S&C SpeedNet ME Setup

S&C SpeedNet ME Setup

Mesh end-point radio; communication end point for scada devices
Hide thumbs Also See for SpeedNet ME:
Table of Contents

Advertisement

Quick Links

S&C SpeedNet
ME Mesh End-Point Radio

Table of Contents

Section
Qualified Persons . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
Read this Instruction Sheet . . . . . . . . . . . . . . . . . . . . . . 2
Retain this Instruction Sheet . . . . . . . . . . . . . . . . . . . . . . 2
Proper Application . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Warranty . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Understanding Safety-Alert Messages . . . . . . . . . . . . . . 4
Following Safety Instructions . . . . . . . . . . . . . . . . . . . . . 4
Replacement Instructions and Labels . . . . . . . . . . . . . . . 4
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5
SpeedNet Security Information . . . . . . . . . . . . . . . . . 7
KeyGen Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
User Management Window . . . . . . . . . . . . . . . . . . . . 8
Adding a User . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Deleting a User . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Modifying a User . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Clearing All Users . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Clearing the Revocation List . . . . . . . . . . . . . . . . . . 12
Key Generation . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Adding a Keyset . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Deleting a Keyset . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Generating a Security File . . . . . . . . . . . . . . . . . . . 15
SpeedNet ME Radio Software and Instruction Sheets can be downloaded at
sandc.com/support/automation-customer-support-portal.asp If you need assistance,
please contact customerportal@sandc .com or phone (800) 621-5546 .
Supersedes Instruction Sheet dated December 15, 2014
August 14, 2017
© S&C Electric Company 2014-2017, all rights reserved
Setup
Page
Section
Network Configuration . . . . . . . . . . . . . . . . . . . . . . 20
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Logging In . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Main Window . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Interfaces Window, Ethernet Tab . . . . . . . . . . . . . . . 29
Interfaces Window, Wireless Tab . . . . . . . . . . . . . . . 30
Interfaces Window, Serial Mode Tab . . . . . . . . . . . . 32
Multiple SCADA Masters . . . . . . . . . . . . . . . . . . . . . 34
Interfaces Window, Serial Port Tab . . . . . . . . . . . . . 34
IP Routing Window, Routes Tab . . . . . . . . . . . . . . . 38
IP Routing Window, ARP Tab . . . . . . . . . . . . . . . . . 39
IP Routing Window, Blacklist Tab . . . . . . . . . . . . . . 40
Security Window, Encryption Tab . . . . . . . . . . . . . . 41
Security Window, MAC Filter Tab . . . . . . . . . . . . . . 42
Admin Window, System Tab . . . . . . . . . . . . . . . . . . 43
Admin Window, Firmware Tab . . . . . . . . . . . . . . . . . 44
Admin Window, Shell Tab . . . . . . . . . . . . . . . . . . . . 44
Statistics Window, Ethernet Tab . . . . . . . . . . . . . . . 46
Statistics Window, ICMP Tab . . . . . . . . . . . . . . . . . . 47
Statistics Window, UDP Tab . . . . . . . . . . . . . . . . . . 48
Statistics Window, IP Tab . . . . . . . . . . . . . . . . . . . . 49
Statistics Window, Wireless Tab . . . . . . . . . . . . . . . 50
Statistics Window, AODV Tab . . . . . . . . . . . . . . . . . 51
Statistics Window, RSSI Tab . . . . . . . . . . . . . . . . . . 52
NOTICE
Instruction Sheet 1074-530
Page

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the SpeedNet ME and is the answer not in the manual?

Questions and answers

Summary of Contents for S&C SpeedNet ME

  • Page 1: Table Of Contents

    Statistics Window, RSSI Tab . . . . . . . . . . . . . . . . . . 52 NOTICE SpeedNet ME Radio Software and Instruction Sheets can be downloaded at sandc.com/support/automation-customer-support-portal.asp If you need assistance, please contact customerportal@sandc .com or phone (800) 621-5546 .
  • Page 2: Introduction

    Safety Precautions on pages 3 through 5 . The latest version of this publication is avail- able online in PDF format at sandc.com/Support/Product-Literature.asp . These instructions apply to SpeedNet ME Radio Firmware Version v2.5.2. The version number can be found on the Admin–System window of the SpeedNet Client Tool version 2.5.2, as shown in Figure 1.
  • Page 3: Warranty

    Introduction Regulatory This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device Information must accept any interference. This device complies with Industry Canada license exempt RSS standard(s). Operation is subject to the following two conditions: (1) this device may not cause interference, and (2) this device must accept any interference, including interference that may cause undesired operation of the device.
  • Page 4: Safety Information

    DANGER Read this instruction sheet thoroughly and carefully before installing or operating your S&C SpeedNet ME Radio . Replacement If you need additional copies of this instruction sheet, contact your nearest S&C Sales Office, S&C Authorized Distributor, S&C Headquarters, or S&C Electric Canada Ltd.
  • Page 5: Network Setup

    SpeedNet ME Radios serve as a communication end point for SCADA devices. They can connect to a SpeedNet ME Radio mesh network. They can be installed in a variety of network configurations. Plan your network in advance, and develop a logical IP addressing scheme for your particular application.
  • Page 6 Ethernet segments. The wireless inter- face of the SpeedNet ME Radio from the End Point Node 1 is assigned an address of 192.168.202.1. The wireless interface of the SpeedNet ME Radio from the Repeater Node is assigned an address of 192.168.202.2.
  • Page 7: Speednet Security Administration

    SpeedNet Security Administration SpeedNet Security SpeedNet ME Radios use a comprehensive security suite to prevent unauthorized network access and to protect sensitive data. The security features include user access controls, Information network data encryption, node access revocation, and anti-spoofing measures. These security features should be incorporated as part of a complete security policy, which should include application-level user authentication and stringent password policies.
  • Page 8: User Management Window

    SpeedNet Security Administration Select a region from the drop down list. Then click the OK button. STEP 6. STEP 7. Save the Security Association Database file as a .sad file. See Figure 5. The User Management window will open. See Figure 6. Figure 5.
  • Page 9: Adding A User

    SpeedNet Security Administration Adding a User Click the Add button on the User Management window. The User File dialog STEP 1. box will open. See Figure 7. Figure 7. KeyGen User File dialog box. Enter a username that is 8 to 16 characters in length. Valid case-sensitive STEP 2.
  • Page 10: Deleting A User

    SpeedNet Security Administration Deleting a User To delete a user from the users list, highlight that user’s name. Then, click the Delete button. See Figure 9. Figure 9. KeyGen User Management window Delete button. The User Management dialog box will open. See Figure 10. Figure 10.
  • Page 11: Clearing All Users

    SpeedNet ME Radios. Thus, revoking a MAC address is a means to Revocation List exclude radios. For example, if a SpeedNet ME Radio were stolen, then it would be wise to exclude that radio’s MAC address as one means to prevent the radio from joining a mesh and breaching SpeedNet ME Radio network security.
  • Page 12: Deleting A Mac Address From The Revocation List

    SpeedNet Security Administration Deleting a MAC To delete a MAC address from the revocation list, highlight the address on the Mac Revocation Management window. Then, click the Delete button. See Figure 15. Address from the Revocation List Figure 15. Mac Revocation Management window. The Mac Management dialog box will be displayed.
  • Page 13: Key Generation

    SpeedNet Security Administration The Mac Management dialog box will open. See Figure 18. Figure 18. Clear all MAC entries dialog box. Click the Yes button to clear the Mac Revocation List. Key Generation The keyset is a common credential that all radios use when optionally encrypting UDP/IP and TCP/IP data over a SpeedNet network.
  • Page 14: Deleting A Keyset

    SpeedNet Security Administration Figure 20. New keyset number available on the Install Keyset list. Deleting a Keyset To delete a keyset, open the Key Generation tab and highlight the keyset. Then, click the Delete button. See Figure 21. Figure 21. Key Generation window. The confirmation dialog will open.
  • Page 15: Generating A Security File

    SpeedNet Security Administration NOTICE The current keyset list will not be updated until a new security file is generated . Security configuration files can still be encrypted to a recently deleted keyset because the old keyset is still stored in the current keyset list . If, after deleting a keyset, you add a keyset with the same tag as the deleted keyset, the keyset in the Install Keyset list will contain a different key than the keyset with the same tag in the current keyset list .
  • Page 16 SpeedNet Security Administration Figure 25. Save Radio Security File dialog box. After the security file is generated, the current keyset list will be updated with all the installed keysets, as shown in Figure 26. Figure 26. Updated Current Keyset list in the dialog box. The maximum number of keyset tags allowed is 63.
  • Page 17: Saving A Security Association Database

    SpeedNet Security Administration Figure 28. Permission to delete a keyset. Click the Yes button to delete keyset 59. STEP 7. The deleted keyset will not be deleted from the Current Keyset List until a new security file is generated. Saving a Security Follow these steps to save a Security Association Database: Association Database Open the File menu in the upper-left corner of the SpeedNet KeyGen Utility window,...
  • Page 18: Creating Another Security Association Database

    SpeedNet Security Administration Creating Another Open the File menu in the upper-left corner of the SpeedNet KeyGen Utility window. Scroll down and select the New button. See Figure 31. Security Association Database Figure 31. SpeedNet KeyGen Utility window new SAD. A new SAD window will open with all entries cleared.
  • Page 19 SpeedNet Security Administration Figure 33. Open Security Database window. The SAD dialog box will open. See Figure 34. Figure 34. SAD dialog box. STEP 3. Enter the network name and pass phrase, then click on the OK button. NOTICE The SAD is encrypted with a key derived from the pass phrase . If you forget the pass phrase used when you created the SAD, data in the SAD will not be accessible and will be lost .
  • Page 20: Network Configuration

    Network Configuration Figure 36. SpeedNet Network Configuration Main Window. The File menu allows the user to open an existing network configuration, Save the cur- rent working network configuration, Save As to edit the file name before saving, and Reset to Defaults to restore the current working network configuration to factory default values. When opening a network configuration file, the window shown in Figure 37 will open and list all currently installed keysets.
  • Page 21 SpeedNet Client tool. Please note that on a given SpeedNet ME Radio mesh, the configurations of all the Ethernet interfaces should differ such that there is no overlap between the Ethernet port subnets or between the Ethernet port subnets and the wireless subnet.
  • Page 22 SpeedNet Client tool. Please note that on a given SpeedNet ME Radio mesh, all the wireless interfaces of the radios should be on the same subnet but should use different individual addresses on that subnet.
  • Page 23: Speednet Client Tool

    “DNP Serial Mode” section on page 33. The Repeater/SpeedGate Mode settings should not be used with the SpeedNet ME because that functionality is not supported on the ME platform. There is no Apply button on this window because application to a radio is deferred until uploaded using the SpeedNet Client tool.
  • Page 24 Routing Tab” section on page 35. There is no Apply button on this window because application to a radio is deferred until uploaded using the SpeedNet Client tool. The Enable AODV Gateway checkbox should not be used with the SpeedNet ME because that functionality is not supported on the ME platform.
  • Page 25 Network Configuration Figure 45. Network Configuration of Routes. Figure 45 shows network configuration of Routes. These settings correspond to those in the SpeedNet Client Tool described in the “IP Routing Window, Routes Tab” section on page 38. Figure 46. Network Configuration of Address Resolution Protocol. Figure 46 shows the network configuration of Address Resolution Protocol (ARP).
  • Page 26 Network Configuration Figure 47. Network Configuration of System Information. Figure 47 shows the network configuration of System information. These settings cor- respond to those in the SpeedNet Client Tool in the “Admin Window, System Tab” section on page 43. S&C Instruction Sheet 1074-530...
  • Page 27: Overview

    STEP 1. STEP 2. In the IP Address field, enter the IP address of the SpeedNet ME Radio’s Ethernet interface; the default is 192.168.200.1. When the radio mesh has been configured, you can also log in using the wireless IP address. When logging into a SpeedNet ME Radio for the first time after a factory reset, the user name will be initial and the factory password will be the radio’s unique MAC address listed as MAC ID on the...
  • Page 28: Main Window

    SNMP timeout. The default value will work in most situations. • Connect To—The Connect To… button allows you to connect to a different SpeedNet ME Radio by opening the SpeedNet ME Radio Login window. Other configuration functions are accessed by clicking on the appropriate tabs, as follows: •...
  • Page 29: Interfaces Window, Ethernet Tab

    The Interfaces window provides tabs that can be used to configure each interface of the SpeedNet ME Radio. The tab will provide a list of configurable options for the selected interface. The Ethernet tab, shown in Figure 51, is used to configure the SpeedNet ME Radio’s Ethernet interface.
  • Page 30: Interfaces Window, Wireless Tab

    Wireless Tab Figure 52. Wireless interface configuration window. The Wireless tab, shown in Figure 52, is used to configure the SpeedNet ME Radio wireless interface. Note that several features are for reference only and will appear grayed out in the client tool. Some of the following parameters can be configured: •...
  • Page 31 • Enable Adaptive Transmit Power Mode—(Reference only) This feature causes the SpeedNet ME Radio to adjust the output power level to the minimum level required to achieve a solid link. The output power level will vary between each radio link. When this feature is enabled, the Transmit Power parameter will be replaced with “min”...
  • Page 32: Interfaces Window, Serial Mode Tab

    This is currently used for communication with a SpeedNet ME Radio in an IntelliRupter® PulseCloser® Fault Interrupter through the IntelliRupter fault interrupter Wi-Fi interface. SpeedNet ME Radios do not route traffic to other radios from the PPP interface due to security concerns.
  • Page 33 DNP communication. UDP is the default setting. • Enable DNP Dynamic Port—Enabling the DNP Dynamic Port feature causes the SpeedNet ME Radio to monitor SCADA traffic to determine the source port for each data stream. Port information is stored internally, allowing the SpeedNet ME Radio to know which port to send received packets to on the SCADA master.
  • Page 34: Multiple Scada Masters

    Multiple SCADA SpeedNet ME Radios have a feature that allows multiple SCADA masters that use the same SCADA address to connect to a single SpeedNet ME Radio. When this feature is Masters enabled, the connected SpeedNet ME Radio continually monitors DNP traffic. For multiple SCADA masters using the same SCADA address, the SpeedNet ME Radio will consider the master to be the device that sent the most recent data packet.
  • Page 35: Ip Routing Window, Ad Hoc Routing Tab

    Figure 57. Ad Hoc Routing IP configuration window. The IP Routing window provides a list of tabs that can be used to configure the routing performance of a SpeedNet ME Radio. Selecting a tab will provide a list of configurable options.
  • Page 36 • Node Traversal Time—The Node Traversal Time value provides an estimate of the time required for a packet to traverse one wireless hop. This value affects how long a SpeedNet ME Radio waits before resending a route request packet. This value is measured in milliseconds and the recommended value is 150 msec.
  • Page 37 Changes will not be saved if you change to a different configuration tab without first clicking the Apply button. Note: the Enable AODV Gateway checkbox is not available on the SpeedNet ME be- cause that functionality is not supported on the ME platform.
  • Page 38: Ip Routing Window, Routes Tab

    • Route Table—The Route Table parameter displays a list of current routes within the SpeedNet ME Radio route table. If mesh networking is used, the route table entries will be updated dynamically to reflect changes to the network.
  • Page 39: Ip Routing Window, Arp Tab

    ARP exchanges with the radio to associate their IP addresses with their MAC addresses. As such, it is unusual for SpeedNet ME Radio users to edit this table. The edit capability exists to enable IP communication from the SpeedNet Radios to/from devices that do not support ARP.
  • Page 40: Ip Routing Window, Blacklist Tab

    The Neighbor Blacklist feature shown in Figure 62 allows SpeedNet Client Tool to add, delete, and retrieve a blacklisted radio by using its IP address. A SpeedNet ME Radio address listed in the Neighbor Blacklist will not be considered a valid neighbor to build routes through.
  • Page 41: Security Window, Encryption Tab

    Figure 63. Security encryption configuration window. The Security window provides a list of tabs that can be used to view and setup the security configuration of the SpeedNet ME Radio. Selecting a tab will provide a list of configurable options.
  • Page 42: Security Window, Mac Filter Tab

    SpeedNet ME Radios include an Auto Switchover feature that allows the network to automatically update to a more recent key. If a SpeedNet ME Radio receives a pack- et that was encrypted using a new keyset, and the receiving radio has the new keyset installed, it will automatically switch to the new keyset.
  • Page 43: Admin Window, System Tab

    • SpeedNet Radio ID—This field can be used by administrators to assign a descriptive name to the SpeedNet ME Radio. The SpeedNet ME Radio ID must consist of ASCII values but cannot contain spaces or the following characters: $, ^, &, (, or ).
  • Page 44: Admin Window, Firmware Tab

    • Upgrade—After selecting the firmware file, click the Upgrade button to initiate an immediate firmware upgrade. The SpeedNet ME Radio will prompt for reboot at the conclusion of the upgrade. Power should not be cycled while a radio is upgrading firmware.
  • Page 45 The Shell tab, shown in Figure 67 on page 44, is provided to support advanced integrator troubleshooting and is not used for configuration of a SpeedNet ME Radio network. A limited selection of LINUX shell commands (e.g. cat, cd, ls) can be executed. Execution of shell commands is performed in a batch manner, waiting for the output to complete before returning a result.
  • Page 46: Statistics Window, Ethernet Tab

    • Unknown protocol received—This is the total number of frames received by the SpeedNet ME Radio’s Ethernet interface with unidentified protocol errors. • Bytes sent—This is the total number of bytes sent by the SpeedNet ME Radio’s Eth- ernet interface.
  • Page 47: Statistics Window, Icmp Tab

    SpeedNet Client Tool Statistics Window, ICMP Tab Figure 69. Internet Control Message Protocol statistics window. The ICMP tab, as shown in Figure 69, provides the following statistical information regarding the Internet Control Message Protocol: • ICMP messages sent—This is the total number of ICMP messages sent by the radio. •...
  • Page 48: Statistics Window, Udp Tab

    SpeedNet Client Tool Statistics Window, UDP Tab Figure 70. User Data Protocol statistics window. The UDP tab, as shown in Figure 70, provides the following statistical information regarding the User Datagram Protocol. UDP is generated by the application layer and uses ports to facilitate application-to-application communication: •...
  • Page 49: Statistics Window, Ip Tab

    SpeedNet Client Tool Statistics Window, IP Tab Figure 71. Internet Protocol statistics window. The IP tab, as shown in Figure 71, provides the following statistical information regarding the Internet Protocol: • Default TTL— This is the time-to-live value used to determine how long a packet that has not reached its destination will remain on the network prior to be discarded.
  • Page 50: Statistics Window, Wireless Tab

    • Packets received with bad length—This is the total number of packets received by the SpeedNet ME Radio wireless interface that contained checksum errors involving length. • Packets received with bad CRC—This is the total number of packets received by the SpeedNet ME Radio wireless interface that contained checksum errors.
  • Page 51: Statistics Window, Aodv Tab

    The Neighbor List provides a list of SpeedNet ME Radios that are communicating wirelessly with the local SpeedNet ME Radio. The Neighbor List is updated each time a Hello message is received from another SpeedNet ME Radio. • IP Address—The IP Address field provides the IP address of the wireless interface of a SpeedNet ME Radios whose Hello message has been received by the local SpeedNet ME Radio.
  • Page 52: Statistics Window, Rssi Tab

    Net ME Radios based on their unique MAC address. Unlike the AODV Neighbor List, the RSSI tab does not require an exchange of Hello beacons. • MAC Address—This field displays the MAC address of the SpeedNet ME Radio whose signal RSSI value is displayed.

Table of Contents