SMP Gateway User Manual
SMP Gateway User Manual
SMP Gateway
For use with SMP Gateway software version 6.3 or later.
Cooper Power Systems, SMP and Yukon are valuable trademarks of Cooper Industries.
All brand and product names appearing in this document are the trademark or registered trademark
of their respective holders.
S1120-10-1, version 27
Contents
1 Welcome 1
1.1 SMP Gateway Models ...........................................................................................1
1.2 Related Documentation .........................................................................................2
1.3 Getting Assistance .................................................................................................2
1.4 Getting Started .......................................................................................................2
1.5 Overview ...............................................................................................................3
2 Principles of Operation 5
2.1 Logical Architecture ..............................................................................................5
2.1.1 Masters and Slaves ..................................................................................5
2.1.2 Introducing the SMP Gateway in the Automation System......................6
2.1.3 SMP Gateway Internals ...........................................................................6
2.1.4 Communications Components ................................................................7
2.2 Configuring the SMP Gateway..............................................................................8
2.2.1 The Transparent SMP Gateway ..............................................................9
2.2.2 Using the SMP Gateway as a Protocol Translator ................................ 11
2.2.3 Using the SMP Gateway as a Data Concentrator .................................. 12
2.2.4 Using the SMP Gateway as a Communication Processor ..................... 13
2.2.5 Putting It All Together .......................................................................... 14
2.2.6 Securing the Substation ......................................................................... 15
4 SMP Manager 19
4.1 Main Window ...................................................................................................... 19
4.2 Adding an SMP Gateway .................................................................................... 20
4.3 Information Provided by the SMP Gateway Icon ................................................ 21
4.4 Customizing the Display ..................................................................................... 22
4.4.1 Adding or Removing a Column ............................................................ 23
4.4.2 Changing the Position of a Column ...................................................... 23
ii • Contents
7 Viewing Protocol Exchanges in Real Time 49
7.1 Information Provided by SMP Trace................................................................... 49
7.2 SMP Trace Features ............................................................................................ 50
7.2.1 Searching in SMP Trace........................................................................ 50
7.2.2 Printing Traces ...................................................................................... 51
7.2.3 Recording Live Traces .......................................................................... 51
7.2.4 Saving all the Scrolled Information....................................................... 51
7.2.5 Changing How Time Information is Displayed .................................... 52
7.2.6 Deactivating the Auto Scroll Feature .................................................... 52
13 Security 83
13.1 Meeting NERC CIP Requirements ...................................................................... 83
13.1.1 Displaying Appropriate Use Banners .................................................... 83
13.1.2 Identifying Which Ports are Open in the SMP Gateway Firewall ......... 85
13.2 Substation Network Security Considerations ...................................................... 85
13.2.1 The SMP Gateway Integrated Firewall ................................................. 85
13.2.2 Using SMP Tools through a Substation LAN Firewall ......................... 86
13.3 Extending the SMP Gateway Security Model ..................................................... 86
13.4 SMP Gateway Authentication Policy .................................................................. 87
13.4.1 Defining the SMP Gateway Authentication Policy ............................... 87
13.5 Changing the Current Login in SMP Manager .................................................... 88
13.6 The SMP Gateway Security Database ................................................................. 89
13.6.1 Default Groups and Privileges .............................................................. 89
iv • Contents
13.6.2 Accessing the Local Security Database Editor ...................................... 90
13.6.3 Managing the List of User Groups ........................................................ 91
13.6.4 Granting Privileges to a User Group ..................................................... 91
13.6.5 Managing the List of User Accounts ..................................................... 92
13.6.6 Setting the Password of a User Account ............................................... 92
13.6.7 Assigning a User Account to Groups .................................................... 92
13.6.8 Validating the Local Security Database ................................................ 93
13.6.9 The SMP Gateway Security Database Status ........................................ 93
13.6.10 Uploading the Local Security Database on SMP Gateways .................. 94
13.6.11 Retrieving an Existing Security Database from an SMP Gateway........ 94
13.6.12 Exporting the Local Security Database ................................................. 95
13.6.13 Uploading a Previously Saved Security Database................................. 95
13.6.14 Deactivating Local Authentication on SMP Gateways ......................... 95
13.7 User Account Lockout ......................................................................................... 96
13.7.1 Unlocking User Accounts ..................................................................... 96
13.8 The SMP Gateway Security Log ......................................................................... 97
13.8.1 Viewing the Security Log ..................................................................... 97
13.9 File Certification and Integrity Checking ............................................................ 97
13.9.1 Detecting an Integrity Check Failure .................................................... 97
13.9.2 Recovering from an Integrity Failure .................................................... 98
13.10 Configuring the Integrated Firewall .................................................................... 98
13.10.1 Specifying Firewall Rules ..................................................................... 98
13.10.2 Restricting Access to Other Services .................................................. 100
13.10.3 Deactivating the Integrated Firewall ................................................... 100
13.10.4 Disabling the Firewall Log .................................................................. 100
13.11 Device Account Password Management ........................................................... 101
13.11.1 The SMP Gateway Password Secure Store ......................................... 101
13.11.2 Updating an Account Password in the SMP Gateway Secure Store ... 101
13.11.3 Deleting an Account Password from the SMP Gateway Secure
Store 102
13.12 Locking Passthrough and Incoming RAS Connections ..................................... 103
13.12.1 Locking or Unlocking a Passthrough Connection ............................... 103
13.12.2 Locking or Unlocking All Incoming RAS Dialup Connections .......... 104
13.13 Security-Related System Data Points ................................................................ 104
13.14 Legacy SMP Gateway Software and Tools Compatibility ................................ 104
13.14.1 Accessing SMP Gateways with Legacy Software Installed ................ 105
13.14.2 Using Legacy SMP Tools with Recent SMP Gateway Software ........ 106
vi • Contents
16.2.3 Setting Up the Alarms Page ................................................................ 132
16.2.4 Setting Up the Blocked Page ............................................................... 135
16.2.5 Setting Up the History Page ................................................................ 136
16.2.6 Setting Up the System State Page ....................................................... 137
16.2.7 Creating a User-Defined Readings Page ............................................. 138
16.2.8 Selecting the Pages to Display ............................................................ 145
16.2.9 Selecting the Page Displayed at Startup .............................................. 145
16.2.10 Changing How Time Information is Displayed .................................. 146
16.2.11 Setting Up an Alarm Buzzer ............................................................... 146
16.2.12 Temporarily Deactivating the Annunciator ......................................... 146
16.3 Setting Up the Touch Screen for the Annunciator ............................................. 146
16.3.1 Specific SMP Gateway Requirements for the Touchscreen ................ 147
16.3.2 Setting Up a Screen Saver using SMP Config .................................... 147
16.4 Uploading the Configuration to the SMP Gateway ........................................... 147
16.5 Calibrating the Touch Screen ............................................................................ 147
16.6 Using the SMP Gateway Annunciator............................................................... 148
16.6.1 Navigating Through the Different Pages ............................................. 148
16.6.2 Managing Alarms ................................................................................ 149
16.6.3 Blocking Alarm Inputs ........................................................................ 150
16.6.4 Using the Single Alarm Display.......................................................... 151
16.6.5 Using the History Log ......................................................................... 151
16.6.6 Monitoring System State ..................................................................... 153
16.6.7 Performing Control Operations from a Readings Page ....................... 155
16.6.8 Using the Screen Saver ....................................................................... 156
16.6.9 To learn how to set up the screen saver, see “Specific
SMP Gateway Requirements for the Touchscreen .............................. 156
17 Automation 159
17.1 The SMP Gateway Automation Functions Module ........................................... 159
17.2 The SoftPLC Module ........................................................................................ 159
17.2.1 The CoDeSys Development Environment .......................................... 160
17.2.2 Using CoDeSys to Create SMP Gateway Automation Scripts ............ 160
19 Redundancy 163
19.1 Redundant Group Operation .............................................................................. 163
19.1.1 SMP Gateway A and B Designation ................................................... 164
viii • Contents
22.1.2 Incoming Direct Serial Connections and Windows Vista ................... 190
22.2 Windows XP Setup Procedures ......................................................................... 190
22.2.1 Setting Up a Dial-Up (Modem) Connection ....................................... 190
22.2.2 Setting Up a Direct Serial Connection ................................................ 193
28 Troubleshooting 221
28.1 Getting Additional Help .................................................................................... 221
28.2 Creating an SMP Gateway Report File ............................................................. 221
28.2.1 Viewing an SMP Gateway Report File ............................................... 223
28.3 Restoring the Factory Settings of the SMP Gateway ........................................ 223
28.4 Startup Problems ............................................................................................... 224
28.4.1 No Configuration File ......................................................................... 224
28.4.2 Protocols Failed ................................................................................... 224
28.4.3 Critical Components Missing .............................................................. 225
28.5 Communications Problems ................................................................................ 225
28.5.1 Physical Layer ..................................................................................... 226
28.5.2 Link Layer ........................................................................................... 226
28.5.3 Protocol Layer ..................................................................................... 227
28.6 Problems with Data Validity ............................................................................. 227
28.7 Problems Executing a Control Operation .......................................................... 227
28.8 Firewall-Related Problems ................................................................................ 228
28.8.1 Recovering from a Firewall Lockout .................................................. 228
29 Appendices 231
x• Contents
Figures
Figure 2-1 A simple SCADA-device master-slave configuration .................................................. 6
Figure 2-2 The SMP Gateway as a Master-and-Slave system ....................................................... 6
Figure 2-3 SMP Gateway internals: master and slave protocols with RTDX ................................ 7
Figure 2-4 SMP Gateway communication components ................................................................. 8
Figure 2-5 The transparent SMP Gateway ..................................................................................... 9
Figure 2-6 Additional SMP Gateway functions ........................................................................... 10
Figure 2-7 The SMP Gateway as a protocol translator................................................................. 11
Figure 2-8 The SMP Gateway as a data concentrator .................................................................. 12
Figure 2-9 The SMP Gateway as a communication processor ..................................................... 13
Figure 2-10 The substation SMP Gateway ..................................................................................... 14
Figure 2-11 The SMP Gateway integrated firewall........................................................................ 15
Figure 14-1 The passthrough process explained .......................................................................... 110
Figure 19-1 Using the “best of” automation function to support redundant IEDs ....................... 164
Figure 19-2 Typical failover scenario of an SMP Gateway redundancy group ........................... 165
Figure 19-3 Typical failover scenarios in a redundant network configuration ............................. 173
Figure 19-4 Acquisition data flow in a hot standby redundancy SMP Gateway group................ 175
Figure 28-1 Network layers where most communication problems occur ................................... 226
Congratulations on acquiring your new SMP Gateway! You now have unlimited connectivity for
all the equipment in your substation.
In this manual, we will show you how to use the SMP Gateway to integrate existing and new
RTUs, IEDs, PLCs and control centers into a single modern, homogeneous substation automation
system.
You will learn how to set up your SMP Gateway as a:
• Protocol Translator.
The SMP Gateway translates standard or proprietary device protocols to control center
protocols such as DNP3, TEJAS, IEC-60870-5-101/103/104 or IEC-61850 (UCA 2.0).
• Data Concentrator.
The SMP Gateway collects the data from all connected devices, regardless of protocol, and
makes it available to control centers using LAN, WAN, modem or serial connections.
• Terminal Server.
The SMP Gateway supports centralized maintenance, monitoring and control of all devices by
using the passthrough communication mode.
• Substation Communications Gateway.
The advanced capabilities of the SMP Gateway make it the ideal choice for any substation
automation project.
Note: Both SMP 16 versions can also be equipped with the PM option, a new 1.4 GHz
Pentium-M processor that improves the gateway's speed tenfold. This is ideal for
high-capacity application or complex automation schemes.
Email: [email protected]
Phone: +1.763.595.7775
Toll Free: +1.800.815.2258
Business hours are from 8 a.m. and 5 p.m. CST, Monday to Friday.
2• Chapter 1: Welcome
• Set-up the SMP Gateway.
• Install the PC software.
• Make the SMP Tools aware of your new SMP Gateway.
• Load the SMP Gateway firmware.
Make sure you have performed all the steps described in those documents before proceeding
with the material explained in the present document.
1.5 Overview
Once you have performed all the steps explained in your SMP Gateway installation guide, you are
ready to perform the following tasks, as described in this user manual:
• Configure your SMP Gateway so that it can communicate with your devices:
• Define the hardware.
• Configure the master protocol instances that will communicate with your substation
devices.
• Configure the data points.
• Set-up the communications links between the SMP Gateway and the substation devices.
• Associate master protocol instances with communications links.
• Validate, activate and test your configuration.
• View the following information in real time:
• The SMP Gateway log files.
• Protocol exchanges.
• Communications statistics.
• Data points, using a Web browser.
• Configure your SMP Gateway so that it can communicate with one or more control centers:
• Configure a slave protocol instance for each control center.
• Have each control center subscribe to the data points.
• Associate slave protocol instances with communications links.
• You will also become familiar with the following SMP Gateway features:
• Security.
• Passthrough connections.
• DFR and event file processing.
• Automation functions.
4• Chapter 1: Welcome
2 Principles of Operation
Electrical power utilities face a number of challenges when attempting to automate their
substations. They have legacy devices that they want to continue using. They want to integrate
new devices. They may want to add one or more control centers. They may want to use a local
HMI in order to keep a close watch on all events that occur in the substation.
There are a number of problems to contend with: connectivity, protocol incompatibilities,
interoperability problems, security considerations, logistics for migration, downtime, and not the
least of which, total project cost.
The SMP Gateway has been specifically designed to address all these issues. It is the ideal product
to ensure a smooth, safe and cost-effective approach to substation modernization. Indeed, you can
use a step-by-step approach. You decide which steps to take, in which order, and when.
Figure 2-3 SMP Gateway internals: master and slave protocols with RTDX
In the following chapters, we will learn how to configure the SMP Gateway to perform these
functions.
To assist you with the tasks you will want to perform with the SMP Gateway s in your
organization, we have provided you with our suite of SMP Tools.
The SMP Tools are Microsoft Windows-based programs that make it easy for you to configure the
SMP Gateway and perform maintenance functions. They run on a PC, are simple to use, and
provide advanced features that allow you to rapidly configure all the devices and communications
links in your substation. They can be used locally or remotely through a LAN, WAN or VPN.
When authentication is activated, users must log in before they can use any function.
The SMP Tools include the following applications.
SMP Manager
Manages all the SMP Gateways in your organization. It displays the state of each gateway,
manages their configuration files and local security database, allows you to group two gateways
together to achieve redundancy, and is used to invoke the configuration and maintenance tools for
any gateway to which it is connected. From SMP Manager, you can also start Internet Explorer to
view the data points, logs and traces in real time, and you can start a console session in order to
set-up certain advanced features such as dial-up access.
SMP Config
Used to configure the SMP Gateway. It has a spreadsheet-like grid that you use to specify the
devices and control centers connected to the gateway, their protocols, their communications links
and their data points. Advanced editing functions make it easy for you to enter the data points.
Template editing allows you to pre-define standard devices with standard data points, thereby
reducing labor intensity and the possibility of errors.
61850 Config
Used to configure the IEC 61850 and UCA 2.0 protocols on the SMP Gateway.
SMP Log
Used to browse through and manage the log files maintained by the SMP Gateway. All significant
events are logged, including local and remote control events, system failures, special protocol
events, and so on.
SMP Stats
Used to browse through and manage a large variety of dynamically updated statistics, ranging
from full communications statistics for each link to the processor load for each protocol
component.
SMP Connect
Used to establish passthrough connections with any IED connected to an SMP Gateway, for the
purpose of doing remote configuration and maintenance of IEDs using manufacturer-provided
software.
SMP Loader
Used to load the secondary bootstrap program. Refer to Appendix A and to your SMP Gateway
installation guide for details on using SMP Loader.
Event Translator
Used to convert event files to the COMTRADE format.
The next chapter will discuss how to create a list of SMP Gateways with SMP Manager, and will
then explain how to do a complete configuration of your SMP Gateway using SMP Config.
SMP Manager is the doorway to your SMP Gateways. It runs on your PC, as do all the tools you
launch through SMP Manager. You are already familiar with the application, since you added your
new gateway to the list of SMP Gateways managed by SMP Manager when you installed your
SMP Gateway. This section goes over a few of the points that were covered in your SMP Gateway
installation guide, and provides additional information.
The Configuration file box is automatically filled with a default configuration file name.
This is the file that will be created and opened by default in SMP Config. If you change this
file name afterwards through the File menu, you must come back to this dialog box and
change the name in the Configuration File text box, so it opens the right file at startup.
In the Description box, type a short description of the SMP Gateway’s role and functions;
this property can be displayed in SMP Manager’s main window, as explained in
“Customizing the Display”, page 22.
In the First IP Address box, type the IP address of the first Ethernet port. You can also type
the address of the second Ethernet port in the Second IP Address box, although it is not
necessary to do so.
If the SMP Gateway cannot be directly accessed through the network, but requires a dialup
connection, clear the Automatically poll SMP Gateway’s status at startup check box to
prevent SMP Manager from polling the gateway for its status.
To use a version of the SMP Tools that is different from the version of the software installed
on this specific SMP Gateway:
Select Use specific version.
Select the desired version in the corresponding box.
Note: Only versions for which a version pack is installed on the computer will be
available. To learn more about version packs, see “Version Packs”, page 204.
Icon Description
A blank page.
A file (configuration file, new software, etc.) has been modified and will be activated
when the gateway is restarted.
Column Description
Gateway The list of SMP Gateways and, if you request it, the tools that are currently running for
each gateway in the list.
IP Address The IP address of any SMP Gateways you have grouped together in SMP Manager. This
column is not available by default.
Status The current status of each SMP Gateway in the list (started, failed, safe mode, max safe
mode, on standby, and various intermediate states).
Platform The SMP Gateway model (ex. SMP 4/DP, SMP 16/CP, etc.)
Firewall Whether the SMP Gateway integrated firewall is active. This information is available
only if your version of the SMP Gateway software supports security features.
VPN Indicates if the SMP Gateway is connected to SMP Manager using VPN or not.
Group This column shows the virtual address given to the redundancy group. If the address is
modified, the new address will appear beside the old one, separated by an arrow. Upon
the next reboot, the device will be grouped under the new address only.
Security This column shows whether authentication is activated or not, locally or through
IED Manager Suite, and how recent is the security database stored on the SMP Gateway.
Description This column shows the Description property of the SMP Gateway, as specified when the
unit was added to the list of SMP Gateways monitored in SMP Manager.
As we saw under “Principles of Operation”, page 5, you have to configure the SMP Gateway
before you can use it. For this, you use SMP Config to define the characteristics of your
SMP Gateway and the functions it has to perform. The configuration is stored in a file that is then
loaded onto the SMP, where it is stored in non-volatile flash memory.
Using SMP Config, you will perform the following configuration steps:
• For an SMP 16/SG, define the hardware options installed.
• Create a master protocol instance for each device to be supported.
• Define each data point on each device.
• Configure the communications link to be used to connect to each device.
• Create a slave protocol instance for each SCADA or control center.
• Configure the communications link to be used to connect to the SCADA.
• Map the device data points to SCADA data points.
You will then use SMP Manager to send the configuration file to the SMP Gateway.
Note: There can only be one instance of SMP Config running at any given time.
If you launch the tool for a given SMP Gateway and then launch it again for a
second SMP Gateway, SMP Config will prompt you to save any changes you
have made, close the configuration file of the first gateway, and then open the
configuration file of the second gateway.
The list of all defined master protocol instances appears in the right pane.
From the Tools menu, choose New Instance From Template.
Choose the appropriate template, and click Open.
In the dialog box, enter:
• The name of the new instance.
The following characters cannot be used as part of an instance name: the comma (,), the
quotation mark (") and the slash (/).
• The device prefix.
The device prefix is a string that identifies the device and is used as a prefix for all of its
data point names. The prefix ensures that every name in the system is unique. An
explanation of the usage of prefixes is provided under “Device Prefix and Naming
Conventions for Data Points”, page 28.
Note: The following reserved words and characters cannot be used as part of a device
prefix: the word “_smp” (which is the device prefix of system data points), the
comma (,), the quotation mark ("), the semicolon (;) and the grave accent (`).
The new instance appears in the left pane. If you open its tree structure and click the various
physical data point types, all the data points supported by the device will be displayed in the right
pane.
Note: The following characters cannot be used as part of an instance name: the
comma (,), the quotation mark (") and the slash (/).
The new protocol instance is added in the left pane, under the protocol type you had selected. If
you expand its tree branch and click an item, the corresponding protocol settings will be displayed
in the right pane. Note that if you click a physical data point type in the left pane, the right pane
will display an empty row since you will have to add the physical data points manually.
Note: If you created the protocol instance from a template, the general settings have
been defined for you. However, you should verify the settings to make sure they
match your device configuration, and you should familiarize yourself with the
naming conventions discussed in this section.
Note: The following reserved words and characters cannot be used as part of a device
prefix: the word “_smp” (which is the device prefix of system data points), the
comma (,), the quotation mark ("), the semicolon (;) and the grave accent (`).
For instance, to configure a MODBUS master protocol, you would provide settings such as
the following:
• A Device Address, typically 1.
• A MODBUS Type, typically RTU Serial.
• A Scan Interval, typically 1000 milliseconds.
A complete description of all settings is provided in the document entitled Master Protocol
Common Concepts. Protocol-specific settings are described in individual documents, such as the
DNP3 Master Protocol Reference Manual.
Note: The following characters cannot be used as part of a data point name: the
comma (,), the quotation mark ("), the semicolon (;) and the grave accent (`).
A dialog box appears, prompting you for the optional prefix and suffix to be added to every
new data point name. The upper portion of the dialog box provides information about the
open template file, while the lower portion shows warning and error messages.
Specify a prefix and a suffix, if applicable.
The new data points now appear in their respective categories under the selected protocol instance,
and their names contain the specified prefix and suffix.
Note: The prefix and suffix are not applied to logical data points, and that the logical
data points are reset every time you add data points from a protocol template.
You should, therefore, configure these data points once you have completed the
list of physical data points.
Note: A template file can contain only one protocol instance. So if you want to create
templates for several protocol instances, create a new configuration for each one
and save individual templates.
A dialog box appears, prompting you for the instance name and device prefix.
Asynchronous Use this value to indicate that the serial port is dedicated to establishing
a standard asynchronous RS-232 or RS-485 connection.
Modem Asynchronous This value indicates that the port is used for modem asynchronous
communication. The value is automatically assigned to the Modem port
of an SMP 16 or of an SMP 4/DP equipped with an internal modem, and
to the COM4 Board A port of an SMP 4 equipped with an internal
modem.
RAS (remote access server) Use this value to indicate that the serial port is configured to accept
incoming direct serial connections. This type of connection allows you
to use the SMP Tools as if you were connected to the SMP Gateway via
a normal network connection. By default, the CONSOLE port is always
configured for RAS.
Refer to the SMP 4 Installation Guide, S1120-12-1, the SMP 4/DP
Installation Guide, S1120-14-1, or to the SMP 16 Installation Guide,
S1120-13-1, for instructions on setting up a RAS IP address pool. Then
refer to “SMP Tools Remote Access to the SMP Gateway”, page 187, in
the present manual, for the step-by-step installation procedure.
Redundancy Use this value to indicate that the serial port is reserved for connecting
two SMP Gateways together as a redundancy group. See “Grouping 2
SMP Gateways for Redundancy”, page 165.
Elo Touchscreen Use this value to indicate that the touch input information of an Elo
Touchscreen will be transmitted to the SMP 16 using a serial cable,
through this serial port.
This interface is not available on the SMP 4 and the SMP 4/DP.
Radio Use this value to indicate that a radio will be connected to this serial
port.
K-BUS Use this value to indicate that the serial port is used to communicate
with MiCOM relays from AREVA that provide a K-BUS interface.
This interface can only be assigned to serial ports A02 and A10 of an
SMP 16. For an SMP 4 or an SMP 4/DP, connect a KITZ 101 interface
unit between the serial port of the gateway and the K-BUS interface of
the relay.
D20-HDLC Use this value to indicate that the serial port is reserved for to
communicate with GE D20 substation controllers using the HDLC link
layer protocol.
This interface can only be assigned to the COM2 serial port of an
SMP 16.
Reserved Use this value to indicate that the serial port is reserved for purposes
other than those stated previously.
Note: If you choose Redundancy as the interface for a serial port, this port will not
appear in the list of Asynchronous Serial Ports, as it will be reserved for
connecting the 2 SMP Gateways that will be grouped together.
In the right pane, enter the settings for the selected serial ports. The required settings are
usually provided in the device manufacturer’s reference manual:
If you are using RS-485 2-wire communication, choose RS-485 (2 wires).
If you are using RS-485 4-wire communication, choose RS-485 (4 wires).
Choose the device communications settings: baud rate, byte size, parity and number of
stop bits, such as 9600 baud, 8 bits, no parity, and 1 stop bit.
Choose the device hardware handshaking mode:
If the link type is RS-232, most devices do not use handshaking, so you should keep
the default values: RTS to Always On, DTR to Always On, and CTS to Ignore.
If the link type is RS-485 (4 wires), set RTS to Always On. You shouldn’t have any
problem if you keep the other default values: DTR to Always On, and CTS to
Ignore.
If the link type is RS-485 (2 wires), set RTS to TX Request. You shouldn’t have
any problem if you keep the other default values: DTR to Always On, and CTS to
Ignore.
If software flow control (XON/XOFF) is supported by the device and required:
Select XON/XOFF (Output).
The serial port driver will transmit the XOFF character if it receives more characters
than it can handle, and will transmit the XON character when it will be ready to
receive and process more characters.
In the XON Limit cell, type the number of bytes that must be left in the reception
buffer, following the transmission of the XOFF character, before transmitting the
XON character.
For example, if the XOFF character had to be transmitted to the device and the XON
Limit setting value is set to 1, the serial port driver will wait until there is only 1
character left in the reception buffer before transmitting the XON character.
In the XOFF Limit cell, type the minimum amount of free space, in bytes, that must
be left in the reception buffer, before transmitting an XOFF character.
For example, if the reception buffer can hold up to 500 bytes and the XOFF Limit
setting value is set to 5, it means that the XOFF character will be transmitted as soon
as there is 495 characters waiting to be processed in the reception buffer.
If the device supports non-standard values for the XON and XOFF characters, type
these values in the XON Char and XOFF Char cells, using the C-programming
language notation (“0x”).
Note: Master TCP/IP connections that are encrypted by the SMP Gateway cannot be
used for passthrough.
Also note that the SMP Gateway does not implement RFC 5746, which defines a
TLS extension for renegotiation indication.
(Optional) If you need to force the SMP Gateway to bind the connection socket to a
specific IP address, type this address in the Socket Bind Address cell.
For example, if the SMP Gateway is used in a redundancy context, you can specify the
virtual IP address of the SMP Gateway redundancy group; when a failover occurs, this
will ensure that the standby SMP Gateway will use that address to reestablish the
connection with the IED,
For example, if the SMP Gateway is used in a redundancy context, you can specify the
virtual IP address of the SMP Gateway redundancy group; when a failover occurs, this
will ensure that the standby SMP Gateway will use that address to reestablish the
connection with the IED,
Note: If you have several devices that share a multidrop link, each device must have a
different device address.
After sending the file to the SMP Gateway, SMP Manager informs you that you have to
restart your SMP Gateway for the new application to go into effect.
In the Restart Gateway dialog box, choose Shutdown and Restart to have the
SMP Gateway restart in normal mode.
All restarts are automatically logged in the SMP Gateway internal log file. You can type a
comment to indicate why you restarted the SMP Gateway. This comment will be added to the
event log.
The SMP Gateway will go through a series of startup steps, which will be displayed in the Status
column of your SMP Gateway. When startup is complete, if your configuration file is correct, the
Status column will show Started, to indicate that the gateway has started normally.
If your configuration file is incorrect, the Status column will indicate that there is a problem.
There are a number of conditions that can prevent the SMP Gateway from activating a
configuration. For instance, the hardware settings may not match the actual physical configuration
of the SMP Gateway. If the gateway does not start up normally, turn to “Troubleshooting”,
page 221.
Now that you have a working configuration file with all the master data points, you can use the
other SMP Tools and Internet Explorer to see what is going on with the SMP Gateway and with
the connected device.
In the Configuration Download dialog box, SMP Manager displays the available
configuration files. The current configuration file is identified by the “.PAR” extension, while
the previous configuration file is identified by “.OLD”. You might also see files with the
“.TXT” or “.AIT” extension.
Choose the “.OLD” file, and click the OK button.
If you are selecting more than one cell, use the CTRL key or the SHIFT key on your
keyboard, as per standard Windows procedure.
From the Edit menu, choose Select Cells.
Click in the cell that contains the value you want to copy. In the example, we clicked in the
CI_01 Scale cell.
A dialog box appears, in which you must specify the starting sequence number (7) and the
increment (1). The result is shown next.
The list of instances of this protocol type appears in the right pane.
In the right pane, click the protocol instance you want to delete.
Press the DEL key on your keyboard, and confirm your intention of deleting the row.
This feature is a great time and effort saver, as it spares you from having to wait until you try to
validate or save your SMP Gateway configuration before finding out that you have a number of
errors.
OR
Press CTRL-F.
In the Find Points dialog box, type the point name you are looking for and click the Find
button. The results appear in the list below.
Select the point in the list, the application will bring you to the configuration zone of the
point.
As shown above, one point can be used in several situations. If you need to change the naming
scheme in your configuration, rename the point and the other points created from it will
automatically bear the new name.
The SMP Gateway maintains an internal log of all significant events. Using SMP Log, you can
select and view the various log files in real time. You can view, print, search and save all or any
information in this application.
Click a log in the left pane, to view its contents in the right pane.
To prevent the display pane from scrolling when a new entry is added:
From the View menu, choose Auto Scroll to remove the checkmark beside this command.
Repeat the previous step to bring the checkmark back and reactivate automatic scrolling.
SMPLog.exe Syntax
SMPLog.exe /ip <address> /nosplash /rpc
[/combinedlog]
/logmode { complete | diffonly | append}
/logdir <directory>
/local /user "<username>" /pass "<password>"
Argument Description
/ip <ip> Provide the IP address of the SMP Gateway from which to
retrieve the log entries.
/nosplash Optional. If specified, prevent the display of the SMP Log splash
screen at startup.
/rpc Force SMP Log to communicate with the SMP Gateway using
RPC.
Note: This setting is mandatory, unless you are attempting to retrieve
log entries from an SMP Gateway running version 5.0 or
earlier of the SMP Gateway software, which used DCOM.
/logmode { complete | Indicates which log entries should be retrieved and saved:
diffonly | append}
complete.
Create a new file containing the entire log contents.
diffonly.
Create a new file containing only the new log entries that
were recorded since last execution.
append.
Appends new entries to the most recent file; file will be
created if it does not exist.
/logdir <directory> Indicates the destination path of the saved log files.
Note: This setting is mandatory, as it triggers the log retrieval
feature; it if it is missing, SMP Log will start normally, if other
provided settings are valid (IP address, account credentials,
etc.)
Notes
• To retrieve standard log entries, the specified user account must have the “Diagnostic”
privilege; to retrieve entries from the “Firewall” and “Security” logs, the account must have
the “Security Management” privilege.
• By default, log entries are stored in files named using the corresponding log folder name and
current date and time (ex. Security_20100324_211946_UTC.log).
If you specify the /combinedlog switch, all log entries are saved in a single file
(ex. All_20100324_211946_UTC.log)
Example
The following command line will retrieve only new log entries from the SMP Gateway at the IP
address provided by the first command line argument (%1):
Smplog.exe /NOSPLASH /RPC /LOCAL /IP %1 /LOGDIR c:\logs\%1
/LOGMODE DIFFONLY /USER “Alice” /PASS “A8bCk67P”
Using SMP Trace, you can view a continuous stream of protocol exchanges between the SMP and
the substation devices, or between the SMP Gateway and the control center.
At this stage, however, since you have only configured master protocol instances, you will only
see the protocol exchanges that take place between the SMP Gateway and the substation devices.
You can have the information displayed in UTC or local time, highlight the rows that contain
specific keywords, and you can clear the current display. SMP Trace can generate a continuous
log of all the events you are tracing, to a text file on your PC. It can also print or save to a text file,
a snapshot of the traced events that occurred since the last time you cleared the display.
Note: SMP Trace will keep highlighting matching results as long as you have not
canceled the search. You can either deselect the binoculars in the toolbar or stop
the search from the View menu.
You can also choose to save it on the SMP Gateway by selecting Record to SMP Gateway.
For example, if you have an SMP 4/DP with a modem on a pole outdoors and you need to
save 24-hour worth of activities, long distance costs are most of the time prohibitive. Use this
option and connect again 24 hours later to pick up your data.
When you wish to stop the recording, click the red button again or click Stop in the Record
menu.
To prevent the display pane from scrolling when a new entry is added:
From the View menu, choose Auto Scroll to remove the checkmark beside this command.
Repeat the previous step to bring the checkmark back and reactivate automatic scrolling.
The SMP Gateway stores a large number of real-time statistics and internal counters to help you
analyze the performance of your SMP Gateway and assist you in troubleshooting your
configuration. Using SMP Stats, you can view, in real time, various statistics about the
communications links and about the protocol exchanges that take place between the SMP Gateway
and the devices or control centers. You can have the information displayed in UTC or local time.
You can also print the statistics, reset them, or save them to a text file for subsequent analysis.
The statistics are displayed in the right pane and you can see them change dynamically.
Note: The Modem Pool folder is visible only for the SMP 16, which has an integrated
modem, and for the SMP 4 or the SMP 4/DP purchased with the modem support
option. Furthermore, a modem pool must be configured on the SMP Gateway.
• The Master Protocols and Slave Protocols folders contain counters and statistics about each
instance of a protocol component. Each protocol component contains protocol-specific items
that describe the messages exchanged with a device or control center.
(The Slave Protocols folder is missing, in the previous example, because we have to define
slave protocol components first.)
• The System folder contains counters and statistics about the operation of the SMP Gateway
hardware and software.
The integrated secure Web server (eSMP) of the SMP Gateway provides an easy way to view the
log files and statistics using your Internet Explorer Web browser. It is also the easiest way to view
the analog and binary input and output points in real time.
Note: The eSMP Web server requires version 5.0 or a later version of the Microsoft
Internet Explorer Web browser. JRE (Java Runtime Environment) must also be
installed on your computer. See the SMP Gateway installation guide for details.
Your Internet Explorer Web browser will open and connect to the SMP Gateway Web server.
You may have to wait a few seconds while the Website is loaded and the Java platform is
initializing. The Website Home page will eventually appears in your browser.
Note: The SMP Gateway Website is accessible using the Hypertext Transfer Protocol
over Secure Socket Layer (HTTPS). By default, the SMP Gateway integrated
firewall allows communications through the HTTPS port (443). Make sure such
communications are also permitted over the substation LAN and through the
corporate firewall.
To apply a filter:
Select the tab in which you want to filter data points.
In the toolbar, type the filter criterion. It can be the device prefix, or any other text that is
common to the data points you want to display.
Click Apply. Only the data points that contain the filter criterion in any field (such as the
point name or address) will be displayed. The criterion text is highlighted over the point
name.
Data points will now be highlighted when their value changes and the display will return to
normal after a short delay.
Data points will now be highlighted when their value changes. They will remain highlighted
until you acknowledge the change of value.
Now that we have seen how to configure master protocol instances, tested the SMP Gateway
configuration and viewed the collected data, we will see how to configure, using SMP Config, a
slave protocol instance in order to forward the device data to a SCADA or a control center.
The data points you choose are added to the Slave I/O list. If, for example, you click a binary
input point in the Master I/O list, the point is added to Binary Inputs, in the Slave I/O list.
Note: The added points will be indexed in the order they appear in the Slave I/O list.
For some protocols, additional arrow buttons are available to the right of the
Slave I/O list. Using these buttons, you can sort the points according to your own
indexing requirements.
Normally, a data point that has been transferred to the Slave I/O list disappears from the Master
I/O list. However, if you want the transferred data points to continue being displayed in the
Master I/O list:
Select the Show all enabled points check box.
If you change your mind, you can remove a data point from the Slave I/O list as follows:
Click the data point in the Slave I/O list.
Click the left arrow button.
For instance, the following settings are provided for a DNP3 data point:
• Each data point is automatically assigned an Index value according to the subscription
order. You should ensure that these index values correspond to those expected by the
control center.
• The Event Class setting groups data points together for subsequent reporting to the
control center.
Note: The SMP Gateway does not implement RFC 5746, which defines a TLS
extension for renegotiation indication. It is also recommended to use a control
center or master station that does not implement this RFC, or to deactivate the
transmission of the renegotiation indication extension to the SMP Gateway.
Some TCP ports are reserved for the SMP Gateway core components or for specific
servers/protocols. They cannot be used for TCP/IP slave connections. These ports are presented in
the following table.
20-21 FTP
443 HTTPS
123 SNTP
135 NETBIOS
161-162 SNMP
389 LDAP
1217 CoDeSys
1234-1235, 4567, 26179 and 49152 Reserved by the SMP Gateway core components.
1723 PPTP
Table 10-1 TCP ports reserved for core components or specific protocols
161-162 SNMP
1723 PPTP
The SMP Gateway integrated Web server also provides a commissioning tool that simplifies the
engineering effort required for the implementation and the integration of a substation. It is
intended to help technician(s) and/or engineer(s) testing the SMP Gateway configuration and
connectivity with the substation devices and the SCADA.
The Web server commissioning tool, when configured and activated, is accessible through a Web
browser, the same way than for viewing data in real-time. It may be enabled by users that have the
System Management privilege, and the operation privilege is required for users that will perform
the commissioning operations, which are essentially the following:
• Forcing an analog/binary input point to a specific value/state.
This operation allows the validation of the configuration of the SMP Gateway’ slave protocol
and the SCADA, by verifying if all the gateway data points are correctly mapped on both
sides, if minimum/maximum values are correctly handled, etc.
• Performing a control operation on an analog/binary output point.
This operation allows the validation of the master protocols’ configuration, by verifying if the
IED data points are correctly configured in their corresponding masters, if scale and offset
settings are correctly specified for each data point, etc.
For example, by forcing each data point of an IED on the SMP Gateway, the technician/engineer
can verify that these points are correctly configured, and that transitions/changes for these are
correctly handled by the SCADA. On the other side, by executing control operation directly on the
SMP Gateway, instead of performing them on the SCADA, the technician/engineer can validate
that the masters’ output points are correctly configured.
The button text will change to Deactivate, and the Start Session button on the right will become
available. The operator may now start a commissioning session.
Note: Commissioning will remain active until the left button is clicked again to
deactivate it. If the SMP Gateway is restarted, the commissioning feature activity
state will be persisted: if it was active prior to the restart, it will be active at startup
and vice-versa. However, sessions in progress will be terminated.
The button text will change to End Session and the Commissioning Tool tab is now
available.
To use the commissioning tool, click the Commissioning Tool tab.
Note: The commissioning session will remain established as long as the Web browser
will remain connected to the Website, or until the user click again the button on
the right. The session is also terminated when the SMP Gateway restarts.
Note: You cannot force the value/state of multiple data points simultaneously.
Note: As stated in the message box, this operation may take a while, depending on the
number of input points to revert. Also, data points included in the selection that
have not been forced will not be modified by this operation.
You can also revert all forced data points to their current value, by clicking Revert All in the
commissioning toolbar.
Note: If the output point supports select and execute control types, remember to test
both control types.
Note: You cannot perform control operations on multiple output points simultaneously.
As mentioned earlier in this section, the validation of the output point`s configuration at the
SCADA and in the SMP Gateway is achieved by performing a control operation directly from the
To consult the SMP Gateway Control log entries in the Web browser:
Select the Logs tab.
In the left pane, select the Control log file.
All the log entries will appear in the right pane, the oldest entry being displayed at the top.
As stated in the dialog box, the commissioning tool will restore all forced points to their
acquisition values. Click Yes.
The button text will change to Start Session and the Commissioning Tool tab will no longer
be available, until a new session is established.
To deactivate commissioning:
Connect to the SMP Gateway Website, if you are not already connected, by following the
procedure described in section 9.1, page 57.
At the Website Home page, under Commissioning Tool, click Deactivate.
In this chapter, the reader will learn about the SMP Gateway HMI feature, which allows users to
perform data monitoring and control operations directly on the SMP Gateway, without having to
go through an external HMI, the SCADA, or any other control center.
Note: The Local Display option is also known as the “SMP Gateway Local HMI”.
Note: You do not have to purchase a Visual T&D license if you do not already own one:
a Development mode is available, which allows the use of Visual T&D Diagram
Editor without having to deploy a complete Visual T&D system.
78 • Chapter 12: Data Monitoring and Control through the SMP Gateway HMI
12.4.1 Touch Screen Calibration for the SMP Gateway HMI
The touch screen calibration process is exactly the same as for the Annunciator option, and is
performed at the SMP Gateway startup (and restarts).
To learn how to calibrate the touch screen, see “Calibrating the Touch Screen”, page 147.
Note: Before proceeding with the upload, make sure that the SMP Gateway license is
up-to-date and that it includes the SMP Gateway HMI option; otherwise, the
SMP Gateway will refuse the file.
Note: You can also start the browser manually and type the IP address of the
SMP Gateway. However, if authentication is active on the SMP Gateway, you will
have to provide the username and password of an SMP Gateway local account
that has the Monitoring privilege to access it (and the Operation privilege, if you
have to perform control operations).
When accessing the SMP Gateway HMI through SMP Manager, the latter
automatically provides the required credentials.
Note: For additional information on the SMP Gateway Annunicator option, refer to
“Using the Annunciator Interface”, page 127.
To access the SMP Gateway Annunciator through the SMP Gateway Local HMI:
Under Annunciator, click Show annunciator.
To view the Control log from the SMP Gateway HMI display:
Under Control, click Show log.
80 • Chapter 12: Data Monitoring and Control through the SMP Gateway HMI
remote) of the SMP Gateway, via a Control interaction on the _smp___setLocalControl
system data point (for additional information, refer to the description of this point in “Appendix A
- System Data Points”, page A-1).
To learn how to set up a Control interaction on a diagram shape, refer to the “Interactions” chapter
of the Visual T&D Diagram Editor User Guide, S1140-11-1.
The SMP Gateway HMI application will restart with the new language setting.
To derive full benefits from IED integration, substation data must be available to users at the
enterprise level. However, widespread data access can become an important security risk if it is
compromised.
Note: This security model can be extended, by purchasing Yukon IED Manager Suite.
See “Extending the SMP Gateway Security Model”, page 86 for details.
• Integrated Firewall.
The SMP Gateway is protected by an integrated firewall, which only allows communications
with specific users, computers and programs, including communications with the SMP Tools,
which goes through a TLS-encrypted access port. This feature limits access to the
SMP Gateway internal components and services.
• Monitoring and locking of remote connections.
Modem and passthrough access is continuously monitored, and can be enabled or disabled by
the control center. All accesses are logged and limited to authorized users.
• Integrity checking.
All SMP Gateway software and firmware components are digitally signed in order to ensure
their authenticity and integrity. All executable files are also continuously monitored to prevent
execution of unauthorized code.
[Title]
<Insert the Appropriate Use Banner dialog box title here.>
[Text]
<Insert the appropriate use banner text here>
Under Title, type a title for the dialog box that may be used to display the banner.
Under Text, type the banner text required by the security policies of your company.
To display the banner only at SMP Manager startup, copy the banner file to the following
folder:
Windows XP:
\Documents and Settings\All Users\Application Data\Cooper Power
Systems\SMP Tools
Note: The Application Data (XP) and ProgramData (Vista/7) folders are hidden
by default.
To display the banner for all other accesses to the SMP Gateway, upload the banner file to the
SMP Gateway:
In SMP Manager, from the Update menu, choose Send File(s).
Select the banner text file and click Open.
Restart the SMP Gateway.
The following screenshot presents an example of an appropriate use banner that is displayed at
SMP Manager startup.
Note: Yukon IED Manager Suite has its own appropriate use banner mechanism, which
overrides the SMP Gateway local banner. Refer to the Yukon IED Manager Suite
documentation for more details.
Note: Only users with security management privileges can view the Security log in
SMP Log.
In the right pane, navigate through the various entries until you reach the ones that are time-
stamped at the date and time of the last startup. There should be an entry for each firewall
rule.
Note: Firewall rules can be defined to restrict access through these ports in the firewall.
However, be careful with the 6650 TCP port: if full access is restricted through
this port, you may no longer be able to connect to the SMP Gateway using the
SMP Tools. If this situation happens, refer to “Recovering from a Firewall
Lockout”, page 228, to learn how to fix this issue.
In addition to these ports, you can define additional access rules to allow other applications to
connect to the SMP Gateway, including SCADA and master stations, as described in “Configuring
the Integrated Firewall”, page 98.
The ICMP Ping service is also allowed by default through the firewall.
Table 13-1 Ports to open for SMP Tools usage in a substation LAN firewall
Prior to version 5.1 of the SMP Gateway software & tools, SMP Tools used Microsoft DCOM
technology, instead of a single encrypted access port. Additional ports were also used, for Telnet
communications and File Transfer Protocol (FTP) exchanges. As it is possible to use some
functionality of the legacy versions of the SMP Tools with the recent gateway software, and recent
versions of the SMP Tools with legacy gateway software, backward compatibility issues are
discussed in the “Legacy SMP Gateway Software and Tools Compatibility” section, page 104.
Note: The IMS Security Server global security model is out of the scope of this
document. For more information, contact your local Cooper Power Systems
representative.
To define the authentication policy of an SMP Gateway for the very first time:
From the Security menu of SMP Manager, choose Edit Local Security Database.
In the Description box under Security Configuration, type a short description for the
security database of the SMP Gateway; this description will appear at the top of the Local
Security Database Editor window.
Note: User accounts of the Administrators group may only be locked out if the Enable
SMP Gateway administrator account lock is also selected (see below).
To automatically unlock an account a certain amount of time (as defined by the Remove
lockout after setting that follows), select Activate automatic account unlock.
To also allow administrator accounts to be locked out, select Enable SMP Gateway
administrator account lock and specify the amount of time such accounts will be locked
out in the Remove administrator lockout after box.
Click OK.
The Local Security Database Editor window appears and you are ready to define users and
groups (see “The SMP Gateway Security Database”, page 89).
The description of the security database appears in the title bar of the Local Security
Database Editor window, and the authentication policy will go into effect as soon as it will
be sent to the concerned SMP Gateway(s).
Note: If you remove privileges, you must notify the concerned groups or users;
otherwise, they will fill up the security log with access denial messages if they
keep trying to access the gateway.
Read only Read the SMP Gateway configuration file only. Administrators,
technicians, operators.
Privileges are described in the “Default Groups and Privileges” section, page 89.
You can edit the user groups and user accounts using the Local Security Database Editor.
The Local Security Database Editor window appears. If you click a user group in the left
pane, the right pane shows the privileges assigned to this group and gives a description of
each privilege.
You will be advised if there are any users assigned to the group you are about to delete.
Note: You cannot create, delete or rename privileges. However, you can choose which
predefined privileges you want to assign to a particular group.
Note: The Administrator user cannot be deleted, but it should be renamed the first
time you edit the security database, because the name is so revealing that it
exposes the account to brute force attacks.
To rename a user:
In the left pane of the Local Security Database Editor window, select the user to rename.
From the User menu, choose Rename.
Type the new user name, and then press ENTER.
To delete a user:
In the left pane of the Local Security Database Editor window, click the user to delete.
From the User menu, choose Delete.
For example, in the following illustration, the user named “Matt” is assigned to the
Protection Engineers group.
This will compare your security parameters, such as passwords, with the authentication policy
that you defined beforehand.
SMP Manager encrypts the information, and then sends the configuration to the
SMP Gateway(s).
If the user has security management privileges, the Security column indicates if the security
database of each SMP Gateway in the list matches the local security database currently stored on
the PC.
Otherwise, the Security column only displays whether authentication is active, or not, on the
gateway, without telling if the local security database is up-to-date.
SMP Manager retrieves the file from the SMP Gateway and upon your approval, replaces
your local security database with the one retrieved from the SMP Gateway.
To load this new security database onto one or more SMP Gateways:
Retrieve the file:
From the Security menu of the Local Security Database Editor window, choose Get
from File.
In the Get Security From File window, specify the file name and click Open.
The retrieved file now becomes the currently active local security database.
Close the Local Security Database Editor window.
In SMP Manager, select the SMP Gateway(s) to which you want to send the security
database.
From the Security menu, choose Update SMP Gateway Security Database.
Note: If IMS authentication is active on the SMP Gateway, the Remove Security
Database from SMP Gateway command will be unavailable. If you really want to
deactivate local authentication on the SMP Gateway, you must first deactivate
IMS authentication.
Refer to the IED Manager Suite SMP Gateway Integration Guide, S1130-12-1.
Local: Disabled
Note: Removing the security database only deactivates the authentication policy, user
accounts and groups. Other security features, such as integrity checking, firewall
and VPN management, are still active.
You can reactivate local authentication of one or more SMP Gateways by sending them your local
security database, as described under “Uploading the Local Security Database on SMP Gateways”,
page 94.
OR
Select Unlock specific account, and specify the account in the User Name box.
Click Unlock to unlock the account(s), and then click Close.
If a service is not present in the list, refer to “Restricting Access to Other Services”, page 100, to
see if access is not configured somewhere else in SMP Config. If it is still not the case, a custom
firewall rule must be defined.
At the bottom of the right pane, a list of custom rules is displayed. Note that no custom rule is
defined by default.
Click in the Name cell, and then type a short name to briefly describe the rule you are about
to define.
Select Allow to allow access.
OR
To delete a rule:
Click in the row. You will see an arrow on the left side of that row.
Click the arrow and press the Delete key.
Note: The device account password management feature cannot change the password
of the corresponding devices themselves. For that matter, you must either
perform the change manually using the corresponding native vendor tool (locally
or through a passthrough connection), or use the Password Manager application
of IED Manager Suite.
For additional information about IED Manager Suite and Password Manager,
contact your Cooper Power Systems sales representative.
Note: For more information about passthrough connections, see “Using Passthrough
Connections”, page 109.
For more information about RAS dialup connections, see “SMP Tools Remote
Access to the SMP Gateway”, page 187.
The control center can lock all incoming RAS dialup connections, as well as individual
passthrough connections, using some of the SMP Gateway system data points. These system data
points are presented in “Appendix A - System Data Points”, page A-1.
The following sections explain the various methods available to lock/unlock RAS/passthrough
connections.
Method 1- Through SMP Console and using the RAS Manager utility program:
In the SMP Manager window, select the SMP Gateway and start a console session.
Type the command that starts the RAS manager:
RASMGR
Type the command that toggles between locking and unlocking incoming dialup connections:
X
The following example illustrates how you can lock, and then unlock RAS dialup connections.
(H) Help, (Q) Quit [h]: x
Telnet 23 TCP
Table 13-3 Ports to open in a substation LAN firewall, when not using VPN
Table 13-4 Optional ports to open in a substation LAN firewall, regardless of VPN usage
Table 13-5 Ports to open in a substation LAN firewall, when using VPN
Protocol Port
DNP3 20000
ICCP 102
MODBUS 502
Table 13-6 Ports that are commonly used for RTU/SCADA communications
If you configured system folders on your SMP Gateway and the Windows firewall is active on
your PC, you must also open the following ports:
• 445 (TCP protocol).
• 137, 138 and 139 (UDP protocol), if you are running NETBIOS on your network.
Note: This configuration will work only if your network does not use address translation.
Check with your network administrator.
Note: You will not be able to establish a VPN connection between a Windows 7
computer and an SMP Gateway if local authentication is not activated on the
gateway.
Note: To manually set up a VPN connection, the user must have the System
Management privilege for the SMP Gateway.
\All Programs\Accessories\Communications
Select Network Connections.
You will now see a new icon named after your gateway, under Virtual Private Network.
You are now ready to use your tool/application through the VPN connection.
Most manufacturers of recent IEDs provide native vendor tools (NVT) for the configuration and
maintenance of their devices. These tools usually connect to the device using a serial link or, less
frequently, a network connection.
The optional SMP Gateway passthrough feature gives you the ability to use PC-based tools to
access the devices connected to an SMP Gateway. With this feature, the SMP Gateway serves as a
terminal server for remote maintenance, monitoring and control of the connected devices.
A virtual loopback connection must be set up between SMP Connect and the NVT. This allows
SMP Connect to intercept the communications link from the maintenance or configuration tool,
and forward the data to the SMP Gateway. The SMP Gateway passthrough server then forwards
the data to the device via a serial link. The result is that maintenance and configuration tools can
operate as if the device were directly connected to the PC.
While the PC application is communicating with the IED or RTU, the latter may have to suspend
its data acquisition; depending on the serial link and device type involved, it may be necessary for
all devices on the link to suspend their data acquisition, even though only one device is engaged in
communications with the PC application. This suspension is illustrated using a red “X” in Figure
14-1.
SMP Connect terminates the passthrough connection if a problem arises or if there is no data
exchanged during a specified timeout period.
Create a new connection by entering the following information in the empty row:
• IED Name.
This name will be used to identify the device in the SMP Connect program. You should
use the same name that you assigned to the device when configuring the master protocol
component that it communicates with.
• Connection.
Choose the serial port or the TCP/IP connection that links the SMP Gateway to the
configuration port of the device. Some devices use separate configuration and data ports.
If it is the case, you must use two separate cables to connect the device to the
SMP Gateway and specify here the port that will be used by the IED maintenance and/or
configuration programs; otherwise, the port must be the same as the one used by the
master protocol.
• Usage.
This setting allows special passthrough usage, in configurations where multiple
Moreover, if the direct access port is enabled on the SMP Gateway, it is not
possible to define passthrough connections for any other usage than Normal.
• Connection Count.
This setting indicates the number of simultaneous passthrough connections that are
required for the Usage specified. In most cases, the Default value is appropriate for this
setting, because the corresponding number of connections that will be created by the
passthrough server is function of that usage.
However, if connectivity or performance issues are encountered, try some specific values
instead of Default.
Note: One typical example is the use of the Mozilla Firefox and Google Chrome
browser, which require more simultaneous connections than Microsoft Internet
Explorer. As the default connection count is based on Internet Explorer
requirements, a custom value may be required if another web browser is used.
• Suspend Link.
This setting indicates that data acquisition should be suspended for all other devices
sharing the multidrop link while SMP Connect is communicating with the selected
device. If selected, acquisition of the remaining devices will be suspended. This setting
applies only to devices that support the feature.
• Suspend IED.
This device-specific setting indicates whether or not the master protocol component
should suspend data acquisition while SMP Connect is communicating with the device.
• IED Address.
This address identifies the device in a multidrop configuration. This setting is ignored if
the Suspend IED check box is not selected.
• Modem Signals.
This setting specifies whether or not the serial port associated with the IED supports
Note: A null modem cable is an RS-232 cable that crosses the sending wire with the
receiving wire.
Instead of attaching the other end of the cable, to the device, attach it to a second serial port of
the same PC, for example COM2.
Note: Most modern PCs are equipped only with a single serial port. If virtual
communications ports are not supported by the application and the PC is only
equipped with a single serial port, a serial expansion card must be installed on
the PC.
The SMP Connect application window appears, showing a list of all the passthrough
connections you previously configured with SMP Config for this SMP Gateway.
The top portion of the screen shows the settings you entered in SMP Config, with one additional
piece of information: the Status column, which indicates whether a passthrough connection is
currently being used for a particular device. The bottom portion of the screen shows a trace of
passthrough connection events.
Note: You can also use the Apply base settings for arrow-button to apply default
base settings for some type of applications.
Repeat the previous steps for all applications. Make sure you click OK to save the settings and
close the IED Application Settings dialog box.
If you requested that the application be started manually, the trace window will show that
SMP Connect has established the SMP Gateway passthrough connection and has started the
loopback connection with the application, but the application window will not open. Start the
application now.
You are now ready to use the application the same way you would if you were connected to it
locally.
The SMP Connect trace window now shows that the passthrough connection is no longer
active.
Sequence-of-events recorders (SERs) are widely used in the power industry. Some IEDs and
RTUs are dedicated SERs, while other devices implement the SER functionality as part of their
function set.
The SMP Gateway also provides an SER function, which allows the generation of events for IEDs
that do not support this feature.
This chapter describes how the SMP Gateway can generate events based on real-time acquisition
data, presents the format in which these events are available, and explains how to configure this
feature using SMP Config.
15.1 Events
The SMP Gateway SER generates events based on the real-time data it acquires from IEDs and
RTUs, notably through master protocols, when specific trigger conditions occur for selected data
points: these data points are called event data points.
Keyword Description
CONTROL The control operation that was performed, between the following:
(analog and binary
Select
control events only)
Execute
Direct Execute
CONTROLRESULT The result of the control operation that was performed. If the operation failed, the
(analog and binary cause is also displayed.
control events only)
CONTROLTYPE The execution type of the control operation that was performed, between the
(binary control following:
events only)
Open
Close
Pulse
LABEL This keyword can be used to insert context-sensitive text in the log entries.
For each selected event data points, you can define labels that will be inserted in
the log entries depending on the current value of an input point, or on the
execution type of the control operation performed on an output point:
For binary events, two labels can be specified: one for state 0, and another for
state 1.
For analog control operation events, a single label is used for all operations,
regardless of the value or execution type.
For binary control operation events, three labels can be specified, one for
each execution type: Open, Close and Pulse.
For example, when a binary event occurs, the LABEL keyword is replaced by the
text of the State 0 Label or State 1 Label specified for the corresponding point, if
this keyword is present in the binary event pre-formatted entry.
To learn how to specify these labels, see “Defining Point-Specific Labels for Log
Entries”, page 124.
POINTDESC The description of the event data point that triggered the event.
This is the same description that is specified for the point in the corresponding
master protocol configuration.
POINTNAME The name of the event data point that triggered the event.
This is the complete RTDX name of the point, with its device prefix.
QUALITY The quality of the event data point that triggered the event.
(binary events only)
This is not the complete RTDX quality, but a simplified version of it, as
described in the “Quality Flags” section, page 120.
STATE The state (value) of the event data point that triggered the event.
(binary events only)
TIME The event timestamp, in the UTC format, which is the date and time at which the
event occurred.
TIMEZONE The complete description of the time zone specified at configuration time, which
includes the time difference with GMT, in hours, and the main locations that are
found in this time zone.
The default entries will fulfill most user requirements, but can be customized if necessary.
Type the complete RTDX name of the point, including the device prefix.
Repeat these steps for each event data point.
The selected data points are added to the Slave I/O list, under the corresponding event point
branches. For example, selected binary input points will be added to the Event Binary Inputs
branch.
Repeat these steps for each component that produces data points to select.
The SMP Gateway Annunciator option is a cost-effective solution that provides a local HMI for
substation operators. Using SMP Config, you can set up alarms based on the analog and binary
data points of your SMP Gateway, and design simple pages to display the current statuses and
values of these points and alarms on a touch screen, which also allows you to handle the alarms
and perform control operations.
Note: The Annunciator option is only available for the SMP 16/CP and SMP 16/SG.
To customize this page, see “Setting Up the Alarms Page”, page 132.
To learn how to manage alarms, see “Managing Alarms”, page 149.
• Readings.
Display user-defined pages that show real-time values of data points and allow control
operations on the SMP Gateway output points.
To create reading pages, see “Creating a User-Defined Readings Page”, page 138.
To learn how to control output points from a readings page, see “Performing Control
Operations from a Readings Page”, page 155.
• Blocked.
Display the list of blocked alarm inputs. The operator can block an alarm input to disable
the triggering of alarms for this given input, even when alarm conditions are met. Such
behavior may be required, when a certain part of the substation is under maintenance, for
To customize this page, see “Setting Up the Blocked Page”, page 135.
To learn how to block/unblock alarm inputs, see “Blocking Alarm Inputs”, page 150.
• History.
Display the contents of the history log file, which contains entries about recent alarm and
operator actions.
To customize this page, see “Setting Up the History Page”, page 136.
To learn how to use this page, see “Using the History Log”, page 151.
• System State.
Display various system information and statistics about the SMP Gateway and the
Annunciator.
To customize this page, see “Setting Up the System State Page”, page 137.
To learn how to use this page, see “Monitoring System State”, page 153.
• The single alarm display.
This part of the display is used to manage alarms one at a time. Depending on how it is
customized, the oldest or most recent alarm is displayed here, and the operator can
acknowledge or clear the alarm by pressing the display. The single alarm display can also be
hidden at configuration time.
In the following sections, we will describe how to set up the Annunciator using SMP Config,
calibrate and connect a touch screen to the SMP Gateway, and use the various functionalities of
the Annunciator.
Note: The same subscription feature that was available to configure slave protocols can
be used instead of typing names. This is explained a bit further in this section.
In the Alarm Level cell, select a severity level for this input alarms.
In the Low Threshold cell, specify the value under which an alarm will be triggered for this
input. For example, if you specify a low threshold value of -13.1, an alarm will be triggered if
the input value becomes smaller than -13.1.
In the High Threshold cell, specify the value over which an alarm will be triggered for this
input. For example, if you specify a high threshold value of 125.7, an alarm will be triggered
if the input value becomes larger than 125.7.
In the Deadband cell, specify how much the value must go beyond the low or high threshold
to trigger an alarm. For example, if you set the deadband to a value of 5.0 and the high
threshold to a value of 125.5, an alarm will be triggered if the input value becomes larger than
130.5.
Note: This Deadband setting is different from the one found in the configuration of
master protocols, used to determine whether a value should be reported, or not,
to slave protocols through RTDX.
If you want to temporarily disable the triggering of alarms for this data point, select the
Disabled check box. The alarm conditions will be preserved in your configuration file, but
will not be used by the Annunciator.
In the Low Threshold Description cell, you can type a description for low threshold alarms
on this analog input. This description will be displayed in the various Annunciator pages
when such an alarm condition is met, or when an operation (ex. acknowledge) is performed
Typing each point name can be a tedious task, especially if you have a lot of alarm inputs to
define. Instead, you can use the same subscription mechanism you used to configure your slave
protocols.
The Subscribe to Master I/O window appears. You can then select the master points for
which you want to define alarm conditions. To learn how to use this window, see
“Subscribing to the Master Data Points”, page 62. Once you click OK, the window closes and
a row is created in the Analog Inputs pane for each data points.
All that is left is to specify the conditions and descriptions for these alarm inputs.
The resulting content of the right pane is presented in the next screenshot.
Anytime during the configuration process, you can preview, at the bottom of the pane, how the
alarm list will look like on the Annunciator display.
The preview pane also allows the customization of the alarm list display.
Click and drag the mouse to enlarge of reduce the width of the column on the left of the
cursor.
If you want a given column to take all the width space that is actually unused, click the
column header itself.
The rest of the customization process is performed in the other sections at the top of the edition
pane:
Under Alarm list order, select which alarms should be displayed at the top of the list:
The Oldest alarm at top setting is recommended if you want to deal with each alarm in
order and work them down to the most recent.
If you want to deal with alarms as they occur, select Most recent alarm at top.
If you want the Single alarm display to appear at the bottom of the Annunciator display, put a
checkmark in the Display the single alarm area check box, and then under Single alarm
display, select which alarm should be displayed in this area:
To see the oldest unacknowledged alarm, select Show oldest unacknowledged alarm.
To see the most recent unacknowledged alarm, select Show most recent
unacknowledged alarm.
Note: To learn how to use the single alarm display, see “Using the Single Alarm
Display”, page 151.
Under Alarm acknowledgement, select how alarms will be acknowledged by the operator:
To be free to acknowledge and recall any alarm in any given order, select Alarms can be
acknowledged and recalled in any order.
To force the operator to acknowledge and recall alarms in the order they occur, select
Alarms must be acknowledged and recalled in the order they occurred.
To automatically acknowledge and recall alarms as they occur, without the intervention
of the operator, select Alarms automatically acknowledge and recall.
Under Columns, select which columns should be displayed in the alarms list. Remember that
you can see the result of your selection under Preview.
Still under Columns, you can move the column names up and down using the Move Up and
Move Down buttons. Selected columns will appear from left to right, starting with the
topmost column name in the list.
Under Alarm state colors, set the colors for alarm messages that appear in the Annunciator
various display pages:
Set the text and fill colors for active unacknowledged alarm messages. Different colors
may be specified for major and minor alarms.
Do the same for active acknowledged alarms, unacknowledged alarms that have returned
to normal and acknowledged alarms that have returned to alarms.
For example, if the SMP Gateway is equipped with a sound buzzer, you might want to
name it Clear Sound.
You can see the name of the button changing in the preview section of the edition pane.
You can also use the preview section of the edition pane to modify the columns’ width, order
and availability state, like for the Alarms page (see “Setting Up the Alarms Page”, page 132).
Under Columns, select which columns should be displayed in the blocked alarms list. You
can see the result of your selection under Preview.
Still under Columns, you can move the column names up and down using the Move Up and
Move Down buttons. Selected columns will appear from left to right, starting with the
topmost column name in the list.
The resulting content of the right pane is presented in the following screenshot.
Under Columns, select which columns should be displayed in the messages list. You can see
the result of your selection under Preview.
Still under Columns, you can move the column names up and down using the Move Up and
Move Down buttons. Selected columns will appear from left to right, starting with the first
column name in the list.
You can also use the preview section of the edition pane to modify the columns’ width, order
and availability state, like for the Alarms page (see “Setting Up the Alarms Page”, page 132).
The messages list can be filtered by the operator at runtime to display only alarm or operation
messages, using touch buttons. To display these buttons in the History page, select the Show
display types buttons check box.
Finally, you can add a Clear History button to this page, by putting a checkmark in the Show
clear button check box. This button allows you clear the history log of all its contents.
The messages list can hold a limited number of messages, which is called the history length.
To learn how to use this page, see “Monitoring System State”, page 153.
Under Analog Points Columns, select which columns should be displayed in analog
inputs/outputs lists. You can see the result of your selection under Analog Points Preview.
Still under Analog Points Columns, you can move the column names up and down using the
Move Up and Move Down buttons. Selected columns will appear from left to right, starting
with the first column name in the list.
Under Binary Points Columns, select which columns should be displayed in binary
inputs/outputs lists. You can see the result of your selection under Binary Points Preview.
Still under Binary Points Columns, you can move the column names up and down using the
Move Up and Move Down buttons. Selected columns will appear from left to right, starting
with the first column name in the list.
Note: Data point information is always displayed in the System State page.
Note: You can create a clone of an existing page, by clicking Duplicate. Also, if you
want to change the name of the page later, just select the page from the list and
click Rename.
Select the cell at the intersection of row 1 and column A: let us call it cell 1A. When you click
the cell, the grid toolbar becomes active.
Control(s) Description
Allow you to cut, copy and paste cells in the currently edited page
or from this page to another one.
Allow you to undo last edits, one at a time. If you want to revert to
an edit you just undo, you can use the redo button. Note that a list
of edits is preserved for each page, so you can switch back to a
page you left a few minutes ago and undo the last change you did
to this page, for example.
Change the font and font size of cell text. Only a limited number
of font and sizes are available on the SMP Gateway.
Apply the Bold or Italic font style to cell text. You can also apply
both styles at the same time.
Change the cell font and background colors for normal text. Click
the appropriate button to apply the currently selected color (as
displayed on the button itself) or click the drop-down button to
select the color you like.
Other color options are only accessible through the Cell
Properties dialog box, which is presented later in this section.
Table 16-1 Annunciator readings page editing toolbar controls, in SMP Config
Note: If you click on any button while multiple cells are selected, the resulting
modifications will be applied to all cells, if possible.
Note: You can also open the Cell Properties dialog box by double-clicking a cell.
Note: You can also type the text directly in the cell, from the Readings Annunciator
Page pane.
The bottom part of the General tab is a bit different than for analog data points:
Type the text to display when the input state is 0. For example, if the point represents the state
of a relay, you can type open. If you want the cell to blink in this state, select the Flash
check box.
Type the text to display when the input state is 1. For example, if the point represents the state
of a relay, you can type close. If you want the cell to blink in this state, select the Flash
check box.
You can specify the text and background colors to use while the point is in either state, or
when the point quality is bad.
Note: The Data Point Simulator window will remain open as long as you stay in the
Readings branch of SMP Config tree view.
Using the Data Point Simulator, edit the current value of the points that are used in the current
page. You should see the corresponding cells changing in the preview pane.
Still using the Data Point Simulator, you can also simulate bad quality for any point in the list,
by selecting Error under Quality.
To exit preview mode, click Preview Mode, or select any other branch in SMP Config tree
view.
Finally, you can also attach an “On Click” handler function to a cell. A handler function is an
operation that is performed when a cell is pressed on screen, just like it would be clicked using a
mouse pointer. For example, you might like to add, to your readings pages, buttons that allow you
to control specific binary outputs or to open another readings page. By default, a cell has no
handler attached to it.
In the Page box, select which readings page should be displayed when the operator will press
the cell. All configured pages should be available for selection, plus the following options:
In the Data Point box, select the output point you want to control. You can type the name of
the point directly, if you prefer.
In the Window Title box, type a title for the window that will appear when the cell will be
pressed.
In the State 0 box, customize the button that will set the output point to the state of 0:
Type the button name in the Label edit box.
Specify the text and background colors for the button.
A preview of the button is displayed at the bottom.
Repeat the previous steps, this time in the State 1 box, for the button that will set the output
point to the state of 1.
Click Preview, to have an idea of what it will look like on screen.
Once you are finished, click OK.
Select the corresponding check boxes for the pages you want to be available for display.
Clear the corresponding check boxes for the pages you want to be unavailable for display.
Note: To locate the relay output on the SMP Gateway back panel, refer to the
SMP 16 Installation Guide, S1120-13-1.
Note: If, for some reasons, you are no longer able to access the calibration screen and
you do not want to restart the SMP Gateway, you can call back the calibration
screen via a console command, as described in the “Elo Touchscreen Driver
Manager” section, page 220.
• In the Alarms, Blocked and History tabs, it allows you to move the selection highlight over
the previous or next alarm message.
• In the System State tab, there are two sets of up and down arrow key buttons: one under the
selection pane on the left, and another under the display pane on the right. Use the left set to
select an information page to display in the right pane, and the right one to scroll through the
displayed page.
Blocked, History and System State tab also have home and end buttons that allow you to jump
the selection highlight to the first or last item of the list. These buttons are represented by up and
down double-arrows.
The index of the currently displayed readings page is displayed on the left, with the total number
of pages available. On the right, two large arrow key buttons allow you to navigate through the
different pages. If your configuration contains a lot of readings pages, we suggest you add Change
page buttons to each page, to customize the navigation for your needs (see “Creating a User-
Defined Readings Page”, page 138).
You must turn off the sound warning system before you can acknowledge the alarm. The sound
warning system also acts as an interlock, ensuring that you are aware of all the alarms that occur.
To really hear a sound, you need to install a buzzer on the SMP Gateway as described in the
“Setting Up an Alarm Buzzer” section, page 146.
OR
Press Acknowledge to acknowledge the alarm. The entire row turns to a paler shade of its
original color. If more than one alarm is active, the alarm that will be acknowledged depends
on the alarm acknowledgement rule selected in SMP Config for the Alarms page (see
“Setting Up the Alarms Page”, page 132). If you selected Alarms can be acknowledged and
recalled in any order, you must select the alarm to acknowledge before pressing the button.
OR
Press Block to move the data point in alarm to the Blocked page. Make sure the data point
you want to block is selected before pressing the button. For more details about the block
feature, see “Blocking Alarm Inputs”, page 150.
The data points that are in an alarm condition remain in the alarm display until the points return to
their normal condition, at which time you can clear them from the display.
When a point returns to its normal condition, the sound warning system turns on again and the
alarm appearance indicator is replaced by the return-to-normal indicator displayed on a green
background. The ‘R’ letter is used as the indicator if no specific category was defined and
assigned to the corresponding alarm input.
OR
Press Acknowledge to acknowledge the alarm. Again, if more than one alarm can be
acknowledged, the alarm that will be acknowledged depends on the alarm
acknowledgement rule selected in SMP Config for the Alarms page. If you selected
Alarms can be acknowledged and recalled in any order, you must select the alarm to
acknowledge before pressing the button.
Then, press Clear in order to clear the alarm display of the data point that has returned to
normal. The alarm acknowledgement rule defined in SMP Config also applies to clear
(recall) operations.
If an alarm is triggered more than once for a given alarm input before it can be handled, the
indicator is replaced by the corresponding one defined for multiple occurrences, which is ‘Ax’ or
‘Rx’ if no specific category was defined and assigned to the corresponding alarm input.
It is used to manage alarms one at a time. Depending on how it is customized, the oldest or most
recent alarm is displayed here, and the operator can acknowledge or clear the alarm by pressing
the display.
To customize the single alarm display, see “Setting Up the Alarms Page”, page 132.
Using the single alarm display is easy:
• If the sound warning system is on, press the single alarm display, which will give the same
result than pressing Clear Sound in the Alarms page: the sound warning system is turned off
and the alarm is ready to be acknowledged.
• If the sound warning system has already been turned off, press the single alarm display to
acknowledge the alarm just like you would do using the Alarms page Acknowledge button.
These buttons are kept “pressed” by default, which means that no filter is apply to the log display.
The left pane lists all information or statistics pages that can be displayed in the right pane.
Under the Data Points branch, some branch names might be displayed in orange. This means that
the value of some data points displayed in these branches is unavailable due to communications
failure. These points are also displayed in orange in the right pane.
• Name.
The input name.
• Floating Point Value.
The input actual value.
• Integer Value.
The input actual raw value.
• Low Threshold.
The value under which an alarm will be triggered for this input, if configured to trigger
alarms. Nothing is displayed if the data point is not configured to trigger alarms.
• High Threshold.
The value over which an alarm will be triggered for this input, if configured to trigger alarms.
Nothing is displayed if the data point is not configured to trigger alarms.
• Deadband.
Indicates how much the value must go beyond the low or high threshold to trigger an alarm.
Nothing is displayed if the data point is not configured to trigger alarms.
When a binary inputs or binary outputs branch is selected, the right pane displays the following
information for each binary input:
Because it is connected between the substation devices and the control centers, the SMP Gateway
is well positioned to implement advanced processing functions that would be impossible to
perform by less sophisticated devices.
The SMP Gateway provides the following automation capabilities:
• The SMP Gateway Automation Functions module, which add basic automation functions.
See “The SMP Gateway Automation Functions Module”, next.
• The SoftPLC module and CoDeSys development platform, which allow the creation of
sophisticated automation scripts, such as closing circuit breakers and load balancing.
See “The SoftPLC Module”, page 159.
Syslog is a method for delivering log information from a sender to a receiver, typically across an
IP network. Typically used for computer system management and security auditing, syslog is
supported by a wide variety of devices and receivers across multiple platforms. Because of this,
syslog can be used to integrate log data from many different types of systems into a central
repository. It is then possible for the system administrator to dispatch these messages to email or
SMS systems, for example.
The SMP Gateway syslog component uses the UDP or TCP protocol to send its log entries to a
single receiver. It is configured using SMP Config, and is active as soon as the SMP Gateway
starts up.
For an overview of the messages that an SMP Gateway may send to a syslog receiver, launch
SMP Log and take a look at the various log files’ contents. To learn how to use SMP Log, see
“Viewing the SMP Log Files”, page 45.
The following section describes the few steps to follow to set up syslog on an SMP Gateway.
Specify the settings of the intended recipient of all syslog messages that will be issued by the
SMP Gateway:
In the IP Address cell, type the IP address of the message recipient.
By default, the SMP Gateway uses the UDP syslog port number 514. To use a different
port number, such as the default TCP syslog port number 601, type it in the Port
Number cell.
In the Connection Type cell, select the syslog implementation to use between the
following: UDP, TCP, or TCP SSL/TLS.
If the UDP implementation is used, the source port must also be specified in the Source
Port Number cell. It is recommended to use the port as the one specified in the Port
Number cell.
If a TCP implementation is used, type the time to wait, in seconds, for new log entries to
become available before transmitting them in a single TCP frame, in the TCP Buffer
Time cell.
Select the Facilities branch.
Note: Facility codes are used to distinguish different classes of syslog messages.
These codes are mainly useful for message classification.
To transmit the log entries of the corresponding log file, clear the Disabled check box.
The SMP Gateway is a critical component in a substation automation system. Hence, there are
circumstances in which losing an SMP Gateway can severely impact substation operations. With
the redundancy option, you can group two SMP Gateways together in a redundant configuration,
to ensure continued operation of the substation automation system in the event of a failure. If one
gateway fails, the other one takes over. There are different types of redundancies, as IEDs,
SMP Gateways and networks can be redundant in many combinations.
Redundant SMP Gateways are addressed by a SCADA center as if they were a single
SMP Gateway with a single IP address. In the event that one SMP Gateway fails, the second
SMP Gateway immediately becomes active and takes ownership of the logical IP address.
Failover from the active SMP Gateway to the standby SMP Gateway typically takes less than 5
seconds. Network connections from the control center are temporarily lost when the active
gateway goes offline. The control center simply needs to reconnect to the same group IP address
in order to re-establish a new connection and restore system operation.
An additional benefit is that you can update SMP Gateway settings with minimum down time, by
updating the settings of the standby SMP Gateway, which will take over the other SMP Gateway
during its own update.
Note: The redundancy function is not available on the SMP 4 and the SMP 4/DP.
Figure 19-1 Using the “best of” automation function to support redundant IEDs
The use of the Best-of automation function implies the configuration of three data points for the
same information: one point for each master protocol, and a third point that is configured to store
the result of the automation function. The SCADA should be monitoring the third point, which is
called the “best-of point”. The value and quality of the best-of point is determined as follow:
1. If the quality of the first data point evaluates to OK, then the value of this point is
copied to the best-of data point.
2. Otherwise, if any of the bad quality flags is raised for the first point (communication
failure, bad hardware, etc.) and the quality of the second point evaluates to OK, then
the value of the second point is copied to the best-of point.
IED redundancy using the best-of function of the SMP Gateway presents the following
characteristics:
• The best-of automation function can be used with any protocol. It requires the Automation
Function component to be a part of the SMP Gateway license.
• The two IEDs of a redundant pair can use different protocols. For example, the first protection
IED can use DNP3, while the second one uses IEC 60870-5-101, even if there are slight
differences in the data map.
• It is a point-by-point redundancy. This means that it allows for any failure in the acquisition
path, as the logic used to determine the quality and value of the data point is not based on the
current state of the communication link or on the availability state of the IEDs: it is the
responsibility of the automation function component, and it is based on the quality of the
source data points.
• Binary control or analog set points can also be mapped to best-of points. When a control
operation is performed on a best-of output point, it is applied to the first point for which the
quality evaluates to OK, starting with the preferred one (if any).
Note: When two redundant IEDs share the same data map and use the same protocol,
the preferred solution is to use a single master with redundant communication
links. This solution requires less configuration effort, because only one set of data
points is required. In comparison, the best-of solution requires 3 sets of data
points: one for each master/IED and the set of best-of data points.
19.2.1 Prerequisites
Two SMP Gateways can be grouped together for redundancy if:
• The same version of the software (bootstrap, firmware and application) is installed on both
SMP Gateways;
• Both gateways have the same configuration;
• The redundancy option is included in the license of both SMP Gateways.
• Both gateways are not already part of a redundancy group.
Additionally, if NIC teaming is required, it needs to be configured on both SMP Gateways. For
more information, see “Teaming NICs for Network Fault Tolerance (SMP 16 Only)”, page 175.
Finally, if both SMP Gateways are connected to IEDs through serial links, Y-cables must be used
unless redundancy is also implemented at the device level (see “Redundant IEDs”, page 164).
The Group Properties dialog box allows you to specify redundancy settings such as the
virtual IP address, the LAN and serial connections to be used, and the conditions that have to
exist for the SMP Gateways to switch roles.
Redundancy is defined by 3 categories of settings, corresponding to the tabs in the dialog box.
Note: If the SMP Gateway runs an old version of the SMP Gateway redundancy
software, you will be able to give priority to one of the SMP Gateway of the
group, but not to designate it as the SMP Gateway A.
The Links tab is used to specify the 2 connections that will be used to link the redundant
SMP Gateways to each other.
These can be any combination of LAN or serial connections. The SMP 16 supports 2 LAN
connections. The active SMP Gateway uses these links to send regular heartbeat messages to
Warning: To link two SMP 16 using RS-232 or RS-485 (4 wires), use a cable that
follows the pinout specifications found in the installation guide of the
corresponding SMP Gateway model (ex. SMP 16 Installation Guide). Using
a cable with crossed pinout might damage the unit.
A failover will automatically happen if the active SMP Gateway faces a major problem, such
as a power failure, that prevents it from sending heartbeat messages.
To extend this LAN availability check, the SMP Gateway can ping the IP address of the
SCADA, control center or master station that is monitoring the SMP Gateway, instead of
solely detecting network activity. To do so, select the Determine LAN availability by
sending a ping to the following address check box, and enter the IP address below.
SMP Manager sends the settings to both SMP Gateways. You will need to restart both
SMP Gateways to activate redundancy.
In the Restart Gateway dialog box, choose Shutdown and Restart to have the
SMP Gateways restart in normal mode.
The next screenshot shows two grouped SMP Gateways in SMP Manager:
Warning: Do not reset the SMP Gateways by pressing the reset button on the gateway
itself, or you will lose your parameter settings.
The selected SMP Gateway will enter standby mode, while the other SMP Gateway in the
group will enter active mode.
For a complete definition of the settings, refer to the “Setting Up a Redundancy Group Using
SMP Manager” section, page 166.
Note: Setting up a redundant network is out of the scope of this document. However,
the following procedure describes how you can use the SMP Tools’ IP address
switching feature to test a redundant network configuration.
Figure 19-4 Acquisition data flow in a hot standby redundancy SMP Gateway group
Note: The public IP address is always associated with the active SMP Gateway. When
the control center wants to connect to the standby SMP Gateway, it needs to use
the physical IP address.
The SNMP server is an optional software module that allows the SMP Gateway to export statistics
using the SNMP (Simple Network Management Protocol) standard.
The SMP Gateway SNMP agent publishes and supports both standard MIBs (management
information bases) that are supported by the Windows CE operating system and custom MIBs that
are supported by the SMP Gateway application. The agent supports extensive reading capabilities
as well as limited writing and trap capabilities.
snmpmgr
\> snmpmgr
SNMP Manager
A Add a client.
R Remove a client.
L Display all clients.
M Modify the community membership of a client.
C Change a client description.
G Add a community.
D Remove a community.
B Display all communities and their permissions.
I Modify the permissions of a community.
T Modify the name of the system contact.
O Modify the location of the gateway on which the agent is
running.
F List information on system contact and gateway location.
W Modify the firewall settings.
H Display the list of all commands.
esc Abort the current operation.
Q Quit.
You can display the previous list any time, by using the H command.
You should specify the SNMP settings in the following order:
• Add communities and their permissions.
• Add a system contact.
• Add a system location.
• Add a number of clients and associate them to communities.
Any modifications you make will be effective the next time the SMP Gateway will restart.
Note: If the integrated firewall is enabled on the SMP Gateway, SNMP services must
be allowed through the firewall. To learn how to open ports and allow services
through the integrated firewall, see “Specifying Firewall Rules”, page 98.
This chapter describes the different time adjustment features of the SMP Gateway.
Note: If the SMP Gateway is synchronized by a GPS clock or any other external time
source, setting time manually will not work.
The time at which the clock will be set is displayed just above the buttons.
If it is as expected, click OK to set the SMP Gateway clock to this date and time.
The SMP Gateway internal clock is not an atomic clock, which means that it drifts from actual
time. Over time, data timestamps become less accurate. Moreover, manual time adjustment using
SMP Manager displays an accuracy of ±1 second. Consequently, time adjustment via an external
source is highly recommended for the SMP Gateway to provide accurate timestamps. This is the
topic of the next section.
SMP 4 √ √ - - -
SMP 4/DP √ √ - * -
SMP 16/CP √ √ √ √ G
SMP 16/SG √ √ √ √ G
Legend: √ = Available, G = with the SMP 16 GPS clock option, * = .Planned for a future release
Table 21-1 Time adjustment solutions available for each model
Note: Only one time adjustment solution should be implemented at a time for an
SMP Gateway.
Note: IRIG-B signals come in two flavors: demodulated and modulated. Demodulated
IRIG-B signals cannot be carried over long distances while the modulated IRIG-B
can be carried over distances larger than 350 meters (1000 feet) without
degrading.
NTP stands for Network Time Protocol, and is a standard Internet protocol used to synchronize the
clocks of computers to a time reference. NTP was originally developed by Professor David L.
Mills of the University of Delaware. As a full implementation of the NTP protocol seemed too
complicated for many systems, a simplified version of the protocol was defined: SNTP (Simple
Network Time Protocol). SNTP is basically NTP minus certain internal algorithms that are not
required by all types of servers.
Note: The SMP Gateway software implements SNTP version 4 (RFC 2030).
Specifying a precise cable length is essential to get the best accuracy possible during the
synchronization process.
For example, if the SMP Gateway is time-adjusted using demodulated IRIG-B, a device clock
adjusted by the gateway using demodulated IRIG-B may show a delay of ± 1 milliseconds. Note
that the SMP Gateway can be more accurate: consider these values as “worst case scenarios”.
Also, the SMP Gateway does not perform accurate time-tagging when I/O changes are received
from a device, because the transmission delay is unpredictable. For the time tag to be accurate, the
device must time-tag the I/O changes itself.
The following sections present the various time distribution features of the SMP Gateway.
OR
Note: To configure the devices as SNTP clients, refer to the user manual of each
device.
You may want the SMP Tools to connect to an SMP Gateway that is not itself connected to your
network. You would typically do this by setting up a dial-up connection and using a modem to call
the SMP Gateway from your PC running Windows Vista or Windows XP. Less typically, you
might choose to access the SMP Gateway by setting up a direct serial connection between a serial
port on your PC and a serial port or the CONSOLE port on the SMP Gateway from your PC
running Windows Vista or Windows XP.
This section explains how to set up dial-up and direct serial connections between a personal
computer and an SMP Gateway. The procedure differs slightly, depending on whether the
SMP Tools run under Windows Vista or Windows XP.
Note: Windows Vista does not support direct serial connections. For more information,
see “Incoming Direct Serial Connections and Windows Vista”, page 190.
1 Set up the Perform these steps for each SMP Gateway with which you want to
SMP Gateway to communicate via modem.
accept a dial-up
1. Start SMP Manager. Select the SMP Gateway to be configured and
connection
from the File menu, choose SMP Gateway Properties. In the
Gateway Properties dialog box, clear the Automatically Poll SMP
Status at startup check box. This will prevent polling on the dialup
connection.
2. From the Tools menu, choose SMP Console.
3. Type RASMGR to start the RAS Manager application.
4. Type L, to display the device list. The device list is actually the list of
ports available on the SMP Gateway, including the CONSOLE port.
5. Type M, to modify the SMP Gateway COM port you intend to use for
the dial-up connection.
6. Type the number of the “MODEM device” to be modified. Note that
you cannot specify the number of the CONSOLE port, as the latter
does not support modem connections.
7. All the default settings should be correct, except for the last one: Use
device for incoming connections. Type Y to allow incoming
connections on the port and exit RASMGR.
8. Press Q to exit RAS Manager, and then close the console window.
2 Install the 1. From Windows’ Start menu, access the Control Panel.
modem, if
2. Click Hardware and sound.
necessary
3. Click Device Manager.
4. Click Continue.
5. Click on the name of your PC in the three views.
6. Click the Action menu then scan for hardware changes.
7. If the modem is supported by Vista, it will configure itself. If this
does not work, consult the modem’s manufacturer manual.
188 • Chapter 22: SMP Tools Remote Access to the SMP Gateway
Step To do this Follow these steps:
3 Set up a new Perform these steps for each SMP Gateway with which you want to
dial-up (modem) communicate via modem.
connection for
1. From Windows’ Start menu, access the Control Panel.
the
SMP Gateway 2. Click Network and Internet.
3. Click Network and Sharing Center.
4. Click Set up a connection or network.
5. In the Wizard dialog box, select Set up a dial-up connection then
click Next.
6. If you have only one modem, skip this point. Click on the modem
you wish to use to connect.
7. Type the phone number you will dial to connect to the SMP Gateway
and a useful name then click Connect. Windows Vista will try to
connect to the device for real.
8. During the connection attempt, click Skip.
9. Click Set up the connection anyway.
10. Click Finish.
11. Click Manage network connections.
12. Right-click the Dial-up Connection just created and select Rename.
Write a useful name then press return.
13. Right-click the Dial-up Connection just created and select
Properties.
14. From the General tab, select the modem you want to use for this
connection and click Configure.
15. In the Modem Configuration dialog box, select the Enable
hardware flow control check box, the Enable modem error
control check box and the Enable modem compression check box.
Then press Ok.
16. Click the Options tab, and then click PPP Settings.
17. In the PPP Settings dialog box, select the Enable LCP extensions
check box and the Enable software compression check box. Clear
the Negotiate multi-link for single link connections check box.
Click OK.
18. Click the Networking tab.
19. Under This connection uses the following items, clear the Client
for Microsoft Networks check box.
20. Click Internet Protocol Version 4 (TCP/IPv4), and click
Properties.
21. In the Internet Protocol Version 4 (TCP/IPv4) Properties dialog
box, click Advanced.
22. In the Advanced TCP/IP Settings dialog box, clear the Use default
gateway on remote network check box and the Use IP header
compression check box and click OK three times.
4 Configure 1. Start SMP Manager. Select the SMP Gateway to be configured and
SMP Manager from the File menu, choose SMP Gateway Properties.
to communicate
2. In the Gateway Properties dialog box, type a significant name for
with the
the new SMP Gateway, such as “SMP Gateway via modem”.
SMP Gateway
3. In the First IP Address box, type the IP pool starting address that
you specified when you installed your SMP Gateway (see your
SMP Gateway installation guide).
4. Do not type anything in the Second IP Address box. Click Add.
Note that even if you set up a number of SMP Gateways to communicate
via a dial-up connection, the PC will be able to communicate with only
one SMP Gateway at a time, and will use the addresses specified here.
http://support.microsoft.com/kb/930086
190 • Chapter 22: SMP Tools Remote Access to the SMP Gateway
You must perform the steps in the order presented in the table.
1 Set up the Perform these steps for each SMP Gateway with which you want to
SMP Gateway to communicate via modem.
accept a dial-up
1. Start SMP Manager. Select the SMP Gateway to be configured and
connection
from the File menu, choose SMP Gateway Properties. In the
Gateway Properties dialog box, clear the Automatically Poll SMP
Status at startup check box. This will prevent polling on the dialup
connection.
2. From the Tools menu, choose SMP Console.
3. Type RASMGR to start the RAS Manager application.
4. Type L, to display the device list. The device list is actually the list of
ports available on the SMP Gateway, including the CONSOLE port.
5. Type M, to modify the SMP Gateway COM port you intend to use for
the dial-up connection.
6. Type the number of the “MODEM device” to be modified. Note that
you cannot specify the number of the CONSOLE port, as the latter
does not support modem connections.
7. All the default settings should be correct, except for the last one: Use
device for incoming connections. Type Y to allow incoming
connections on the port and exit RASMGR.
8. Press Q to exit RAS Manager, and then close the console window.
2 Install the 1. From Windows’ Start menu, access the Control Panel.
modem, if
2. Double-click Phone and Modem Options.
necessary
3. In the Phone and Modem Options dialog box, click the Modems
tab.
If the modem you plan to use appears in the list, skip the rest of this step
and proceed to the next item in the table, since your modem is already
installed.
4. Click Add.
5. In the Add Hardware Wizard dialog box, allow Windows to detect
your modem automatically, and then click Next.
6. Insert the installation CD for the modem driver, if you have one.
7. In the Found New Hardware Wizard dialog box, choose whether
you want Windows to install the driver automatically or from a
specific location and click Next.
8. Once Windows advises you that it has installed the driver, click
Finish.
9. Click Finish to close the Add Hardware Wizard dialog box.
10. Click OK to close the Phone and Modem Options dialog box.
3 Set up a new Perform these steps for each SMP Gateway with which you want to
dial-up (modem) communicate via modem.
connection for
1. From Windows’ Start menu, access the Control Panel.
the
SMP Gateway 2. Double-click Network Connections.
3. Double-click New Connection Wizard.
4. In the New Connection Wizard dialog box, click Next.
5. Select Connect to the network at my workplace and click Next.
6. Select Dial-up connection and click Next.
7. If your PC is only equipped with a single modem, skip this step.
Otherwise, select the modem you want to use for this connection, and
click Next.
8. Type a descriptive name for the connection and click Next.
9. Type the phone number you will dial to connect to the SMP Gateway
and click Next.
10. If your PC is not equipped with a smart card slot, skip this step.
Otherwise, the wizard will ask you if you want the use a smart card to
log you into the remote network. Select the option that suits you the
most and click Next (by default, the Do not use my smart card
option is selected).
11. Under Create this connection for, select Anyone’s use, click Next
and click Finish.
12. In the Connect <Connection Name> dialog box, click Properties.
13. From the General tab, select the modem you want to use for this
connection and click Configure.
14. In the Modem Configuration dialog box, select the Enable
hardware flow control check box, the Enable modem error
control check box and the Enable modem compression check box.
15. Click the Networking tab, and then click Settings.
16. In the PPP Settings dialog box, select the Enable LCP extensions
check box and the Enable software compression check box. Clear
the Negotiate multi-link for single link connections check box.
Click OK.
17. Under This connection uses the following items, clear the Client
for Microsoft Networks check box.
18. Click Internet Protocol (TCP/IP), and click Properties.
19. In the Internet Protocol (TCP/IP) Properties dialog box, click
192 • Chapter 22: SMP Tools Remote Access to the SMP Gateway
Step To do this Follow these steps:
Advanced.
20. In the Advanced TCP/IP Settings dialog box, clear the Use default
gateway on remote network check box and the Use IP header
compression check box and click OK, three times
21. Close the Connect <Connection Name> dialog box.
4 Configure 1. Start SMP Manager. Select the SMP Gateway to be configured and
SMP Manager from the File menu, choose SMP Gateway Properties.
to communicate
2. In the Gateway Properties dialog box, type a significant name for
with the
the new SMP Gateway, such as “SMP Gateway via modem”.
SMP Gateway
3. In the First IP Address box, type the IP pool starting address that
you specified when you installed your SMP Gateway (see your
SMP Gateway installation guide).
4. Do not type anything in the Second IP Address box. Click Add.
3 Set up a new 1. From Windows’ Start menu, access the Control Panel.
direct serial
2. Double-click Network Connections.
connection to the
SMP Gateway 3. Double-click New Connection Wizard.
4. In the New Connection Wizard dialog box, click Next.
5. Select Set up an advanced connection. Click Next.
6. Select Connect directly to another computer. Click Next.
7. Select Guest. Click Next.
8. Type a descriptive name for the connection. Click Next.
9. In the Select a device drop-down list, click Communications cable
between two computers. Click Next.
10. Under Create this connection for, click Anyone’s use. Click Next.
Click Finish.
11. In the Connect <Connection Name> dialog box, click Properties.
12. From the General tab, click Configure.
13. In the Maximum speed drop-down list, select 115200 bps.
14. Clear the Enable hardware flow control check box. Click OK.
15. Click the Networking tab, and then click Settings.
16. In the PPP Settings dialog box, clear the Enable LCP extensions
check box, the Enable software compression check box, and the
Negotiate multi-link for single link connections check box. Click
OK.
17. Under This connection uses the following items, clear the Client
for Microsoft Networks check box.
18. Click Internet Protocol (TCP/IP), and click Properties.
19. In the Internet Protocol (TCP/IP) Properties dialog box, click
Advanced.
194 • Chapter 22: SMP Tools Remote Access to the SMP Gateway
Step To do this Follow these steps:
20. In the Advanced TCP/IP Settings dialog box, clear the Use default
gateway on remote network check box and the Use IP header
compression check box. Click OK three times.
21. Close the Connect <Connection Name> dialog box.
4 Configure 1. Start SMP Manager. Select the SMP Gateway to be configured and
SMP Manager to from the File menu, choose SMP Gateway Properties.
communicate
2. In the Gateway Properties dialog box, type a significant name for
with the
the new SMP Gateway, such as “SMP Gateway direct connection”.
SMP Gateway
3. In the First IP Address box, type the IP pool starting address that
you specified when you installed your SMP Gateway (see your
SMP Gateway installation guide on the SMP Gateway Software &
Tools CD-ROM).
4. Do not type anything in the Second IP Address box.
5. Click Add.
The PC will communicate with the SMP Gateway using the addresses
specified here.
The SMP Gateway could need a dialup connection for DNP3 or IEC 60870-5-101 protocols in a
situation where there is no network between the SMP Gateway and the control center and you
cannot establish a network connection to the SMP Gateway using the procedures described under
“SMP Tools Remote Access to the SMP Gateway”, page 187.
If the control center uses the DNP3 or IEC 60870-5-101 protocol, you can establish a serial
connection, via a dial-up modem, between the SMP Gateway and the control center. The control
center will call the SMP Gateway.
The same holds true if you need to communicate between the SMP Gateway and a device that uses
DNP3 or IEC 60870-5-101and that supports a modem connection. The SMP Gateway will call the
device.
Communication via modem is available on the SMP 16 model, and is available as an option on the
SMP 4 and SMP 4/DP models. Note that will all SMP Gateway models, you can always plug an
external modem into any serial port.
Having the SMP Gateway communicates, via dial-up modem with a PC or a device using DNP3
or IEC 60870-5-101, requires that you perform the following configuration steps using
SMP Config:
• Define which serial ports have a modem.
• Create a modem pool.
• Add modems to the pool.
• Create a modem pool master connection if the SMP Gateway will call a device, or create a
modem pool slave connection if the control center will call the SMP Gateway.
IEC 60870-5-101 The Call Dispatcher sends an IEC 60870-5-101 RESET OF LINK
broadcast frame. The slave device is expected to respond with an ACK
frame containing its own DEVICE ADDRESS.
DNP3 The Call Dispatcher sends a DNP3 RESET OF LINK broadcast frame.
The slave device is expected to respond with an ACK frame containing
its own DEVICE ADDRESS as the source address.
These settings set up the behavior of the Call Dispatcher, as described in the next table.
Setting Description
Dispatcher Address Size The size of the DEVICE ADDRESS, in bytes. This setting is taken into
account when a frame is sent or received, since it affects the size of the
frame.
Range: 1 to 8
Default value: 1
198 • Chapter 23: Using a Dial-Up Connection for DNP3 or IEC 60870-5-101
Setting Description
Dispatcher Response This setting specifies how much time the dispatcher will wait for the
Timeout reception of a response to a request.
Range: 0 to 60,000 milliseconds
Default value: 10,000 milliseconds
Dispatcher Interchar Delay This setting specifies the maximum time allowed between 2 received
bytes of a frame, for the frame to be considered valid.
Range: 0 to 10,000 milliseconds
Default value: 250 milliseconds
Dispatcher Recover This setting specifies how much time the dispatcher will wait after a
Timeout failure (invalid frame format, etc.), before retrying.
Range: 0 to 10,000 milliseconds
Default value: 1,000 milliseconds
Dispatcher Max Request This setting specifies how many times the dispatcher will try to identify
Retry the device.
Range: 0 to 20
Default value: 3
Setting Description
AT Init String This AT string is sent to the serial port to initialize the modem. It should
be a valid AT string to which the modem will respond with an OK.
Default value: ATZ
AT Off-Hook String This AT string is sent to the modem to answer the call when a RING
message is received. The modem must, therefore, be configured to NOT
auto-answer the calls (avoid S0=X, where X is other than 0).
Default value: ATA
AT Dial String This AT string is prefixed to the phone number and sent to the modem to
make outgoing calls.
Default value: ATDT
AT On-Hook String This AT string is sent to the modem to hang up. After a call has been
completed, the “AT Init String” is always sent to reinitialize the modem.
Default value: ATH0
Incoming Only Put a checkmark if you want the modem to receive incoming calls but
not be able to make outgoing calls. If you do not put a checkmark, the
modem will be able to make and receive calls.
Allowed values: checkmark / no checkmark
Default value: no checkmark
AT Response Timeout Specifies how much time the modem pool will wait for an answer to an
AT string command. There is an exception for the ATDT and ATA
commands, since it can take some time to synchronize the carriers and
complete the call. For these exceptions, the maximum time is set to 3
minutes.
The timeout value depends on the modem and more specifically, on the
response time required for the +++ and ATH commands.
Range: 0 to 60,000 milliseconds
Default value: 5,000 milliseconds
200 • Chapter 23: Using a Dial-Up Connection for DNP3 or IEC 60870-5-101
23.5 Adding a Modem Pool Slave Connection
A modem pool slave connection is used by a protocol component to receive incoming calls from a
control center. This connection makes the link between the protocol component and the modem
pool.
This chapter explains the software architecture of the SMP Gateway and describes how to update
the SMP Tools and the SMP Gateway software.
OR
SMP Loader
Table 24-1 SMP Tools to use to update specific SMP Gateway components
The SMP Tools installer will automatically remove the previous version before installing the
new one.
Note: If the Windows CE version number you read from your SMP Gateway using
SMP Stats (for more information, refer to page 53) is older than version 4.0, then
you must use the SMP Loader tool to update the bootstrap (see “SMP Loader”,
page 212).
SMP Manager transfers the file to your SMP Gateway and then informs you that you
have to restart your SMP Gateway for the new firmware to go into effect.
In the Restart SMP Gateway dialog box, choose Shutdown and Restart to restart the
SMP Gateway.
Click OK.
Note: All restarts are automatically logged in SMP Gateway Reset log file. If you want
to, you can type a comment in order to indicate why you restarted the
SMP Gateway. This comment will be included in the log entry.
Note: In the case of the operating system, this version number does not refer to the
version of the Windows CE operating system. This is the version number of the
SMP Gateway software package, which includes a version of Windows CE that is
customized for the SMP Gateway.
Click OK.
Click Yes.
SMP Manager transfers the file to your SMP Gateway and then informs you that you
have to restart your SMP Gateway for the new firmware to go into effect.
In the Restart SMP Gateway dialog box, choose Shutdown and Restart to restart the
SMP Gateway.
Click OK.
Update the resident diagnostics. Proceed as for Windows CE, but:
In the Update SMP Gateway dialog box, select Diagnostics Tools.
In the Select version box, select the version of the resident diagnostics to upload to the
SMP Gateway.
Click OK.
SMP Manager transfers the file to your SMP Gateway and then informs you that you
have to restart your SMP Gateway for the new firmware to go into effect.
In the Restart Gateway dialog box, choose Shutdown and Restart to have the
SMP Gateway restart in normal mode.
Click OK.
The SMP Gateway will go through a series of startup steps, which will be displayed in
the Status column in SMP Manager.
Once the startup is complete, the Status column will display the current status of the
SMP Gateway. The Status column should display Started. If the Status column shows that the
SMP Gateway did not start up normally, refer to “Troubleshooting”, page 221.
SMP Manager sends the software to the specified SMP Gateway, and then informs you that
you have to restart the SMP Gateway for the new application to go into effect.
In the Restart Gateway dialog box, choose Shutdown and Restart to have the
SMP Gateway restart in normal mode.
Click OK.
The SMP Gateway will restart and load the new application.
Note: If you just updated the SMP Gateway application, please wait until the
SMP Gateway completes its startup process, to ensure that SMP Manager starts
the version of SMP Config that corresponds to the new SMP Gateway
application.
The file name in the title bar should have a star (*) beside to inform you there is a change.
From the File menu, choose Save.
A message box will inform you that the current configuration file will be upgraded to a
current version. A backup is automatically saved, which includes the previous version number
in the file name.
Send the configuration file to the SMP Gateway using SMP Manager:
From the Update menu, choose Send Configuration File.
SMP Manager will transfer the file on the SMP Gateway, and then informs you that you
have to restart the SMP Gateway for the new application to go into effect.
In the Restart Gateway dialog box, choose Shutdown and Restart to have the
SMP Gateway restart in normal mode.
Click OK.
Whenever you contact Cooper Power Systems to request support for a new device that you want
to connect to your SMP Gateway, or to add support for a particular feature, Cooper Power
Systems will provide you with a new license, which consists in an ID and a key.
A license ID is a user-readable identifier that helps distinguishes one license from another. A
license key is composed of up to 4 character sequences that define the list of software features
supported by the license, such as redundancy, Soft PLC and automation functions. The license key
also contains information about the maximum number of master protocols (one per device) and
slave protocols (one per control center) that are supported.
This section presents SMP Manager and SMP Config commands that provide useful capabilities,
and that were not discussed in other sections of the document.
Note: SMP Loader cannot be used to update the SMP 4/DP software.
When the SMP Gateway is powered up or reset, the following components are started up, in the
order listed:
• The primary bootstrap program.
• The secondary bootstrap program.
Note: If you are using a portable computer that does not have an external serial port,
you will need to use an USB-to-RS-232 serial converter.
To put the SMP Gateway into Command mode, you need to reset the SMP Gateway. The
procedure differs, depending on the SMP gateway model.
SMP Loader will automatically connect to the SMP Gateway, as described in the previous
section.
Warning: Do not use a lead pencil, since lead is a conductor, as it could break and
damage the SMP 4.
SMP Loader will automatically connect to the SMP Gateway, as described in the previous
section.
In both cases, the SMP Loader window will show the files that are currently loaded on the
SMP Gateway as soon as the latter will complete its startup into Command mode.
As you can see, the display only shows Windows CE. The same applies to an SMP 4. It is
important to note that the display area does not list the bootstrap programs, even though these do
indeed reside on the SMP Gateway. However, the secondary bootstrap version is shown at the
bottom right of the window, on the status bar.
Note: The dialog box indicates that the primary bootstrap version is unavailable since it
resides in the ROM and cannot be modified in the field.
OR
In SMP Loader:
The File Information dialog box appears, giving you a description of each file, within
the .VL file, that you are about to transfer and asking you to confirm your intention to
carry out the transfer.
The transfer takes place once you have responded to the question for all the files that were listed in
the VL file, and a dialog box shows you the progress of the operation.
Remove the cable that you connected between the SMP Gateway CONSOLE port and the PC
when you used SMP Loader.
Start SMP Manager, and monitor the progress of the reset operation.
Notes:
• The SMP Gateway will not use the transferred files until next reset.
• If you transferred a bootstrap program, it will not appear in the list even though the file has
indeed been transferred. Furthermore, if you look at the bootstrap version numbers (by
Note: Each time you start the application, SMP Loader overwrites the information
contained in the file.
Console access to the SMP Gateway provides you with a command line prompt for running tools
and low-level commands on the SMP Gateway. Console tools are gradually being replaced by
Windows-based tools.
However, if you feel more at ease with the command line interface, you can use the following
console commands:
• FirewallMgr (Firewall Manager)
• Time and Date.
• TCP/IP address and RAS setup, as described in the installation manual of each device.
• SnmpMgr (SNMP Manager), as described in the “Configuring the SNMP Server” section,
page 177.
• ClockMgr (Clock Manager).
Note: To use Firewall Manager, the user must have the System Management privilege
for the SMP Gateway.
firewallmgr
Firewall Manager displays the list of available commands, as the following shows:
Firewall Manager.
27.2.1 R Command
The R command displays the list of firewall rules you have set-up.
27.2.2 S Command
The S command shows the current status of the firewall and VPN connections.
Example:
Firewall: disable
Firewall log: enable
VPN connections: 2
27.2.3 H Command
The H command displays the list of available commands, as shown at the beginning of this section.
27.2.4 Q Command
The Q command is used to exit the firewall manager.
time
The current UTC time is displayed, followed by a prompt for the new time. For example:
Type the new UTC time in the requested format and press ENTER.
date
The current time is displayed, followed by a prompt for the new time. For example:
Type the new date in the requested format (year can be specified using two digits) and press
ENTER.
Note: For both commands, the time/data will remain unchanged if you do not type
anything and press ENTER.
clockmgr
Clock Manager displays the list of available commands, as the following shows:
Clock Manager.
27.4.1 D Command
The D command shows the current settings of the optional GPS clock.
Example:
GPS Cable length: 0 m
IRIG-B distribution format for the GPS: IRIG-BXX0 IEEE 1344
Always distribute the IRIG-B signal: No
27.4.2 H Command
The H command displays the list of available commands, as shown at the beginning of this section.
27.4.3 Q Command
The Q command is used to exit the clock manager.
elomgr.exe /c
To learn how to recalibrate the touch screen, see “Calibrating the Touch Screen”, page 147.
The SMP Gateway is a highly reliable substation-grade device. Most operational problems result
from configuration errors, and there are a few simple steps you can take to identify and solve
these problems.
This section discusses the following types of problems:
• Startup problems.
• Communications problems.
• Problems with data validity.
• Problems executing control operations.
• Firewall-related problems.
To access a document:
Click Start on Windows’ taskbar.
Point to All Programs, then Cooper Power Systems, then SMP Tools, and then
Documentation.
From the Documentation menu, choose Protocols.
Your Adobe Reader program starts up and displays the document in a window.
Note: The Make Report command is only available if the selected SMP Gateways are
online.
Click the Tell me more button to display the information that will be collected from the
SMP Gateways;
Type additional information in the text box, such as the problem description, or the reason
why you are requesting technical support.
The syntax of the name of each report file is as follows:
<label><name><serial><datetime>
where:
<label> is an optional label that you can specify in the corresponding box;
<name> is the name of the SMP Gateway as specified in SMP Manager;
<serial> is the serial number of the SMP Gateway;
and <date time> is the current date and time.
SMP Gateway Report progress windows appear (one for each report/gateway), showing
each operation performed and when report generation is complete.
Once report generation is complete, you can click Details to display the event log for this
specific report generation (useful if errors occurred during the process), or simply click Close
to exit the SMP Gateway Report window.
If you selected Extract Automatically, the entire file content of the report will be shown in a
Windows Explorer window, providing information about the data points, crashes, logs, and so
on.
The report is saved as GRF file, which is in fact a zipped file that contains the files and
folders discussed above.
Note: The Extract Automatically option actually shows the content of the GRF file. A
quick way to reach the GRF file is to move one folder up from that location.
Note: It is also recommended to perform a factory reset operation when you need to
downgrade the SMP Gateway to an earlier version of the SMP Gateway
software.
A factory reset operation erases all the sensitive content of the SMP Gateway non-volatile
memory, including:
Note: The factory reset operation does not delete the bootstrap program and the
Windows CE operating system files. Network adapter settings (notably the
TCP/IP address of the SMP Gateway) are also preserved, except for the
SMP 4/DP.
To learn how to restore the factory settings of the SMP Gateway, refer to the “Troubleshooting”
section of the corresponding installation guide (ex. SMP 4/DP Installation Guide, for the
SMP 4/DP).
SMP Trace and SMP Stats are the ideal tools for you to troubleshoot a communications problem
and determine in which layer the problem occurred. SMP Trace shows you the information that
was sent back and forth between the SMP Gateway and the device, while SMP Stats supplies you
with statistics that can help you detect an anomaly. For example, the statistics may show you that
there were no exchanges whatsoever on a particular connection, or the trace may show you that
the SMP Gateway never got responses when it polled a particular device.
********************************************
Press ENTER now to access configuration mode
Note: If local authentication is enabled on the SMP Gateway, a login prompt will be
displayed. Enter a valid login name, followed by the corresponding password.
The SMP Gateway enters the configuration mode and the following appears on the terminal
window:
***************************
Starting configuration mode
***************************
>
Type M to restart the SMP Gateway in Maximum Safe Mode.
The SMP Gateway will restart and it should now be accessible via SMP Manager.
If you do not have a copy of the configuration file, retrieve it from the SMP Gateway.
Start SMP Config.
Remove or modify the settings and/or access rules that restrict access to the SMP Gateway
management port (TCP 6650).
Save the configuration file.
Upload the configuration file to the SMP Gateway.
Restart the SMP Gateway in Normal mode.
The SMP Gateway should now be working properly and should be accessible via all
SMP Tools.
The SMP Gateway has system points for various purposes and features, such as remote access,
security, time adjustment and redundancy. When they are present on an SMP Gateway, they can
be seen using the SMP Gateway Web server. When an SMP Gateway slave protocol subscribes to
them, they provide useful information to the SCADA.
The following list describes all available system data points:
Power Status
_smp___voltage_ok If set to 1, this binary input point indicates that the voltage of the SMP Gateway
power supply is within its normal range of operation.
Temperature
_smp___temperature This analog input point states the temperature, in °C, inside the gateway.
(available on SMP 16/SP)
Clock-Related Information
_smp___clockYear This analog input point states the year information of the SMP Gateway internal
clock.
_smp___clockMonth This analog input point states the month information of the SMP Gateway internal
clock.
_smp___clockDay This analog input point states the day information of the SMP Gateway internal
clock.
_smp___clockHour This analog input point states the hour information of the SMP Gateway internal
clock, using the 24-hour notation.
_smp___clockMinute This analog input point states the minute information of the SMP Gateway internal
clock.
_smp___clockSecond This analog input point states the second information of the SMP Gateway internal
clock.
_smp___clockSynchronized If set to 1, this binary input point indicates that the internal clock of the
SMP Gateway is actually synchronized with an external time source, such as GPS or
IRIG-B.
_smp___battery_ok If set to 1, this binary input point indicates that the clock battery is operational.
(available on SMP 4 and
SMP 4/DP)
Local Control
_smp___setLocalControl This binary output point allows you to switch from local control (by a local HMI,
such as Visual T&D), to remote control (by the SCADA). _smp___localControl
indicates the current control state of the SMP Gateway.
_smp___localControl If set to 1, this binary input point indicates that the SMP Gateway is actually
controlled locally, by Visual T&D or the SMP Gateway HMI. If the gateway is
currently controlled by the SCADA, this point is set to 0.
When the SMP Gateway starts up for the first time, this point is set to 0. The value of
this point is persisted, i.e. its value is stored in non-volatile memory and is not reset
to 0 when the SMP Gateway restarts.
_smp___restartSystem This binary output point allows you to restart the SMP Gateway.
_smp___setNOrelay This binary output point allows you to open and close the SMP Gateway normally
(available on SMP 16) open (NO) relay. _smp___stateNOrelay indicates the actual state of the relay.
_smp___stateNOrelay This binary input point indicates the actual state of the SMP Gateway normally open
(available on SMP 16) (NO) relay. If set to 1, the relay is closed.
Security
_smp___securityAccountLocked This binary input point shows if there is an account locked on the SMP Gateway.
_smp___securityLogonFailureCount This analog input point states the number of unsuccessful user logon attempts.
_smp___securityLogonFailure This binary input point indicates if a user logon attempt failed since last
_smp___secLogFailCnt counter reset.
_smp___securityLogonFailureCount This binary output point allows you to reset the _smp___secLogFailCnt analog input
Reset point to 0. It also resets the _smp___secLogFail binary input point to 0.
Remote Access
_smp___dialupEnable This binary output point allows you to accept or block all incoming RAS dialup
connections to the SMP Gateway. Set it to 1 to accept all incoming RAS dialup
connections. _smp__dialupEnabled indicates the resulting state.
_smp___dialupEnabled This binary input point indicates if all incoming RAS dialup connections to the
SMP Gateway are accepted of blocked. If set to 1, all connections are accepted.
_smp___dialupInUse This binary input point indicates whether or not there is actually communication in
progress via an incoming RAS dialup connection.
Passthrough
(for each passthrough connection named “<connection>”)
_smp___<connection>Enable This binary output point allows you to lock or unlock the passthrough connection.
Set it to 0 to lock the connection. _smp___<connection>Enabled indicates if the
connection is locked or not.
_smp___<connection>Enabled This binary input point indicates the passthrough connection lock state. If set to 0,
the connection is locked and cannot be used.
_smp___<connection>InUse If set to 1, this binary input point indicates that the passthrough connection is
currently active.
System Folders
(for each system folder named <folder name>)
_smp___Folder<id><folder name>_ If set to 1, this binary input point indicates that the system folder is available to the
Available SMP Gateway.
_smp___Folder<id><folder name>_ This analog input point states the amount of disk space that is available on the host of
FreeDiskSpace the system folder.
_smp___Folder<id><folder name>_ If set to 1, this binary input point indicates that the system folder host is running low
LowDiskSpace on disk space.
Redundancy
_smp___rsLocal_ok If set to 1, this binary input point indicates that the SMP Gateway is currently
operational.
This point is mirrored in the _smp___rsRemote_ok binary input point of the other
SMP Gateway of the group.
_smp___rsRemote_ok If set to 1, this binary input point indicates that the other SMP Gateway of the group
is currently operational.
This point is mirrored in the _smp___rsLocal_ok binary input point of the other
SMP Gateway.
_smp___rsLocal_active If set to 1, this binary input point indicates that the SMP Gateway is active.
If set to 0, it indicates that the SMP Gateway is on standby.
_smp___rsRemote_standby If set to 1, this binary input point indicates that the other SMP Gateway of the group
is on standby.
If set to 0, it indicates that the other SMP Gateway of the group is active.
_smp___rsRemote_hotStandby If set to 1, this binary input point indicates that the other SMP Gateway of the group
is on hot standby.
For more information about Hot-Standby, refer to the “Hot Standby” section,
page 174.
_smp___rsFirstConnection_ok If set to 1, this binary input point indicates that the first link between the redundant
SMP Gateways is operational.
_smp___rsSecondConnection_ok If set to 1, this binary input point indicates that the second link between the
redundant SMP Gateways is operational.
_smp___rsSynchronized If set to 1, this binary input point indicates that the RTDX databases of both
SMP Gateways of a group are synchronized.
_smp___rsLan_ok If set to 1, this binary input point indicates that SMP Gateway access to the LAN is
operational. This point state can be used as a failover condition.
_smp___rsVoltage_ok If set to 1, this binary input point indicates that the voltage of the SMP Gateway
power supply is within its normal range of operation. This point state can be used as
a failover condition.
_smp___rsTemp_ok If set to 1, this binary input point indicates that the internal temperature of the
SMP Gateway is within an acceptable range. This point state can be used as a
failover condition.
_smp___rsMem_ok If set to 0, this binary input point indicates that the SMP Gateway is running low on
memory. This point state can be used as a failover condition.
_smp___rsGroupAddress_ok If set to 0, this binary input point indicates that the public IP address defined for the
group conflicts with another device that uses the same address. This point state can
be used as a failover condition.
_smp___rsGatewayA If set to 1, this binary input indicates that this is the SMP Gateway A of the
redundancy group.
If set to 0, it indicates that this is the SMP Gateway B of the group.
Soft PLC
_smp___plcProgramRunning If set to 1, the binary input point indicates that a Soft PLC automation script is
currently running on the SMP Gateway.
Annunciator
_annunciator___alarmActiveCount This analog input point states the number of active alarms.
_annunciator___alarmBlockedCount This analog input point states the number of blocked alarms.
_annunciator___alarmConfigCount This analog input point states the number of data points configured to trigger alarms.
_annunciator___alarmToAckCount This analog input point states the number of alarms that require acknowledgment.
_annunciator___alarmToClearCount This analog input point states the number of alarms that have been acknowledge and
that may be cleared.
_annunciator___generalAlarm If set to 1, this binary input point indicates that at least one alarm is currently active.
Each data point value that is stored in the real-time database (RTDX) of an SMP Gateway is
tagged with a quality attribute called “RTDX status”. This attribute gives additional information
about the precision of the value, the state of the IED that provided the value or the quality of the
corresponding timestamp.
The RTDX status attribute consists in a 16-bit value divided into flags. The 12 less significant bits
are used to define the quality of the value, while the 4 most significant bits define the quality of
the corresponding timestamp. Each status bit (flag) is independent of the others (except for the
timestamp status flags), which means that a given value can be tagged with more than one status
flags at the time.
The following table presents the RTDX status flags that are currently supported by the
SMP Gateway software and tools:
Unknown 0x0001 Indicates that the corresponding data point exists within
RTDX, but that it was never updated by a master or system
component.
Restart 0x0002 Indicates that either the originating IED or some other device
along the reporting path is currently being restarted. This
implies that no valid status was retrieved for the
corresponding data point since the last SMP Gateway reset.
Note: This status flag is DNP3-specific.
Communication failure 0x0004 Indicates that the connection with the originating IED is
currently lost, which implies that the value that is stored in
RTDX for the corresponding data point is the last reported
value.
Forced 0x0008 Indicates that the reported value was not retrieved through
normal acquisition or by exception, but was forced by a
human operator or by some automated process to provide “to
the best of our knowledge” type information with no other
guarantee.
Bad hardware 0x0010 Indicates that the reported value is of a doubtful nature due to
known hardware problems. The value might be valid, but
cannot be guaranteed.
Bad reference 0x0040 Indicates that the reported value provides from an analog
acquisition chain containing at least one invalid reference
channel. Best case is that the reported value is valid, but not
accurate.
Note: This status flag is reserved for analog input and output
points.
Inhibited 0x0100 Indicates that the corresponding data point was logically
inhibited by a human operator or an automation process.
An inhibited input point will no longer be reported, as long as
it remains inhibited, and the current value is the last one that
was reported prior to the inhibition.
An inhibited output point cannot be operated, as long as it
remains inhibited.
Out of range. 0x0200 Indicates that the value is outside an expected range of values
based on intrinsic hardware limitations.
For example, consider a sensor that produces a ±4 V signal,
although the actual limitation of the hardware is ±5 V. No
status flag would be raised for a 3.9 V value; however, a
4.1 V value would raise the “Out of range” flag, while a 5.0 V
value would raise both the “Out of range” and “Over range”
status flags.
An out-of-range value should be considered with caution,
since this is an abnormal condition that usually points to a
sensor defect or a physical installation issue.
Note 1: This status flag should be confused with alarm and
warning threshold that may be defined by users and
operators. Based on the example above, the user may
decide that any value larger than 3.0 V should trigger an
alarm. That does not necessarily means that the value is
incorrect, but that the operators should have a closer look
to the originating device.
Note 2: This status flag is reserved for analog input and output
points.
Simulated 0x0400 Indicates that the reported value was not retrieved through
normal acquisition or by exception, but was simulated by a
human operator using the Commissioning tool.
This status flag is similar to the Forced status flag, although
simulated values cannot be persisted, which means that they
will not be preserved when the SMP Gateway restarts, even if
persistence is configured for the corresponding data points.
Real-time clock (RTC) 0x2000 Indicates that the SMP Gateway provided the timestamp of
the value.