ABB RELION 670 SERIES Manual page 22

Section 3
Secure system setup
Port Protocol Default
state
2102 TCP open
20 000 TCP closed
20 000 UDP closed
49152 UDP closed
49200 TCP closed
—
49215
4711 TCP closed
4712 TCP closed
4713 TCP closed
—
4718
8910 UDP closed
—
8915
16
Front 301 302 303
ON ON ON ON
OFF OFF OFF OFF
OFF OFF OFF OFF
ON ON ON ON
ON ON ON ON
OFF OFF OFF OFF
OFF OFF OFF OFF
OFF OFF OFF OFF
OFF OFF OFF OFF
In addition to FTP, SPA, and IED configuration protocol, the IEDs support the
following Ethernet communication protocols:
• IEC 61850
• DNP3.0
• IEEE1344/C37.118
These communication protocols are enabled by configuration. This means that the
port is closed and unavailable if the configuration of the IED series does not
contain a communication line of the protocol. If a protocol is configured, the
corresponding port is open all the time.
See the IED series technical manual and the corresponding protocol
documentation on how to configure a certain communication
protocol.
There are some restrictions and dependencies:
• The port used for IEC 61850 (default TCP port 102) is fixed and cannot be
changed.
• The ports used for DNP3 are configurable. The communication protocol DNP3
could operate on UDP (default port 20 000) or TCP (default port 20 000). It is
304 3061 3062 Service
ON OFF OFF PCM Access
(IED
configuration
protocol)
OFF OFF OFF DNP3.0
OFF OFF OFF DNP3.0
ON OFF OFF SNTP Client
ON OFF OFF FTPS
OFF OFF OFF IEEE1344
OFF OFF OFF C37.118
OFF OFF OFF C37.118/
IEEE1344
Command,
header and
configuration
OFF OFF OFF C37.118/
IEEE1344
Data and
configuration
1MRK 511 399-UEN B
Comment
IED configuration protocol
DNP3.0 DNP communication only
DNP3.0 DNP communication only
Enabled when IED is configured
as SNTP client.
TCP data ports for FTP PASV
command. Ports opens on
demand.
Phasor measurement
Phasor measurement
Phasor measurement
Phasor measurement
670 series 2.2 IEC
Cyber security deployment guideline