Contents Welcome SMP Gateway Models ................... 1 Related Documentation ..................2 Getting Assistance with Cybectec Products ............3 Getting Started ....................... 3 Document Overview ....................4 Principles of Operation ...
Page 4
4.5.2 Changing the Position of a Column ............25 Configuring the SMP Gateway Creating Master Protocol Instances ..............28 5.1.1 Creating a Master Protocol Instance from a Template ......29 5.1.2 Creating a Master Protocol Instance Manually ........
Page 5
Viewing Protocol Exchanges in Real Time Information Provided by SMP Trace ..............51 SMP Trace Features .................... 52 7.2.1 Searching in SMP Trace ................ 52 7.2.2 Printing Traces ..................53 ...
Page 6
11.3.1 The Commissioning Tab ............... 72 11.3.2 Forcing an Input Point ................73 11.3.3 Un-Forcing an Input Point ..............73 11.3.4 Performing a Control Operation ............74 11.3.5 Closing the Commissioning Session ............. 75 ...
Page 7
13.6.1 Manually Setting Up a VPN Connection ..........103 13.7 Configuring the Firewall ................... 104 13.7.1 Creating the Firewall in SMP Config ..........104 13.7.2 Setting General Parameters ..............105 13.7.3 Setting Firewall Rules .................
Page 8
16.2.9 Changing How Time Information is Displayed ........148 16.2.10 Setting Up an Alarm Buzzer ............... 149 16.2.11 Temporarily Deactivating the Annunciator ......... 149 16.3 Setting Up the Touch Screen ................149 ...
Page 9
19.2.2 SMP Manager’s Redundancy Column ..........187 19.3 Managing Redundancy ..................188 19.3.1 Forcing an Active SMP Gateway to Fall On Standby ......188 19.3.2 Additional Failover Conditions ............189 19.3.3 Modifying the Redundancy Settings of an Existing Group ....
Page 10
Using a Dial-Up Connection for DNP3 or IEC 60870-5-101 23.1 Specifying which serial ports have modems ............. 216 23.2 Creating a modem pool ..................216 23.3 Adding a modem to a modem pool ..............217 ...
Page 11
27.3 Time and Date ....................243 27.4 Clock Manager ....................243 27.4.1 D Command ..................244 27.4.2 H Command ..................244 27.4.3 Q Command ..................244 27.5 Elo Touchscreen Driver Manager ..............244 ...
Page 13
Figures Figure 1 Master and slave systems ..................... 8 Figure 2 The SMP Gateway as a Master-and-slave system ............8 Figure 3 The SMP Gateway real-time data exchange ..............9 Figure 4 SMP Gateway communications components ..............
SMP Gateway Models There are currently 3 SMP Gateway models: The SMP 4 has 4 ports. It comes in a compact and economical format that allows it to be installed directly within relay protection enclosures. There is also an optional internal modem available, which allows the SMP 4 to communicate with a SCADA or device via a dialup connection.
Separate documents describe the protocol-specific settings. SMP 4 Diagnostics Reference Guide, GUI-00316-00040 T. This document takes you through the steps required to run diagnostic tests on the SMP 4. SMP 16 Diagnostics Reference Guide, GUI-00316-00036 T. This document takes you through the steps required to run diagnostic tests on the SMP 16.
Make the SMP Tools aware of your new SMP Gateway. Load the SMP Gateway firmware. All of these steps are explained in detail in the following documents: SMP 4-20 SMP 8-40 Installation Guide, GUI-00316-00027 T SMP 4 Installation Guide, GUI-00316-00026 T. SMP 16 Installation Guide, GUI-00316-00032 T.
Document Overview Once you have performed all the steps explained in your SMP Gateway installation guide, you are ready to perform the following tasks, as described in this user manual: Configure your SMP Gateway so that it can communicate with your devices: Define the hardware.
Page 19
You will also learn how to update the SMP Gateway software and tools, and to troubleshoot any problems you may encounter with your SMP Gateway. • 5 SMP Gateway User Manual...
Principles of Operation Electrical power utilities face a number of challenges when attempting to automate their substations. They have legacy devices that they want to continue using. They want to integrate new devices. They may want to add one or more control centers. They may want to use a local HMI in order to keep a close watch on all events that occur in the substation.
SCADA MASTER SLAVE DEVICE Figure 1 Master and slave systems 2.1.2 Introducing the SMP Gateway in the Automation System When an SMP Gateway is introduced in the automation system, it has to act as both a slave and a master. The SCADA system interrogates the gateway as if it were a substation device. The gateway is thus a slave to the SCADA.
Slave protocol components implement all the functions necessary to process requests received from a SCADA or control center. Master protocol components implement the functions necessary to poll devices and send control requests. Cooper Power Systems provides components for most standard protocols, such as DNP3, MODBUS, IEC-60870- 5-101/103/104 and IEC 61850, as well as a large number of proprietary protocols such as SEL, ABB TEN BYTE, Motorola MDAC, and more.
SMP Gateway communications components implement all the functions required to communicate with a device or control center using a variety of communications technologies. Cooper Power Systems provides communications components for asynchronous serial ports, RS-232, RS-422, RS-485, TCP/IP and modems. SCADA...
The flexibility of the SMP Gateway architecture is the basis of Cooper Power Systems’ step-by-step substation modernization strategy. In the following sections, we will show you how you can configure the SMP Gateway to perform all the functions required of a substation gateway.
SCADA RS-232 CONNECTION MODBUS SLAVE REAL-TIME DATA EXCHANGE MODBUS MASTER RS-232 CONNECTION DEVICE Figure 5 The transparent SMP Gateway In this configuration, the master component polls the device and stores the values in the RTDX. The slave component processes the SCADA polling requests and sends the values provided by the device.
SNMP support to monitor communications status. Sophisticated HMI, interactive diagrams, data logging and reporting, using Cooper Power Systems’ Visual Substation software. Sophisticated Windows tools for remote or local maintenance. A sophisticated security server to support corporate network users. Even more important, the transparent SMP Gateway is the first step in integrating new substation devices to your existing SCADA and automation system.
SCADA TCP/IP CONNECTION DNP3 SLAVE REAL-TIME DATA EXCHANGE MODBUS MASTER RS-232 CONNECTION DEVICE Figure 7 The SMP Gateway protocol translator 2.2.3 Using the SMP Gateway as a Data Concentrator or Device Multiplexer The SMP Gateway architecture is designed to simultaneously support any number of master components.
SCADA TCP/IP CONNECTION DNP3 SLAVE REAL-TIME DATA EXCHANGE MODBUS MASTER MASTER RS-232 RS-232 CONNECTION CONNECTION DEVICE DEVICE Figure 8 The SMP Gateway data concentrator 2.2.4 Using the SMP Gateway as a Communications Processor The SMP Gateway architecture supports any number of slave components. Each component has its own communications link, and all the device data can be sent to any number of SCADA and control centers, each with its own protocol.
MAINTENANCE SCADA CENTER RS-232 TCP/IP CONNECTION CONNECTION MODBUS DNP3 SLAVE SLAVE REAL-TIME DATA EXCHANGE MODBUS MASTER RS-232 CONNECTION DEVICE Figure 9 The SMP Gateway as a communications processor 2.2.5 Putting it all Together The SMP Gateway’s sophisticated architecture allows it to integrate existing and new RTUs, IEDs, PLCs and control centers into a single homogeneous substation automation system.
SMP Tools Overview To assist you with the tasks you will want to perform with the SMP Gateway s in your organization, we have provided you with our suite of SMP Tools. The SMP Tools are Microsoft Windows-based programs that make it easy for you to configure the SMP Gateway and perform maintenance functions.
Page 34
SMP Loader Used with the SMP 4-20 and SMP 8-40 to load new versions of most of the SMP Gateway firmware components, and with the SMP 4, SMP 16/CP and SMP 16/SG, to load the secondary bootstrap program. Refer to Appendix A and to your SMP Gateway installation guide for details on using SMP Loader.
SMP Manager SMP Manager is the doorway to your SMP Gateways. It runs on your PC, as do all the tools you launch through SMP Manager. You are already familiar with the application, since you added your new gateway to the list of SMP Gateways managed by SMP Manager when you installed your SMP Gateway.
The current status of each SMP Gateway in the list (started, failed, safe mode, max safe mode, on standby, and various intermediate states). The SMP Gateway model: SMP 4-20, SMP 8-40, SMP 4, SMP 16/CP or SMP 16/SG. The IP address and redundancy status of any SMP Gateways you have grouped together for the purpose of redundancy.
SMP Manager from polling the gateway for its status. Click Add. The SMP Gateway gets added to the list, and SMP Manager automatically detects the gateway model and in the case of an SMP 4, whether an internal modem is installed. Information Provided by the SMP Gateway Icon The SMP Gateway icon, which is displayed beside each gateway name, provides additional information about the SMP Gateway.
The current status of each SMP Gateway in the list (started, failed, safe mode, max safe mode, on standby, and various intermediate states). Platform The SMP Gateway model: SMP 4-20, SMP 8-40, SMP 4, SMP 16/CP or SMP 16/SG. Firewall Whether the SMP Gateway's built-in firewall is active. This information is available only if your version of the SMP Gateway software supports the SMP Gateway’s security...
4.5.1 Adding or Removing a Column To toggle between displaying a column and removing it from the display: Right-click any column heading. In the shortcut menu, locate the column you are interested in. Put or remove a checkmark to add or remove the column to or from the display. 4.5.2 Changing the Position of a Column To change the order of a column in the display:...
SMP, where it is stored in non-volatile flash memory. Using SMP Config, you will perform the following configuration steps: For an SMP 4-20, an SMP 8-40 or an SMP 16/SG, define the hardware options installed. Create a master protocol instance for each device to be supported.
In the Tools menu, click SMP Config to start the application. The SMP Config display includes 3 panes. The left pane is a tree structure of all the configuration topics. The top right pane displays the settings for the topic you have selected in the left pane. The bottom right pane appears when your request that the configuration be validated;...
If no template is available, you will need to enter the points list. If you are configuring a number of devices of the same type, you can save the first device configuration as a template that you will then use to configure the other devices. Once you have added a master protocol instance and entered its data points (manually or via a template), you can click a particular data point type in the left pane and see the list of data points and their settings in the right pane, as shown next.
5.1.2 Creating a Master Protocol Instance Manually To add a master protocol instance manually: In the left pane, open the Master Protocols branch, to display the list of master protocols provided under your product license. In the left pane, click the protocol for which you want to add an instance. The list of all defined master protocol instances appears in the right pane.
DNP3 Master Protocol. 5.1.3.1 Accessing Protocol-Specific Documentation There are Cooper Power Systems documents available, to which you can refer for details on the settings of the currently supported protocols. To access the documents, proceed as follows: Click Start, on the Windows taskbar.
Page 46
Binary outputs A physical data point represents a real-life value, implemented on an external device. You need to identify all the device data points, either manually or using a device template. A logical data point is a value managed by the SMP Gateway. These data points are built-in and cannot be modified, but they can be disabled.
5.2.1 Adding Data Points from a Protocol Template Protocol templates can also be used to add points to a protocol component. For instance, you could use a template to add the data points provided by an optional device feature. You can do this by retrieving the data points from a protocol template.
Duplicating a Master Protocol Instance Once you have created a master protocol instance and configured its data points, you may want to generate one or more additional instances with the same general and data point settings. A quick way to accomplish this is by duplicating the master protocol instance. To do this: In the left pane, click the protocol instance you want to duplicate.
Page 49
Console 1 Board A. This feature allows you to use the Console port as a standard serial port. If the SMP 4 has an internal modem, then it provides 3 built-in serial ports and 1 built-in modem port. These ports are also identified as COM1 Board A through COM4 Board A;...
Description Constraint for the SMP 4-20 and the SMP 8-40: An SMP 4-20/SMP 8-40 CPU board can support up to 4 different bit rates for the serial ports located on the front panel. This means that if you specify that the console serial port is configured for RAS, only 3...
If the link type is RS-485, set RTS to TX Request. You shouldn’t have any problem if you keep the other default values: DTR to Always On, and CTS to Ignore. If you are using RS-422 or RS-485 communication, specify whether or not you will be using line terminators.
To associate a master protocol instance with a communications link: In the left pane, click Connection Usage. In the right pane, for each master protocol instance under Master Connection Usage, select the checkbox under the appropriate connection instance. Note: If you have several devices that share a multidrop link, each device must have a different device address.
To save the configuration on your computer: In the File menu, click Save. Note: You cannot save a configuration file that contains errors. This feature is intended to prevent you from inadvertently loading an invalid configuration file onto an SMP Gateway. However, you can save your configuration file if the Messages pane displays warnings only.
The SMP Gateway will go through a series of startup steps, which will be displayed in the Status column of your SMP Gateway. When startup is complete, if your configuration file is correct, the Status column will show Started, to indicate that the gateway has started normally. If your configuration file is incorrect, the Status column will indicate that there is a problem.
To select a column or a row: Click the header of the line you want to select. To select several rows or columns, hold down the CTRL key while clicking their header. To select a group of rows or columns in a sequential order, select the header of the first one, hold down the SHIFT key and select the last one.
Click in the cell that contains the value you want to copy. In the example, we clicked in the CI_01 Scale cell. In the Edit menu, click Change Selection. The value is copied to the selected cells. To deselect the cells, click Clear Selection in the Edit menu. Note: If you have selected a group of cells and would like to add other cells to the group: Select the desired cells using the CTRL key or the SHIFT key on your keyboard, per the...
To correct the problem, proceed as follows: Click the cell with Index no. 8. Hold down the SHIFT key of your keyboard and click the last cell in the column. In the Edit menu, click Select Cells. The cells turn gray. In the Edit menu, click Resequence Selection.
Press the Del key on your keyboard, and confirm your intention of deleting the row. The item disappears from the grid. To delete a protocol instance: In the left pane, click the protocol type. The list of instances of this protocol type appears in the right pane. In the right pane, click the protocol instance you want to delete.
Page 59
From the menu Edit, select Find Points or use the shortcut CTRL+F. The Find Points dialog box appears. In the Find Points dialog box, type the point’s name you are looking for and click the Find button. The results appear in the list below. Select the point in the list, the application will bring you to the configuration zone of the point.
Viewing the SMP Log Files The SMP Gateway maintains an internal log of all significant events. Using SMP Log, you can select and view the various log files in real time. You can view, print, search and save all or any information in this application.
The Reset log records the time and reason for each SMP Gateway restart. It indicates whether the reset occurred because of a power failure, a request from the front panel button, a remote request, a watchdog trip, or a fatal hardware or software problem. The Control log records the steps that the SMP Gateway performed in response to a local or remote control request.
Type a name for the file; you can use a different extension such as .csv or .txt. 6.2.4 Viewing Multiple Log Folders at Once To view multiple log folders at once: Select folders, using the SHIFT or the CTRL key. The contents of all folders will be displayed altogether in the right pane, in chronological order.
Viewing Protocol Exchanges in Real Time Using SMP Trace, you can view a continuous stream of protocol exchanges between the SMP and the substation devices, or between the SMP Gateway and the control center. At this stage, however, since you have only configured master protocol instances, you will only see the protocol exchanges that take place between the SMP Gateway and the substation devices.
Using SMP Trace, you can view detailed traces of all the system activity. The following traces provide information that you will find useful during the configuration and maintenance of your SMP Gateway. Master and Slave Protocol traces display the high-level information exchanges that occur between the SMP Gateway and the other system components to which it is connected.
You can also choose to save it inside the SMP Gateway's memory by selecting Record to SMP. For example, if you have an SMP 4 with a modem on a pole outdoors and you need to save 24 hours worth of activities, long distance costs are most of the time prohibitive. Use this option and connect again 24 hours later to pick up your data.
7.2.4 Saving all the Scrolled Information To save all the information in SMP Trace that scrolled since opening it: Select a folder. From the menu File, select Save As. Type a name for the file; it will be saved in the .txt format. 7.2.5 Changing How Time Information is Displayed To change how time information is displayed:...
Viewing Communications Statistics in Real Time The SMP Gateway stores a large number of real-time statistics and internal counters to help you analyze the performance of your SMP Gateway and assist you in troubleshooting your configuration. Using SMP Stats, you can view, in real time, various statistics about the communications links and about the protocol exchanges that take place between the SMP Gateway and the devices or control centers.
Note: The Modem Pool folder is visible only for the SMP 16, which has an integrated modem, and for an SMP 4 purchased with the modem support option. Furthermore, a modem pool must be configured on the SMP Gateway.
8.2.2 Printing Statistics To print a statistics page: Select a folder. From the menu File, click Print. 8.2.3 Changing How Time Information is Displayed To change the display format of time-specific statistics: From the View menu, click Time Display Options. From the Time Display Options dialog box, select the type of display from the Time Display Format drop box: you can choose between the local time (using the PC’s time zone settings) and UTC.
Using a Web Browser to View Data in Real Time The SMP Gateway’s built-in web server (eSMP) provides an easy way to view the log files and statistics using your Internet Explorer web browser. It is also the easiest way to view the analog and binary input and output points in real time.
The Analog Input, Analog Output, Binary Input, and Binary Output tabs display the current value of all the SMP Gateway’s data points. The Logs tab displays the contents of the internal SMP Gateway log files. The data is the same as provided by the SMP Log program. The Statistics tab displays the SMP Gateway’s real-time statistics.
To apply a filter: Select the tab in which you want to filter data points. In the toolbar, type the filter criterion. It can be the device prefix, or any other text that is common to the data points you want to display. Note: You may specify up to 5 criteria.
Page 76
Data points will now be highlighted when their value changes and the display will return to normal after a short delay. To manually acknowledge value changes for a particular type of data point: Click the appropriate tab to choose the type of data. Make sure that the Auto Ack.
Connecting the SMP Gateway to a Control Center Now that we have seen how to configure master protocol instances, tested the SMP Gateway configuration and viewed the collected data, we will see how to configure a slave protocol instance in order to forward the device data to a SCADA or a control center. 10.1 Creating Slave Protocol Instances When the SMP Gateway communicates with a control center, it acts as a slave and as such, needs...
In the left pane, click General, to display the list of general settings for the selected slave protocol instance. In the right pane, enter the protocol settings. For instance, to configure a DNP3 slave component, you would provide settings such as: The Link Address, which identifies the logical slave device.
Page 79
Click in the Master I/O list, to display the list of data points defined for each master protocol instance. Choose the data points you want to forward to the control center. Use the CTRL and SHIFT keys on your keyboard, to extend your selection. Click the dialog box’s right arrow button.
10.4 Configuring the Data Points The slave component automatically converts the subscribed data points to the appropriate format for the protocol. However, you should make sure the default settings are appropriate and perform any necessary adjustments. To configure the data points: In the left pane, click the data point type, to display a list of all the data points and their settings.
To associate a slave protocol instance with a communications link: In the left pane, click Connection usage. In the right pane, for each slave protocol instance under Slave Connection Usage, select the checkbox under the appropriate connection instance. 10.7 Validating and Activating the Configuration You can now validate the configuration, save it on your computer, send it to the SMP Gateway, and restart the gateway in order to activate the configuration.
Page 82
A particularly effective way to test a slave protocol instance is to use the SMP Gateway itself to set up a master protocol instance to poll the slave. Using this approach and the SMP Tools, you can easily examine the effect of the various protocol features, such as report by exception. You can also use the web server’s commissioning tool, as described in the next chapter.
Using the Web Server’s Commissioning Tool The SMP Gateway’s built-in web server also provides a commissioning tool that simplifies the engineering effort required for the implementation and the integration of a substation. It is intended to help technician(s) and/or engineer(s) testing the SMP Gateway’s configuration and connectivity with the substation devices and the SCADA.
From SMP Manager’s Tools menu, click SMP Config. In SMP Config, under the System branch, select Web Server. If the Web Server instance has not been created yet, type a name in the blank Name text box, and then click again the Web Server branch.
11.3 Opening a Commissioning Session Once the commissioning tool has been activated on the SMP Gateway, any user that has the Operation privilege can open a commissioning session. Proceed as follows: Connect to the SMP Gateway’s website, by following the procedure described in section 9.1, page 59.
Note: The commissioning session will remain open as long as the web browser will remain connected to the website, or until the user click again the button on the right. The session is also closed when the SMP Gateway restarts. 11.3.1 The Commissioning Tab The Commissioning tab looks quite similar to other data points tabs.
11.3.2 Forcing an Input Point The most common commissioning operation is to force an input point to a specific value/state, and to verify that the forced value is correctly reported to the SCADA. To force an input point to a specific value: In the data points list, select the input point you want to test.
You can also un-force all forced data points, by clicking Unforce All in the commissioning toolbar. 11.3.4 Performing a Control Operation When an IED support control operations, it is important to validate that its related output points are correctly configured on both the SCADA and the SMP Gateway sides. Such validation is achieved in two steps, for each output point: Perform a control operation using the Commissioning Tool, to make sure that the point is correctly configured in the SMP Gateway’s master configuration and that the control result is...
Various entries are added to the Control log when a control operation is executed on the SMP Gateway, making it an essential resource for this portion of the commissioning task. To consult the SMP Gateway’s Control log entries in the web browser: Click the Logs tab.
Interconnecting SMP Gateways It is possible to connect two SMP Gateways together, by the means of the Interconnections feature. One advantage of such connectivity is the ability to concentrate data from multiple SMP Gateways, which is very convenient considering the limited amount of IEDs that can be monitored by a single SMP Gateway.
SCADA DNP3 MASTER DNP3 SLAVE PARK AVENUE INTERCONNECTIONS MASTER INTERCONNECTIONS SLAVE CEDAR CREEK MASTER SLAVE IEDs If you move from IEDs up to the SCADA, you will see how the master-slave configuration must be designed for this to work. The main steps are the following, using SMP Config: In the device's master (here, the Cedar Creek SMP Gateway), create an Interconnections slave.
Page 93
Select the slave SMP Gateway (in the example, the Cedar Creek SMP Gateway). From the Tools menu, select SMP Config. Configure the Interconnections slave instance: In SMP Config, under Slave Protocols, select Interconnections. In the right pane, under Name, type a name for the interconnections slave instance, and then click again the Interconnections branch.
Page 94
Collapse the Slave Protocol branch and expand Connections, and then select TCP/IP Slaves. Under Name, type the TCP/IP slave's name. For example, you can name it Interconnections. Under Port, type 6655. Note: Port 6655 is recommended for Interconnections. You can use another port, but make sure you specify the same in the master SMP Gateway’s configuration.
Note: As all data points are always made available by an Interconnection slave instance, the slave’s configuration does not need to be updated when a master’s configuration is modified (for example, when a data point is added/removed) or even when a new master is added to the SMP Gateway configuration. 12.2 Configuring the Master SMP Gateway Now that you have configured the slave SMP Gateway as an Interconnections slave, you will...
Page 96
If some data points are not required in the master SMP Gateway’s configuration, clear the corresponding checkboxes. Click Update to close this dialog box and to add the points to the configuration. Configure the master’s connection: Collapse the Master Protocol branch and expand Connections, and then select TCP/IP Masters.
12.2.1 Updating the Interconnections Master’s Data Point List When the slave SMP Gateway must monitor new IEDs or more information from actual IEDs, no update is required for the slave SMP Gateway’s Interconnections instance. This is not the case for the master SMP Gateway, but the configuration effort is minimal.
12.3 Verifying the Interconnection Between the SMP Gateways To verify if both SMP Gateways have been properly interconnected: Launch SMP Manager. Select the master SMP Gateway (in our previous example, it is the Park Avenue SMP Gateway). From the Tools menu, select Internet Explorer. The web browser will connect to the gateway’s web server (see “Using a Web Browser to View Data in Real Time”, page 59 for more information about the SMP Gateway’s web features).
CIP-009-1 Cyber Security Standards. These standards describe measures that utilities will have to implement, as well as a strict timeline for implementation. This chapter describes the advanced security features that Cooper Power Systems has implemented since version 4 of the SMP Gateway software and tools, in order to provide utilities with a secure, NERC-compliant, solution to integrate their substation devices.
Monitoring and locking of remote connections — Modem and passthrough access is continuously monitored, and can be enabled or disabled by the control center. All accesses are logged and limited to authorized users. Integrity checking — All SMP Gateway software and firmware components are digitally signed in order to ensure their authenticity and integrity.
A firewall must be used to isolate the substation LAN from the corporate WAN. The firewall should be configured to block all ports and connections except those that are absolutely necessary for the operation of the substation. For instance, the firewall could be set up to accept traffic between the SCADA and the SMP Gateway only.
Page 102
CoDeSys server 1200 Passthrough server 32500 If using VPN, open Application Port Protocol SMP Status PPTP (VPN) 1723 TCP and UDP PPTP (VPN) Here is a list of the most commonly used ports for RTU and SCADA communication: SMP Config Protocol Port DNP3 20000...
Additionally, the SMP Gateway’s built-in security does not allow an unsigned file in: it has to be signed by Cooper Power Systems to be allowed in the gateway. More information about this concept is given in section “File certification and integrity checking”, page 102.
Sending your security database to one or more SMP Gateways. In this section, you will also learn how to perform the following actions: Retrieving the security database of an SMP Gateway and storing it locally. Disabling the security database of one or more SMP Gateways. Unlocking a user account that has been locked out following failed login attempts.
When you restart SMP Manager, the Login Information dialog box will contain the message you just typed in the text file. The following is an example: 13.4.4 Defining your Authentication Policy Your authentication policy forms an integral part of your security database. It specifies which login requirements a user has to meet in order to be authenticated.
Page 106
In the Security menu of the Local Security Database Editor window, select Authentication Policy. The Authentication Policy dialog box appears. The dialog box contains the following elements: Element Description Security Configuration This section of the dialog box provides a description of the security database, and shows when security database was last modified.
Page 107
Element Description Password must meet If selected, specifies that a password must contain characters from complexity requirements at least 3 out of the following categories: alphabetic high caps alphabetic small caps numeric special characters. Account Lock This section of the dialog box specifies whether a user account is to be locked out from SMP Gateway access if the user fails to log in properly and if so, what are the locking and unlocking parameters.
13.4.5 Groups and Privileges In the following table, you will find default user groups and privileges. You can change a group's privileges at will; of course, you have to upload the security database to the SMP Gateway afterwards. Note: If you remove privileges, you must notify the concerned groups or users; otherwise, they will fill up the security log with access denial messages if they keep trying to access the gateway.
Page 109
You may want to add, delete or rename the user groups and change their privileges to reflect the security policy of your particular organization. Proceed as follows: From SMP Manager’s Security menu, click Edit Local Security Database. The Local Security Database Editor window appears. If you click a user group in the left pane, the right pane shows the privileges assigned to this group and gives a description of each privilege.
You cannot create, delete or rename privileges. However, you can choose which predefined privileges you want to assign to a particular group. To do this: In the left pane, select the group. In the right pane, select desired privileges’ checkboxes for this group. Clear other privileges’ checkboxes.
To assign a password to a new user or to change the password of an existing user: In the left pane, select the user. In the User menu, select Set Password. In the Set Password dialog box, type and confirm the new password. Note: The first time you edit the security database, we strongly suggest that you rename the user called Administrator, since the name is so revealing that it could open the door to a serious security breach.
13.4.9 Sending the Security Database to One or More SMP Gateways Your security database, which includes your authentication policy and the users and groups you have defined, is stored locally on your PC. To activate your security database on one or more SMP Gateways, you have to send your local security database to the SMP Gateway(s).
13.4.9.3 The Security column The Security column displays the status of the local security database that is currently active on the SMP Gateway. It also indicates the status of global security, if enabled for this SMP Gateway. Here is an explanation of the different values that may be displayed for local security, with a suggestion of what action to take, if any: Up to Date.
In SMP Manager, select the SMP Gateway. In the Security menu, select Get SMP Gateway Local Security Database. SMP Manager retrieves the file from the SMP Gateway and upon your approval, updates your local security database with that retrieved from the SMP Gateway. 13.4.11 Removing the Security Database from One or More SMP Gateways...
Select Unlock specific account, and specify the account in the User Name box. In the example shown next, 2 user accounts are locked out, and we will request to unlock Joan’s account. Click Unlock to unlock the account(s). Following the unlocking operation, the number in the Accounts locked box is decremented accordingly.
If the SMP Gateway goes into “Safe mode” after the update, contact Cybectec Technical Support. 13.6 Using VPN Connections The SMP 4 and SMP 16 each offer their own built-in firewall, which provides maximum security against intrusion through the substation LAN. 102 • SMP Gateway User Manual...
When enabled, the firewall shuts off all the TCP/UDP ports of the SMP Gateway, except for the VPN port (TCP 1723) and another port (23) that is reserved for internal use. All the network messages exchanged between the SMP Gateway and the SMP Tools go through the VPN port. If security is enabled, these messages are encapsulated and encrypted by the VPN (Virtual Private Network) protocol before being forwarded to the destination port.
To disconnect from the VPN: From SMP Manager’s Gateway menu, click Disconnect VPN. 13.7 Configuring the Firewall In the System branch of the left pane in SMP Config, you will find the Firewall branch. This firewall is protecting the SMP Gateway and consequently the IEDs it connects to. The following section describes how to configure the firewall, as well as the various options that are offered to you with the firewall.
13.7.2 Setting General Parameters Parameter Description The Enabled checkbox enables or disables the firewall. Enabled The Log Enabled checkbox enables or disables the firewall Log Enabled log. If you enable the log, all significant information related to firewall activity will be entered into the log. You will be able to view the contents of the Firewall log with SMP Log.
optionally, the IP addresses of computers that will be granted access through the ports. Two default rules are provided by default for the CoDeSys and Passthru rules. In the following illustration, the rule “Test” opens ports 2270 to 2280 to UDP messages. It is specified that only computers with IP addresses beginning by 10.87.X.X can use these ports.
Data Point Description _smp___dialupInUse This binary input point indicates whether or not there is communication in progress via an incoming RAS dialup connection. _smp___passthru<connection>Enable This binary output point is used to lock or unlock a particular passthrough connection. The name of the connection, as defined in SMP Config, is included in the name of the data point.
Method 2 From the SCADA, perform the OPEN or CLOSE operation on the _smp___dialupEnable data point. You can do a Direct Execute or a Select Before Operate (SBO). For more information on how to perform control operations using Visual Substation Explorer, refer to Visual Substation Explorer User Guide, GUI-00115-00020 T). 13.8.2 Locking or Unlocking a Passthrough Connection The control center can lock or unlock passthrough connections individually, and can also request...
Using Passthrough Connections Most manufacturers of recent IEDs provide native vendor tools (NVT) for the configuration and maintenance of their devices. These tools usually connect to the device using a serial link or, less frequently, a network connection. The optional SMP Gateway passthrough feature gives you the ability to use PC-based tools to access the devices connected to an SMP Gateway.
SCADA VIRTUAL LOOPBACK PORT CONNECT COMM LINK SLAVE COMPONENT PASSTHROUGH REAL-TIME SERVER DATA EXCHANGE MASTER COMPONENT COMM LINK SMP GATEWAY DEVICE Figure 12 Using a passthrough connection A virtual loopback connection must be set up between SMP Connect and the NVT. This allows SMP Connect to intercept the communications link from the maintenance or configuration tool, and forward the data to the SMP Gateway.
communications with the PC application. This suspension is illustrated using a red “X” in Figure SMP Connect terminates the passthrough connection if a problem arises or if there is no data exchanged during a specified timeout period. 14.2 Setting up Passthrough Connections Setting up a passthrough connection involves a number of steps.
SMP Gateway and specify here the port that will be used by the IED maintenance and/or configuration programs; otherwise, the port must be the same as the one used by the master protocol. Suspend Link. This setting indicates that data acquisition should be suspended for all other devices sharing the multidrop link while SMP Connect is communicating with the selected device.
A TCP/IP loopback connection. You set up this type of connection only if the device manufacturer’s application uses TCP/IP. TCP/IP and virtual serial loopbacks do not require any further physical modifications to the configuration. To set up a real serial loopback connection: Configure the device manufacturer’s application to use one of the PC’s serial ports, COM1 for example.
Page 128
The top portion of the screen shows the settings you entered in SMP Config, with one additional piece of information: the PThru Active column, which indicates whether a passthrough connection is currently being used for a particular device. The bottom portion of the screen shows a trace of passthrough connection events.
Page 129
Under Application Settings: Specify whether the application is to be started manually. If you select to start it manually, then when you connect to the device, SMP Connect will start the passthrough and loopback connections without starting the application; you will be able to start the application manually.
14.3 Connecting to the Device Once you have configured the passthrough server and the SMP Connect application, you are ready to establish a passthrough connection to the device: In SMP Connect, select the device in the device list. In the Control menu, select Connect to IED. In the IED Application Selection dialog box, choose the application /NVT that will communicate with the device.
Close the manufacturer’s application or HyperTerminal. Click the device in the SMP Connect window. In the Control menu, click Disconnect from IED. The SMP Connect trace window now shows that the passthrough connection is no longer active. Note: The passthrough connection is automatically deactivated if there is no data exchanged on the link during the inactivity timeout period specified in SMP Config for this particular passthrough connection.
14.7 Changing How Time Information is Displayed in SMP Connect To change how time information is displayed: From the View menu, click Time Display Options. From the Time Display Options dialog box, select the type of display from the Time Display Format drop box: you can choose between the local time (using the PC’s time zone settings) and UTC.
Retrieving Event Files From Devices Many devices produce digital fault records or other event files. You can setup your SMP Gateway so that it automatically retrieves these files and stores them on one or more computers for subsequent analysis. Using SMP Config, you will go through the following steps: Define system folders.
Page 134
To define system folders in a SMP Gateway configuration, proceed as follows: Open SMP Manager. Select the SMP Gateway that will retrieve event files. From the Tools menu, select SMP Config. In the left pane of the SMP Config window, click System Folders. For each new remote folder, enter the following information in the Remote System Folders pane: The numerical Folder ID, which is a number ranging from 1 to 99.
The numerical Folder ID, which is a number ranging from 1 to 99. On an SMP Gateway, each system folder, remote or local, must have a unique ID. The folder Name. This name references the folder in master protocols’ file-retrieval settings.
Select the Disabled checkbox if you want to disable the event file retrieval function, in which case you may skip the remaining steps. By default, the checkbox is cleared since it is assumed that you want to retrieve the files. Choose a folder in the Folder drop-down list.
Page 137
Note: Interconnection file exchanges can only occur on “permanent sessions”. This means that if you want a slave SMP Gateway to provide files to multiple master SMP Gateways, you must specify one single client for each master gateway in the slave SMP Gateway’s Interconnections slave instance. The “Configuring the Slave SMP Gateway”...
Page 138
Select the SMP Gateway that will retrieve the files (the master SMP Gateway). From the Tools menu, select SMP Config. Configure the system folder that will be used to store the files retrieved from the slave SMP Gateway. See “Defining System Folders”, above. Note: The Compress setting will have no effect here if the files are already compressed on the slave SMP Gateway.
Using the Annunciator Interface The SMP Gateway’s Annunciator option is a cost-effective solution that provides a local HMI for substation operators. Using SMP Config, you can set up alarms based on the analog and binary data points of your SMP Gateway, and design simple pages to display the current statuses and values of these points and alarms on a touch screen, which also allows you to handle the alarms and perform control operations.
Page 140
The Annunciator’s display is divided in three parts: The alarm counters bar. This bar is located at the top of the display, and shows in real-time the number of active and blocked alarms. The display tabs. The various display pages can be accessed via a tab-based navigation system. The following tabs are available: Alarms.
Blocked. Display the list of blocked alarm inputs. The operator can block an alarm input to disable the triggering of alarms for this given input, even when alarm conditions are met. Such behavior may be required, when a certain part of the substation is under maintenance, for example.
16.2 Setting Up the Annunciator The Annunciator’s configuration is stored in the SMP Gateway’s configuration file, which is edited using SMP Config. In SMP Manager, select your SMP Gateway. From the Tools menu, select SMP Config. SMP Config opens, displaying the current configuration of your SMP Gateway. You must create the Annunciator instance before you can configure it.
change how time information is displayed in the various pages; set up an alarm buzzer to warn the operator of alarm occurrences. The following sections explain all these steps in details. 16.2.1 Configuring Alarm Inputs Alarms are the core of the Annunciator. You can use the Annunciator to display real-time values or to perform control operations, but its most distinctive feature is the display and handling of alarms.
Page 144
If you want to temporarily disable the triggering of alarms for this data point, select the checkbox under Disabled. The alarm conditions will be preserved in your configuration file, but will not be used by the Annunciator. Under Low Threshold Description, you can type a description for low threshold alarms on this analog input.
If you wish to trigger the alarm upon a 0 instead of a 1, select the checkbox under Inverted. If you want to temporarily disable alarm conditions for this data point, select the checkbox under Disabled. Under Description, you can type a description for alarms on this binary input. This description will be displayed in the various Annunciator pages when such an alarm condition is met, or when an operation (ex.
Page 146
The preview pane offers much more than that: To change the width of a column: Pass the mouse over the line that separates two column headers. The mouse cursor will change to this : Click and drag the mouse to enlarge of reduce the width of the column on the left of the cursor.
Page 147
The rest of the customization process is performed using in other sections at the top of the edition pane: Under Alarm list order, select which alarms should be displayed at the top of the list: The Oldest alarm at top setting is recommended if you want to deal with each alarm in order and work them down to the most recent.
Still under Columns, you can move the column names up and down using the Move Up and Move Down buttons. Selected columns will appear from left to right, starting with the topmost column name in the list. Under Alarm state colors, set the colors for alarm messages that appear in the Annunciator’s various display pages: Set the text and fill colors for active unacknowledged alarm messages.
In SMP Config, from the tree view, expand the Pages branch and select the Blocked Alarms branch. The resulting content of the right pane is presented in the following screenshot. Under Columns, select which columns should be displayed in the blocked alarms list. You can see the result of your selection under Preview.
Page 150
To learn how to use this page, see “Using the History Log”, page 155. To configure the display settings of the History page, proceed as follows: In SMP Config, from the tree view, expand the Pages branch and select the History branch. The resulting content of the right pane is presented in the following screenshot.
You can also use the preview section of the edition pane to modify the columns’ width, order and availability state, like for the Alarms page (see “Setting Up the Alarms Page”, above). The messages list can be filtered by the operator at runtime to display only alarm or operation messages, using touch buttons.
Page 152
Under Analog Points Columns, select which columns should be displayed in analog inputs/outputs lists. You can see the result of your selection under Analog Points Preview. 138 • SMP Gateway User Manual...
Page 153
Still under Analog Points Columns, you can move the column names up and down using the Move Up and Move Down buttons. Selected columns will appear from left to right, starting with the first column name in the list. Under Binary Points Columns, select which columns should be displayed in binary inputs/outputs lists.
Note: Data point information is always displayed in the System State page. 16.2.6 Creating a User-Defined Readings Page Readings pages are used to display real-time values of some of the SMP Gateway’s data points, and to perform control operations on its output points. With some work, a simplified diagram of your substation can be made using up to 15 readings pages.
Page 155
To select all cells from a given line, click the line header. To select all cells from a given column, click the column header. To select multiple cells from different adjacent lines and column, click and drag over the cells you want to select. Finally, to select all cells, click the non-editable cell found at the intersection of the line and column headers.
Page 156
Open the Cell Properties dialog box. Depending on the shortcut button clicked, either the General, Font or Click tab will be selected. The Cell Properties dialog box is presented later in this section. Enter preview mode. This functionality is described more later in this section.
Page 157
Click OK to complete edition of cell 1A. To display the real-time value of an analog input (_smp___clockMinute, in our example): Select cell 2A and click the General Properties button. Under Select cell content, select Display analog data point. The Cell Properties dialog box changes to this: Under Data Point, select the desired data point.
Page 158
toggles between the normal and alarm – or state 0 and state 1 – colors) by selecting the Flash checkbox. Similarly, you can specify different colors to use when the data point’s quality is bad (ex. communications failure). You can also use the Font tab to edit the text’s font, style, alignment and size. Note that the same font, style, alignment and size will be used when the data point is in alarm or when its quality is bad.
Page 159
Using the preview mode, you can transform the grid into a preview of the Annunciator’s display for this readings page. When you enter this mode, all cells configured for real-time display are replaced by simulated values. To enter the preview mode: From the grid’s toolbar, click Preview Mode.
Page 160
Under Page, select which readings page should be displayed when the operator will press the cell. All configured pages should be available for selection, plus the following options: <First>. Display the first page of the readings pages list. <Previous>. Display the page that appears just above in the readings pages list. <Next>.
Type the button’s name in the Label edit box. Specify the text and background colors for the button. A preview of the button is displayed at the bottom. Repeat the previous steps, this time under State 1, for the button that will set the output point to the state of 1.
Mark the corresponding checkboxes for the pages you want to be available for display. Clear the corresponding checkboxes for the pages you want to be unavailable for display. 16.2.8 Selecting the Page Displayed at Startup You can select which page you want the Annunciator to display at startup. To do so: In SMP Config's tree view, under the Annunciator instance, select the General branch.
Setting Up the Touch Screen Now that you have completed the Annunciator setup, you are ready to connect and calibrate the touch screen. Note: Cooper Power Systems recommends the use of a touch screen from Elo TouchSystems for use with the SMP Gateway. 16.3.1...
A cable to convey screen-touching information. When a touch screen is used with a computer, the screen also acts as a mouse when its user touches it. The touch information is transmitted using either a USB or serial cable. Note: If you have trouble connecting these cables to the SMP Gateway, refer to the SMP 16 Installation Guide.
calibrate the touch screen at runtime. For a little reminder on how to upload the configuration file to the SMP Gateway, see “Sending the Configuration to the SMP Gateway”, page 39. Once the configuration file has been uploaded, restart the SMP Gateway. At the beginning of the SMP Gateway’s startup sequence, you should see some configuration information displayed on the touch screen, and then the screen should become totally black.
To select an item from any displayed list, just press the line that contains it. If your fingertips are too large or if you do not feel at ease with this method, you can use the large arrow key buttons available at the bottom of each tab.
Page 167
You must turn off the sound warning system before you can acknowledge the alarm. The sound warning system also acts as an interlock, ensuring that you are aware of all the alarms that occur. To really hear a sound, you need to install a buzzer on the SMP Gateway as described in the “Setting Up an Alarm Buzzer”...
Click General Ack./Clear to acknowledge all alarms and clear the alarm display of all data points that have returned to their normal condition. Press Acknowledge to acknowledge the alarm. Again, if more than one alarm can be acknowledged, the alarm that will be acknowledged depends on the alarm acknowledgement rule selected in SMP Config for the Alarms page.
To reactivate a blocked alarm input: From the Blocked page, select the data point that you want to reactivate. Press Reactivate. The alarm input is moved back to the Alarms page. The sound warning system turns on and you will then have to take action, to acknowledge and recall the input’s current condition (see “Managing Alarms”, above).
Page 170
circular and has a limited size: when it is full, new entries replace the oldest ones. The history log file’s entries are displayed in the History page, in chronological order, starting with the oldest one at the top. This page resembles the Alarms page, with an additional column that indicates the type of entry. Two types of entry are displayed in the History page: Alarms (an ‘A’...
To filter alarm entries: Touch the Alarms (A) button. The button will appear “unpressed”, and only operator action entries should be displayed. To display alarm entries: Touch the Alarms (A) button again. The button will appear “pressed” and the alarms entries should be displayed.
Page 172
Under the Data Points branch, some branch names might be displayed in orange. This means that the value of some data points displayed in these branches is unavailable due to communications failure. These points are also displayed in orange in the right pane. When an analog inputs or analog outputs branch is selected, the right pane displays the following information for each analog input: Name.
Name. The input’s name. State. The input’s actual state. Alarm. Indicates it this input is in alarm (1), or not (0). Nothing is displayed if the data point is not configured to trigger alarms. Filter(s). The appearance and disappearance filters, which respectively indicates how long, in milliseconds, the binary input must keep the active state (TRUE or 1) before triggering an alarm, and how long, in milliseconds, the binary input must keep the inactive state (FALSE or 0) before considering that the alarm is no longer active.
This window is also customizable, as described in the same section. In the snapshot above, the State 0 button is named Open and the State 1 button is named Close. To perform a control operation: Press either the State 0 or State 1 button: To force the corresponding output to state 0 (FALSE), press the State 0 button.
Page 175
The screen saver also automatically ends its execution when an alarm occurred, or when the data point that triggered it return to its normal condition. • 161 SMP Gateway User Manual...
The SMP Gateway’s Automation Functions Because it is connected between the substation devices and the control centers, the SMP Gateway is well positioned to implement advanced processing functions that would be impossible to perform by less sophisticated devices. The SMP Gateway provides the following automation capabilities: The SMP Automation Functions module, which add basic automation functions.
The Binary Control function, which performs a control operation on a binary output point, based on the state change of a binary input point. A millisecond time filter can be applied to value changes in the source point, to prevent control operations from being triggered on transitions of short duration.
As shown in the screenshot, the newly added instance includes the following items: General settings, which set the general behavior of the component. Settings for various data point types. Initially, there are no data points. You will create logical data points for each function you set up. You will then specify the settings for each of these logical data points.
Page 180
The Best Of function makes a logical input or output point an exact replica of the best source point available of the same type. The logical point is referred to as the “result point”. In the right pane, type a name for the function. Define the result point: In the left pane, click the type of data point you want for the result point.
Page 181
Define the second source point: Type the name of the point in the Second Point box. Without closing the dialog box, put the cursor in the Second Point box. In the Select Points dialog box, choose the second source point to which you want to subscribe.
If you do not choose either method, the expression will be evaluated only once, on the SMP Gateway’s startup. Note: This function is not available for the SMP 4-20 and the SMP 8-40. To create a calculated data point: In the left pane, at the bottom of the automated functions list, expand Functions and right- click Logic Processor.
Page 183
The Logic Editor is used to enter the expression that generates the value of the calculated data point. It is displayed across several windows, which allow you to set the attributes of the calculated data point and assist you in editing the expression. Use the toolbar at the top of the dialog box to validate, save and close the expression, or to undo the last change to the expression.
Page 184
Window Description in the expression. Double-click on an item to insert it at the cursor location in the expression window. The various operators are described in the sections below. Expression Used to enter and edit the expression to be evaluated. You can type the (empty window at expression directly or use the memory-jogging windows described above.
Page 185
17.1.4.1 Data Point Names in Expressions To use a data point in an expression, simply type the name of the data point. Make sure to include the prefix, if applicable. A data point name used in an expression must adhere to the following Visual Basic-like notation: It must begin with a letter.
Page 186
17.1.4.4 Mathematical Functions You can use the following built-in mathematical functions in expressions: Function Description Abs( x ) Calculates the absolute value of x. Pow( x, y ) Calculates the value of x to the power of y. Sqrt( x ) Calculates the square root of x.
Page 187
IsTrigger( point ) Evaluates to TRUE if the specified point causes the expression to be reevaluated. QualityOf( point ) Evaluates to TRUE if the value of the specified data point is valid. TimestampOf( point ) Returns the timestamp of a point, as a number of milliseconds that have elapsed since an internal reference date and time.
Page 188
17.1.4.7 Arithmetic Operators You can use the following arithmetic operators in expressions: Operator Description + [Add] Calculates the sum of the left and right operands. - [Subtract] Calculates the difference between the left and right operands. * [Multiply] Calculates the product of the left and right operands. / [Divide] Divides the left operand by the right operand.
Page 189
17.1.4.9 Logical Operators Logical operators are used to combine the results of logical expressions such as comparisons. You can use the following logical operators in expressions: Operator Description Evaluates to TRUE if the left and right operands are both TRUE. Evaluates to TRUE if either the left or right operand is TRUE.
17.2 The Soft PLC The Soft PLC is an optional software module available on all models. Using this module, you can create automation scripts that access the data points in the SMP Gateway’s real-time database in order to create sophisticated control functions. Since the Soft PLC is part of the SMP Gateway’s internal architecture, the scripts you define can be used to: create new logical data points, with values based on the result of calculations performed on...
17.2.2 Using CoDeSys to Create SMP Gateway Automation Scripts While a detailed description of how to create automation scripts is beyond the scope of this document, the process can be summarized in the following steps: Install the CoDeSys development system on your PC. Start CoDeSys and install the SMP Target Support Package.
Using Syslog with an SMP Gateway Syslog is a method for delivering log information from a sender to a receiver, typically across an IP network. Typically used for computer system management and security auditing, Syslog is supported by a wide variety of devices and receivers across multiple platforms. Because of this, Syslog can be used to integrate log data from many different types of systems into a central repository.
Page 193
Expand the branch you just created and select the General branch. Select the time zone used by the receiver server. If the server is configured for daylight saving time schedule adjustments, select the Auto Adjust DST checkbox. Select the Receiver branch. Type the server’s name and IP address. Leave both port numbers to their default value, which are set to 514.
The 2 SMP Gateways in a group must have identical configurations and be physically connected to the same substation devices. The active SIOM, which comes as an option with the SMP 4-20 • 181 SMP Gateway User Manual...
SMP 8-40, also supports redundancy and can therefore be used to connect serial devices to 2 redundant SMP 4-20s or SMP 8-40s. 19.1.1 Redundant IEDs When needed, breakers can be monitored and controlled by multiple protection relays to make sure that a fault is always detected;...
19.2 Grouping 2 SMP Gateways for Redundancy Basic SMP Gateway redundancy consists of an active SMP Gateway and a standby SMP Gateway. The active gateway is polling the devices and communicates with the control center as if it was a stand-alone system. The active and standby gateways are communicating with each other so that when the active gateway fails, the standby one becomes active.
Page 198
From the Redundancy menu, click Group SMP Gateways to display the Group Properties dialog box. The Group Properties dialog box allows you to specify redundancy settings such as the virtual IP address, the LAN and serial connections to be used, and the conditions that have to exist for the SMP Gateways to switch roles.
Page 199
The Links tab is used to specify the 2 connections that will be used to link the redundant SMP Gateways to each other. These can be any combination of LAN or serial connections. The SMP 4-20 supports 1 LAN connection, while the SMP 8-40 and the SMP 16 can support 2. The active SMP Gateway uses these links to send regular heartbeat messages to the standby SMP Gateway.
Page 200
The Failover tab defines optional conditions that will trigger a failover such as: The system available memory falls below a defined threshold. Low-voltage alarm detected on the unit power supply. For 16/CP-PM and 16/SG-PM, SMP 8-40, 4-20, a high-temperature alarm. The unit’s network connections failed.
19.2.2 SMP Manager’s Redundancy Column The Redundancy column shows the current state of each SMP Gateway within a redundancy group. In the previous section’s example, the second SMP Gateway is on hot standby. This happens if the data points of the devices connected to the SMP Gateways have been configured for hot standby (for details, see “Hot Standby”, page 191).
A warning message appears, telling you that SMP Manager will use the default redundancy settings and asking you if you want to go on. If you reply in the affirmative, the Group Properties dialog box appears and you can change the settings to your liking. When you close the dialog box, both SMP Gateways will have the same settings.
19.3.2 Additional Failover Conditions It is possible to define additional failover conditions to have a better control of which SMP Gateway is active. The failover conditions are defined in the SysServerConfig.txt file and that file can be uploaded to the SMP Gateway as any other file. In this file, 16 additional error conditions can be defined which will force a failover.
The GRP LED on the front panel of the SMP 16 displays the redundancy status, as does the ST2 LED on the front panel of the SMP 4-20 and SMP 8-40. Refer to your SMP Gateway installation guide for details.
Note further, that if there are other models in your SMP Gateway list that support only one IP address, such as the SMP 4 or the SMP 4-20, toggling back and forth between the first and second IP address will have no effect. You will see the same logs, traces and statistics, regardless of which address you specify.
10.2.15.3 10.2.15.1 10.2.15.2 ACTIVE HOT STANDBY 1. The active SMP Gateway receives data from the device. 2. The standby SMP Gateway is updated. 3. Data is sent to the control center by both SMP Gateways. Note: The public IP address is always associated with the active SMP Gateway. When the control center wants to connect to the standby SMP Gateway, it needs to use the physical IP address.
Setting Up the SNMP Server The SNMP server is an optional software module that allows the SMP Gateway to export statistics using the SNMP standard (Simple Network Management Protocol). The SMP Gateway’s SNMP agent publishes and supports both standard MIBs (management information bases) that are supported by the Windows CE operating system and custom MIBs that are supported by the SMP Gateway application.
Page 208
Start a Telnet session: From the Tools menu, click Telnet. In the Telnet window that appears, type the following command: snmpmgr SNMP manager lists all available commands, as shown next: \> snmpgr SNMP Manager Available commands (case insensitive): Add a client. Remove a client.
Time Adjustment This chapter describes the different time adjustment features of the SMP Gateway. 21.1 Monitoring Time Information The SMP Gateway offers multiple ways to monitor the time information and statuses: Some system data points provide time information. They are all prefixed by “_smp___clock” and are visible using the SMP Gateway’s web server (see “Using a Web Browser to View Data in Real Time”, page 59).
Select the SMP Gateway for which you want to adjust time. From the Gateway menu, select Set Time. The Set Time dialog box will appear. Select whether the SMP Gateway’s clock will be set to UTC or Local Time. If you selected Local Time, select the time zone to use for the time conversion. Select Apply daylight saving time if needed.
Here is a list of the possible time adjustment solutions that are available for the different Cybectec SMP Gateway types: Modulated Demodulated SMP Gateway model Protocol SNTP IRIG-B IRIG-B √ √ SMP 4-20 √ √ SMP 8-40 √ √ SMP 4 √ √ √ √...
Note: IRIG-B signals come in two flavors: demodulated and modulated. Demodulated IRIG-B signals cannot be carried over long distances while the modulated IRIG-B can be carried over distances larger than 350 meters (1000 feet) without degrading. NTP stands for Network Time Protocol, and is a standard Internet protocol used to synchronize the clocks of computers to a time reference.
If your IRIG-B source provides its time information as “local” time, instead of UTC, some software configuration is required on the SMP Gateway, as the gateway internally uses UTC. Using SMP Config, proceed as follows: Under the System branch, select Time. If the Time instance has not been created yet, type a name in the blank Name text box, and then click again the Time branch.
21.3.5 Using a SCADA Protocol’s Time Adjustment Feature When no external time source is available to the SMP Gateway, the SCADA or control center can itself serves as a time source, if the protocol it uses to communicates with the gateway supports time adjustment (synchronization).
Also, the SMP Gateway does not perform accurate time-tagging when I/O changes are received from a device, because the transmission delay is unpredictable. For the time tag to be accurate, the device must time-tag the I/O changes itself. The following sections present the various time distribution features of the SMP Gateway. 21.4.1 Configuring IRIG-B Time Distribution IRIG-B time distribution is the ability, for an SMP Gateway, to distribute time adjustment...
Open SMP Config. Under the System branch, select SNTP. If the SNTP instance has not been created yet, type a name in the blank Name text box. Under the SNTP instance branch, select the Server branch. Select the Enabled checkbox. Select from the Accessible From list box whether it will be accessible from any computer or a specific one.
SMP Tools Remote Access to the SMP Gateway You may want the SMP Tools to connect to an SMP Gateway that is not itself connected to your network. You would typically do this by setting up a dial-up connection and using a modem to call the SMP Gateway from your PC.
Page 218
You must perform the steps in the order presented in the table. Step To do this Follow these steps: Set up the Perform this step for each SMP Gateway with which you want to SMP Gateway to communicate via modem. accept a dial-up Start SMP Manager.
Page 219
Enable modem compression checkbox. 15. Click the Networking tab, and then click Settings. 16. If you are using an SMP 4-20 or an SMP 8-40: In the PPP Settings dialog box, clear the Enable LCP extensions checkbox, the Enable software compression checkbox, and the Negotiate multi-link for single link connections checkbox.
SMP Gateway, such as “SMP Gateway via modem”. SMP Gateway If you have an SMP 4-20 or an SMP 8-40: Type 100.100.100.1 in the First IP Address box. Type 100.100.100.2 in the Second IP Address box.
Page 221
Step To do this Follow these steps: From the Tools menu, click Telnet. Type RASMGR to start the RAS Manager application. Type “L”, to display the device list. The device list is actually the list of ports on the SMP, including the console port. Type “M”, to modify the SMP COM port you will use for the direct connection.
SMP Gateway, such as “SMP Gateway direct connection”. SMP Gateway If you have an SMP 4-20 or an SMP 8-40: Type 100.100.100.1 in the First IP Address box. Type 100.100.100.2 in the Second IP Address box.
22.2.1 Setting Up a Dial-Up (Modem) Connection The following table outlines the procedure for setting up a dial-up (modem) connection between a PC running Windows 2000, and an SMP Gateway. You must perform the steps in the order presented in the table. Step To do this Follow these steps:...
Page 224
Enable modem compression checkbox. 12. Click the Networking tab, and then click Settings. 13. If you are using an SMP 4-20 or an SMP 8-40: In the PPP Settings dialog box, clear the Enable LCP extensions checkbox, the Enable software compression checkbox, and Negotiate multi-link for single link connections checkbox.
Type 100.100.100.1 in the First IP Address box. Type 100.100.100.2 in the Second IP Address box. If you have an SMP 4 or an SMP 16: In the First IP Address box, type the IP pool starting address that you specified when you installed your SMP Gateway (see your SMP Gateway’s installation guide).
Page 226
Step To do this Follow these steps: Under Manufacturers, click Standard Modem Types. Under Models, click Communications cable between two computers. Click Next. Click Selected ports. Click the communications port (COM1 or COM2) you want to use for the communications cable. Click Next. Click Finish. Click OK to close the Phone and Modem Options dialog box.
Page 227
SMP Gateway, such as “SMP Gateway direct connection”. with the SMP Gateway If you have an SMP 4-20 or an SMP 8-40: Type 100.100.100.1 in the First IP Address box. Type 100.100.100.2 in the Second IP Address box.
SMP Gateway, and the modem port replaces one of the serial ports. On the SMP 16/CP and SMP 16/SG, the modem is internal and has its own port. With the SMP 4-20 and SMP 8-40, you have to use an external modem, which you plug into a serial port. Note that will all SMP Gateway models, you can always plug an external modem into any serial port.
23.1 Specifying which serial ports have modems To indicate that a modem is connected to a specific serial port: Start SMP Config from the SMP Manager window. In the left pane, click Serial Ports. In the right pane, in the Interface drop-down list of the corresponding serial port, click Modem Asynchronous.
Setting Description Type The communications protocol supported by the modem pool. The default value – automatic – means that the supported protocol will be determined automatically. Allowed values: Automatic IEC 60870-5-101 Default value: Automatic Dispatcher Address Size The size of the DEVICE ADDRESS, in bytes. This setting is taken into account when a frame is sent or received, since it affects the size of the frame.
Page 232
In the right pane, choose a modem pool in the drop-down list for each modem. This will add the modem to the modem pool. Edit the modem settings for each modem (see following table). In the left pane, click Asynchronous Serial Ports. In the right pane, edit the serial port settings for each modem.
23.4 Adding a modem pool master connection A modem pool master connection is used by a protocol component to make outgoing calls to a device. This connection makes the link between the protocol component and the modem pool. To add a modem pool master connection, proceed as follows: In the left pane, click Connections, then on Modem Masters.
One of the SMP Tools is specialized in carrying files from the computer to the gateway: SMP Loader. This tool is mainly used for SMP 4-20 and SMP 8-40 models, and is described in the section “SMP Loader”, page 234).
Updating the SMP Tools on the PC Whenever you receive a new version from Cooper Power Systems, with a new version or release of the SMP software and tools, you will start by updating the SMP Tools on your PC. Much more rarely, you may need to update JRE (Java 2 Runtime Environment).
Page 237
The SMP Gateway application, which implements all the functionalities of the SMP Gateway. The SMP Gateway firmware update process differs, whether the gateway is an SMP 16/SMP 4 or an SMP 4-20/SMP 8-40. 24.3.1.1 SMP 16 or SMP 4 To update the firmware, execute the following steps in the order presented here: If need be, update the secondary bootstrap program, with the SMP Loader tool.
“Troubleshooting”, page 247. 24.3.1.2 SMP 4-20 or SMP 8-40 To update the firmware of these SMP Gateway models, you will use SMP Loader. You will find detailed instructions on under “SMP Loader”, page 234.
Under Program Files\Cybectec\SMP Tools\Manager\SMP Software Libraries, select folder SMP 16, SMP 4, SMP 4-20 or SMP 8-40, depending on your SMP Gateway model. Choose the SMP Gateway application version that you want to send to the SMP Gateway. The file has the extension “.app” and its name indicates the application version. For example, a file called SmpApp 1.14R2.app contains version 1.14, release 2, of the SMP Gateway...
Activating a New License Whenever you contact Cooper Power Systems to request support for a new device that you want to connect to your SMP Gateway, or to add support for a particular option for your SMP Gateway, Cooper Power Systems will provide you with a new license.
Page 241
If you are updating the license information for a group of SMP 4-20s or SMP 8-40s that have the same license ID, you can simplify the task as follows: Type the license ID and key (both rows) of the first SMP Gateway. The license ID you have just typed gets added to the License ID drop-down list, and SMP Manager keeps track of the associated key.
Page 242
Here is a brief explanation of the classes shown in the dialog box: Class 1 includes commonly used protocols such as DNP3, Modicon MODBUS, SEL and IEC60870-5. Class 2 currently includes only UCA 2.0. Class 3 currently includes ICCP and 61850. 228 •...
Miscellaneous SMP Tool Features This section presents SMP Manager and SMP Config commands that provide useful capabilities, and that were not discussed in other sections of the document. 26.1 SMP Manager Features SMP Manager has a number of handy features: Displaying only those SMP Gateways with which SMP Manager is currently in communication.
Select the format you want to use to display time information in SMP Manager: Local Time. Time information obtained from SMP Gateways will be adjusted to your PC’s time zone and daylight saving time information. UTC. Time information obtained from SMP Gateways will be displayed as is. Under Cybectec Enterprise Solutions, you will find settings that are specific to global security, which is not covered by this manual.
_smp___clockSynchronized If set to 1, this binary input point indicates that the (available on SMP 4 and SMP 16) SMP Gateway’s internal clock is actually synchronized with an external time source, such as GPS or IRIG-B. _smp___battery_ok If set to 1, this binary input point indicates that the clock’s...
Page 246
Data Point Name Description Local Control _smp___setLocalControl This binary output point allows you to switch from local control (by a local HMI, such as Visual Substation), to remote control (by the SCADA). _smp___localControl indicates the current control state of the SMP Gateway. _smp___localControl If set to 1, this binary input point indicates that the SMP Gateway is actually controlled locally, by Visual...
Page 247
Data Point Name Description _smp___<connection>InUse If set to 1, this binary input point indicates that the passthrough connection is currently active. System Folders (for each system folder named <folder name>) _smp___Folder<id><folder name> If set to 1, this binary input point indicates that the system _Available folder is available to the SMP Gateway.
Data Point Name Description used as a failover condition. _smp___rsLan_ok If set to 1, this binary input point indicates that the SMP Gateway’s access to the LAN is operational. This point’s state can be used as a failover condition. _smp___rsVoltage_ok If set to 1, this binary input point indicates that the SMP Gateway’s power supply’s voltage is within its normal range of operation.
To update Windows CE, the resident diagnostics, the primary bootstrap program, or the secondary bootstrap program of an SMP 4-20 or an SMP 8-40. You can, in fact, load Windows CE and the resident diagnostics with SMP Loader, but you should use SMP Manager unless there is a problem.
To put the SMP Gateway into Command mode, you simply need to reset the SMP Gateway. Proceed as follows, depending on the SMP Gateway model: SMP 4-20 or SMP 8-40: Hold down the reset button until all the LEDs (power, watchdog timer, ST1 and ST2) simultaneously turn amber.
As you can see, the SMP 16 display only shows Windows CE (in the example, version 4 is loaded on the SMP 16). The same applies to an SMP 4. The SMP 8-40 screen shows Windows CE and the resident diagnostics, and each file name is preceded by the board – A or B – on which the file is located.
Page 252
Click Send from the File menu. The Send one of more files dialog box appears. Point to SMP Tools\Manager\SMP Firmware Libraries, and then to the SMP 4, SMP 4- 20, SMP 8-40 or SMP 16 folder, depending on the model of SMP Gateway.
Unexpected events, such as a blackout during a bootstrap program file’s transfer, could cause a bootstrap program to become corrupted. For an SMP 4-20 or SMP 8-40, this can happen to the primary or the secondary bootstrap; for an SMP 4 or SMP 16, it can only happen to the secondary bootstrap.
Page 254
Corrupted secondary bootstrap If the secondary bootstrap of your SMP Gateway is corrupted, use one of the following procedures. SMP 4 or SMP 16 Contact Cybectec Technical Support. SMP 4-20 or SMP 8-40 Normally, SMP Loader communicates with the secondary bootstrap program of the SMP Gateway.
Telnet-Based Functions Telnet access to the SMP Gateway provides you with a command line prompt for running tools and low-level commands on the SMP Gateway. Telnet tools are gradually being replaced by Windows-based tools. If you feel more at ease with the command line interface, you can use the following commands: FirewallMgr (Firewall Manager) Time and Date.
If you have setup a firewall using a previous version of the SMP Gateway software, you can still use Firewall Manager to set up rules. However, these rules will be overridden if you set up a firewall instance using SMP Config (see “Configuring the Firewall”, page 104). Note: To use Firewall Manager, the user must have the System Management privilege for the SMP Gateway.
27.2.4 Q Command The Q command is used to exit the firewall manager. 27.3 Time and Date You can now set the SMP Gateway’s date and time using SMP Manager, as described in the “Setting SMP Gateway’s Internal Clock” section, page 195.But the Time and Date Telnet commands are still available for that matter.To set the SMP Gateway’s time: In the Telnet window, type the following command at the prompt: time...
To use Clock Manager, proceed as follows: In the Telnet window, type the following command at the prompt: clockmgr Clock Manager displays the list of available commands, as the following shows: Clock Manager. Available commands (case insensitive): Note: Use "SMP Config" to change the clock configuration. Display the current settings.
Page 259
In the Telnet window, type the following command at the prompt: elomgr.exe /c To learn how to recalibrate the touch screen, see “Calibrating the Touch Screen”, page 151. • 245 SMP Gateway User Manual...
, to find answers to frequently asked questions (FAQ). Also, if your problem seems to be related to a protocol instance, you can refer to the Cooper Power Systems documentation for the particular protocol. To access the document, proceed as follows: Click Start on Windows’...
In the upcoming sections, we will take you through the steps required to solve your problems. If after going through all the required procedures, you find that you need to contact Cooper Power Systems’ Cybectec Technical Support, you will need to create a report file. This file will help the technical support team in identifying and solving the problem.
Click Save to start the report generation. The Gateway Report progress dialog box appears, showing each operation performed and when the report generation is complete, the dialog box indicates the completion status of the operation. Click the dialog box’s Details button to display the event log for the report generation. Click the Close button to close the dialog box.
Proceed as follows to correct the problem: Create a configuration file using SMP Config, if you have not already done so. Use SMP Manager to send the file to the SMP Gateway. Restart the SMP Gateway using SMP Manager, in order to activate the configuration. 28.2.2 Protocols Failed If the status is “Protocols failed”, it may be due to one of the following reasons:...
If the problem persists after the SMP Gateway has restarted, try using a reduced version of the configuration file, in an attempt to isolate the problem. For example, use a configuration file that has only one device and one protocol instance. 28.2.3 Critical Components Missing If the status is “Critical components missing”, there is a missing component in the SMP Gateway...
28.3.1 Physical Layer The physical connection between the SMP Gateway and a device is often at the root of a problem. You should therefore ask yourself the following questions: Am I using the correct type of cable? Do I need to use a cable for RS-232 or for RS-485 communications? Should I be using a 2-wire or a 4-wire cable for RS-485 communications? Is the device connected properly? Make sure the cable is connected to the correct port.
Verify the packet size. Make sure all scanning sequences are configured. Does the device support the scanning parameters? Different versions of the same device sometimes react differently. We suggest you take the following steps: Examine the protocol layer byte exchanges, using SMP Trace and SMP Stats. Using SMP Config, make sure you have specified the correct protocol.
For example, for the DNP3 protocol, Control Type requires a value other than “Not supported”. See the device manufacturer’s documentation for the required setup and refer to the appropriate Cooper Power Systems protocol documentation. Refer to the device manufacturer’s documentation to check whether the device allows for a polling message to be sent between a select and an operate or whether polling has to wait until after the select and operate have completed.
Page 269
Proceed as follow: Connect your PC to the SMP Gateway’s console port using an RS-232 serial cable. Start a terminal application such as HyperTerminal. Configure the communications settings to use the serial port connected to the SMP Gateway. Set the port speed to 115,200 bps. Restart the SMP Gateway.
Need help?
Do you have a question about the SMP 4 and is the answer not in the manual?
Questions and answers