click Set Password. In the Set Password dialog box, enter and confirm the new password.
Note: The first time you edit the security configuration, we strongly suggest that you rename the user called Administrator, since the name is so revealing that it could open the door to a serious security breach. For the same reason, we also recommend that you immediately assign a password to that user. 80
In the Security menu, click Check Validity. This will compare your security parameters such as passwords with the authentication policy that you defined beforehand.
There are two reasons why you may want to export to a file your security configuration on your PC:
To create a backup copy. To transfer your security configuration from one PC to another.
In the Security menu, click Send to File. In the Send Security To File dialog box, specify a file name and click Save.
In SMP Manager, click the SMP gateway or gateways to which you want to send the security configuration. In the Gateway menu, click Security Management, and then click Update SMP Gateway Security Configuration.
SMP Manager encrypts the information, and then sends the configuration to the SMP gateway or gateways. In the following example, we sent the security configuration to a single SMP gateway. The optional Security column contains the message Up to date to indicate that the security policy on the SMP4 ING gateway matches that on the PC.
81
In Security menu of the Security Configuration Editor window, click Get from File. In the Get Security From File dialog box, specify the file name and click Open.
The retrieved file now becomes the currently active local security configuration.
In SMP Manager, click the SMP gateway or gateways to which you want to send the security configuration. In the Gateway menu, click Security Management, and then click Update SMP Gateway Security Configuration.
Up To Date The security configuration on the SMP gateway is the same as the security configuration that is currently active on your PC. This is the normal case.
Older (date and time) You sent a security configuration to the SMP gateway, but subsequently modified the local security settings. Therefore, the security configuration on the SMP gateway is older than your local security configuration. To rectify the situation:
82
Send your local security configuration to the SMP gateway (see Sending the current security configuration, page 81). The Status column will now display Up To Date.
Newer (date and time) You sent a security configuration to the SMP gateway, but someone on another PC subsequently modified his or her own local security configuration and sent it to the SMP gateway. To rectify the situation:
If you approve:
Retrieve the security configuration from the SMP gateway in order to update your own local security configuration (see Retrieving the security configuration of an SMP gateway, next section). The Status column will now display Up To Date.
Send your local security configuration to the SMP gateway (see Sending the current security configuration, page 81). The Status column will now display Up To Date.
? (a question mark) The software installed on the SMP gateway does not support the security features.
In SMP Manager, click the SMP gateway. In the Gateway menu, click Security Management, and then click Get Security Configuration from SMP Gateway.
SMP Manager retrieves the file from the SMP gateway and upon your approval, updates your local security configuration with that retrieved from the SMP gateway.
In SMP Manager, click the SMP gateway or gateways from which you want to remove the security configuration. In the Gateway menu, click Security Management, and then click Remove Security Configuration from SMP Gateway.
83
Once you have confirmed your intention and the security configuration has been removed, the Security column of the SMP gateway(s) on which you clicked now displays the word Disabled. Note: Only your authentication policy and your user groups and privileges are disabled. The other security functions, such as integrity checking and firewall and VPN management, are not disabled.
You can reactivate the security configuration of one or more SMP gateways by simply sending them your local security configuration, as described under Sending the security configuration to one or more SMP gateways, page 81.
In SMP Manager, click the SMP gateway for which you want to perform the unlock operation. In the Gateway menu, click Security Management, and then click Unlock User Accounts. In the Unlock Accounts for < SMP gateway > dialog box:
Click Unlock all accounts. Click Unlock specific account, and specify the account in the User Name box.
OR
In the example shown next, 2 user accounts have been locked out, and we have asked to unlock a specific account.
Click Unlock.
Following the unlocking operation, the number in the Accounts locked box is decremented accordingly.
84
All authentications, whether granted or refused. All user account locks and unlocks. All configuration, maintenance, and security management activities. All Telnet, Web and passthru server accesses. Integrity check status information. Security server status information.
In the SMP Manager Tools menu, click SMP Log. In the SMP Log application window, click the Security folder in the left pane.
In the SMP Manager window, the Status column shows that the SMP gateway is in Safe Mode. All device points are tagged with a communications failure attribute. A series of alarms are generated, that can be seen at the SCADA or in a local HMI.
85
The Reset log indicates that the integrity check function has restarted the SMP gateway in Safe Mode. The Security log contains an entry indicating when the problem was detected, and several entries identifying each file that failed the integrity check. It can take up to 5 minutes for all entries to appear in the log.
See Updating the SMP gateway application, page 193. If the SMP gateway goes into Safe Mode after the update, contact Cybectec technical support.
Pre-establish the VPN connection: In SMP Manager, click the menu Gateway and select Establish a VPN Connection. What happens when you click this function the first time is that it creates the settings in the Windows Control Panel, in Network Connections. In SMP Manager you will see "Connecting". If you go to Network Connections in Windows, you will now see a new icon named after your gateway, under Virtual Private Network. Once connected, you can disconnect it and move on to the next step. Click your SMP gateway in the SMP Manager application window, and from the Tools menu. click Telnet to start a Telnet session. In the Telnet window, enter the username and password of a user account that has system management privileges. SMP Gateway User Manual
86
The firewall manager displays the list of available commands, as the following shows: Firewall Manager. Available commands (case insensitive):
F L A D R V S H Q Enable/disable the firewall. Enable/disable the firewall log. Add a custom firewall rule. Remove a custom firewall rule. Show custom firewall rules. Set the maximum number of incoming VPN connections. Show the current firewall and VPN status. Display the list of available commands. Quit.
You can display the previous list anytime, by using the H command. The commands are described as follows:
F command
The F command enables or disables the firewall. The firewall is initially disabled and VPN is disconnected. Before enabling the firewall, make sure you can use VPN connections through your corporate network; otherwise, you will lose all communication with the SMP gateway, since all but the VPN port will be closed. When you request to enable the firewall, you are warned that you need to be able to make VPN connections. You are also given the option to enable the firewall either when you exit the firewall manager or when you restart the SMP gateway. If you have mistakenly enabled the firewall when, in fact, you cannot use VPN connections:
Ask your IT administrator to modify the corporate network to allow VPN connections to the SMP gateway, if possible.
Make a VPN connection via the SMP gateways subnetwork. Start a Telnet session and disable the firewall.
Or:
L command
The L command enables or disables the firewall log. If you enable the log, all significant information related to firewall activity will be entered into the log. You will be able to view the contents of the Firewall log with SMP Log.
A command
The A command adds a custom firewall rule. A firewall rule is used to open additional ports in the firewall, to specify whether the ports will be accessed via the TCP or UDP protocol, and optionally, which IP addresses will be allowed to go through the ports. Example:
Pocket CMD v 4.20 \> firewallmgr Firewall Manager.
Available commands (case insensitive): F L A D R V S H Q Enable/disable the firewall. Enable/disable the firewall log. Add a custom firewall rule. Remove a custom firewall rule. Show custom firewall rules. Set the maximum number of incoming VPN connections. Show the current firewall and VPN status. Display the list of available commands. Quit.
"(H) Help, (Q) Quit: a" Custom rules allow access to the SMP Gateway according to the specified parameters. "Specify a rule name, leave blank to cancel: PassthruServer" What protocol do you want the rule to apply to? (T)CP or (U)DP [T]: t Specify the port range. Example: 21 500-520 Port range: 32500 "This port can either be opened for any computer, or for a specific" computer or subnet.
88
Do you want this port to be accessible from any computer [Y]? y Rule summary: Name: Protocol: Port range: Accessible from:
Do you want to proceed creating the firewall rule [Y]? Firewall rule created.
In the previous example, we opened ports 506 and 507 to TCP messages, and we specified that only IP address 10.87.35.4 could access the ports. Give any name you wish to the rule you create, as this space of text is only for you to remember it by. If we had entered the same IP address but a subnet mask of 255.255.0.0, for example, we would have granted access to all IP addresses within the range 10.87.0.0 and 10.87.255.255.
D command
The D command removes a particular firewall rule.
R command
The R command displays the list of firewall rules you have set-up.
V command
The V command specifies the maximum number of incoming VPN connections allowed. The default value is 2, but you can increase this number to a maximum of 5. If you decrease the number of VPN connections, some VPN connections will be closed when you activate the setting. You are therefore given the option to activate the new value either when you exit the firewall manager or when you restart the SMP gateway.
S command
The S command shows the current status of the firewall and VPN connections. Example:
Firewall: disable (currently disabled) Firewall log: enable (currently enabled) VPN connections: 2* (currently 3) * This setting will be applied on next restart.
In the previous example, we can see that at most 3 incoming VPN connections are currently allowed, but that on the next restart of the SMP gateway, this number will be changed to 2.
H command
The H command displays the list of available commands, as shown at the beginning of this section.
89
Q command
The Q command is used to exit the firewall manager. If you have modified any settings that will go into effect later, you are notified of the fact. Example:
(H) Help, (Q) Quit: q The following settings will be applied on next restart. Maximum VPN connections: 2 Press any key to exit.
The VPN connection is established automatically and remains active, regardless of how many tools you launch. The IP Address column displays the IP address of the VPN connection, and the VPN column indicates that the VPN connection is established, as shown next.
To disconnect VPN:
90
When you close the last tool, VPN is automatically disconnected. The IP Address column once again shows the address of the SMP gateway, and the VPN column indicates that VPN is disconnected. Method 2 This method is useful when the client application is not under the control of SMP Manager. An example might be the CoDeSys application. If you were programming the SMP gateways soft PLC with CoDeSys, you would enter the CoDeSys commands via your PC workstation (see The Soft PLC, page 145). Then when you were ready to load the CoDeSys script onto the SMP gateway in order to test and debug the script, you would proceed as follows.
Start SMP Manager. In the Gateway menu, click Make VPN Connection.
The IP Address column displays the IP address of the VPN connection, and the VPN column indicates that the VPN connection is established.
Use CoDeSys to download your script onto the SMP gateway via the VPN address associated with the SMP. In the Gateway menu, click Disconnect VPN.
The IP Address column once again shows the address of the SMP gateway, and the VPN column indicates that VPN is disconnected.
The IP Address column displays the IP address of the VPN connection, and the VPN column indicates that the VPN connection is established, as shown next.
91
Figure 12
Network security
To isolate the substation LAN, you should take the following precautions:
92
There should be no email access. There should be no Internet access. There should be no direct connection to the corporate LAN.
Furthermore, a redundant path should be provided between the SCADA and the substation, to ensure continued operation in the event of a failure of the corporate WAN. A dedicated communication line is often maintained for this purpose. A firewall must be used to isolate the substation LAN from the corporate WAN. The firewall should be configured to block all ports and connections except those that are absolutely necessary for the operation of the substation. For instance, the firewall could be set up to accept traffic between the SCADA and the SMP gateway only. The firewall could also be configured to limit traffic to a single port, such as that used by a DNP3 communications link. Note, however, that such a security policy would prevent the use of the SMP Tools outside the substation.
The most secure approach is to establish a VPN (Virtual Private Network) connection between the substation LAN and the client workstations on the corporate LAN. A VPN encapsulates and encrypts network messages before forwarding them to the recipient. You will not need any special setup when installing the SMP Tools. This approach will also secure access by any other tools. If you cannot use a VPN, you will need to open the necessary ports for DCOM on the firewalls and routers that connect to the corporate LAN. Here is the list of ports and port ranges that you have to open in the substation LAN firewall, to let a PC on one side of the firewall communicate with an SMP on the other side of the firewall: For access when not using VPN, open Application
FTP server Telnet SMP Status Web server RPC server and DCOM DCOM SMP maintenance server
Port
21 23 23 80 135
Protocol
TCP TCP UDP TCP TCP
TCP TCP
93
Port
161 123 1200 32500
Protocol
UDP TCP TCP TCP
Port
23 1723 -
Protocol
UDP TCP and UDP GRE
Here is a list of the most commonly used ports for RTU and SCADA communication: SMP Config Protocol
DNP3 ICC-60870-5-104/103 IEC-61850 ICCP MODBUS
Port
20000 2404 102 102 502
IMPORTANT: This configuration will work only if you are NOT doing address translation. Check with your network administrator. If you are using SNMP, you will also need to open the following ports:
GET and SET commands go through port number 161. SNMP traps go through port 162.
94
Description
This binary output point is used to lock or unlock all incoming RAS dialup connections to the SMP gateway. This binary output point is used to lock or unlock all incoming RAS dialup connections to the SMP gateway. This binary input point indicates whether or not there is a communication in progress via an incoming RAS dialup connection. This binary output point is used to lock or unlock a particular passthru connection. The name of the connection, as defined in SMP Config, is included in the name of the data point. This binary input point indicates whether a particular passthru connection is currently enabled or disabled. This binary input point indicates whether a particular passthru connection is currently active.
_smp___dialupEnabled
_smp___dialupInUse
_smp___passthru<connection>Enable
_smp___passthru<connection>Enabled
_smp___passthru<connection>InUse
In the SMP Manager window, start a Telnet session. Enter the command to start the RAS manager: RASMGR
Enter the command to toggle between locking and unlocking incoming dialup connections. X
Example:
(H) Help, (Q) Quit [h]: x
95
Do you want to lock the incoming dialup connections? [N]: y The incoming dialup connections are now locked. (H) Help, (Q) Quit [h]: x Do you want to lock the incoming dialup connections? [Y]: n The incoming dialup connections are now unlocked.
Method 2
Using an HMI or Visual Substation Explorer, perform the OPEN or CLOSE operation on the _smp___dialupEnable data point. You can do a Direct Execute or a Select Before Operate (SBO). (See the Visual Substation Explorer User Guide, GUI-00115-00020 T).
Using an HMI or Visual Substation Explorer, perform the lock or unlock operation on the _smp___passthru<connection>Enable data point (see the Visual Substation Explorer User Guide, GUI-00115-00020 T).
To request that a particular passthru connection be locked or unlocked on SMP gateway startup:
In SMP Manager, start SMP Config. In the left pane, click Passthru Connections. In the right pane, select the passthru connection, and either enter or remove a checkmark in the Blocked at Startup box.
96
Introduction
Most manufacturers of new IEDs provide PC-based tools for the configuration and maintenance of their devices. These tools usually connect to the device using a serial link or, less frequently, a network connection. The optional SMP passthru feature gives you the ability to use PC-based tools to access the devices connected to an SMP. With this feature, you can use the SMP as a terminal server for remote maintenance, monitoring and control of the connected devices.
97
Principles of operation
The maintenance and configuration programs expect the device to be connected to a serial port on the PC. Since the device is now connected to the SMP instead, the passthru function has to intercept this communications link and provide a mechanism to exchange messages between the PC-based program and the SMP.
PC
SCADA VIRTUAL LOOPBACK PORT TOOL
SMP CONNECT
COMM LINK
SLAVE COMPONENT
PASSTHRU SERVER
MASTER COMPONENT
COMM LINK
DEVICE
Figure 13
To do so, you need to set up a virtual loopback connection between SMP Connect and the maintenance or configuration tool. This allows SMP Connect to intercept the communications link from the maintenance or configuration tool and forward the messages to the SMP gateway. The SMPs passthru server then forwards the data to the device via a serial link. The combination of the SMPs passthru feature and the SMP Connect program provides a passthru connection between the PC-based maintenance program and a device. The maintenance and configuration tools can operate as if the device were directly connected to the PC. SMP Connect acts as a terminal server and gives you the ability to choose the device to which you want to connect.
98
While the PC application is communicating with the IED or RTU, the latter may have to suspend its data acquisition; indeed, depending on the serial line and device type involved, it may be necessary for all devices on the line to suspend their data acquisition, even though only one device is engaged in communications with the PC application. SMP Connect terminates the passthru connection if a problem arises or if there is no data exchanged during a specified timeout period.
Using SMP Config, you identify the devices that will be using passthru connections. For each device, you provide information such as the SMP port to be used for the passthru connection, and the timeout after which the passthru connection is to be terminated if there has been no data exchange. In SMP Connect, you identify each application that will communicate with a device via a passthru connection. For each of these applications, you specify the type of loopback connection to be established between SMP Connect and the application, and you define the communication settings of the loopback connection. You use SMP Connect to select the target device and run the application.
In the following figure, we have set up passthru connections for 3 devices connected to an SMP 16.
Create a new connection by entering the following information in the empty row:
99
IED Name This name will be used to identify the device in the SMP Connect program. You should use the same name that you assigned to the device when configuring the master protocol component. Port Name Choose the serial port that links the SMP to the configuration port of the device. Some devices use separate configuration and data ports. In that case, you will use two separate cables to connect the device to the SMP; otherwise, the port will be the same as that used by the master protocol. Suspend Link This setting indicates that data acquisition should be suspended for all other devices sharing the multidrop link while SMP Connect is communicating with the selected device. The default is that acquisition of the remaining devices NOT be suspended. This setting applies only to devices that support the feature. Suspend IED This device-specific setting indicates whether or not the master protocol component should suspend data acquisition while SMP Connect is communicating with the device. The default is that acquisition be suspended. This setting applies only to devices that support the feature. IED Address This address identifies the device in a multidrop configuration. The Suspend IED option has to be checked or the value is ignored. Modem Signals This setting specifies whether or not the serial port associated with the IED supports modem control signals. If you put a checkmark, the DTR and RTS modem control signals will be transfered across the passthru connection. The default is that modem control signals are NOT supported. Blocked at Startup This setting is a security feature. If you put a checkmark, the passthru connection will not be available when the SMP starts up. You can subsequently make it available by enabling specific logical data points, as explained under Locking incoming RAS and passthru connections, page 95. Inactivity Timeout This mandatory setting specifies how long the SMP Connect link can remain inactive. If the program detects that there has been no data exchange between the device and the application during the specified timeout period, it prompts the user to either terminate the session or specify a longer wait time. Comments This optional setting gives instructions to the SMP Connect operator, such as telling him which communications program to use with the device.
100
A virtual serial loopback connection. This is the preferred choice. A real serial loopback connection. You set up this type of connection only if the device manufacturers application cannot use a virtual communications port. A TCP/IP loopback connection. You set up this type of connection only if the device manufacturers application uses TCP/IP.
If you set up a real serial loopback connection, the manufacturers program will use one of the PCs serial ports, such as COM1, to connect to the device, and you will connect that serial port to another of the PCs serial ports, such as COM2. The data exchanged on COM1 will then become available to the SMP Connect program. To connect the 2 serial ports together:
This type of cable crosses the receive and transmit signals so that the output of one is fed into the input of the other.
Specify whether the application is to be started manually, identify the path to the application, and provide any arguments required by the program. Specify what type of loopback connection is to be used between SMP Connect and the application, and define the communication settings of the loopback connection.
Click your SMP gateway in the SMP Manager application window. In the Tools menu, click SMP Connect.
The SMP Connect application window appears, showing a list of all the devices configured to support passthru connections. The top portion of the screen shows what you entered in SMP Config, with one add ional piece of information; the PThru Active column indicates whether a passthru connection is currently being used for a particular device. The bottom portion of the screen shows a trace of passthru connection events. Using the SMP Connect menus, you can specify whether the trace window is to show UTC or local time. You can clear the trace, and you can save it to a text file on your PC.
101
To identify the application program that will communicate with a device and to define the communication settings of the loopback connection, proceed as follows:
Click the device in the top pane of the SMP Connect window. In the Control menu, click IED Application Settings.
The IED Application Settings dialog box appears. The first time you use this box, you will use the 4 buttons at the top to create the application list.
In the dialog box, click the application in the list, and specify:
Whether the application is to be started manually. If you put a checkmark, then when you connect to the device, SMP Connect will start the passthru and loopback connections without starting the application; you will be able to start the application manually. The complete path to the devices maintenance and configuration tool. The command line arguments required by the tool, if any (see the manufacturers documentation).
102
Whether SMP Connect is to use a virtual serial loopback, a real serial loopback, or a TCP/IP loopback connection to communicate with the tool. Most manufacturers tools use a virtual or real serial connection. However, if you are using a terminal emulator program such as Microsoft HyperTerminal, to communicate with the device, you can use a TCP/IP connection. The settings of the virtual serial loopback connection (Configure button):
Application port. Communication settings (parity, data bits, stop bits, flow control).
OR
Application port. SMP Connect port. Communication settings (parity, data bits, stop bits, flow control)
OR
The settings of the TCP/IP loopback connection (Configure button): (the dialog box shows the IP address of your PC).
Logical port number for the TCP/IP connection; enter the same TCP/IP port number that you set in the device manufacturers tool or in the HyperTeminal program. Indicate whether your application uses the Telnet protocol. Most terminal applications using TCP/IP do use the Telnet protocol, so the box contains a checkmark by default.
Click the device in the device list. In the Control menu, click Connect to IED . In the IED Application Selection dialog box, choose the application to be used. Click the Connect button.
Normally, the configured application window opens and you can start entering commands. However, if you requested that the application be started manually, the trace window will show that SMP Connect has established the SMP passthru connection and has started the loopback connection with the application, but the application window will not open. You will have to start the application manually before you can enter commands.
103
Using SMP Config, check the Suspend IED setting for the selected passthru connection. If you modify the setting, remember to load the modified configuration and restart the SMP. Using SMP Connect, check the message pane to see if the passthru connection is being activated correctly. Using SMP Trace, open the Master Protocols folder, and check whether the component is receiving requests from the control center. Using SMP Trace, open the PassThruServer folder, and check whether any data is being exchanged with the device. Using SMP Trace, open the Connections folder, and check whether any data is being exchanged with the device.
OR
Click the device in the SMP Connect window. In the Control menu, click Disconnect from IED.
The SMP Connect trace window now shows that the passthru connection is no longer active. Note: The passthru connection is automatically deactivated if there is no data exchanged on the link during the inactivity timeout period specified in SMP Config.
104
Many devices can produce digital fault records or other event files. You can setup your SMP gateway so that it automatically retrieves these files and stores them on one or more computers for subsequent analysis. Using SMP Config, you will go through the following steps:
You will define system folders located on the remote computer or computers. When you configure the master protocol, you will specify the system folder in which the master protocol is to store the event files that it retrieves from the device.
In the left pane of the SMP Config window, click System Folders. For each folder you want to define, fill in the following information in the right pane:
Enter a unique numerical Folder ID. The folders should be numbered 1 through 99. Supply a name for the folder. In Location, enter the path to a shared folder on a remote computer, using UNC (Unified Naming Convention). For example, if you enter: \\cpu104\Events, the system folder you are defining represents the shared folder called Events on the computer with machine name cpu104. The SMP must have access to a WINS server in order to resolve computer names. See the SMP installation guide for more information. Enter the Username and Password if access to the shared folder requires a username and password. You must use the machinename\username or domainname\username format. Enter 0 for Low Disk Space Alarm if you do not want to be notified when disk space is running low. Otherwise, enter the number of bytes that will trigger a transition on a specific logical data point, thereby advising you that space is running low (see the Master
105
Protocol Common Concepts document for details). The maximum value you can enter is 2,147,483,647, and the default is 0.
Open the master protocol instance tree structure. Click Event Files. The event file has automatically been assigned a Name, based on the protocol. For example, an IEC 60870-5-103 event file is called a Disturbance Data File, a Hathaway BCM-200 event file is called a Breaker Operation Record, and a Hathaway DFR 1200 is called a Digital Fault Record. You cannot modify the name. The event file has automatically been assigned a Short Name, based on the protocol. To continue with the example, the 3 short names would be DDF, BOR and DFR, respectively. You cannot modify the short name. Put a checkmark in the Disabled checkbox if you want to disable the event file retrieval function, in which case you should not fill in the remaining boxes. By default, there is no checkmark since it is assumed that you will want to enable the retrieval. Choose a folder in the Folder drop-down list. This list contains the names of the system folders you defined previously. In the File Rule drop-down list, choose which event files the master protocol instance is to retrieve when it is launched during SMP startup: New files only Only those files that were generated since the last time a file was retrieved from the device. Files from last X days All files generated in the last X days, regardless of whether or not some of them may have already been stored in the system folder. If you choose this option, you must specify the number of days in the Max File Age box.
In the Max File Age box, specify a number of days. If you enter a 5, for example, and you had chosen Files from last X days for the File Rule, then all files generated in the last 5 days would be retrieved. In the Minimum Free Disk Space box, specify the amount of available disk space that has to be available in the system folder in order to store an event file. When there is less disk space available than what you have specified, the event files will stop being retrieved from the device. The maximum value you can enter is 2,147,483,647, and the default is 0. If you enter a value of 0, the available disk space will not be verified.
106
Optionally, you can enter some meaningful information in the Extra Info box, that will be appended to each event file name. Optionally, you can provide a description of the event files.
107
Introduction
The SMP Gateway Annunciator option provides a cost-effective solution to providing operators with an HMI for the substation. Using SMP Config, you can easily configure alarms on binary and analog data points, design simple display pages, and send the configuration to the SMP; you can then connect a touch screen directly on the gateway's video output and start using the Annunciator. The SMP Gateway Annunciator provides the following display pages:
The Alarms page displays the list of all active alarms, as well as alarms that have returned to normal but have not been acknowledged. The Readings pages, user-defined, that provide real-time display of values and states, minimal graphic capabilities, and control functions. The Blocked page that lists all the alarms blocked by the operator. The alarms History page displays the chronological list of previous alarms. The size of the alarm log is user-configurable. The alarm log is circular, with new alarms replacing the oldest alarms. The System State page provides access to SMP Gateway internal statistics and the current value of all data points, in a tabular format.
The SMP Tools automatically display the appropriate data whenever the Annunciator option is activated for a given SMP Gateway. SMP Config displays an Annunciator folder and SMP Stats provides Annunciator information. In the following sections, we will describe how to create and setup the Annunciator touch screen interface in SMP Config, then how to use the different display pages. Note: The Annunciator option is only available for the SMP 16/CP and SMP 16/SG gateways.
109
If a USB cable is used, the SMP gateway will see it automatically and no configuration will be necessary in SMP Config. If you are using a serial cable, you have to select the port in SMP Config and also enable it in Connections. Refer to the sections Configuring the serial port interfaces, page 35, for more information. You do not need to configure the port's operation, programming for this function is setting the parameters automatically.
In SMP Manager, click the Tools menu and select SMP Config. In the SMP Config program, from the tree view, select Annunciator. In the Annunciator pane on the right, type a name for the Annunciator. For the illustration that follows the name is Bay Control. Click again the Annunciator branch to validate the instance, its name will appear, as illustrated in the following image:
110
Just like you would for a protocol, you configure the Annunciator branch by branch, from top to bottom, as described in the following sections.
Select General from the tree view and define the general settings: Field
Disable checkbox. Screen saver wait time Initial page
Description
You can disable the Annunciator in the SMP with this checkbox. Time, in minutes, before the touch screen connected to the SMP gateway goes into the screen saver mode. The initial page displayed in the Annunciator: Alarms, History, Blocked, Readings, System state. There is a relay output on the SMP gateway to trigger an output, typically an alarm buzzer, upon alarm. Check this box to use it. Select the time zone you wish to display. This does not affect the internal settings, you simply choose display preferences. Check whether you wish to display Daylight Saving Time or not. Select the date format you normally use. Select to display up to 1000 alarms in the Annunciator's Alarm History page.
111
Expand the Alarms branch to create the alarms you wish to manage in the Annunciator. Select Analog Inputs from the tree view and define the alarm settings: Field
Name
Description
Type the name of a previously defined analog input. If you used Subscribe To, the name of the subscribed point will appear in that field. Select if this alarm will be of major or minor importance. State at which level the analog reading becomes too low. Ex. : for 120-volt line, 100 volts. Because an analog value is graded, you must state at which level the analog reading becomes too high. Ex. : for 120-volt line, 130. The deadband is of how much the value must exceed or be lower than the high and low threshold. You can design an alarm for later purposes and disable it until you wish it to start using it. Type here what you want to display in the Description field of the alarm. When the high threshold of the alarm is reached, it will display it after the general alarm description. Type here what you want to display in the Description field of the alarm. When the low threshold of the alarm is reached, it will display it after the general alarm description.
High Threshold
Deadband
Disabled
Select Binary inputs from the tree view and define the alarm settings: Field
Name
Description
Type the name of a previously defined analog input. Otherwise, it will display the subscribed point. Select if this alarm will be of major or minor importance. Filter for rapid transitions. Type length, in milliseconds, you wish the alarm condition to be on before the alarm is generated. For 3 seconds, type 3000. Filter for rapid transitions. Type the length, in milliseconds, you wish the alarm condition to be off before the alarm is turn off. For 3 seconds, type 3000. If you wish to trigger the alarm upon a 0 instead of a 1, activate the Inverted box. You can design an alarm for later purposes and disable it until you wish to start using it.
Disappearance Filter
Inverted
Disabled
112
Description
By default, nothing is displayed. You can type here what you wish to see in the Description field of the alarm message.
In SMP Config's tree-view, under Annunciator, select Readings. If pages are already created, they will be listed in the right pane. You can disable the pages you do not wish to display in the Annunciator right now. From the Tools menu, select the Edit Annunciator pages command. The Alarms tab of the Annunciator page editor appears.
113
Element
Alarm list order group box Oldest alarm at top
Description
Select in which order you wish alarms to appear. Select this option button if you deal with each alarm in order and work them down to the most recent. Select this option to deal with alarms as they occur. The single-alarm display appears at the bottom of all screens in the Annunciator. This group box allows you to choose what to display in it. Select this option button to see the oldest unacknowledged alarm in the single alarm display. Select this option button to see the most recent unacknowledged alarm in the single alarm display. Choose the way alarms are acknowledged.
Show oldest unacknowledged alarm Show most recent unacknowledged alarm Alarm acknowledgement group box Alarms can be acknowledged and recalled in any order
Select this option button to be free to acknowledge and recall any alarm. In that case, you need to select the alarm then acknowledge or recall.
114
Element
Alarms must be acknowledged and recalled in the order they occurred Alarm state group box
Description
Select this option button to only acknowledge and recall alarms in the order they occur.
This group box allows you to set colors if you wish for all the types of available alarms in the Annunciator. Select colors for these four alarm states, for minor and major alarms: Active Unacknowledged Active Acknowledged Return to normal Unacknowledged Return to normal Acknowledged
Alarm state
Major alarm
Unacknowledged major alarms are usually red, to make sure they are seen. Unacknowledged minor alarms are usually yellow. Click Reset Colors to set the colors back to the default settings. In this group box, you will see the result of the selections made in the Alarm tab for the Alarms page as well as for single alarm display that can be viewed at all times in the Annunciator.
115
Description
All the configured pages can be found under page list. The title of each page will appear at the top of each page. When in the Annunciator, all the pages will be displayed and the same way Microsoft Excel sheets are displayed, and there will be arrows to scroll them. Click this button to add a new page of readings to display in the Annunciator. Select a page in the page list and click this button to remove a readings page from the Annunciator. Select a page in the page list and click this button to rename it. The grid is where you design the actual interface. Its cells and the different configurations you can select are described in the next sections. Click in one or several header cells to select one or several
Add button
Remove button
Rename button
Grid
Grid headers
116
Element
Description
lines.
Click a cell in the grid to define your new reading. Each cell in the grid can display one or more of the following:
A static text. The value of an SMP gateway data point, analog or binary.
When displaying binary inputs, the additional display attributes are available:
Text label for states 0 and 1. Text and background color for states 0 and 1.
In the following sections we describe how to use these capabilities to create displays and simple diagrams.
Click the row or column header to display the cell properties dialog box.
117
Note: When selecting a complete row or column, it is only possible to set the background color and font.
118
Click the cell to display the Cell Properties dialog box. In the General tab, select Display static text.
Field
Text
Description
Enter text to be displayed. Use the Font tab to select the display font. There is space for about 12 characters in a cell. If you type more, it will spill in the cell on right, unless you change the alignment to left or center. You will not see it in the design interface, but if you send it to the SMP it will display as you asked in the Annunciator. The text field can be left empty if you simply want to change the cell color.
Select the text display color. Select the cell background color.
Drag the mouse on the area you wish to change: a blue square will display the selection. When you release the mouse button, the Cell Group Properties dialog box appears. This dialog box lets you set the font and colors for the group, then you can configure individual cells within the group and the rest of the group will remain the way you set it.
119
Field
Data point
Description
Select the data point to display. The choice is limited to analog inputs. The Annunciator will display the scaled value of the data point with 2 decimal digits. Use the Font tab to select the display font. There is space for about 12 characters in a cell. If you type more, it will spill in the cell on right, unless you change the alignment to left or center.
Normal state
Text color: Select the color to display the value when the data point is valid and not in alarm condition. Background color: Select the cell background color when the data point is valid and not in alarm condition. Text color: Select the color to display the value when the data point is in alarm condition. Background color: Select the cell background color when the data point is in alarm condition. Flash: Check this box to flash the value whenever the data point is in an alarm condition. Text color: Select the color for values when the data point quality is bad.
Alarm
Quality
120
Click the cell to display the cell properties dialog box. In the General tab, select Display binary data point.
Field
Data point State 0 or State 1
Description
Select the data point to display. The choice is limited to binary inputs. Text label: Enter a text to display when the value of the binary input is 0 for State 0 or 1 for State 1. Default value is 0 for State 0 or 1 for State 1. There is space for about 12 characters in a cell. If you type more, it will spill in the cell on right, unless you change the alignment to left or center. Text color: Select the color to display the value when the data point is valid and not in alarm condition. Background color: Select the cell background color when the data point is valid and not in alarm condition. Flash: Check this box to flash the display whenever the data point value is 0 for State 0 or 1 for State 1. Only one flashing state can be selected. Text color: Select the color to display the value or text when the data point quality is bad. Background color: Select the cell background color when the data point quality is bad.
Quality
or
Drag the mouse on the two corners of the square of cells you wish to select:
When you release the mouse button, the Cell Group Properties dialog box will appear:
122
Click a cell to display the Cell Properties dialog box. Select the Font tab.
Field
Font Style Alignment
Description
Select the display font for the cell. Select the display style: add italic or bold or both. Select the cell alignment. If more than approximately 12 characters are in the cell, it will spill into another cell. If it is left-aligned, it will spill to the right cell, if it is centered it will spill on both sides, and if it is right-aligned, it will spill into the cell on the right. You will not see the missing letters in SMP Config, but it will appear with the Annunciator. Select the font size.
Size
Note: Windows CE only supports a limited number of fonts and display styles.
123
Save the configuration file in SMP Config. Send it to the SMP gateway: from SMP Manager, in the Gateway menu, select Send configuration file. SMP Manager will display the Restart Gateway xxx dialog box. Select Shutdown and restart and click OK. On the touch screen you will see the SMP startup and eventually, the screen should become totally black. The Annunciator will be displayed a few seconds later, but it could take one or two minutes. You will be asked to calibrate the touch screen, as explained in the next section. In SMP Manager you will see the booting sequence, when the LEDs all become green the touch screen for the Annunciator will become white.
A cross will appear in a corner of the screen. A message will prompt you to touch the screen from a position of normal use. This means that you should be in your normal working position; either sitting down or in front of the rack standing up, but as you should normally. Touch the crosses as they appear on-screen. When this is over, a message will appear, asking if the cursor follows you fingers. Whether you press yes or no you will be taken to the Annunciator and you can recalibrate as needed.
124
The Alarms page displays the list of all active alarms, as well as alarms that have returned to normal but have not been acknowledged. User-defined Readings pages that provide real-time display of values and states, minimal graphic capabilities, and control functions. The Blocked page that lists all the alarms blocked by the operator. The alarms History page displays the chronological list of previous alarms. The size of the alarm log is user-configurable. The alarm log is circular, with new alarms replacing the oldest alarms. The System State page provides access to SMP Gateway internal statistics and the current value of all data points, in a tabular format.
Navigation
The large arrow key buttons allow you to move from one line to another when it is too small for fingers. To change pages, simply press the tab's name.
At any time you can press Calibrate to readjust the touch screen, if, for example, you change your working position from sitting to standing. UTC time and date are displayed beside it. At all times on the top left corner you can see the number of alarms and how many are blocked. Single alarm display:
At the very bottom, you will see either the oldest or newest alarm, according to what was selected in SMP Config. Press it once to clear the alarm sound, twice to acknowledge. If this alarm has several occurrences, a x will be displayed in the icon column.
125
Element
Icon column
Description
In this column, the alarm type can be quickly determined: A red A is for an appeared alarm, a green R is for a disappeared alarm, an x beside the letter means that this alarm is a multiple alarm.. Text entered in the description fields of the binary and analog alarms in SMP Config. The date and time the event occurred, displayed in the format you selected in SMP Config. Press Clear Sound to clear the sound warning system. Press Acknowledge, in order to acknowledge a specific alarm. You have to remember that the process is configured in SMP Config: you could select whether you have to acknowledge in order or not, and if the events appear from the newest to the oldest or the opposite. Press Clear, in order to clear the alarm display of the data point that has returned to normal. You have to remember that the process is configured in SMP Config: you could select whether you have to acknowledge in order or not, and if the events appear from the newest to the oldest or the opposite Press General Ack./Clear to acknowledge all newest or oldest alarms and clear the alarm display of all data points that have returned to their normal condition Press Block at any time to stop the alarm sound and move it to the Blocked
Description
Date, time
Clear button
Block button
126
page. Arrows Use the arrows to navigate up or down in the alarms list.
A sound warning system is turned on to let you know that an alarm condition has occurred. The data point is added to the Alarms page. If you chose the alarm color defaults in SMP Config, a red symbol with the letter "A" is displayed in the Icon column to indicate the appearance of the alarm condition. The color of the display line indicates the severity of the alarm, with high priority alarms shown in red and low priority in yellow.
Acknowledging alarms
When an alarm occurs, you must first clear the sound warning system before you can acknowledge the alarm. The sound warning system also acts as an interlock, ensuring that you are aware of all the alarms that occur.
Depending on the options you have selected in SMP Config, you can:
Press General Ack./Clear to acknowledge all new alarms and clear the alarm display of all data points that have returned to their normal condition. 127
Or,
Select a particular alarm and click Acknowledge. Whenever you acknowledge an alarm, the entire line turns a paler shade of its original color.
Or,
Press Block at any time to stop the alarm sound and move it to the Blocked page.
The data points that are in an alarm condition remain in the alarm display until the condition disappears, at which time you can clear them from the display.
The sound warning system is turned off again. The red "A" symbol beside the data point is replaced by a green "R" symbol, to let you know that the alarm condition has returned to normal. The entire line also turns green.
Click General Ack./Clear to acknowledge all alarms and clear the alarm display of all data points that have returned to their normal condition.
Or,
With the arrows, select a particular alarm and press Acknowledge, in order to acknowledge a specific alarm. Press Clear, in order to clear the alarm display of the data point that has returned to normal.
Note that some alarms can never be deactivated or return to normal. You can acknowledge the alarm, but you cannot clear it from the display.
Multiple alarms
Alarms are displayed differently on the Alarms and Events pages. On the Alarms page, alarm appearances and disappearances are displayed on the same line, as are multiple instances of an alarm. When an alarm appears and disappears more than once without being cleared, the "A" or the "R" symbol in the column indicating the state of the alarm has an "X" in the bottom right corner. This makes it easy for you to distinguish between single and multiple alarms, since multiple appearances and disappearances are always displayed on the same line.
128
You can page through the different Readings page, with the arrows, if you designed several of them. You will keep seeing the single-alarm display at the bottom. The title of the page, in the top middle section of the page, is the name you typed when you clicked Add in the Alarms tab, in the Annunciator pages editor.
129
Element
Name Description
Description
The alarm name, as configured in SMP Config. Text entered in the description fields of the binary and analog alarms in SMP Config. The date and time the event occurred, displayed in the format you selected in SMP Config. Press the Reactivate button to clear the sound warning system. Press the Reactivate All button, to send all the alarms back to the Alarms page. Use a single arrow to go down one line, a double arrow to go to the bottom or the top of the list.
Date, time
Arrows
130
Element
Date, time
Description
The date and time the event occurred, displayed in the format you selected in SMP Config. Type of intervention in the log. If the occurrence in the history is an alarm, it will display A; if it is an operator's action it will display O. Text entered in the description fields of the binary and analog alarms in SMP Config. Toggle on or off alarm events and operator events when you click these two buttons. Use a single arrow to go down one line, a double arrow to go to the bottom or the top of the list.
Description
131
Element
Left pane
Description
In the left pane, select a type of information you wish to display. This information varies according to the options and the alarms designed in SMP Config. The right pane contains the detailed information of the type selected in the left pane. You will find statistics, software and hardware information, protocol information, varying according to the options in your gateway. There are two sets of arrows, one for the left pane and one for the right pane. Use a single arrow to go down one line, a double arrow to go to the bottom or the top of the list.
Right pane
Arrows
132
Introduction
Since it is connected between the substation devices and the control centers, the SMP gateway is well positioned to implement advanced processing functions that would be impossible to perform in less sophisticated devices. The SMP gateway provides the following automation capabilities:
The SMP Automation Functions module, to add basic automation functions. See The SMP Automation Functions module, next. The Soft PLC module and CoDeSys development platform, to create sophisticated automation scripts, such as closing circuit breakers and load balancing. See The Soft PLC, page 145.
The Analog Control function, which performs a control operation on a physical analog output point, based on the value change of a physical input point. It writes the value of an input point to an output. A deadband value, in engineering units, can be specified so that only changes that exceed the deadband value will trigger a control operation. A time filter, in milliseconds, can be applied to value changes of the source point, to prevent control operations from being triggered on transitions of short duration. Analog Latch and Reset is similar to Binary Latch and Reset. It allows you to capture transitional values on analog input points. The Best Of function, which makes a logical input or output point an exact replica of the best source point available of the same type. The evaluation of the best source point is based on quality. An exact replica involves the support for redundant devices: value or state, the quality
133
and the timestamp. Furthermore, if the best of operation involves output points, the requested command is sent to the best source point.
The Binary Control function, which performs a control operation on a binary output point, based on the state change of a binary input point. A millisecond time filter can be applied to value changes in the source point, to prevent control operations from being triggered on transitions of short duration. The Binary Debouncing function is the answer to a typical binary signals problem, by filtering short-term transitions, considered as non-significant. The Create function, allows you to creates a logical analog or binary input point that acts as a data holder. The only way to modify the data point is by using a Force operation, using the Force function. A validity delay can be specified to define a refresh period after which the value of the created point must be refreshed to maintain a valid status. If the value is no longer refreshed using the Force function after this delay, the point inherits the bad quality status. This function, in conjunction with the Force function, allows a slave to update a input point value (binary or analog) that can be read by any other slave. The Force function, which forces the value or state of an analog or binary input point, based on control operations performed on force and unforce output points created by the function. The Grouped Control function, which performs a control operation on a group of output points, based on the value or state change of an analog or binary control point. The Inhibition function, which uses a logical output point to control a group of physical output points for the purpose of enabling or disabling control functions. This function can also be used with physical input points, in which case it enables or disables reporting of transitions for those points. The Input Latching and Reset function, which changes the state of a logical input point, called a latched point, whenever it detects a transition or pulse on a physical binary input point. The latched point remains on until either a reset operation is done on a binary output reset point or an internal timer expires. Optionally, the control operation on the reset point can also apply to a physical binary output point called the controlled point. The Logical function, which dynamically computes an AND or OR operation on a group of binary input points. The result of this computation is stored in a logical binary input point. The Logical Processor defines logical data points which values are based on calculations performed on physical points that you build in the Logical Editor, to process existing points through different operations described further. It is a much more elaborated version of Logical.
In the left pane, click Automation Functions, under Master Protocols. In the right pane, assign a name to the new instance.
134
As shown in the screenshot, the newly added instance includes the following items:
General settings, which set the general behavior of the component. Settings for various data point types. Initially, there are no data points. You will create logical data points for each function you set up. You will then specify the settings for each of these logical data points. Functions. All the currently supported functions appear in the list. You will define specific functions of these various types, and these functions will refer to logical data points.
In the left pane, click General. Enter a prefix in the right pane. This prefix must be unique for each Automation Functions instance.
The right pane shows the settings you need to enter for the Best Of function.
135
The Best Of function makes a logical input or output point an exact replica of the best source point available of the same type. The logical point is referred to as the result point.
In the right pane, enter a name for the function. Define the result point:
In the left pane, click the type of data point you want for the result point. For the sake of example, click Analog Inputs, and then on Logical Inputs. Thus, the result point will be a logical analog input point. In the right pane, enter a name of your choice for the result point. Let us call it Best Of Result Point, and enter its settings: scale, offset, units, etc. In the left pane, click again on Best Of. In the right pane (see previous screenshot), choose Best Of Result Point in the Result Point drop-down list.
Or,
Enter the name of the point in the Put the cursor in the First Point box. In the Tools menu, click Select Points. In the Select Points dialog box, choose the first source point to which you want to subscribe. This point has to be an analog input point, to match the data point type of the result point. In our example, we selected an analog input point on a DNP3 device. This point represents the phase A current. Click Paste to have the point appear in the First Point box.
136
Define the second source point: Enter the name of the point in the First Point box. Or,
Without closing the dialog box, put the cursor in the Second Point box. In the Select Points dialog box, choose the second source point to which you want to subscribe. This point also has to be an analog input point, to match the data point type of the result point. In our example, we chose an analog input point on a MODICON MODBUS device, which represents the phase A current, as did the DNP3 point. Click Paste to have the point appear in the Second Point box.
The Best Of function will choose the better of the 2 source points, and put the result in the result point. Note: In the example, we subscribed to device data points, but we could have subscribed to any data point available in the SMP gateway. SMP Gateway User Manual 137
Logic Processor
SMP Config enables you to derive a data point through a mathematical expression that includes existing data points. For instance, you may want to export the value of a certain power aspect such as phase imbalance but no such data point is available. If data points are available for voltage and current, you can simply define three new data points calculated as the voltage times the current for each phase, then check power imbalance between the three points. The expression for deriving a calculated data point can be evaluated in one of two ways:
By exception Whenever there is a transition on the data points included in the expression. If you choose this option, you also specify whether the evaluation is to be triggered by a specific data point or by any data point in the expression. Periodically Every X milliseconds.
You can choose to have the expression evaluated either by exception or periodically, or both. If you choose both, the expression will be evaluated once every X milliseconds as well as anytime there is a transition on a data point or signal used in the expression. If you do not choose either methods, the expression will be evaluated only once, on startup of the SMP Manager. Note: This function is not available in the SMP 4-20 and the SMP 8-40.
In the left pane, at the bottom of the automated functions list, expand Functions and rightclick Logic Processor. In the shortcut menu, select Logic Editor.
138
The Logic Editor is used to enter the expression that generates the value of the calculated data point. It is displayed across several windows, which allow you to set the attributes of the calculated data point and assist you in editing the expression. Use the toolbar at the top of the dialog box to validate, save and close the expression, or to undo the last change to the expression. The table below describes the various areas of the dialog box: Window
Properties
Description
Used to specify the different attributes of the calculated data point. These attributes are described in the sections below. Used to select and enter existing data points in the expression. You can select data points from the list of available data points. These are grouped together in folders, based on grouping criteria that you established with the Group Settings tab of the Display Options dialog. If you open the various folders, you will note that binary points are displayed in blue, while analog points are displayed in green. The list is a memory jogger for selecting I/O points to be used in the expression. Double-click on an item to insert it at the cursor location in the expression window.
Data Points
Functions
Displays the list of all the functions that can be inserted in the expression. Double-click on an item to insert it at the cursor location in the expression window. The various functions are described in the sections below. Displays the list of all the operators, constants and variables that can be inserted in the expression. Double-click on an item to insert it at the cursor location in the expression window. The various operators are described in the sections below.
Operators
139
Window
Expression (empty window at the bottom of the application window)
Description
Used to enter and edit the expression to be evaluated. You can enter the expression directly from the keyboard or use the memory-jogging windows described above. The result of the evaluation of the expression is assigned as the value of the calculated data point.
Description
Resulting data point. Name of the calculated data point for which the expression is currently being edited. This field cannot be edited. To edit an expression for another calculated data point, close the editor and select another data point in one of the analog or binary point pages in the Site view. Optional space for you to type a description of the new point. Defines how the calculated data point is to be time-stamped. Specify "Server" if you want the system time to be used as the timestamp, and specify "Triggered point" if you want the timestamp to be the time of the point that triggered the calculation. By default, the calculated data point is time-stamped by the Visual Substation server.
Description Timestamp
Time-based
Specifies whether the expression is to be evaluated on a periodic basis. The time interval is then specified via the Time interval attribute. Normally, expressions are not evaluated on a periodic basis. Specifies that the expression is to be evaluated every X milliseconds. This time interval applies only if the Time-based attribute specifies "Yes". The minimum value is 50 ms. If this condition is Specifies whether the expression is to be evaluated whenever there is a transition on one of the data points or signals in the expression. Specifies whether the evaluation of the expression is to be triggered by a single data point ("Yes") or by any data point ("No") in the expression. This attribute is ignored if By exception is set to "No". Used to specify the name of the data point or signal that will trigger the evaluation of the expression. This attribute is ignored if Specific trigger is set to "No".
By exception
Specific trigger
Triggered by
140
It must begin with a letter. It can include alphanumeric characters (A-Z, a-z, 0-9), the underscore separator " _ " (without the quotes), and special characters, such as a period.
If the data point name contains a special character, it must be surrounded by the delimiter character ". For example, a physical data point name of T5.APHA must be declared as "T5.APHA". Here are some examples of valid expressions: 120 + ( CurrentPoint * 0.02 * ( Rand() - 1 ) ) ( 0.85 "T5.APHA" * "T5.KVAB" ) / 1000 "1B17.MA" AND ("120-1.MA" AND NOT "120-1.MB" ) AND "1B1.MA" Imbalance("T5.APHA", "T5.APHB", "T5.APHC")
Comments in expressions
Expressions can span several lines. To insert a comment into an expression, put a single quote at the beginning of the line. For instance: ' Calculates the imbalance of transformer #5 Imbalance("T5.APHA", "T5.APHB", "T5.APHC")
Condition statements
You can use the following condition statements in expressions: Statement
If <condition> Then <expression> Endif IF <condition> Then <true expression> Else <false expression> Endif
Description
Evaluates the specified expression if the logical condition is true.
Evaluates the expression specified after the "THEN" if the logical condition is true, or evaluates the expression specified after the "ELSE" if the logical condition is false. Note that the expression can contain several embedded IF and ELSE statements, in which case each ELSE statement is associated with the IF statement closest to it.
Mathematical functions
You can use the following built-in mathematical functions in expressions: Function
Abs( x )
Description
Calculates the absolute value of x.
141
Function
Pow( x, y ) Sqrt( x ) Exp( x ) Log( x ) Sin( x ) Cos( x ) Tan( x ) ArcSin( x ) ArcCos( x ) ArcTan( x ) Min( x, y ) Max( x, y )
Description
Calculates the value of x to the power of y. Calculates the square root of x. Calculates the value of e raised to the power of x. Calculates the logarithm of x to the base 10. Calculates the sine of angle x, expressed in radians. Calculates the cosine of angle x, expressed in radians. Calculates the tangent of angle x, expressed in radians. Calculates the arcsine of angle x. Calculates the arccosine of angle x. Calculates the arctangent of angle x. Compares the values of x and y, and retains the lesser of the two. Compares the values of x and y, and retains the greater of the two.
Description
Calculates the imbalance among three phases, for the current represented by the three data point names. The calculation is defined as follows for a three-phase current: ((Imax - Imin) / Iavg) * 100 where: Iavg = (AI + AB + IC) / 3 Imax = max (IA, IB, IC) Imin = min (IA, IB, IC)
Compares point1 and point2, to the nearest precision significant digits. The expression evaluates to TRUE or FALSE, depending on whether or not point1 = point2.
IsTrigger( point )
Evaluates to TRUE if the specified point causes the expression to be reevaluated. Evaluates to TRUE if the value of the specified data point is
QualityOf( point )
142
valid. TimestampOf( point ) Returns the timestamp of a point, as a number of milliseconds that have elapsed since an internal reference date and time. Use this function for the sole purpose of comparing timestamps that were obtained via a previous call to the TimestampOf() or TransitionTimestamp() function. Sets the quality of a data point to bad. That is, the value of the data point cannot be assumed to be correct.
BAD_QUALITY
Generators
You can use the following built-in generators in expressions. Generators are used to mathematically generate input values for data points. Generator
Sine( amplitude, frequency, phase )
Description
Generates an expression of the form: Sine( A, f, P ). Calculates the value of a sinusoid with an amplitude A, a frequency f in hertz, and an initial phase P in degrees. P is optional and if you don't specify it, it will be assigned a value of 0.
Generates an expression of the form: Pulse( A, f, dc, d ). Calculates the value of a pulse stream with an amplitude A, a frequency f in hertz, a duty cycle cd in percent, and a delay of d milliseconds. d is optional and if you don't specify it, it will be assigned a value of 0.
Generates an expression of the form: Saw( A, f, d ). Calculates the value of a sawtooth wave with an amplitude A, a frequency f in hertz, and a delay of d milliseconds. d is optional and if you don't specify it, it will be assigned a value of 0.
Generates an expression of the form: Randn( mean, var ). Calculates a random value with a normal distribution that has a mean value of mean and a variance of var.
Rand()
Generates an expression of the form: Rand( ). Calculates a random value with a uniform distribution ranging between 0.0 and 1.0.
Arithmetic operators
You can use the following arithmetic operators in expressions:
143
Operator
+ [Add] - [Subtract] * [Multiply] / [Divide] ( [Opening parenthesis]
Description
Calculates the sum of the left and right operands. Calculates the difference between the left and right operands. Calculates the product of the left and right operands. Divides the left operand by the right operand. Expressions are evaluated according to standard operator precedence. Parentheses are used to group sub-expressions and control the order in which expressions are evaluated. 1 + 2 * 3 evaluates to 7 (1 + 2) * 3 evaluates to 9
) [Closing parenthesis]
Expressions are evaluated according to standard operator precedence. Parentheses are used to group sub-expressions and control the order in which expressions are evaluated. 1 + 2 * 3 evaluates to 7 (1 + 2) * 3 evaluates to 9
Binary operators
Binary operators are used to manipulate the individual bits of expressions or data points. You can use the following binary operators in expressions: Operator
BAND
Description
Calculates a bitwise AND between the left and right operands. For instance, 12 BAND 5 evaluates to 4 (1100 BAND 0101 is 0100).
BOR
Calculates a bitwise OR between the left and right operands. For instance, 12 BOR 5 evaluates to 13 (1100 BAND 0101 is 1101).
BNOT
Calculates a bitwise NOT of the value to the right. For instance, BNOT 0 evaluates to -1 (BNOT 0000 is 1111).
BXOR
Calculates a bitwise XOR between the left and right operands. For instance, 12 BXOR 5 evaluates to 9 (1100 BXOR 0101 is 1001).
BEQV
Calculates a bitwise EQV between the left and right operands. For instance, 12 BEQV 9 evaluates to 6 (1100 BEQV 0101 is 0110).
144
Logical operators
Logical operators are used to combine the results of logical expressions such as comparisons. You can use the following logical operators in expressions: Operator
AND OR NOT XOR EQV
Description
Evaluates to TRUE if the left and right operands are both TRUE. Evaluates to TRUE if either the left or right operand is TRUE. Evaluates to TRUE if the value to the right is FALSE. Evaluates to TRUE if the left and right operands have different values. Evaluates to TRUE if the left and right operands have the same value.
Relational operators
You can use the following relational operators in expressions: Operator
< [Less than] > [Greater than] <= [Less than or equal to] >= [Greater than or equal to] = [Equal to] != [Not equal to]
Description
Evaluates to TRUE if the left operand is less than the right operand. Evaluates to TRUE if the left operand is greater than the right operand. Evaluates to TRUE if the left operand is less than or equal to the right operand. Evaluates to TRUE if the left operand is greater than or equal to the right operand. Evaluates to TRUE if the left operand is equal to the right operand. Evaluates to TRUE if the left operand is different from the right operand.
Description
Represents the current value, i.e., the value of the logical point being edited, just prior to its evaluation.
145
Since the Soft PLC is part of the SMPs internal architecture, the scripts you define can be used to:
Create new logical data points, with values based on the result of calculations performed on real data points. Process data in real time before sending it to control centers. Implement sophisticated local automation functions, such as automatic closing of circuit breakers and load balancing.
The Soft PLC module is provided with the CoDeSys development platform, a complete development environment that supports the IEC 61131 programming languages:
Instruction List (IL) Structured Text (ST) Function Block Diagram (FBD) Continuous Function Chart (CFC) Ladder Diagram (LD) Sequential Function Chart (SFC)
146
Install the CoDeSys development system on your PC. Start CoDeSys and install the SMP Target Support Package. A Target Support Package (TSP) contains all the files and configuration information necessary to control the SMP from a program created in CoDeSys. Add the SMP Library to the CoDeSys project. This library contains all the information necessary to access the SMP components from a programming language. Create your automation script using one of the IEC 61131-3 programming languages. Connect the CoDeSys development platform to the SMP. Load the script on the SMP and use the CoDeSys advanced debugging features to test and debug the script.
For complete details on using CoDeSys to create scripts for the SMP Soft PLC module, see SMP Gateway PLC User Manual, GUI-00316-00003-T.
147
Introduction
Typically used for computer system management and security auditing, syslog is supported by a wide variety of devices and receivers across multiple platforms. Because of this, syslog can be used to integrate log data from many different types of systems into a central repository (source: http://en.wikipedia.org/wiki/Syslog). It is then possible for the system administrator to dispatch these messages to e-mail or SMS systems, for example. With the SMP gateway, you can start using the UDP syslog protocol as soon as you define it in SMP Config and that the parameter file is sent to the gateway. Your syslog server will then start receiving logs from the gateway. The next section explains the quick procedure to make it possible.
In SMP Manager, from the Tools menu, select SMP Config to open it. In the left pane, under your SMP gateway's name, expand the System branch. Select the Syslog branch and type an appropriate name. In the following example, the name is Main Syslog server.
149
Expand the branch you just created. Select the General branch and select the time zone. This is the time zone used by the server. You can also select Auto Adjust DST, for daylight saving time schedule adjustments. Select the Receiver branch and type a name and the server's IP address. Leave the port numbers to default, that is 514. Select the Facilities branch, the default settings, as illustrated above, should suffice your needs. This is where your assign syslog messages to SMP Log folders. If you need to know more, open SMP Log and look at the log's content. You can also refer to the section Information provided by SMP Log on page 45.
150
Redundancy
Introduction
The SMP gateway is a critical component in a substation automation system. Hence, there are circumstances in which losing an SMP gateway can severely impact substation operations. With the redundancy option, you can group 2 SMP gateways together in a redundant configuration, to ensure continued operation of the substation automation system in the event of a failure. If one SMP fails, the other one takes over. There are different types of redundancies - IEDs, SMPs, networks- can be redundant, in many combinations. Redundant SMPs are addressed by a SCADA center as if they were a single SMP with a single IP address. In the event that one SMP fails, the second SMP immediately becomes active and takes ownership of the logical IP address. Failover from the active SMP to the standby SMP typically takes less than 5 seconds. Network connections from the control center are temporarily lost when the active gateway goes offline. The control center simply needs to reconnect to the same group IP address in order to re-establish a new connection and restore system operation. An additional benefit is that you can update SMP settings with minimum down time. Note: The redundancy function is not available on the SMP 4.
151
2 COMMUNICATION FAILURE
2 COMMUNICATION RESTORED
COMMUNICATION OPTIONAL
The active SMP uses a special protocol to send regular heartbeat messages to the standby SMP. If the standby SMP fails to receive these messages, it automatically assumes that it should become active. 2 distinct communication channels are used for the heartbeat messages, to minimize the chances of both SMPs becoming active due to a single faulty connection. These channels can be LAN connections, dedicated serial connections, or a mixture of both. The 2 SMPs in a group must have identical configurations and be physically connected to the same substation devices. The active SIOM, which comes as an option with the SMP 4-20 and SMP 8-40, also supports redundancy and can therefore be used to connect serial devices to 2 redundant SMP 4-20s or SMP 8-40s.
Redundant IEDs
When needed, breakers can be monitored and controlled by multiple protection relays to make sure that a fault is always detected; normally different relays from different manufactures are used. To report the only one data set to the control centre the SMP has the Best of automation function (see The SMP Automation Functions module on page 133).
152
ACQUISITION OVER TWO LINKS TO TWO DEVICES. INFORMATION FROM PRIMARY SOURCE IS PREFERED.
SECONDARY SOURCE INFORMATION IS USED. TRYING TO RESTORE COMM. WITH PRIMARY SOURCE. INFORMATION FROM PRIMARY SOURCE IS PREFERED.
COMMUNICATION FAILURE
COMMUNICATION RESTORE
The best of automation function is protocol independent. It is a per-point redundancy, allowing any failure in the acquisition path. Connection with two links to the same device can also be done. However, this achieves almost the same as the Master link redundancy but with more configuration effort. When both IEDs have the same data map a redundant master can be used instead of a best of configuration.
The main advantaged of the best of function compared to a master link redundancy is that the best of allows the mixing of different devices. On the other hand, the disadvantage is the amount of configuration (3 points are needed to get the data: 2 master points and 1 best of point).
Priority
It is possible to give one of the SMPs the priority; this will make the SMP with the higher priority active when there are no error conditions. This setting will cause an additional failover when the SMP with the highest priority recovers from a fault. In case the prioritized SMP has an error condition, it will remain in standby mode. This is explained in the following sections.
153
ACTIVE
STANDBY
SMP FAILURE
ACTIVE
SMP RESTORED
STANDBY
ACTIVE
Each SMP has its own private IP address. Both SMPs share a public IP address which is assigned to the active SMP. Basic switchover condition is when the active SMP has a hardware failure. Serial devices are connected to both SMPs through Y-cables. The standby SMP can still be accessed by its private IP address for maintenance. It is possible to force a switchover. Both SMPs must have the same configuration.
In the SMP Manager window, choose the 2 SMP gateways you want to group together. Note that they must be the same model and have the same configuration file currently loaded. The SMP 4 does not support redundancy. Select one SMP and use the mouse and the Shift or Ctrl key on your keyboard, as for any standard Windows selection, to select the second SMP.
154
In the Gateway menu, click Group to display the Redundancy Parameters dialog box.
The Redundancy Parameters dialog box allows you to specify redundancy settings such as the virtual IP address, the LAN and serial connections to be used, and the conditions that have to exist for the SMPs to switch roles. Redundancy is defined by 3 categories of settings, corresponding to the tabs in the dialog box:
In the General settings tab, you identify the basic properties of the group:
The keep-alive settings, i.e., the frequency at which keep-alive messages are to be sent by the active SMP (every x milliseconds, where x is between 200 and 10,000), and the timeout interval after which the standby SMP presumes that the active SMP has failed and takes over as the active SMP (between 600 and 30,000 ms). The virtual address and subnet mask used to communicate with the group. The virtual IP address is different from the physical IP addresses you set up during the initial configuration of your SMPs. It identifies the group and is used by the control center to communicate with the active SMP. If the active SMP fails, the virtual IP address and subnet mask are assigned to the standby SMP. Optionally, the virtual address and subnet mask of the secondary network, if you are using a secondary network for the communication between the SMPs and the control center. Optionally, you can give priority to one of the SMPs for becoming the active SMP. If neither SMP is in a failure state, the one with top priority will become active.
155
The Links tab is used to specify the 2 connections that will be used to link the redundant SMPs to each other. These can be any combination of LAN or serial connections. The SMP 4-20 supports 1 LAN connection, while the SMP 8-40 and the SMP 16 can support 2. The active SMP uses these links to send regular heartbeat messages to the standby SMP. If the standby fails to receive the messages, it automatically assumes that it should become active. 2 distinct communications links are used, in order to minimize the chances of both SMPs becoming active due to a single faulty connection. In the Links tab, you identify: The type of first connection: LAN or serial. The type of the second connection: LAN or serial.
The communication mode, either RS-232 or RS-422, if you are using one or more serial connections between the 2 SMPs. With all 3 SMP models, you use a standard null modem cable for RS-232. For RS-422, you use a standard null modem cable with the SMP 16. However, you need a special cable for the SMP 4-20 or SMP 8-40; see the SMP 4-20 SMP 8-40 Installation Guide, GUI-316-027 T, for details.
A failover will automatically happen if the active SMP faces a major problem, such as a power failure, that prevents it from sending heartbeat messages. The Failover tab defines optional conditions that will trigger a failover such as:
The system available memory falls below a defined threshold. Low-voltage alarm detected on the unit power supply. For 16/CP-PM and 16/SG-PM, SMP 8-40, 4-20, a high-temperature alarm. The units network connections failed.
In the Restart Gateway dialog box, choose Shutdown and Restart to have the SMPs restart in normal mode.
156
Active: This is the active SMP. It communicates with the field devices and sends keep alive messages at a frequency set through parameter settings. In the event of a failover, it becomes the standby SMP. Standby: This is the standby SMP. It listens for keep alive messages from the active SMP and takes over as the active SMP if the latter fails to send a message within the expected number of milliseconds. Hot Standby: This is the standby SMP. It listens for keep alive messages from the active SMP. It also synchronizes all the data points that have been set up for hot standby in SMP Config. That is, whenever a transition occurs on a hot-standby data point, it updates the data point information. It takes over as the active SMP if the latter fails to send a message within the expected number of milliseconds. Failover time is shorter than with regular standby because integrity scans are not always required, since the hot-standby data points are already synchronized. Blank SMP Manager is not able to communicate with the SMP for one of the following reasons:
The SMP redundancy software is not running because you have not set the redundancy parameters. The SMP redundancy software is not installed. The SMP is down.
This column may also advise you of exceptional situations, as described here:
Peer IP: nnn.nnn.nnn.nnn: This is displayed for one of the SMPs in a redundancy group if the second SMP is not visible in the list. To fix the problem, add the second SMP to the list. Too Many SMPs: There are more than 2 SMPs in this redundancy group. To fix the problem, remove the excess SMPs. Different parameters: The 2 SMP gateways in this group do not have the same redundancy settings. To fix the problem, take the following steps:
Click one or both SMPs. In the Gateway menu, click Group Properties.
157
A warning message pops up, telling you that SMP Manager will use the default redundancy settings and asking you if you want to go on. If you reply in the affirmative, the Redundancy Parameters dialog box pops up and you can change the settings to your liking. When you close the dialog box, both SMPs will have the same settings. Restart both SMPs to activate the parameters: Click the SMP gateway to be restarted. In the Gateway menu, click Restart.
Warning: Do NOT reset the SMPs by pressing the reset button on the SMP itself, or you will lose your parameter settings!
Peer IP: nnn.nnn.nnn.nnn => Not in redundancy: The Peer IP is in the SMP gateway list, but is not part of the redundancy group. This could happen if one of the 2 SMPs in the redundancy group lost its redundancy configuration. To fix the problem, ungroup the SMP that is in the redundancy group and regroup the 2 SMPs. Virtual gateway (IP: nnn.nnn.nnn.nnn): You have added to the SMP gateway list, an SMP with the virtual IP address you assigned to the 2 SMPs in the redundancy group. The address of the active gateway is indicated in parentheses.
The redundancy configuration of all SMP gateways in the list is retrieved cyclically. This mechanism allows you to see the current redundancy state of all SMP gateways, on the SMP Manager main screen. Since the refresh cycle is relatively slow, the redundancy configuration of a given SMP gateway is automatically retrieved when the SMP gateway is added to the list, when it is restarted, and when one or more files are sent to it. You can refresh the redundancy state of all SMP gateways as follows:
Hot standby
The SMP software has the possibility to maintain a complete up-to-date data image on the standby SMP. This feature, available on the most common master protocols, will duplicate all transitions received by the master protocol to the standby SMP. To take full advantage of the hot standby it is necessary to have the slave component also active:
In SMP Config, select the General nod of the slave component. In the Hot-Standby Support column, Disabled should appear. From the drop box, select Acquisition or Acquisition and Control:
Acquisition: the slave will report the data to its master without accepting control commands.
158
Acquisition and control: the slave will report data to its master and it will accept control commands. The commands will be forwarded to the active SMP which will forward the control command to the device.
3 10.2.15.3 10.2.15.1 2 10.2.15.2 3
ACTIVE 1
STANDBY
1. 2. 3.
The active SMP receives the data from the device. The standby SMP is updated. The data is sent to the control center by whichever SMP.
The public IP address is always associated with the active SMP. So when the control center wants to connect to the standby SMP, it needs to use the physical IP address.
Managing redundancy
Forcing an active SMP to become a standby SMP
To force an active SMP to become a standby SMP, proceed as follows:
Click the active SMP in the list of SMP gateways. In the Gateway menu, click Force Standby.
The SMP on which you clicked will go into standby mode, while the other SMP in the group will go into active mode.
159
In the SMP gateway list, click one or both SMPs. In the Gateway menu, click Group Properties. Use the Redundancy Parameters dialog box to modify the desired settings.
In the SMP gateway list, click both SMPs. In the Gateway menu, click Ungroup.
Using SMP Log, open the Redundancy folder of each SMP to check that one SMP is active and the other one is in standby mode, waiting for a failover. Using SMP Stats, open the System folder, then the Redundancy folder, to view additional information on the redundancy function.
160
ACTIVE
STANDBY
NETWORK FAILURE
ACTIVE
STANDBY
SMP FAILURE
ACTIVE
Normally, the control center accesses the primary network and switches to the secondary network only if the primary network fails. You should therefore make sure the secondary network is working properly. To do this, you need to switch to the secondary IP address of your SMP, and then run SMP Log and SMP Trace. To switch from the first IP address to the second IP address:
Note that the switch to the second IP address applies not only to the SMP that has the secondary network, but to all the SMPs in your gateway list. From this point on, if you launch the SMP Tools, Telnet or Internet Explorer for any SMP gateway, these applications will use the second IP address. To switch back to the first IP address:
Note that once a tool has been launched, it never switches IP addresses regardless of how many times you toggle the address selection. Address switching applies only to commands that take place after you instruct SMP Manager to switch addresses. Note further, that if there are other models in your SMP gateway list that support only one IP address, such as the SMP 4 or the SMP 4-20, toggling back and forth between the first and second IP address will have no effect. You will see the same logs, traces and statistics, regardless of which address you specify.
161
Introduction
The SNMP server is an optional software module that allows the SMP to export statistics using the SNMP standard (Simple Network Management Protocol). The SNMP agent publishes and supports both standard MIBS that are supported by the Windows CE operating system and custom MIBS that are supported by the SMP gateway application. The agent supports extensive reading capabilities as well as limited writing and trap capabilities.
SNMP traps
SNMP traps are messages that are automatically sent to selected SNMP clients when specific, unusual events occur. They are the equivalent of alarms. Traps are automatically sent to listening SNMP clients whenever:
The SMP restarts. A communications link used by a master or slave protocol instance fails for more than 60 consecutive seconds. These traps are called link down traps. A communications link used by a master or slave protocol instance becomes active. These traps are called link up traps.
In order to send traps, the SMP gateway needs to know the IP addresses of the SNMP clients that are listening on the network. You can enter a maximum of 32 SNMP client IP addresses using the SMPs SNMP Manager.
163
In SMP Manager, click the SMP gateway and start a Telnet session. Enter the following command: snmpmgr
The SNMP manager lists all available commands, as shown next: \> snmpgr
SNMP Manager Available commands (case insensitive): A R L M C G D B I T O F H esc Q Add a client. Remove a client. Display all clients. Modify the community membership of a client. Change a client description. Add a community. Remove a community. Display all communities and their permissions. Modify the permissions of a community. Modify the name of the system contact. Modify the location of the Gateway on which the agent is running. List information about system contact and Gateway location. Display the list of all commands. Abort the current operation. Quit.
You can display the previous list any time, by using the H command. You should establish the SNMP settings in the following order:
Add communities and their permissions. Add a system contact. Add a system location. Add a number of clients and associate them to communities.
Any modifications you make will go into effect the next time the SMP is reset.
164
Time synchronization
The SMP gateway supports time synchronization using a demodulated and modulated IRIG-B signals, protocols, and SNTP. It can be synchronized by the GPS clock option, and IRIG-B signal or SNTP, or it can synchronize other devices with IRIG-B or SNTP. This section defines these time management systems, why it should be used, and how to use it with the SMP gateway.
From SMP Manager, in the menu Tools, click Telnet. At the command prompt, type clockmgr. Set the time, in the 24 hour notation. For example, if the displayed time is 7:03:32 P.M., type 19:03:32 PM.
Time is displayed in the 12-hour notation to accommodate the users, but when you set it you must use the 24-hour notation.
165
With a SCADA protocol, such as DNP3. Among the information this type of protocol provides, is a reliable time source for the gateway. Through an external source, such as IRIG-B. It could come from another GPS antenna connected to another device that redistribute demodulated or modulated IRIG-B. It could also come from a SMP 16 with the GPS clock option that distributes IRIG-B to your SMP. Directly from a GPS signal if you have an SMP 16 with the GPS clock option. You will then have the GPS antenna collecting a highly accurate satellite signal.
Through a modulated or demodulated IRIG-B signal. With a protocol. With its integrated SNTP.
Following the August 2003 blackout, NERC has recommended that substation devices be synchronized using a GPS clock. When the SMP gateway is synchronized by an accurate time source such as an external IRIG-B source or its internal GPS clock, it can distribute accurate time to substation devices using IRIG-B or its internal SNTP time server: Output Delay Accuracy ( ms) Protocol output Protocol input SNTP input Modulated IRIG-B input Demodulated IRIG-B input GPS input
500 500 500 500 500
SNTP output
500 100 100 100 100
Note that demodulated IRIG-B signals cannot be carried over long distances while the modulated IRIG-B can be carried in distances over 350 meters (1000 feet) without degrading. The SMP 16 gateways GPS clock installs directly on Cybectecs SMP 16/CP and SMP 16/SG gateways to provide a highly accurate internal time source. This factory-installed option provides a cost-effective solution to maintain substation devices in accurate synchronization.
166
The SMP gateway does not perform accurate time-tagging when I/O changes are received from a device, because the transmission delay is unpredictable. The device must time-tag the I/O changes itself for the time to be accurate. When the SMP gateway is synchronized, it can in turn synchronize other devices using different protocols such as DNP3, IEC-60870-5-101 or IEC-60870-5-104. The accuracy may be limited by the protocol, but the overall synchronization of all the devices is typically accurate to within one second. Here is a list of the possible synchronization types you can do with the different types of Cybectec gateways: SMP model
SMP 4-20 SMP 8-40 SMP 4 SMP 16/CP SMP 16/SG
Protocol
SNTP
Modulated IRIG-B
O O
Demodulated IRIG-B
O O
GPS
G G
Legend: O = With the SIOM option, G = with the SMP 16 GPS clock option.
167
What is SNTP?
NTP stands for Network Time Protocol, and is a standard Internet protocol used to synchronize the clocks of computers to a time reference. NTP was originally developed by Professor David L. Mills of the University of Delaware. As a full implementation of the NTP protocol seemed too complicated for many systems, a simplified version of the protocol, namely SNTP, was defined. SNTP (Simple Network Time Protocol) is basically NTP minus certain internal algorithms that are not required by all types of servers. SNTP uses UTC time. This means that typically, the time you see on your watch and the time that the SNTP uses do not match. Keep that in mind when you decide whether or not to synchronize your devices.
In SMP Manager, click the SMP gateway to be configured, and start a Telnet session. Enter the following command: sntpmgr
The current client and server statuses are displayed, followed by the menu.
To have the SMP act as an SNTP client and be synchronized with a remote SNTP server:
Respond Y to the second question. Specify the SNTP server IP address using the format xxx.xxx.xxx.xxx. Specify the refresh period. This is the frequency at which the SMP will connect to the server in order to be resynchronized. The default is 720 minutes (12 hours). Specify the recovery refresh period. This will be used if the SMP is not able to connect to the server; the SMP will try to connect at each recovery period, rather than at the normal refresh period. This value must be less than the normal refresh period. The default is 60 minutes (1 hour). Specify the maximum time variance. The SMP will ignore a time update if the difference between the SMP time and the new time provided by the server is greater than this setting. The default is 14,400 minutes (24 hours).
168
Right after the setup, there is a prompt that allows you to force the SMP gateway to synchronize itself immediately.
169
You may want to use the SMP Tools on an SMP gateway that is not connected to your PC via a network. You would typically do this by setting up a dial-up connection and using a modem to call the SMP gateway from your PC. Less typically, you might choose to access the SMP by setting up a direct serial connection between a serial port on your PC and a serial port or the console port on the SMP gateway. This section explains how to set up dial-up and direct serial connections between a personal computer and an SMP gateway. The procedure differs slightly, depending on whether your PC is using the Windows XP or Windows 2000 operating system.
Setup a dial-up (modem) connection between the PC and the SMP gateway; Setup a direct serial connection between the PC and the SMP gateway.
171
You must perform the steps in the order presented in the table. Step
1
To do this
Set up the SMP gateway to accept a dial-up connection
2. 3. 4. 5. 6.
If the modem you plan to use appears in the list, skip the rest of this step and proceed to the next item in the table, since your modem is already installed. 4. 5. Click Add. In the Add Hardware Wizard dialog box, allow Windows to detect your modem automatically, and click Next.
172
Step
To do this
8. 9.
10. Click OK to close the Phone and Modem Options dialog box. 3 Set up a new dial-up (modem) connection for the SMP gateway Perform this step for each SMP gateway with which you want to communicate via modem. 1. 2. 3. 4. 5. 6. 7. 8. 9. From the Windows Start menu, access the Control Panel. Double-click Network Connections. Double-click New Connection Wizard. In the New Connection Wizard dialog box, click Next. Click Connect to the network at my workplace and click Next. Click Dial-up connection and click Next. Enter a descriptive name for the connection and click Next. Enter the phone number you will use to dial the SMP gateway and click Next. Under Create this connection for, click Anyones use, click Next and click Finish.
10. In the Connect <Connection Name> dialog box, click Properties. 11. Click the Networking tab, then click Settings. 12. In the PPP Settings dialog box, clear the Enable LCP extensions checkbox, the Enable software compression checkbox, and the Negotiate multi-link for single link connections checkbox. Click OK. 13. Under This connection uses the following items, clear the Client for Microsoft Networks checkbox. 14. Click Internet Protocol (TCP/IP), and click Properties. 15. In the Internet Protocol (TCP/IP) Properties dialog box, click Advanced. 16. In the Advanced TCP/IP Settings dialog box, clear the Use default gateway on remote network checkbox and the Use IP header compression checkbox and click OK, three times 17. Close the Connect <Connection Name> dialog box. 4 Configure SMP Manager to communicate with the SMP gateway 1. 2. In the Gateway Properties dialog box, enter a significant name for the new SMP gateway, such as SMP via modem. If you have an SMP 4-20 or an SMP 8-40: Enter 100.100.100.1 in the First IP Address box. Enter 100.100.100.2 in the Second IP Address box. If you have an SMP 4 or an SMP 16: In the First IP Address box, enter the IP pool starting address that
173
Step
To do this
To do this
Set up the SMP gateway to accept a direct connection
1. 2. 3. 4.
5. 6. 7. 8. 9.
174
Step
3
To do this
Set up a new direct serial connection to the SMP gateway
10. Under Create this connection for, click Anyones use. Click Next. Click Finish. 11. In the Connect <Connection Name> dialog box, click Properties. 12. From the General tab, click Configure. 13. In the Maximum speed drop-down list, select 115200 bps. 14. Clear the Enable hardware flow control checkbox. Click OK. 15. Click the Networking tab, then click Settings. 16. In the PPP Settings dialog box, clear the Enable LCP extensions checkbox, the Enable software compression checkbox, and the Negotiate multi-link for single link connections checkbox. Click OK. 17. Under This connection uses the following items, clear the Client for Microsoft Networks checkbox. 18. Click Internet Protocol (TCP/IP), and click Properties. 19. In the Internet Protocol (TCP/IP) Properties dialog box, click Advanced. 20. In the Advanced TCP/IP Settings dialog box, clear the Use default gateway on remote network checkbox and the Use IP header compression checkbox. Click OK three times. 21. Close the Connect <Connection Name> dialog box. 4 Configure SMP Manager to communicate with the SMP gateway 1. 2. 3. In the SMP Manager Gateway menu, click Add. In the Gateway Properties dialog box, enter a significant name for the new SMP gateway, such as SMP direct connection. If you have an SMP 4-20 or an SMP 8-40: Enter 100.100.100.1 in the First IP Address box. Enter 100.100.100.2 in the Second IP Address box. If you have an SMP 4 or an SMP 16: In the First IP Address box, enter the IP pool starting address that you specified when you installed your SMP (see your SMP installation guide). Do not enter anything in the Second IP Address box.
175
Step
To do this
The PC will communicate with the SMP using the address(es) specified here.
Setup a dial-up (modem) connection between the PC and the SMP gateway. Setup a direct serial connection between the PC and the SMP gateway.
To do this
Set up the SMP gateway to accept a dial-up connection
If the modem you plan to use appears in the list, skip the rest of this step and proceed to the next item in the table, since your modem is already
176
Step
To do this
8. 9.
10. Click Finish to close the Add/Remove Hardware Wizard dialog box. 11. Click OK to close the Phone and Modem Options dialog box. 3 Set up a new dial-up (modem) connection for the SMP gateway Perform this step for each SMP gateway with which you want to communicate via modem. 1. 2. 3. 4. 5. 6. 7. 8. 9. From the Windows Start menu, click Settings, and then click Control Panel. Double-click Network and Dial-up Connections. Double-click Make New Connection. In the Network Connection Wizard dialog box, click Next. Click Dial-up to private network. Click Next. Enter the phone number you will use to dial the SMP gateway. Click Next. Under Create this connection, click For all users. Click Next. Enter a descriptive name for the connection. Click Finish. In the Connect <Connection Name> dialog box, click Properties.
10. Click the Networking tab, then click Settings. 11. In the PPP Settings dialog box, clear the Enable LCP extensions checkbox, the Enable software compression checkbox, and Negotiate multi-link for single link connections checkbox. Click OK. 12. Under Components checked are used by this connection, clear the Client for Microsoft Networks checkbox and the File and Printer Sharing for Microsoft Networks checkbox. 13. Click Internet Protocol (TCP/IP), and click Properties. 14. In the Internet Protocol (TCP/IP) Properties dialog box, click Advanced. 15. In the Advanced TCP/IP Settings dialog box, clear the Use default gateway on remote network checkbox and the Use IP header compression checkbox. Click OK three times. 16. Close the Connect <Connection Name> dialog box. 4 Configure SMP Manager 1. 2. In the SMP Manager Gateway menu, click Add. In the Gateway Properties dialog box, enter a significant name for
177
Step
To do this
to communicate with the SMP gateway
To do this
Set up the SMP gateway to accept a direct connection
1. 2. 3. 4.
178
Step
To do this
1. 2. 3. 4. 5. 6. 7. 8. 9.
10. In the Connect <Connection Name> dialog box, click Properties. 11. From the General tab, click Configure. 12. In the Maximum speed drop-down list, select 115200 bps. 13. Clear the Enable hardware flow control checkbox. Click OK. 14. Click the Options tab, and put a checkmark in the Redial if line is dropped checkbox. 15. In the Time between redial attempts drop-down list, select 30 seconds. 16. Click the Networking tab, then click Settings. 17. In the PPP Settings dialog box, clear the Enable LCP extensions checkbox, the Enable software compression checkbox, and the Negotiate multi-link for single link connections checkbox. Click OK. 18. Under Components checked are used by this connection, clear the Client for Microsoft Networks checkbox and the File and Printer Sharing for Microsoft Networks checkbox. 19. Click Internet Protocol (TCP/IP), and click Properties. 20. In the Internet Protocol (TCP/IP) Properties dialog box, click Advanced. 21. In the Advanced TCP/IP Settings dialog box, clear the Use default gateway on remote network checkbox and the Use IP header compression checkbox. Click OK three times. 22. Close the Connect <Connection Name> dialog box. 4 Configure SMP Manager 1. 2. In the SMP Manager Gateway menu, click Add. In the Gateway Properties dialog box, enter a significant name for
179
Step
To do this
to communicate with the SMP gateway
180
The SMP Gateway could need a dialup connection for DNP3 or IEC 60870-5-101 protocols in a situation where there is no network between the SMP and the control center and you cannot establish a network connection to the SMP using the procedures described under Remote access to the SMP gateway, page 171. If the control center uses the DNP3 or IEC 60870-5-101 protocol, you can establish a serial connection, via a dial-up modem, between the SMP and the control center. The control center will call the SMP gateway. The same holds true if you need to communicate between the SMP and a device that uses DNP3 or IEC 60870-5-101and that supports a modem connection. The SMP gateway will call the device. Communication via modem is available as an option on all SMP models. On the SMP 4, you use an internal modem. However, you have to order the modem at the time you purchase the SMP, and the modem port replaces one of the serial ports. On the SMP 16/CP and SMP 16/SG, the modem is internal and has its own port. With the SMP 4-20 and SMP 8-40, you have to use an external modem, which you plug into a serial port. Note that will all SMP models, you can always plug an external modem into any serial port. Having the SMP communicate, via dial-up modem with a PC or a device using DNP3 or IEC 60870-5-101, requires that you perform the following configuration steps with SMP Config:
Define which serial ports have a modem. Create a modem pool. Add modems to the pool. Create a modem pool master connection if the SMP gateway will call a device, or create a modem pool slave connection if the control center will call the SMP gateway.
181
Start SMP Config from the SMP Manager window. In the left pane, click Serial Ports. In the right pane, in the Interface drop-down list of the corresponding serial port, click Modem Asynchronous.
Identification Procedure
The Call Dispatcher sends an IEC 60870-5-101 RESET OF LINK broadcast frame. The slave device is expected to respond with an ACK frame containing its own DEVICE ADDRESS. The Call Dispatcher sends a DNP3 RESET OF LINK broadcast frame. The slave device is expected to respond with an ACK frame containing its own DEVICE ADDRESS as the source address.
DNP3
In the left pane, click Serial Ports, then on Modem Pools. In the right pane, enter the name of the pool. Edit the modem pool settings.
These settings set up the behavior of the Call Dispatcher, as described in the table next.
182
Setting
Type
Description
The communications protocol supported by the modem pool. The default value automatic means that the supported protocol will be determined automatically. Allowed values: Automatic IEC 60870-5-101 DNP Default value: Automatic
The size of the DEVICE ADDRESS, in bytes. This setting is taken into account when a frame is sent or received, since it affects the size of the frame. Range: Default value: 1 to 8 1
This setting specifies how much time the dispatcher will wait for the reception of a response to a request. Range: Default value: 0 to 60,000 ms 10,000 ms
This setting specifies the maximum time allowed between 2 received bytes of a frame, for the frame to be considered valid. Range: Default value: 0 to 10,000 ms 250 ms
This setting specifies how much time the dispatcher will wait after a failure (invalid frame format, etc.), before retrying. Range: Default value: 0 to 10,000 ms 1,000 ms
This setting specifies how many times the dispatcher will try to identify the device. Range: Default value: 0 to 20 3
183
In the left pane, click Serial Ports, then on Modems. In the right pane, choose a modem pool in the drop-down list for each modem. This will add the modem to the modem pool. Edit the modem settings for each modem (see following table). In the left pane, click Asynchronous Serial Ports. In the right pane, edit the serial port settings for each modem.
Description
This AT string is sent to the serial port to initialize the modem. It should be a valid AT string to which the modem will respond with an OK. Default value: ATZ
AT Off-Hook String
This AT string is sent to the modem to answer the call when a RING message is received. The modem must, therefore, be configured to NOT auto-answer the calls (avoid S0=X, where X is other than 0). Default value: ATA
AT Dial String
This AT string is prefixed to the phone number and sent to the modem to make outgoing calls. Default value: ATDT
AT On-Hook String
This AT string is sent to the modem to hang up. After a call has been completed, the AT Init String is always sent to reinitialize the modem. Default value: ATH0
Incoming Only
Put a checkmark if you want the modem to receive incoming calls but not be able to make outgoing calls. If you do not put a checkmark, the modem will be able to make and receive calls. Allowed values: checkmark / no checkmark Default value: no checkmark
AT Response Timeout
Specifies how much time the modem pool will wait for an answer to an AT string command. There is an exception for the ATDT and ATA commands, since it can take some time to synchronize the carriers and complete the call. For these exceptions, the maximum time is set to 3 minutes. The timeout value depends on the modem and more specifically, on the
184
Setting
Description
response time required for the +++ and ATH commands. Range: Default value: 0 to 60,000 ms 5,000 ms
In the left pane, click Connections, then on Modem Masters. In the right pane:
Enter the name of the connection. Specify, via the drop-down list, the modem pool with which the connection will be associated. The modems belonging to the specified modem pool will be used to make outgoing calls for this connection. Enter the phone number and a supplementary AT initialization string. The phone number is mandatory and can contain any characters recognized by the modem. See your modem documentation about the availability and meaning of each dialing option. This setting cannot contain the ATDT prefix, since the latter is already configured in the modem settings. The supplementary AT initialization string is an optional AT string that will be sent to the modem just before the calling ATDTxxx command. This setting can be used to fine-tune modem options for specific calls, which means that you can override options specified in the general modem initialization string.
In the left pane, click Connections, then on Modem Slaves. In the right pane:
Enter the name of the connection. Specify, via the drop-down list, the modem pool with which the connection will be associated. Calls received by this modem pool will be dispatched to this connection component if the DEVICE ADDRESS matches.
185
This chapter explains the software architecture of the gateway, describes how to update the SMP Tools and how to update the SMP gateway software using the Tool called SMP Loader.
The SMP runs on Windows CE, called a firmware, the equivalent of Windows XP on your computer. The firmware file that run on the SMP gateway are the boot file, the Windows CE file and the gateway application. A new gateway version might include a new firmware version. The SMP gateway application (.app file), that contains your protocol translators and other gateway software files. The configuration file (.par file), that tells the gateway how to communicate with the computer.
Upgrade the PC software, i.e., the SMP Tools (see Updating the SMP Tools on the PC, page 187). Use the table below for the next steps.
186
The table below shows the order in which you will update the SMP gateway components, and the SMP Tool that you will use to modify the component. Component to update
Windows CE Bootstrap programs Resident diagnostics SMP gateway application Configuration file
Insert the SMP Software and Tools CD-ROM in your computers CD drive. In the Welcome to the SMP Gateway window, click Upgrading. There may be specific instructions that apply to the version you were using previously. If so, follow these instructions before performing the upgrade. Click the item you want to upgrade and follow the instructions.
The SMP Tools installer will automatically remove the previous version before installing the new one.
The Windows CE operating system, which provides real-time system services, network services, and device drivers. The bootstrap program, in the very exceptional cases where it is a new version. That program loads the SMP gateway application and the Windows CE operating system into memory when the SMP starts up. 187
The resident diagnostics, which allow you to ensure that the SMP is working properly. The SMP gateway application, which implements all the functionalities of the SMP gateway.
SMP 16 or SMP 4
To update the SMP firmware, compare the version you get from your SMP gateway's SMP Stats (for more information, refer to page 53) and to update any outdated file, execute the following steps in the order presented here:
If you used the console port for any reason, remove the cable that you connected between the SMP console port and the PC. Start SMP Manager.
In the SMP Manager window, click your SMP gateway. In the Gateway menu, click Update SMP Gateway Firmware. The Select Firmware Library dialog box appears.
In the SMP 16 or SMP 4 folder, under SMP Tools\Manager\SMP Firmware Libraries, choose the Windows CE file. The file is called wince4.pkg. SMP Manager transfers the file to your SMP gateway and then informs you that you have to restart your SMP gateway for the new firmware to go into effect.
In the Restart Gateway dialog box, choose Shutdown and Restart to have the SMP restart in normal mode. All restarts are automatically logged in the SMPs internal log file. If you want to, you can enter a comment in order to indicate why you restarted the SMP. This comment will be added to the event log.
The SMP gateway will go through a series of startup steps, which will be displayed in the Status column in SMP Manager. Once the startup is complete, the Status column will display the current status of the SMP gateway:
If you are upgrading to version 4.0 of the SMP software and tools, the Status column will show that the SMP is now in Safe Mode. This means that Windows CE has detected unsigned executable files. This is normal at this stage and requires no corrective action. Go on to updating the SMP Gateway application. For any other upgrade, the Status column should show that the SMP has Started. If the Status column shows that your SMP did not start up normally, turn to Troubleshooting, page 205.
In the SMP Manager window, click your SMP gateway. In the Gateway menu, click Update SMP Gateway Firmware.
188
In the SMP 16 or SMP 4 folder, under SMP Tools\Manager\SMP Firmware Libraries, choose the bootstrap file. The file is called smpboot.pkg. You will need to restart in this case.
In the SMP Manager window, click your SMP gateway. In the Gateway menu, click Update SMP Gateway Application. The Select Library dialog box appears.
In the SMP 16 or SMP 4 folder, under SMP Tools\Manager\SMP Firmware Libraries, choose the application file. The file is called SmpApp(version).app Simply close the Restart Gateway dialog box, if you are updating other components, you do not need to restart the SMP gateway now. The application file could be updated before or after the diags file.
Proceed as for the resident diagnostics, but in the firmware libraries, choose the diags file. The file is called diagsSMP16.pkg or diagsSMP4.pkg.
SMP Manager transfers the file to your SMP gateway and then informs you that you have to restart your SMP gateway for the new firmware to go into effect. The diags file could be updated before or after the application file.
You can then move on to the configuration file with SMP Config and SMP Manager.
Update the primary and secondary bootstrap programs. Update the resident diagnostics. Update Windows CE. Remove the cable that you connected between the SMP console port and your PC when you used SMP Loader. Reset the SMP by holding down the reset button for at least 5 seconds, until the 4 front panel LEDs turn amber. Start SMP Manager.
The SMP gateway will go through a series of startup steps, which will be displayed in the Status column. Once the startup is complete, the Status column should show that the SMP has Started. If the Status column shows that your SMP did not start up normally, turn to Troubleshooting, SMP Gateway User Manual 189
page 205.
In the SMP Manager window, click your SMP gateway. In the Gateway menu, click Update SMP Gateway Application.
Under Program Files\Cybectec\SMP Tools\Manager\SMP Software Libraries, select folder SMP 16, SMP 4, SMP 4-20 or SMP 8-40, depending on your SMP model. Choose the SMP gateway application version that you want to send to the SMP. The file has the extension .app and its name indicates the application version. For example, a file called SmpApp 1.14R2.app contains version 1.14, release 2, of the SMP gateway application.
SMP Manager sends the software to the specified SMP gateway and then informs you that you have to restart your SMP gateway for the new application to go into effect.
Simply close the Restart Gateway dialog box, without restarting the SMP gateway.
Start SMP Config and open your configuration file. The file name in the title bar should have a star (*) beside to inform you there is a change. From the File menu, select Save. A message box will inform you that the current configuration file will be upgraded to a current version. A backup is automatically saved with the word backup before the previous files name. Send the configuration file to the SMP using SMP Manager:
From the Gateway menu, select Send configuration file. SMP Manager will transfer the file on the SMP
190
Whenever you contact Cybectec to request support for a new device that you want to connect to your SMP gateway, or to add support for a particular option for your SMP gateway, Cybectec will provide you with a new license. To activate your new license and take advantage of the new components, you need to go through the following steps:
Update your license information (see Updating your license information, below). Update the SMP gateway application (see Updating the SMP gateway application, page 193).
In the SMP Manager window, click your SMP gateway. In the Gateway menu, click Update SMP Gateway License.
In this dialog box, enter your license ID and your key (both rows) exactly as they appear in the instructions (on the CD cover or in your email), and click OK.
191
If you are updating the license information for a group of SMP 4-20s or SMP 8-40s that have the same license ID, you can simplify the task as follows:
Enter the license ID and key (both rows) of the first SMP. The license ID you have just entered gets added to the License ID drop-down list, and SMP Manager keeps track of the associated key. For the remaining SMPs, simply choose the license ID in the dropdown list; the key information will be supplied automatically. Another way to simplify the task is to select several SMPs of the same type before performing the update. The license information will be applied to all the selected SMPs.
You can click the Details button, in order to view the functions provided by the new license before actually performing the update. If SMP Manager suggests that you restart the SMP gateway, restart it in normal mode by choosing Shutdown and Restart in the Restart Gateway dialog box. If there is a new protocol, you must reload the gateway application and restart.
The License Information dialog box displays the various software features supported by your license, such as redundancy, Soft PLC and automation functions. It also displays information about the number of master protocols (one per device) and slave protocols (one per control center) supported by your license. For all models except the SMP 4, the dialog box also shows which specific protocols are supported by your license. The dialog box is shown below, first for an SMP 4-20 and then, for an SMP 4:
192
Class 1 includes commonly used protocols such as DNP3, Modicon MODBUS, SEL and IEC60870-5. Class 2 currently includes only UCA 2.0. Class 3 currently includes ICCP and 61850.
In the SMP Manager window, click your SMP gateway. In the Gateway menu, click Update SMP Gateway Application .
Under Program Files\Cybectec\SMP Tools\Manager\SMP Software Libraries, select folder SMP 16, SMP 4, SMP 4-20 or SMP 8-40, depending on your SMP model. Choose the SMP gateway application version that you want to send to the SMP. The file has the extension .app and its name indicates the application version. For example, a file called SmpApp 1.14R2.app contains version 1.14, release 2, of the SMP gateway application.
SMP Manager sends the software to the specified SMP gateway and then informs you that you have to restart your SMP gateway for the new application to go into effect.
Simply close the Restart Gateway dialog box, and restart the SMP gateway.
193
This section presents SMP Manager and SMP Config commands that provide useful capabilities, and that were not discussed in other sections of the document.
Displaying only those SMPs with which SMP Manager is currently in communication. (Click Active Gateways in the View menu.) Choosing the time display format: local time or UTC. (Click Time Display Options in the Edit menu.) Exporting your SMP gateway list. (Click Export List in the File menu.) Importing an SMP gateway list. (Click Import list in the File menu.) Setting the behavior of SMP Manager.
In the Edit menu, click Options. The Options dialog box will appear:
194
The dialog box contains the following boxes and buttons: Object
Show splash screen on startup Show SMP Manager topmost
Description
If you put a checkmark in this box, the SMP Manager splash screen will appear when you start up the application. If you put a checkmark in this box, the SMP Manager main screen will always be displayed on top of all other screens on your PC. Displays the folder that will be used when SMP Manager sends files to an SMP gateway. The folder referred to here resides on the SMP. Use this option to specify the action to be taken during a file transfer to the SMP:
Upload directory
Overwrite The remote file will automatically be overwritten with the source file located on your PC. Skip The remote file will not be overwritten. Prompt You will be asked whether or not the remote file is to be overwritten.
195
Object
Show SMP Manager
Description
Use this option to specify how you want SMP Manager to be displayed at the bottom of your Windows screen.
On taskbar only. Shows the SMP Manager name and icon on your Windows taskbar but not in the system tray. In system tray only. Shows the SMP Manager name and icon in the system tray but not on your Windows taskbar. On taskbar and in system tray. Shows the SMP Manager name and icon on the Windows taskbar and in the system tray.
The system tray is located in the rightmost corner of the Windows taskbar.
Exporting your SMP configuration to a .csv file. (Click Export List in the File menu.) Importing an SMP configuration previously saved as a .csv file. (Click Import list in the File menu.) Clearing the message pane. (Click Clear Message Pane in the Validate menu.)
_smp___setLocalControl
196
Data point
Description
in. Redundancy points
_smp___rsLocal_ok _smp___rsRemote_ok
This point will be 1 when the local gateway is operational. This point will be 1 when the redundant gateway is operational. This point will be 1 when the local gateway which is the gateway being used, is active. This point will be 1 when the redundant gateway is on standby. This point will be 1 when the redundant gateway is on hot standby, which means that both SMP gateways are fed the same information. This point will be 1 when the first of two connections between the SMP gateways is operational. This point will be 1 when the second of two connections between the SMP gateways is operational. This point will be 1 when the SMPs are synchronized with the same time source. This point is used in failover conditions. This point will be 1 when the LAN condition is operational. This point is used in failover conditions. This point will be 1 when the voltage supply operates within the set parameters. This point is used in failover conditions. This point will be 1 if applicable when the temperature is within the set parameters of normal temperatures. This point is used in failover conditions. This point will be 1 when the available memory is within the set parameters of normal use. This point is used in failover conditions. This point will be 1 when the group address defined for the redundant units is valid. This point is used in failover conditions. Common Power Status points
_smp___rsLocal_active
_smp___rsRemote_standby
_smp___rsRemote_hotStandby
_smp___rsFirstConnection_ok
_smp___rsSecondConnection_ok
_smp___rsSynchronized
_smp___rsLan_ok
_smp___rsVoltage_ok
_smp___rsTemp_ok
_smp___rsMem_ok
_smp___rsGroupAddress_ok
_smp___voltage_ok
This point will be 1 when the voltage supply operates within the set parameters. SMP 4-20, SMP 8-40 and SMP 4
_smp___battery_ok
197
Data point
Description
SMP 4-20 & SMP 8-40
_smp___temp_ok
This point will be 1 if when the temperature is within the set parameters of normal temperatures. Remote access points
_smp___dialupEnable
This binary output point is used to lock or unlock all incoming RAS dialup connections to the SMP gateway. This binary output point is used to lock or unlock all incoming RAS dialup connections to the SMP gateway. This binary input point indicates whether or not there is a communication in progress via an incoming RAS dialup connection. Passthru system points
_smp___dialupEnabled
_smp___dialupInUse
This binary output point is used to lock or unlock a particular passthru connection. The name of the connection, as defined in SMP Config, is included in the name of the data point. This binary input point indicates whether a particular passthru connection is currently enabled or disabled.
This binary input point indicates whether a particular passthru connection is currently active.
Security-related points _smp___securityAccountLocked This binary output point shows if the account is locked.
System Folder points destined to Enterprise Solutions _smp___Folder(foldername)_Ava ilable _smp___Folder(foldername)_Fre eDiskSpace _smp___Folder(foldername)_Lo wDiskSpace This binary output point will be 1 if the storage folder in the server, for this gateway, is available. This binary output point will be 1 if the storage folder in the server, for this gateway, has free space. This binary output point will be 1 if the storage folder in the server, for this gateway, has low disk space. Clock and time-related points _smp___clockSynchronized If the gateway is synchronized by a source such as IRIG-B, this binary output point will show the clock synchronization status. When the gateway's SYNC LED is green, whish means that the clock is synchronized, this point shows a 1.
198
Data point
_smp___clockYear _smp___clockMonth _smp___clockDay _smp___clockHour _smp___clockMinute _smp___clockSecond
Description
This analog output point states the clock's year. This analog output point states the clock's month of the year. This analog output point states the clock's day of the month. This analog output point states the clock's hour of the day. This analog output point states the clock's minute of the hour. This analog output point states the clock's second of the minute.
Temperature sensor on SMP 16/CP-PM and SMP 16/SG-PM _smp___temperature This analog output point states the temperature inside the gateway.
SMP Loader
SMP Loader should be used for the following purposes:
To update Windows CE, the resident diagnostics, the primary bootstrap, or the secondary bootstrap of an SMP 4-20 or an SMP 8-40. To update the secondary bootstrap program of an SMP 16 or an SMP 4. The primary bootstrap, which resides in the ROM, is factory-installed and cannot be updated in the field. You can, in fact, load Windows CE and the resident diagnostics with SMP Loader, but you should use SMP Manager unless there is a problem.
When the SMP is powered up or reset, the following components are started up, in the order listed:
In order to use SMP Loader, you need to interrupt the previous process before it gets to Windows CE. You accomplish this by putting the SMP into Command mode.
Using a connection cable, connect one of the communication ports of your PC to the SMP console port:
Use a standard RS-232 direct cable equipped with a DB9 male connector at one end and a DB9 female connector at the other end. Note that if you are using a portable computer that does not have an external serial port, you will need to use a USB to RS-232 serial converter. Connect the cable between the SMPs console port and the PCs serial communications port (typically COM1 or COM2).
Click Start on the Windows taskbar. Point to Programs, then to Cybectec, and then to SMP Tools. In the SMP Tools menu, click SMP Loader.
In the Connection menu, click Communication Settings to display the Communication Settings dialog box. Most of the communication settings are unavailable, as they cannot be changed. However, set the 2 active setting as follows:
Port
The communications port you are using on your PC (COM1, COM2, ). 115200 bps. Note, however, that some computers may not support your specified speed. In that case, try a lower speed.
SMP 4-20 or SMP 8-40: Hold down the reset button until all the LEDs (power, watchdog timer, ST1 and ST2) simultaneously turn amber. SMP 4: Insert a pointed object in the reset aperture and apply pressure until the watchdog timer LED stops flashing. Do not use a lead pencil, as it could break and damage the SMP since lead is a conductor.
200
SMP 16: Turn off the power to the SMP 16, and then power it up again.
Within approximately 30 seconds, the SMP Loader window will show the files that are currently loaded on the SMP gateway.
Main screen
The SMP Loader main screen is shown next, first for an SMP 16/SG and then for an SMP 8-40.
As you can see, the SMP 16 display only shows Windows CE (in the example, version 4 is loaded on the SMP). This is also true for an SMP 4. The SMP 8-40 screen shows Windows CE and the resident diagnostics, and each file name is preceded by the board A or B on which the file is located. The Created and Received columns will show N/A if the date and time are not available due to certain hardware constraints. It is important to note that the display area does not list the bootstrap programs, even though these do indeed reside on the SMP. However, the secondary bootstrap version is shown on the status bar at the bottom of the screen. In very rare cases, the status bar could show a primary bootstrap for an SMP 4-20 or SMP 8-40 (see Corrupted secondary bootstrap, page 204). You can also view the bootstrap versions as follows:
A dialog box appears, showing the versions of both bootstrap programs. For the SMP 4 and SMP 16, the dialog box indicates that the primary bootstrap version is unavailable since it resides in the ROM and cannot be modified in the field.
201
Using Windows Explorer, drag and drop the files in your SMP Loader main screen display. OR
Click Send in the File menu. A Windows file opening dialog box appears. Point to SMP Tools\Manager\SMP Firmware Libraries, and then to the SMP 4, SMP 420, SMP 8-40 or SMP 16 folder, depending on the type of SMP you have. Choose SMP Loader Files in the Files of type drop-down list. This will display one or more files with the extension .VL. Click the file you want to send, and click Open.
The File Information dialog box appears, giving you a description of each file, within the .VL file, that you are about to transfer and asking you to confirm your intention to carry out the transfer.
202
The transfer takes place once you have responded to the question for all the files that were listed in the .VL file, and a dialog box shows you the progress of the operation. After the transfer, the transfered files appear in the list in the SMP Loader window, if they were not already in the list. Otherwise, you will simply notice a difference in the version number, the size and the creation date. In our example, we updated the diagnostics file from version 1.1R11 to version 1.1R12 (compare with Main screen, page 201).
Notes:
The SMP will not use the transfered files until the next reset. If you transfer a bootstrap program, it will not appear in the list even though the file has indeed been transfered. Furthermore, if you look at the bootstrap version numbers (by clicking Bootstrap Versions in the Connection menu), you will see that the secondary bootstrap number has not been updated. The version number will be updated on the next reset of the SMP gateway.
Log file
SMP Loader records every significant event until you exit the application, including startup, file transfers, file deletions, requests for bootstrap versions, communication port settings, transfer cancellations, refreshes, communication errors, and exit. The log file, which can be read with Notepad, is located in SMP Tools\Manager\SMP Firmware Libraries, under the name Loader.log. Each time you start the application, SMP Loader overwrites the information contained in the file.
203
SMP 4-20 or SMP 8-40 Normally, SMP Loader communicates with the secondary bootstrap program of the SMP. However, if the secondary bootstrap is corrupted, SMP Loader has to communicate with the primary bootstrap in order to load a new secondary bootstrap. In that case, you have to put the primary bootstrap in Update mode. In this mode, you do not have access to the usual SMP Loader functions. All you can do is load the bootstrap programs. Also note that SMP Loader will automatically set its communication speed to 19200 bits per second. Proceed as follows:
Simultaneously hold down the reset, TEST1 and TEST2 buttons until all four LEDs (power, watchdog timer, ST1 and ST2) turn amber. Release ONLY the reset button and keep holding down the TEST1 and TEST2 buttons until the first 2 LEDs (power and watchdog timer) go from amber to red, and the other 2 (ST1 and ST2) go from amber to green. Note: At this point, the information displayed on the LCD is not valid and is, therefore, to be ignored.
Transfer the secondary bootstrap program to the SMP using SMP Loader (see Transferring files to the SMP gateway, 202).
204
Troubleshooting
Introduction
The SMP gateway is a highly reliable substation-grade device. Most operational problems result from configuration errors, and there are a few simple steps you can take to identify and solve these problems. This section discusses the following types of problems:
Startup problems. Communication problems. Problems with data validity. Problems executing control operations.
Click Start, on the Windows taskbar. Point to All Programs, then Cybectec, then SMP Tools, and then Documentation. In the Documentation menu, click Protocols.
Click the document you want to read. In the File menu of the explorer window, click Open with Acrobat.
Your Adobe Acrobat program starts up and displays the document in a window.
205
Click the SMP gateway in the SMP Manager window. In the Gateway menu, click Report.
Note: The Report command will not be available unless the SMP gateway is online. The Gateway Report dialog box appears.
the information that will be collected from the SMP gateway; where the SMP gateway report file (*.GRF) will be stored.
Enter additional information in the text box, such as the problem description, or the reason why you are requesting technical support. Assign a name to the report, in the Report Name box. SMP Manager will automatically append the date and time to the report name. Put a checkmark in the Extract Automatically checkbox, if you want to see where the report is located as soon as SMP Manager has finished retrieving the report information. The information will be displayed in a Windows Explorer window. Click the OK button to start the report generation.
206
The Gateway Report progress dialog box appears, showing each operation performed and when the report generation is complete, the dialog box indicates the completion status of the operation. Click the dialog boxs Details button to display the event log for the report generation. Click the Close button to close the dialog box.
If you had put a checkmark in the Extract Automatically checkbox, a Windows Explorer window appears, showing where the report file is located. You will see a .log file, a .grf file, and a folder bearing the same name as the .grf file. If you click the folder, you will see a group of files and folders with information about the data points, crashes, logs, and so on.
Send the .grf file to Cybectec with your request for technical support. The .grf file is, in fact, a zipped file, which when unzipped, contains the files and folders discussed previously.
Click the SMP gateway in the SMP Manager window. In the Gateway menu, click Extract Report. In the Windows Open dialog box, choose the desired .grf file.
Click the folder that has the same name as the .grf file on which you clicked, and click Open.
Click the items of interest and click Open to view the information.
Startup problems
When you start the SMP or reset it through SMP Manager, it goes through a sequence of steps, after which you should see Started in the Status column of the SMP Manager application window. However, if the SMP software detects a problem during startup, you may see something else in the Status column. Here are some suggestions for troubleshooting the problem. If the problem persists, do not hesitate to contact our technical support group.
No configuration file
If the status is No configuration file, you have not loaded a configuration file on the SMP. Proceed as follows to correct the problem:
Create a configuration file using SMP Config, if you have not already done so. Use SMP Manager to send the file to the SMP. 207
Restart the SMP via SMP Manager, in order to activate the configuration.
Protocols failed
If the status is Protocols failed, it may be due to one of the following reasons:
You changed your software license and did not update your SMP gateway application. There is a problem with a master or slave protocol instance. There is an incompatibility in the settings.
If you have changed your software license without updating your SMP gateway application, update the SMP gateway software using SMP Manager, as some components may be missing. See Updating the SMP gateway application, page 193. Otherwise, start SMP Log and examine the startup log.
Make sure you are using the correct configuration file. Make sure you have described your hardware correctly. For example, you may have specified the wrong SMP model. Check the software versions. You may be using the wrong protocol version. Check the protocol settings. The log will show you the startup of each protocol instance. You will see which one failed to be loaded or did not start up properly. Check its parameter settings. Make sure you have associated the protocol instance with an existing serial port. The number of available ports depends on the hardware configuration settings.
If you are using the wrong configuration file, use SMP Manager to send the correct file to the SMP gateway. If you are using the correct configuration file, fix any errors using SMP Config, and then send the file to the SMP using SMP Manager. If you are using the wrong protocol version, send an updated version of the SMP gateway application to the SMP, using SMP Manager. If you are using the wrong protocol version and you have already sent an updated version of the SMP gateway application to the SMP, you probably need to have SMP Config convert your configuration file, after which you can send the file to the SMP. If you have changed your license, update the SMP gateway software using SMP Manager, as some components may be missing. See Updating the SMP gateway application, page 193. If the problem persists after the SMP has restarted, try using a reduced version of the configuration file, in an attempt to isolate the problem. For example, use a configuration file that has only one device and one protocol instance.
208
Update the SMP gateway application using SMP Manager. See Updating the SMP gateway application, page 193. If the problem persists, contact Cybectec.
Safe mode
Communication problems
Communication problems always occur in one of the following layers:
SMP DEVICE
Protocol
Protocol
Link
Link
Physical
Physical
SMP Trace and SMP Stats are the ideal tools for you to troubleshoot a communications problem and determine in which layer the problem occurred. SMP Trace shows you the information that was sent back and forth between the SMP and the device, while SMP Stats supplies you with statistics that can help you detect an anomaly. For example, the statistics may show you that there were no exchanges whatsoever on a particular link, or the trace may show you that the SMP never got responses when it polled a particular device.
Physical layer
The physical connection between the SMP and a device is often at the root of a problem. You should therefore ask yourself the following questions:
Am I using the correct type of cable? Do I need to use a cable for RS-232 or for RS-485 communication? Should I be using a 2-wire or a 4-wire cable for RS-485 communication?
209
Is the device connected properly? Make sure the cable is connected to the correct port. Do I need an adaptor? For example, do I need a null-modem adapter for RS-232 communication? Are the TCP/IP network settings configured correctly? Use SMP Config to check the Asynchronous Serial Ports settings, under Connections:
If Im using RS-485 4-wire, did I choose RS-422? If Im using RS-485 2-wire, did I choose RS-485?
Link layer
Problems in the link layer are often related to the settings of the communications component. Here are examples of settings that can cause problems:
Verify the baud rate of both the SMP and the device. Verify the parity, start and stop bit settings. Verify the TCP/IP address and port configuration.
Examine the link layer byte exchanges, using SMP Trace and SMP Stats. Using SMP Config, look at the Connections settings:
If your SMP communicates with the device over a serial link, check the communication settings of the link used to communicate with the device, such as baud rate and parity. These settings must be configured identically at both ends. If your SMP communicates with the device over a WAN or LAN, make sure you have specified the correct TCP/IP address and port number.
Protocol layer
Protocol problems are directly related to the settings of the protocol instance used to communicate with the device. You should proceed as follows:
Verify the configured device address. Verify the protocol version. Verify the packet size. Make sure all scanning sequences are configured. Does the device support the scanning parameters? Different versions of the same device sometimes react differently.
Examine the protocol layer byte exchanges, using SMP Trace and SMP Stats.
210
Using SMP Config, make sure you have specified the correct protocol. Look at the SMP Config general settings:
Check the settings of the protocol instance, such as packet size. Make sure the device or link address is correct. Check the polling parameters. Some devices are not able to respond to rapid polling requests because they process the information very slowly. Other devices only allow slow communication links - 9600 baud or less. If you poll too quickly, the request will arrive before the last block of data is read, thereby causing communication problems.
Using SMP Config, examine the following settings for the points that are invalid:
Data point address. Is the address of the physical data point correct? Some devices have flexible configuration options, so you have to compare the SMP Config values with the values set by the device manufacturers software. Conversion factors. Are the scale and offset factors correct for physical analog data point? Polarity. Is the polarity of the physical binary input point set correctly? Warning messages. Are there any warning messages in the message pane, regarding the data points that have erroneous values?
Use SMP Log to look in the control log, at all the exchanges involved. All control operations are recorded in this log. Use SMP Trace to see the exchanges. Note, however, that you have to be connected to the SMP to view a control operation in real time. Make the following checks to determine the cause of the failure:
Using SMP Log, look at the control log and make sure the SCADA is sending the correct sequence (direct operate, select before operate) of messages.
211
Using SMP Config, check the general settings of both the master and the slave protocol instances. Make sure each of them has a checkmark in Control Enabled. Using SMP Config, make sure the binary and analog physical output points are set up correctly. For example, for the DNP protocol, Control Type requires a value other than Not supported. See the device manufacturers documentation for the required setup and refer to the appropriate Cybectec protocol documentation. Refer to the device manufacturers documentation to check whether the device allows for a polling message to be sent between a select and an operate or whether polling has to wait until after the select and operate have completed. Some manufacturers deselect the device if a polling message is sent between a select and an operate. If polling has to wait, use SMP Config to make sure the master protocol has a checkmark for Tx During SBO in its general parameters. Using the web browser, make sure the point called _smp___localControl is set either to 0 to enable commands from the SCADA or to 1, to enable commands from Visual Substation. If the value is not set properly, send either an open command to the point called _smp___setLocalControl to set the value to 0, or a close command to set the value to 1. Using the web browser, check whether the point is set to inhibit operations. If so, remove the inhibition.
212