Password Security - GE 350-A9 Instruction Manual

CHAPTER 6: SETPOINTS

Password security

350 FEEDER PROTECTION SYSTEM – INSTRUCTION MANUAL
PTP VLAN PRIORITY
Range: 0 to 7
Default: 4
The setting selects the value of the priority field in the 802.1Q VLAN tag in request
messages issued by the relay's peer delay mechanism. In compliance with PP (Power
Profile) the default VLAN priority is 4, but it is recommended that in accordance with PTP
it be set to 7.
Depending on the characteristics of the device to which the relay is directly linked, VLAN
Priority may have no effect.
The setting applies to all of the relay's PTP-capable ports.
PTP VLAN ID
Range: 0 to 4095
Default: 0
The setting selects the value of the ID field in the 802.1Q VLAN tag in request messages
issued by the relay's peer delay mechanism. It is provided in compliance with PP (Power
Profile).
As these messages have a destination address that indicates they are not to be bridged,
their VLAN ID serves no function, and so may be left at its default value. Depending on
the characteristics of the device to which the relay is directly linked, VLAN ID may have
no effect.
The setting applies to all of the relay's PTP-capable ports
PTP EPOCH
Range: UTC since 1995, UTC since 1900, UTC since 1970, TAI since 1970
Default: UTC since 1995
The setting selects the origin of the time scale.
Password security features are designed into the relay to provide protection against
unauthorized setpoint changes and control. The relay has programmable passwords for
both Local and Remote access, which can be used to allow setpoint changes and
command execution from both the front panel and the communications ports. The remote
user may choose to allow the local user to change the local passwords, or enforce use of
the same passwords locally and remotely. The Local and the Remote passwords can be
set only after password security is enabled by entering a Master Password. The Master
Password is set to "NULL" when the relay is shipped from the factory; setting the Master
Password enables password security.
Each interface (RS485, Ethernet, USB, and front panel keypad) is independent of one
another, meaning that enabling setpoint access on one interface does not enable access
for any of the other interfaces. The password must be explicitly entered via the active
interface in order to change setpoints and execute commands. The Master Password
cannot be set from the keypad, and must instead be accessed from one of the other
interfaces.
The EnerVista 3 Series Setup software includes and interface for programming the relay's
passwords as well as enabling/disabling setpoint access. For example, when an attempt is
made to modify a setpoint but access is restricted, the program will prompt the user to
enter the password and send it to the relay before the setpoint can be written to the relay.
If a SCADA system is used for relay programming, it is up to the programmer to
incorporate appropriate security for the application.
As well as being logged out of security, which allows the user to read setpoints and actual
values only, three levels of security access are provided: Setpoint Level, Control Level, and
Master Level. The Setpoint and Control Levels can be attained either locally using the Local
S1 RELAY SETUP
6–9