Cyber Security - Siemens SWT 3000 Equipment Manual

[DwMPLS-27032014-1, 1, --_--]
Figure 2-24
Network
electrical or optical
Local/remote configuration
Protection device
The SWT 3000 TPoP Ethernet line interface is based on Ethernet module EN100, which has 2 ports for an elec-
trical or an optical 10/100-Mbits interface. For optical interface, the pluggable SFP module can be changed to
electrical interface. The 2 Ethernet ports can communicate via 2 Ethernet cables, but not simultaneously. The
second interface is supported as alternative path.
All the data of existing analog and digital lines can be transmitted in Ethernet lines including up to 16 protec-
tion commands.
The Ethernet line interface cannot be used for NMS access via SNMP or for connection of the Element
manager (service program PowerSys). EN100 for TPoP is delivered with different MLFB numbers as EN100 for
IEC61850. A different firmware image is preloaded in it. SWT 3000 detects if the right EN100 type is used. If
type is mismatched, the hardware alarm occurs.

Cyber Security

2.12.2
There are several threats to network protocols which are important for TPoP service:
•
Modification of information
The modification threat is that some unauthorized entity can change the transmitted command or RM
message. It can generate a lost or unwanted command, or change the device configuration.
•
Masquerade
The masquerade threat is that the message is not from an authorized peer SWT 3000 device.
•
Modification of message stream
The TPoP protocol is based on connectionless service (UDP). So the modification of message stream
threat is that messages may be maliciously re-ordered, delayed or replayed.
Smart Communication, SWT 3000 Teleprotection, Equipment Manual
C53000-G6040-C605-1, Edition 03.2020
MPLS-TP Network Diagram
Network
lectrical or optical
Local/remote configuration
Protection device
Functional Description
2.12 Tele Protection Over Packet TPoP
81