Do you have a question about the WCC Lite and is the answer not in the manual?
Questions and answers
Summary of Contents for Elseta WCC Lite
Page 1
ELSETA WCC Lite User manual Elseta 2020/04/07 Doc version: 1.4.0 HW version: 1.2 FW version: 1.4.0...
Page 2
UAB Elseta that identifies products manufactured by Elseta. All of the products copyrights belong to Elseta. These documents and product properties cannot be changed without the knowledge and written consent from Elseta. This document may be modified by company UAB Elseta...
Page 3
It is crucial to adhere to laws and regulations of the jurisdiction the WCC Lite is being installed at. This product should not be implemented or resold to install in highsecurity areas such as: nuclear power plants, aircraft navigation, military equipment, transport traffic management or in other areas where equipment failure or malfunction can result in hazardous, lifethreatening consequences of...
Page 4
• If the WCC Lite components obtained mechanical damage. • If the WCC Lite was disassembled not as described in service and installation manual. • If the WCC Lite failure was due to deliberate or inadvertent user’s fault.
Page 9
19.1 Overview ......... . . 143 19.2 Using WCC Lite as MQTT Client ......143 19.3 MQTT data format .
Page 10
21.2.2 Web interface permissions ......153 21.3 Conformance to IEC 62351 standard ......155 22 Changelog 23 Information about the equipment manufacturer...
Page 11
2020/04/07 1 Overview This document is intended to act as a user manual and explain WCC Lite usage in detail. It is expected the person referring to this manual is experienced in programmable logic controllers (PLC), networking (IPv4, ethernet) and the use of the operating system of choice (Windows, Linux, Mac, etc.).
Page 12
• File based database • Data buffering in case of network outage Data security • All data between WCC Lite and Cloud based SCADA exchange over secure encrypted VPN tunnel • Firewall to prevent intrusion and DoS attacks • VPN solution with VPN gateway can be used to manage...
Page 13
WCC Lite user manual 2020/04/07 Device maintenance It is possible to configure and monitor devices and protocols connected to the WCC Lite through Elseta cloud based SCADA system CloudIndustries.eu or 3rd party SCADAs and see devicebased alarms such as communication errors, etc.
Figure 1: Front panel status indication 4.2 Reset button The reset button is located on the front panel of WCC Lite, to access it, remove a transparent front panel cover. Different time lengths of button pressing call different behaviour. Table 2: Possible Reset button behaviour...
WCC Lite has pushpush type microSIM card connector with card detection function. The connector is located on the front panel of WCC Lite. To access it, remove a transparent front panel cover. To insert a SIM card gently push it inside (see Figure below) until it locks in place. Press again to release and remove the card.
Figure 4: WCC Lite SIM card slot 5.4 DualSIM card slot WCC Lite has optional DualSIM card modem. To access both SIM cards, remove a transparent front panel cover and press through marked hole with small tool until SIM holder pops out.
6 Interfaces 6.1 Serial port interfaces WCC Lite WCC Lite has 2 serial ports (Figure 7). Selectable RS485 (by default) or RS232 interface on PORT1 and RS485 interface on PORT2. WCC Lite RS485 interface supports baud rates up to 115200 and has an integrated 120Ω termination resistor.
Page 18
Note: Double check if A and B wires are not mixed up. WCC Lite 3wire RS232 interface is available on PORT1 and can be selected by user (see Port settings). Baud rates up to 115200 are supported. See typical RS232 connection diagram on figure...
Page 19
WCC Lite user manual 2020/04/07 Figure 8: Typical WCC Lite RS485 connection diagram Figure 9: Typical WCC Lite RS232 connection diagram 1.4.0 | ELSETA | Interfaces...
6.2 Relay output WCC Lite integrates 1 signal relay (3way RO connector) with COM (common), NC (normally closed) and NO (normally open) signals. Figure 10: Signal relay connector Maximum switching power is 60W, maximum contact current is 2A, maximum switching voltage is 60VDC/60VAC.
Page 21
WCC Lite user manual 2020/04/07 • With dual SIM modem (HW version 1.0 1.2) 2G/4G (GPRS, EDGE / LTE) Cat 1 version 10.3Mb/s upload, 5.2Mb/s download. LTE bands 3, 7, 20. GSM bands 900, 1800. Modem chip ...
6.4 WiFi In case a Wifi connection is needed, connect a Wifi antenna to the SMA connector labeled “WIFI“. Select a good antenna placement spot considering the operation environment. Make sure the signal level is over 80dBm to have a stable connection to the network. Figure 12: WiFi antenna connector...
Commonly used in storing digital states single point values have only one bit of information. The value of such tags can be either one or zero. On the internal web of WCC Lite states of this type of tags are shown in colored boxes with customisable label.
WCC Lite is configured via an internal web browser, so no additional software is required. 8.1 Initial setup WCC Lite comes with static network configuration with its IP set to 192.168.1.1. For initial setup set a static IP address on your computer and connect your network card to the WCC Lite with an ethernet cable.
Page 25
WCC Lite user manual 2020/04/07 3. Click on Change adapter settings from the left side menu. 4. Rightclick on the Local Area Connection icon, then select Properties. 1.4.0 | ELSETA | Internal web page...
Page 26
5. In the window that opens, click on the Internet Protocol Version 4 (TCP/IPv4) (you may need to scroll down to find it). Next, click on the Properties button. 6. In the window that opens, click the Use the following IP address radio button. Fill the following fields and click OK: •...
• Mozilla Firefox • Internet Explorer 8 or later Log in with the root user: • Username: root • Password: wcclite It is recommended to change the password immediately to avoid any unauthorized access. 1.4.0 | ELSETA | Internal web page...
Before plugging WCC Lite with a static IP address to the local computer network, make sure to check if such address is not already reserved by other devices. 8.2 Site layout It provides the main navigation through the website. Contains the following sections: •...
Manual configuration allows to create fine tuned device configuration that can later be exported as a template. Create new device: Device creation is performed by selecting it’s working protocol and configuring it’s name, slave address and communication settings. Existing device configuration is 1.4.0 | ELSETA | Internal web page...
Page 30
performed similary. Name: Device name to be used further in signals and events Description: Short device description Alias: An unique alphanumeric string that identifies this device. If alias is left blank, it will be generated automatically. Enable: If disabled, configuration for this device will be ignored and it’s measurements will not be updated Event history size: Number of device measurements to keep in events history.
Page 31
Retry Count: This number indicates the retry limit when communication has failed When job is created and configuration is applied, WCC Lite immidietly starts sending data requests to configured port. Tag settings needs to be configured for data extraction from job.
Page 32
Name: Name for one measurement, e.g. ”Temperature” or ”Energy consumption” Type: Tag type Alias: An unique alphanumeric string that identifies this device. If alias is left blank, it will be generated automatically. Enable: If disabled, configuration for this tag will be ignored and measurements will not be updated Function: A specific instruction to communicate with device.
Page 33
Name: Name for one measurement, e.g. ”Temperature” or ”Energy consumption” Integer mask (AND): Add other tags values: Source tags: Source alarms: Minimum value: Maximum value: Threshold units: Absolute threshold: Integral threshold: Integral threshold interval (ms): Suppression time (ms): Suppression values: 1.4.0 | ELSETA | Internal web page...
Poll delay: Minimum time delay in milliseconds to wait before sending any data on port. This is useful when devices fail to respond when data is transmitted too fast. Port mode: Mode selection for port. WCC Lite has first port selectable between RS232 and RS485 interfaces.
The ”Tag Values” window displays a measurement list that contains information about tag states. Several columns can be sorted and filtered. By clicking the magnifying glass icon measurement history is shown (if recording is enabled). 1.4.0 | ELSETA | Internal web page...
SOE is the timestamped status data. SOE allows to review latest events and changes for device’s state changes in chronological order. Newest events are shown at the top of the list. WCC Lite will timestamp the status data with a time resolution of one millisecond.
WCC Lite user manual 2020/04/07 8.3.6 Imported signals Imported signals section shows basic information about applied configuration. This section is view only. For signals and their states refer to “Protocol Hub” section “Signals” 1.4.0 | ELSETA | Internal web page...
8.4 Status Status tab in a graphical interface includes various statuses of the device and contains the following subsections: • OVERVIEW: brief summary of main system parameters; • FIREWALL: current IPv4 and IPv6 firewall status; • ROUTES: active route rules on the system; •...
Page 39
DNS: IP address of DNS server. Expires: DHCP lease expiration time of the connection. Connected: The time a device has been connected. Active Connections: The number of the active connections with the device. DHCP leases 1.4.0 | ELSETA | Internal web page...
Page 40
DHCPv4 and DHCPv6 lease expiration time. Hostname: The label that is used to identify the device in the network. IPv4Address: IPv4 address of network interface. MACAddress: The media access control address of IPv4 network interface. DUID: DHCP Unique Identifier of IPv6 network interface. Lease Time remaining: The amount of time the device will be allowed connection to the Router.
NAT table has the following builtin chains: Prerouting – to modify packets as soon as they arrive, Postrouting – to modify packets when they are ready to go on their way. Mangle table 1.4.0 | ELSETA | Internal web page...
Page 42
has one builtin chain: Forward for transiting packets through the firewall. Pkts.: The packets processed by the firewall. Traffic: The amount of data processed by the firewall. Target: The chain of the table of the firewall. Prot.: The transport layer protocol processed by the firewall. In: The network interface for the input chain processed by the firewall.
Metric: The number of hops required to reach destinations via the gateway. Table: The type of routing tables: main (default), local (maintained by the kernel). IPv6 Neighbours: The devices on the same network with IPv6 addresses. 1.4.0 | ELSETA | Internal web page...
8.4.4 System Log System log window shows a table containing the events that are logged by the device. It has the following columns: • # (sequence number); • Time (day of the week, month, day of the month, time and year); •...
Kill: To end the process immediately. 8.4.7 Realtime graph Realtime Load CPU utilization graph. Load of 0.5 means the CPU has been 50% utilized over the last period. Values over 1.0 mean the system was overloaded. 1.4.0 | ELSETA | Internal web page...
Page 46
Realtime Traffic Graphs representing the status of the virtual and physical network interfaces of the device. Inbound: The speed at which the incoming packets arrive at the device. Outbound: The speed of the packets which were originated by the device. Phy.
Page 47
TCP: Transport layer – Transmission Control Protocol. Network: Type of the network layer – IPv4 or IPv6. Source, Destination: IP address and the port number. Transfer: The amount of the transferred data in kB and packets. GSM signal quality 1.4.0 | ELSETA | Internal web page...
Graph representation of gsm modem receiving signal quality. RSRP RSRQ graph is showed, when connected to 4G/LTE network, RSSI when 2G/3G networks are used. RSSI: Received Signal Strength Indicator in dBm. RSRP: Received Signal Reference Power in dBm. RSRQ: Received Signal Reference Quality in dBm.
Page 49
Radio access tech.: Current radio technology used (2G, 3G or 4G). Active SIM: Shows which SIM card is active (if the modem is Dual SIM). Roaming status: Current status of roaming (”Off”, ”On”). 1.4.0 | ELSETA | Internal web page...
Little bars with percentage at the center left shows signal strength. It is calculated with the respect to current radio access technology used (RSSI or RSRP). Two buttons at the bottom can reset (coldreset) modem or manually switch SIM cards (if it is Dual SIM modem and both cards are enabled).
Page 51
Interfaces to be monitored can be selected in a configuration screen. It includes all the network interfaces configured in a system. To start or stop monitoring user should either select or unselect respective checkbox and save settings by pressing Save & Apply. 1.4.0 | ELSETA | Internal web page...
Basic aspects of the device can be configured. These include time settings, hostname, system event logging settings, language and theme selection. System properties General settings of the WCC Lite device are defined as follows: Local Time: Current local time. Hostname: The label that is used to identify the device in the network.
Page 53
WCC Lite user manual 2020/04/07 Logging settings of the WCC Lite device are defined as follows: System log buffer size: The amount of the records before writing these data to the disk. External system log server: IP address of the server.
Design: The theme of the Web interface of the device. Time synchronization WCC Lite has an NTP client to synchronize date and time with external sources. It is not the only source for synchronization, it can also be done using methods defined in IEC608705 protocols.
Page 55
Gateway ports: Allow remote hosts to connect to local SSH forwarded ports. SSHkeys SSH keys can be added via WCC Lite web interface. They might be helpful if the user logs into device frequently and does not want to always have to write his credentials.
For new certificate to come to effect user should restart the device. 8.5.3 Software Individual packages can be installed via WCC Lite web interface. They can either be installed using web link or selected from the predefined feeds. Various options can be selected when installing packages, however, default ones should work well enough and it’s advised to only change them for advanced users.
User can optionally run scripts and programs on device startup by putting them into a /etc/rc.local file. This file can be updated from WCC Web interface. 8.5.5 Scheduled tasks 1.4.0 | ELSETA | Internal web page...
Various tasks can be scheduled with the system crontab. New tasks can be included by creating and saving new rules conforming to cron rules. WCC Lite accepts full cron configuration functionality. Example in the pictures shows how to execute the disk usage command to get the directory sizes every 6 p.m.
8.5.7 LED configuration WCC Lite has three LEDs that can be configured: WAN, LAN and WLAN. All of the LEDs have a default configuration which should fit most of the cases. 1.4.0 | ELSETA | Internal web page...
Device: Network interface which is going to be tracked. 8.5.8 Backup/flash firmware Software update allows to upgrade the software running in WCC Lite. It is recommended to keep the device up to date to receive the latest features and stability fixes.
Page 61
Submit. To get the whole list files that would be backed up press Open list..It is advised to check it before doing a backup or an upgrade while keeping settings. 1.4.0 | ELSETA | Internal web page...
8.6.2 IPsec Background WCC Lite supports ipsec vpn, thus is able to deliver data securely over encrypted link. To establish ipsec vpn, a connection definition must be created by entering appropriate configuration settings. For advanced connection description auxiliary settings sets can be defined. They can be joined to the connection and can be reusable several times according to the need.
Page 64
Ipsec settings Connection description Options supported by wcclite is described below. Item Type Description Gateway string Host name or IP address of the remote peer. Type selector Tunnel mode: full packet encryption, covers hosttohost, hosttosubnet, subnettosubnet situations or transport mode: ip payload encryption, secures hosttohost data only.
Page 65
DH exponentiation selector Specifies DiffieHellman groups – optional 1,2,5,14,15,16,18 The following specification and topology map corresponds to settings used in further configuration walkthrough example. Creating a connection description SitetoSite VPN scenario VPN connection details 1.4.0 | ELSETA | Internal web page...
Page 66
Tunnel: demo0 ipsec.vpn.net aes256 IPSec peer IKE authentication thebigsecret sha256 Preshared key IKE hash Mode tunnel IKE DH group 5 (modp1536) 10.10.10.0/24 aes128 Remote network ESP authentication 10.10.12.0/24 sha1 Local network ESP hash wcclite Local ID If auxiliary data is needed, it is recommended to check or define it first. Creation of Phase 1 proposal •...
Page 67
• Examine indicator “configured”, it should be “yes”, if not, review settings just entered. • The tunnel should be prepared for operation and will be established on demand. • Optionally, it is possible to establish tunnel operation by pressing button “start”. 1.4.0 | ELSETA | Internal web page...
8.6.4 OpenVPN OpenVPN Instances The primary goal is to get a working WCC Lite tunnel and establish a basic platform for further customisation. Most users will require further configuration tailored to their individual needs. If you are creating an OpenVPN server (either type), you must create security certificates using the instructions below.
Once a connection occurs, the program attempts to set up the connection and open the serial port. If another user is already using the connection or serial port, the connection is refused with an error message. 1.4.0 | ELSETA | Internal web page...
8.7 Network The page shows information about current interface status, its configurations, provides various interface, network properties configuration capabilities and contains the following subsections: • INTERFACES: shows information about current interface status, allows to create new and configure them. • WIRELESS: shows information about wireless radio stations, covers physical settings of the wireless hardware.
Page 71
The following options can be defined in the interface creation panel: name of the interface, protocol, coverage of a particular interface or bridging with other interfaces. After the general setup is done, more detailed settings can be set. 1.4.0 | ELSETA | Internal web page...
Page 72
General common interface setup panel. Advanced common interface setup panel. Physical common interface setup panel.
Page 73
WCC Lite user manual 2020/04/07 Firewall common interface setup panel. DHCP server general setup panel. DHCP server advanced setup panel. DHCP server IPv6 settings setup panel. 1.4.0 | ELSETA | Internal web page...
Page 74
General Settings Information tab. Gives you name of physical GSM interface, lets you choose protocol (not recomended!). Note: Make sure you won’t change GSM interafce’s protocol, which is set by default to WWAN. Changing this parameter will lead to undefined GSM modem behaviour.
GSM configuration ends with firewall settings. A user can assign an already defined firewall zone or create a new one. 8.7.2 Wireless The wireless network interface parameters and configuration are described in this section. 1.4.0 | ELSETA | Internal web page...
Page 76
Configured interfaces for the physical radio device. Channel: Specifies the wireless channel to use. Bitrate: Specifies transfer rate in Mbit/s. SSID: The broadcasted service set identifier of the wireless network. Mode: Selects the operation mode of the wireless network interface controller. BSSID: The basic service set identification of the network, only applicable in adhoc or STA mode.
WCC Lite user manual 2020/04/07 General interface settings. Wireless security interface settings. Advanced interface settings. 8.7.3 DHCP and DNS DHCP server and DNS forward for NAT firewalls is described in this section. 1.4.0 | ELSETA | Internal web page...
Page 78
General DHCP settings. Resolve and hosts files settings. TFTP server settings.
Page 79
WCC Lite user manual 2020/04/07 Advanced settings. List of active DHCP and static leases. It is also possible to assign fixed IP addresses to hosts on the network, based on their MAC (hardware) address. 1.4.0 | ELSETA | Internal web page...
8.7.4 Hostnames List of existing host names. Addition or deletion is allowed for the user. 8.7.5 Static routes Routes specify over which interface and gateway a certain host or network can be reached. Current IPv4 and IPv6 static routes configuration. Interface: Lets to chose for which interface static route is created.
Page 81
MSS clamping: Change the maximum segment size (MSS) of all TCP connections passing through this zone with MTU lower than the Ethernet default of 1500. Additional actions can be performed with zones: add, edit, delete. 1.4.0 | ELSETA | Internal web page...
Page 82
Common properties of newly created or edited zones chan be edited in this panel. The input and output options set the default policies for traffic entering and leaving this zone while the forward option describes the policy for forwarded traffic between different networks within the zone. Covered networks specify which available networks are members of this zone.
Page 83
Traffic rules Traffic rules which define policies for packets traveling between different zones. Name: The name of the traffic rule. Match: Informs what ICMP types are matched. Action: Informs what action would be performed. 1.4.0 | ELSETA | Internal web page...
Enable: Enable (checked) or disable the rule. Sort: Allows to sort rules. The user can add, edit or delete traffic rules. For every rule can be defined these options: name, restrict to address family, protocol, match ICMP type, source and destination zones, source MAC, IP addresses and port, destination IP address and port, action and extra arguments, month and weekdays for which rule will apply, start/stop dates and times, time in UTC.
Enable: Enable or disable this SIM card. PIN code: PIN code to use on that SIM card. APN: APN to use on that SIM car. PAP/CHAP username: Username (if configured). PAP/CHAP password: Password (if configured). Modem parameters 1.4.0 | ELSETA | Internal web page...
Page 86
Pinger is a service which pings two hosts (primary and secondary) to check internet connection. If both of these hosts are unreachable pinger will wait and restart modem (or switch SIM card, if DualSIM modem is installed in WCC Lite) Disable: Disable pinger functionality.
Page 87
Table below shows, which card is expected on boot, when selectiom is made between Enable/Disable SIM cards and Primary card. Table 8: Default SIM on boot SIM 1 Enabled SIM 2 Enabled Priority SIM SIM on boot Undefined Undefined 1.4.0 | ELSETA | Internal web page...
8.7.9 Layer 2 Tunneling Protocol In computer networking, Layer 2 Tunneling Protocol (L2TP) is a tunneling protocol used to support virtual private networks (VPNs) or as part of the delivery of services by ISPs. It does not provide any encryption or confidentiality by itself. Rather, it relies on an encryption protocol that it passes within the tunnel to provide privacy.
Page 89
WCC Lite user manual 2020/04/07 3. Enter server name and authorization parameters: 4. Save and apply the new configuration. A new network interface will appear. 1.4.0 | ELSETA | Internal web page...
8.8 Logout To log out of the device graphical user interface a logout button in interface’s upper right corner should be pressed. A user is automatically disconnected after ten minutes of inactivity. This ensures that the device would not be suspect to any deliberate damage made by unauthorized access.
2020/04/07 9 API The firmware of the WCC Lite features a builtin API which is accessible via the web interface. As of version 1.2.11, it does not implement any access restriction features apart from those provided by the firewall functionality.
IP networks. SNMP exposes management data in the form of a hierarchy of variables in a MIB (Management Information Base). WCC Lite supports SNMP service which is not added to default build of firmware but can be installed as a module. It enables user to collect data on various parameters of system: •...
InterControl Center Communications Protocol (a part of IEC 608706), is used for intermaster station communications. Elseta’s DNP3 stack has both Master and Slave protocols implemented. Both of them are able to serve multiple serial (over physical RS485 line), TCP or TLS (over TCP) connections with high efficiency.
11.2 DNP3 Slave Default group and variation sets are used to send static and event values. If master devices support different groups and variations, they can be adjusted in Excel configuration. For more information check section Excel configuration. Table 11: Default signal variations Signal Static Variation Event Variation...
WCC Lite user manual 2020/04/07 12 DLMS 12.1 Overview DLMS (Device Language Message Specification) is a suite of standards developed and maintained by the DLMS User Association. COSEM (Companion Specification for Energy Metering) includes a set of specifications that define the transport and application layers of the DLMS protocol.
Before configuring the Device section it is best to first check the connection parameters with a 3rd party DLMS utility. Table 12: DLMS device configuration Parameter Description Type Default Example value serialnumber Meter serial number unsigned 1122334455 long slave_address Meter physical server address unsigned 1600 long...
13.1.1 Configuring datapoints To use Modbus Master in WCC Lite, it has to be configured via an Excel configuration. This configuration contains two Excel sheets where parameters have to be filled in Devices (Table 14) and Signals (Table 15).
Page 98
integer Slave ID Modbus ASCII mode (when Modbus RTU (for ascii bool selected). RTU/ASCII) Yes. ”timeout” parameter timeout_ms (timeout) integer Response timeout in milliseconds higher precedence Communication port (for device string (”PORT1”/”PORT2”) RTU/ASCII) (for baudrate integer Communication speed, baud/s RTU/ASCII) (for databits integer...
Page 99
Different device vendors can have different implementations of a Modbus protocol stack. A register table can be a one of the primary differences. WCC Lite Modbus Master transmits the most significant word (byte) first, however, devices from some vendors might require transmitting the least significant word (byte) first.
13.2 Modbus Slave WCC Lite can act as one (or several) of slave devices in a communication line. This can be used to transmit data to SCADA systems or other RTU devices. It can reply to a messages from Modbus Master with matching device and register addresses.
Internally stored values aren’t organised in a registerlike order, therefore mapping should be done by the user. This mapping includes setting an address of the device WCC Lite is simulating as well as function number, register number and how much 16bit registers are used to store a value. These values should be set in common_address, function, info_address and size columns respectively in the Excel configuration.
13.2.3 Debugging a Modbus Slave application If configuration for Modbus Slave is set up, handler for protocol will start automatically. configuration is missing or contains errors, protocol will not start. It is done intentionally to decrease unnecessary memory usage. Table 19: Modbus Slave command line debugging options Option Description h [ –help ]...
14.1.1 Configuring datapoints To use IEC 608705103 Master in WCC Lite, it has to configured via an Excel configuration. This configuration contains two Excel sheets where parameters have to be filled in Devices (Table 20) and Signals (Table 21).
Page 104
IEC 608705103 has an additional signal which can be configured to show communication status. It is used to indicate if the slave device has disconnected from master (WCC Lite). To configure such signal, two columns should be filled with particular values. To a newly created additional signal one...
(redundant Scadas). If a new connection arrives, the old one is dropped, but data, that is stored in cache, not sent and not confirmed by Scada is transfered to new connection. 1.4.0 | ELSETA | IEC 608705...
15 IEC 6205621 15.1 Overview The IEC 6205621 standard defines protocol specifications for local meter data exchange. Data is read out via serial port in modes A, B or C. The default initial serial port settings are 300 bps 7E1, as per standard, but can be user configured. The driver implementation additionally allows for communication via TCP/IP , which is not described in the standard.
15.2.2 Signals section tag_job defines the tag job. This is not used for this protocol and should be set to ”’1”. tag_job_todo defines the job subjob. This field should contain the exact representation of the OBIS code as it is configured in the meter. E.g. if the parameter of interest is represented as ”1.8.0*24(0147238.4*kWh)”, the value of the configuration field should be ”1.8.0*24”...
WCC Lite user manual 2020/04/07 16 WCC Lite internal signals 16.1 Overview The WCC Lite contains several internal data points for readout and control which can be accessed via the Pooler service. 16.2 Configuration 16.2.1 Devices section In the devices section, only the protocol, scan_rate_ms and poll_delay_ms are to be configured for this type of device.
Page 109
Table 26: WCC Lite internal signal tag configuration job_todo Description tag_job_todo Description Bytes transferred netstat|[interface] Network statistics Bytes received wcclite:blue:wlan WLAN LED wcclite:green:eth0 ETH0 LED LED status/control wcclite:green:eth1 ETH1 LED wcclite:red:fault Fault LED wcclite:relay Relay LED & Output process Check if process is...
Page 114
Common address size in bytes cot_size 1 3 Cause of transmission (COT) size in bytes IEC 608705104 ioa_size 1 3 Information object address (IOA) master size in bytes time_sync_interval_sec integer Time synchronization interval (sec) 1.4.0 | ELSETA | Excel configuration...
Page 115
Protocol Attribute Type Description gi_interval_sec integer General interrogation interval in seconds integer Acknowledge timeout t1 (sec) integer Connection ACKRSN clock t2 (sec) integer Connection TESTFR clock t3 (sec) integer Receive window (RWT) integer Send window (SWT) bind_address IPv4 Bind to local IP address host IPv4 Space separated remote host IP...
Page 116
1, 2 or 3. Order is not important. Default (none of the classes will have unsolicited option). It is advised to leave default value master should enable unsolicited action sending. 1.4.0 | ELSETA | Excel configuration...
Page 117
Protocol Attribute Type Description keep_alive_timeout 64bit integer Keep alive timer in seconds. Defaults to 60. select_ms 64bit integer Select command timeout milliseconds. Valid for all signals. Default 10000. time_sync_interval_sec 64bit integer Periodic time sync interval in seconds. If the value is positive time syncs forced...
Every source_signal_alias should be posted in the same line as its respective source_device_alias. Aliases can only contain alphanumeric characters and dashes ( and _ ). Device and signal alias combination must be unique. 1.4.0 | ELSETA | Excel configuration...
Page 119
• enable Flag to enable or disable signal on system. Can contain values 0 or 1. • tag_type Tag type. Simple signals are polled from device. Virtual signals are computed internally. • off_message Message to display when single point or double point signals are in OFF state. •...
• Edition of attributes. Attributes for further interpretation are added. This might, for example, include flag to show that a signal resembles an answer to a command; • Mathematical calculations. multiply, add, bit_select and math_expression columns are evaluated here; 1.4.0 | ELSETA | Excel configuration...
• Usage of last value. Decision if last value for a signal should be used if a new value of a signal is not a number (NaN) or contains a nontopical (NT) flag; • Limiting of values. If a value exceeds a lower or higher configured limit, value is approximated not be lower (or higher) than the limit.
• value Use value directly name string Name of fault or value parameter. Leave empty for timeout signal. timeout_enabled boolean If enabled, this signal will have notopical flag on timeout condition. 1.4.0 | ELSETA | Excel configuration...
Page 123
Protocol Attribute Type Description fault_value string Required value to be received to activate fault. Leave blank for value/timeout signals. job_todo string Request address in hexadecimal Elgama form. Use predefined addresses form templates only tag_job_todo string Request address and parameter offset hexadecimal form.
Page 124
Default (or if assigned incorrectly) IEC 6205621 tag_job_todo string OBIS code DLMS job_todo string Job in OBIS:index format. Should be supplied in full OBIS format with the particular index of the value following. 1.4.0 | ELSETA | Excel configuration...
17.2.6 Linking signals Signals can be linked together to achieve data transfer between several protocols. If a signal source is defined, all output from that source will be routed to the input of target signal. This way events polled from a modbus device (e.g., Modbus, IEC 608705, etc.) can be delivered to external station over a different protocol.
Page 126
Value recalculation is only triggered on signal change of the preconfigured signal. That means that using other signals (via TagValue() call) does not trigger value update. 1.4.0 | ELSETA | Excel configuration...
Page 127
Some mathematical expression cannot be mathematically evaluated in some conditions, for example, square root cannot be found for negative numbers. As complex numbers are not supported, result is then equal to Not a Number (NaN). These results are marked with an invalid (IV) flag. Table 31: Supported binary operators Operator Description...
For example, out keyword marks data sent out of WCC Lite device, whereas in direction represents data that WCC Lite is waiting to receive, for example, commands. Additional r before either direction means that data is raw, it was is presented the way it was read by an individual protocol.
17.3.3 Uploading configuration remotely As of WCC Lite version v1.4.0 generated configuration files can be uploaded by a click of button. There are four parameters (not counting the configuration file itself) that have to be filled in before starting upload: •...
IEC 61499 standard was published in 2005. The standard is considered an extension of IEC 611313 standard. WCC Lite supports PLC functionality while conforming to specifications of IEC 61499 standard. 18.1 IEC 61499 IEC 614991 defines the architecture for distributed systems. In IEC 61499 the cyclic execution model of IEC 61131 is replaced by an event driven execution model.
The 4diac FORTE runtime is able to execute the aforementioned fboot files containing the logic. The FORTE runtime can be run on both the WCC Lite and a PC for debugging purposes. The runtime is integrated to interact with the REDIS database.
2020/04/07 18.1.2 Example project The best way to understand basics of 4Diac and WCC Lite collaboration is through an example project. This user manual intends to show the pieces needed to run PLC applications on WCC Lite. It is not intended to be definitive guide on how to use 4Diac IDE or how to interpret IEC 61499 standard.
Page 133
(figure 20). For debugging in the local (PC) runtime, leave the address ”localhost:61499”. For testing on a WCC Lite, enter the IP address of the device, along with the port number (which by default is 61499 as well).
Page 134
FBs of the application need to be selected and mapped to the configured controller as shown in figure 21. Figure 21: Mapping the logic to the controller To start the application execution, an initial trigger needs to be present. For a nondistributed 1.4.0 | ELSETA | Programmable logic controller...
Page 135
application, the initial event trigger needs to be wired from the START function block in the resource section as shown in figure 22. Figure 22: Mapping the logic to the controller Figure 23: Deploying of the application To deploy the application, go to the System Configuration tab and simply select ”Deploy” from the rightclick menu of the controller device (figure 23).
To use WCC Lite as a programmable logic controller, it needs to be configured in a particular way. The PLC functionality of the WCC Lite only allows for the use of data that is has been configured in the Excel configuration spreadsheet. This has been done for security purposes and to preserve transmission medium only for data that is available.
After a project has been built and binded to an existing Excel configuration, a user would normally want to check if every part is working according to the prior requirements before compiling finished project and uploading it to production. Both 4Diac framework and WCC Lite offer tools for flexible debugging.
Page 138
Figure 26: Function blocks in watch mode Seeing information dynamically updated on 4Diac IDE might be very informative, however, some applications might require accesing WCC Lite via commandline interface. For example, in case of 1.4.0 | ELSETA | Programmable logic controller...
Set the bootfile where to read from to load the applications information not being updated one would want to assure that 4Diac FORTE in WCC Lite is not filtering data out but sending it to internal database (Redis). To run 4Diac FORTE debug from commandline interface, a user should write forte and press Enter.
IEC 64199 standard introduced requirements for a distributed control. This means that multiple devices can change information between them and make their own decisions based on the data they receive from other sources. This enables distributed applications between multiple WCC Lite devices and all other devices that support IEC 61499.
Page 141
Lite devices emulate two PLCs. Two different devices can be identified by different colors of function blocks. One can identify device and it properties by accessing System Configuration screen as seen in Figure 30. Yellow function blocks belong to WCC_212 device which can be accessed through 192.168.4.212 (port number 61499) whereas brown function blocks belong to WCC_218 device which can accessed through 192.168.4.212 (port number 61499).
Page 142
31. Counting part is done in another device as seen in application in Figure 32. To count the blinking, two new Function Blocks (FBs) have been added to the existing application for a different device (WCC_218): 1.4.0 | ELSETA | Programmable logic controller...
Page 143
• E_PERMIT • E_CTU To communicate between devices, an additional PUBLISH_X/SUBSCRIBE_X pair must be used. As one can identify, these blocks are not seen when looking at a whole distributed system and should be seen as an intermediary between devices. The PUBLISH_X FB is used to send messages over the network which are received by an according SUBSCRIBE_X FB.
(assured delivery). 19.2 Using WCC Lite as MQTT Client WCC Lite supports MQTT messaging compatible with MQTT v3.1 standard (starting from version 1.4.0). Such messaging is possible via mapping of Redis and MQTT data therefore data can be...
Page 145
WCC Lite. MQTT serves as an alternative for protocols conforming to IEC standards, for example, to send data to a cloud infrastructure that supports MQTT instead of IEC608705104. All standard functions, except for data encryption, are supported. Encrypted messages are not supported yet, therefore to ensure security a user would have to use a VPN service.
Redis is written to a topic in MQTT. Therefore mqttclient has to know the mapping table before starting. This table is saved at /etc/elsetamqtt.json. Every Redis topic name is constructed as tag/[device_alias]/[signal_alias]/[direction]. Prefix tag/ is always used before the rest of argument.
Therefore it is highly advised to use cryptography to secure the sensitive data. WCC Lite offers means to easily store certificates for their later usage. Some protocols, namely IEC608705104 Slave, DNP v3.0 Slave and Master might be configured to send data over TCP/IP .
Page 148
WCC Lite user manual 2020/04/07 Figure 33: Interface for certificate storage connections. For the sake of simplicity, uploading certificates and their usage are explained in their respective chapters where applicable. To get more details about how one could use TLS for Protocol Hub protocols please check section Excel configuration format.
21 Cyber security WCC Lite is based on OpenWRT operating system. OpenWrt is described as a Linux distribution for embedded devices. WCC Lite has same functionality as Linux OS including user management. Basic configuration on WCC Lite can be done using web based frontend.
Page 150
Figure 35: Screen for new user configuration root user has full permission set to connect to WCC Lite over web interface and SSH or Telnet. This user is default user on WCC Lite and cannot be deleted. However, it is highly advised to change the default password to a different one less susceptible for attacks.
UNIX or Microsoft Windows server. In WCC Lite RADIUS Client is implemented since WCC Lite software version v1.2.4. The user sends a request to a WCC Lite to gain access to get access using access credentials posted in an HTTP/HTTPS WCCLite web login form.
Page 152
• If the login credentials are invalid, Radius Server returns AccessReject and the logon fails. • If the RADIUS server is not available and fallback option is disabled login into WCC Lite will be imposible. If RADIUS server is not available and timeout occurs, login will be attempted via local login credentials.
21.1.4 Audit Log WCC Lite OS with version >1.2.0 has integrated Audit logging for important events such as: • Login/logout. • Wrong password attempts to login into system. • Device boot event, when system was started. • Device reboot/halt event.
Edit permissions. 21.2.1 SSH Access SSH Access of WCC Lite is made by Dropbear software package. To extend the basic functionality, Pluggable Authentification Module (PAM) for RADIUS is used. This enables user to add his own authentification modules as long as they are properly configured.
Page 155
Figure 37: Screen showing existing user groups Figure 38: Screen for user group editing...
Page 156
Conformance to IEC 62351 standard of WCC Lite devices is described in a table below. Table 40: Conformance to IEC 62351 standard...
Page 157
Table 40: Conformance to IEC 62351 standard Standard Description Topic Implemented Version IEC 623518 Rolebased Covers the access control of >=1.2.6 access control users and automated agents to data objects in power systems by means of rolebased access control (RBAC) Describes correct safe usage of safetycritical...
Page 158
• Changes in DLMS tag configuration, scaler automatically applied to regular and extended registers; • Comments about pinger functionality; • Extensive description about mathematical expressions in WCC Lite without PLC. 1.3.1 (20191015) • Updated group permissions, user system description, group configuration description 1.3.0 (20190919)
Page 159
• Updated DHCP , system and RADIUS photos; 1.2.7 (20190320) • Update photos of login, LED setup web header; 1.2.6 (20190318) • Changed company name from Aedilis to Elseta; • Updated contact information; 1.2.5 (20181129) • Full specification of mathematical and logical operations;...
Page 160
23 Information about the equipment manufacturer Office address: L. Zamenhofo g. 3 LT06332 Vilnius Lithuania Tel.: +370 5 2032302 Email: support@elseta.com In the web: elseta.com Work hours: IV 8:00 17:00 1.4.0 | ELSETA | Information about the equipment manufacturer...
Need help?
Do you have a question about the WCC Lite and is the answer not in the manual?
Questions and answers