User Manual
SMP Gateway
Copyright Cooper Power Systems © 2008, hardware, software and manual The information in this document is subject to change without notice.
Cooper Power Systems
Energy Automation Solutions 730 Commerciale St. Suite 200 Saint-Jean-Chrysostome (Quebec) Canada G6Z 2C5 Phone: +1.418.834.0009 Fax: +1.514.227.5256 Email:
[email protected] Web Site: http://www.cybectec.com
GUI-00316-00001 T, version 18
Contents 1
2
Welcome
1
1.1
SMP Gateway Models ...........................................................................................1
1.2
Related Documentation .........................................................................................2
1.3
Getting Assistance with Cybectec Products ..........................................................3
1.4
Getting Started .......................................................................................................3
1.5
Document Overview..............................................................................................4
Principles of Operation 2.1
2.2
7
Logical Architecture ..............................................................................................7 2.1.1
Masters and Slaves .................................................................................. 7
2.1.2
Introducing the SMP Gateway in the Automation System...................... 8
2.1.3
SMP Gateway Internals........................................................................... 9
2.1.4
Communications Components ................................................................ 9
Configuring the SMP Gateway............................................................................10 2.2.1
The Transparent SMP Gateway ............................................................ 11
2.2.2
Using the SMP Gateway as a Protocol Translator ................................ 13
2.2.3
Using the SMP Gateway as a Data Concentrator or Device Multiplexer ............................................................................................ 14
2.2.4
Using the SMP Gateway as a Communications Processor.................... 15
2.2.5
Putting it all Together............................................................................ 16
2.2.6
Securing the Substation ......................................................................... 17
3
SMP Tools Overview
19
4
SMP Manager
21
4.1
Starting SMP Manager and Logging On .............................................................21
4.2
Main Window ......................................................................................................22
4.3
Adding an SMP Gateway .................................................................................... 22
4.4
Information Provided by the SMP Gateway Icon ................................................ 23
4.5
Customizing the Display .....................................................................................24 4.5.1
SMP Gateway User Manual
Adding or Removing a Column ............................................................ 25
•i
4.5.2
5
Configuring the SMP Gateway 5.1
5.2
5.1.1
Creating a Master Protocol Instance from a Template .......................... 29
5.1.2
Creating a Master Protocol Instance Manually ..................................... 30
5.1.3
Configuring the Master Protocol General Settings................................ 30
Configuring the Data Points ................................................................................31 Adding Data Points from a Protocol Template ..................................... 33
5.3
Creating a Template from a Master Protocol Instance ........................................33
5.4
Duplicating a Master Protocol Instance...............................................................34
5.5
Configuring the Communications Links .............................................................34 5.5.1
Configuring the Serial Port Interfaces ................................................... 34
5.5.2
Configuring the Operation of the Serial Ports ....................................... 36
5.5.3
Configuring TCP/IP Master Connections ............................................. 37
5.6
Associating a Master Protocol Instance with a Communications Link ...............37
5.7
Testing the Configuration ....................................................................................38
5.8
ii •
27
Creating Master Protocol Instances .....................................................................28
5.2.1
6
Changing the Position of a Column ...................................................... 25
5.7.1
Validating and Saving the Configuration .............................................. 38
5.7.2
Sending the Configuration to the SMP Gateway .................................. 39
5.7.3
Retrieving an SMP Gateway Configuration File................................... 40
Working with SMP Config ..................................................................................40 5.8.1
Selecting Cells and Lines ...................................................................... 40
5.8.2
Duplicating a Line ................................................................................. 41
5.8.3
Copying a Value to a Group of Cells .................................................... 41
5.8.4
Resequencing a Group of Lines ............................................................ 42
5.8.5
Deleting an Item .................................................................................... 43
5.8.6
Using Tooltips ....................................................................................... 44
5.8.7
Searching and Replacing Points in a Configuration .............................. 44
Viewing the SMP Log Files
47
6.1
Information Provided by SMP Log .....................................................................47
6.2
SMP Log Features ............................................................................................... 48 6.2.1
Searching in SMP Log .......................................................................... 48
6.2.2
Printing a Log........................................................................................ 48
6.2.3
Saving a Log File .................................................................................. 48
6.2.4
Viewing Multiple Log Folders at Once ................................................. 49
6.2.5
Changing How Time Information is Displayed .................................... 49
SMP Gateway User Manual
7
8
9
10
Viewing Protocol Exchanges in Real Time
51
7.1
Information Provided by SMP Trace...................................................................51
7.2
SMP Trace Features ............................................................................................52 7.2.1
Searching in SMP Trace........................................................................ 52
7.2.2
Printing Traces ...................................................................................... 53
7.2.3
Recording Live Traces .......................................................................... 53
7.2.4
Saving all the Scrolled Information....................................................... 54
7.2.5
Changing How Time Information is Displayed .................................... 54
Viewing Communications Statistics in Real Time
55
8.1
Information Provided by SMP Stats ....................................................................56
8.2
SMP Stats Features ..............................................................................................56 8.2.1
Resetting Statistics ................................................................................ 56
8.2.2
Printing Statistics .................................................................................. 57
8.2.3
Changing How Time Information is Displayed .................................... 57
Using a Web Browser to View Data in Real Time
59
9.1
Connecting to the SMP Gateway’s Website ........................................................59
9.2
Navigating Through the SMP Gateway’s Website ..............................................59
9.3
Applying a Filter to a Data Point Display ........................................................... 60
9.4
Acknowledging Data Point Value Changes ........................................................ 61
Connecting the SMP Gateway to a Control Center
63
10.1
Creating Slave Protocol Instances .......................................................................63
10.2
Configuring Slave Protocol Instances .................................................................63
10.3
Subscribing to the Master Data Points.................................................................64
10.4
Configuring the Data Points ................................................................................66
10.5
Configuring the Communications Links .............................................................66 10.5.1 Setting up a TCP/IP Slave Connection.................................................. 66
11
10.6
Associating a Slave Protocol Instance with a Communications Link .................66
10.7
Validating and Activating the Configuration ...................................................... 67
10.8
Testing the Configuration ....................................................................................67
Using the Web Server’s Commissioning Tool
69
11.1
Configuring an SMP Gateway for Commissioning .............................................69
11.2
Activating the Commissioning Feature ...............................................................70
11.3
Opening a Commissioning Session .....................................................................71
SMP Gateway User Manual
• iii
11.3.1 The Commissioning Tab ....................................................................... 72 11.3.2 Forcing an Input Point ........................................................................... 73 11.3.3 Un-Forcing an Input Point..................................................................... 73 11.3.4 Performing a Control Operation ............................................................ 74 11.3.5 Closing the Commissioning Session ..................................................... 75 11.4
12
Deactivating the Commissioning Feature............................................................75
Interconnecting SMP Gateways
77
12.1
Configuring the Slave SMP Gateway ..................................................................78
12.2
Configuring the Master SMP Gateway................................................................81 12.2.1 Updating the Interconnections Master’s Data Point List....................... 83
12.3
13
Verifying the Interconnection Between the SMP Gateways ...............................84
Security
85
13.1
Meeting NERC CIP Requirements ......................................................................85
13.2
Substation Network Security Considerations ......................................................86 13.2.1 Setting Up a Secure Substation LAN .................................................... 86 13.2.2 Using SMP Tools through a Substation LAN Firewall ......................... 87
13.3
Extending the SMP Gateway Security Model .....................................................89
13.4
Managing the Security Database of One or More SMP Gateways ......................89 13.4.1 Getting Started ...................................................................................... 89 13.4.2 Accessing the Login Information Dialog Box....................................... 90 13.4.3 Displaying an Appropriate Use Banner at Login .................................. 90 13.4.4 Defining your Authentication Policy .................................................... 91 13.4.5 Groups and Privileges ........................................................................... 94 13.4.6 Editing User Groups and Privileges ...................................................... 94 13.4.7 Managing User Groups and Privileges.................................................. 96 13.4.8 Validating and Saving the Security Database ....................................... 97 13.4.9 Sending the Security Database to One or More SMP Gateways ........... 98 13.4.10 Retrieving the Security Database of an SMP Gateway ......................... 99 13.4.11 Removing the Security Database from One or More SMP Gateways .................................................................................... 100 13.4.12 Unlocking a User Account .................................................................. 100 13.4.13 Viewing the Security Log ................................................................... 101
13.5
File certification and integrity checking ............................................................ 102 13.5.1 Detecting an integrity check failure .................................................... 102 13.5.2 Recovering from an integrity failure ................................................... 102
13.6 iv •
Using VPN Connections....................................................................................102 SMP Gateway User Manual
13.6.1 Manually Setting Up a VPN Connection ............................................ 103 13.7
Configuring the Firewall ................................................................................... 104 13.7.1 Creating the Firewall in SMP Config .................................................. 104 13.7.2 Setting General Parameters ................................................................. 105 13.7.3 Setting Firewall Rules ......................................................................... 105
13.8
Locking Incoming RAS and Passthrough Connections .....................................106 13.8.1 Locking or Unlocking All Incoming RAS Dialup Connections.......... 107 13.8.2 Locking or Unlocking a Passthrough Connection ............................... 108
14
Using Passthrough Connections
109
14.1
Principles of Operation ...................................................................................... 109
14.2
Setting up Passthrough Connections .................................................................111 14.2.1 Defining SMP Gateway Passthrough Settings .................................... 111 14.2.2 Installing a Loopback Cable, if Necessary .......................................... 112 14.2.3 Setting Up a List of Applications and Loopback Connections............ 113
15
16
14.3
Connecting to the Device .................................................................................. 116
14.4
Testing the Passthrough Connection ................................................................. 116
14.5
Deactivating the Passthrough Connection ......................................................... 116
14.6
Using the Trace of Passthrough Connection Events .......................................... 117
14.7
Changing How Time Information is Displayed in SMP Connect .....................118
Retrieving Event Files From Devices
119
15.1
Defining System Folders ................................................................................... 119
15.2
Configuring Master Protocols for Event File Retrieval ..................................... 121
15.3
Retrieving files from another SMP Gateway..................................................... 122
Using the Annunciator Interface
125
16.1
Activating the Annunciator Option ................................................................... 127
16.2
Setting Up the Annunciator ...............................................................................128 16.2.1 Configuring Alarm Inputs ................................................................... 129 16.2.2 Setting Up the Alarms Page ................................................................ 131 16.2.3 Setting Up the Blocked Page............................................................... 134 16.2.4 Setting Up the History Page ................................................................ 135 16.2.5 Setting Up the System State Page ....................................................... 137 16.2.6 Creating a User-Defined Readings Page ............................................. 140 16.2.7 Selecting the Pages to Display ............................................................ 147 16.2.8 Selecting the Page Displayed at Startup .............................................. 148
SMP Gateway User Manual
•v
16.2.9 Changing How Time Information is Displayed .................................. 148 16.2.10 Setting Up an Alarm Buzzer ............................................................... 149 16.2.11 Temporarily Deactivating the Annunciator ......................................... 149 16.3
Setting Up the Touch Screen ............................................................................. 149 16.3.1 Connecting the Touch Screen to the SMP Gateway............................ 149 16.3.2 Setting Up a Screen Saver using SMP Config .................................... 150
16.4
Uploading the Configuration to the SMP Gateway ........................................... 150
16.5
Calibrating the Touch Screen ............................................................................151
16.6
Using the SMP Gateway’s Annunciator ............................................................151 16.6.1 Navigating Through the Different Pages............................................. 151 16.6.2 Managing Alarms ................................................................................ 152 16.6.3 Blocking Alarm Inputs ........................................................................ 154 16.6.4 Using the Single Alarm Display.......................................................... 155 16.6.5 Using the History Log ......................................................................... 155 16.6.6 Monitoring System Status ................................................................... 157 16.6.7 Performing Control Operations From a Readings Page ...................... 159 16.6.8 Using the Screen Saver ....................................................................... 160
17
The SMP Gateway’s Automation Functions 17.1
163
The SMP Gateway Automation Functions Module ........................................... 163 17.1.1 Adding an Automation Functions Instance ......................................... 164 17.1.2 Defining an Automation Function ....................................................... 165 17.1.3 Understanding Automation Functions Settings ................................... 168 17.1.4 Using the Logic Processor................................................................... 168
17.2
The Soft PLC .....................................................................................................176 17.2.1 The CoDeSys Development Environment .......................................... 176 17.2.2 Using CoDeSys to Create SMP Gateway Automation Scripts ............ 177
18
Using Syslog with an SMP Gateway 18.1
19
Setting Up Syslog ..............................................................................................178
Redundancy 19.1
178
181
Redundant Group Operation.............................................................................. 181 19.1.1 Redundant IEDs .................................................................................. 182 19.1.2 Giving Priority to an SMP Gateway of the Group .............................. 182
19.2
Grouping 2 SMP Gateways for Redundancy..................................................... 183 19.2.1 Setting Up a Redundancy Group Using SMP Manager ...................... 183
vi •
SMP Gateway User Manual
19.2.2 SMP Manager’s Redundancy Column ................................................ 187 19.3
Managing Redundancy ......................................................................................188 19.3.1 Forcing an Active SMP Gateway to Fall On Standby ......................... 188 19.3.2 Additional Failover Conditions ........................................................... 189 19.3.3 Modifying the Redundancy Settings of an Existing Group ................. 189 19.3.4 Ungrouping SMP Gateways ................................................................ 189 19.3.5 Testing and Validating the Configuration ........................................... 189 19.3.6 Monitoring Redundancy Status ........................................................... 190 19.3.7 Testing a Redundant Network ............................................................. 190
20
21
19.4
Hot Standby ....................................................................................................... 191
19.5
Teaming NICs for Network Fault Tolerance (SMP 16 Only) ........................... 192
Setting Up the SNMP Server
193
20.1
SNMP Traps ...................................................................................................... 193
20.2
Configuring the SNMP Server .......................................................................... 193
Time Adjustment
195
21.1
Monitoring Time Information ........................................................................... 195
21.2
Setting SMP Gateway’s Internal Clock ............................................................. 195
21.3
Automatic Clock Adjustment ............................................................................ 196 21.3.1 About GPS, IRIG-B and SNTP ........................................................... 197 21.3.2 Configuring the SMP 16 GPS Clock Option ....................................... 198 21.3.3 Using IRIG-B for Internal Clock’s Adjustment .................................. 198 21.3.4 Setting Up the SMP Gateway as an SNTP Client ............................... 199 21.3.5 Using a SCADA Protocol’s Time Adjustment Feature ....................... 200
21.4
Using the SMP Gateway as a Time Source ....................................................... 200 21.4.1 Configuring IRIG-B Time Distribution .............................................. 201 21.4.2 Setting Up the SMP Gateway to Act as an SNTP Server .................... 201 21.4.3 Adjusting Devices Clocks Using Master Protocols............................. 202
22
SMP Tools Remote Access to the SMP Gateway 22.1
203
Windows XP Setup Procedures ......................................................................... 203 22.1.1 Setting Up a Dial-Up (Modem) Connection ....................................... 203 22.1.2 Setting Up a Direct Serial Connection ................................................ 206
22.2
Windows 2000 Setup Procedures ...................................................................... 208 22.2.1 Setting Up a Dial-Up (Modem) Connection ....................................... 209 22.2.2 Setting Up a Direct Serial Connection ................................................ 211
SMP Gateway User Manual
• vii
23
24
Using a Dial-Up Connection for DNP3 or IEC 60870-5-101
215
23.1
Specifying which serial ports have modems ..................................................... 216
23.2
Creating a modem pool .....................................................................................216
23.3
Adding a modem to a modem pool ...................................................................217
23.4
Adding a modem pool master connection ......................................................... 219
23.5
Adding a modem pool slave connection ............................................................ 219
Updating SMP Gateway’s Software and Tools
221
24.1
Software Architecture of the SMP Gateway ..................................................... 221
24.2
Updating the SMP Tools on the PC................................................................... 222
24.3
Updating the SMP Gateway Software ............................................................... 222 24.3.1 Updating the SMP Gateway Firmware ............................................... 222 24.3.2 Updating the SMP Gateway Application ............................................ 224 24.3.3 Updating the Configuration File ......................................................... 225
25
Activating a New License 25.1
26
Updating your License Information .................................................................. 226
Miscellaneous SMP Tool Features 26.1
226
229
SMP Manager Features ..................................................................................... 229 26.1.1 Modifying SMP Manager’s Settings ................................................... 229
26.2
SMP Config Features ........................................................................................ 230
26.3
System Data Points ............................................................................................ 231
26.4
SMP Loader....................................................................................................... 234 26.4.1 Setting Up SMP Loader ...................................................................... 235 26.4.2 Main Window ..................................................................................... 236 26.4.3 Transferring Files to the SMP Gateway .............................................. 237 26.4.4 Log File 239 26.4.5 Updating Bootstraps Under Unusual Circumstances .......................... 239
27
Telnet-Based Functions
241
27.1
Starting a Telnet Session ................................................................................... 241
27.2
Firewall Manager .............................................................................................. 241 27.2.1 R Command ........................................................................................ 242 27.2.2 S Command ......................................................................................... 242 27.2.3 H Command ........................................................................................ 242 27.2.4 Q Command ........................................................................................ 243
viii •
SMP Gateway User Manual
27.3
Time and Date ................................................................................................... 243
27.4
Clock Manager .................................................................................................. 243 27.4.1 D Command ........................................................................................ 244 27.4.2 H Command ........................................................................................ 244 27.4.3 Q Command ........................................................................................ 244
27.5
28
Elo Touchscreen Driver Manager......................................................................244
Troubleshooting
247
28.1.1 Getting Additional Help ...................................................................... 247 28.1.2 Creating an SMP Gateway Report File ............................................... 248 28.1.3 Viewing an SMP Gateway Report File ............................................... 249 28.2
Startup Problems ............................................................................................... 249 28.2.1 No Configuration File ......................................................................... 249 28.2.2 Protocols Failed................................................................................... 250 28.2.3 Critical Components Missing .............................................................. 251
28.3
Communications Problems ................................................................................ 251 28.3.1 Physical Layer ..................................................................................... 252 28.3.2 Link Layer ........................................................................................... 252 28.3.3 Protocol Layer ..................................................................................... 252
28.4
Problems with Data Validity ............................................................................. 253
28.5
Problems Executing a Control Operation .......................................................... 253
28.6
Firewall-Related Problems ................................................................................254
SMP Gateway User Manual
• ix
Figures Figure 1
Master and slave systems ............................................................................................. 8
Figure 2
The SMP Gateway as a Master-and-slave system ........................................................ 8
Figure 3
The SMP Gateway real-time data exchange ................................................................. 9
Figure 4
SMP Gateway communications components.............................................................. 10
Figure 5
The transparent SMP Gateway ................................................................................... 12
Figure 6
Additional SMP Gateway functions ........................................................................... 13
Figure 7
The SMP Gateway protocol translator........................................................................ 14
Figure 8
The SMP Gateway data concentrator ......................................................................... 15
Figure 9
The SMP Gateway as a communications processor ................................................... 16
Figure 10
The substation SMP Gateway ..................................................................................... 17
Figure 11
The SMP Gateway with a firewall.............................................................................. 18
Figure 12
Using a passthrough connection ............................................................................... 110
SMP Gateway User Manual
• xi
1
Welcome
Congratulations on acquiring your new SMP Gateway! You now have unlimited connectivity for all the equipment in your substation. In this manual, we will show you how to use the SMP Gateway to integrate existing and new RTUs, IEDs, PLCs and control centers into a single modern, homogeneous substation automation system. You will learn how to set up your SMP Gateway as a:
1.1
Protocol Translator – The SMP Gateway translates standard or proprietary device protocols to control center protocols such as DNP3, TEJAS, IEC-60870-5-101/103/104 or IEC-61850 (UCA 2.0).
Data Concentrator – The SMP Gateway collects the data from all connected devices, regardless of protocol, and makes it available to control centers using LAN, WAN, modem or serial connections.
Terminal Server – The SMP Gateway supports centralized maintenance, monitoring and control of all devices by using the passthrough communications mode.
Substation Communications Gateway – The advanced capabilities of the SMP Gateway make it the ideal choice for any substation automation project.
SMP Gateway Models There are currently 3 SMP Gateway models:
The SMP 4 has 4 ports. It comes in a compact and economical format that allows it to be installed directly within relay protection enclosures. There is also an optional internal modem available, which allows the SMP 4 to communicate with a SCADA or device via a dialup connection.
The SMP 16, which can be mounted in a 19-inch rack, comes in two versions, both of which have the same basic characteristics:
The SMP 16/CP is a gateway that offers 16 RS-232/422/485 universal serial ports, 2 Ethernet ports and an integrated modem.
SMP Gateway User Manual
•1
The SMP 16/SG has, in addition, expansion slots where accessories and options can be added to make it an ideal communications gateway for all your automation projects.
Both versions can also be equipped with the PM option, a new 1.1 GHz Pentium-M processor that improves the gateway's speed tenfold. This is ideal for high-capacity application or complex automation schemes.
The manual applies to all models, and differences are indicated where applicable. Refer to your SMP Gateway installation guide for a detailed description of your particular SMP Gateway model.
1.2
Related Documentation This manual provides you with the basic information you need to get started with your SMP Gateway. To reduce paper use, we have included the following related documentation on the CD-ROM you received with the product. Should you want printed documents, you can order them from Cooper Power Systems using reference number P-DPRN-0102. Your Documentation folder contains the following related documents:
2•
SMP 4-20 SMP 8-40 Installation Guide, GUI-00316-00027 T. This document gives you detailed instructions on installing and setting up the SMP 4-20 or SMP 8-40.
SMP 4 Installation Guide, GUI-00316-00026 T. This document gives you detailed instructions on installing and setting up the SMP 4.
SMP 16 Installation Guide, GUI-00316-00032 T. This document gives you detailed instructions on installing and setting up the SMP 16/CP or the SMP 16/SG.
SIOM Adding Serial Ports to Your SMP, AUT-00123-00432 T. This document describes how to add serial ports to an SMP 4-20 or SMP 8-40.
SMP 16 GPS Clock Option Installation Guide AUT-00316-0047-T. This document describes how to install the wiring and setup the software if you have the GPS clock option for the SMP 16.
Master Protocol Common Concepts. This document describes the concepts and settings common to the protocols used by most substation devices. Separate documents describe the protocol-specific settings.
SMP 4 Diagnostics Reference Guide, GUI-00316-00040 T. This document takes you through the steps required to run diagnostic tests on the SMP 4.
SMP 16 Diagnostics Reference Guide, GUI-00316-00036 T. This document takes you through the steps required to run diagnostic tests on the SMP 16.
SMP 4-20 SMP 8-40 Diagnostics Reference Guide, GUI-00316-00024 T. This document takes you through the steps required to run diagnostic tests on the SMP 4-20 or SMP 8-40.
SMP Gateway User Manual
1.3
Getting Assistance with Cybectec Products If you have any questions regarding the performance, application, testing or repair of this or any other component of the Cybectec product line, do not hesitate to contact us. Our staff will be happy to assist you. Cybectec Technical Support Cooper Power Systems Energy Automation Solutions 730 Commerciale Street, Suite 200 Saint-Jean-Chrysostome, Quebec Canada G6Z 2C5 Email:
[email protected] Phone: +1.418.834.0009 Fax: +1.514.227.5256 You can reach us between 8 a.m. and 5 p.m. EST. For emergency service on weekends and holidays, simply leave your name and phone number on our pager at +1.418.260.6000. We will get back to you as soon as possible.
1.4
Getting Started When you receive your SMP Gateway, you have to go through several steps before you can perform the tasks described in this document. Namely, you have to do the following:
Unpack the SMP Gateway.
Install the SMP Gateway.
Set-up the SMP Gateway.
Install the PC software.
Make the SMP Tools aware of your new SMP Gateway.
Load the SMP Gateway firmware.
All of these steps are explained in detail in the following documents:
SMP 4-20 SMP 8-40 Installation Guide, GUI-00316-00027 T
SMP 4 Installation Guide, GUI-00316-00026 T.
SMP 16 Installation Guide, GUI-00316-00032 T.
Make sure you have performed all the steps described in those documents before proceeding with the material explained in the present document.
SMP Gateway User Manual
•3
1.5
Document Overview Once you have performed all the steps explained in your SMP Gateway installation guide, you are ready to perform the following tasks, as described in this user manual:
4•
Configure your SMP Gateway so that it can communicate with your devices:
Define the hardware.
Configure the master protocol instances that will communicate with your substation devices.
Configure the data points.
Set-up the communications links between the SMP Gateway and the substation devices.
Associate master protocol instances with communications links.
Validate, activate and test your configuration.
View the following information in real time:
The SMP Gateway log files.
Protocol exchanges.
Communications statistics.
Data points, using a Web browser.
Configure your SMP Gateway so that it can communicate with one or more control centers:
Configure a slave protocol instance for each control center.
Have each control center subscribe to the data points.
Associate slave protocol instances with communications links.
You will also become familiar with the following SMP Gateway features:
Security.
Passthrough connections.
DFR and event file processing.
Automation functions.
Annunciator..
Redundancy.
SNMP exporting.
Time synchronization.
SMP Gateway access through a direct or dial-up connection.
SMP Gateway access through a dial-up connection for DNP3 and IEC 60870-5-101 protocols.
Commissioning tool.
SMP Gateway User Manual
You will also learn how to update the SMP Gateway software and tools, and to troubleshoot any problems you may encounter with your SMP Gateway.
SMP Gateway User Manual
•5
2
Principles of Operation
Electrical power utilities face a number of challenges when attempting to automate their substations. They have legacy devices that they want to continue using. They want to integrate new devices. They may want to add one or more control centers. They may want to use a local HMI in order to keep a close watch on all events that occur in the substation. There are a number of problems to contend with: connectivity, protocol incompatibilities, interoperability problems, security considerations, logistics for migration, downtime, and not the least of which, total project cost. The SMP Gateway has been specifically designed to address all these issues. It is the ideal product to ensure a smooth, safe and cost-effective approach to substation modernization. Indeed, you can use a step-by-step approach. You decide which steps to take, in which order, and when.
2.1
Logical Architecture The SMP Gateway is designed to meet all the requirements for power substation automation. It has an open architecture that allows you to easily add new protocols, devices, local area networks, wide area networks, and control centers. In this section, we will describe the logical architecture of the SMP Gateway and we will see how it implements all the functions required of a substation gateway.
2.1.1
Masters and Slaves A typical automation system consists of a SCADA system, located in a control center, which is connected to devices located in the substation. The SCADA regularly polls the devices in order to retrieve device readings and statuses. The operator uses the SCADA system to perform control functions on selected devices. Since it is the control system that initiates data acquisition and control, it is considered to be the master system. Since the substation device responds to data acquisition and control requests, it is considered the slave system.
SMP Gateway User Manual
•7
SCADA
MASTER
SLAVE
DEVICE
Figure 1
2.1.2
Master and slave systems
Introducing the SMP Gateway in the Automation System When an SMP Gateway is introduced in the automation system, it has to act as both a slave and a master. The SCADA system interrogates the gateway as if it were a substation device. The gateway is thus a slave to the SCADA. However, since the gateway is connected to the substation devices, it must also be able to perform the functions of a master, such as polling for data and sending control requests. SCADA
MASTER
SLAVE
MASTER
SLAVE
DEVICE
Figure 2 8•
The SMP Gateway as a Master-and-slave system
SMP Gateway User Manual
2.1.3
SMP Gateway Internals The SMP Gateway's internal architecture is based on a series of software components called protocol components. Slave protocol components implement all the functions necessary to process requests received from a SCADA or control center. Master protocol components implement the functions necessary to poll devices and send control requests. Cooper Power Systems provides components for most standard protocols, such as DNP3, MODBUS, IEC-608705-101/103/104 and IEC 61850, as well as a large number of proprietary protocols such as SEL, ABB TEN BYTE, Motorola MDAC, and more. The master protocol component polls the device and stores the data that it retrieves in an internal database, called the Real-Time Data Exchange (RTDX). The RTDX is much more than a simple data store. Besides storing the current value of all the device data points, it also stores the different types of information than can be provided by a substation device, such as the quality and timestamp of the data. It also stores information such as device tags used for control functions. SCADA
SLAVE PROTOCOL
REAL-TIME DATA EXCHANGE
MASTER PROTOCOL
DEVICE
Figure 3
2.1.4
The SMP Gateway real-time data exchange
Communications Components SMP Gateway protocol components process the messages exchanged among the control centers and the devices. However, these messages can be transmitted using various communications methods. For instance, the MODBUS protocol can be used on a TCP/IP network or on an RS-232 serial link.
SMP Gateway User Manual
•9
SMP Gateway communications components implement all the functions required to communicate with a device or control center using a variety of communications technologies. Cooper Power Systems provides communications components for asynchronous serial ports, RS-232, RS-422, RS-485, TCP/IP and modems. SCADA
SLAVE COMMUNICATION COMPONENT
SLAVE PROTOCOL COMPONENT
REAL-TIME DATA EXCHANGE
MASTER PROTOCOL COMPONENT
MASTER COMMUNICATION COMPONENT
DEVICE
Figure 4
2.2
SMP Gateway communications components
Configuring the SMP Gateway The SMP Gateway configuration process consists of establishing the relationships among the internal components, and providing the specific settings for each of these components. This task is
10 •
SMP Gateway User Manual
greatly simplified by Cybectec SMP Tools family of software programs. These Windows-based programs help you configure your SMP Gateway and identify and correct any problems. The configuration process consists of the following steps:
Identifying the SMP Gateway model and the installed options.
Creating a master protocol component for each device that is connected to the SMP Gateway.
Defining all the data points in the device.
Defining the communications link to be used to connect the device to the SMP Gateway.
Creating a slave protocol component for each SCADA or control center.
Defining the data points that the SMP Gateway will report to the SCADA.
Defining the communications link to be used to connect to the SCADA.
Adding a firewall and optionally a security server that supports corporate network users.
Thus, the configuration settings define the functions that the SMP Gateway performs. These settings are stored in a file that you load onto the gateway. The flexibility of the SMP Gateway architecture is the basis of Cooper Power Systems’ step-by-step substation modernization strategy. In the following sections, we will show you how you can configure the SMP Gateway to perform all the functions required of a substation gateway.
2.2.1
The Transparent SMP Gateway As a first step in a substation automation project, you can easily set up the SMP Gateway to act as a transparent interface between the SCADA and a substation device. The following diagram illustrates how you can do this using the MODBUS protocol.
SMP Gateway User Manual
• 11
SCADA
RS-232 CONNECTION
MODBUS SLAVE
REAL-TIME DATA EXCHANGE
MODBUS MASTER
RS-232 CONNECTION
DEVICE
Figure 5
The transparent SMP Gateway
In this configuration, the master component polls the device and stores the values in the RTDX. The slave component processes the SCADA polling requests and sends the values provided by the device. There is not much use for a transparent gateway. However, it contains much more than the components that we described previously. Simply by adding the SMP Gateway to the substation, you now have access to the following advanced functions:
12 •
Centralized automation functions, using the built-in Automation functions or the IEC 61131-3 Soft PLC logic processor.
Real-time data display, using the built-in web server.
Transparent access to devices, using the passthrough server, for local or remote IED maintenance.
SMP Gateway User Manual
SNMP support to monitor communications status.
Sophisticated HMI, interactive diagrams, data logging and reporting, using Cooper Power Systems’ Visual Substation software.
Sophisticated Windows tools for remote or local maintenance.
A sophisticated security server to support corporate network users.
Even more important, the transparent SMP Gateway is the first step in integrating new substation devices to your existing SCADA and automation system.
SCADA
INTERNET EXPLORER
VISUAL SUBSTATION HMI
WEB SERVER
VISUAL SUBSTATION
RS-232 CONNECTION
MODBUS SLAVE
REAL-TIME DATA EXCHANGE
PASSTHRU
MAINTENANCE TOOLS MODBUS MASTER
RS-232 CONNECTION
IEC 1131 SOFT PLC
STATS
SNMP
LOGS
TRACES
DEVICE
Figure 6
2.2.2
Additional SMP Gateway functions
Using the SMP Gateway as a Protocol Translator As we saw in the last section, the SMP Gateway is transparent when the master and slave protocols are the same. When you configure different master and slave protocols, the SMP Gateway becomes a protocol translator. Since you can independently configure the communications links for the master and slave components, you can easily use the SMP Gateway to integrate legacy serial devices in a modern network environment. Similarly, you can connect modern IEDs to a legacy control center.
SMP Gateway User Manual
• 13
SCADA
TCP/IP CONNECTION
DNP3 SLAVE
REAL-TIME DATA EXCHANGE
MODBUS MASTER
RS-232 CONNECTION
DEVICE
Figure 7
2.2.3
The SMP Gateway protocol translator
Using the SMP Gateway as a Data Concentrator or Device Multiplexer The SMP Gateway architecture is designed to simultaneously support any number of master components. Each component has its own communications link and its own protocol. All the data retrieved from the devices is stored in the RTDX, where it becomes available to the SCADA. Using the SMP Gateway as a data concentrator is a simple matter of configuration, and it provides a highly efficient means of adding new devices to an existing automation system. The SCADA system has no knowledge of the new devices; it only sees new data points.
14 •
SMP Gateway User Manual
SCADA
TCP/IP CONNECTION
DNP3 SLAVE
REAL-TIME DATA EXCHANGE
MODBUS MASTER
SEL MASTER
RS-232 CONNECTION
RS-232 CONNECTION
DEVICE
Figure 8
2.2.4
DEVICE
The SMP Gateway data concentrator
Using the SMP Gateway as a Communications Processor The SMP Gateway architecture supports any number of slave components. Each component has its own communications link, and all the device data can be sent to any number of SCADA and control centers, each with its own protocol. Using the SMP Gateway, sending data to a new control center is a simple matter of configuration.
SMP Gateway User Manual
• 15
SCADA
MAINTENANCE CENTER
RS-232 CONNECTION
TCP/IP CONNECTION
MODBUS SLAVE
DNP3 SLAVE
REAL-TIME DATA EXCHANGE
MODBUS MASTER
RS-232 CONNECTION
DEVICE
Figure 9
2.2.5
The SMP Gateway as a communications processor
Putting it all Together The SMP Gateway’s sophisticated architecture allows it to integrate existing and new RTUs, IEDs, PLCs and control centers into a single homogeneous substation automation system. It provides you with a complete solution for automating new substations and modernizing legacy systems.
16 •
SMP Gateway User Manual
SCADA
SCADA
RS-232 CONNECTION
TCP/IP CONNECTION
MODBUS SLAVE
DNP3 SLAVE
WEB SERVER
VISUAL SUBSTATION HMI
VISUAL SUBSTATION
TOUCH SCREEN
LOCAL HMI
REAL-TIME DATA EXCHANGE
PASSTHRU
MODBUS MASTER
SEL MASTER
RS-232 CONNECTION
RS-232 CONNECTION
DEVICE
DEVICE
Figure 10
2.2.6
INTERNET EXPLORER
IEC 1131 SOFT PLC
SNMP
STATS
LOGS
TRACES
MAINTENANCE TOOLS
The substation SMP Gateway
Securing the Substation Widespread data access within the SMP Gateway can become an important security risk if it is compromised, but it can also become a security asset. This is why SMP Gateways are ready for NERC CIP-002-1 to CIP-009-1 Cyber Security Standards. The gateway provides a single point of access to all substation data. The security features of the SMP Gateway allow you to protect the substation devices (see Figure 11). If you activate the security features within your substation SMP Gateway, you will be able to:
comply with authentication and authorization policies;
set up a firewall to protect from substation LAN security breaches;
monitor and lock out remote connections.
File integrity check is also periodically performed on the SMP Gateway files. The access inside the firewall protection has additional layers of protection, so that only a few users of your choice will have the possibility to modify parameters inside the substation.
SMP Gateway User Manual
• 17
SCADA
INTERNET EXPLORER
VISUAL SUBSTATION HMI
VPN
VPN
WEB SERVER
VISUAL SUBSTATION
SCADA
SPECIFIC IP ADDRESS OPEN PORT HARD-WIRE CONNECTION FIREWALL PROTECTION RS-232 CONNECTION
TCP/IP CONNECTION
MODBUS SLAVE
DNP3 SLAVE
REAL-TIME DATA EXCHANGE
PASSTHRU
MODBUS MASTER
SEL MASTER
RS-232 CONNECTION
RS-232 CONNECTION
HARD-WIRE CONNECTION
DEVICE
Figure 11
HARD-WIRE CONNECTION
DEVICE
IEC 1131 SOFT PLC
STATS
SNMP
LOGS
TRACES
VPN
MAINTENANCE TOOLS
The SMP Gateway with a firewall
In the following chapters, we will learn how to configure the SMP Gateway to perform these functions.
18 •
SMP Gateway User Manual
3
SMP Tools Overview
To assist you with the tasks you will want to perform with the SMP Gateway s in your organization, we have provided you with our suite of SMP Tools. The SMP Tools are Microsoft Windows-based programs that make it easy for you to configure the SMP Gateway and perform maintenance functions. They run on a PC, are simple to use, and provide advanced features that allow you to rapidly configure all the devices and communications links in your substation. They can be used locally or remotely through a LAN, WAN or VPN. When security is activated, users must log in before they can use any function. The Cybectec SMP Tools include the following applications:
SMP Manager Manages all the SMP Gateways in your organization. It displays the state of each gateway, manages their configuration files and local security database, allows you to group two gateways together to achieve redundancy, and is used to invoke the configuration and maintenance tools for any gateway to which it is connected. From SMP Manager, you can also start Internet Explorer to view the data points, logs and traces in real time, and you can start a Telnet session in order to set-up certain advanced features such as dial-up access or IRIG-B signal output type.
SMP Config Used to configure the SMP Gateway. It has a spreadsheet-like grid that you use to specify the devices and control centers connected to the gateway, their protocols, their communications links and their data points. Advanced editing functions make it easy for you to enter the data points. Template editing allows you to pre-define standard devices with standard data points, thereby reducing labor intensity and the possibility of errors.
61850 Config Used to configure the IEC 61850 and UCA 2.0 protocols on the SMP Gateway.
SMP Log Used to browse through and manage the log files maintained by the SMP Gateway. All significant events are logged, including local and remote control events, system failures, special protocol events, and so on.
SMP Stats Used to browse through and manage a large variety of dynamically updated statistics, ranging from full communications statistics for each link to the processor load for each protocol component.
SMP Gateway User Manual
• 19
SMP Trace Used to browse through the real-time traces generated by the SMP Gateway. SMP Trace can display detailed traces of all protocol and communications link activity. Traces are displayed in both hexadecimal and application protocol format. The tracing functions are similar to those usually provided by protocol analyzers, with the notable exception that they can be used remotely at any time on any SMP Gateway and that they decode information at the application level. As such, they constitute an excellent commissioning or debugging tool.
SMP Connect Used to establish passthrough connections with any IED connected to an SMP Gateway, for the purpose of doing remote configuration and maintenance of IEDs using manufacturerprovided software.
SMP Loader Used with the SMP 4-20 and SMP 8-40 to load new versions of most of the SMP Gateway firmware components, and with the SMP 4, SMP 16/CP and SMP 16/SG, to load the secondary bootstrap program. Refer to Appendix A and to your SMP Gateway installation guide for details on using SMP Loader.
Event Translator. Used to convert Cybectec event files to the COMTRADE format.
The next chapter will discuss how to create a list of SMP Gateways with SMP Manager, and will then explain how to do a complete configuration of your SMP Gateway using SMP Config.
20 •
SMP Gateway User Manual
4
SMP Manager
SMP Manager is the doorway to your SMP Gateways. It runs on your PC, as do all the tools you launch through SMP Manager. You are already familiar with the application, since you added your new gateway to the list of SMP Gateways managed by SMP Manager when you installed your SMP Gateway. This section goes over a few of the points that were covered in your SMP Gateway installation guide, and provides additional information.
4.1
Starting SMP Manager and Logging On To start SMP Manager:
On the Windows taskbar, click Start.
Point to Programs, then Cybectec, and then SMP Tools.
In the SMP Tools menu, click SMP Manager.
The SMP Manager main screen appears, followed by the Login Information dialog box.
If security has already been configured, enter valid credentials.
Click OK to close the dialog box.
SMP Gateway User Manual
• 21
4.2
Main Window The following figure shows a typical SMP Manager window.
As illustrated, the main window displays information such as:
The list of SMP Gateways and the tools that are currently running for each gateway in the list.
The current status of each SMP Gateway in the list (started, failed, safe mode, max safe mode, on standby, and various intermediate states).
The SMP Gateway model: SMP 4-20, SMP 8-40, SMP 4, SMP 16/CP or SMP 16/SG.
The IP address and redundancy status of any SMP Gateways you have grouped together for the purpose of redundancy. This information is available only if your license supports redundancy. This column is not available by default.
Whether the SMP Gateway's built-in firewall is active and whether VPN is connected or disconnected. This information is available only if your version of the SMP Gateway software supports the SMP Gateway’s security features. The firewall information is not available by default
You can choose which columns you want to display and their order of appearance, with a right click on the column header.
4.3
Adding an SMP Gateway Creating a list of the SMP Gateways you want to monitor is easy. Proceed as follows for each gateway you want to add to the list:
From SMP Manager’s File menu, click Add SMP Gateway to add your SMP Gateway to the list.
The Gateway Properties dialog box appears.
22 •
SMP Gateway User Manual
Type the name by which you want to identify your SMP Gateway in Gateway Name. The Configuration file is the file that will be opened by default in SMP Config. If you change its name afterwards through the File menu, you must come back to this dialog box and change the name in the Configuration File text box, so it opens the right file at startup.
In the First Address box, type the IP address of the first Ethernet port. You can also type the address of the second Ethernet port in the Second Address box, although it is not necessary to do so.
If the SMP Gateway cannot be directly accessed through the network, but requires a dialup connection, select the The gateway is connected over a remote dial-up checkbox to prevent SMP Manager from polling the gateway for its status.
Click Add.
The SMP Gateway gets added to the list, and SMP Manager automatically detects the gateway model and in the case of an SMP 4, whether an internal modem is installed.
4.4
Information Provided by the SMP Gateway Icon The SMP Gateway icon, which is displayed beside each gateway name, provides additional information about the SMP Gateway. The following table gives the meaning of each icon: Icon
Description A device with two red LEDs. SMP Manager is unable to establish a connection with the gateway. A device with flashing yellow and green LEDs. SMP Manager is connected to the gateway. A blank page. A file (configuration file, new software, etc.) has been modified and will be activated
SMP Gateway User Manual
• 23
Icon
Description when the gateway is restarted. A lined page and a pencil. A report is currently in progress. The report file provides detailed information about the gateway. You should, therefore, send an SMP Gateway report file with any request for technical support. A device, flashing yellow and green LEDs and a yellow telephone. SMP Manager is connected to the gateway via remote dialup. A device and a telephone, grayed. The gateway is configured for remote dialup but not currently connected to SMP Manager. A device, red LEDs and a yellow telephone. SMP Manager is unable to establish a connection with the gateway over the remote dialup connection.
4.5
Customizing the Display You can customize the display in the SMP Manager window to suit your needs. You can choose which columns you want to display, and the order in which you want them to appear.
24 •
Column
Description
Gateway
The list of SMP Gateways and, if you request it, the tools that are currently running for each gateway in the list.
IP Address
The IP address of any SMP Gateways you have grouped together in SMP Manager. This column is not available by default.
Status
The current status of each SMP Gateway in the list (started, failed, safe mode, max safe mode, on standby, and various intermediate states).
Platform
The SMP Gateway model: SMP 4-20, SMP 8-40, SMP 4, SMP 16/CP or SMP 16/SG.
Firewall
Whether the SMP Gateway's built-in firewall is active. This information is available only if your version of the SMP Gateway software supports the SMP Gateway’s security features.
VPN
Indicates if the SMP Gateway is connected to SMP Manager using VPN or not.
Group
This column shows the virtual address given to the redundancy group. If the address is modified, the new address will appear beside the old one, separated by an arrow. Upon the next reboot, the device will be grouped under the new address only.
Security
This column shows whether the security is activated or not, if it is global or local, and how recent it is.
SMP Gateway User Manual
4.5.1
Adding or Removing a Column To toggle between displaying a column and removing it from the display:
4.5.2
Right-click any column heading.
In the shortcut menu, locate the column you are interested in. Put or remove a checkmark to add or remove the column to or from the display.
Changing the Position of a Column To change the order of a column in the display:
Click the column heading of the column you want to relocate.
Drag the heading to the target location.
SMP Gateway User Manual
• 25
5
Configuring the SMP Gateway
As we saw under “Principles of Operation”, you have to configure the SMP Gateway before you can use it. For this, you use SMP Config to define the characteristics of your SMP Gateway and the functions it has to perform. The configuration is stored in a file that is then loaded onto the SMP, where it is stored in non-volatile flash memory. Using SMP Config, you will perform the following configuration steps:
For an SMP 4-20, an SMP 8-40 or an SMP 16/SG, define the hardware options installed.
Create a master protocol instance for each device to be supported.
Define each data point on each device.
Configure the communications link to be used to connect to each device.
Create a slave protocol instance for each SCADA or control center.
Configure the communications link to be used to connect to the SCADA.
Map the device data points to SCADA data points.
You will then use SMP Manager to send the configuration file to the SMP. Note: There can only be one instance of SMP Config running at any given time. If you launch the tool for a given SMP Gateway and then launch it again for a second SMP Gateway, SMP Config will prompt you to save any changes you have made, close the configuration file of the first gateway, and then open the configuration file of the second gateway.
To create a configuration file for your SMP Gateway, proceed as follows:
Start SMP Manager.
In SMP Manager’s application window, select your SMP Gateway.
SMP Gateway User Manual
• 27
In the Tools menu, click SMP Config to start the application.
The SMP Config display includes 3 panes. The left pane is a tree structure of all the configuration topics. The top right pane displays the settings for the topic you have selected in the left pane. The bottom right pane appears when your request that the configuration be validated; it displays error and warning messages. The gateway name is the name you assigned when you added the SMP Gateway in SMP Manager. The configuration file name on the title bar was also assigned when you added the SMP Gateway in SMP Manager. If you open the Master Protocols and Slave Protocols branches, you will see that the tree structure offers you a fixed set of protocols. These are the protocols currently supported by your product license.
5.1
Creating Master Protocol Instances You need to add a master protocol instance for each device you want to access with your SMP Gateway (see Figure 2). Even if a number of devices share a multidrop link, each of them requires its own master protocol instance. Each device is a slave, so the gateway acts as a master when communicating with the device, which is why it requires a master protocol instance. There are two ways to add the master protocol instance:
28 •
You can use a template, which eases the task of configuring the master protocol instance, by automatically entering the points list for the device. SMP Config provides templates for a number of common substation devices.
SMP Gateway User Manual
If no template is available, you will need to enter the points list. If you are configuring a number of devices of the same type, you can save the first device configuration as a template that you will then use to configure the other devices.
Once you have added a master protocol instance and entered its data points (manually or via a template), you can click a particular data point type in the left pane and see the list of data points and their settings in the right pane, as shown next.
5.1.1
Creating a Master Protocol Instance from a Template To add a master protocol instance from a template:
In the left pane, open the Master Protocols branch, to display the list of master protocols provided under your product license.
In the left pane, click the protocol for which you want to add an instance. The list of all defined master protocol instances appears in the right pane.
In the Tools menu, click New Instance From Template.
Choose the appropriate template, and click Open.
In the dialog box, enter:
The name of the new instance.
The device prefix. The device prefix is a string that identifies the device and is used as a prefix for all of its data point names. The prefix ensures that every name in the system is unique. An explanation of the usage of prefixes is provided under “Configuring the Master Protocol General Settings”, in the next sections.
The new instance appears in the left pane. If you open its tree structure and click the various physical data point types, all the data points supported by the device will be displayed in the right pane. SMP Gateway User Manual
• 29
5.1.2
Creating a Master Protocol Instance Manually To add a master protocol instance manually:
In the left pane, open the Master Protocols branch, to display the list of master protocols provided under your product license.
In the left pane, click the protocol for which you want to add an instance. The list of all defined master protocol instances appears in the right pane.
In the right pane, type the name of the new instance at the end of the list of names, and press the Tab key on your keyboard.
The new protocol instance is added in the left pane, under the protocol type you had selected. If you expand its tree branch and click an item, the corresponding protocol settings will be displayed in the right pane. Note that if you click a physical data point type in the left pane, the right pane will display an empty row since you will have to add the physical data points manually.
5.1.3
Configuring the Master Protocol General Settings All master protocol components share common settings that define how they interact with a device. The following procedure describes how to enter these settings. If you created the protocol instance from a template, the general settings have been defined for you. However, you should verify the settings to make sure they match your device configuration, and you should familiarize yourself with the naming conventions discussed in this section.
In the left pane, click General to display the list of general settings for the selected protocol.
In the right pane, type a Device Prefix. The string you enter will be used as a prefix for all the I/O point names of the device. It is mandatory for each instance of a protocol. It is used to distinguish data point names that are on the same device type, but on multiple physical devices. The device prefix ensures that every data point name in the system is unique. Device prefixes are described in the following section, “Adding Data Points from a Protocol Template”.
Device prefix and naming conventions A typical substation automation project requires the configuration of thousands of data points. You can significantly reduce the effort by carefully planning how to name devices and data points. Cybectec tools provide additional functionality if the names of data points are based on some type of convention. For our engineering projects, we use a naming convention such as the following:
30 •
A data source name, such as the substation name: MAPLE, CEDAR.
A voltage level: 220 or 25.
A device name: L1 to indicate a line, T1 to indicate a transformer, F1 to indicate a feeder, BUS for a bus bar.
A signal name: V_phsA_mag to indicate the phase A voltage magnitude, A_phsA_mag to indicate the phase A current magnitude, Pos_st to indicate the status of a breaker or a line switch.
SMP Gateway User Manual
With such a convention, a data point called CEDAR_220_BUS_V_phsA_mag clearly indicates the voltage magnitude of phase A on the 220 kV bus of the CEDAR substation. A data point called MAPLE_025_F1_Pos_st indicates the status of the breaker switch of feeder 1 at the MAPLE substation.
Still in the General settings, enter the scanning settings. For instance, to configure a MODBUS master protocol, you would provide settings such as the following:
A Device Address, typically 1.
A MODBUS Type, typically RTU Serial.
A Scan Interval, typically 1000 ms.
A complete description of all settings is provided in the document entitled Master Protocol Common Concepts. Protocol-specific settings are described in individual documents, such as DNP3 Master Protocol.
5.1.3.1
Accessing Protocol-Specific Documentation There are Cooper Power Systems documents available, to which you can refer for details on the settings of the currently supported protocols. To access the documents, proceed as follows:
Click Start, on the Windows taskbar.
Point to All Programs, then Cybectec, then SMP Tools, and then Documentation.
In the Documentation menu, click Protocols.
The list of available documents is displayed in an explorer window.
Click the document you want to read.
In the File menu of the explorer window, click Open with Acrobat.
Your Adobe Acrobat program starts up and displays the document in a window.
5.2
Configuring the Data Points Once you have provided the general settings of the protocol component, you then enter all the data points on the device. If you created the protocol instance from a template, all the data points have already been added; however, we suggest you read this section for your information. Protocol components typically support physical and logical data points of the following types:
Analog inputs
Binary inputs
Analog outputs
SMP Gateway User Manual
• 31
Binary outputs
A physical data point represents a real-life value, implemented on an external device. You need to identify all the device data points, either manually or using a device template. A logical data point is a value managed by the SMP Gateway. These data points are built-in and cannot be modified, but they can be disabled. Analog inputs are measured values. The system keeps 2 values for each analog measurement obtained: a raw value, which is usually the value retrieved from the device, and a calculated value expressed in engineering units, obtained using the following standard formula: Engineering value = Raw Value X Scaling Factor + Offset Binary inputs represent the state of a data point. The state is either ON or OFF. Analog and binary outputs are typically initiated by a slave component, which sends a control request originating from a control center, to the master component involved. When you create a data point, you specify the type of data and you indicate how the SMP Gateway will retrieve it. General properties such as name, type and units, are independent of the type of device or protocol used. Protocol-specific properties indicate how the SMP Gateway will retrieve the data from the device. Each protocol uses its particular form of addressing, such as index values or data offsets. For example, to add a data point for a MODBUS device:
Click the appropriate branch under the protocol instance.
In the right pane, type the name of the data point and fill in all the appropriate settings. For instance, to define an analog input you would provide the following settings:
The name of the data point, such as BUS_VA. SMP Config will automatically add the device prefix to this name, thereby generating the full name of the data point.
The input source, such as Input Registers.
The input format, such as Unsigned Integer.
The input size, such as 16 or 32 bits.
The word offset in the MODBUS device memory.
The scaling information required to convert the raw value to engineering units.
The Units and Description strings used to provide meaningful data displays.
A complete description of all settings is provided in the document entitled Master Protocol Common Concepts. Protocol-specific settings are described in individual documents, such as Modicon Modbus Master Protocol. A complete description of system data points can be found in the section entitled “System Data Points” on page 231 of this manual. To access the various protocol documents:
32 •
Click Start, on the Windows taskbar.
Point to Programs, then Cybectec, then SMP Tools, and then Documentation.
In the Documentation menu, click Protocols. SMP Gateway User Manual
5.2.1
Adding Data Points from a Protocol Template Protocol templates can also be used to add points to a protocol component. For instance, you could use a template to add the data points provided by an optional device feature. You can do this by retrieving the data points from a protocol template. To do this:
In the left pane, click the protocol instance to which you want to add the data points.
In the Tools menu, click New Points from Template.
A standard Windows “Open” dialog box appears.
In the Templates folder for the protocol type you selected, choose the “.tpl” file you want to use, and click Open.
A dialog box appears, prompting you for the optional prefix and suffix to be added to every new data point name. The upper portion of the dialog box provides information about the open template file, while the lower portion shows warning and error messages.
Specify a prefix and a suffix, if applicable.
The new data points now appear in their respective categories under the selected protocol instance, and their names contain the specified prefix and suffix. Note that the prefix and suffix are not applied to logical data points, and that the logical data points are reset every time you add data points from a protocol template. You should, therefore, configure these data points once you have completed the list of physical data points.
5.3
Creating a Template from a Master Protocol Instance You can create a template of a master protocol instance, which you can retrieve later in order to quickly generate new protocol instances. To create the template:
In the File menu, click Save As Template.
Choose the Templates folder in which you want to store the template, type a significant name for the template file, and click Save.
Note that a template file can contain only one protocol instance. So if you want to create templates for several protocol instances, create a new configuration for each one and save individual templates.
SMP Gateway User Manual
• 33
5.4
Duplicating a Master Protocol Instance Once you have created a master protocol instance and configured its data points, you may want to generate one or more additional instances with the same general and data point settings. A quick way to accomplish this is by duplicating the master protocol instance. To do this:
In the left pane, click the protocol instance you want to duplicate.
In the Tools menu, click Duplicate.
A dialog box appears, prompting you for the instance name and device prefix, as shown in the following.
Type the name and prefix of the protocol instance, and click OK.
The new protocol instance now appears in the left pane.
5.5
Configuring the Communications Links A protocol component communicates with a device or control center using one of the following: a serial link, a modem or a TCP/IP network. The configuration of a communications component is completely independent of the protocol used. Before you connect a device to the SMP Gateway, you have to choose and configure its communications links.
5.5.1
Configuring the Serial Port Interfaces Depending on the options you choose in the hardware configuration, you can configure the SMP Gateway serial ports to support RS-232, RS-422 or RS-485 communication.
34 •
Click Serial Ports in the left pane, to display all the available ports.
SMP Gateway User Manual
For each port, choose the type of interface to be used. Most substation devices typically use either Asynchronous RS-232 or Asynchronous RS-422/485. If you are using a serial port for a touch screen, select ELO Touchscreen.
Serial port naming conventions
The SMP 16 provides 16 serial ports, identified as A01 through A16. It also has a modem port labeled Modem, which has a “Modem Asynchronous” interface. The SMP 16/SG can also house up to 2 additional serial ports boards, which will be identified as B01 to B16 and D01 to D16.
The SMP 4 and SMP 4-20 both provide 4 built-in serial ports. These ports are identified as COM1 Board A through COM4 Board A. The SMP 4 also provides a built-in console serial port. This port is identified as Built-in Console 1 Board A. This feature allows you to use the Console port as a standard serial port. If the SMP 4 has an internal modem, then it provides 3 built-in serial ports and 1 built-in modem port. These ports are also identified as COM1 Board A through COM4 Board A; however, the Interface column in the right pane indicates that the interface for COM4 Board A is “Modem Asynchronous”.
The SMP 8-40 provides 4 additional ports named COM1 Board B through COM4 Board B. The SMP 4-20 and SMP 8-40 SIOM use IPack modules to provide additional ports in groups of 8. The ports in the first group are called IPack_A1 Board A through IPack_A8 Board A. The ports in the second group are called IPack_B1 Board A through IPack_B8 Board A. The SMP 8-40 supports two additional groups of ports called IPack_A1 Board B through IPack_A8 Board B and IPack_B1 Board B to IPack_B8 Board B.
The purpose of each interface is given in the following table: Interface
Description
Asynchronous RS-232
Use this value to indicate that the serial port is dedicated to establishing a standard asynchronous RS-232 connection.
Asynchronous RS-422/485
Use this value to indicate that the serial port is dedicated to establishing an asynchronous RS-422 or RS-485 connection.
Modem Asynchronous
This value indicates that the port is used for modem asynchronous communication. The value is automatically assigned to the Modem port of an SMP 16 and to the COM4 Board A port of an SMP 4 equipped with an internal modem.
RAS (remote access server)
Use this value to indicate that the serial port is configured to accept incoming direct serial connections. This type of connection allows you to use the SMP Tools as if you were connected to the SMP Gateway via a normal network connection. By default, the console port is always configured for RAS. Refer to the SMP 4 Installation Guide, GUI-00316-00026 T, or to the SMP 16 Installation Guide, GUI-00316-00032 T, for instructions on setting up a RAS IP address pool. Then refer to “Erreur ! Résultat incorrect pour une table.”, page 203, in the present manual, for the step-by-step installation procedure.
SMP Gateway User Manual
• 35
Interface
Description Constraint for the SMP 4-20 and the SMP 8-40: An SMP 4-20/SMP 8-40 CPU board can support up to 4 different bit rates for the serial ports located on the front panel. This means that if you specify that the console serial port is configured for RAS, only 3 other bit rates will be available for the remaining 4 serial ports on Board A and that if all the other Board A serial ports are used, 2 of the 5 serial ports must have the same bit rate. Note that if you set the console serial port to Reserved and you do, in fact, accept incoming direct serial connections on the console serial port as well as on the 4 remaining serial ports, the SMP Gateway application will disable the console port connection. This constraint obviously does not apply to Board B, since it has 4 serial ports and there are 4 bit rates available.
5.5.2
Redundancy
Use this value to indicate that the serial port is reserved for connecting 2 SMP Gateways together as a redundancy group. See “Grouping 2 SMP Gateways for Redundancy”, page 183.
ELO Touchscreen
Use this value to indicate that the touch input information of an Elo touch screen will be transmitted to the SMP Gateway using a serial cable, through this serial port.
Radio
Use this value to indicate that a radio will be connected to this serial port.
Reserved
Use this value to indicate that the serial port is reserved for purposes other than those stated previously.
Configuring the Operation of the Serial Ports Each serial port needs to be configured with the appropriate settings for the connected device.
36 •
In the left pane, open the Connections branch to display all the supported connection types.
Click Asynchronous Serial Ports to display the list of available ports. Note that if you choose “Redundancy” as the interface for a serial port, this port will not appear in the list of Asynchronous Serial Ports, as it will be reserved for connecting the 2 SMP Gateways that will be grouped together.
In the right pane, enter the settings for the selected serial ports. The required settings are usually provided in the device manufacturer’s reference manual:
If you are using RS-485 2-wire communication, choose RS-485. If you are using RS-485 4-wire communication, choose RS-422.
Choose the device communications settings: baud rate, byte size, parity and number of stop bits, such as 9600 baud, 8 bits, no parity, and 1 stop bit.
Choose the device hardware handshaking mode:
If the link type is RS-232, most devices do not use handshaking, so you should keep the default values: RTS to Always On, DTR to Always On, and CTS to Ignore.
If the link type is RS-422, set RTS to Always On. You shouldn’t have any problem if you keep the other default values: DTR to Always On, and CTS to Ignore.
SMP Gateway User Manual
5.5.3
If the link type is RS-485, set RTS to TX Request. You shouldn’t have any problem if you keep the other default values: DTR to Always On, and CTS to Ignore.
If you are using RS-422 or RS-485 communication, specify whether or not you will be using line terminators. Refer to your SMP Gateway installation guide for a discussion of termination resistors.
Configuring TCP/IP Master Connections TCP/IP connections are most often used by slave components to connect to control centers. However, an increasing number of modern IEDs can be connected to a substation LAN using a TCP/IP connection. To configure a TCP/IP connection for a master protocol component:
5.6
In the left pane, click Connections, and then on TCP/IP Masters, to display the list of defined connections.
In the right pane, enter the settings for the new TCP/IP connection in an empty row of the grid:
Provide a significant name for the connection
If you are setting up an SMP 8-40, specify whether you will be using board A or board B to interface with the network.
Enter the IP address of the device.
Enter the TCP port number of the device. This information is provided by the device manufacturer.
Associating a Master Protocol Instance with a Communications Link In the preceding steps, you configured a master protocol component and a communications component. Now, you have to associate the protocol component with the communications component.
SMP Gateway User Manual
• 37
To associate a master protocol instance with a communications link:
In the left pane, click Connection Usage.
In the right pane, for each master protocol instance under Master Connection Usage, select the checkbox under the appropriate connection instance.
Note: If you have several devices that share a multidrop link, each device must have a different device address.
5.7
Testing the Configuration Since the configuration of an SMP Gateway offers so many features, SMP Config tests and validates the configuration files before you load it onto the gateway. Before going any further, you should make sure your configuration is error-free. Then, you will send it to the gateway in order to test it in a real-life situation.
5.7.1
Validating and Saving the Configuration To validate the configuration:
In the Validate menu, click Validate All.
If your configuration contains any errors, messages will appear in the Messages pane, as shown next.
38 •
Correct any errors and repeat the process until the configuration is error-free.
SMP Gateway User Manual
To save the configuration on your computer:
In the File menu, click Save.
Note: You cannot save a configuration file that contains errors. This feature is intended to prevent you from inadvertently loading an invalid configuration file onto an SMP Gateway. However, you can save your configuration file if the Messages pane displays warnings only.
5.7.2
Sending the Configuration to the SMP Gateway Once the configuration file is valid, you can send it to the SMP Gateway. To do this:
Click your SMP Gateway in the SMP Manager application window.
In the Update menu, click Send Configuration File and choose your configuration file, which has been saved in the location you specified in the Gateway Properties dialog box.
After sending the file to the SMP Gateway, SMP Manager informs you that you have to restart your SMP Gateway for the new application to go into effect.
In the Restart Gateway dialog box, choose Shutdown and Restart to have the SMP Gateway restart in normal mode.
All restarts are automatically logged in the SMP Gateway’s internal log file. You can type a comment to indicate why you restarted the SMP Gateway. This comment will be added to the event log.
SMP Gateway User Manual
• 39
The SMP Gateway will go through a series of startup steps, which will be displayed in the Status column of your SMP Gateway. When startup is complete, if your configuration file is correct, the Status column will show Started, to indicate that the gateway has started normally. If your configuration file is incorrect, the Status column will indicate that there is a problem. There are a number of conditions that can prevent the SMP Gateway from activating a configuration. For instance, the hardware settings may not match the actual physical configuration of the SMP Gateway. If the gateway does not start up normally, turn to “Troubleshooting”, page 247. Now that you have a working configuration file with all the master data points, you can use the other SMP Tools and Internet Explorer to see what is going on with the SMP Gateway and with the connected device.
5.7.3
Retrieving an SMP Gateway Configuration File When you are about to send a configuration file to an SMP Gateway, as described previously, you should first retrieve the old configuration file from the SMP Gateway and store it on your PC. This will not be necessary when you first configure your SMP Gateway, but on subsequent updates, it becomes an important precaution to take. Proceed as follows:
Select the SMP Gateway in the list.
In the Update menu, click Get Configuration File.
In the Configuration Download dialog box, SMP Manager displays the available configuration files. The current configuration file is identified by the “.par” suffix, while the previous configuration file is identified by “.old”. You might also see files with the extension .txt and .ait.
5.8
Choose the .old file, and click the OK button.
In the Save As dialog box, specify the name and path where the configuration file is to be stored. The name of the configuration file on the SMP Gateway is used as the default name.
Working with SMP Config There are many time-saving features you can use to enter data in an SMP Config grid. These features are presented next.
5.8.1
Selecting Cells and Lines To select one or several cells:
40 •
Click the single cell you wish to select.
To select several cells, hold down the CTRL key while clicking the cells.
To select part of a column or part of a row, click the first cell, hold down SHIFT and click the last cell you wish to select.
SMP Gateway User Manual
To select a column or a row:
5.8.2
Click the header of the line you want to select.
To select several rows or columns, hold down the CTRL key while clicking their header.
To select a group of rows or columns in a sequential order, select the header of the first one, hold down the SHIFT key and select the last one.
Duplicating a Line Proceed as follows to duplicate a line:
Click the header of the line you want to duplicate.
In the Edit menu, click Duplicate Line.
The line is duplicated after the last line in the display. In the following example, we clicked on a line and clicked the Duplicate Line command twice, so the line appears twice at the bottom of the list.
5.8.3
Copying a Value to a Group of Cells The Change Selection command of the Edit menu allows you to copy a value from a particular cell, to one or more lines selected within the same column. To copy a value to one or more selected cells:
Click the cell to which you want to copy a value. If you are selecting more than one cell, use the CTRL key or the SHIFT key on your keyboard, as per standard Windows procedure.
In the Edit menu, click Select Cells. This makes the cells turn gray, as shown next.
SMP Gateway User Manual
• 41
Click in the cell that contains the value you want to copy. In the example, we clicked in the CI_01 Scale cell.
In the Edit menu, click Change Selection. The value is copied to the selected cells.
To deselect the cells, click Clear Selection in the Edit menu.
Note: If you have selected a group of cells and would like to add other cells to the group:
5.8.4
Select the desired cells using the CTRL key or the SHIFT key on your keyboard, per the standard Windows procedure.
In the Edit menu, click Add to selection.
Resequencing a Group of Lines Some settings are sequenced, within a given column. You may decide to remove data points, in which case you will need to remove gaps in the numbering sequence. While resequencing all the entries manually would be quite tedious, the Resequence Selection command of the Edit menu makes it easy. In the following example, the line with Index no. 7 has been deleted. All subsequent index numbers are now incorrect.
42 •
SMP Gateway User Manual
To correct the problem, proceed as follows:
5.8.5
Click the cell with Index no. 8.
Hold down the SHIFT key of your keyboard and click the last cell in the column.
In the Edit menu, click Select Cells. The cells turn gray.
In the Edit menu, click Resequence Selection. A dialog box appears, in which you must specify the starting sequence number (7) and the increment (1). The result is shown next.
To deselect the cells, click Clear Selection in the Edit menu.
Deleting an Item To delete a line in a grid:
In the right pane, click the header of the line you want to delete.
SMP Gateway User Manual
• 43
Press the Del key on your keyboard, and confirm your intention of deleting the row.
The item disappears from the grid. To delete a protocol instance:
In the left pane, click the protocol type.
The list of instances of this protocol type appears in the right pane.
In the right pane, click the protocol instance you want to delete.
Press the Del key on your keyboard, and confirm your intention of deleting the row.
The protocol instance disappears from both panes. To delete a serial port connection: By their very nature, serial port connections cannot be deleted in the same way. To delete a serial port connection, you have to reserve the corresponding serial port for another usage:
5.8.6
In the left pane, click Serial Ports.
In the right pane, choose Reserved in the Interface list of the serial port.
Using Tooltips SMP Config provides context tooltips. These tooltips are not displayed on the status bar but rather appear when you point with the mouse to a cell in any grid. This type of tooltip normally displays the editing criteria for the field. For example, it may tell you that the value must fall between 10 and 1000, that the default value is 500 ms, that the field is mandatory if a certain other field is selected, and so on. So they will assist you in editing grids. Here is a sample tooltip:
This feature is a great time and effort saver, as it spares you from having to wait until you try to validate or save your SMP configuration before finding out that you have a number of errors.
5.8.7
Searching and Replacing Points in a Configuration
5.8.7.1
Finding Points in a Configuration To help you find all the references to a point in a configuration, a search function is available in SMP Config. To access it:
44 •
SMP Gateway User Manual
5.8.7.2
From the menu Edit, select Find Points or use the shortcut CTRL+F. The Find Points dialog box appears.
In the Find Points dialog box, type the point’s name you are looking for and click the Find button. The results appear in the list below.
Select the point in the list, the application will bring you to the configuration zone of the point.
Replacing Points in a Configuration As illustrated in the precedent section, one point can be used in several situations. If you need to change the naming scheme in your configuration, simply rename the point and the other points created from it will automatically bear the new name.
SMP Gateway User Manual
• 45
6
Viewing the SMP Log Files
The SMP Gateway maintains an internal log of all significant events. Using SMP Log, you can select and view the various log files in real time. You can view, print, search and save all or any information in this application. To start SMP Log and view the SMP log files, proceed as follows:
Click your SMP Gateway in SMP Manager’s application window.
In the Tools menu, click SMP Log.
SMP Log starts up and displays the list of available logs.
6.1
Click a log in the left pane, to view its contents in the right pane.
Information Provided by SMP Log The following log files contain information that you will find useful for the configuration and maintenance of your SMP Gateway:
The Startup log records all the steps that the SMP Gateway performed when it last started. The log indicates which configuration file was loaded and which protocol components were configured and started. You should consult the startup log each time you change the SMP configuration, in order make sure it is a success.
SMP Gateway User Manual
• 47
The Reset log records the time and reason for each SMP Gateway restart. It indicates whether the reset occurred because of a power failure, a request from the front panel button, a remote request, a watchdog trip, or a fatal hardware or software problem.
The Control log records the steps that the SMP Gateway performed in response to a local or remote control request.
The Security log records all events that concern the security options such as authentication failures, file integrity check and much more.
The other SMP log files contain information that can help you and our technical support team in identifying problems.
6.2
SMP Log Features SMP Log offers you several handy features: searching, printing and saving log file, and having the information displayed in UTC or local time.
6.2.1
Searching in SMP Log To search in SMP Log:
6.2.2
From the menu View, click Search.
Type a keyword in the text box and click the Search button. All the results will become highlighted; the first one will be lighter.
To go to the next result, click Search Next in the View menu or press F3.
To go to the previous result, click Search Previous in the View menu or press F3.
Once you have found, click Cancel Search from the View menu and only the selected result will remain highlighted.
Printing a Log To print a log:
6.2.3
Select a folder.
From the menu View, click Print.
Saving a Log File To save a log file:
48 •
Select a folder.
From the menu View, select Save As. SMP Gateway User Manual
6.2.4
Type a name for the file; you can use a different extension such as .csv or .txt.
Viewing Multiple Log Folders at Once To view multiple log folders at once:
6.2.5
Select folders, using the SHIFT or the CTRL key.
The contents of all folders will be displayed altogether in the right pane, in chronological order.
Changing How Time Information is Displayed To change how time information is displayed:
From the View menu, click Time Display Options.
From the Time Display Options dialog box, select the type of display from the Time Display Format drop box: you can choose between the local time (using the PC’s time zone settings) and UTC. Normally, your SMP Gateway’s clock is set in UTC, but you can display the information using the time format you like.
SMP Gateway User Manual
• 49
7
Viewing Protocol Exchanges in Real Time
Using SMP Trace, you can view a continuous stream of protocol exchanges between the SMP and the substation devices, or between the SMP Gateway and the control center. At this stage, however, since you have only configured master protocol instances, you will only see the protocol exchanges that take place between the SMP Gateway and the substation devices. You can have the information displayed in UTC or local time, highlight the lines that contain specific keywords, and you can clear the current display. SMP Trace can generate a continuous log of all the events you are tracing, to a text file on your PC. It can also print or save to a text file, a snapshot of the traced events that occurred since the last time you cleared the display. To start SMP Trace and view the protocol exchanges:
7.1
Click your SMP Gateway in the SMP Manager application window.
In the Tools menu, click SMP Trace.
Information Provided by SMP Trace SMP Trace starts up and displays the list of available traces.
In the left pane, select the item for which you want to view the protocol exchanges.
If you click a folder, everything within the folder is automatically selected.
SMP Gateway User Manual
• 51
Using SMP Trace, you can view detailed traces of all the system activity. The following traces provide information that you will find useful during the configuration and maintenance of your SMP Gateway.
7.2
Master and Slave Protocol traces display the high-level information exchanges that occur between the SMP Gateway and the other system components to which it is connected. These application-level traces are similar to those provided by a protocol analyzer. They describe the requests sent to a device and the values retrieved. The Slave Protocols folder appears only if slave protocol instances are configured on the SMP Gateway.
Connection traces display the data being exchanged between the SMP and a device. These low-level traces describe, in hexadecimal format, the byte stream sent and received to and from a device.
SMP Trace Features SMP Trace offers you several handy features: recording traces, searching, printing and saving trace records, and having the information displayed in UTC or local time.
7.2.1
52 •
Searching in SMP Trace
From the menu View, click Search. You can also press CTRL+F.
Type a keyword in the text box and click the Search button. All the results will become highlighted, and the first one will be lighter. You can click the Pause/Resume button in the toolbar to stop the screen from scrolling; this command is also available from the View menu.
SMP Gateway User Manual
To go to the next result, click Search Next in the View menu or press F3.
To go to the previous result, click Search Previous in the View menu or press F3.
Once you have found, click Cancel Search from the View menu and only the selected result will remain highlighted.
Note: SMP Trace will keep highlighting matching results as long as you have not canceled the search. You can either deselect the binoculars in the toolbar or stop the search from the View menu.
7.2.2
Printing Traces To print currently displayed traces:
7.2.3
From the menu File, click Print.
Recording Live Traces To record live traces to a file for further analysis:
From the Record menu, select Start or click the red button in the toolbar. The Start recording dialog box appears.
You can also choose to save it inside the SMP Gateway's memory by selecting Record to SMP. For example, if you have an SMP 4 with a modem on a pole outdoors and you need to save 24 hours worth of activities, long distance costs are most of the time prohibitive. Use this option and connect again 24 hours later to pick up your data.
When you wish to stop the recording, click the red button again or click Stop in the Record menu.
SMP Gateway User Manual
• 53
7.2.4
Saving all the Scrolled Information To save all the information in SMP Trace that scrolled since opening it:
7.2.5
Select a folder.
From the menu File, select Save As.
Type a name for the file; it will be saved in the .txt format.
Changing How Time Information is Displayed To change how time information is displayed:
54 •
From the View menu, click Time Display Options.
From the Time Display Options dialog box, select the type of display from the Time Display Format drop box: you can choose between the local time (using the PC’s time zone settings) and UTC. Normally, your SMP Gateway’s clock is set in UTC, but you can display the information using the time format you like.
SMP Gateway User Manual
8
Viewing Communications Statistics in Real Time
The SMP Gateway stores a large number of real-time statistics and internal counters to help you analyze the performance of your SMP Gateway and assist you in troubleshooting your configuration. Using SMP Stats, you can view, in real time, various statistics about the communications links and about the protocol exchanges that take place between the SMP Gateway and the devices or control centers. You can have the information displayed in UTC or local time. You can also print the statistics, reset them, or save them to a text file for subsequent analysis. To start SMP Stats and view the statistics:
Select your SMP Gateway in the SMP Manager application window.
In the Tools menu, click SMP Stats.
SMP Stats starts up and displays the list of available statistics.
In the left pane, click the item for which you want to view the statistics.
The statistics are displayed in the right pane and you can see them change dynamically.
SMP Gateway User Manual
• 55
8.1
Information Provided by SMP Stats Statistics provide information on the SMP Gateway activity, which can be useful for the configuration and maintenance of the gateway itself. This information is organized as pages and folders. A folder does not contain any statistics: it is a place holder for statistics pages. When you open SMP Stats, its displays the following folders:
The Connections folder regroups counters and statistics pages about the performance of the SMP Gateway’s communications components:
The Network (TCPIP) folder contains the list of all the network connections you defined under Connections, with SMP Config. Each connection has its own statistics page.
The Serial (Asynchronous) folder contains the list of all the serial connections. As in the Network folder, there is a statistics page for each connection.
The Modem Pool folder contains the list of any modem pools and modems you may have defined with SMP Config. The statistics found in these folders provide an easy way to monitor the communications status of the SMP Gateway. For example, you can look at the Receive counter and Transmit counter values to determine whether the gateway is exchanging data with a connected device or control center. Note: The Modem Pool folder is visible only for the SMP 16, which has an integrated modem, and for an SMP 4 purchased with the modem support option. Furthermore, a modem pool must be configured on the SMP Gateway.
8.2
The Master Protocols and Slave Protocols folders contain counters and statistics about each instance of a protocol component. Each protocol component contains protocol-specific items that describe the messages exchanged with a device or control center. (The Slave Protocols folder is missing, in the previous example, because we have to define slave protocol components first.)
The System folder contains counters and statistics about the operation of the SMP Gateway hardware and software.
SMP Stats Features SMP Stats offers you several handy features: resetting statistics, printing them, refreshing them, and changing how time is displayed.
8.2.1
Resetting Statistics You can reset certain statistics, such as global RTDX or web server statistics:
56 •
From the menu View, select Reset; or click the 'X' button; or press CTRL+X.
SMP Gateway User Manual
8.2.2
Printing Statistics To print a statistics page:
8.2.3
Select a folder.
From the menu File, click Print.
Changing How Time Information is Displayed To change the display format of time-specific statistics:
From the View menu, click Time Display Options.
From the Time Display Options dialog box, select the type of display from the Time Display Format drop box: you can choose between the local time (using the PC’s time zone settings) and UTC. Normally, your SMP Gateway’s clock is set in UTC, but you can display the information using the time format you like.
SMP Gateway User Manual
• 57
9
Using a Web Browser to View Data in Real Time
The SMP Gateway’s built-in web server (eSMP) provides an easy way to view the log files and statistics using your Internet Explorer web browser. It is also the easiest way to view the analog and binary input and output points in real time. Note: The eSMP web server requires version 5.0 or a later version of the Microsoft Internet Explorer web browser. JRE (Java Runtime Environment) must also be installed on your computer. See your SMP Gateway’s installation guide for details.
9.1
Connecting to the SMP Gateway’s Website Whether it is to view the SMP Gateway’s log files, statistics or data points’ real-time data, you always proceed the same way to connect to the SMP Gateway’s website:
In SMP Manager’s application window, select your SMP Gateway.
From the Tools menu, click Internet Explorer.
Your Internet Explorer web browser will open and connect to the SMP Gateway’s web server. You may have to wait a few seconds while the web site is loaded and the Java platform is initializing. The website’s home page will eventually appears in your browser.
9.2
Navigating Through the SMP Gateway’s Website The SMP Gateway’s website has a number of tabs at the top that allow you to switch between different data views:
The Home tab gives you key information about your SMP Gateway, such as its current state, at what time it started up, and the list of master and slave protocol instances contained in your configuration.
SMP Gateway User Manual
• 59
The Analog Input, Analog Output, Binary Input, and Binary Output tabs display the current value of all the SMP Gateway’s data points.
The Logs tab displays the contents of the internal SMP Gateway log files. The data is the same as provided by the SMP Log program.
The Statistics tab displays the SMP Gateway’s real-time statistics. The data is the same as provided by the SMP Stats program.
The Commissioning Tool tab is only available when commissioning has been activated on the SMP Gateway. For more information about this feature, see “Using the Web Server’s Commissioning Tool”, page 69.
Note: If password security is enabled on your SMP Gateway, everything will be deactivated until you type a valid username and password under eSMP Login.
9.3
Applying a Filter to a Data Point Display If you click the Analog Input, Analog Output, Binary Input and Binary Output tabs, you can see all the data points change dynamically on your screen. Since there may be a large number of data points, you can use the Filter function to choose the points you want to display.
60 •
SMP Gateway User Manual
To apply a filter:
Select the tab in which you want to filter data points.
In the toolbar, type the filter criterion. It can be the device prefix, or any other text that is common to the data points you want to display.
Note: You may specify up to 5 criteria. For example, if you type smp clock, all data points that contain the words “smp” and “clock” will be displayed; others will be hidden.
Click Apply. Only the data points that contain the filter criterion in any field (such as the point’s name or address) will be displayed. The criterion text is highlighted over the point’s name.
To remove the filter:
9.4
Click Cancel. All data points of the selected tab will be displayed.
Each tab preserved its own filter information, allowing you to navigate through the different tabs and specify different filter criteria for each one of them.
Acknowledging Data Point Value Changes To help you analyze your data, the web server automatically highlights any data point that changes value, by displaying it on a gray background. The data point stays highlighted until you acknowledge the change of value. You can also have the web server automatically acknowledge value changes after a short delay. To have Internet Explorer automatically acknowledge the value changes:
Click the appropriate tab to choose the type of data.
Select the Auto Ack. checkbox located at the top right, above the data point display.
SMP Gateway User Manual
• 61
Data points will now be highlighted when their value changes and the display will return to normal after a short delay. To manually acknowledge value changes for a particular type of data point:
Click the appropriate tab to choose the type of data.
Make sure that the Auto Ack. checkbox is cleared.
Data points will now be highlighted when their value changes. They will remain highlighted until you acknowledge the change of value. To remove all highlighting:
62 •
Click Acknowledge, located at the top left above the data point display.
SMP Gateway User Manual
10
Connecting the SMP Gateway to a Control Center
Now that we have seen how to configure master protocol instances, tested the SMP Gateway configuration and viewed the collected data, we will see how to configure a slave protocol instance in order to forward the device data to a SCADA or a control center.
10.1
Creating Slave Protocol Instances When the SMP Gateway communicates with a control center, it acts as a slave and as such, needs to use a slave protocol. One slave protocol instance is required per control center. To create a slave protocol instance:
In the left pane of SMP Config, under Slave Protocols, click the protocol for which you want to add an instance.
In the right pane, type the name of the new instance at the end of the list of names, and press the TAB key.
The new protocol instance is added to the left pane, under the protocol branch you had selected. If you expand the protocol branch, SMP Config displays the protocol instance’s default settings.
10.2
Configuring Slave Protocol Instances The configuration of a slave protocol component is similar to that of a master protocol component. You choose the protocol, enter the protocol settings, and specify the data points you want forwarded to the SCADA. The following procedure describes how to configure a slave protocol instance:
SMP Gateway User Manual
• 63
In the left pane, click General, to display the list of general settings for the selected slave protocol instance.
In the right pane, enter the protocol settings. For instance, to configure a DNP3 slave component, you would provide settings such as:
The Link Address, which identifies the logical slave device. The address has to match the address used by the control center to communicate with the SMP Gateway.
The Master Link Address, which identifies the control center.
Whether or not you want to support Unsolicited Reporting.
In the left pane, click Default Variations.
In the right pane, specify how you want the data points to be reported. For example, you may want to specify that when there is a change to an analog input point, you want the change reported as a 32-bit value, with the time at which the event took place.
A complete description of the protocol-specific settings is available in individual documents, such as DNP3 Slave Protocol for example. To access the various protocol documents:
10.3
Click Start, on the Windows taskbar.
Point to Programs, then Cybectec, then SMP Tools, and then Documentation.
In the Documentation menu, click Protocols.
Subscribing to the Master Data Points Slave protocol instances subscribe to data points in the real-time database. Whenever a master protocol instance writes to the database, the slave instance retrieves the data and applies its own settings to make it compatible with the requirements of the control center protocol. When you configure a slave protocol component, you select from among all the data points defined by the master protocol components, those data points to which you want to subscribe.
In the left pane, click the slave protocol instance.
In the Tools menu, click Subscribe To.
The Subscribe to Master I/O dialog box appears.
64 •
SMP Gateway User Manual
Click in the Master I/O list, to display the list of data points defined for each master protocol instance.
Choose the data points you want to forward to the control center. Use the CTRL and SHIFT keys on your keyboard, to extend your selection.
Click the dialog box’s right arrow button.
The data points you choose are added to the Slave I/O list. If, for example, you click a binary input point in the Master I/O list, the point is added to Binary Inputs, in the Slave I/O list. Normally, a data point that has been transferred to the Slave I/O list disappears from the Master I/O list. However, if you want the transferred data points to continue being displayed in the Master I/O list:
Select the Show all enabled points checkbox.
If you change your mind, you can remove a data point from the Slave I/O list as follows:
Click the data point in the Slave I/O list.
Click the dialog box’s left arrow button.
The data point is removed from the Slave I/O list and reinserted in the appropriate data point list for the appropriate master.
SMP Gateway User Manual
• 65
10.4
Configuring the Data Points The slave component automatically converts the subscribed data points to the appropriate format for the protocol. However, you should make sure the default settings are appropriate and perform any necessary adjustments. To configure the data points:
In the left pane, click the data point type, to display a list of all the data points and their settings.
There are different settings for each protocol. However, you should at least check the address or index assigned to each data point. For instance, the following settings are provided for a DNP3 data point:
10.5
Each data point is automatically assigned an Index value according to the subscription order. You should ensure that these index values correspond to those expected by the control center.
The Event Class setting groups data points together for subsequent reporting to the control center.
Configuring the Communications Links We previously described how to configure a serial communications link for a master protocol component. The procedure is identical for a slave protocol component that uses a serial communications link. However, a slave protocol component typically uses a TCP/IP connection over a LAN, to communicate with the control center. For more information about communications link configuration, see “Configuring the Communications Links”, page 34.
10.5.1
Setting up a TCP/IP Slave Connection To configure a TCP/IP connection for a slave protocol component:
10.6
In the left pane, under Connections, click TCP/IP Slaves, to display the list of defined connections.
Enter the settings for the new TCP/IP connection in an empty row of the grid:
Specify a significant name for the connection.
Specify the TCP port number to be used.
Associating a Slave Protocol Instance with a Communications Link You now have to identify the communications link which will be used by the slave component to communicate with the control center.
66 •
SMP Gateway User Manual
To associate a slave protocol instance with a communications link:
10.7
In the left pane, click Connection usage.
In the right pane, for each slave protocol instance under Slave Connection Usage, select the checkbox under the appropriate connection instance.
Validating and Activating the Configuration You can now validate the configuration, save it on your computer, send it to the SMP Gateway, and restart the gateway in order to activate the configuration. The procedures for doing this were described earlier, in the following sections:
10.8
“Validating and Saving the Configuration”, page 38.
“Sending the Configuration to the SMP Gateway”, page 39.
Testing the Configuration The SMP Gateway’s configuration now contains a slave component. Slave components are more difficult to test than master components, since they only process data in response to a request from a control center. You may find the following guidelines useful in determining whether the slave component is working properly:
Using SMP Log, check the Startup log, to see whether the slave component was started correctly.
Using SMP Stats, open the Slave Protocols folder and check whether the slave component is processing any data.
Using SMP Stats, open the Connections folder, and check whether any data is being exchanged through the slave’s communications link.
Using SMP Trace, open the Slave Protocols folder, and check whether the component is receiving requests from the control center.
Using SMP Trace, open the Connections folder, and check whether any data is being exchanged through the slave’s communications link.
See the following sections for instructions on how to proceed to view the information:
“Viewing the SMP Log Files”, page 47.
“Viewing Protocol Exchanges in Real Time”, page 51.
“Viewing Communications Statistics in Real Time”, page 55.
“Using a Web Browser to View Data in Real Time”, page 59.
SMP Gateway User Manual
• 67
A particularly effective way to test a slave protocol instance is to use the SMP Gateway itself to set up a master protocol instance to poll the slave. Using this approach and the SMP Tools, you can easily examine the effect of the various protocol features, such as report by exception. You can also use the web server’s commissioning tool, as described in the next chapter.
68 •
SMP Gateway User Manual
11
Using the Web Server’s Commissioning Tool
The SMP Gateway’s built-in web server also provides a commissioning tool that simplifies the engineering effort required for the implementation and the integration of a substation. It is intended to help technician(s) and/or engineer(s) testing the SMP Gateway’s configuration and connectivity with the substation devices and the SCADA. The web server’s commissioning tool, when configured and activated, is accessible through a web browser, the same way than for viewing data in real-time. It may be enabled by users that have the System Management privilege, and the operation privilege is required for users that will perform the commissioning operations, which are essentially the following:
Forcing an analog/binary input point to a specific value/state. This operation allows the validation of the configuration of the SMP Gateway’ slave protocol and the SCADA, by verifying if all the gateway’s data points are correctly mapped on both sides, if minimum/maximum values are correctly handled, etc.
Performing a control operation on an analog/binary output point. This operation allows the validation of the master protocols’ configuration, by verifying if the IEDs’ data points are correctly configured in their corresponding masters, if scale and offset settings are correctly specified for each data point, etc.
For example, by forcing each data point of an IED on the SMP Gateway, the technician/engineer can verify that these points are correctly configured, and that transitions/changes for these are correctly handled by the SCADA. On the other side, by executing control operation directly on the SMP Gateway, instead of performing them on the SCADA, the technician/engineer can validate that the masters’ output points are correctly configured.
11.1
Configuring an SMP Gateway for Commissioning If you intend to use the web server’s commissioning tool on your SMP Gateway, you must first enable it in the gateway’s configuration, using SMP Config. The configuration process is quick and simple, as described here:
In SMP Manager’s application window, select your SMP Gateway.
SMP Gateway User Manual
• 69
From SMP Manager’s Tools menu, click SMP Config.
In SMP Config, under the System branch, select Web Server. If the Web Server instance has not been created yet, type a name in the blank Name text box, and then click again the Web Server branch.
Under the Web Server instance branch, select the General branch.
Select the Commissioning Tool checkbox.
Save the configuration file and send it to the SMP Gateway, using SMP Manager.
Restart the SMP Gateway.
Your SMP Gateway now supports the commissioning feature, which still need to be activated by a user that has the System Management privilege, as described in the following section.
11.2
Activating the Commissioning Feature Commissioning is not a process that is performed frequently. Done once when the SMP Gateway is deployed in the field, it may be executed later, during maintenance sessions or when new devices are added to the substation’s configuration. Before letting the user perform commissioning in the field, a user that has the System Management privilege must activate the commissioning feature. Usually, this user would first make sure that all safety precautions have been taken, that the SMP Gateway is really going through maintenance and that the commissioning process may occur as planned. By activating the feature, the operator in charge of commissioning can then open a commissioning session, and do his work. To activate the commissioning feature:
Connect to the SMP Gateway’s website, by following the procedure described in section 9.1, page 59.
At the website’s home page, under Commissioning Tool, click the Enable button on the left.
The button’s text will change to Disable, and the button on the right will become available. The operator may now open a commissioning session. Note: Commissioning will remain active until the left button is clicked again to deactivate it. If the SMP Gateway is restarted, the commissioning feature’s activity state will be persisted: if it was active prior to the restart, it will be active at startup and vice-versa. However, opened sessions are closed.
70 •
SMP Gateway User Manual
11.3
Opening a Commissioning Session Once the commissioning tool has been activated on the SMP Gateway, any user that has the Operation privilege can open a commissioning session. Proceed as follows:
Connect to the SMP Gateway’s website, by following the procedure described in section 9.1, page 59.
At the website’s home page, under Commissioning Tool, click the Enable button on the right.
The Enable Commissioning Tool dialog box will appears.
Click Yes.
The button’s text will change to Disable and the Commissioning Tool tab is now available. To use the commissioning tool, simply click the Commissioning Tool tab.
SMP Gateway User Manual
• 71
Note: The commissioning session will remain open as long as the web browser will remain connected to the website, or until the user click again the button on the right. The session is also closed when the SMP Gateway restarts.
11.3.1
The Commissioning Tab The Commissioning tab looks quite similar to other data points tabs. It is divided in three sections:
The toolbar, which is located at the top, Is used for filtering, forcing, control operation and acknowledging purposes. It is an extended version of the toolbar available in other data point tabs, and its content varies in function of the type of the selected data point(s). The following figure shows the toolbar for a binary input point:
The data points list. Displays the data points of every protocol instance or subsystem of the SMP Gateway. This implies that a data point that is configured in a master protocol and in two slave protocols will be listed three times.
The Messages pane, which is located at the bottom. Displays a log of all commissioning tool’s operations, statuses and errors.
The data points list’s column are mostly the same that are displayed in the other data points tabs. The following columns are specific to (or different in) the commissioning tab:
Instance. The name of the protocol instance or subsystem to which the data point belongs.
Type. The data point’s type.
Integer Value. Usually, the integer value of an analog point is displayed here. In the commissioning tool tab, it is also used for the state of a binary input point, as the State column is only used for binary output points.
State. As stated above, in the commissioning tool tab, this column is used to display the current state of a binary output point.
The various commissioning operations that you can perform are described in the following sections.
72 •
SMP Gateway User Manual
11.3.2
Forcing an Input Point The most common commissioning operation is to force an input point to a specific value/state, and to verify that the forced value is correctly reported to the SCADA. To force an input point to a specific value:
In the data points list, select the input point you want to test.
In the commissioning toolbar, specify the forced value/state:
If it is an analog input point, select whether to change the Integer or Float value of the point, using the Force drop-down list, and then type the forced value in the edit box.
If it is a binary input point, select the desired state using the Force drop down list.
Still in the commissioning toolbar, click Execute to force the point to the specified value.
In the Messages pane, you should see two new messages: the first one indicates that the force operation has been performed; the second displays the operation’s result.
If the operation was successful, the status column will display Forced (Test) for the data point.
If the operation was successful and both the SMP Gateway and the SCADA are correctly configured, the value/state changes should be reported correctly to the SCADA.
Note: You cannot force the value/state of multiple data points simultaneously.
11.3.3
Un-Forcing an Input Point To un-force an input point:
In the data points list, select the forced input point.
In the commissioning toolbar, click Unforce.
The point will revert to its current value/state. To un-force multiple input points simultaneously:
In the data points list, select more than one input points that have been forced.
In the commissioning toolbar, click Unforce All.
In the message box that appears, click Yes to un-force the selected input points.
Note: As stated in the message box, this operation may take a while, depending on the number of input points to un-force. Also, data points included in the selection that have not been forced will not be modified by this operation.
SMP Gateway User Manual
• 73
You can also un-force all forced data points, by clicking Unforce All in the commissioning toolbar.
11.3.4
Performing a Control Operation When an IED support control operations, it is important to validate that its related output points are correctly configured on both the SCADA and the SMP Gateway sides. Such validation is achieved in two steps, for each output point:
Perform a control operation using the Commissioning Tool, to make sure that the point is correctly configured in the SMP Gateway’s master configuration and that the control result is correctly reported to the SCADA.
Perform a control operation from the SCADA standpoint, as a final validation to make sure that both the SCADA and the SMP Gateway’s slave configurations are correct.
To perform a control operation using the commissioning tool:
In the data points list, select the output point you want to test.
In the commissioning toolbar:
Specify the control type using the Control drop-down list.
Note: If the output point supports select and execute control types, remember to test both control types.
Specify the control value:
If it is an analog output point, select the control value type (Integer or Float) using the appropriate drop-down list, and then type the control value in the edit box.
If it is a binary output point, select the control state (Pulse, Open or Close) using the appropriate drop-down list. If you selected Pulse, type the pulse’s duration, in milliseconds, in the edit box.
Click Execute to perform the control operation.
In the Messages pane, you should see two new messages: the first one indicates that the control operation has been performed; the second displays the operation’s result.
If the operation was successful and both the SMP Gateway and the SCADA are correctly configured, the control operation’s result should be reported correctly up to the SCADA.
Note: You cannot perform control operations on multiple output points simultaneously.
As mentioned earlier in this section, the validation of the output point`s configuration at the SCADA and in the SMP Gateway is achieved by performing a control operation directly from the SCADA. Even if it does not involve the commissioning tool, the web browser can still be useful, since it gives access to the SMP Gateway’s log files, including the Control log file. 74 •
SMP Gateway User Manual
Various entries are added to the Control log when a control operation is executed on the SMP Gateway, making it an essential resource for this portion of the commissioning task. To consult the SMP Gateway’s Control log entries in the web browser:
11.3.5
Click the Logs tab.
In the left pane, select the Control log file. All the log entries will appear in the right pane, the oldest entry being displayed at the top.
Closing the Commissioning Session Even if a commissioning session automatically ends when the web browser is closed, you should close the session manually. Proceed as follows:
11.4
In the web browser, click the Home tab.
Under Commissioning Tool, click the Disable button on the right. The Disable Commissioning Tool dialog box will appears.
As stated in the dialog box, the commissioning tool will restore all forced points to their acquisition values. Click Yes. The button’s text will change to Enable and the Commissioning Tool tab will no longer be available, until a new session is opened..
Deactivating the Commissioning Feature When commissioning has been performed on the SMP Gateway, the user that has System Management privilege must deactivate the commissioning feature for obvious safety reasons and to ensure that the system will function as expected. To deactivate commissioning:
Connect to the SMP Gateway’s website, if you are not already connected, by following the procedure described in section 9.1, page 59.
At the website’s home page, under Commissioning Tool, click the Disable button on the left. The button’s text will change to Enable, and the button on the right will become unavailable.
SMP Gateway User Manual
• 75
76 •
SMP Gateway User Manual
12
Interconnecting SMP Gateways
It is possible to connect two SMP Gateways together, by the means of the Interconnections feature. One advantage of such connectivity is the ability to concentrate data from multiple SMP Gateways, which is very convenient considering the limited amount of IEDs that can be monitored by a single SMP Gateway. You can also have a setup where the SCADA has only access to one SMP Gateway (for security reasons, for example), while the substation actually contains much more. It would be possible to interconnect two SMP Gateways using another protocol, such as DNP3. However, it would require a considerable configuration effort, which is not the case with Interconnections: data point information and configuration is exchanged between both SMP Gateways. The Interconnections feature and standard acquisition are based on the same master/slave principles. For Interconnections, the SMP Gateway that provides the data is the slave gateway, and the one that retrieves the data from the other is the master gateway. So, to connect two gateways together, a slave Interconnections instance must be configured in the slave gateway, and a master Interconnections instance must be configured in the master gateway. Consider a substation configuration where an IED’s data is retrieved by an SMP Gateway called Cedar Creek (i.e. the slave gateway). An SMP Gateway called Park Avenue (i.e. the master gateway) needs to get connected to it to make the IED data available to the SCADA. This example is presented in the following illustration:
SMP Gateway User Manual
• 77
SCADA DNP3 MASTER
DNP3 SLAVE PARK AVENUE INTERCONNECTIONS MASTER INTERCONNECTIONS SLAVE CEDAR CREEK MASTER
SLAVE
IEDs
If you move from IEDs up to the SCADA, you will see how the master-slave configuration must be designed for this to work. The main steps are the following, using SMP Config:
In the device's master (here, the Cedar Creek SMP Gateway), create an Interconnections slave.
Create the Interconnections slave’s connection and associate it with the slave.
In the SCADA’s slave (in this example, the Park Avenue SMP Gateway), create an Interconnections master.
In the Interconnections master, import the data points from the slave SMP Gateway’s configuration file.
Give the data points a prefix to identify their originating SMP Gateway when you see their readings in the web browser.
Create the master’s connection and associate it with the master.
The following sections explain these steps in details.
12.1
Configuring the Slave SMP Gateway The first step to interconnect your SMP Gateways is to signify the existence of the master SMP Gateway in the slave SMP Gateway’s configuration. Follow these steps:
78 •
Open SMP Manager.
SMP Gateway User Manual
Select the slave SMP Gateway (in the example, the Cedar Creek SMP Gateway).
From the Tools menu, select SMP Config.
Configure the Interconnections slave instance:
In SMP Config, under Slave Protocols, select Interconnections.
In the right pane, under Name, type a name for the interconnections slave instance, and then click again the Interconnections branch.
A new branch will appear under Interconnections, named after what was just typed. Expand it and select the Clients branch.
Under Type, select SMP Gateway. Under Client name, type the client name (you can use the gateway’s name, which in the example is Park Avenue). This name should be unique for a given type of client.
Clear the Control Enabled checkbox if you do not want to allow control operations through the interconnection. This is required if you do not want to allow SCADA control operations of an IED through the interconnected SMP Gateways.
If you intend to exchange files between the interconnected gateways, you must define a single client for each master gateway connected to the slave gateway. Each client must be defined on a single line, as follows:
Type a Client Name.
Select the Permanent Session checkbox.
Make sure the Maximum Clients parameter is set to 1.
To learn how to specify the file exchange-specific settings, see “Retrieving files from another SMP Gateway”, page 122.
Configure the slave’s connection:
SMP Gateway User Manual
• 79
Collapse the Slave Protocol branch and expand Connections, and then select TCP/IP Slaves.
Under Name, type the TCP/IP slave's name. For example, you can name it Interconnections.
Under Port, type 6655.
Note: Port 6655 is recommended for Interconnections. You can use another port, but make sure you specify the same in the master SMP Gateway’s configuration.
80 •
Configure the connection usage:
Click the Connection Usage branch.
In the right pane, under Slave Connection Usage, you will see the Cedar Creek Slave you created in the previous steps. Scroll to the right and select the checkbox under the TCP/IP slave's name (in the example, the name is Interconnection).
Save the configuration file and close SMP Config.
Send the configuration file to the SMP Gateway using SMP Manager (see “Updating the Configuration File” on page 225).
Restart the SMP Gateway.
SMP Gateway User Manual
Note: As all data points are always made available by an Interconnection slave instance, the slave’s configuration does not need to be updated when a master’s configuration is modified (for example, when a data point is added/removed) or even when a new master is added to the SMP Gateway configuration.
12.2
Configuring the Master SMP Gateway Now that you have configured the slave SMP Gateway as an Interconnections slave, you will configure the master SMP Gateway as an Interconnections master. Follow these steps:
Open SMP Manager.
Select the master SMP Gateway (in the example, the Park Avenue SMP Gateway).
From the Tools menu, select SMP Config.
Configure the Interconnections master:
In SMP Config, under Master Protocols, select Interconnections.
In the right pane, under Name, type the slave SMP Gateway's name (in our example, Cedar Creek), and then click again the Interconnections branch.
A new branch will appear under Interconnections, named after what was just typed. Expand it and select the General branch.
In the right pane, under Device Prefix, type the prefix that will precede the name of all data points gathered by the Interconnections master, to distinguish them from the data points of other masters that may be configured on the same SMP Gateway. For example, you can type PA_, where PA stands for Park Avenue, the example’s master SMP Gateway. Note: The device prefix should be as short as possible, to respect the maximum length allowed for data points.
Under Client Name, type the same name you specified in the clients list of the Interconnections slave (in this example, Park Avenue).
Import the slave SMP Gateway’s data points in the master’s configuration:
From the Tools menu, select Import Points from File.
Select the configuration file for the slave (ex. Cedar Creek SMP Gateway's file would be Cedar Creek.par), and then click Open.
The Update Data Points dialog box will appear, listing all the possible data points that can be "interconnected".
SMP Gateway User Manual
• 81
82 •
If some data points are not required in the master SMP Gateway’s configuration, clear the corresponding checkboxes.
Click Update to close this dialog box and to add the points to the configuration.
Configure the master’s connection:
Collapse the Master Protocol branch and expand Connections, and then select TCP/IP Masters.
Under Name, type the TCP/IP master's name. For example, you can name it Interconnection.
Under IP Address, type the slave SMP Gateway's IP address.
Under Port, type 6655. If you specified a different port for the Interconnections slave, type this port number.
Configure the connection usage:
Click the Connection Usage branch.
In the right pane, under Master Connection Usage, you will see the Cedar Creek master you created in the previous steps. Scroll to the right and select the checkbox under the TCP/IP master’s name (in the example, the name is Interconnection).
Save the configuration file and close SMP Config.
Send the configuration file to the SMP Gateway using SMP Manager (see “Updating the Configuration File” on page 225).
Restart the SMP Gateway.
SMP Gateway User Manual
12.2.1
Updating the Interconnections Master’s Data Point List When the slave SMP Gateway must monitor new IEDs or more information from actual IEDs, no update is required for the slave SMP Gateway’s Interconnections instance. This is not the case for the master SMP Gateway, but the configuration effort is minimal. The Interconnections master’s data point list is updated nearly the same way than it is created the first time. Proceed as follows:
In SMP Config, under Master Protocols, select Interconnections, and then select the master instance.
From the Tools menu, select Import Points from File.
Select the configuration file for the slave SMP Gateway, and then click Open.
The Update Data Points dialog box will appear, listing:
points that are available and that are not actually “interconnected”;
interconnected points are no longer available on the slave SMP Gateway;
interconnected points for which the settings (ex. Scale, offset, etc.) have changed.
Using the checkboxes that are found beside every data points, select the changes you want to apply to the master’s configuration:
Under Points to add, clear the checkboxes of points that you still do not want to be interconnected.
If you want to keep, in the master’s configuration, points that are no longer interconnected, clear the corresponding checkboxes under Points to remove. This may happen if a point is temporarily unavailable on the slave SMP Gateway.
If you want the settings of modified interconnected points to remain unchanged, clear the corresponding checkboxes under Points to modify.
Click Update to close this dialog box and to add the points to the configuration.
Save the configuration file and close SMP Config.
Send the configuration file to the SMP Gateway using SMP Manager (see “Updating the Configuration File” on page 225).
Restart the SMP Gateway.
SMP Gateway User Manual
• 83
12.3
Verifying the Interconnection Between the SMP Gateways To verify if both SMP Gateways have been properly interconnected:
84 •
Launch SMP Manager.
Select the master SMP Gateway (in our previous example, it is the Park Avenue SMP Gateway).
From the Tools menu, select Internet Explorer. The web browser will connect to the gateway’s web server (see “Using a Web Browser to View Data in Real Time”, page 59 for more information about the SMP Gateway’s web features).
If the gateways are correctly interconnected, you will see the slave gateway’s data points in the browser. Each data point will be preceded by the prefix you defined in the master gateway’s configuration. If the IEDs are correctly connected to the slave SMP Gateway, the displayed status of each interconnected data point should be OK.
SMP Gateway User Manual
13
Security
To derive full benefits from IED integration, substation data must be available to users at enterprise level. However, widespread data access can become an important security risk if it is compromised. In August 2003, the North American Electric Reliability Council (NERC) issued the NERC 1200 Urgent Action Cyber Security Standard in order “To reduce risks to the reliability of the bulk electric systems from any compromise of critical cyber assets (computers, software and communications networks) that support those systems.” The NERC 1200 standard evolved into NERC 1300, and is now known as NERC CIP-002-1 to CIP-009-1 Cyber Security Standards. These standards describe measures that utilities will have to implement, as well as a strict timeline for implementation. This chapter describes the advanced security features that Cooper Power Systems has implemented since version 4 of the SMP Gateway software and tools, in order to provide utilities with a secure, NERC-compliant, solution to integrate their substation devices. It then takes you through the steps required to customize the security settings to suit the needs of your organization, and provides some general guidelines on setting up a secure substation LAN.
13.1
Meeting NERC CIP Requirements The Cybectec SMP Gateway helps you meet NERC requirements by providing secure access to substation devices. Its sophisticated software includes the following security features:
Authentication and authorization — Each user is authenticated by the SMP Gateway via a user name and a password. Strong passwords, individual user accounts, user groups, and detailed group permissions protect critical system functions from unauthorized access. All access attempts are logged, and accounts are locked out in the event of multiple failed attempts.
Protection from substation LAN security breaches — The SMP Gateway is protected by a built-in firewall and a built-in VPN server. All TCP/IP ports are blocked, except those required for control center communications and SMP Gateway status monitoring. All communications between the SMP Gateway and the SMP Tools goes through an encrypted VPN tunnel, even through active passthrough connections.
SMP Gateway User Manual
• 85
Monitoring and locking of remote connections — Modem and passthrough access is continuously monitored, and can be enabled or disabled by the control center. All accesses are logged and limited to authorized users.
Integrity checking — All SMP Gateway software and firmware components are digitally signed in order to ensure their authenticity and integrity. All executable files are also continuously monitored to prevent execution of unauthorized code.
13.2
Substation Network Security Considerations
13.2.1
Setting Up a Secure Substation LAN Security, as implemented on the SMP Gateway, is not a substitute for full network security that includes properly configured firewalls. It can be argued that if unauthorized users get as far as trying out the SMP Gateway’s security features, there has already been a security breach at some other level. The goal of the SMP Gateway’s built-in firewall, simply stated, is to minimize the risk of unauthorized access (or network traffic) to internal components on the PCN or SCADA systems. The substation LAN is a critical part of a utility’s network. To ensure its integrity, it must be isolated as much as possible from the outside world. Ensuring the security of the substation LAN is a complex subject beyond the scope of this document. However, we will provide in this section some general guidelines on setting up a secure substation LAN. A corporate LAN provides a number of access points to the outside world and is exposed to a variety of threats through its connection to the Internet, external mail servers and file transfers, which may contain viruses. If there is a direct connection between the corporate LAN and substation LANs, the substation is not secure. A significant improvement is the use of firewalls with the ability to establish a number of demilitarized zones (DMZ) between the enterprise and process control networks. Each DMZ holds a separate "critical" component, such as the data historian, the wireless access point or remote and third party access systems. In effect, the use of a DMZ-capable firewall allows the creation of an intermediate network often referred to as a process information network (PIN). Creating a DMZ requires that the firewall offer three or more interfaces, rather than the typical public and private interfaces. One of the interfaces is connected to the enterprise and the second, to the PCN/SCADA network; the remaining interfaces are connected to the shared or insecure devices, such as the data historian server or wireless access points. To isolate the substation LAN, you should take the following precautions:
There should be no email access.
There should be no Internet access.
There should be no direct connection to the corporate LAN.
Furthermore, a redundant path should be provided between the SCADA and the substation, to ensure continued operation in the event of a failure of the corporate WAN. A dedicated communications line is often maintained for this purpose.
86 •
SMP Gateway User Manual
A firewall must be used to isolate the substation LAN from the corporate WAN. The firewall should be configured to block all ports and connections except those that are absolutely necessary for the operation of the substation. For instance, the firewall could be set up to accept traffic between the SCADA and the SMP Gateway only. The firewall could also be configured to limit traffic to a single port, such as that used by a DNP3 communications link. However, note that such a security policy would prevent the use of the SMP Tools outside the substation.
13.2.2
Using SMP Tools through a Substation LAN Firewall Cybectec SMP Tools use Microsoft DCOM technology. This technology is designed to be used on a LAN. There are two strategies available to use DCOM through a firewall.
The most secure approach is to establish a VPN (Virtual Private Network) connection between the substation LAN and the client workstations on the corporate LAN. A VPN encapsulates and encrypts network messages before forwarding them to the recipient. You will not need any special setup when installing the SMP Tools. This approach will also secure access by any other tools.
If you cannot use a VPN, you will need to open the necessary ports for DCOM on the firewalls and routers that connect to the corporate LAN. Here is the list of ports and port ranges that you have to open in the substation LAN firewall, to let a PC on one side of the firewall communicate with an SMP Gateway on the other side of the firewall: For access when not using VPN, open Application
Port
Protocol
FTP server
21
TCP
Telnet
23
TCP
SMP Status
23
UDP
Web server
80
TCP
RPC server and DCOM
135
TCP
DCOM
1024 to 1124
TCP
SMP maintenance server
49152
TCP
Optional ports, using VPN or not Application
Port
Protocol
SNMP server
161
UDP
SNTP server
123
TCP
SMP Gateway User Manual
• 87
CoDeSys server
1200
TCP
Passthrough server
32500
TCP
Application
Port
Protocol
SMP Status
23
UDP
PPTP (VPN)
1723
TCP and UDP
PPTP (VPN)
-
GRE
If using VPN, open
Here is a list of the most commonly used ports for RTU and SCADA communication: SMP Config Protocol
Port
DNP3
20000
IEC 60870-5-104/103
2404
IEC 61850
102
ICCP
102
MODBUS
502
If you configured system folders on your SMP Gateway (see “Defining System Folders”, page 119) and the Windows XP or Windows Server 2003 built-in firewall is enabled on your PC, you must also open the following ports:
445 (TCP protocol).
137, 138 and 139 (UDP protocol), if you are running NETBIOS on your network.
If you are using SNMP, you will also need to open the following ports:
GET and SET commands go through port number 161.
SNMP traps go through port 162.
IMPORTANT: This configuration will work only if your network DOES NOT use address translation. Check with your network administrator.
88 •
SMP Gateway User Manual
13.3
Extending the SMP Gateway Security Model The SMP Gateway security model is effective « locally »: security settings are stored in the SMP Gateway, which is also responsible for security processes like authentication, and features such as the firewall and VPN connections. You may extend the SMP Gateway security model by purchasing Cybectec Security Server, which is part of Cybectec Enterprise Solutions. The Cybectec Security Server provides a global security model, bringing it up to the corporate level and increasing access rights control and flexibility. Note: Cybectec Security Server’s global security model is out of the scope of this document. For more information, contact your local COOPER Power Systems representative. The remaining sections of this chapter explain how to configure the SMP Gateway’s local security.
13.4
Managing the Security Database of One or More SMP Gateways
13.4.1
Getting Started The following sections will take you through the steps required to customize your SMP Gateway configuration, in order to meet the security policy of your particular organization. To create a secured system, you need to build a database describing allowed users’ name, their password and how many password errors they are allowed to make before being locked out. Every company has its own security criteria and the Cybectec software lets you configure it accordingly. When the database is built and security is turned on, only the users in the list will be allowed to access the gateway. After setting up the authentication policy, establish a VPN connection to open a connection with the SMP Gateway before installing a firewall. Then, you should set up a firewall. A firewall is a system that blocks all communications from outside the company’s secured network. It protects the system against intrusion, and especially against unwanted access. Once the firewall is in place, you can then allow access for the IP addresses of the SCADA and other such systems to specific TCP services (ports). Additionally, the SMP Gateway’s built-in security does not allow an unsigned file in: it has to be signed by Cooper Power Systems to be allowed in the gateway. More information about this concept is given in section “File certification and integrity checking”, page 102. Setting up your custom security database involves the following steps:
Defining your authentication policy.
Customizing the various user groups and privileges.
Identifying your users, setting their passwords, and assigning them to user groups.
Validating and saving the security database on your PC.
SMP Gateway User Manual
• 89
Sending your security database to one or more SMP Gateways.
In this section, you will also learn how to perform the following actions:
13.4.2
Retrieving the security database of an SMP Gateway and storing it locally.
Disabling the security database of one or more SMP Gateways.
Unlocking a user account that has been locked out following failed login attempts.
Viewing the security log.
Accessing the Login Information Dialog Box When you start SMP Manager, you need to login to edit the security. If the Login Information dialog box is not displayed upon startup, here is how you can access it:
In the File menu, select Change Current Login.
The Login Information dialog box appears.
If security is configured on the gateway, logging in will acknowledge your rights from a list of authorized users so you can change settings. It is then highly recommended to check Always show this dialog box at startup, because if you need to change settings you will already be logged in with the rights to do so. You will automatically be prompted for your credentials whenever you start the application. If you clear the Always show this dialog box at startup checkbox, you will no longer be prompted at startup. It is more practical if no security is configured, and if it is not planned in a near future.
13.4.3
Displaying an Appropriate Use Banner at Login NERC CIP standards require the display on the user screen of an appropriate use banner upon each interactive access attempt. SMP Manager allows this in the Login Information dialog box:
90 •
Create a text file named Appropriate Use Notice.txt in the folder \Program Files\Cybectec\SMP Tools\Manager\.
In the text file, type the text required by the security policies of your company.
SMP Gateway User Manual
When you restart SMP Manager, the Login Information dialog box will contain the message you just typed in the text file.
The following is an example:
13.4.4
Defining your Authentication Policy Your authentication policy forms an integral part of your security database. It specifies which login requirements a user has to meet in order to be authenticated. It also specifies whether the user account is to be locked out after a certain number of failed login attempts within a certain number of minutes, and whether the account is to be automatically unlocked after a certain amount of time.
To define your authentication policy for the very first time and assign a name to your security database:
Log into SMP Manager (see “Starting SMP Manager and Logging On”, page 21).
The user name and password you type will automatically be assigned security management privileges. This will allow you to set up your authentication policy and your user groups and privileges.
From SMP Manager’s Security menu, click Edit Local Security Database.
The Authentication Policy dialog box appears, as shown in the next illustration, and you are ready to enter the information. To modify your authentication policy on subsequent occasions:
Log into SMP Manager with an authorized username and password. Only a person with security management privileges can modify the authentication policy.
In the Security menu, select Edit Local Security Database.
The Local Security Database Editor window appears.
SMP Gateway User Manual
• 91
In the Security menu of the Local Security Database Editor window, select Authentication Policy.
The Authentication Policy dialog box appears.
The dialog box contains the following elements: Element
Description
Security Configuration
This section of the dialog box provides a description of the security database, and shows when security database was last modified.
Description
Use this box to enter a meaningful description for your security database. This description will appear on the title bar of the Security Database Editor window.
Modified by
This read-only box indicates which SMP Manager user last modified the security database.
Date modified
Password
Minimum password length
92 •
This read-only box indicates the date and time when the security database was last modified. This section of the dialog box specifies the rules that passwords must meet when users set their new passwords.. Specifies the minimum number of characters that a password must contain.
SMP Gateway User Manual
Element Password must meet complexity requirements
Account Lock
Enable account lock
Description If selected, specifies that a password must contain characters from at least 3 out of the following categories:
alphabetic high caps
alphabetic small caps
numeric
special characters.
This section of the dialog box specifies whether a user account is to be locked out from SMP Gateway access if the user fails to log in properly and if so, what are the locking and unlocking parameters. If you select this checkbox, user accounts will be locked out if the user fails to log in properly. The parameters that follow define the locking and unlocking rules. Note: User accounts of the Administrators group may only be locked out if the Enable SMP’s administrator account lock checkbox is also selected (see below).
Maximum number of failed login attempts
Specifies the number of times a user can enter incorrect login information before its account is locked out.
Lock account if max failed logins within
The system will lock out the user account if the user makes the maximum number of failed login attempts within the number of minutes specified here.
Activate automatic account unlock
If selected, indicates that a locked user account will be automatically unlocked by the system after a certain amount of time (see Remove lockout after, below).
Remove lockout after
Enable SMP’s administrator account lock Remove administrator lockout after
The number of minutes after which a locked user account is automatically unlocked by the system. If selected, indicates that accounts of the Administrators group are also subject to account locking. The number of minutes after which a locked administrator user account is automatically unlocked by the system.
Modify the authentication policy to suit your needs, and then click OK.
The dialog box closes. The description of your security database appears in the title bar of the Security Database Editor window, and your authentication policy goes into effect as soon as it is sent to the concerned SMP Gateway(s).
SMP Gateway User Manual
• 93
13.4.5
Groups and Privileges In the following table, you will find default user groups and privileges. You can change a group's privileges at will; of course, you have to upload the security database to the SMP Gateway afterwards. Note: If you remove privileges, you must notify the concerned groups or users; otherwise, they will fill up the security log with access denial messages if they keep trying to access the gateway.
Privilege
Description
Groups
Security Management
Update security database: users, groups, and privileges; unlock user accounts.
Administrators
System Management
Update firmware, software, license and components; configure redundancy, firewall, VPN, RAS, SNTP, and SNNP; access Telnet and FTP servers.
Administrators
Configuration
Update the SMP Gateway’s configuration file.
Administrators, technicians.
Read the SMP Gateway’s configuration file only.
Administrators, technicians, operators.
Diagnostic
Use the SMP Gateway diagnostics tools.
Administrators, technicians, operators.
Device maintenance
Perform direct IED maintenance via passthrough connections.
Administrators, protection engineers.
Monitoring
Monitor and obtain web access to the SMP Gateway’s central database.
Administrators, technicians, operators, guests.
Operation
Perform control, tag management and force operation on I/O points.
Administrators, operators.
Remote access
Obtain remote access via dial-up or VPN.
Administrators, technicians, protection engineers, operators.
Read only
13.4.6
Editing User Groups and Privileges Initially, your security database includes the following elements:
94 •
One predefined user, namely an administrator with full privileges.
5 predefined user groups, each with predefined privileges. Privileges are described in the Local Security Database Editor, and in the “Groups and Privileges” section, above.
SMP Gateway User Manual
You may want to add, delete or rename the user groups and change their privileges to reflect the security policy of your particular organization. Proceed as follows:
From SMP Manager’s Security menu, click Edit Local Security Database.
The Local Security Database Editor window appears. If you click a user group in the left pane, the right pane shows the privileges assigned to this group and gives a description of each privilege.
To rename a group:
In the left pane, select the group to rename.
In the Group menu, select Rename.
Type the new name.
Note: You cannot rename the Administrators group.
To delete a group:
In the left pane, select the group to delete.
In the Group menu, select Delete.
You will be advised if there are any users assigned to the group you are about to delete. Note: You cannot delete the Administrators group.
To create a new group:
In the Group menu, select New.
Type the name of the new group.
SMP Gateway User Manual
• 95
You cannot create, delete or rename privileges. However, you can choose which predefined privileges you want to assign to a particular group. To do this:
13.4.7
In the left pane, select the group.
In the right pane, select desired privileges’ checkboxes for this group. Clear other privileges’ checkboxes.
Managing User Groups and Privileges You will now identify the users that are authorized to access the SMP Gateway, and you will assign each user to one or more groups. To create a new user:
In the User menu, select New.
Type the name of the new user.
To rename a user:
In the left pane, select the user to rename.
In the User menu, select Rename.
Type the new user name.
To delete a user:
In the left pane, click the user to delete.
In the User menu, select Delete.
Note: You cannot delete the user called “Administrator”. To assign a user to one or more user groups:
96 •
In the left pane, select the user.
In the right pane, select the groups the user will be assigned to. For example, in the following illustration, user “Matt” is assigned to the “Protection Engineers” group.
SMP Gateway User Manual
To assign a password to a new user or to change the password of an existing user:
In the left pane, select the user.
In the User menu, select Set Password.
In the Set Password dialog box, type and confirm the new password.
Note: The first time you edit the security database, we strongly suggest that you rename the user called Administrator, since the name is so revealing that it could open the door to a serious security breach. For the same reason, we also recommend that you immediately assign a password to that user.
13.4.8
Validating and Saving the Security Database Your security database, which includes your authentication policy and the users and groups you have defined, is automatically validated and stored locally on your PC when you close the Local Security Database Editor window. However, if you want to manually validate your security database without closing the window, proceed as follows:
In the Security menu, select Check Validity. This will compare your security parameters, such as passwords, with the authentication policy that you defined beforehand.
There are two reasons why you may want to export to a file your security database on your PC:
To create a backup copy.
To transfer your security database from one PC to another.
To manually save the security database to a file on your PC:
In the Security menu, select Send to File.
In the Send Security to File dialog box, specify a file name and click Save.
SMP Gateway User Manual
• 97
13.4.9
Sending the Security Database to One or More SMP Gateways Your security database, which includes your authentication policy and the users and groups you have defined, is stored locally on your PC. To activate your security database on one or more SMP Gateways, you have to send your local security database to the SMP Gateway(s).
13.4.9.1
Sending the Current Security Database Proceed as follows to send the security database that is currently active on your PC:
In SMP Manager, select the SMP Gateway(s) to which you want to send the security database.
In the Security menu, select Update SMP Gateway Security Database.
SMP Manager encrypts the information, and then sends the configuration to the SMP Gateway(s). In the following example, we sent the security database to a single SMP Gateway. The optional Security column contains the message Local: Up to date to indicate that the local security policy on the Abbey Road gateway matches the one located on the PC.
13.4.9.2
Sending a previously saved security database Let us suppose that an authorized person in your organization updated the local security database on his or her PC, and sent you a copy of the security database file. To load this new security database onto one or more SMP Gateways, proceed as follows:
Retrieve the file:
In Security menu of the Local Security Database Editor window, click Get from File.
In the Get Security From File dialog box, specify the file name and click Open.
The retrieved file now becomes the currently active local security database.
98 •
Close the Local Security Database Editor window.
In SMP Manager, select the SMP Gateway(s) to which you want to send the security database.
In the Security menu, select Update SMP Gateway Security Database.
SMP Gateway User Manual
13.4.9.3
The Security column The Security column displays the status of the local security database that is currently active on the SMP Gateway. It also indicates the status of global security, if enabled for this SMP Gateway. Here is an explanation of the different values that may be displayed for local security, with a suggestion of what action to take, if any:
Up to Date. The security database on the SMP Gateway is the same as the security database that is currently active on your PC. This is the normal case.
Older (date and time). You sent a security database to the SMP Gateway, but subsequently modified the local security settings. Therefore, the security database on the SMP Gateway is older than your local security database. To rectify the situation:
Send your local security database to the SMP Gateway (see “Sending the Current Security Database”, page 98). The Status column will now display “Local: Up to Date”.
Newer (date and time). You sent a security database to the SMP Gateway, but someone on another PC subsequently modified his or her own local security database and sent it to the SMP Gateway. To rectify the situation:
Contact the person who made the changes.
If you approve:
Retrieve the security database from the SMP Gateway in order to update your own local security database (see “Retrieving the Security Database of an SMP Gateway”, below). The Status column will now display “Local: Up to Date”.
If the modifications should not have been made:
13.4.10
Send your local security database to the SMP Gateway (see “Sending the Current Security Database”, page 98). The Status column will now display “Local: Up to Date”.
n/a. The software installed on the SMP Gateway does not support the security features.
Retrieving the Security Database of an SMP Gateway You may want to replace your current local security database with the security database that exists on a particular SMP Gateway. Proceed as follows:
SMP Gateway User Manual
• 99
In SMP Manager, select the SMP Gateway.
In the Security menu, select Get SMP Gateway Local Security Database.
SMP Manager retrieves the file from the SMP Gateway and upon your approval, updates your local security database with that retrieved from the SMP Gateway.
13.4.11
Removing the Security Database from One or More SMP Gateways Proceed as follows to remove the security database from one or more SMP Gateway(s):
In SMP Manager, select the SMP Gateway(s) from which you want to remove the security database.
In the Security menu, select Remove Security Database from SMP Gateway.
Note: If global security is enabled on the SMP Gateway, the Remove Security Database from SMP Gateway command is unavailable. If you really want to remove local security from the gateway, you must first remove global security. Once you have confirmed your intention and the security database has been removed, the Security column now displays the word “Local: Disabled” for the SMP Gateway(s) you selected. Note: Only your authentication policy and your user groups and privileges are disabled. The other security functions, such as integrity checking and firewall and VPN management, are not disabled.
You can reactivate the security database of one or more SMP Gateways by simply sending them your local security database, as described under “Sending the Security Database to One or More SMP Gateways”, page 98.
13.4.12
Unlocking a User Account Only a person with security management privileges can unlock user accounts that have been locked out following failed login attempts. To unlock one or more user accounts:
In SMP Manager, select the SMP Gateway for which you want to perform the unlock operation.
In the Security menu, select Unlock User Account.
In the Unlock Accounts for “< SMP Gateway >” dialog box:
Select Unlock all accounts.
OR
100 •
SMP Gateway User Manual
Select Unlock specific account, and specify the account in the User Name box.
In the example shown next, 2 user accounts are locked out, and we will request to unlock Joan’s account.
Click Unlock to unlock the account(s).
Following the unlocking operation, the number in the Accounts locked box is decremented accordingly.
13.4.13
Viewing the Security Log If you have security management privileges, you can view the security log and see all securityrelated events, including:
All authentications, whether granted or refused.
All user account locks and unlocks.
All configuration, maintenance, and security management activities.
All Telnet, Web and passthrough server accesses.
Integrity check status information.
Security server status information.
To view the security log:
From SMP Manager’s Tools menu, click SMP Log.
In the SMP Log application window, click the Security folder in the left pane.
The security-related events will appear in the right pane.
SMP Gateway User Manual
• 101
13.5
File certification and integrity checking Every executable file on the SMP Gateway and every SMP Tool are digitally signed to ensure that it originates from Cooper Power Systems. A digital fingerprint is encrypted and inserted in the file at the factory. Whenever you upload a file to the SMP Gateway, SMP Manager or SMP Loader performs an integrity check on the file. Furthermore, a continuous integrity check is performed on the SMP Gateway at all times, to detect whether any executable file has been tampered with by a virus or if an unauthorized file has been loaded via an unconventional method. Once you have uploaded a version of the SMP Gateway software that includes file integrity checking to the SMP Gateway, you cannot use a previous uncertified version of the SMP Gateway software, or a version of the SMP Tools that use uncertified files, since they would fail the integrity checks.
13.5.1
Detecting an integrity check failure If a file fails the integrity check, the SMP Gateway restarts and goes into a mode in which there is no communication between the devices and the SMP Gateway. You can detect this situation as follows:
13.5.2
In the SMP Manager window, the Status column shows that the SMP Gateway is in “Safe mode”.
All device points are tagged with a communications failure attribute. A series of alarms are generated, at the SCADA level or in a local HMI.
The Reset log indicates that the integrity check function has restarted the SMP Gateway in “Safe mode”.
The Security log contains an entry indicating when the problem was detected, and several entries identifying each file that failed the integrity check. It can take up to 5 minutes for all entries to appear in the log.
Recovering from an integrity failure Windows CE, which is installed in the SMP Gateway, is the software responsible for the integrity check. If the gateway goes into “safe mode”, it means that the gateway’s application needs to be updated to match Windows CE. To do so:
13.6
See “Updating the SMP Gateway Application”, page 224.
If the SMP Gateway goes into “Safe mode” after the update, contact Cybectec Technical Support.
Using VPN Connections The SMP 4 and SMP 16 each offer their own built-in firewall, which provides maximum security against intrusion through the substation LAN.
102 •
SMP Gateway User Manual
When enabled, the firewall shuts off all the TCP/UDP ports of the SMP Gateway, except for the VPN port (TCP 1723) and another port (23) that is reserved for internal use. All the network messages exchanged between the SMP Gateway and the SMP Tools go through the VPN port. If security is enabled, these messages are encapsulated and encrypted by the VPN (Virtual Private Network) protocol before being forwarded to the destination port. SMP Tools use several TCP/UDP ports. If any tool tries to connect to an SMP Gateway configured with the firewall, the tool automatically establish a VPN connection to the gateway. There are still some cases where you want to set up and use a VPN connection manually, which is the subject of the next section.
13.6.1
Manually Setting Up a VPN Connection As seen previously, VPN connections are automatically established by the SMP Tools when they connect to an SMP Gateway secured by its built-in firewall. You still may need to set up and use a VNP connection manually if:
The firewall is active, and the software application you want to use to connect to the SMP Gateway is not an SMP Tool (for example, the CoDeSys development environment used for automation purposes);
The firewall is inactive, but you still want to encrypt the data that is exchanged between the software application and the SMP Gateway.
Note: To manually set up a VPN connection, the user must have the System Management privilege for the SMP Gateway.
To set up/use a VPN connection:
In SMP Manager, select the gateway for which you want to configure a VPN connection from your PC.
From the Gateway menu, select Make VPN Connection.
What happens when you click this function the first time is:
It creates a new connection in the Network Connections view of Windows’ Control Panel.
In SMP Manager, under the VPN column for the selected gateway, you will see the “Connecting…” status message, then “Connected”.
In Windows, open the Start menu, and navigate up to the \All Programs\Accessories\Communications menu. Select Network Connections. You will now see a new icon named after your gateway, under Virtual Private Network.
You are now ready to use your tool/application through the VPN connection.
Note: Microsoft Windows© XP only allows 2 outgoing VPN connections simultaneously.
SMP Gateway User Manual
• 103
To disconnect from the VPN:
13.7
From SMP Manager’s Gateway menu, click Disconnect VPN.
Configuring the Firewall In the System branch of the left pane in SMP Config, you will find the Firewall branch. This firewall is protecting the SMP Gateway and consequently the IEDs it connects to. The following section describes how to configure the firewall, as well as the various options that are offered to you with the firewall. Note: Before enabling the firewall, make sure you can use VPN connections through your corporate network; otherwise, you will lose all communications with the SMP Gateway, since all but the VPN port will be closed.
13.7.1
Creating the Firewall in SMP Config The first step is the creation of a firewall instance under the firewall branch:
104 •
From SMP Config, under the System branch, click Firewall.
Under Name, type a name for your firewall. A pencil will appear on the textbox left side.
Click Firewall again, you will see a ‘+’ sign appear beside the Firewall branch in the tree view. Expand the Firewall branch, and the branch of the instance you just created. You will see two new branches: General and Rules. The parameters they contain are described in the next sections.
SMP Gateway User Manual
13.7.2
Setting General Parameters
Parameter
Description
Enabled
The Enabled checkbox enables or disables the firewall.
Log Enabled
The Log Enabled checkbox enables or disables the firewall log. If you enable the log, all significant information related to firewall activity will be entered into the log. You will be able to view the contents of the Firewall log with SMP Log.
Max VPN Connections
The Max VPN Connections text box allows you to specify the maximum number of incoming VPN connections allowed. The default value is 2, but you can increase this number to a maximum of 5.
Note: Before enabling the firewall, make sure you can use VPN connections through your corporate network; otherwise, you will lose all communications with the SMP Gateway, as all but the VPN port will be closed.
13.7.3
Setting Firewall Rules
13.7.3.1
Creating a rule Once you created the firewall, you can now configure the ports you need to open for access. This operation is called creating a firewall rule. The Rules branch is where you can create a firewall rule. It can be used to open additional ports in the firewall, to specify whether the ports will be accessed via the TCP or UDP protocol, and
SMP Gateway User Manual
• 105
optionally, the IP addresses of computers that will be granted access through the ports. Two default rules are provided by default for the CoDeSys and Passthru rules. In the following illustration, the rule “Test” opens ports 2270 to 2280 to UDP messages. It is specified that only computers with IP addresses beginning by 10.87.X.X can use these ports. It is also in the Rules branch that you can activate Passthru and CoDeSys access, simply by clearing the Disabled checkbox.
13.7.3.2
Deleting a rule To delete a rule:
13.8
Click in the row. You will see an arrow on the left side of the right pane.
Click the arrow and press the Delete key.
Locking Incoming RAS and Passthrough Connections Incoming RAS dialup connections to the SMP Gateway, and passthrough connections between the SMP Gateway and the devices, represent yet another possible security threat to the SMP Gateway. The control center can lock all incoming RAS dialup connections, as well as individual passthrough connections, using some of the SMP Gateway’s logical data points. These data points, which you can view with the SMP Gateway’s web browser, are listed in the table below.
106 •
Data Point
Description
_smp___dialupEnable
This binary output point is used to lock or unlock all incoming RAS dialup connections to the SMP Gateway.
_smp___dialupEnabled
This binary input point indicates if incoming RAS dialup connections to the SMP Gateway are allowed or not..
SMP Gateway User Manual
Data Point
Description
_smp___dialupInUse
This binary input point indicates whether or not there is communication in progress via an incoming RAS dialup connection.
_smp___passthruEnable
This binary output point is used to lock or unlock a particular passthrough connection. The name of the connection, as defined in SMP Config, is included in the name of the data point.
_smp___passthruEnabled
This binary input point indicates whether a particular passthrough connection is currently enabled or disabled.
_smp___passthruInUse
This binary input point indicates whether a particular passthrough connection is currently active.
The following sections explain the various methods available to lock/unlock RAS/passthrough connections.
13.8.1
Locking or Unlocking All Incoming RAS Dialup Connections The control center can lock all incoming RAS dialup connections at any time, regardless of whether or not there is communication in progress. When the SMP Gateway restarts, RAS dialup connections’ lock information is preserved. There are 2 ways to lock or unlock incoming RAS dialup connections: Method 1
In the SMP Manager window, select the SMP Gateway and start a Telnet session.
Type the command that starts the RAS manager:
RASMGR
Type the command that toggles between locking and unlocking incoming dialup connections. X
The following example illustrates how you can lock, and then unlock RAS dialup connections. (H) Help, (Q) Quit [h]: x Do you want to lock the incoming dialup connections? [N]: y The incoming dialup connections are now locked. (H) Help, (Q) Quit [h]: x Do you want to unlock the incoming dialup connections? [Y]: n The incoming dialup connections are now unlocked.
SMP Gateway User Manual
• 107
Method 2
13.8.2
From the SCADA, perform the OPEN or CLOSE operation on the _smp___dialupEnable data point. You can do a Direct Execute or a Select Before Operate (SBO). For more information on how to perform control operations using Visual Substation Explorer, refer to Visual Substation Explorer User Guide, GUI-00115-00020 T).
Locking or Unlocking a Passthrough Connection The control center can lock or unlock passthrough connections individually, and can also request that a particular passthrough connection be automatically locked or unlocked on SMP Gateway startup. To lock or unlock a passthrough connection:
From the SCADA, perform the OPEN or CLOSE operation on the _smp___passthruEnable data point. You can do a Direct Execute or a Select Before Operate (SBO). For more information on how to perform control operations using Visual Substation Explorer, refer to Visual Substation Explorer User Guide, GUI00115-00020 T).
To request that a particular passthrough connection be locked or unlocked on SMP Gateway startup:
108 •
In SMP Manager, select the SMP Gateway, and then start SMP Config.
In the left pane, click Passthru Connections.
In the right pane, select the passthrough connection, and then either select or clear the Locked at Startup checkbox.
SMP Gateway User Manual
14
Using Passthrough Connections
Most manufacturers of recent IEDs provide native vendor tools (NVT) for the configuration and maintenance of their devices. These tools usually connect to the device using a serial link or, less frequently, a network connection. The optional SMP Gateway passthrough feature gives you the ability to use PC-based tools to access the devices connected to an SMP Gateway. With this feature, the SMP Gateway serves as a terminal server for remote maintenance, monitoring and control of the connected devices.
14.1
Principles of Operation The native vendor tools expect the device to be connected to a serial port on the PC. Since the device is now connected to the SMP Gateway instead, the passthrough function has to intercept this communications link and provide a mechanism to exchange data between the NVT and the SMP Gateway. The passthrough functionality is implemented by two software components: the SMP Connect windows application, which is part of the SMP Tools suite, and the SMP Gateway’s Passthrough Server. An overview of the passthrough functionality is presented in the following illustration.
SMP Gateway User Manual
• 109
PC SCADA NVT
VIRTUAL LOOPBACK PORT
SMP CONNECT
COMM LINK
SLAVE COMPONENT
PASSTHROUGH SERVER
REAL-TIME DATA EXCHANGE
MASTER COMPONENT
COMM LINK
SMP GATEWAY
DEVICE
Figure 12
Using a passthrough connection
A virtual loopback connection must be set up between SMP Connect and the NVT. This allows SMP Connect to intercept the communications link from the maintenance or configuration tool, and forward the data to the SMP Gateway. The SMP Gateway’s passthrough server then forwards the data to the device via a serial link. The result is that maintenance and configuration tools can operate as if the device were directly connected to the PC. While the PC application is communicating with the IED or RTU, the latter may have to suspend its data acquisition; depending on the serial line and device type involved, it may be necessary for all devices on the line to suspend their data acquisition, even though only one device is engaged in
110 •
SMP Gateway User Manual
communications with the PC application. This suspension is illustrated using a red “X” in Figure 12. SMP Connect terminates the passthrough connection if a problem arises or if there is no data exchanged during a specified timeout period.
14.2
Setting up Passthrough Connections Setting up a passthrough connection involves a number of steps.
14.2.1
Using SMP Config, you identify the devices that will be accessed through passthrough connections. For each device, you provide information such as the SMP Gateway port to be used for the passthrough connection, and the timeout after which the passthrough connection is to be terminated after the last data exchange.
In SMP Connect, you identify each application that will communicate with a device via a passthrough connection. For each of these applications, you specify the type of loopback connection to be established between SMP Connect and the application, and you define the communications settings of the loopback connection.
Defining SMP Gateway Passthrough Settings Using SMP Config, define the SMP Gateway passthrough settings for each device that will be using a passthrough connection:
In the left pane, click Passthru Connections.
Create a new connection by entering the following information in the empty row:
IED Name. This name will be used to identify the device in the SMP Connect program. You should use the same name that you assigned to the device when configuring the master protocol component that it communicates with.
Port Name. Choose the serial port or the TCP/IP connection that links the SMP Gateway to the configuration port of the device. Some devices use separate configuration and data ports. If it is the case, you must use two separate cables to connect the device to the
SMP Gateway User Manual
• 111
SMP Gateway and specify here the port that will be used by the IED maintenance and/or configuration programs; otherwise, the port must be the same as the one used by the master protocol.
14.2.2
Suspend Link. This setting indicates that data acquisition should be suspended for all other devices sharing the multidrop link while SMP Connect is communicating with the selected device. If selected, acquisition of the remaining devices will be suspended. This setting applies only to devices that support the feature.
Suspend IED. This device-specific setting indicates whether or not the master protocol component should suspend data acquisition while SMP Connect is communicating with the device.
IED Address. This address identifies the device in a multidrop configuration. This setting is ignored if the Suspend IED checkbox is not selected.
Modem Signals. This setting specifies whether or not the serial port associated with the IED supports modem control signals. If selected, the DTR and RTS modem control signals will be transferred across the passthrough connection. By default, modem control signals are NOT transferred.
Locked at Startup. This setting is a security feature. If selected, the passthrough connection will not be available when the SMP Gateway starts up. You can subsequently make it available by enabling specific logical data points, as explained under “Locking Incoming RAS and Passthrough Connections”, page 106.
Inactivity Timeout. This mandatory setting specifies how long the passthrough connection link established by SMP Connect can remain inactive. If the program detects that no data exchange occurred between the device and the application during the specified timeout period, it prompts the user to either terminate the session or specify a longer wait time.
Comments. This optional setting is used to store the instructions that will be displayed to the SMP Connect operator, such as telling him which communications program to use with the device.
Installing a Loopback Cable, if Necessary There are 3 types of loopback connections that you can set up between the device manufacturer’s maintenance or configuration application and SMP Connect:
112 •
A virtual serial loopback connection. This is the preferred choice.
A real serial loopback connection. You set up this type of connection only if the device manufacturer’s application cannot use a virtual communications port.
SMP Gateway User Manual
A TCP/IP loopback connection. You set up this type of connection only if the device manufacturer’s application uses TCP/IP.
TCP/IP and virtual serial loopbacks do not require any further physical modifications to the configuration. To set up a real serial loopback connection:
Configure the device manufacturer’s application to use one of the PC’s serial ports, COM1 for example.
Attach a null modem cable to this serial port.
Note: A null modem cable is an RS-232 cable that crosses the sending wire with the receiving wire.
Instead of attaching the other end of the cable, to the device, attach it to a second serial port of the same PC, for example COM2.
Note: Most modern PCs are equipped only with a single serial port. If virtual communications ports are not supported by the application and the PC is only equipped with a single serial port, a serial expansion card must be installed on the PC.
14.2.3
Setting Up a List of Applications and Loopback Connections SMP Connect communicates with the device manufacturer’s application via a loopback connection. There may be several applications running on the PC. You have to identify all the available applications, and for each application that must remotely access a substation device, you have to provide the following information:
Specify whether the application is to be started manually, identify the path to the application, and provide any arguments required by the program.
Specify what type of loopback connection is to be used between SMP Connect and the application, and define the communications settings of the loopback connection. Loopback connection types are described in section 14.2.2, above.
To start SMP Connect:
Select your SMP Gateway in SMP Manager’s application window.
In the Tools menu, select SMP Connect.
The SMP Connect application window appears, showing a list of all the passthrough connections you previously configured with SMP Config for this SMP Gateway.
SMP Gateway User Manual
• 113
The top portion of the screen shows the settings you entered in SMP Config, with one additional piece of information: the PThru Active column, which indicates whether a passthrough connection is currently being used for a particular device. The bottom portion of the screen shows a trace of passthrough connection events. To identify the application program that will communicate with a device, and to define the communications settings of the loopback connection used for that matter, proceed as follows:
Select the device in the top pane of the SMP Connect window.
In the Control menu, select IED Application Settings.
The IED Application Settings dialog box appears.
To add an application to the list:
114 •
In the IED Application Settings dialog box, click Add.
In the dialog box that appears, type the application’s name and click OK.
Select the newly created application in the list.
SMP Gateway User Manual
Under Application Settings:
Specify whether the application is to be started manually. If you select to start it manually, then when you connect to the device, SMP Connect will start the passthrough and loopback connections without starting the application; you will be able to start the application manually.
Type the complete path to the application’s executable file.
Type the command line arguments required by the application, if any (see the manufacturer’s documentation).
Under Local Communication Settings:
Specify whether SMP Connect is to use a virtual serial loopback, a real serial loopback, or a TCP/IP loopback connection to communicate with the NVT. Most manufacturers’ tools use a serial (virtual or real) connection. However, if you are using a terminal emulator program such as Microsoft HyperTerminal to communicate with the device, you can use a TCP/IP loopback connection.
Click Configure to specify the loopback connection’s settings:
The application port (serial only).
The communications settings, such as parity, data bits, stop bits, flow control (serial only).
The SMP Connect port (real serial only).
The logical port number for the TCP/IP connection; type the same TCP/IP port number that you set in the device manufacturer’s tool or in the HyperTeminal program (TCP/IP only).
An indication whether your application uses the Telnet protocol, or not. Most terminal applications using TCP/IP do use the Telnet protocol, so the checkbox is selected by default (TCP/IP only).
Under Remote Communication Settings:
Specify whether you want the passthrough server to wait until the application’s first data transmission before initializing the connection between the device and the SMP Gateway, or initialize it as soon as the application is started.
Specify whether you want the passthrough server to automatically reset the passthrough connection upon transmission failure. If you select this checkbox, specify the time to wait following the detection of the transmission failure before resetting the connection.
Note: You can also use the Apply base settings for arrow-button to apply default base settings for some type of applications. Repeat the previous steps for all applications. Make sure you click OK to save the settings and close the IED Application Settings dialog box.
SMP Gateway User Manual
• 115
14.3
Connecting to the Device Once you have configured the passthrough server and the SMP Connect application, you are ready to establish a passthrough connection to the device:
In SMP Connect, select the device in the device list.
In the Control menu, select Connect to IED.
In the IED Application Selection dialog box, choose the application /NVT that will communicate with the device.
Click the Connect button.
If you requested that the application be started manually, the trace window will show that SMP Connect has established the SMP Gateway passthrough connection and has started the loopback connection with the application, but the application window will not open. Start the application now. You are now ready to use the application the same way you would if you were connected to it locally.
14.4
Testing the Passthrough Connection Setting up a passthrough connection is usually a straightforward operation. When problems occur, it is often because a device cannot communicate and perform data acquisition simultaneously. You may find the following guidelines useful in identifying and solving problems with passthrough connections:
14.5
Using SMP Config, check the Suspend IED setting for the selected passthrough connection. If you modifed the setting, remember to load the modified configuration and restart the SMP Gateway.
Using SMP Connect, check the message pane to see if the passthrough connection is being activated correctly.
Using SMP Trace, open the Master Protocols folder, and check whether the component is receiving requests from the control center.
Using SMP Trace, open the PassThruServer folder, and check whether any data is being exchanged with the device.
Using SMP Trace, open the Connections folder, and check whether any data is being exchanged with the device.
Deactivating the Passthrough Connection To deactivate the passthrough connection:
116 •
SMP Gateway User Manual
Close the manufacturer’s application or HyperTerminal. OR
Click the device in the SMP Connect window.
In the Control menu, click Disconnect from IED.
The SMP Connect trace window now shows that the passthrough connection is no longer active. Note: The passthrough connection is automatically deactivated if there is no data exchanged on the link during the inactivity timeout period specified in SMP Config for this particular passthrough connection.
14.6
Using the Trace of Passthrough Connection Events The bottom portion of the SMP Connect application window is used to display passthrough connection event messages. It is quite useful to identify and solve passthrough connection problems. It can also be configured to display all the data that is exchanged during a given passthrough session. The whole trace can be printed or saved to a text file. To display all exchanged data in SMP Connect’s trace pane:
Before establishing a passthrough connection, in SMP Connect’s View menu, select Detail Trace.
To print the current content of the trace pane:
In SMP Connect’s View menu, select Print Preview, if you want to get a preview of the printed trace, or Print if you want to print it directly.
To save the current content of the trace pane to a file:
In SMP Connect’s View menu, select Save As.
In the Save As dialog box, select the directory where you want to save the file and type the file name.
Click Save.
To clear the contents of the trace pane:
In SMP Connect’s View menu, select Clear Trace.
SMP Gateway User Manual
• 117
14.7
Changing How Time Information is Displayed in SMP Connect To change how time information is displayed:
118 •
From the View menu, click Time Display Options.
From the Time Display Options dialog box, select the type of display from the Time Display Format drop box: you can choose between the local time (using the PC’s time zone settings) and UTC. Normally, your SMP Gateway’s clock is set in UTC, but you can display the information using the time format you like.
SMP Gateway User Manual
15
Retrieving Event Files From Devices
Many devices produce digital fault records or other event files. You can setup your SMP Gateway so that it automatically retrieves these files and stores them on one or more computers for subsequent analysis. Using SMP Config, you will go through the following steps:
Define system folders. These folders can either be located on the SMP Gateway or on a remote computer.
Specify in which system folder(s) master protocol instances will store the event files that they retrieve from the device.
The following sections explain these steps in details. You can also configure an SMP Gateway to retrieve files from another SMP Gateway. This can be particularly useful in a substation where an SMP Gateway is the single access point to multiple other SMP Gateways that are configured to retrieve event files. The final section of this chapter explains how to configure interconnected SMP Gateway for files retrieval.
15.1
Defining System Folders System folders are virtual folders, defined for a given SMP Gateway, which are used to store event files. Two types of system folders can be configured:
Remote System Folder. A remote system folder is a shared folder on a remote computer, which is identified using the Unified Naming Convention (UNC). Essentially, you refer to such a folder by combining the computer and folder names (ex. \\ComputerName\SharedFolderName). To use remote folders, the SMP Gateway must have access to a WINS server in order to resolve computer names. See the SMP Gateway installation guide for more information.
Local System Folder. This type of folder is located on the SMP Gateway itself. Be aware that disk space is limited on an SMP Gateway, if you compare it to nowadays computers hard drives.
SMP Gateway User Manual
• 119
To define system folders in a SMP Gateway configuration, proceed as follows:
Open SMP Manager.
Select the SMP Gateway that will retrieve event files.
From the Tools menu, select SMP Config.
In the left pane of the SMP Config window, click System Folders.
For each new remote folder, enter the following information in the Remote System Folders pane:
120 •
The numerical Folder ID, which is a number ranging from 1 to 99. On an SMP Gateway, each system folder, remote or local, must have a unique ID.
The folder Name. This name references the folder in master protocols’ file-retrieval settings. It is also used in traces, logs and stats.
The Location of the shared folder, using Unified Naming Convention. For example, the location \\cpu104\Events refers to a shared folder called Events on a computer named cpu104.
A Username and a Password, if access to the shared folder is secured. You must use the machinename\username or domainname\username format.
The number of bytes that will trigger a transition on a specific logical data point, thereby advising you that space is running low (see the Master Protocol Common Concepts document for details). The maximum value you can type is 2,147,483,647, and the default is 0 (no notification at all).
Select the Compress checkbox to compress and archive event files to a ZIP file. If a given event is made of multiple files, all files will be compressed and archived together in the same ZIP file.
Optionally, you can provide a description of the folder.
For each new local folder, enter the following information in the Local System Folders pane:
SMP Gateway User Manual
15.2
The numerical Folder ID, which is a number ranging from 1 to 99. On an SMP Gateway, each system folder, remote or local, must have a unique ID.
The folder Name. This name references the folder in master protocols’ file-retrieval settings. It is also used in traces, logs and stats.
The number of bytes that will trigger a transition on a specific logical data point, thereby advising you that space is running low (see the Master Protocol Common Concepts document for details). The maximum value you can type is 2,147,483,647, and the default is 0 (no notification at all).
Select the Compress checkbox to compress and archive event files to a ZIP file. If a given event is made of multiple files, all files will be compressed and archived together in the same ZIP file.
Optionally, you can provide a description of the folder.
Configuring Master Protocols for Event File Retrieval Having defined system folders, you can now configure an event-retrieving master protocol component and assign it a system folder. Note: Configuring an Interconnections master instance for files retrieval requires a different procedure, which is described in the “Retrieving files from another SMP Gateway” section, below.
To configure a master protocol instance for event retrieval, proceed as follows:
Open SMP Manager.
Select the SMP Gateway that will retrieve event files.
From the Tools menu, select SMP Config.
In the left pane of the SMP Config window, expand the master protocol instance’s branch.
Click Event Files. The list of event files that can be retrieved using this protocol instance is listed in the right pane.
In the right pane, the event file has automatically been assigned a Name, based on the protocol. For example, an IEC 60870-5-103 event file is called a “Disturbance Data File”, a Hathaway BCM-200 event file is called a “Breaker Operation Record”, and a Hathaway DFR 1200 is called a “Digital Fault Record”.
The event file has automatically been assigned a Short Name, also based on the protocol. To continue with the aforementioned example, the 3 short names would be DDF, BOR and DFR, respectively. You cannot modify the short name.
SMP Gateway User Manual
• 121
15.3
Select the Disabled checkbox if you want to disable the event file retrieval function, in which case you may skip the remaining steps. By default, the checkbox is cleared since it is assumed that you want to retrieve the files.
Choose a folder in the Folder drop-down list. This list contains the names of the system folders you defined previously (see “Defining System Folders”, above).
In the File Rule drop-down list, choose which event files the master protocol instance will retrieve at the SMP Gateway’s startup:
New files only. Only those files that were generated since the last time a file was retrieved from the device.
Files from last X days. All files generated in the last X days, regardless of whether or not some of them may have already been stored in the system folder. If you choose this option, you must specify the number of days in the Max File Age box.
All files. All available files, without restriction.
If you selected the Files from last X days rule, specify a number of days in the Max File Age box. For example, a value of 5 means that all files generated in the last 5 days will be retrieved at startup.
In the Minimum Free Disk Space box, specify the amount of disk space that has to be available in the system folder in order to store an event file. When there is less disk space available than what you have specified, the event files will no longer be retrieved from the device. The maximum value you can type is 2,147,483,647, and the default is 0. If you type a value of 0, available disk space will not be verified.
Optionally, you can type some meaningful information in the Extra Info box. This information will be appended to each event file name.
Optionally, you can provide a description of the event file(s).
Retrieving files from another SMP Gateway If two SMP Gateways are interconnected, you can configure them to exchange event files. File exchange is based on the same principles that drive operational data acquisition: a slave SMP Gateway is configured to make the files it retrieves available for a master SMP Gateway, which is configured to gather the files. The master SMP Gateway can also be configured to provide the files to another SMP Gateway, and so on. Before going any further, you must configure the SMP Gateways to communicate together. You can learn how to do this by reading the “Interconnecting SMP Gateways” section, page 77.
122 •
SMP Gateway User Manual
Note: Interconnection file exchanges can only occur on “permanent sessions”. This means that if you want a slave SMP Gateway to provide files to multiple master SMP Gateways, you must specify one single client for each master gateway in the slave SMP Gateway’s Interconnections slave instance. The “Configuring the Slave SMP Gateway” section, page 78, explains how to configure permanent session Interconnections.
Now that the gateways are interconnected, configure the slave SMP Gateway so it can gather all event files and make them available:
Open SMP Manager.
Select the SMP Gateway that will provide the event files (the slave SMP Gateway).
From the Tools menu, select SMP Config.
In the left pane of the SMP Config window, select the Interconnections slave instance.
Expand the instance branch and select Clients. Make sure a client entry is defined for the master SMP Gateway, and that it is configured for permanent session.
Select the Event Files branch.
Type a Share Name for the folder that will be used for the file exchange. This folder exists only in the Interconnection session, and has nothing to do with the system folders used by master protocol components to retrieve event files from devices.
Select the System Folder to monitor. This folder contains the files, retrieved by master protocol component(s), that you want to transfer to the master SMP Gateway through the interconnection.
Under Client, select the Interconnections Client you defined for the master SMP Gateway. This setting is used to make sure that the appropriate client is getting the appropriate files.
Save the configuration file and close SMP Config.
Send the configuration file to the SMP Gateway using SMP Manager (see “Updating the Configuration File” on page 225), and then restart the gateway.
Configure the master SMP Gateway so it can poll the slave SMP Gateway for new files:
Open SMP Manager.
SMP Gateway User Manual
• 123
Select the SMP Gateway that will retrieve the files (the master SMP Gateway).
From the Tools menu, select SMP Config.
Configure the system folder that will be used to store the files retrieved from the slave SMP Gateway. See “Defining System Folders”, above.
Note: The Compress setting will have no effect here if the files are already compressed on the slave SMP Gateway.
124 •
Assign the system folder to the Interconnection master instance:
In the left pane of the SMP Config window, select the master instance.
Expand the instance branch and select Event Files.
Type the name of the Source Folder on the slave SMP Gateway. You should type here the same string you typed for the Share Name setting in the slave gateway’s Interconnections slave instance.
Select the system folder you just defined for storage.
In the Min Free Disk Space box, specify the amount of disk space that has to be available in the system folder in order to store an event file. When there is less disk space available than what you have specified, the event files will no longer be retrieved from the slave SMP Gateway. The maximum value you can type is 2,147,483,647, and the default is 0 (event files are always retrieved, regardless of available disk space).
Specify the Scan Interval, in seconds, at which the master gateway will poll the slave gateway for new files to retrieve.
Save the configuration file and close SMP Config.
Send the configuration file to the SMP Gateway using SMP Manager (see “Updating the Configuration File” on page 225), and then restart the gateway.
SMP Gateway User Manual
16
Using the Annunciator Interface
The SMP Gateway’s Annunciator option is a cost-effective solution that provides a local HMI for substation operators. Using SMP Config, you can set up alarms based on the analog and binary data points of your SMP Gateway, and design simple pages to display the current statuses and values of these points and alarms on a touch screen, which also allows you to handle the alarms and perform control operations. Note: The Annunciator option is only available for the SMP 16/CP and SMP 16/SG.
With the Annunciator option, you can:
monitor a list of all active alarms, as well as alarms that have returned to normal but have not been acknowledged yet;
acknowledge, block and clear alarms;
consult an history log of recent alarms and operations on alarms;
access some of the SMP Gateway’s internal statistics;
monitor real-time values of the SMP Gateway’s data points through user-defined and highly customizable readings pages;
perform control operations on your SMP Gateway on site, just like you would from the SCADA.
An example of the Annunciator’s display is presented on next page. In this example, we see a readings page that has been designed to display the simplified single-line diagram of a feeder.
SMP Gateway User Manual
• 125
The Annunciator’s display is divided in three parts:
The alarm counters bar. This bar is located at the top of the display, and shows in real-time the number of active and blocked alarms.
The display tabs. The various display pages can be accessed via a tab-based navigation system. The following tabs are available:
Alarms. Display the list of all alarms that are active, or that have returned to normal and that have not been recalled yet. You can also use this tab to manage the alarms. To customize this page, see “Setting Up the Alarms Page”, page 131. To learn how to manage alarms, see “Managing Alarms”, page 152.
Readings. Display user-defined pages that show real-time values of data points and allow control operations on the SMP Gateway’s output points. To create reading pages, see “Creating a User-Defined Readings Page”, page 140. To learn how to control output points from a readings page, see “Performing Control Operations From a Readings Page”, page 159.
126 •
SMP Gateway User Manual
Blocked. Display the list of blocked alarm inputs. The operator can block an alarm input to disable the triggering of alarms for this given input, even when alarm conditions are met. Such behavior may be required, when a certain part of the substation is under maintenance, for example. To customize this page, see “Setting Up the Blocked Page”, page 134. To learn how to block/unblock alarm inputs, see “Blocking Alarm Inputs”, page 154.
History. Display the contents of the history log file, which contains entries about recent alarm and operator actions. To customize this page, see “Setting Up the History Page”, page 135. To learn how to use this page, see “Using the History Log”, page 155.
System State. Display various system information and statistics about the SMP Gateway and the Annunciator. To learn how to use this page, see “Monitoring System Status”, page 157.
The single alarm display. This part of the display is used to manage alarms one at a time. Depending on how it is customized, the oldest or most recent alarm is displayed here, and the operator can acknowledge or clear the alarm simply by pressing the display.
In the following sections, we will describe how to set up the Annunciator using SMP Config, calibrate and connect a touch screen to the SMP Gateway, and use the Annunciator’s various functionalities.
16.1
Activating the Annunciator Option The Annunciator option is available since version 4 of the SMP Gateway Software & Tools. To use it on your SMP Gateway, its firmware and application must be up-to-date. The Annunciator must also be part of your SMP Gateway’s license. To learn how to update the firmware, see “Updating the SMP Gateway Firmware”, page 222. To learn how to update the SMP Gateway’s application, see “Updating the SMP Gateway Application”, page 224. The following section walks you through the configuration of the Annunciator within SMP Config.
SMP Gateway User Manual
• 127
16.2
Setting Up the Annunciator The Annunciator’s configuration is stored in the SMP Gateway’s configuration file, which is edited using SMP Config.
In SMP Manager, select your SMP Gateway.
From the Tools menu, select SMP Config.
SMP Config opens, displaying the current configuration of your SMP Gateway. You must create the Annunciator instance before you can configure it. Proceed as follows:
In SMP Config, from the tree view, select Annunciator.
In the Annunciator Instance pane on the right, type a name for the Annunciator.
Click again the Annunciator branch to create the instance.
Expand the newly created branch. The resulting tree view should resemble the one that is displayed in the following illustration.
To configure the Annunciator, you must go through the following steps:
Configure alarm inputs.
Set up display pages.
Create user-defined readings pages, if you like.
Select which pages will be available for display, and which one will be displayed at startup.
You can also:
128 •
SMP Gateway User Manual
change how time information is displayed in the various pages;
set up an alarm buzzer to warn the operator of alarm occurrences.
The following sections explain all these steps in details.
16.2.1
Configuring Alarm Inputs Alarms are the core of the Annunciator. You can use the Annunciator to display real-time values or to perform control operations, but its most distinctive feature is the display and handling of alarms. Before configuring the various pages, you must configure the conditions that will trigger alarms, which are called the alarm inputs. The Annunciator supports alarm inputs from analog inputs and binary inputs. For analog inputs, alarms can be triggered when their value goes beyond a given threshold. For binary inputs, alarms can be triggered when their state changes. To define alarm conditions for an analog input, proceed as follows:
In SMP Config, from the tree view, expand the Alarms branch to reveal the Analog Inputs branch.
Select the Analog Inputs branch.
In the right pane’s grid, under Name, type the name of an analog input for which you want to define the alarm conditions.
Note: The same subscription feature that was available to configure slave protocols can be used instead of typing names. This is explained a bit further in this section.
Under Alarm Level, select a severity level for this input’s alarms.
Under Low Threshold, specify the value under which an alarm will be triggered for this input. For example, if you specify a low threshold value of -13.1, an alarm will be triggered if the input’s value becomes smaller than -13.1.
Under High Threshold, specify the value over which an alarm will be triggered for this input. For example, if you specify a high threshold value of 125.7, an alarm will be triggered if the input’s value becomes larger than 125.7.
Under Deadband, specify how much the value must go beyond the low or high threshold to trigger an alarm. For example, if you set the deadband to a value of 5.0 and the high threshold to a value of 125.5, an alarm will be triggered if the input’s value becomes larger than 130.5.
Note : This Deadband setting is different from the one found in the configuration of master protocols, used to determine whether a value should be reported, or not, to slave protocols through RTDX.
SMP Gateway User Manual
• 129
If you want to temporarily disable the triggering of alarms for this data point, select the checkbox under Disabled. The alarm conditions will be preserved in your configuration file, but will not be used by the Annunciator.
Under Low Threshold Description, you can type a description for low threshold alarms on this analog input. This description will be displayed in the various Annunciator pages when such an alarm condition is met, or when an operation (ex. acknowledge) is performed on such an alarm. The High Threshold Description setting works similarly, for high threshold alarms on this input.
Typing each point’s name can be a tedious task, especially if you have a lot of alarm inputs to define. Instead, you can use the same subscribtion mechanism you used to configure your slave protocols. To do so:
Select the Analog Inputs branch.
From the Tools menu, select Subscribe To.
The Subscribe to Master I/O dialog box appears. You can then select the master points for which you want to define alarm conditions. To learn how to use this dialog box, see “Subscribing to the Master Data Points”, page 64. Once you click OK, the dialog box closes and a line is created in the Analog Inputs pane for each data points. All that is left is to specify the conditions and descriptions for these alarm inputs. To define alarm conditions for a binary input, proceed as follows:
130 •
In the right pane’s grid, under Name, type the name of an analog input for which you want to define the alarm conditions, or use the subscribtion feature as described above for analog inputs.
Under Alarm Level, select a severity level for this input’s alarms.
Under Appearance Filter, specify how long, in milliseconds, the binary input must keep the active state (TRUE or 1) before triggering an alarm. This setting filters “false” alarms.
Under Disappearance Filter, specify how long, in milliseconds, the binary input must keep the inactive state (FALSE or 0) before considering that the alarm is no longer active. This setting filters “false” returns to normal. SMP Gateway User Manual
If you wish to trigger the alarm upon a 0 instead of a 1, select the checkbox under Inverted.
If you want to temporarily disable alarm conditions for this data point, select the checkbox under Disabled.
Under Description, you can type a description for alarms on this binary input. This description will be displayed in the various Annunciator pages when such an alarm condition is met, or when an operation (ex. acknowledge) is performed on such an alarm.
Repeat those procedures for every alarm inputs.
16.2.2
Setting Up the Alarms Page Once alarm conditions are defined, you may set up the various display pages, starting with the Alarms page. The Alarms page is essentially where all alarms are displayed in a list, and handled by the operator of the Annunciator using touch buttons. To learn how to manage alarms, see “Managing Alarms”, page 152. To configure the display settings of the Alarms page, proceed as follows:
In SMP Config, from the tree view, expand the Pages branch and select the Alarms branch. The resulting content of the right pane is presented in the next screenshot.
Anytime during the configuration process, you can preview, at the bottom of the pane, how the alarm list will look like on the Annunciator’s display:
SMP Gateway User Manual
• 131
The preview pane offers much more than that:
132 •
To change the width of a column:
Pass the mouse over the line that separates two column headers. The mouse cursor will change to this :
Click and drag the mouse to enlarge of reduce the width of the column on the left of the cursor.
If you want a given column to take all the width space that is actually unused, click the column header itself.
To change the columns’ order:
Drag and drop each column where you want it to appear on the display.
You can also to this using the Move Up and Move Down buttons appearing under Columns at the top of the edition pane.
To make a column available/unavailable to the operator:
Right-click any column header in the preview display.
A checkmark indicates that the column will be available, and it should be displayed as is in the preview pane.
Select any column name to change its availability state.
SMP Gateway User Manual
The rest of the customization process is performed using in other sections at the top of the edition pane:
Under Alarm list order, select which alarms should be displayed at the top of the list:
The Oldest alarm at top setting is recommended if you want to deal with each alarm in order and work them down to the most recent.
If you want to deal with alarms as they occur, select Most recent alarm at top.
Under Single alarm display, select which alarm should be displayed anytime at the bottom of the Annunciator display:
To see the oldest unacknowledged alarm, select Show oldest unacknowledged alarm.
To see the most recent unacknowledged alarm, select Show most recent unacknowledged alarm.
Note: To learn how to use the single alarm display, see “Using the Single Alarm Display”, page 155.
Under Alarm acknowledgement, select how alarms will be acknowledged by the operator:
To be free to acknowledge and recall any alarm in any given order, select Alarms can be acknowledged and recalled in any order.
To force the operator to acknowledge and recall alarms in the order they occur, select Alarms must be acknowledged and recalled in the order they occurred.
To automatically acknowledge and recall alarms as they occur, without the intervention of the operator, select Alarms automatically acknowledge and recall.
Under Columns, select which columns should be displayed in the alarms list. Remember that you can see the result of your selection under Preview.
SMP Gateway User Manual
• 133
Still under Columns, you can move the column names up and down using the Move Up and Move Down buttons. Selected columns will appear from left to right, starting with the topmost column name in the list.
Under Alarm state colors, set the colors for alarm messages that appear in the Annunciator’s various display pages:
16.2.3
Set the text and fill colors for active unacknowledged alarm messages. Different colors may be specified for major and minor alarms.
Do the same for active acknowledged alarms, unacknowledged alarms that have returned to normal and acknowledged alarms that have returned to alarms.
To revert to default colors, click Default Colors.
You can also use the preview section of the edition pane to modify the columns’ width, order and availability state, like for the Alarms page (see “Setting Up the Alarms Page”, above).
Setting Up the Blocked Page An operator may want to “deactivate” some alarms at runtime, during maintenance periods for example. The Annunciator make it possible by allowing some data points to be blocked, which means that even when alarm conditions are met for these points, they will no longer appear in the Alarms page: the blocked alarms are then transferred to the Blocked page. To learn how to block and unblock alarm inputs, see “Blocking Alarm Inputs”, page 154 To configure the display settings of the Blocked page, proceed as follows:
134 •
SMP Gateway User Manual
16.2.4
In SMP Config, from the tree view, expand the Pages branch and select the Blocked Alarms branch. The resulting content of the right pane is presented in the following screenshot.
Under Columns, select which columns should be displayed in the blocked alarms list. You can see the result of your selection under Preview.
Still under Columns, you can move the column names up and down using the Move Up and Move Down buttons. Selected columns will appear from left to right, starting with the topmost column name in the list.
You can also use the preview section of the edition pane to modify the columns’ width, order and availability state, like for the Alarms page (see “Setting Up the Alarms Page”, above).
Setting Up the History Page Alarms messages are preserved in a log file, which content is displayed in the History page.
SMP Gateway User Manual
• 135
To learn how to use this page, see “Using the History Log”, page 155. To configure the display settings of the History page, proceed as follows:
136 •
In SMP Config, from the tree view, expand the Pages branch and select the History branch. The resulting content of the right pane is presented in the following screenshot.
Under Columns, select which columns should be displayed in the messages list. You can see the result of your selection under Preview.
Still under Columns, you can move the column names up and down using the Move Up and Move Down buttons. Selected columns will appear from left to right, starting with the first column name in the list.
SMP Gateway User Manual
You can also use the preview section of the edition pane to modify the columns’ width, order and availability state, like for the Alarms page (see “Setting Up the Alarms Page”, above).
The messages list can be filtered by the operator at runtime to display only alarm or operation messages, using touch buttons. To display these buttons in the History page, select the Show display types buttons checkbox.
The messages list can hold a limited number of messages, which is called the history length. To adjust this setting:
16.2.5
In SMP Config's tree view, under the Annunciator instance, select the General branch.
Under History Length, specify the maximum number of alarm messages that will be preserved in the history log.
Setting Up the System State Page Various system information and statistics about the SMP Gateway and the Annunciator can be displayed in the System State page. To learn how to use this page, see “Monitoring System Status”, page 157. To select which information should be displayed and how, proceed as follows:
In SMP Config, from the tree view, expand the Pages branch and select the System State branch. The resulting content of the right pane is presented in the following screenshot.
SMP Gateway User Manual
• 137
138 •
Under Analog Points Columns, select which columns should be displayed in analog inputs/outputs lists. You can see the result of your selection under Analog Points Preview.
SMP Gateway User Manual
Still under Analog Points Columns, you can move the column names up and down using the Move Up and Move Down buttons. Selected columns will appear from left to right, starting with the first column name in the list.
Under Binary Points Columns, select which columns should be displayed in binary inputs/outputs lists. You can see the result of your selection under Binary Points Preview.
Still under Binary Points Columns, you can move the column names up and down using the Move Up and Move Down buttons. Selected columns will appear from left to right, starting with the first column name in the list.
You can also use both preview sections of the edition pane to modify the columns’ width, order and availability state, like for the Alarms page (see “Setting Up the Alarms Page”, above).
Under Statistics, select the statistics pages you want to display, by marking the corresponding checkboxes. Clear the checkboxes for the categories you want to hide. If you do not want to display any statistics, clear the Show Statistics checkbox. The following statistics pages are available in the Annunciator:
Vital System Information. Contains the same information that is displayed in the page of the same name in SMP Stats. Information available includes hardware/software information, temperature information and power statuses.
Performance (General). Contains real-time information about the SMP Gateway’s CPU load and memory usage.
Performance (Threads). Contains real-time information about the SMP Gateway’s CPU load specific to each execution thread.
Real Time Data Exchange. Contains statistics about real-time data that is exchanged between the masters, the slaves and other software components of the SMP Gateway.
SysServer. Contains various real-time statistics that are maintained by the SMP Gateway’s system server.
Master/slaves Scan Process. Contains the scan process statistics of every master and slave.
SMP Gateway User Manual
• 139
Note: Data point information is always displayed in the System State page.
16.2.6
Creating a User-Defined Readings Page Readings pages are used to display real-time values of some of the SMP Gateway’s data points, and to perform control operations on its output points. With some work, a simplified diagram of your substation can be made using up to 15 readings pages. Like other display pages, readings pages are configured using SMP Config:
From the tree view, expand the Pages branch and select the Readings branch. The Readings Annunciator Page pane appears on the right.
The readings page list is found on the left. The right part of the pane is occupied by a grid of 18 lines by 9 columns. Each cell is representing a small part of a readings page, and can be used to display static text, or the current state or value of one of your SMP Gateway’s input points. A “click action” can also be configured for the cell. Supported actions include switching the focus to another readings page and controlling one of the SMP Gateway’s output points. Above the grid, there is a toolbar giving access to all the design functions. The following steps describe how to create and populate a readings page:
Under Page List, click Add. A new page called Page 1 was added to the list. Type a significant name for the page, or leave the default name, and press Enter.
Note: You can create a clone of an existing page, by clicking Duplicate. Also, if you want to change the name of the page later, just select the page from the list and click Rename.
Cell(s) selection can be performed in many ways:
140 •
To select a single cell, click it.
SMP Gateway User Manual
To select all cells from a given line, click the line header.
To select all cells from a given column, click the column header.
To select multiple cells from different adjacent lines and column, click and drag over the cells you want to select.
Finally, to select all cells, click the non-editable cell found at the intersection of the line and column headers.
Select the cell at the right of the line 1’s header and under column A header: let us call it cell 1A. When you click the cell, the grid’s toolbar becomes active.
The toolbar’s various controls are presented in the following table: Control(s)
Description Allow you to cut, copy and paste cells in the currently edited page or from this page to another one. Allow you to undo last edits, one at a time. If you want to revert to an edit you just undo, you can use the redo button. Note that a list of edits is preserved for each page, so you can switch back to a page you left a few minutes ago and undo the last change you did to this page, for example. Change the font and font size of cell text. Only a limited number of font and sizes are available on the SMP Gateway. Apply the Bold or Italic font style to cell text. You can also apply both styles at the same time. Change the text’s alignment. Available choices are: left aligned, centered and right aligned. Text is left aligned by default. Change the cell’s font and background colors for normal text. Click the appropriate button to apply the currently selected color (as displayed on the button itself) or click the drop-down button to select the color you like. Other color options are only accessible through the Cell Properties dialog box, which is presented later in this section. Clear the entire content of a cell.
SMP Gateway User Manual
• 141
Open the Cell Properties dialog box. Depending on the shortcut button clicked, either the General, Font or Click tab will be selected. The Cell Properties dialog box is presented later in this section. Enter preview mode. This functionality is described more later in this section.
Note: If you click on any button while multiple cells are selected, the resulting modifications will be applied to all cells, if possible.
Still in cell 1A, click the General Properties button ( ). The Cell Properties dialog box opens, with the General tab selected.
Note: You can also open the Cell Properties dialog box by double-clicking a cell.
The General tab is used to select the type of content that will be displayed in the cell: static text or the current reading of an input point (analog or binary). Text and background colors can also be set here. The resulting display is previewed at the bottom of the tab.
By default, every cell is configured to display static text. For the sake of our example, we will display the SMP Gateway internal clock’s minute field, which value is available in analog input _smp___clockMinute. Note that a static text cell can also be used to display a colored cell with no text at all.
Note: You can also type the text directly in the cell, from the Readings Annunciator Page pane.
142 •
If you like, change the text and background colors.
Click the Font tab to edit the text’s font, style, alignment and size. A preview is also available in this tab. SMP Gateway User Manual
Click OK to complete edition of cell 1A.
To display the real-time value of an analog input (_smp___clockMinute, in our example):
Select cell 2A and click the General Properties button.
Under Select cell content, select Display analog data point. The Cell Properties dialog box changes to this:
Under Data Point, select the desired data point. For our example, select _smp___clockMinute. You can also type the point’s name if you prefer.
Select the number of decimals you want to display after the point for the value displayed. You can also apply a scale factor to the value before displaying it.
If you like, change the text and background colors.
If the data point is configured as an alarm input, you can specify different text and background colors to use while the input is in alarm. You can also make the cell blinks (it
SMP Gateway User Manual
• 143
toggles between the normal and alarm – or state 0 and state 1 – colors) by selecting the Flash checkbox.
Similarly, you can specify different colors to use when the data point’s quality is bad (ex. communications failure).
You can also use the Font tab to edit the text’s font, style, alignment and size. Note that the same font, style, alignment and size will be used when the data point is in alarm or when its quality is bad.
Click OK to apply changes.
To display the real-time state of a binary input point in a cell, the configuration process is quite similar:
Select the cell that will display a binary input’s real-time state and click the General Properties button.
Under Select cell content, select Display binary data point.
Under Data Point, select the desired data point. You can also type the point’s name if you prefer.
The bottom part of the General tab is a bit different than for analog data points:
144 •
Type the text to display when the input’s state is 0. For example, if the point represents the state of a relay, you can type open. If you want the cell to blink in this state, select the Flash checkbox.
Type the text to display when the input’s state is 1. For example, if the point represents the state of a relay, you can type close. If you want the cell to blink in this state, select the Flash checkbox.
You can specify the text and background colors to use while the point is in either state, or when the point’s quality is bad.
You can also use the Font tab to edit the text’s font, style, alignment and size. Note that the same font, style, alignment and size will be used when the data point is in alarm or when its quality is bad.
Click OK to apply changes.
SMP Gateway User Manual
Using the preview mode, you can transform the grid into a preview of the Annunciator’s display for this readings page. When you enter this mode, all cells configured for real-time display are replaced by simulated values. To enter the preview mode:
From the grid’s toolbar, click Preview Mode. Value cells display zero values and the Data Point Simulator window appears.
Note: The Data Point Simulator window will remain open as long as you stay in the Readings branch of SMP Config’s tree view.
Using the Data Point Simulator, edit the current value of the points that are used in the current page. You should see the corresponding cells changing in the preview pane.
Still using the Data Point Simulator, you can also simulate bad quality for any point in the list, by selecting Error under Quality.
To exit preview mode, click Preview Mode, or select any other branch in SMP config’s tree view.
Finally, you can also attach an “On Click” handler function to a cell. A handler function is an operation that is performed when a cell is pressed on screen, just like it would be clicked using a mouse pointer. For example, you might like to add, to your readings pages, buttons that allow you to control specific binary outputs or to open another readings page. By default, a cell has no handler attached to it. To add a Change page handler function to a cell:
Select the cell.
Double-click it, and then click the Click tab or click the On Click Properties button on the grid’s toolbar.
Under Select action to perform when user clicks cell, select Change page.
SMP Gateway User Manual
• 145
Under Page, select which readings page should be displayed when the operator will press the cell. All configured pages should be available for selection, plus the following options:
. Display the first page of the readings pages list.
. Display the page that appears just above in the readings pages list.
. Display the page that appears just below in the readings pages list.
. Display the last page of the readings pages list.
When you have made your selection, click OK.
Binary output control requires a bit more configuration work, because you must set up a separate window that will appear when you press the cell. This window contain customizable buttons that allow you to set the output to state 0 and 1, and a Cancel button. To add a Control Binary Output handler function to a cell:
146 •
Select the cell.
Double-click it, and then click the Click tab or click the On Click Properties button on the grid’s toolbar.
Under Select action to perform when user clicks cell, select Control Binary Output.
Under Data Point, select the output point you want to control. You can type the name of the point directly, if you prefer.
Under Window Title, type a title for the window that will appear when the cell will be pressed.
Under State 0, customize the button that will set the output point to the state of 0:
SMP Gateway User Manual
Type the button’s name in the Label edit box.
Specify the text and background colors for the button.
A preview of the button is displayed at the bottom.
Repeat the previous steps, this time under State 1, for the button that will set the output point to the state of 1.
Click Preview, to have an idea of what it will look like on screen.
Once you are finished, click OK.
Note: To have a larger control operation button, you can select multiple cells and add to these cells the same handler function and background color. Enter text for the center cell and you end up with a button that is more visible and easier to use.
16.2.7
Selecting the Pages to Display By default, all pages will be available for display. For some reasons, you might want some pages to be unavailable to the operators. To select the pages to display:
In SMP Config's tree view, under the Annunciator instance, select the Pages branch. The list of all pages appears in the right pane.
SMP Gateway User Manual
• 147
16.2.8
Mark the corresponding checkboxes for the pages you want to be available for display.
Clear the corresponding checkboxes for the pages you want to be unavailable for display.
Selecting the Page Displayed at Startup You can select which page you want the Annunciator to display at startup. To do so:
16.2.9
In SMP Config's tree view, under the Annunciator instance, select the General branch.
Under Initial Page, select the page you want to display at startup.
Changing How Time Information is Displayed Unless it is configured otherwise, time information is stored in the UTC format on the SMP Gateway. However, UTC is not very convenient for display and operation purposes. Moreover, date information is not formatted the same way in all countries. To change the date and time display format, proceed as follows:
148 •
In SMP Config's tree view, under the Annunciator instance, select the General branch.
Under Time Zone, select the time zone where the SMP Gateway is located.
If you want the time to be automatically adjusted for daylight savings, select the checkbox under Daylight Saving.
Under Date Format, select the format to use to display date information. By default, year is displayed first (all four digits), followed by the month and day, all separated by dashes (ex. 2008-07-03).
SMP Gateway User Manual
16.2.10
Setting Up an Alarm Buzzer The SMP Gateway has a normally closed relay that can be used to trigger an output. If you install a buzzer on the relay’s output, you can configure the Annunciator to trigger the buzzer upon alarm. Note: To locate the relay’s output on the SMP Gateway’s back panel, refer to the SMP 16 Installation Guide.
To activate this feature:
16.2.11
In SMP Config, from the tree view, select the General branch under the Annunciator instance.
Select the checkbox under Close Relay Contact on Alarm.
Temporarily Deactivating the Annunciator For some reasons, you might want to deactivate the Annunciator, without losing its configuration. To do so:
In SMP Config, from the tree view, select the General branch under the Annunciator instance.
Select the checkbox under Disabled.
To reactivate the Annunciator later, just clear the Disabled checkbox.
16.3
Setting Up the Touch Screen Now that you have completed the Annunciator setup, you are ready to connect and calibrate the touch screen. Note: Cooper Power Systems recommends the use of a touch screen from Elo TouchSystems for use with the SMP Gateway.
16.3.1
Connecting the Touch Screen to the SMP Gateway Two cables are usually provided with a touch screen:
A video cable. This cable should be connected to the VIDEO connector of the SMP Gateway and to the video input connector of the screen.
SMP Gateway User Manual
• 149
A cable to convey screen-touching information. When a touch screen is used with a computer, the screen also acts as a mouse when its user touches it. The touch information is transmitted using either a USB or serial cable.
Note: If you have trouble connecting these cables to the SMP Gateway, refer to the SMP 16 Installation Guide.
The use of a USB cable is recommended, as the SMP Gateway will detect it automatically: no configuration is required. Just connect the USB cable to the screen and to one of the USB port of the SMP Gateway. If you must use a serial cable, follow these steps:
16.3.2
Connect the serial cable to the screen and to one of the serial port of the SMP Gateway. You can use any port you like, except the Console port located on the front panel of the SMP Gateway.
Start SMP Manager.
Select your SMP Gateway from the list.
From the Tools menu, click SMP Config.
Follow the procedure described in the “Configuring the Serial Port Interfaces” section, page 34, to specify the appropriate interface (ELO Touchscreen) for the selected serial port.
Setting Up a Screen Saver using SMP Config Your touch screen may have an energy saving feature, but you can also configure the Annunciator to enter a screen saver mode during periods of inactivity. To set up the Annunciator’s screen saver:
16.4
In SMP Manager, select your SMP Gateway.
From the Tools menu, select SMP Config.
In SMP Config, from the tree view, select Annunciator, then your Annunciator instance, then the General branch.
Under Screen Saver Wait Time, select the inactivity time to wait before the Annunciator enters screen saver mode. You can also turn off this feature by selecting No Screen Saver.
Uploading the Configuration to the SMP Gateway Before you can use the Annunciator, two steps are left. You must:
150 •
upload the configuration file to the SMP Gateway and restart the system;
SMP Gateway User Manual
calibrate the touch screen at runtime.
For a little reminder on how to upload the configuration file to the SMP Gateway, see “Sending the Configuration to the SMP Gateway”, page 39. Once the configuration file has been uploaded, restart the SMP Gateway. At the beginning of the SMP Gateway’s startup sequence, you should see some configuration information displayed on the touch screen, and then the screen should become totally black. It will remain black during the rest of the startup sequence, which may take a few minutes. The calibration screen eventually appears. Calibration is the topic of the next section.
16.5
Calibrating the Touch Screen The Annunciator enter calibration mode at startup. You can also calibrate the touch screen anytime by pressing the Calibrate button found at the bottom right of the Annunciator’s display. When the Annunciator enters calibration mode, a cross appear in the upper left corner of the screen’s display. A message prompts you to touch the screen from a position of normal use. This means that you should be in your normal working position; either sitting down or in front of the rack standing up, as you intend to use it most of the times.
Touch the upper-left cross. Repeat for each cross, as they appear on-screen.
When this is over, a message will appear, asking if the cursor follows your finger. Leave your finger on the screen and move it all over the display.
If these new calibration settings are correct, press yes to accept them.
If you want to keep the old settings, press no.
In both cases, you will be taken back to the Annunciator’s display. You can recalibrate the screen anytime by pressing Calibrate.
Note: If, for some reasons, you are no longer able to access the calibration screen and you do not want to restart the SMP Gateway, you can call back the calibration screen via a Telnet command, as described in the “Elo Touchscreen Driver Manager” section, page 244.
16.6
Using the SMP Gateway’s Annunciator The following sections explain the various functions of the Annunciator.
16.6.1
Navigating Through the Different Pages To display a given page, simply press the page’s tab name.
SMP Gateway User Manual
• 151
To select an item from any displayed list, just press the line that contains it. If your fingertips are too large or if you do not feel at ease with this method, you can use the large arrow key buttons available at the bottom of each tab. In all tabs, except readings, up and down arrow key buttons are available to move through each item of the displayed list:
In the Alarms, Blocked and History tabs, it allows you to move the selection highlight over the previous or next alarm message.
In the System State tab, there are two sets of up and down arrow key buttons: one under the selection pane on the left, and another under the display pane on the right. Use the left set to select an information page to display in the right pane, and the right one to scroll through the displayed page.
Blocked, History and System State tab also have home and end buttons that allow you to jump the selection highlight to the first or last item of the list. These buttons are represented by up and down double-arrows.
The Readings tab has a slightly different navigation scheme.
The index of the currently displayed readings page is displayed on the left, with the total number of pages available. On the right, two large arrow key buttons allow you to navigate through the different pages. If your configuration contains a lot of readings pages, we suggest you add Change page buttons to each page, to customize the navigation for your needs (see “Creating a UserDefined Readings Page”, page 140).
16.6.2
Managing Alarms If you previously defined alarm conditions for this Annunciator instance, you will have to manage the alarms that will be triggered when these conditions will be met. When an alarm condition is met for a given alarm input, this condition is detected by the Annunciator, which:
152 •
turns on the sound warning system, to alert the operator that something requires its attention;
adds the data point to the Alarms page, as an alarm message that uses the text and background colors configured for the severity level of the condition (major or minor). The alarm message will be preceded by the ‘A’ letter, displayed on a red background.
SMP Gateway User Manual
You must turn off the sound warning system before you can acknowledge the alarm. The sound warning system also acts as an interlock, ensuring that you are aware of all the alarms that occur. To really hear a sound, you need to install a buzzer on the SMP Gateway as described in the “Setting Up an Alarm Buzzer” section, page 149. To turn off the sound warning system:
From the Alarms page, press Clear Sound.
You must then decide how you want to handle this alarm. Perform any of these three options:
Press General Ack/Clear to acknowledge all new alarms. It also clears the Alarms display of all data points that have returned to their normal condition. OR
Press Acknowledge to acknowledge the alarm. The entire line turns to a paler shade of its original color. If more than one alarm is active, the alarm that will be acknowledged depends on the alarm acknowledgement rule selected in SMP Config for the Alarms page (see “Setting Up the Alarms Page”, page 131). If you selected Alarms can be acknowledged and recalled in any order, you must select the alarm to acknowledge before pressing the button. OR
Press Block to move the data point in alarm to the Blocked page. Make sure the data point you want to block is selected before pressing the button. For more details about the block feature, see “Blocking Alarm Inputs”, page 154.
The data points that are in an alarm condition remain in the alarm display until the points return to their normal condition, at which time you can clear them from the display. When a point returns to its normal condition, the sound warning system turns on again and the ‘A’ letter that precedes the alarm message is replaced by an ‘R’ letter, displayed on a green background.
You must once again clear the sound before you can acknowledge and recall the data point, which will then no longer be displayed in the Alarms page. Proceed as follows:
Click Clear Sound to clear the sound warning system.
Handle the return-to-normal event:
SMP Gateway User Manual
• 153
Click General Ack./Clear to acknowledge all alarms and clear the alarm display of all data points that have returned to their normal condition. OR
Press Acknowledge to acknowledge the alarm. Again, if more than one alarm can be acknowledged, the alarm that will be acknowledged depends on the alarm acknowledgement rule selected in SMP Config for the Alarms page. If you selected Alarms can be acknowledged and recalled in any order, you must select the alarm to acknowledge before pressing the button.
Press Clear, in order to clear the alarm display of the data point that has returned to normal. The alarm acknowledgement rule defined in SMP Config also applies to clear (recall) operations.
If an alarm is triggered more than once for a given alarm input before it can be handled, the ‘x’ character will be appended either to the ‘A’ or ‘R’ character to notify the operator about this matter.
16.6.3
Blocking Alarm Inputs For some reasons, you might want to temporarily deactivate some alarm conditions. Such behavior may be required, when a certain part of the substation is under maintenance, for example. For this matter, the Annunciator offers an alarm input blocking feature. When an alarm input is blocked, it no longer triggers alarms, even when alarm conditions are met. You can only block an alarm input that is currently displayed in the Alarms page. When it is blocked, the alarm input is moved to the Blocked page, and it will not appear in the Alarms page until it is reactivated. In fact, alarms will simply no longer be triggered for this input. To block an alarm input:
154 •
From the Alarms page, select the data point that you want to block.
Press Block.
Select the Blocked page. The blocked alarm input should be displayed here.
SMP Gateway User Manual
To reactivate a blocked alarm input:
From the Blocked page, select the data point that you want to reactivate.
Press Reactivate. The alarm input is moved back to the Alarms page. The sound warning system turns on and you will then have to take action, to acknowledge and recall the input’s current condition (see “Managing Alarms”, above).
To reactivate all blocked alarm inputs simultaneously:
16.6.4
From the Blocked page, press Reactivate All.
Using the Single Alarm Display The single alarm display is found at the bottom of the Annunciator’s display.
It is used to manage alarms one at a time. Depending on how it is customized, the oldest or most recent alarm is displayed here, and the operator can acknowledge or clear the alarm simply by pressing the display. To customize the single alarm display, see “Setting Up the Alarms Page”, page 131. Using the single alarm display is easy:
16.6.5
If the sound warning system is on, press the single alarm display, which will give the same result than pressing Clear Sound in the Alarms page: the sound warning system is turned off and the alarm is ready to be acknowledged.
If the sound warning system has already been turned off, press the single alarm display to acknowledge the alarm just like you would do using the Alarms page’s Acknowledge button.
Using the History Log An history log file is stored in the gateway’s non-volatile memory to keep track of the most recent alarms that were triggered, and of the operations that were executed to handle them. The log file is
SMP Gateway User Manual
• 155
circular and has a limited size: when it is full, new entries replace the oldest ones. The history log file’s entries are displayed in the History page, in chronological order, starting with the oldest one at the top.
This page resembles the Alarms page, with an additional column that indicates the type of entry. Two types of entry are displayed in the History page:
Alarms (an ‘A’ is displayed in the T column). Every time an alarm appears or returns to normal, an entry is added to the log file. The message displayed is the same that appears in the Alarms page, with the ‘A’ or ‘R’ icon that indicates what happened.
Operator actions (an ‘O’ is displayed in the T column). Whether the operator clears sound, acknowledges or recalls alarms, blocks or unblocks alarm inputs, or performs control operations, an entry is added to the log file. The action executed is described in the Description column.
To customize the History display page and to set the size of the history log file, see “Setting Up the History Page”, page 135. As stated previously, large arrow key buttons are available to scroll through the list of entries, and when you select an entry, all related entries are highlighted. Two filtering buttons are also available.
These buttons are kept “pressed” by default, which means that no filter is apply to the log display.
156 •
SMP Gateway User Manual
To filter alarm entries:
Touch the Alarms (A) button. The button will appear “unpressed”, and only operator action entries should be displayed.
To display alarm entries:
Touch the Alarms (A) button again. The button will appear “pressed” and the alarms entries should be displayed.
To display only operator action entries:
Touch the Operator (O) button. The button will appear “unpressed”, and only alarm entries should be displayed.
To display operator action entries:
16.6.6
Touch the Operator (O) button again. The button will appear “pressed” and operator action entries should be displayed.
Monitoring System Status The System State page provides access to the SMP Gateway’s internal statistics and the current value of all its data points.
The left pane lists all information or statistics pages that can be displayed in the right pane.
SMP Gateway User Manual
• 157
Under the Data Points branch, some branch names might be displayed in orange. This means that the value of some data points displayed in these branches is unavailable due to communications failure. These points are also displayed in orange in the right pane. When an analog inputs or analog outputs branch is selected, the right pane displays the following information for each analog input:
Name. The input’s name.
Floating Point Value. The input’s actual value.
Integer Value. The input’s actual raw value.
Low Threshold. The value under which an alarm will be triggered for this input, if configured to trigger alarms. Nothing is displayed if the data point is not configured to trigger alarms.
High Threshold. The value over which an alarm will be triggered for this input, if configured to trigger alarms. Nothing is displayed if the data point is not configured to trigger alarms.
Deadband. Indicates how much the value must go beyond the low or high threshold to trigger an alarm. Nothing is displayed if the data point is not configured to trigger alarms.
When a binary inputs or binary outputs branch is selected, the right pane displays the following information for each binary input:
158 •
SMP Gateway User Manual
Name. The input’s name.
State. The input’s actual state.
Alarm. Indicates it this input is in alarm (1), or not (0). Nothing is displayed if the data point is not configured to trigger alarms.
Filter(s). The appearance and disappearance filters, which respectively indicates how long, in milliseconds, the binary input must keep the active state (TRUE or 1) before triggering an alarm, and how long, in milliseconds, the binary input must keep the inactive state (FALSE or 0) before considering that the alarm is no longer active. Nothing is displayed if the data point is not configured to trigger alarms.
Statistics branches/pages are quite similar to those available through the SMP Stats tool. For more information about statistics and the SMP Stats tool, see “Viewing Communications Statistics in Real Time”, page 55.
16.6.7
Performing Control Operations From a Readings Page As seen previously in the “Creating a User-Defined Readings Page” section, page 140, you can create touch buttons that allow operators to perform control operations. When you press such a button, a modal window appears over the Annunciator’s main display.
SMP Gateway User Manual
• 159
This window is also customizable, as described in the same section. In the snapshot above, the State 0 button is named Open and the State 1 button is named Close. To perform a control operation:
Press either the State 0 or State 1 button:
To force the corresponding output to state 0 (FALSE), press the State 0 button.
To force the corresponding output to state 1 (TRUE), press the State 1 button.
Press Cancel to close this window without forcing the output’s state.
The control operation window is replaced by a confirmation window.
16.6.8
Press Execute to proceed with the control operation’s execution.
Press Cancel to close this window without executing the control operation.
If you pressed Execute, two entries will be added to the history log: one to indicate that a control operation has been performed on the given binary output, and another to indicate the result. The same entries, and more precise information, are also stored in the Control log file, which can be accessed using the SMP Log tool. For more information about this tool, see “Viewing the SMP Log Files”, page 47.
If you press Cancel, the window is closed and no control operation is performed.
Using the Screen Saver A screen saver can be configured to replace the Annunciator’s display by a black screen during periods of inactivity. To learn how to set up the screen saver, see “Setting Up a Screen Saver using SMP Config”, page 150. To leave screen saver mode, just touch the screen.
160 •
SMP Gateway User Manual
The screen saver also automatically ends its execution when an alarm occurred, or when the data point that triggered it return to its normal condition.
SMP Gateway User Manual
• 161
17
The SMP Gateway’s Automation Functions
Because it is connected between the substation devices and the control centers, the SMP Gateway is well positioned to implement advanced processing functions that would be impossible to perform by less sophisticated devices. The SMP Gateway provides the following automation capabilities:
17.1
The SMP Automation Functions module, which add basic automation functions. See “The SMP Gateway Automation Functions Module”, next.
The Soft PLC module and CoDeSys development platform, which allow the creation of sophisticated automation scripts, such as closing circuit breakers and load balancing. See “The Soft PLC”, page 176.
The SMP Gateway Automation Functions Module The SMP Gateway Automation Functions module is an optional software package designed to extend the capabilities of existing devices by adding local automation capabilities similar to what could be implemented using an external PLC. The module adds the following functions to the SMP Gateway:
The Analog Control function, which performs a control operation on a physical analog output point, based on the value change of a physical input point. Basically, it writes the value of an input point to an output. A deadband value, in engineering units, can be specified so that only changes that exceed the deadband value will trigger a control operation. A time filter, in milliseconds, can be applied to value changes of the source point, to prevent control operations from being triggered on transitions of short duration.
The Best Of function, which makes a logical input or output point an exact replica of the best source point available of the same type. The evaluation of the best source point is based on quality. An exact replica involves the support for redundant devices: value or state, the quality and the timestamp. Furthermore, if the “best of” operation involves output points, the requested command is sent to the best source point.
SMP Gateway User Manual
• 163
17.1.1
The Binary Control function, which performs a control operation on a binary output point, based on the state change of a binary input point. A millisecond time filter can be applied to value changes in the source point, to prevent control operations from being triggered on transitions of short duration.
The Binary Debouncing function is the answer to a typical binary signals problem, by filtering short-term transitions, considered as non-significant.
The Create function, allows you to create a logical analog or binary input point that acts as a data holder. The only way to modify the data point is by using a Force operation, using the Force function. A validity delay can be specified to define a refresh period after which the value of the created point must be refreshed to maintain a valid status. If the value is no longer refreshed using the Force function after this delay, the point inherits the bad quality status. This function, in conjunction with the Force function, allows a slave to update a input point value (binary or analog) that can be read by any other slave.
The Force function, which forces the value or state of an analog or binary input point, based on control operations performed on force and unforce output points created by the function.
The Grouped Control function, which performs a control operation on a group of output points, based on the value or state change of an analog or binary control point.
The Inhibition function, which uses a logical output point to control a group of physical output points for the purpose of enabling or disabling control functions. This function can also be used with physical input points, in which case it enables or disables reporting of transitions for those points.
The Input Latching and Reset function, which changes the state of a logical input point, called a latched point, whenever it detects a transition or pulse on a physical binary input point. The latched point remains “on” until either a reset operation is done on a binary output reset point or an internal timer expires. Optionally, the control operation on the reset point can also apply to a physical binary output point called the controlled point.
The Logical function, which dynamically computes an “AND” or “OR” operation on a group of binary input points. The result of this computation is stored in a logical binary input point.
The Logic Processor defines logical data points which values are based on calculations performed on physical points that you build in the Logic Editor, to process existing points through different operations described further. It is a much more elaborated version of the Logical function.
Adding an Automation Functions Instance Proceed as follows to add an Automation Functions instance using SMP Config:
164 •
In the left pane, click Automation Functions, under Master Protocols.
In the right pane, assign a name to the new instance.
The new instance appears in the left pane.
SMP Gateway User Manual
17.1.2
As shown in the screenshot, the newly added instance includes the following items:
General settings, which set the general behavior of the component.
Settings for various data point types. Initially, there are no data points. You will create logical data points for each function you set up. You will then specify the settings for each of these logical data points.
Functions. All the currently supported functions appear in the list. You will define specific functions of these various types, and these functions will refer to logical data points.
In the left pane, click General.
Type a prefix in the right pane. This prefix must be unique for each Automation Functions.
Defining an Automation Function Each instance includes one or more automation functions, such as Best Of, Force, Create, and so on. The procedure next shows you how to define a Best Of function, but the process is similar for all the various types of functions.
In the left pane, under Functions, click Best Of.
The right pane shows the settings you need to enter for the Best Of function.
SMP Gateway User Manual
• 165
The Best Of function makes a logical input or output point an exact replica of the best source point available of the same type. The logical point is referred to as the “result point”.
In the right pane, type a name for the function.
Define the result point:
In the left pane, click the type of data point you want for the result point. For the benefit of the example, click Analog Inputs, and then on Logical Inputs. Thus, the result point will be a logical analog input point.
In the right pane, type a name of your choice for the result point. Let us call it “Best Of Result Point”, and enter its settings: scale, offset, units, etc.
In the left pane, click again on Best Of.
In the right pane (see previous screenshot), choose “Best Of Result Point” in the Result Point drop-down list.
Define the first source point:
Type the name of the point in the First Point box.
Or,
166 •
Put the cursor in the First Point box.
In the Tools menu, click Select Points.
In the Select Points dialog box, choose the first source point to which you want to subscribe. This point has to be an analog input point, to match the data point type of the result point. In our example, we selected an analog input point on a DNP3 device. This point represents the phase A current.
Click Paste to have the point appear in the First Point box.
SMP Gateway User Manual
Define the second source point:
Type the name of the point in the Second Point box. Or,
Without closing the dialog box, put the cursor in the Second Point box.
In the Select Points dialog box, choose the second source point to which you want to subscribe. This point also has to be an analog input point, to match the data point type of the result point. In our example, we chose an analog input point on a MODICON MODBUS device, which represents the phase A current, as did the DNP3 point.
Click Paste to have the point appear in the Second Point box.
Type a description of the automation function, if you like.
The screen is shown next.
The Best Of function will choose the better of the 2 source points, and put the result in the result point. Note: In the example, we subscribed to device data points, but we could have subscribed to any data point available in the SMP Gateway.
SMP Gateway User Manual
• 167
17.1.3
Understanding Automation Functions Settings Complete documentation on the automation functions is available in the Application Notes folder of the SMP Gateway Software & Tools CD-ROM, in a document called SMP Automation Functions.
17.1.4
Using the Logic Processor SMP Config enables you to derive a data point through a mathematical expression that includes existing data points. For instance, you may want to export the value of a certain power aspect such as phase imbalance but no such data point is available. If data points are available for voltage and current, you can simply define three new data points calculated as the voltage times the current for each phase, then check power imbalance between the three points. The expression for deriving a calculated data point can be evaluated in one of two ways:
By exception. Whenever there is a transition on the data points included in the expression. If you choose this option, you also specify whether the evaluation is to be triggered by a specific data point or by any data point in the expression.
Periodically. Every X milliseconds.
You can choose to have the expression evaluated either by exception or periodically, or both. If you choose both, the expression will be evaluated once every X milliseconds as well as anytime there is a transition on a data point or signal used in the expression. If you do not choose either method, the expression will be evaluated only once, on the SMP Gateway’s startup. Note: This function is not available for the SMP 4-20 and the SMP 8-40.
To create a calculated data point:
In the left pane, at the bottom of the automated functions list, expand Functions and rightclick Logic Processor.
In the shortcut menu, select Logic Editor.
SMP Config displays the Logic Editor dialog box.
168 •
SMP Gateway User Manual
The Logic Editor is used to enter the expression that generates the value of the calculated data point. It is displayed across several windows, which allow you to set the attributes of the calculated data point and assist you in editing the expression. Use the toolbar at the top of the dialog box to validate, save and close the expression, or to undo the last change to the expression. The table below describes the various areas of the dialog box: Window
Description
Properties
Used to specify the different attributes of the calculated data point. These attributes are described in the sections below.
Data Points
Used to select and enter existing data points in the expression. You can select data points from the list of available data points. These are grouped together in folders, based on grouping criteria that you established with the Group Settings tab of the Display Options dialog. If you open the various folders, you will note that binary points are displayed in blue, while analog points are displayed in green. The list is a memory jogger for selecting I/O points to be used in the expression. Double-click on an item to insert it at the cursor location in the expression window.
Functions
Displays the list of all the functions that can be inserted in the expression. Double-click on an item to insert it at the cursor location in the expression window. The various functions are described in the sections below.
Operators
Displays the list of all the operators, constants and variables that can be inserted
SMP Gateway User Manual
• 169
Window
Description in the expression. Double-click on an item to insert it at the cursor location in the expression window. The various operators are described in the sections below.
Expression (empty window at the bottom of the application window)
Used to enter and edit the expression to be evaluated. You can type the expression directly or use the memory-jogging windows described above. The result of the evaluation of the expression is assigned as the value of the calculated data point.
A calculated data point has the following properties: Properties
Description
Produced point
Resulting data point.
Name
Name of the calculated data point for which the expression is currently being edited. This field cannot be edited. To edit an expression for another calculated data point, close the editor and select another data point in one of the analog or binary point pages in the Site view.
Description
Optional space for you to type a description of the new point.
Timestamp
Defines how the calculated data point is to be time-stamped. Specify "Server" if you want the system time to be used as the timestamp, and specify "Triggered point" if you want the timestamp to be the time of the point that triggered the calculation. By default, the calculated data point is time-stamped by the SMP Gateway.
Quality
Specifies whether the quality of the calculated data point will always be good, or will depends the quality of its source point(s) If you select Use source quality, as soon as the quality of one of the source points is bad, the calculated data point’s quality will also be bad.
170 •
Time-based
Specifies whether the expression is to be evaluated on a periodic basis. The time interval is then specified via the Time interval attribute. Normally, expressions are not evaluated on a periodic basis.
Time interval (ms)
Specifies that the expression is to be evaluated every X milliseconds. This time interval applies only if the Time-based attribute specifies "Yes". The minimum value is 50 ms. If this condition is
By exception
Specifies whether the expression is to be evaluated whenever there is a transition on one of the data points or signals in the expression.
Specific trigger
Specifies whether the evaluation of the expression is to be triggered by a single data point ("Yes") or by any data point ("No") in the expression. This attribute is ignored if By exception is set to "No".
Triggered by
Used to specify the name of the data point or signal that will trigger the evaluation of the expression. This attribute is ignored if Specific trigger is set to "No".
SMP Gateway User Manual
17.1.4.1
Data Point Names in Expressions To use a data point in an expression, simply type the name of the data point. Make sure to include the prefix, if applicable. A data point name used in an expression must adhere to the following Visual Basic-like notation:
It must begin with a letter.
It can include alphanumeric characters (A-Z, a-z, 0-9), the underscore separator " _ " (without the quotes), and special characters, such as a period.
If the data point name contains a special character, it must be surrounded by the delimiter character " (the quotation mark). For example, a physical data point name of T5.APHA must be declared as "T5.APHA". Here are some examples of valid expressions: 120 + ( CurrentPoint * 0.02 * ( Rand() - 1 ) ) ( 0.85 "T5.APHA" * "T5.KVAB" ) / 1000 "1B17.MA" AND ("120-1.MA" AND NOT "120-1.MB" ) AND "1B1.MA" Imbalance("T5.APHA", "T5.APHB", "T5.APHC")
17.1.4.2
Comments in Expressions Expressions can span several lines. To insert a comment into an expression, put a single quote at the beginning of the line. For instance: ' Calculates the imbalance of transformer #5 Imbalance("T5.APHA", "T5.APHB", "T5.APHC")
17.1.4.3
Condition Statements You can use the following condition statements in expressions: Statement
Description
If Then Endif
Evaluates the specified expression if the logical condition is true.
If Then Else Endif
Evaluates the expression specified after the "THEN" if the logical condition is true, or evaluates the expression specified after the "ELSE" if the logical condition is false.
SMP Gateway User Manual
Note that the expression can contain several embedded IF and ELSE statements, in which case each ELSE statement is associated with the IF statement closest to it.
• 171
17.1.4.4
Mathematical Functions You can use the following built-in mathematical functions in expressions:
17.1.4.5
Function
Description
Abs( x )
Calculates the absolute value of x.
Pow( x, y )
Calculates the value of x to the power of y.
Sqrt( x )
Calculates the square root of x.
Exp( x )
Calculates the value of e raised to the power of x.
Log( x )
Calculates the logarithm of x to the base 10.
Sin( x )
Calculates the sine of angle x, expressed in radians.
Cos( x )
Calculates the cosine of angle x, expressed in radians.
Tan( x )
Calculates the tangent of angle x, expressed in radians.
ArcSin( x )
Calculates the arcsine of angle x.
ArcCos( x )
Calculates the arccosine of angle x.
ArcTan( x )
Calculates the arctangent of angle x.
Min( x, y )
Compares the values of x and y, and retains the lesser of the two.
Max( x, y )
Compares the values of x and y, and retains the greater of the two.
Data Point Functions You can use the following built-in data point functions in expressions. Function
Description
Imbalance( point A, point B, point C )
Calculates the imbalance among three phases, for the current represented by the three data point names. The calculation is defined as follows for a three-phase current: ((Imax - Imin) / Iavg) * 100 where: Iavg = (AI + AB + IC) / 3 Imax = max (IA, IB, IC) Imin = min (IA, IB, IC)
IsEqual( point1, point2, precision )
Compares point1 and point2, to the nearest precision significant digits. The expression evaluates to TRUE or FALSE, depending on whether or not point1 = point2.
172 •
SMP Gateway User Manual
17.1.4.6
IsTrigger( point )
Evaluates to TRUE if the specified point causes the expression to be reevaluated.
QualityOf( point )
Evaluates to TRUE if the value of the specified data point is valid.
TimestampOf( point )
Returns the timestamp of a point, as a number of milliseconds that have elapsed since an internal reference date and time. Use this function for the sole purpose of comparing timestamps that were obtained via a previous call to the TimestampOf() function.
BAD_QUALITY
Sets the quality of a data point to BAD, which means that the value of the data point cannot be assumed as valid.
Generators You can use the following built-in generators in expressions. Generators are used to mathematically generate input values for data points. Generator
Description
Sine( amplitude, frequency, phase )
Generates an expression of the form: Sine( A, f, P ). Calculates the value of a sinusoid with an amplitude A, a frequency f in hertz, and an initial phase P in degrees. P is optional and if you don't specify it, it will be assigned a value of 0.
Pulse( amplitude, frequency, duty cycle, delay )
Generates an expression of the form: Pulse( A, f, dc, d ). Calculates the value of a pulse stream with an amplitude A, a frequency f in hertz, a duty cycle cd in percent, and a delay of d milliseconds. d is optional and if you don't specify it, it will be assigned a value of 0.
Saw( amplitude, frequency, delay )
Generates an expression of the form: Saw( A, f, d ). Calculates the value of a sawtooth wave with an amplitude A, a frequency f in hertz, and a delay of d milliseconds. d is optional and if you don't specify it, it will be assigned a value of 0.
Randn( mean, variance )
Generates an expression of the form: Randn( mean, var ). Calculates a random value with a normal distribution that has a mean value of mean and a variance of var.
Rand()
Generates an expression of the form: Rand( ). Calculates a random value with a uniform distribution ranging between 0.0 and 1.0.
SMP Gateway User Manual
• 173
17.1.4.7
Arithmetic Operators You can use the following arithmetic operators in expressions: Operator
Description
+ [Add]
Calculates the sum of the left and right operands.
- [Subtract]
Calculates the difference between the left and right operands.
* [Multiply]
Calculates the product of the left and right operands.
/ [Divide]
Divides the left operand by the right operand.
( [Opening parenthesis]
Expressions are evaluated according to standard operator precedence. Parentheses are used to group sub-expressions and control the order in which expressions are evaluated. 1 + 2 * 3 evaluates to 7 (1 + 2) * 3 evaluates to 9
) [Closing parenthesis]
Expressions are evaluated according to standard operator precedence. Parentheses are used to group sub-expressions and control the order in which expressions are evaluated. 1 + 2 * 3 evaluates to 7 (1 + 2) * 3 evaluates to 9
17.1.4.8
Binary Operators Binary operators are used to manipulate the individual bits of expressions or data points. You can use the following binary operators in expressions: Operator
Description
BAND
Calculates a bitwise AND between the left and right operands. For instance, 12 BAND 5 evaluates to 4 (1100 BAND 0101 is 0100).
BOR
Calculates a bitwise OR between the left and right operands. For instance, 12 BOR 5 evaluates to 13 (1100 BAND 0101 is 1101).
BNOT
Calculates a bitwise NOT of the value to the right. For instance, BNOT 0 evaluates to -1 (BNOT …0000 is …1111).
BXOR
Calculates a bitwise XOR between the left and right operands. For instance, 12 BXOR 5 evaluates to 9 (1100 BXOR 0101 is 1001).
BEQV
174 •
Calculates a bitwise EQV between the left and right operands. For instance, 12 BEQV 9 evaluates to 6 (1100 BEQV 0101 is 0110).
SMP Gateway User Manual
17.1.4.9
Logical Operators Logical operators are used to combine the results of logical expressions such as comparisons. You can use the following logical operators in expressions:
17.1.4.10
Operator
Description
AND
Evaluates to TRUE if the left and right operands are both TRUE.
OR
Evaluates to TRUE if either the left or right operand is TRUE.
NOT
Evaluates to TRUE if the value to the right is FALSE.
XOR
Evaluates to TRUE if the left and right operands have different values.
EQV
Evaluates to TRUE if the left and right operands have the same value.
Relational Operators You can use the following relational operators in expressions:
17.1.4.11
Operator
Description
< [Less than]
Evaluates to TRUE if the left operand is less than the right operand.
> [Greater than]
Evaluates to TRUE if the left operand is greater than the right operand.
= [Greater than or equal to]
Evaluates to TRUE if the left operand is greater than or equal to the right operand.
= [Equal to]
Evaluates to TRUE if the left operand is equal to the right operand.
!= [Not equal to]
Evaluates to TRUE if the left operand is different from the right operand.
Constants and Variables You can use the following built-in constants and pseudo-variables in expressions: Operator
Description
CurrentPoint [Point value]
Represents the current value, i.e., the value of the logical point being edited, just prior to its evaluation.
SMP Gateway User Manual
• 175
17.2
The Soft PLC The Soft PLC is an optional software module available on all models. Using this module, you can create automation scripts that access the data points in the SMP Gateway’s real-time database in order to create sophisticated control functions. Since the Soft PLC is part of the SMP Gateway’s internal architecture, the scripts you define can be used to:
create new logical data points, with values based on the result of calculations performed on real data points;
process data in real time before sending it to control centers;
implement sophisticated local automation functions, such as automatic closing of circuit breakers and load balancing.
The Soft PLC module is provided with the CoDeSys development platform, a complete development environment that supports the IEC 61131 programming languages:
17.2.1
Instruction List (IL)
Structured Text (ST)
Function Block Diagram (FBD)
Continuous Function Chart (CFC)
Ladder Diagram (LD)
Sequential Function Chart (SFC)
The CoDeSys Development Environment CoDeSys is one of the most popular IEC 61131-3 programming systems for PLCs and industrial controllers. It supports the full range of standard IEC 61131-3 data types, as well as user-defined data types: arrays, structures, enumerations, aliases and pointers. The tools provide a comfortable programming environment, with full debugging support. The following illustration presents CoDeSys application’s main window.
176 •
SMP Gateway User Manual
17.2.2
Using CoDeSys to Create SMP Gateway Automation Scripts While a detailed description of how to create automation scripts is beyond the scope of this document, the process can be summarized in the following steps:
Install the CoDeSys development system on your PC.
Start CoDeSys and install the SMP Target Support Package. A Target Support Package (TSP) contains all the files and configuration information necessary to control the SMP Gateway from a program created in CoDeSys.
Add the SMP Library to the CoDeSys project. This library contains all the information necessary to access the SMP Gateway components from a programming language.
Create your automation script using one of the IEC 61131-3 programming languages.
Connect the CoDeSys development platform to the SMP Gateway.
Load the script on the SMP Gateway and use CoDeSys’ advanced debugging features to test and debug the script.
For complete details on using CoDeSys to create scripts for the SMP Gateway Soft PLC module, see the SMP Gateway PLC User Manual, GUI-00316-00003-T.
SMP Gateway User Manual
• 177
18
Using Syslog with an SMP Gateway
Syslog is a method for delivering log information from a sender to a receiver, typically across an IP network. Typically used for computer system management and security auditing, Syslog is supported by a wide variety of devices and receivers across multiple platforms. Because of this, Syslog can be used to integrate log data from many different types of systems into a central repository. It is then possible for the system administrator to dispatch these messages to email or SMS systems, for example. The SMP Gateway’s Syslog component uses the UDP protocol to send its log entries to a single receiver. It is configured using SMP Config, and is active as soon as the SMP Gateway starts up. For an overview of the messages that an SMP Gateway may send to a Syslog receiver, launch SMP Log and take a look at the various log files’ contents. If you need to know more, open SMP Log and look at the log's content. You can also refer to section “Information Provided by SMP Log”, page 47. The following section describes the few steps to follow to set up Syslog on your SMP Gateway.
18.1
Setting Up Syslog Because it is based on the SMP Gateway’s own logger, the Syslog feature is easy to configure on an SMP Gateway. The receiver of the Syslog messages must first be specified. If needed, the facility qualifiers attached to messages can be customized to your needs. To enable and configure the SMP Gateway’s Syslog, proceed as follows:
178 •
From SMP Manager’s Tools menu, click SMP Config to open it.
In the left pane, under your SMP Gateway's name, expand the System branch.
Select the Syslog branch and type an appropriate name. In the following example, the name is Main Syslog Server.
SMP Gateway User Manual
Expand the branch you just created and select the General branch.
Select the time zone used by the receiver server. If the server is configured for daylight saving time schedule adjustments, select the Auto Adjust DST checkbox.
Select the Receiver branch. Type the server’s name and IP address. Leave both port numbers to their default value, which are set to 514.
Select the Facilities branch. Assign, if needed, an appropriate facility code to each log file. The default settings, as illustrated above, should satisfy your requirements.
Note: Facility codes are used to distinguish different classes of Syslog messages. These codes are mainly useful for message classification.
SMP Gateway User Manual
• 179
19
Redundancy
The SMP Gateway is a critical component in a substation automation system. Hence, there are circumstances in which losing an SMP Gateway can severely impact substation operations. With the redundancy option, you can group 2 SMP Gateways together in a redundant configuration, to ensure continued operation of the substation automation system in the event of a failure. If one gateway fails, the other one takes over. There are different types of redundancies, as IEDs, SMP Gateways and networks can be redundant in many combinations. Redundant SMP Gateways are addressed by a SCADA center as if they were a single SMP Gateway with a single IP address. In the event that one SMP Gateway fails, the second SMP Gateway immediately becomes active and takes ownership of the logical IP address. Failover from the active SMP Gateway to the standby SMP Gateway typically takes less than 5 seconds. Network connections from the control center are temporarily lost when the active gateway goes offline. The control center simply needs to reconnect to the same group IP address in order to re-establish a new connection and restore system operation. An additional benefit is that you can update SMP Gateway settings with minimum down time, by updating the settings of the standby SMP Gateway, which will take over the other SMP Gateway during its own update. Note: The redundancy function is not available on SMP 4.
19.1
Redundant Group Operation In an SMP Gateway redundancy group, one SMP Gateway plays an active role while the other stands by. The active gateway polls the substation devices and responds to requests from control centers. The standby gateway initializes itself, places its serial links in a high-impedance state and waits to become active. The active SMP Gateway uses a special protocol to send regular heartbeat messages to the standby SMP Gateway. If the standby SMP Gateway fails to receive these messages, it automatically assumes that it should become active. 2 distinct communications channels are used for the heartbeat messages, to minimize the chances of both SMP Gateways becoming active due to a single faulty connection. These channels can be LAN connections, dedicated serial connections, or a mixture of both. The 2 SMP Gateways in a group must have identical configurations and be physically connected to the same substation devices. The active SIOM, which comes as an option with the SMP 4-20
SMP Gateway User Manual
• 181
and SMP 8-40, also supports redundancy and can therefore be used to connect serial devices to 2 redundant SMP 4-20s or SMP 8-40s.
19.1.1
Redundant IEDs When needed, breakers can be monitored and controlled by multiple protection relays to make sure that a fault is always detected; normally different relays from different manufactures are used. To report only one data set to the control center the SMP Gateway has the “best of” automation function (see “The SMP Gateway Automation Functions Module” on page 163). ACQUISITION OVER TWO LINKS TO TWO DEVICES. INFORMATION FROM PRIMARY SOURCE IS PREFERED.
COMMUNICATION FAILURE
SECONDARY SOURCE INFORMATION IS USED. INFORMATION FROM PRIMARY SOURCE IS PREFERED.
TRYING TO RESTORE COMM. WITH PRIMARY SOURCE.
COMMUNICATION RESTORE
You should know that:
The “best of” automation function is protocol independent.
It is a per-point redundancy, allowing any failure in the acquisition path.
Connection with two links to the same device can also be done. However, this achieves almost the same as the Master link redundancy but with more configuration effort.
When both IEDs have the same data map, a redundant master can be used instead of a “best of” configuration.
The main advantage of the “best of” function over master link redundancy is that the “best of” allows the mixing of different devices. On the other hand, the disadvantage is the size of the configuration, as 3 points are needed to get the data from a single input/output: 2 master points and 1 best of point.
19.1.2
Giving Priority to an SMP Gateway of the Group It is possible to give one of the SMP Gateways the priority; the SMP Gateway that has priority will become active when there are no error conditions. This setting will cause an additional failover when the SMP Gateway that has priority recovers from a fault. This is explained in the following sections.
182 •
SMP Gateway User Manual
19.2
Grouping 2 SMP Gateways for Redundancy Basic SMP Gateway redundancy consists of an active SMP Gateway and a standby SMP Gateway. The active gateway is polling the devices and communicates with the control center as if it was a stand-alone system. The active and standby gateways are communicating with each other so that when the active gateway fails, the standby one becomes active. Both SMP Gateways share a public IP address to which the control center can connect. This ensures that no special network configuration is needed at the control center; in fact, when the control center connects to the public IP-address, it has no indication which gateway is active and which one is on standby. In the following example, SMP Gateways 10.2.15.1 and 10.2.15.2 are grouped under the public IP address 10.2.15.3. 10.2.15.3 10.2.15.1
ACTIVE
10.2.15.3
10.2.15.2
STANDBY
10.2.15.1
SMP FAILURE
10.2.15.3
10.2.15.2
ACTIVE
SMP RESTORED
10.2.15.1
STANDBY
10.2.15.2
ACTIVE
You should know that:
19.2.1
Each SMP Gateway has its own private IP address.
Both SMP Gateways share a public IP address which is assigned to the active gateway.
Basic failover condition is the detection of a hardware failure on the active SMP Gateway.
Serial devices are connected to both SMP Gateways through Y-cables.
The standby SMP Gateway can still be accessed by its private IP address for maintenance.
It is possible to force a failover, as explained in section 19.3.1, page 188.
Both SMP Gateways must have the same configuration.
Setting Up a Redundancy Group Using SMP Manager You will use SMP Manager to create an SMP Gateway redundancy group. The sections that follow provide an overview of the configuration process. To create a redundancy group:
In the SMP Manager window, choose the 2 SMP Gateways you want to group together. Note that they must be of the same model and have the same configuration file currently loaded. Select one SMP Gateway, and use the mouse and the SHIFT or CTRL key on your keyboard, as for any standard Windows selection, to select the second SMP Gateway.
SMP Gateway User Manual
• 183
From the Redundancy menu, click Group SMP Gateways to display the Group Properties dialog box.
The Group Properties dialog box allows you to specify redundancy settings such as the virtual IP address, the LAN and serial connections to be used, and the conditions that have to exist for the SMP Gateways to switch roles. Redundancy is defined by 3 categories of settings, corresponding to the tabs in the dialog box.
184 •
In the General settings tab, you identify the basic properties of the group:
The keep-alive settings, i.e., the frequency at which keep-alive messages are to be sent by the active SMP Gateway (every x milliseconds, where x is between 200 and 10,000), and the timeout interval after which the standby SMP Gateway presumes that the active gateway has failed and takes over as the active one (between 600 and 30,000 ms).
The virtual address and subnet mask used to communicate with the group. The virtual IP address must be different from the physical IP addresses you set up during the initial configuration of your SMP Gateways. It identifies the group and is used by the control center to communicate with the active gateway. If the active gateway fails, the virtual IP address and subnet mask are assigned to the standby gateway.
Optionally, the virtual address and subnet mask of the secondary network, if you are using a secondary network for communication between the SMP Gateways and the control center.
Optionally, you can give priority to one of the SMP Gateways: if neither SMP is in a failure state, the one that has priority will become active.
SMP Gateway User Manual
The Links tab is used to specify the 2 connections that will be used to link the redundant SMP Gateways to each other.
These can be any combination of LAN or serial connections. The SMP 4-20 supports 1 LAN connection, while the SMP 8-40 and the SMP 16 can support 2. The active SMP Gateway uses these links to send regular heartbeat messages to the standby SMP Gateway. If the standby gateway fails to receive the messages, it automatically assumes that it should become active. 2 distinct communications links are used, in order to minimize the chances of both SMP Gateways becoming active due to a single faulty connection.
In the Links tab, you identify:
The type of first connection: LAN or serial.
The type of the second connection: LAN or serial.
The communication mode, either RS-232 or RS-422, if you are using one or more serial connections between the 2 SMP Gateways.
Note: To link two SMP Gateways using RS-232, use a standard null modem cable; using RS-422, use a standard null modem cable only if the SMP Gateways are SMP 16. A special cable is required if the linked gateways are SMP 4-20 or SMP 8-40; see the SMP 4-20 SMP 8-40 Installation Guide, GUI-316-027 T, for details.
A failover will automatically happen if the active SMP Gateway faces a major problem, such as a power failure, that prevents it from sending heartbeat messages.
SMP Gateway User Manual
• 185
The Failover tab defines optional conditions that will trigger a failover such as:
The system available memory falls below a defined threshold.
Low-voltage alarm detected on the unit power supply.
For 16/CP-PM and 16/SG-PM, SMP 8-40, 4-20, a high-temperature alarm.
The unit’s network connections failed.
Click OK. SMP Manager sends the settings to both SMP Gateways. You will need to restart both SMP Gateways to activate redundancy.
In the Restart Gateway dialog box, choose Shutdown and Restart to have the SMP Gateways restart in normal mode.
The next screenshot shows two grouped SMP Gateways in SMP Manager:
186 •
SMP Gateway User Manual
19.2.2
SMP Manager’s Redundancy Column The Redundancy column shows the current state of each SMP Gateway within a redundancy group. In the previous section’s example, the second SMP Gateway is on hot standby. This happens if the data points of the devices connected to the SMP Gateways have been configured for hot standby (for details, see “Hot Standby”, page 191). There can be several intermediate states, such as “initial”, “listen” or “speak”, while the grouping takes place. Thereafter, the following states may be displayed:
Active. Indicates that this SMP Gateway is active. It communicates with the field devices and sends “keep alive” messages at a frequency set through parameter settings. In the event of a failover, it becomes the standby SMP Gateway.
Standby. Indicates that this SMP Gateway is on standby. It listens for “keep alive” messages from the active SMP Gateway and takes over as the active SMP Gateway if the latter fails to send a message within the expected number of milliseconds.
Hot Standby. Indicates that this SMP Gateway is on hot standby. It listens for “keep alive” messages from the active SMP Gateway. It also synchronizes all the data points that have been set up for hot standby in SMP Config. See “Hot Standby”, page 191, for more information about this particular redundancy feature.
Partial Hot Standby. Indicates that this SMP Gateway is on hot standby (see above), but that the SMP Gateways have different configuration files.
When nothing is displayed, SMP Manager is not able to communicate with the SMP Gateway for one of the following reasons:
The SMP Gateway’s redundancy software is not running because you have not set its redundancy parameters.
The redundancy software has not been installed correctly on the SMP Gateway.
The SMP Gateway is down.
This column may also advise you of exceptional situations, as described here:
Peer IP: nnn.nnn.nnn.nnn. Indicates that one SMP Gateway of the group is not present in the SMP Gateway list of SMP Manager. To fix the problem, simply add the second gateway to the list.
Too Many SMPs. There are more than 2 SMP Gateways in this redundancy group. To fix the problem, remove the excess SMP Gateways.
Different parameters. The 2 SMP Gateways in this group do not have the same redundancy settings. To fix the problem, take the following steps:
Click one or both SMP Gateways.
From the Redundancy menu, click Group Properties.
SMP Gateway User Manual
• 187
A warning message appears, telling you that SMP Manager will use the default redundancy settings and asking you if you want to go on. If you reply in the affirmative, the Group Properties dialog box appears and you can change the settings to your liking. When you close the dialog box, both SMP Gateways will have the same settings.
Restart both SMP Gateways to activate the parameters. For each gateway:
Select the SMP Gateway to restart.
From the Gateway menu, click Restart.
From the Restart Gateway dialog box, click Shutdown and Restart.
Warning: Do NOT reset the SMP Gateways by pressing the reset button on the gateway itself, or you will lose your parameter settings.
Peer IP: nnn.nnn.nnn.nnn => Not in redundancy. The Peer IP is in the SMP Gateway list, but is not part of the redundancy group. This can happen if one of the 2 SMP Gateways in the group lose its redundancy configuration. To fix the problem, ungroup the SMP Gateway that is still in the redundancy group (see “Ungrouping SMP Gateways”, page 189) and regroup both gateways again.
Virtual gateway (IP: nnn.nnn.nnn.nnn). You have added, to the SMP Gateway list, an SMP Gateway with the virtual IP address you assigned as the public IP address of the redundancy group. The address of the active gateway is indicated in parentheses.
The redundancy configuration of all SMP Gateways in the list is retrieved cyclically. This mechanism allows you to see the current redundancy state of all SMP Gateways, on SMP Manager’s main screen. Since the refresh cycle is relatively slow, the redundancy configuration of a given SMP Gateway is automatically retrieved when the SMP Gateway is added to the list, when it is restarted, and when one or more files are sent to it. You can refresh the redundancy state of all SMP Gateways as follows:
From the View menu, click Refresh.
19.3
Managing Redundancy
19.3.1
Forcing an Active SMP Gateway to Fall On Standby To force an active SMP Gateway to fall on standby, proceed as follows:
Using SMP Manager, select the active SMP Gateway in the list.
From the Redundancy menu, click Force Standby.
The selected SMP Gateway will enter standby mode, while the other SMP Gateway in the group will enter active mode.
188 •
SMP Gateway User Manual
19.3.2
Additional Failover Conditions It is possible to define additional failover conditions to have a better control of which SMP Gateway is active. The failover conditions are defined in the SysServerConfig.txt file and that file can be uploaded to the SMP Gateway as any other file. In this file, 16 additional error conditions can be defined which will force a failover. An example file was copied on your computer’s hard drive during the SMP Tools’ installation, at the following location: \Program Files\Cybectec\SMP Tools\Documentation\Application notes.
19.3.3
Modifying the Redundancy Settings of an Existing Group To modify the redundancy settings of an existing group of SMP Gateways, proceed as follows:
19.3.4
In the SMP Gateway list, select one or both SMP Gateways of the group.
From the Redundancy menu, click Group Properties.
Modify the desired settings in the Group Properties dialog box. For a complete definition of the settings, refer to the “Setting Up a Redundancy Group Using SMP Manager” section, page 183.
Ungrouping SMP Gateways To separate 2 SMP Gateways that had been grouped together for redundancy, proceed as follows:
19.3.5
In the SMP Gateway list, select both SMPs.
From the Redundancy menu, click Ungroup SMP Gateways.
Testing and Validating the Configuration SMP Manager displays the current state of both SMP Gateways in a redundancy group. You can also use SMP Log and SMP Trace to display additional information. Using SMP Log with both SMP Gateways:
Verify in the Redundancy folder that one SMP Gateway is stated as active, and that the other one is stated as “on standby”, waiting for a failover.
For each SMP Gateway, using SMP Stats:
In the System folder, open the Redundancy folder to view additional redundancy information and statuses.
SMP Gateway User Manual
• 189
19.3.6
Monitoring Redundancy Status The GRP LED on the front panel of the SMP 16 displays the redundancy status, as does the ST2 LED on the front panel of the SMP 4-20 and SMP 8-40. Refer to your SMP Gateway installation guide for details.
19.3.7
Testing a Redundant Network So far, we have discussed SMP Gateway redundancy. However, with the SMP 16 and the SMP 840, you can also set up network redundancy. The SMP Gateways and the control center can communicate via either network. Next figure illustrates a typical redundant network configuration, where the control center communicates with an SMP Gateway group through two subnetworks. 10.3.30.3
10.3.30.3
10.2.15.3 10.2.15.1
ACTIVE
10.3.30.1
10.2.15.3
10.2.15.2
STANDBY
10.3.30.2
10.2.15.1
NETWORK FAILURE
10.3.30.1
10.2.15.2
ACTIVE
10.3.30.2
STANDBY
10.3.30.3 10.2.15.3 10.2.15.1
10.3.30.1
SMP FAILURE
10.2.15.2
10.3.30.2
ACTIVE
Note: Setting up a redundant network is out of the scope of this document. However, the following procedure describes how you can use the SMP Tools’ IP address switching feature to test a redundant network configuration.
Normally, the control center accesses the primary network and switches to the secondary network only if the primary network fails. You should therefore make sure the secondary network is working properly. To do this, you need to switch to the secondary IP address of your SMP Gateway, and then run SMP Log and SMP Trace.To switch from the first IP address to the second IP address:
From SMP Manager’s Tools menu, click Use Second Address.
Note that the switch to the second IP address applies not only to the SMP Gateway that is in the redundant network, but to all the gateways in the list. From this point on, if you launch
190 •
SMP Gateway User Manual
any SMP Tools, Telnet or Internet Explorer for any SMP Gateway, these applications will use the second IP address. To switch back to the first IP address:
From the Tools menu, click Use First Address.
Note that once a tool has been launched, it never switches IP addresses regardless of how many times you toggle the address selection. Address switching applies only to commands that take place after you instruct SMP Manager to switch addresses. Note further, that if there are other models in your SMP Gateway list that support only one IP address, such as the SMP 4 or the SMP 4-20, toggling back and forth between the first and second IP address will have no effect. You will see the same logs, traces and statistics, regardless of which address you specify.
19.4
Hot Standby The SMP Gateway software has the possibility to maintain a complete up-to-date image of the active SMP Gateway’s data on the standby SMP Gateway. This feature is called “hot standby”. It is available for the most common master protocols. Whenever a transition occurs on a hot-standby data point, data point information is first updated in the real-time database of the active SMP Gateway; it is then transmitted to the standby SMP Gateway, which updates its own database. Using hot standby, integrity scans are not always required, since the hot-standby data points are already synchronized, reducing the failover time significantly. To configure a master protocol instance for hot standby, refer to the specific protocol manual found on the SMP Gateway Software & Tools CD-ROM. To take full advantage of the hot standby, the slave protocol should be configured to be active anytime, even on standby. Proceed as follows:
In SMP Config, select the General node of the slave protocol instance.
Under Hot-Standby Support, Disabled should appear. Instead, select the slave component’s expected behavior between the following:
Acquisition. The slave protocol will receive data from its masters without accepting control commands from the control center.
Acquisition and control. The slave protocol will receive data from its masters and it will accept control commands from the control center. These commands will be forwarded to the active SMP Gateway, which will forward the control commands to the devices.
The following illustration presents the acquisition’s data flow for an SMP Gateway redundancy group that supports hot standby.
SMP Gateway User Manual
• 191
3
3 10.2.15.3
10.2.15.1
10.2.15.2 2
ACTIVE
HOT STANDBY
1
1.
The active SMP Gateway receives data from the device.
2.
The standby SMP Gateway is updated.
3.
Data is sent to the control center by both SMP Gateways.
Note: The public IP address is always associated with the active SMP Gateway. When the control center wants to connect to the standby SMP Gateway, it needs to use the physical IP address.
19.5
Teaming NICs for Network Fault Tolerance (SMP 16 Only) All SMP 16 models are equipped with two Network Interface Cards (NICs). You can group both NICs for network fault tolerance. This process is called NIC Teaming. The SMP 16’s implementation of NIC Teaming cannot be used for load balancing. Its sole purpose is for network fault tolerance: if one NIC fails, the network connection does not cease and continues to operate on the other NIC. To learn how to configure your SMP 16 for NIC Teaming, refer to the SMP 16 Installation Guide, under the “Configuring your TCP/IP settings” section.
192 •
SMP Gateway User Manual
20
Setting Up the SNMP Server
The SNMP server is an optional software module that allows the SMP Gateway to export statistics using the SNMP standard (Simple Network Management Protocol). The SMP Gateway’s SNMP agent publishes and supports both standard MIBs (management information bases) that are supported by the Windows CE operating system and custom MIBs that are supported by the SMP Gateway application. The agent supports extensive “reading” capabilities as well as limited “writing” and “trap” capabilities.
20.1
SNMP Traps SNMP traps are messages that are automatically sent to selected SNMP clients when specific, unusual events occur. They are the text equivalent of alarms. Traps are automatically sent to listening SNMP clients whenever:
the SMP Gateway restarts;
a communications link used by a master or slave protocol instance fails for more than 60 consecutive seconds (these traps are called link down traps);
a communications link used by a master or slave protocol instance becomes active (these traps are called link up traps).
In order to send traps, the SMP Gateway needs to know the IP addresses of the SNMP clients that are listening on the network. You can enter a maximum of 32 SNMP client IP addresses using the SMP Gateway’s SNMP Manager.
20.2
Configuring the SNMP Server To configure the SNMP server:
Select the SMP Gateway in SMP Manager.
SMP Gateway User Manual
• 193
Start a Telnet session:
From the Tools menu, click Telnet.
In the Telnet window that appears, type the following command: snmpmgr
SNMP manager lists all available commands, as shown next: \> snmpgr SNMP Manager Available commands (case insensitive): A R L M C G D B I T O F W H esc Q
Add a client. Remove a client. Display all clients. Modify the community membership of a client. Change a client description. Add a community. Remove a community. Display all communities and their permissions. Modify the permissions of a community. Modify the name of the system contact. Modify the location of the gateway on which the agent is running. List information on system contact and gateway location. Modify the firewall settings. Display the list of all commands. Abort the current operation. Quit.
You can display the previous list any time, by using the “H” command. You should specify the SNMP settings in the following order:
Add communities and their permissions.
Add a system contact.
Add a system location.
Add a number of clients and associate them to communities.
Any modifications you make will go into effect the next time the SMP Gateway will restart.
194 •
SMP Gateway User Manual
21
Time Adjustment
This chapter describes the different time adjustment features of the SMP Gateway.
21.1
Monitoring Time Information The SMP Gateway offers multiple ways to monitor the time information and statuses:
21.2
Some system data points provide time information. They are all prefixed by “_smp___clock” and are visible using the SMP Gateway’s web server (see “Using a Web Browser to View Data in Real Time”, page 59). For more information on system data points and an exhaustive list of time-specific points, see “System Data Points”, page 231.
Current data and time can also be seen in SMP Stats, in the Vital System Information folder, from the Internals folder located in the System folder. For more information on SMP Gateway statistics, see “Information Provided by SMP Stats”, on page 56.
SMP 16’s time information is displayed on the gateway’s front panel, using the SYNC LED. For a complete description of the different SYNC LED states, refer to the gateway’s installation guide on the SMP Gateway Software & Tools CD-ROM.
Also for the SMP 16 model, more precise time information can be seen in SMP Stats, in the Clock folder, from the Internals folder located in the System folder.
Setting SMP Gateway’s Internal Clock The SMP Gateway has a real-time clock installed, with battery backup. It is set once during the installation. If the clock does not indicate the accurate time or was not set right, you can change it manually, using SMP Manager. Note: If the SMP Gateway is synchronized by a GPS clock or any other external time source, setting time manually will not work.
To set the SMP Gateway’s clock using SMP Manager:
Launch SMP Manager.
SMP Gateway User Manual
• 195
Select the SMP Gateway for which you want to adjust time.
From the Gateway menu, select Set Time. The Set Time dialog box will appear.
Select whether the SMP Gateway’s clock will be set to UTC or Local Time.
If you selected Local Time, select the time zone to use for the time conversion. Select Apply daylight saving time if needed.
Note: Daylight saving time automatic adjustment is not supported by the SMP Gateway. If you use local time on your SMP Gateway, you must manually adjust the gateway’s internal clock at every DST clock shift.
The time at which the clock will be set is displayed just above the buttons. If it is as expected, click OK to set the SMP Gateway’s clock to this date and time.
The SMP Gateway’s internal clock is not an atomic clock, which means that it drifts from actual time. Over time, data’s timestamps become less accurate. Moreover, manual time adjustment using SMP Manager displays an accuracy of ±1 second. Consequently, time adjustment via an external source is highly recommended for the SMP Gateway to provide accurate timestamps. This is the topic of the next section.
21.3
Automatic Clock Adjustment By configuring the SMP Gateway for automatic clock adjustment, you no longer have to worry about internal clock’s drifting. All I/O changes, logs, traces and other data provided by the SMP Gateway are time-tagged with a greater degree of accuracy - typically one second or better. There are four ways to adjust the internal clock automatically:
196 •
Directly from a GPS signal, if you have an SMP 16 pre-installed with the GPS clock option. You must then have a GPS antenna receiving the highly accurate satellite signal.
Using an external source, such as an IRIG-B signal. It may come from another GPS antenna connected to another device that redistributes demodulated or modulated IRIG-B. It may also
SMP Gateway User Manual
come from another SMP 16 equipped with the GPS clock option that distributes IRIG-B to your SMP Gateway.
Directly from an SNTP server. SNTP stands for Simple Network Time Protocol, and is briefly presented in section “About GPS, IRIG-B and SNTP”, below.
Using a SCADA protocol, such as DNP3.
Here is a list of the possible time adjustment solutions that are available for the different Cybectec SMP Gateway types: Protocol
SNTP
Modulated IRIG-B
Demodulated IRIG-B
SMP 4-20
√
√
O
O
-
SMP 8-40
√
√
O
O
-
SMP 4
√
√
-
-
-
SMP 16/CP
√
√
√
√
G
SMP 16/SG
√
√
√
√
G
SMP Gateway model
GPS
Legend: O = With the SIOM option, G = with the SMP 16 GPS clock option. Note: Only one time adjustment solution should be implemented at a time for an SMP Gateway.
These different solutions are presented in the next sections.
21.3.1
About GPS, IRIG-B and SNTP Global Positioning System (GPS) is a satellite-based navigation system operated and maintained by the U.S. Department of Defense (DoD). GPS uses a constellation of satellites to calculate the exact position and altitude of GPS receiver stations. GPS technology requires a very accurate time source in order to calculate the orbital position of the satellites and determine the position of the receiver. To ensure the required level of accuracy, each GPS satellite is equipped with 4 atomic clocks that are kept in synchronization with the U.S. Naval Observatory's Master Clock. Each satellite continuously transmits its current position and a time code. This time code can be used to synchronize the SMP Gateway, if equipped with the appropriate hardware. IRIG-B is a military standard of the Inter Range Instrumentation Group. The best known IRIG standard is the IRIG Timecode standard used to timestamp video, film, telemetry, radar, and other data collected at test ranges. The main difference between the codes that are classified in letters from A to H is their bit rate, which varies between 1 pulse per second and ten thousand pulses per second. The IRIG-B standard operates at 100 pulses per second.
SMP Gateway User Manual
• 197
Note: IRIG-B signals come in two flavors: demodulated and modulated. Demodulated IRIG-B signals cannot be carried over long distances while the modulated IRIG-B can be carried over distances larger than 350 meters (1000 feet) without degrading. NTP stands for Network Time Protocol, and is a standard Internet protocol used to synchronize the clocks of computers to a time reference. NTP was originally developed by Professor David L. Mills of the University of Delaware. As a full implementation of the NTP protocol seemed too complicated for many systems, a simplified version of the protocol was defined: SNTP (Simple Network Time Protocol). SNTP is basically NTP minus certain internal algorithms that are not required by all types of servers.
21.3.2
Configuring the SMP 16 GPS Clock Option The SMP 16 GPS Clock uses the time information provided by the GPS system to provide a highly accurate time source for the substation. Setting up the GPS clock option is explained in detail in the SMP 16 GPS Clock Option installation guide, GUI-316-47 which is included on the SMP Gateway Software & Tools CDROM. Some software configuration is required, using SMP Config:
21.3.3
Under the System branch, select Time. If the Time instance has not been created yet, type a name in the blank Name text box, and then click again the Time branch.
Under the Time instance branch, select the General branch.
Under GPS Cable Length, type the total length, in meters, of the cable that links the SMP Gateway to the GPS antenna.
Using IRIG-B for Internal Clock’s Adjustment If your SMP Gateway supports IRIG-B and is not equipped with a GPS clock, the preferred time adjustment solution is to use an external IRIG-B time source. Setting up IRIG-B is described in the installation guide of your SMP Gateway, which is included on the SMP Gateway Software & Tools CD-ROM.
198 •
SMP Gateway User Manual
If your IRIG-B source provides its time information as “local” time, instead of UTC, some software configuration is required on the SMP Gateway, as the gateway internally uses UTC. Using SMP Config, proceed as follows:
21.3.4
Under the System branch, select Time. If the Time instance has not been created yet, type a name in the blank Name text box, and then click again the Time branch.
Under the Time instance branch, select the General branch.
Under Security Time Zone, select the time zone of the IRIG-B source.
Select the Auto Adjust DST checkbox if the IRIG-B source is automatically adjusted for daylight savings.
Setting Up the SMP Gateway as an SNTP Client Another alternative is to configure the SMP Gateway as an STNP client. To set up the SMP Gateway as an SNTP client:
Launch SMP Config.
Under the System branch, select SNTP. If the SNTP instance has not been created yet, type a name in the blank Name text box.
Under the SNTP instance branch, select the Client branch.
Select the Enabled checkbox.
Type the Refresh rate, which is the frequency, in minutes, at which the SMP Gateway will connect to the SNTP server in order to be resynchronized.
Type the Recovery Refresh rate, which is the frequency, in minutes, at which the SMP Gateway will retry to connect to the SNTP server following a connection failure. This value must be smaller than the normal Refresh rate.
Type the Maximum Time Variance allowed, which is the maximum difference allowed between the new time provided by the server and the actual time of the SMP Gateway. If the difference is larger, the time update is ignored.
SMP Gateway User Manual
• 199
21.3.5
Using a SCADA Protocol’s Time Adjustment Feature When no external time source is available to the SMP Gateway, the SCADA or control center can itself serves as a time source, if the protocol it uses to communicates with the gateway supports time adjustment (synchronization). DNP3 and IEC 60870-5-104 are such protocols. As each protocol has its own distinctive characteristics, refer to the protocol’s documentation found on the SMP Gateway Software and Tools CD-ROM to learn how to enable this protocolspecific feature.
21.4
Using the SMP Gateway as a Time Source Following the August 2003 blackout, NERC has recommended that substation devices be synchronized using a GPS clock. When the SMP Gateway is synchronized by an accurate time source such as an external IRIG-B source or an internal GPS clock, it can distribute accurate time to substation devices in one of the following ways:
Through a modulated or demodulated IRIG-B signal.
By acting as an SNTP server.
Using a master protocol, such as DNP3, IEC 60870-5-101 or IEC 60870-5-104. The accuracy may be limited by the protocol, but the overall synchronization of all the devices is typically accurate to within one second.
A slight delay may be introduced in the time information transmitted to devices. Output time accuracy is function of the type of time input used to adjust the SMP Gateway’s internal clock, and of the type of protocol or signal used to synchronize the devices. The resulting delays are presented in the following table. Output Delay Accuracy (± ms) Protocol output
SNTP output
Modulated IRIG-B output
Demodulated IRIG-B output
Protocol input
500
500
-
-
SNTP input
500
100
-
-
Modulated IRIG-B input
500
100
10
10
Demodulated IRIG-B input
500
100
10
1
GPS input
500
100
10
1
For example, if the SMP Gateway is time-adjusted using demodulated IRIG-B, a device’s clock adjusted by the gateway using demodulated IRIG-B may show a delay of ± 1 milliseconds. Note that the SMP Gateway can be more accurate: consider these values as “worst case scenarios”.
200 •
SMP Gateway User Manual
Also, the SMP Gateway does not perform accurate time-tagging when I/O changes are received from a device, because the transmission delay is unpredictable. For the time tag to be accurate, the device must time-tag the I/O changes itself. The following sections present the various time distribution features of the SMP Gateway.
21.4.1
Configuring IRIG-B Time Distribution IRIG-B time distribution is the ability, for an SMP Gateway, to distribute time adjustment information to various devices using IRIG-B signals. Unlike using SNTP or a master protocol’s time adjustment feature, IRIG-B time distribution requires the SMP Gateway to be time-adjusted by a reliable source such as an IRIG-B signal or by GPS. Setting up IRIG-B is described in the installation guide of your SMP Gateway, which is included on the SMP Gateway Software & Tools CD-ROM. Some additional configuration may be required, using SMP Config.
If the SMP Gateway is time-adjusted using GPS:
Under the System branch, select Time. If the Time instance has not been created yet, type a name in the blank Name text box, and then click again the Time branch.
Under the Time instance branch, select the General branch.
Under GPS IRIG-B Distribution, select the IRIG-B format to which you want the GPS time information to be converted.
Note : If the SMP Gateway is time-adjusted by an IRIG-B signal, the distributed IRIG-B signal will use the same IRIG-B format. For example, if the SMP Gateway’s input is an IEEE 1344 signal, the output will also be a IEEE 1344 signal.
If the SMP Gateway is part of a redundancy group, and you want it distribute time even while on standby:
21.4.2
Under the System branch, select Time. If the Time instance has not been created yet, type a name in the blank Name text box, and then click again the Time branch.
Under the Time instance branch, select the General branch.
Select the Distribute IRIG-B Signal checkbox.
Setting Up the SMP Gateway to Act as an SNTP Server If some devices can be configured as SNTP clients, the SMP Gateway can itself be configured to act as an SNTP server for these devices. To configure the devices as SNTP clients, refer to each device’s user manual. To set up the SMP Gateway as an SNTP server, proceed as follows:
SMP Gateway User Manual
• 201
21.4.3
Open SMP Config.
Under the System branch, select SNTP. If the SNTP instance has not been created yet, type a name in the blank Name text box.
Under the SNTP instance branch, select the Server branch.
Select the Enabled checkbox.
Select from the Accessible From list box whether it will be accessible from any computer or a specific one.
If you selected Specific computer or subnet, type an address or an address range in the last column.
Adjusting Devices Clocks Using Master Protocols Some devices may not be able to retrieve information from an STNP server or an IRIG-B time source. However, if the communications protocols used by the SMP Gateway to communicate with these devices support some sort of time adjustment/synchronization feature, it can be used to adjust these devices’ clock. As each protocol has its own distinctive characteristics, refer to the protocol’s documentation found on the SMP Gateway Software and Tools CD-ROM to learn how to enable this protocolspecific feature.
202 •
SMP Gateway User Manual
22
SMP Tools Remote Access to the SMP Gateway
You may want the SMP Tools to connect to an SMP Gateway that is not itself connected to your network. You would typically do this by setting up a dial-up connection and using a modem to call the SMP Gateway from your PC. Less typically, you might choose to access the SMP Gateway by setting up a direct serial connection between a serial port on your PC and a serial port or the console port on the SMP Gateway. This section explains how to set up dial-up and direct serial connections between a personal computer and an SMP Gateway. The procedure differs slightly, depending on whether the SMP Tools run under Windows XP or Windows 2000.
22.1
Windows XP Setup Procedures If the SMP Tools run under Windows XP, use the procedures outlined in this section to:
22.1.1
set up a dial-up (modem) connection between the PC and the SMP Gateway;
set up a direct serial connection between the PC and the SMP Gateway.
Setting Up a Dial-Up (Modem) Connection This section contains the procedure for setting up a dial-up (modem) connection between a PC running Windows XP, and an SMP Gateway. If security features are activated on your SMP Gateway, you must first make sure your computer is authorized to access the SMP Gateway (see “Sending the Security Database to One or More SMP Gateways”, page 89) and that you selected the Remote Access privilege for the Guests group in the Local Security Database Security Editor, accessible from SMP Manager’s Security menu.
SMP Gateway User Manual
• 203
You must perform the steps in the order presented in the table. Step 1
2
To do this Set up the SMP Gateway to accept a dial-up connection
Install the modem, if necessary
Follow these steps: Perform this step for each SMP Gateway with which you want to communicate via modem. 1.
Start SMP Manager. Select the SMP Gateway to be configured and from the File menu, click SMP Gateway Properties. In the Gateway Properties dialog box, clear the Automatically Poll SMP Status at startup check box. This will prevent polling on the dialup connection.
2.
From the Tools menu, click Telnet.
3.
Type RASMGR to start the RAS Manager application.
4.
Type “L”, to display the device list. The device list is actually the list of ports available on the SMP Gateway, including the console port.
5.
Type “M”, to modify the SMP Gateway’s COM port you intend to use for the dial-up connection.
6.
Type the number of the “MODEM device” to be modified. Note that you cannot specify the number of the console port, as the latter does not support modem connections.
7.
All the default settings should be correct, except for the last one: Use Device for Incoming Connections. Type “Y” to allow incoming connections on the port and exit RASMGR.
8.
Press “Q” to exit RAS Manager, and then close the telnet window.
1.
From Windows’ Start menu, access the Control Panel.
2.
Double-click Phone and Modem Options.
3.
In the Phone and Modem Options dialog box, click the Modems tab.
If the modem you plan to use appears in the list, skip the rest of this step and proceed to the next item in the table, since your modem is already installed.
204 •
4.
Click Add.
5.
In the Add Hardware Wizard dialog box, allow Windows to detect your modem automatically, and then click Next.
SMP Gateway User Manual
Step
To do this
Follow these steps: 6.
Insert the installation CD for the modem driver, if you have one.
7.
In the Found New Hardware Wizard dialog box, choose whether you want Windows to install the driver automatically or from a specific location and click Next.
8.
Once Windows advises you that it has installed the driver, click Finish.
9.
Click Finish to close the Add Hardware Wizard dialog box.
10. Click OK to close the Phone and Modem Options dialog box.
3
Set up a new dial-up (modem) connection for the SMP Gateway
Perform this step for each SMP Gateway with which you want to communicate via modem. 1.
From Windows’ Start menu, access the Control Panel.
2.
Double-click Network Connections.
3.
Double-click New Connection Wizard.
4.
In the New Connection Wizard dialog box, click Next.
5.
Select Connect to the network at my workplace and click Next.
6.
Select Dial-up connection and click Next.
7.
If your PC is only equipped with a single modem, skip this step. Otherwise, select the modem you want to use for this connection, and click Next.
8.
Type a descriptive name for the connection and click Next.
9.
Type the phone number you will dial to connect to the SMP Gateway and click Next.
10. If your PC is not equipped with a smart card slot, skip this step. Otherwise, the wizard will ask you if you want the use a smart card to log you into the remote network. Select the option that suits you the most and click Next (by default, the Do not use my smart card option is selected). 11. Under Create this connection for, select Anyone’s use, click Next and click Finish. 12. In the Connect dialog box, click Properties. 13. From the General tab, select the modem you want to use for this connection and click Configure. 14. In the Modem Configuration dialog box, select the Enable hardware flow control checkbox, the Enable modem error control checkbox and the Enable modem compression checkbox. 15. Click the Networking tab, and then click Settings. 16. If you are using an SMP 4-20 or an SMP 8-40: In the PPP Settings dialog box, clear the Enable LCP extensions checkbox, the Enable software compression checkbox, and the Negotiate multi-link for single link connections checkbox. Click OK. If you are using an SMP 4 or an SMP 16: In the PPP Settings dialog box, select the Enable LCP extensions
SMP Gateway User Manual
• 205
Step
To do this
Follow these steps: checkbox and the Enable software compression checkbox. Clear the Negotiate multi-link for single link connections checkbox. Click OK. 17. 18. Under This connection uses the following items, clear the Client for Microsoft Networks checkbox. 19. Click Internet Protocol (TCP/IP), and click Properties. 20. In the Internet Protocol (TCP/IP) Properties dialog box, click Advanced. 21. In the Advanced TCP/IP Settings dialog box, clear the Use default gateway on remote network checkbox and the Use IP header compression checkbox and click OK, three times 22. Close the Connect dialog box.
4
Configure SMP Manager to communicate with the SMP Gateway
1.
Start SMP Manager. Select the SMP Gateway to be configured and from the File menu, click SMP Gateway Properties.
2.
In the Gateway Properties dialog box, type a significant name for the new SMP Gateway, such as “SMP Gateway via modem”.
3.
If you have an SMP 4-20 or an SMP 8-40: Type 100.100.100.1 in the First IP Address box.
Type 100.100.100.2 in the Second IP Address box.
If you have an SMP 4 or an SMP 16: In the First IP Address box, type the IP pool’s starting address that you specified when you installed your SMP Gateway (see your SMP Gateway’s installation guide).
Do not type anything in the Second IP Address box. Click Add.
Note that even if you set up a number of SMP Gateways to communicate via a dial-up connection, the PC will be able to communicate with only one SMP Gateway at a time, and will use the address(es) specified here.
22.1.2
Setting Up a Direct Serial Connection The following table outlines the procedure for setting up a direct serial connection between a PC running Windows XP, and an SMP Gateway. You must perform the steps in the order presented in the table. Step 1
To do this Set up the SMP Gateway to accept a direct connection
Follow these steps: By default, an incoming direct connection is supported on SMP Gateway’s console port: skip to step 2 if you want to use this port; to allow an incoming direct connection on any other port, proceed as follows: 1.
206 •
In SMP Manager, select the SMP Gateway to be configured.
SMP Gateway User Manual
Step
2
To do this
Add a communications cable between the PC and the SMP Gateway
Follow these steps: 2.
From the Tools menu, click Telnet.
3.
Type RASMGR to start the RAS Manager application.
4.
Type “L”, to display the device list. The device list is actually the list of ports on the SMP, including the console port.
5.
Type “M”, to modify the SMP COM port you will use for the direct connection.
6.
Type the number of the “DIRECT device” to be modified.
7.
All the default settings should be OK, except for the last one: Use Device for Incoming Connections. Type “Y” to allow incoming connections on the port.
8.
Press “Q” to exit RAS Manager, and then close the telnet window.
1.
From Windows’ Start menu, access the Control Panel.
2.
Double-click Phone and Modem Options.
3.
In the Phone and Modem Options dialog box, click the Modems tab. Click Add.
4.
In the Add Hardware Wizard dialog box, select the Don’t detect my modem; I will select it from a list checkbox. Click Next.
5.
Under Manufacturer, select Standard Modem Types.
6.
Under Models, click Communications cable between two computers. Click Next.
7.
Click Selected ports.
8.
Click the communications port (COM1 or COM2) you want to use for the communications cable.
9.
Click Next, and then click Finish.
10. Click OK to close the Phone and Modem Options dialog box. 11. Connect the communications cable to both ports. 3
Set up a new direct serial connection to the SMP Gateway
1.
From Windows’ Start menu, access the Control Panel.
2.
Double-click Network Connections.
3.
Double-click New Connection Wizard.
4.
In the New Connection Wizard dialog box, click Next.
5.
Select Set up an advanced connection. Click Next.
6.
Select Connect directly to another computer. Click Next.
7.
Select Guest. Click Next.
8.
Type a descriptive name for the connection. Click Next.
9.
In the Select a device drop-down list, click Communications cable between two computers. Click Next.
10. Under Create this connection for, click Anyone’s use. Click Next. Click Finish. 11. In the Connect dialog box, click Properties. 12. From the General tab, click Configure.
SMP Gateway User Manual
• 207
Step
To do this
Follow these steps: 13. In the Maximum speed drop-down list, select 115200 bps. 14. Clear the Enable hardware flow control checkbox. Click OK. 15. Click the Networking tab, and then click Settings. 16. In the PPP Settings dialog box, clear the Enable LCP extensions checkbox, the Enable software compression checkbox, and the Negotiate multi-link for single link connections checkbox. Click OK. 17. Under This connection uses the following items, clear the Client for Microsoft Networks checkbox. 18. Click Internet Protocol (TCP/IP), and click Properties. 19. In the Internet Protocol (TCP/IP) Properties dialog box, click Advanced. 20. In the Advanced TCP/IP Settings dialog box, clear the Use default gateway on remote network checkbox and the Use IP header compression checkbox. Click OK three times. 21. Close the Connect dialog box.
4
Configure SMP Manager to communicate with the SMP Gateway
1.
Start SMP Manager. Select the SMP Gateway to be configured and from the File menu, click SMP Gateway Properties.
2.
In the Gateway Properties dialog box, type a significant name for the new SMP Gateway, such as “SMP Gateway direct connection”.
3.
If you have an SMP 4-20 or an SMP 8-40: Type 100.100.100.1 in the First IP Address box.
Type 100.100.100.2 in the Second IP Address box.
If you have an SMP 4 or an SMP 16:
4.
In the First IP Address box, type the IP pool starting address that you specified when you installed your SMP Gateway (see your SMP Gateway’s installation guide on the SMP Gateway Software & Tools CD-ROM).
Do not type anything in the Second IP Address box.
Click Add.
The PC will communicate with the SMP Gateway using the address(es) specified here.
22.2
Windows 2000 Setup Procedures If the SMP Tools run under Windows 2000, use the procedures outlined in this section to:
208 •
Setup a dial-up (modem) connection between the PC and the SMP Gateway.
Setup a direct serial connection between the PC and the SMP Gateway. SMP Gateway User Manual
22.2.1
Setting Up a Dial-Up (Modem) Connection The following table outlines the procedure for setting up a dial-up (modem) connection between a PC running Windows 2000, and an SMP Gateway. You must perform the steps in the order presented in the table. Step 1
2
To do this Set up the SMP Gateway to accept a dial-up connection
Install the modem, if necessary
Follow these steps: Perform this step for each SMP Gateway with which you want to communicate via modem. 1.
In SMP Manager, select the SMP Gateway to be configured.
2.
From the Tools menu, click Telnet.
3.
Type RASMGR to start the RAS Manager application.
4.
Type “L”, to display the device list. The device list is actually the list of ports on the SMP Gateway, including the console port.
5.
Type “M”, to modify the SMP Gateway’s COM port you will use for the dial-up connection.
6.
Type the number of the MODEM device to be modified. Note that you cannot specify the number of the console port, as the latter does not support modem connections.
7.
All the default settings should be OK, except for the last one: Use Device for Incoming Connections. Type “Y” to allow incoming connections on the port.
8.
Press “Q” to exit RAS Manager, and then close the telnet window.
1.
From Windows’ Start menu, click Settings, and then click Control Panel.
2.
Double-click Phone and Modem Options.
3.
In the Phone and Modem Options dialog box, click the Modems tab.
If the modem you plan to use appears in the list, skip the rest of this step and proceed to the next item in the table, since your modem is already installed. Click Add. 4.
In the Add/Remove Hardware Wizard dialog box, allow Windows to detect your modem automatically, and then click Next.
5.
In the Found New Hardware Wizard dialog box, click Next.
6.
Choose whether you want Windows to search for a suitable driver or whether you want to choose the driver from a list. Click Next.
7.
If you have an installation CD, insert it in the drive, click CD-ROM drives and clear the other checkboxes; otherwise, click Microsoft Windows Update and clear the other checkboxes. Click Next.
8.
Once Windows advises you that it has found the driver, click Next.
9.
Once Windows has finished installing the driver, click Finish.
10. Click Finish to close the Add/Remove Hardware Wizard dialog box. 11. Click OK to close the Phone and Modem Options dialog box.
SMP Gateway User Manual
• 209
Step 3
To do this Set up a new dial-up (modem) connection for the SMP Gateway
Follow these steps: Perform this step for each SMP Gateway with which you want to communicate via modem. 1.
From Windows’ Start menu, click Settings, and then click Control Panel.
2.
Double-click Network and Dial-up Connections.
3.
Double-click Make New Connection.
4.
In the Network Connection Wizard dialog box, click Next.
5.
Select Dial-up to private network. Click Next.
6.
Type the phone number you will use to dial the SMP Gateway. Click Next.
7.
Under Create this connection, click For all users. Click Next.
8.
Type a descriptive name for the connection. Click Finish.
9.
In the Connect dialog box, click Properties.
10. In the General tab, click Configure. 11. In the Modem Configuration dialog box, select the Enable hardware flow control checkbox, the Enable modem error control checkbox and the Enable modem compression checkbox. 12. Click the Networking tab, and then click Settings. 13. If you are using an SMP 4-20 or an SMP 8-40: In the PPP Settings dialog box, clear the Enable LCP extensions checkbox, the Enable software compression checkbox, and Negotiate multi-link for single link connections checkbox. Click OK. If you are using an SMP 4 or an SMP 16: In the PPP Settings dialog box, select the Enable LCP extensions checkbox and the Enable software compression checkbox, and clear the Negotiate multi-link for single link connections checkbox. Click OK. 14. Under Components checked are used by this connection, clear the Client for Microsoft Networks checkbox and the File and Printer Sharing for Microsoft Networks checkbox. 15. Click Internet Protocol (TCP/IP), and click Properties. 16. In the Internet Protocol (TCP/IP) Properties dialog box, click Advanced. 17. In the Advanced TCP/IP Settings dialog box, clear the Use default gateway on remote network checkbox and the Use IP header compression checkbox. Click OK three times. 18. Close the Connect dialog box.
4
210 •
Configure SMP Manager to communicate with the SMP Gateway
1.
In SMP Manager’s File menu, click Add SMP Gateway.
2.
In the Gateway Properties dialog box, type a significant name for the new SMP Gateway, such as “SMP Gateway via modem”.
3.
If you have an SMP 4-20 or an SMP 8-40:
SMP Gateway User Manual
Step
To do this
Follow these steps:
Type 100.100.100.1 in the First IP Address box.
Type 100.100.100.2 in the Second IP Address box.
If you have an SMP 4 or an SMP 16: In the First IP Address box, type the IP pool starting address that you specified when you installed your SMP Gateway (see your SMP Gateway’s installation guide).
Do not type anything in the Second IP Address box. Click Add.
Note that even if you set up a number of SMP Gateways to communicate via a dial-up connection, the PC will be able to communicate with only one SMP Gateway at a time, and will use the address(es) specified here.
22.2.2
Setting Up a Direct Serial Connection The following table outlines the procedure for setting up a direct serial connection between a PC running Windows 2000, and an SMP Gateway. You must perform the steps in the order presented in the table. Step 1
2
To do this Set up the SMP Gateway to accept a direct connection
Add a communications cable between the PC and the SMP Gateway
SMP Gateway User Manual
Follow these steps: By default, an incoming direct connection is supported on the SMP Gateway’s console port. If you want to use a direct connection on any other port, you have to set it up as follows: 1.
In SMP Manager, select the SMP Gateway to be configured.
2.
From the Tools menu, click Telnet.
3.
Type RASMGR to start the RAS Manager application.
4.
Type “L”, to display the device list. The device list is actually the list of ports on the SMP Gateway, including the console port.
5.
Type “M”, to modify the SMP Gateway’s COM port you will use for the direct connection.
6.
Type the number of the DIRECT device to be modified.
7.
All the default settings should be OK, except for the last one: Use Device for Incoming Connections. Type “Y” to allow incoming connections on the port.
8.
Press “Q” to exit RAS Manager, and then close the telnet window.
1.
From the Windows Start menu, click Settings, and then click Control Panel.
2.
Double-click Phone and Modem Options.
3.
In the Phone and Modem Options dialog box, click the Modems tab. Click Add.
4.
In the Add/Remove Hardware Wizard dialog box, select the Don’t detect my modem; I will select it from a list checkbox. Click Next.
• 211
Step
To do this
Follow these steps: 5.
Under Manufacturers, click Standard Modem Types.
6.
Under Models, click Communications cable between two computers. Click Next.
7.
Click Selected ports.
8.
Click the communications port (COM1 or COM2) you want to use for the communications cable. Click Next. Click Finish.
9.
Click OK to close the Phone and Modem Options dialog box.
10. Connect the communications cable to both ports.
3
Set up a new direct serial connection to the SMP Gateway
1.
From Windows’ Start menu, click Settings, and then click Control Panel.
2.
Double-click Network and Dial-up Connections.
3.
Double-click Make New Connection.
4.
In the Network Connection Wizard dialog box, click Next.
5.
Click Connect directly to another computer. Click Next.
6.
Click Guest. Click Next.
7.
In the Select a device drop-down list, click Communications cable between two computers. Click Next.
8.
Under Create this connection, click For all users. Click Next.
9.
Type a descriptive name for the connection. Click Finish.
10. In the Connect dialog box, click Properties. 11. From the General tab, click Configure. 12. In the Maximum speed drop-down list, select 115,200 bps. 13. Clear the Enable hardware flow control checkbox. Click OK. 14. Click the Options tab, and select the Redial if line is dropped checkbox. 15. In the Time between redial attempts drop-down list, select 30 seconds. 16. Click the Networking tab, and then click Settings. 17. In the PPP Settings dialog box, clear the Enable LCP extensions checkbox, the Enable software compression checkbox, and the Negotiate multi-link for single link connections checkbox. Click OK. 18. Under Components checked are used by this connection, clear the Client for Microsoft Networks checkbox and the File and Printer Sharing for Microsoft Networks checkbox. 19. Click Internet Protocol (TCP/IP), and click Properties. 20. In the Internet Protocol (TCP/IP) Properties dialog box, click Advanced. 21. In the Advanced TCP/IP Settings dialog box, clear the Use default gateway on remote network checkbox and the Use IP header compression checkbox. Click OK three times. 22. Close the Connect dialog box.
212 •
SMP Gateway User Manual
Step
4
To do this
Configure SMP Manager to communicate with the SMP Gateway
Follow these steps:
1.
From SMP Manager’s File menu, click Add SMP Gateway.
2.
In the Gateway Properties dialog box, type a significant name for the new SMP Gateway, such as “SMP Gateway direct connection”.
3.
If you have an SMP 4-20 or an SMP 8-40: Type 100.100.100.1 in the First IP Address box.
Type 100.100.100.2 in the Second IP Address box.
If you have an SMP 4 or an SMP 16: In the First IP Address box, type the IP pool starting address that you specified when you installed your SMP Gateway (see your SMP Gateway’s installation guide).
Do not type anything in the Second IP Address box. Click Add.
The PC will communicate with the SMP Gateway using the address(es) specified here.
SMP Gateway User Manual
• 213
23
Using a Dial-Up Connection for DNP3 or IEC 60870-5101
The SMP Gateway could need a dialup connection for DNP3 or IEC 60870-5-101 protocols in a situation where there is no network between the SMP Gateway and the control center and you cannot establish a network connection to the SMP Gateway using the procedures described under “SMP Tools Remote Access to the SMP Gateway”, page 203. If the control center uses the DNP3 or IEC 60870-5-101 protocol, you can establish a serial connection, via a dial-up modem, between the SMP Gateway and the control center. The control center will call the SMP Gateway. The same holds true if you need to communicate between the SMP Gateway and a device that uses DNP3 or IEC 60870-5-101and that supports a modem connection. The SMP Gateway will call the device. Communication via modem is available as an option on all SMP Gateway models. On the SMP 4, you use an internal modem. However, you have to order the modem at the time you purchase the SMP Gateway, and the modem port replaces one of the serial ports. On the SMP 16/CP and SMP 16/SG, the modem is internal and has its own port. With the SMP 4-20 and SMP 8-40, you have to use an external modem, which you plug into a serial port. Note that will all SMP Gateway models, you can always plug an external modem into any serial port. Having the SMP Gateway communicates, via dial-up modem with a PC or a device using DNP3 or IEC 60870-5-101, requires that you perform the following configuration steps with SMP Config:
Define which serial ports have a modem.
Create a modem pool.
Add modems to the pool.
Create a modem pool master connection if the SMP Gateway will call a device, or create a modem pool slave connection if the control center will call the SMP Gateway.
SMP Gateway User Manual
• 215
23.1
Specifying which serial ports have modems To indicate that a modem is connected to a specific serial port:
23.2
Start SMP Config from the SMP Manager window.
In the left pane, click Serial Ports.
In the right pane, in the Interface drop-down list of the corresponding serial port, click Modem Asynchronous.
Creating a modem pool A modem pool manages a certain number of physical modems so that when an outgoing call is to be made, the pool selects an available modem to perform the call. Similarly, when an incoming call is received, the pool identifies the caller and dispatches the call to the appropriate connection (eventually to the protocol component). There must be at least one modem per pool. In the case of the SMP 8-40, all the modems in a pool must be connected to serial ports on the same board. When it receives an incoming call, a modem pool needs to identify the caller in order to dispatch the call to the appropriate protocol component. Since the identification is protocol-specific, each protocol has its own method for identifying the caller. The identification procedure returns the caller’s DEVICE ADDRESS. This DEVICE ADDRESS is then compared with the DEVICE ADDRESS of each modem pool slave connection connected to the pool. Note that a modem pool slave connection DEVICE ADDRESS is set by the protocol components. When a match is found, the communication path is set up from the modem pool slave connection to the modem. Identification is performed by the Call Dispatcher. The identification procedure for each protocol supported is specified in the table next. Protocol
Identification Procedure
IEC 60870-5-101
The Call Dispatcher sends an IEC 60870-5-101 RESET OF LINK broadcast frame. The slave device is expected to respond with an ACK frame containing its own DEVICE ADDRESS.
DNP3
The Call Dispatcher sends a DNP3 RESET OF LINK broadcast frame. The slave device is expected to respond with an ACK frame containing its own DEVICE ADDRESS as the source address.
To add a modem pool:
In the left pane, click Serial Ports, then on Modem Pools.
In the right pane, type the name of the pool.
Edit the modem pool settings.
These settings set up the behavior of the Call Dispatcher, as described in the table next. 216 •
SMP Gateway User Manual
Setting
Description
Type
The communications protocol supported by the modem pool. The default value – automatic – means that the supported protocol will be determined automatically. Allowed values: Automatic IEC 60870-5-101 DNP Default value:
Dispatcher Address Size
Dispatcher Response Timeout
Dispatcher Interchar Delay
Dispatcher Recover Timeout
Dispatcher Max Request Retry
23.3
Automatic
The size of the DEVICE ADDRESS, in bytes. This setting is taken into account when a frame is sent or received, since it affects the size of the frame. Range:
1 to 8
Default value:
1
This setting specifies how much time the dispatcher will wait for the reception of a response to a request. Range:
0 to 60,000 ms
Default value:
10,000 ms
This setting specifies the maximum time allowed between 2 received bytes of a frame, for the frame to be considered valid. Range:
0 to 10,000 ms
Default value:
250 ms
This setting specifies how much time the dispatcher will wait after a failure (invalid frame format, etc.), before retrying. Range:
0 to 10,000 ms
Default value:
1,000 ms
This setting specifies how many times the dispatcher will try to identify the device. Range:
0 to 20
Default value:
3
Adding a modem to a modem pool To add a modem to a modem pool:
In the left pane, click Serial Ports, then on Modems.
SMP Gateway User Manual
• 217
In the right pane, choose a modem pool in the drop-down list for each modem. This will add the modem to the modem pool.
Edit the modem settings for each modem (see following table).
In the left pane, click Asynchronous Serial Ports.
In the right pane, edit the serial port settings for each modem.
The meaning of each modem setting is given below: Setting
Description
AT Init String
This AT string is sent to the serial port to initialize the modem. It should be a valid AT string to which the modem will respond with an OK. Default value:
AT Off-Hook String
This AT string is sent to the modem to answer the call when a RING message is received. The modem must, therefore, be configured to NOT auto-answer the calls (avoid S0=X, where X is other than 0). Default value:
AT Dial String
ATDT
This AT string is sent to the modem to hang up. After a call has been completed, the “AT Init String” is always sent to reinitialize the modem. Default value:
Incoming Only
ATA
This AT string is prefixed to the phone number and sent to the modem to make outgoing calls. Default value:
AT On-Hook String
ATZ
ATH0
Put a checkmark if you want the modem to receive incoming calls but not be able to make outgoing calls. If you do not put a checkmark, the modem will be able to make and receive calls. Allowed values: checkmark / no checkmark Default value:
AT Response Timeout
no checkmark
Specifies how much time the modem pool will wait for an answer to an AT string command. There is an exception for the ATDT and ATA commands, since it can take some time to synchronize the carriers and complete the call. For these exceptions, the maximum time is set to 3 minutes. The timeout value depends on the modem and more specifically, on the response time required for the +++ and ATH commands.
218 •
Range:
0 to 60,000 ms
Default value:
5,000 ms
SMP Gateway User Manual
23.4
Adding a modem pool master connection A modem pool master connection is used by a protocol component to make outgoing calls to a device. This connection makes the link between the protocol component and the modem pool. To add a modem pool master connection, proceed as follows:
23.5
In the left pane, click Connections, then on Modem Masters.
In the right pane:
Type the name of the connection.
Specify, via the drop-down list, the modem pool with which the connection will be associated. The modems belonging to the specified modem pool will be used to make outgoing calls for this connection.
Type the phone number and a supplementary AT initialization string. The phone number is mandatory and can contain any characters recognized by the modem. See your modem documentation about the availability and meaning of each dialing option. This setting cannot contain the ATDT prefix, since the latter is already configured in the modem settings. The supplementary AT initialization string is an optional AT string that will be sent to the modem just before the calling ATDTxxx command. This setting can be used to fine-tune modem options for specific calls, which means that you can override options specified in the general modem initialization string.
Adding a modem pool slave connection A modem pool slave connection is used by a protocol component to receive incoming calls from a control center. This connection makes the link between the protocol component and the modem pool. To add a modem pool slave connection:
In the left pane, click Connections, then on Modem Slaves.
In the right pane:
Type the name of the connection.
Specify, via the drop-down list, the modem pool with which the connection will be associated. Calls received by this modem pool will be dispatched to this connection component if the DEVICE ADDRESS matches.
SMP Gateway User Manual
• 219
24
Updating SMP Gateway’s Software and Tools
This chapter explains the software architecture of the SMP Gateway and describes how to update the SMP Tools and the SMP Gateway’s software.
24.1
Software Architecture of the SMP Gateway To configure the SMP Gateway, you use the SMP Tools, software that runs on your computer under Windows Vista, XP or 2000. Inside the SMP Gateway, there are also software components that need upgrading:
The SMP Gateway runs on Windows CE, called a firmware, the equivalent of Windows XP on your computer. Other firmware that runs on the SMP Gateway includes the bootstrap programs and the SMP Gateway application.
The SMP Gateway application (.app file), which contains your protocol translators and other gateway software files.
The configuration file (.par file), which tells the gateway how to communicate with the computer.
One of the SMP Tools is specialized in carrying files from the computer to the gateway: SMP Loader. This tool is mainly used for SMP 4-20 and SMP 8-40 models, and is described in the section “SMP Loader”, page 234). Consequently, whenever you receive a CD-ROM from Cooper Power Systems (or the contents of the CD-ROM via FTP access to a download site), you should perform an update of all this pieces of software. Follow these steps, in the order they are presented:
Update the PC software, i.e., the SMP Tools (see “Updating the SMP Tools on the PC”, page 222).
For each SMP Gateway:
Update the SMP Gateway firmware (see “Updating the SMP Gateway Firmware”, page 222, and “SMP Loader”, page 234).
SMP Gateway User Manual
• 221
Update the SMP Gateway application (see “Updating the SMP Gateway Application”, page 224).
Update the SMP Gateway’s configuration file (see “Updating the Configuration File”, page 225).
The table below shows the exact order in which you will update the SMP Gateway components, and the SMP Tool that you will use to perform the update. Component to update
SMP 4 or SMP 16 Tool
SMP 4-20/SMP 8-40 Tool
Bootstrap programs
SMP Loader
SMP Loader
Resident diagnostics
SMP Manager
SMP Loader
Windows CE
SMP Manager
SMP Loader
SMP Gateway application
SMP Manager
SMP Manager
SMP Config and SMP Manager
SMP Config and SMP Manager
Configuration file
24.2
Updating the SMP Tools on the PC Whenever you receive a new version from Cooper Power Systems, with a new version or release of the SMP software and tools, you will start by updating the SMP Tools on your PC. Much more rarely, you may need to update JRE (Java 2 Runtime Environment). Proceed as follows:
Insert the SMP Software and Tools CD-ROM in your computer’s CD drive.
In the Welcome to the SMP Gateway window, click Upgrading.
There may be specific instructions that apply to the version you were using previously. If so, follow these instructions before performing the upgrade.
Click the item you want to upgrade and follow the instructions.
The SMP Tools installer will automatically remove the previous version before installing the new one.
24.3
Updating the SMP Gateway Software
24.3.1
Updating the SMP Gateway Firmware The functions of the SMP Gateway are provided by a sophisticated embedded software system that includes a number of components:
222 •
SMP Gateway User Manual
The bootstrap program. That program loads the SMP Gateway application and the Windows CE operating system into memory when the SMP Gateway starts up. This program rarely changes.
The Windows CE operating system, which provides real-time system services, network services, and device drivers.
The resident diagnostics, which allow you to ensure that the SMP Gateway is working properly.
The SMP Gateway application, which implements all the functionalities of the SMP Gateway.
The SMP Gateway firmware update process differs, whether the gateway is an SMP 16/SMP 4 or an SMP 4-20/SMP 8-40.
24.3.1.1
SMP 16 or SMP 4 To update the firmware, execute the following steps in the order presented here: If need be, update the secondary bootstrap program, with the SMP Loader tool. Note: The bootstrap programs’ version numbers can be found on the SMP Gateway Software & Tools CD-ROM, in the page entitled What's New. If one of the bootstrap program version number you read from your SMP Gateway's SMP Stats (for more information, refer to page 55) is older, then you must go on to the bootstrap program file update instructions (see “SMP Loader”, page 234).
Remove the cable that you connected between the SMP Gateway console port and the PC when you used SMP Loader.
Start SMP Manager, and monitor the progress of the reset operation.
Update the resident diagnostics:
In the SMP Manager window, click your SMP Gateway.
From the Update menu, click Update SMP Gateway Firmware. The Select Firmware Library dialog box appears.
In the SMP 16 or SMP 4 folder, under SMP Tools\Manager\SMP Firmware Libraries, choose the diagnostics file. The file is called diagsSMP16.pkg or diagsSMP4.pkg.
SMP Manager transfers the file to your SMP Gateway and then informs you that you have to restart your SMP Gateway for the new firmware to go into effect. Simply close the Restart Gateway dialog box; if you are updating other components, you do not need to restart the SMP Gateway now.
Update Windows CE:
Proceed as for the resident diagnostics, but in the firmware libraries, choose the Windows CE file. The file is called wincex.pkg, where x is the version number. SMP Manager
SMP Gateway User Manual
• 223
transfers the file to your SMP Gateway and then informs you that you have to restart your SMP Gateway for the new firmware to go into effect.
In the Restart Gateway dialog box, choose Shutdown and Restart to have the SMP Gateway restart in normal mode.
All restarts are automatically logged in SMP Gateway’s Reset log file. If you want to, you can type a comment in order to indicate why you restarted the SMP Gateway. This comment will be added to the log entry.
The SMP Gateway will go through a series of startup steps, which will be displayed in the Status column in SMP Manager. Once the startup is complete, the Status column will display the current status of the SMP Gateway. The Status column should display Started. If the Status column shows that your SMP Gateway did not start up normally, refer to “Troubleshooting”, page 247.
24.3.1.2
SMP 4-20 or SMP 8-40 To update the firmware of these SMP Gateway models, you will use SMP Loader. You will find detailed instructions on under “SMP Loader”, page 234. Execute the steps in the order presented here:
Update the primary and secondary bootstrap programs.
Update the resident diagnostics.
Update Windows CE.
Remove the cable that you connected between the SMP Gateway console port and your PC when you used SMP Loader.
Reset the SMP Gateway by holding down the reset button for at least 5 seconds, until the 4 front panel LEDs turn amber.
Start SMP Manager.
The SMP Gateway will go through a series of startup steps, which will be displayed in the Status column. Once the startup is complete, the Status column should display Started. If the Status column shows that your SMP Gateway did not start up normally, refer to “Troubleshooting”, page 247.
24.3.2
Updating the SMP Gateway Application You will now update the SMP Gateway application. Proceed as follows:
In the SMP Manager window, click your SMP Gateway.
From the Update menu, click Update SMP Gateway Application.
The Select Library dialog box appears. 224 •
SMP Gateway User Manual
Under Program Files\Cybectec\SMP Tools\Manager\SMP Software Libraries, select folder SMP 16, SMP 4, SMP 4-20 or SMP 8-40, depending on your SMP Gateway model.
Choose the SMP Gateway application version that you want to send to the SMP Gateway. The file has the extension “.app” and its name indicates the application version. For example, a file called SmpApp 1.14R2.app contains version 1.14, release 2, of the SMP Gateway application.
SMP Manager sends the software to the specified SMP Gateway, and then informs you that you have to restart your SMP Gateway for the new application to go into effect.
24.3.3
Simply close the Restart Gateway dialog box, without restarting the SMP Gateway.
Updating the Configuration File The last step in upgrading to a new version of the SMP Gateway’s software and tools consists of updating the configuration file:
Start SMP Config and open your configuration file.
The file name in the title bar should have a star (*) beside to inform you there is a change.
From the File menu, click Save.
A message box will inform you that the current configuration file will be upgraded to a current version. A backup is automatically saved with the word “backup” before the previous file’s name.
Send the configuration file to the SMP Gateway using SMP Manager:
From the Update menu, select Send configuration file.
SMP Manager will transfer the file on the SMP Gateway
SMP Gateway User Manual
• 225
25
Activating a New License
Whenever you contact Cooper Power Systems to request support for a new device that you want to connect to your SMP Gateway, or to add support for a particular option for your SMP Gateway, Cooper Power Systems will provide you with a new license. To activate your new license and take advantage of the new components, you need to go through the following steps:
25.1
Update your license information (see “Updating your License Information”, below).
Update the SMP Gateway’s application (see “Updating the SMP Gateway Application”, page 224).
Updating your License Information Proceed as follows to update your license information:
In the SMP Manager window, click your SMP Gateway.
From the Update menu, click Update SMP Gateway License.
The Update License dialog box appears.
226 •
Type your License ID and Key (both rows) exactly as they appear on the SMP Gateway’s Software & Tools CD-ROM cover or in a email that may have been sent to you about this matter. Click OK.
SMP Gateway User Manual
If you are updating the license information for a group of SMP 4-20s or SMP 8-40s that have the same license ID, you can simplify the task as follows:
Type the license ID and key (both rows) of the first SMP Gateway. The license ID you have just typed gets added to the License ID drop-down list, and SMP Manager keeps track of the associated key. For the remaining SMP Gateways, simply choose the license ID in the drop-down list; the key information will be supplied automatically.
Another way to simplify the task is to select several SMP Gateways of the same type before performing the update. The license information will be applied to all the selected SMP Gateways.
You can click the Details button, in order to view the functions provided by the new license before actually performing the update.
If SMP Manager suggests that you restart the SMP Gateway, restart it in normal mode by choosing Shutdown and Restart in the Restart Gateway dialog box. If a new protocol has been added to your license, you must update the SMP Gateway’s application (see “Updating the SMP Gateway Application”, page 224) and then restart.
The License Information dialog box appears when you click Details in the Update License dialog box, or when you click License Information from SMP Manager’s Gateway menu. It displays the various software features supported by your license, such as redundancy, Soft PLC and automation functions. It also displays information about the number of master protocols (one per device) and slave protocols (one per control center) supported by your license. For all models except the SMP 4, the dialog box also shows which specific protocols are supported by your license. The dialog box is shown below, first for an SMP 8-40 and then, for an SMP 4.
SMP Gateway User Manual
• 227
Here is a brief explanation of the classes shown in the dialog box:
228 •
Class 1 includes commonly used protocols such as DNP3, Modicon MODBUS, SEL and IEC60870-5.
Class 2 currently includes only UCA 2.0.
Class 3 currently includes ICCP and 61850.
SMP Gateway User Manual
26
Miscellaneous SMP Tool Features
This section presents SMP Manager and SMP Config commands that provide useful capabilities, and that were not discussed in other sections of the document.
26.1
SMP Manager Features SMP Manager has a number of handy features:
Displaying only those SMP Gateways with which SMP Manager is currently in communication. (Click Active Gateways from the View menu.)
Choosing the time display format: local time or UTC. (Click Options from the Tools menu. See also “Modifying SMP Manager’s Settings”, below.)
Exporting your SMP Gateway list. (Click Export List from the File menu.)
Importing an SMP Gateway list. (Click Import list from the File menu.)
Setting the behavior of SMP Manager.
Some SMP Manager settings can also be customized to your needs, as described in the following section
26.1.1
Modifying SMP Manager’s Settings To modify SMP Manager’s settings:
From the Tools menu, click Options. The Options dialog box will appear.
SMP Gateway User Manual
• 229
26.2
Select the format you want to use to display time information in SMP Manager:
Local Time. Time information obtained from SMP Gateways will be adjusted to your PC’s time zone and daylight saving time information.
UTC. Time information obtained from SMP Gateways will be displayed as is.
Under Cybectec Enterprise Solutions, you will find settings that are specific to global security, which is not covered by this manual. Refer to Cybectec Enterprise Solutions for more information about this settings and global security.
Under Paths, you can change the name and the location of the file containing the list of SMP Gateways that are currently displayed in SMP Manager. This file has a .vep extension.
SMP Config Features SMP Config has a few handy features:
230 •
Exporting your SMP Gateway’s configuration to a .csv file. (Click Export from the File menu.)
Importing an SMP Gateway configuration previously saved as a .csv file. (Click Import from the File menu.)
Clearing the message pane. (Click Clear Message Pane from the Validate menu.)
SMP Gateway User Manual
26.3
System Data Points The SMP Gateway has system points for various purposes and features, such as remote access, security, time adjustment and redundancy. When they are present on an SMP Gateway, they can be seen using the SMP Gateway’s Web Server. When an SMP Gateway’s slave protocol subscribes to them, they provide useful information to the SCADA. The following list describes all available system data points: Data Point Name
Description Power Status
_smp___voltage_ok
If set to 1, this binary input point indicates that the SMP Gateway’s power supply’s voltage is within its normal range of operation. Temperature
_smp___temp_ok (available on SMP 4-20 and SMP 8-40)
If set to 1, this binary input point indicates that the SMP Gateway’s internal temperature is within an acceptable range.
_smp___temperature (available on SMP 16/SP)
This analog input point states the temperature, in °C, inside the gateway. Clock-Related Information
_smp___clockYear
This analog input point states the SMP Gateway internal clock’s year information.
_smp___clockMonth
This analog input point states the SMP Gateway internal clock’s month information.
_smp___clockDay
This analog input point states the SMP Gateway internal clock’s day information.
_smp___clockHour
This analog input point states the SMP Gateway internal clock’s hour information, using the 24-hour notation.
_smp___clockMinute
This analog input point states the SMP Gateway internal clock’s minute information.
_smp___clockSecond
This analog input point states the SMP Gateway internal clock’s second information.
_smp___clockSynchronized (available on SMP 4 and SMP 16)
If set to 1, this binary input point indicates that the SMP Gateway’s internal clock is actually synchronized with an external time source, such as GPS or IRIG-B.
_smp___battery_ok (available on SMP 4-20, SMP 8-40 and SMP 4)
If set to 1, this binary input point indicates that the clock’s battery is operational..
SMP Gateway User Manual
• 231
Data Point Name
Description Local Control
_smp___setLocalControl
This binary output point allows you to switch from local control (by a local HMI, such as Visual Substation), to remote control (by the SCADA). _smp___localControl indicates the current control state of the SMP Gateway.
_smp___localControl
If set to 1, this binary input point indicates that the SMP Gateway is actually controlled locally, by Visual Substation or another HMI. If the gateway is currently controlled by the SCADA, this point is set to 0. At the SMP Gateway’s startup, this point is set to 0.
_smp___restartSystem
This binary output point allows you to restart the SMP Gateway.
_smp___setNOrelay (available on SMP 16)
This binary output point allows you to open and close the SMP Gateway’s normally open (NO) relay. _smp___stateNOrelay indicates the actual state of the relay.
_smp___stateNOrelay (available on SMP 16)
This binary input point indicates the actual state of the SMP Gateway’s normally open (NO) relay. If set to 1, the relay is closed. Security
_smp___securityAccountLocked
This binary input point shows if there is an account locked on the SMP Gateway. Remote Access
_smp___dialupEnable
This binary output point allows you to accept or block all incoming RAS dialup connections to the SMP Gateway. Set it to 1 to accept all incoming RAS dialup connections. _smp__dialupEnabled indicates the resulting state.
_smp___dialupEnabled
This binary input point indicates if all incoming RAS dialup connections to the SMP Gateway are accepted of blocked. If set to 1, all connections are accepted.
_smp___dialupInUse
This binary input point indicates whether or not there is actually communication in progress via an incoming RAS dialup connection. Passthrough (for each passthrough connection named “”)
232 •
_smp___Enable
This binary output point allows you to lock or unlock the passthrough connection. Set it to 0 to lock the connection. _smp___Enabled indicates if the connection is locked or not.
_smp___Enabled
This binary input point indicates the passthrough connection’s lock state. If set to 0, the connection is locked and cannot be used.
SMP Gateway User Manual
Data Point Name
Description
_smp___InUse
If set to 1, this binary input point indicates that the passthrough connection is currently active.
System Folders (for each system folder named ) _smp___Folder _Available
If set to 1, this binary input point indicates that the system folder is available to the SMP Gateway.
_smp___Folder _FreeDiskSpace
This analog input point states the amount of disk space that is available on the system folder’s host.
_smp___Folder _LowDiskSpace
If set to 1, this binary input point indicates that the system folder’s host is running low on disk space. Redundancy
_smp___rsLocal_ok
If set to 1, this binary input point indicates that the SMP Gateway is currently operational. This point is mirrored in the_smp___rsRemote_ok binary input point of the other SMP Gateway of the group.
_smp___rsRemote_ok
If set to 1, this binary input point indicates that the other SMP Gateway of the group is currently operational. This point is mirrored in the_smp___rsLocal_ok binary input point of the other SMP Gateway.
_smp___rsLocal_active
If set to 1, this binary input point indicates that the SMP Gateway is active. If set to 0, it indicates that the SMP Gateway is on standby.
_smp___rsRemote_standby
If set to 1, this binary input point indicates that the other SMP Gateway of the group is on standby. If set to 0, it indicates that the other SMP Gateway of the group is active.
_smp___rsRemote_hotStandby
If set to 1, this binary input point indicates that the other SMP Gateway of the group is on hot standby. For more information about Hot Standby, see section 19.4, page 191.
_smp___rsFirstConnection_ok
If set to 1, this binary input point indicates that the first link between the redundant SMP Gateways is operational.
_smp___rsSecondConnection_ok
If set to 1, this binary input point indicates that the second link between the redundant SMP Gateways is operational.
_smp___rsSynchronized
If set to 1, this binary input point indicates that the internal clocks of the redundant SMP Gateways are automatically adjusted using the same time source. This point’s state can be
SMP Gateway User Manual
• 233
Data Point Name
Description used as a failover condition.
_smp___rsLan_ok
If set to 1, this binary input point indicates that the SMP Gateway’s access to the LAN is operational. This point’s state can be used as a failover condition.
_smp___rsVoltage_ok
If set to 1, this binary input point indicates that the SMP Gateway’s power supply’s voltage is within its normal range of operation. This point’s state can be used as a failover condition.
_smp___rsTemp_ok
If set to 1, this binary input point indicates that the SMP Gateway’s internal temperature is within an acceptable range. This point’s state can be used as a failover condition.
_smp___rsMem_ok
If set to 0, this binary input point indicates that the SMP Gateway is running low on memory. This point’s state can be used as a failover condition.
_smp___rsGroupAddress_ok
If set to 0, this binary input point indicates that the public IP address defined for the group conflicts with another device that uses the same address. This point’s state can be used as a failover condition. Soft PLC
_smp___plcProgramRunning
If set to 1, the binary input point indicates that a Soft PLC automation script is currently running on the SMP Gateway. Annunciator
26.4
_annunciator___alarmActiveCount
This analog input point states the number of active alarms.
_annunciator___alarmBlocked Count
This analog input point states the number of blocked alarms.
_annunciator___alarmConfigCount
This analog input point states the number of data points configured to trigger alarms.
_annunciator___alarmToAckCount
This analog input point states the number of alarms that require acknowledgment.
_annunciator___alarmToClear Count
This analog input point states the number of alarms that have been acknowledge and that may be cleared.
_annunciator___generalAlarm
If set to 1, this binary input point indicates that at least one alarm is currently active.
SMP Loader SMP Loader should be used for the following purposes:
234 •
SMP Gateway User Manual
To update Windows CE, the resident diagnostics, the primary bootstrap program, or the secondary bootstrap program of an SMP 4-20 or an SMP 8-40.
You can, in fact, load Windows CE and the resident diagnostics with SMP Loader, but you should use SMP Manager unless there is a problem.
When the SMP Gateway is powered up or reset, the following components are started up, in the order listed:
The primary bootstrap program.
The secondary bootstrap program.
Windows CE.
In order to use SMP Loader, you need to interrupt the startup process before it reaches Windows CE’s startup. You accomplish this by putting the SMP Gateway into Command mode.
26.4.1
Setting Up SMP Loader Setting up SMP Loader requires that you go through 3 steps:
26.4.1.1
Connect your PC to the SMP Gateway’s console port.
Start SMP Loader.
Put the SMP Gateway into Command mode.
Connecting your PC to the SMP Gateway Proceed as follows:
Connect one of the communications ports of your PC to the SMP Gateway’s console port, using a standard RS-232 direct cable equipped with a DB9 male connector at one end and a DB9 female connector at the other end.
Note: If you are using a portable computer that does not have an external serial port, you will need to use an USB-to-RS-232 serial converter.
26.4.1.2
Starting SMP Loader Once your PC is connected to the SMP Gateway, start SMP Loader as follows:
Click Start on the Windows taskbar.
Point to All Programs, then to Cybectec, and then to SMP Tools.
From the SMP Tools menu, click SMP Loader.
SMP Gateway User Manual
• 235
The SMP Loader main window appears.
From the Connection menu, click Communication Settings to display the Communication Settings dialog box.
Most of the communication settings are unavailable, as they cannot be changed.
Select the communications port that will be used on your PC (ex. COM1).
Specify 115,200 bps as the file transfer speed. If your computer does not support the specified speed, try a lower value for this setting.
Click OK.
Do not close SMP Loader: it will connect to the SMP Gateway automatically when the latter will enter Command mode.
26.4.1.3
Putting the SMP Gateway into Command Mode To put the SMP Gateway into Command mode, you simply need to reset the SMP Gateway. Proceed as follows, depending on the SMP Gateway model:
SMP 4-20 or SMP 8-40: Hold down the reset button until all the LEDs (power, watchdog timer, ST1 and ST2) simultaneously turn amber.
SMP 4: Insert a pointed object in the reset aperture and apply pressure until the watchdog timer LED stops flashing. Do not use a lead pencil, since lead is a conductor, as it could break and damage the SMP 4.
SMP 16: Power off the SMP 16, and then power it up again.
Within approximately 30 seconds, the SMP Loader window will show the files that are currently loaded on the SMP Gateway.
26.4.2
Main Window The SMP Loader’s main window is shown next, first for an SMP 16/SG, and then for an SMP 840.
236 •
SMP Gateway User Manual
As you can see, the SMP 16 display only shows Windows CE (in the example, version 4 is loaded on the SMP 16). The same applies to an SMP 4. The SMP 8-40 screen shows Windows CE and the resident diagnostics, and each file name is preceded by the board – A or B – on which the file is located. The Created and Received columns will show “N/A” if the date and time are not available due to certain hardware constraints. It is important to note that the display area does not list the bootstrap programs, even though these do indeed reside on the SMP. However, the secondary bootstrap version is shown at the bottom right of the window, on the status bar. In very rare cases, the status bar could show a primary bootstrap for an SMP 4-20 or SMP 8-40 (see “Corrupted secondary bootstrap”, page 240). You can also view the bootstrap programs’ version numbers as follows:
From the Connection menu, click Bootstrap Versions.
A dialog box appears, showing the versions of both bootstrap programs. Note: For the SMP 4 and SMP 16, the dialog box indicates that the primary bootstrap version is unavailable since it resides in the ROM and cannot be modified in the field.
26.4.3
Transferring Files to the SMP Gateway You can transfer one or more files to the SMP Gateway, and you can choose the files individually. To choose the files to transfer, do one of the following:
SMP Gateway User Manual
• 237
Using Windows Explorer, drag and drop the files in your SMP Loader main screen display.
OR
Click Send from the File menu. The Send one of more files dialog box appears.
Point to SMP Tools\Manager\SMP Firmware Libraries, and then to the SMP 4, SMP 420, SMP 8-40 or SMP 16 folder, depending on the model of SMP Gateway.
Choose SMP Loader Files (*.vl) in the Files of type drop-down list. This will display one or more files with the .VL extension. Select the file you want to send, and click Open.
The File Information dialog box appears, giving you a description of each file, within the .VL file, that you are about to transfer and asking you to confirm your intention to carry out the transfer.
The transfer takes place once you have responded to the question for all the files that were listed in the .VL file, and a dialog box shows you the progress of the operation. After the transfer, the files appear in the list of the SMP Loader’s main window, if they were not already in the list. Otherwise, you will simply notice a difference in the version number, the size and the creation date. In our example, we updated the diagnostics file from version 1.1R11 to version 1.1R12 (compare with the corresponding figure of the “Main Window” section, page 236). 238 •
SMP Gateway User Manual
Notes:
26.4.4
The SMP Gateway will not use the transferred files until next reset.
If you transferred a bootstrap program, it will not appear in the list even though the file has indeed been transferred. Furthermore, if you look at the bootstrap version numbers (by clicking Bootstrap Versions in the Connection menu), you will see that the secondary bootstrap number has not been updated. The version number will be updated on next reset of the SMP Gateway.
Log File SMP Loader records every significant event until you exit the application, including startup, file transfers, file deletions, requests for bootstrap programs version numbers, communications port settings, transfer cancellations, refreshes, communication errors, and so on. The log file, which can be read using Notepad, is located in SMP Tools\Manager\SMP Firmware Libraries, under the name Loader.log. Note: Each time you start the application, SMP Loader overwrites the information contained in the file.
26.4.5
Updating Bootstraps Under Unusual Circumstances Unexpected events, such as a blackout during a bootstrap program file’s transfer, could cause a bootstrap program to become corrupted. For an SMP 4-20 or SMP 8-40, this can happen to the primary or the secondary bootstrap; for an SMP 4 or SMP 16, it can only happen to the secondary bootstrap.
26.4.5.1
Corrupted Primary Bootstrap If the primary bootstrap program of an SMP 4-20 or SMP 8-40 is corrupted, contact Cybectec Technical Support.
SMP Gateway User Manual
• 239
26.4.5.2
Corrupted secondary bootstrap If the secondary bootstrap of your SMP Gateway is corrupted, use one of the following procedures. SMP 4 or SMP 16
Contact Cybectec Technical Support.
SMP 4-20 or SMP 8-40 Normally, SMP Loader communicates with the secondary bootstrap program of the SMP Gateway. However, if the secondary bootstrap is corrupted, SMP Loader has to communicate with the primary bootstrap in order to load a new secondary bootstrap. In that case, you have to put the primary bootstrap in Update mode. In this mode, you do not have access to the usual SMP Loader functions. All you can do is load the bootstrap programs. Also note that SMP Loader will automatically set its communications speed to 19,200 bps. Proceed as follows:
Simultaneously hold down the reset, TEST1 and TEST2 buttons until all four LEDs (power, watchdog timer, ST1 and ST2) turn amber.
Release ONLY the reset button and keep holding down the TEST1 and TEST2 buttons until the first 2 LEDs (power and watchdog timer) go from amber to red, and the other 2 (ST1 and ST2) go from amber to green. Note: At this point, the information displayed on the LCD is not valid and is, therefore, to be ignored.
240 •
Transfer the secondary bootstrap program to the SMP using SMP Loader (see “Transferring Files to the SMP Gateway”, 237).
SMP Gateway User Manual
27
Telnet-Based Functions
Telnet access to the SMP Gateway provides you with a command line prompt for running tools and low-level commands on the SMP Gateway. Telnet tools are gradually being replaced by Windows-based tools. If you feel more at ease with the command line interface, you can use the following commands:
27.1
FirewallMgr (Firewall Manager)
Time and Date.
TCP/IP address and RAS setup, as described in each device's installation manual.
SnmpMgr (SNMP Manager), as described in section 20.2, page 193.
ClockMgr (Clock Manager).
Starting a Telnet Session All the aforementioned commands can be called on a Telnet session’s command line. To start a Telnet session, proceed as follows:
If the SMP Gateway’s firewall is active, pre-establish the VPN connection, by following the procedure described in the “Manually Setting Up a VPN Connection” section, page 103.
Click your SMP Gateway in the SMP Manager’s application window; from the Tools menu, click Telnet to start a Telnet session.
In the Telnet window, type the username and password of a user account that has the System Management privilege.
You can now execute any of the Telnet commands that are described in the following sections.
27.2
Firewall Manager Since version 4 of the SMP Gateway Software & Tools, the firewall is configured using SMP Config. Firewall Manager can now only be used to view the firewall’s current status and custom rules.
SMP Gateway User Manual
• 241
If you have setup a firewall using a previous version of the SMP Gateway software, you can still use Firewall Manager to set up rules. However, these rules will be overridden if you set up a firewall instance using SMP Config (see “Configuring the Firewall”, page 104). Note: To use Firewall Manager, the user must have the System Management privilege for the SMP Gateway.
To use Firewall Manager, proceed as follows:
In the Telnet window, type the following command at the prompt: firewallmgr
Firewall Manager displays the list of available commands, as the following shows: Firewall Manager. Available commands (case insensitive): Note: Use "SMP Config" to change the firewall configuration. R S H Q
Show custom firewall rules. Show the current firewall and VPN status. Display the list of available commands. Quit.
The commands are described in the following sections.
27.2.1
R Command The R command displays the list of firewall rules you have set-up.
27.2.2
S Command The S command shows the current status of the firewall and VPN connections. Example: Firewall: disable Firewall log: enable VPN connections: 2
27.2.3
H Command The H command displays the list of available commands, as shown at the beginning of this section.
242 •
SMP Gateway User Manual
27.2.4
Q Command The Q command is used to exit the firewall manager.
27.3
Time and Date You can now set the SMP Gateway’s date and time using SMP Manager, as described in the “Setting SMP Gateway’s Internal Clock” section, page 195.But the Time and Date Telnet commands are still available for that matter.To set the SMP Gateway’s time:
In the Telnet window, type the following command at the prompt: time
The current UTC time is displayed, followed by a prompt for the new time. For example: The current time is: 3:22:40 PM Enter the new time (hh:mm:ss):
Type the new UTC time in the requested format and press ENTER.
To set the SMP Gateway’s date:
In the Telnet window, type the following command at the prompt: date
The current time is displayed, followed by a prompt for the new time. For example: The current date is: Tuesday, June 10, 2008 Enter the new date (mm-dd-[yy]yy):
Type the new date in the requested format (year can be specified using two digits) and press ENTER.
Note: For both commands, the time/data will remain unchanged if you do not type anything and press ENTER.
27.4
Clock Manager Clock Manager was used for time adjustment setup. It has been replaced by SMP Config since version 4 of the SMP Gateway Software & Tools. It is now mainly used to get an overview of the GPS clock settings; for more details, refer to the SMP 16 GPS clock option installation manual.
SMP Gateway User Manual
• 243
To use Clock Manager, proceed as follows:
In the Telnet window, type the following command at the prompt: clockmgr
Clock Manager displays the list of available commands, as the following shows: Clock Manager. Available commands (case insensitive): Note: Use "SMP Config" to change the clock configuration. D H Q
Display the current settings. Display the list of available commands. Quit.
The commands are described in the following sections.
27.4.1
D Command The D command shows the current settings of the optional GPS clock. Example: GPS Cable length: 0 m IRIG-B distribution format for the GPS: IRIG-BXX0 IEEE 1344 Always distribute the IRIG-B signal: No
27.4.2
H Command The H command displays the list of available commands, as shown at the beginning of this section.
27.4.3
Q Command The Q command is used to exit the clock manager.
27.5
Elo Touchscreen Driver Manager If you use a touch screen with your SMP Gateway, you may no longer be able to reset the calibration settings via the touch screen itself. At runtime, you can use the Elo Touchscreen Driver Manager for this matter. To enter touch screen calibration mode, proceed as follows:
244 •
SMP Gateway User Manual
In the Telnet window, type the following command at the prompt: elomgr.exe /c
To learn how to recalibrate the touch screen, see “Calibrating the Touch Screen”, page 151.
SMP Gateway User Manual
• 245
28
Troubleshooting
The SMP Gateway is a highly reliable substation-grade device. Most operational problems result from configuration errors, and there are a few simple steps you can take to identify and solve these problems. This section discusses the following types of problems:
28.1.1
Startup problems.
Communications problems.
Problems with data validity.
Problems executing control operations.
Firewall-related problems.
Getting Additional Help There are a number information sources that can help you solve your problems. You can turn to our website - www.cybectec.com , to find answers to frequently asked questions (FAQ). Also, if your problem seems to be related to a protocol instance, you can refer to the Cooper Power Systems documentation for the particular protocol. To access the document, proceed as follows:
Click Start on Windows’ taskbar.
Point to All Programs, then Cybectec, then SMP Tools, and then Documentation.
From the Documentation menu, click Protocols.
The list of available documents is displayed in a Windows Explorer window.
Click the document you want to read.
From the File menu of the Explorer window, click Open with Adobe Reader (or Adobe Acrobat Reader, depending on the version installed).
Your Adobe Reader program starts up and displays the document in a window.
SMP Gateway User Manual
• 247
28.1.2
Creating an SMP Gateway Report File In the upcoming sections, we will take you through the steps required to solve your problems. If after going through all the required procedures, you find that you need to contact Cooper Power Systems’ Cybectec Technical Support, you will need to create a report file. This file will help the technical support team in identifying and solving the problem. SMP Gateway report files are stored in SMP Manager’s Reports folder. Each time a report is generated, SMP Manager creates an event log file, indicating all operations performed during the report generation. The event log file is also stored in the Reports folder. To create an SMP Gateway report file:
Select the SMP Gateway in SMP Manager’s main window.
From the Gateway menu, click Make Report.
Note: The Make Report command is available if the SMP Gateway is online. The Gateway Report dialog box appears.
248 •
Click the Tell me more button to display the information that will be collected from the SMP Gateway;
Type additional information in the text box, such as the problem description, or the reason why you are requesting technical support.
Assign a name to the report, in the Report Name box. SMP Manager will automatically append the date and time to the report name.
Select the Extract Automatically checkbox, if you want to see where the report is located as soon as SMP Manager has finished retrieving the report information. The information will be displayed in a Windows Explorer window.
Click OK. The Save the gateway report file as dialog box appears.
Select the folder where you want to save the report file. You can also change the file name here. SMP Gateway User Manual
Click Save to start the report generation.
The Gateway Report progress dialog box appears, showing each operation performed and when the report generation is complete, the dialog box indicates the completion status of the operation.
Click the dialog box’s Details button to display the event log for the report generation.
Click the Close button to close the dialog box.
If you selected the Extract Automatically checkbox, a Windows Explorer window appears, showing where the report file is located. You will see a .log file, a .grf file, and a folder bearing the same name as the .grf file. If you click the folder, you will see a group of files and folders with information about the data points, crashes, logs, and so on.
28.1.3
Send the .grf file to Cybectec Technical Support with your request. The .grf file is, in fact, a zipped file, which contains the files and folders discussed previously.
Viewing an SMP Gateway Report File At the time you generate a report, you can choose to see the report immediately. However, at all times, you can view an existing report for any SMP Gateway. Proceed as follows:
Select the SMP Gateway in SMP Manager’s main window.
From the Gateway menu, click Extract Report.
In the Open dialog box, choose the desired .grf file and click Open.
A Windows Explorer window opens.
28.2
Double-Click the folder that has the same name as the .grf file you selected.
You will now see a group of files and folders. Open the desired items to view the information they contain.
Startup Problems When you start the SMP Gateway or reset it using SMP Manager, it goes through a sequence of steps, after which you should see “Started” in the Status column of SMP Manager’s application window. However, if the SMP Gateway’s software detects a problem during startup, you may see something else in the Status column. Here are some suggestions for troubleshooting the problem. If the problem persists, do not hesitate to contact our technical support team.
28.2.1
No Configuration File If the status is “No configuration file”, you have not loaded a configuration file on the SMP Gateway.
SMP Gateway User Manual
• 249
Proceed as follows to correct the problem:
28.2.2
Create a configuration file using SMP Config, if you have not already done so.
Use SMP Manager to send the file to the SMP Gateway.
Restart the SMP Gateway using SMP Manager, in order to activate the configuration.
Protocols Failed If the status is “Protocols failed”, it may be due to one of the following reasons:
You changed the SMP Gateway license, but did not update the SMP Gateway application.
There is a problem with a master or slave protocol instance.
There is an incompatibility in the settings.
Proceed as follows to correct the problem:
If you have changed the SMP Gateway license without updating your SMP Gateway application:
Otherwise, start SMP Log and examine the startup log.
250 •
Update the SMP Gateway software using SMP Manager, as some components may be missing. See “Updating the SMP Gateway Application”, page 224.
Make sure you are using the correct configuration file:
If you are using the wrong configuration file, use SMP Manager to send the correct file to the SMP Gateway.
If you are using the correct configuration file, but it contains errors, fix them all using SMP Config, and then send the file to the SMP Gateway using SMP Manager.
Make sure you have described your hardware correctly. For example, you may have specified the wrong SMP Gateway model in SMP Config.
Check the protocol settings. The log will show you the startup actions of each protocol instance. You will see which one failed to load or did not start up properly. Check its parameter settings. Make sure you have associated the protocol instance with an existing serial port (the number of available ports depends on the hardware configuration settings).
Check the software’s version numbers. A component may not be up-to-date:
Send an updated version of the SMP Gateway application to the SMP Gateway, using SMP Manager.
If the application update does not work, you probably need to have SMP Config convert your configuration file, after which you can send the file to the SMP Gateway.
SMP Gateway User Manual
28.2.3
If the problem persists after the SMP Gateway has restarted, try using a reduced version of the configuration file, in an attempt to isolate the problem. For example, use a configuration file that has only one device and one protocol instance.
Critical Components Missing If the status is “Critical components missing”, there is a missing component in the SMP Gateway application. This situation can arise if you change your license without updating the SMP Gateway application.
28.3
Update the SMP Gateway application using SMP Manager. See “Updating the SMP Gateway Application”, page 224.
If the problem persists, contact Cybectec Technical Support.
Communications Problems Communications problems always occur in one of the following layers:
SMP
DEVICE
Protocol
Protocol
Link
Link
Physical
Physical
SMP Trace and SMP Stats are the ideal tools for you to troubleshoot a communications problem and determine in which layer the problem occurred. SMP Trace shows you the information that was sent back and forth between the SMP Gateway and the device, while SMP Stats supplies you with statistics that can help you detect an anomaly. For example, the statistics may show you that there were no exchanges whatsoever on a particular link, or the trace may show you that the SMP Gateway never got responses when it polled a particular device.
SMP Gateway User Manual
• 251
28.3.1
Physical Layer The physical connection between the SMP Gateway and a device is often at the root of a problem. You should therefore ask yourself the following questions:
Am I using the correct type of cable? Do I need to use a cable for RS-232 or for RS-485 communications? Should I be using a 2-wire or a 4-wire cable for RS-485 communications?
Is the device connected properly? Make sure the cable is connected to the correct port.
Do I need an adaptor? For example, do I need a null-modem adapter for RS-232 communications?
Are the TCP/IP network settings configured correctly? Use SMP Config to check the Asynchronous Serial Ports settings, under Connections:
28.3.2
If I’m using RS-485 4-wire, did I choose RS-422? If I’m using RS-485 2-wire, did I choose RS-485?
Link Layer Problems in the link layer are often related to the settings of the communications component. Here are examples of settings that can cause problems:
The baud rate, parity, start and stop bit settings of both the SMP Gateway and the device, for serial communications.
The TCP/IP address and port configuration, for TCP/IP communications.
We suggest you take the following steps:
28.3.3
Examine the link layer byte exchanges, using SMP Trace and SMP Stats.
Using SMP Config, look at the Connections settings:
If your SMP Gateway communicates with the device over a serial link, check the communications settings of the link used to communicate with the device, such as baud rate and parity. These settings must be configured identically at both ends.
If your SMP Gateway communicates with the device over a WAN or LAN, make sure you have specified the correct TCP/IP address and port number.
Protocol Layer Protocol problems are directly related to the settings of the protocol instance used to communicate with the device. You should proceed as follows:
252 •
Verify the configured device address.
Verify the protocol version. SMP Gateway User Manual
Verify the packet size.
Make sure all scanning sequences are configured.
Does the device support the scanning parameters? Different versions of the same device sometimes react differently.
We suggest you take the following steps:
28.4
Examine the protocol layer byte exchanges, using SMP Trace and SMP Stats.
Using SMP Config, make sure you have specified the correct protocol.
Look at the SMP Config general settings:
Check the settings of the protocol instance, such as packet size.
Make sure the device or link address is correct.
Check the polling parameters. Some devices are not able to respond to rapid polling requests because they process the information very slowly. Other devices only allow slow communications links - 9600 baud or less. If you poll too quickly, the request will arrive before the last block of data is read, thereby causing communications problems.
Problems with Data Validity When all the exchanges are taking place correctly and there are no protocol errors reported in the statistics, but some of the acquired values are erroneous or incoherent:
28.5
Using SMP Config, examine the following settings for the points that are invalid:
Data point address. Is the address of the physical data point correct? Some devices have flexible configuration options, so you have to compare the SMP Config values with the values set by the device manufacturer’s software.
Conversion factors. For physical analog data points, are the scale and offset factors correct?
Polarity. For physical binary input points, Is the polarity set correctly?
Warning messages. Are there any warning messages in the message pane, regarding the data points that have erroneous values?
Problems Executing a Control Operation When a control operation fails:
SMP Gateway User Manual
• 253
28.6
Use SMP Log to look in the Control log. All control operations are recorded in this log.
Use SMP Trace to see the data exchanges. Note, however, that you have to be connected to the SMP Gateway to view a control operation in real time.
Make the following checks to determine the cause of the failure:
Using SMP Log, look at the control log and make sure the SCADA is sending the correct sequence (direct operate, select before operate) of messages.
Using SMP Config, check the general settings of both the master and the slave protocol instances. Make sure each that for each of them, the Control Enabled checkbox is selected.
Using SMP Config, make sure the binary and analog physical output points are set up correctly. For example, for the DNP3 protocol, Control Type requires a value other than “Not supported”. See the device manufacturer’s documentation for the required setup and refer to the appropriate Cooper Power Systems protocol documentation.
Refer to the device manufacturer’s documentation to check whether the device allows for a polling message to be sent between a select and an operate or whether polling has to wait until after the select and operate have completed. Some manufacturers deselect the device if a polling message is sent between a select and an operate. If polling has to wait, use SMP Config to make sure that the Tx During SBO checkbox is selected in the master protocol’s general parameters.
Using the web browser, make sure the point called _smp___localControl is set either to 0 to enable commands from the SCADA or to 1, to enable commands from Visual Substation. If the value is not set properly, send either an open command to the point called _smp___setLocalControl to set the value to 0, or a close command to set the value to 1.
Using the web browser, check whether the point is set to inhibit operations. If so, remove the inhibition.
Firewall-Related Problems If you have mistakenly enabled the firewall and cannot use VPN connections:
Ask your IT administrator to modify the corporate network to allow VPN connections to the SMP Gateway, if possible.
If your IT administrator cannot solve the problem, the only solution left is to perform a “Factory reset” of the SMP Gateway. This operation:
254 •
deletes all configuration files;
clears the log history;
deletes the application files.
SMP Gateway User Manual
Proceed as follow:
Connect your PC to the SMP Gateway’s console port using an RS-232 serial cable.
Start a terminal application such as HyperTerminal. Configure the communications settings to use the serial port connected to the SMP Gateway. Set the port speed to 115,200 bps.
Restart the SMP Gateway. Wait for the following prompt to appear in the terminal application’s window:
******************************************** Press ENTER now to access configuration mode ******************************************** The SMP Gateway will start in 2 seconds...
Press ENTER. The following menu will appear:
Current GMT time: 2008/06/10 18:16:53 Available commands: S Set the clock C Configure TCP/IP parameters U Update the firmware F Reset the SMP Gateway configuration to the factory default M Start the SMP Gateway in MAX SAFE MODE W Start the SMP Gateway Note. The SMP Gateway will start after 60 seconds if you have not pressed any key. >
Press F to reset the SMP Gateway configuration to the factory default.
Type yes to confirm your selection. The SMP Gateway will restart and the firewall should no longer be enabled on it.
SMP Gateway User Manual
• 255
