T200 & Flair 200C: IEC 60870-5-101 Communication
T200 & Flair 200C: IEC 60870-5-101 Communication
Easergy range
IEC 60870-5-101
Content
1. Introduction ........................................................................................................................................................... 3 2. References .............................................................................................................................................................. 4 3. Principles ................................................................................................................................................................ 5 3.1 Definition............................................................................................................................................................. 5 3.2 ISO Model........................................................................................................................................................... 5 3.3 Transmission modes .......................................................................................................................................... 5 3.4 Data .................................................................................................................................................................... 6 3.5 Functionalities..................................................................................................................................................... 6 4. Configuration .......................................................................................................................................................... 7 4.1 General configuration of the protocol ................................................................................................................. 7 4.2 Conversion modes for measurement transmission .......................................................................................... 16 Adjusted mode .................................................................................................................................................... 17 Normalized mode ................................................................................................................................................ 18 4.3 Specific configurations related to transmission media ..................................................................................... 19 4.4 Specific configurations related to the objects transmitted ................................................................................ 22 5. Diagnostic ............................................................................................................................................................. 23 5.1 Processing protocol-related information........................................................................................................... 23 5.2 Tracing interchange with the Supervisor .......................................................................................................... 24 6. Glossary ................................................................................................................................................................ 35 7. Interoperability ..................................................................................................................................................... 38 7.1 System or device .............................................................................................................................................. 38 7.2 Network configuration ....................................................................................................................................... 38 7.3 Physical layer.................................................................................................................................................... 38 7.4 Link layer .......................................................................................................................................................... 39 7.5 Application layer ............................................................................................................................................... 40 7.6 Basic application functions ............................................................................................................................... 46 8. Object addressing ................................................................................................................................................ 50 8.1 Legend.............................................................................................................................................................. 50 8.2 T200 P .............................................................................................................................................................. 51 8.3 T200 I................................................................................................................................................................ 53 8.4 Flair 200C ......................................................................................................................................................... 57
NT00156-EN-05
IEC 60870-5-101
1. Introduction
This appendix to the User Manual is designed to provide aid with setting up a telecontrol network using the IEC 60870-5-101 protocol. It will therefore provide information to help choose an operating mode, to make the corresponding configuration settings and to analyse any problems faced. For this purpose, the following will be found: References of documents relating to this protocol Operating principles, with - a brief description of the specification and fundamentals of the protocol; - a description of the various operating modes with help in choosing between them; - a list of the types of data exchanged; - a description of the main functionalities; The configuration settings to be made, with - general configuration of the protocol; - specific configurations relating to the transmission media; - specific configurations relating to the objects exchanged; Maintenance aid facilities A glossary of specific terms (expressions written in italics in the text) The descriptive documents specified by the IEC (interoperability) Object addressing tables which can serve as a model for establishing databases for the T200 and the Flair 200C. All along the documentation, the T200 is taken as an example. The software features of the T200 and Flair 200C are the same. As a result, the same information can be used indifferently with the T200 or with the Flair 200C.
NT00156-EN-05
IEC 60870-5-101
2. References
As mentioned above, the purpose of this appendix is to help the user set up a network. It is not intended to provide a detailed explanation of the protocol specified in the documents referenced below. It is not necessary to read these documents. However, the user faced with a specific problem or wanting to have a more precise knowledge of this protocol will find it useful to read them. They are available, on a paying basis, on the IEC website (www.iec.ch). The international standard used has been specified by the International Electrotechnical Commission in the following documents: IEC 60870-5-1:1990, IEC 60870-5-2:1992, IEC 60870-5-3:1992, IEC 60870-5-4:1993, IEC 60870-5-5:1993, IEC 60870-5-101:2003, Telecontrol equipment and systems Part 5: Transmission protocols Section 1: Transmission frame formats Telecontrol equipment and systems Part 5: Transmission protocols Section 2: Link transmission procedures Telecontrol equipment and systems Part 5: Transmission protocols Section 3: General structure of application data Telecontrol equipment and systems Part 5: Transmission protocols Section 4: Definition and coding of application information elements Telecontrol equipment and systems Part 5: Transmission protocols Section 5: Basic application functions Telecontrol equipment and systems Part 5-101: Transmission protocols Companion standard for basic telecontrol tasks
These documents refer to other normative documents which can also be consulted. They are referenced as follows: IEC 60050(371):1984, IEC 60870-1-1:1988, IEC 60870-5-103:1997, OSI/IEC 8824-1:2000, ITU-T V.24:2000, ITU-T V.28:1993, ITU-T X.24:1988, ITU-T X.27:1996, IEEE 754:1985, International Electrotechnical Vocabulary (IEV) Chapter 371: Telecontrol Telecontrol equipment and systems Part 1: General considerations Section 1: General principles Telecontrol equipment and systems Part 5-103: Transmission protocols Companion standard for the informative interface of protection equipment Information technology Abstract Syntax Notation One (ASN.1): Specification of basic notation List of definitions for interchange circuits between data terminal equipment (DTE) and data circuit-terminating equipment (DCE)s Electrical characteristics for unbalanced double-current interchange circuits List of definitions for interchange circuits between Data Terminal Equipment (DTE) and Data Circuit-terminating Equipment (DCE) on public data networks Electrical characteristics for balanced double-current interchange circuits operating at data signalling rates up to 10 Mbit/s Binary floating-point arithmetic
NT00156-EN-05
IEC 60870-5-101
3. Principles
3.1 Definition
The IEC 60870-5-101 protocol specifies data coding and the rules for interchange of such data between two equipments. The T200 is one of these two equipments, while the Supervisor (or another equipment) is the second.
Application layer The three layers used are as follows: Physical layer; Data link layer; Application layer.
Physical layer
Communication medium
NT00156-EN-05
IEC 60870-5-101
The Supervisor can send a command to the T200s at any time. In this operating procedure, the SCADA controls the communication load. Operation is simple, but results in intense use of communication media, because the more quickly one wants to be informed of a change, the more often the T200s must be interrogated. The polling cycle limit corresponds to the shortest cycle for interrogating all the T200s. These interchanges are mostly "unproductive" because, in most cases, the T200 interrogated has nothing to report (on this subject, see in section 5.2 Tracing interchange with the Supervisor - Power Up, the Request for class 2 data window (polling)). The operating procedure, in balanced mode, is generally as follows: When it starts up, the Supervisor initializes the link to the first T200. It sets the T200 time where necessary. It repatriates the T200 states (by a general control, called interrogation command in IEC 60870-5-101). It goes to the following T200. When a T200 starts up: It initializes the link. It indicates to the SCADA that it has just started up by an end of initialization. The Supervisor sets the T200 time where necessary. It then requests the T200 states (by interrogation command). Then, messages are sent only to provide unknown information. For example, when a change occurs, the T200 will send a message to inform the SCADA of this. Likewise, the Supervisor will send messages to the T200 when the operator requests order execution. This operating mode does not heavily load the communication facilities (an equipment speaks only when it has something to say). On the other hand, the SCADA no longer controls the data flow and collisions between messages can occur when, at a given point in time, several equipments take control to speak. We shall see further on how it is possible to deal with this problem of collisions.
3.4 Data
The IEC 60870-5-101 protocol specifies the data that can be exchanged and the form in which they are transmitted. Among the numerous items of information to which the protocol gives access, there are: signals (single or double); measurements (in several formats); counters; commands (single or double); parameters. These data, called objects in the IEC 60870-5-101 protocol, will be described in detail further on.
3.5 Functionalities
Reading all the states of a T200 This can be performed in two stages by the SCADA. It first sends an interrogation command to the T200. The latter will send back, in reply, the state of all signals and the values of all measurements (on condition that the transmission address has been defined for each of them as we shall see later). Then the Supervisor will send a counter interrogation command if the system manages counters. The T200 will then send back the values of its counters. Time setting This can be performed by the Supervisor: - either individually, for each T200, with confirmation by the latter that it has received correctly; - or all at once, by broadcast, for all the T200s on a given transmission medium. In this case, the T200s in question do not reply. On those media that offer a repetitive transmission delay, the SCADA can correct the synchronization of the transmission time with the T200s, by first giving a delay acquisition command.
NT00156-EN-05
IEC 60870-5-101
Transmission of changes, routine transmission The T200 can transmit changes on signals, measurement changes (upon a change exceeding the dead band, upon crossing a threshold), and regular measurement reports. These changes may be dated or not. Counter processing It is possible to freeze and reset the counters. Commands Two command modes are available: select before execute and direct execution. Commands can be single or double. Modification of parameters It is possible to modify certain parameters.
4. Configuration
4.1 General configuration of the protocol
A configuration screen contains all the parameters directly related to the Protocol. When the unbalanced mode has been chosen, the screen is as follows:
NT00156-EN-05
IEC 60870-5-101
Link address This identifies the SCADA - T200 pair. On a network, it allows the SCADA to designate (in Control direction) to recognize (in Monitor direction) the T200 among all the far-end equipment. Depending on the length of the link address field (1 or 2 octets), it can adopt all values between 0 and 254 or 0 and 65534. Address 255 (length 1 octet) or 65535 (length 2 octets), non-configurable, is used by the Control Centre to address all the far-end equipment. It is used only for transmission procedures of the send/no reply expected type. In this case, the far-end equipments do not reply to the SCADA. This address then bears the broadcast address name. Common address of ASDUs This address appears in the information frames. It is not used by the T200, but the latter controls it. It has the same configuration ranges as the link address. In general, it is set to 0 (although the standard defines this value as "not used"), to 1 or to the same value as the link address (this then requires that it be coded on a length at least equal to that of the link address).
Transmission-related parameters: Frame length (max.) This allows the size of the frames sent by the T200 to be limited. It may be necessary to limit this size in two cases: - The size of the SCADA reception buffer is limited or it cannot handle in an acceptable time frames of length greater than that defined. This case is virtually never encountered. - The transmission medium is noisy: the frames are in that case easily disturbed during their transmission. This is the case, for example, when analogue radios are used. In this case, it is often advisable to limit the frame length, which limits the risk of their being corrupted. The values then used are generally in a range between 40 and 80. The maximum value is 255.
Comments for the following two headings: - There is not a single box for Ack and Nack handling, because some SCADAs do not handle the transmission control character I the same way depending on whether it is used for Ack or Nack. - Other explanations are given in section 4.2 Specific configurations relating to transmission media - Use of the transmission control character I. Single control character I used for Ack Ack frame reception acknowledgements can be coded either as fixed-length frames or using the transmission control character I. This character is coded E5 in hexadecimal. In the case of non-noisy point-to-point links (e.g., RS-232 link, PSTN link), the transmission control character I can be used in place of the fixed-length frame to reduce transmission times. In that case simply check the corresponding box. When working with noisy transmission, one should not use the transmission control character I, because it can easily be generated by noise. Moreover, some SCADAs do not handle this character. In that case the box must be deselected. Likewise, on multipoint networks, the single control character cannot be used because in this case the receiver cannot know who is the sender. Single control character I used for Nack Nack frame reception acknowledgements can be coded, like Acks, either as fixed-length frames or using the transmission control character I. The same reasons as before lead to the same choices. Link address field length The link address can be coded on 1 or 2 octets. As it is always advisable to limit transmission times, the best choice is 1 octet. However, this limits the number of far-end equipments to 255 (addresses 0 to 254). By adopting 2 octets, it is possible to go up to 65535 equipments.
NT00156-EN-05
IEC 60870-5-101
Common address of ASDUs field length The common address of ASDUs can be coded on 1 or 2 octets. As for the link address, the best choice is 1 octet. However, if you want to put a value greater than 255, choose 2 octets. Likewise, if you want to put, for the common address of ASDUs, the same value as for the link address, you will be obliged to use 2 octets if there are values greater than 255. Information object address field length The information object address field can be 1, 2 or 3 octets. The T200 uses non-structured information object addresses, therefore this address is normally coded on 1 or 2 octets (the 3 octet variant being reserved in the case of structured addresses). However, for reasons of compatibility with the SCADA, the value 3 is accepted. Moreover, there is nothing to prevent declaring structured type addresses. For example, it is possible to have the third octet give the type of object, with 0 for a double signal, 1 for a single signal, etc. The double signals will then have an address between 1 and 65535 (the standard says that address 0 is not applicable), and the single signals an address between 65536 and 131071, etc. As before, it is recommended to code this address on a single octet. However, one may have to transmit more than 255 objects. The SCADA can also force encoding on 2 or 3 octets. Cause of transmission field length This field can have 1 or 2 octets. When it contains 2 octets, the second is used to indicate the originator address. This is generally of no interest in our case. However, it can be configured to be compatible with the SCADA's operation. In general, 1 is used.
Application-related parameters: Time tag For time tagged objects, the time tag can be expressed on 3 or 7 octets. On 3 octets, the time tag is limited to minutes and milliseconds. On 7 octets, this time tag also includes the hour, day of the month, month and year. In both cases, a bit indicates whether the hour is valid. Measured value The T200 manages measurements in transmission mode according to two of the formats specified by the standard, namely: - Measured value, "Normalized" value - Measured value, "Adjusted" value Here the user chooses the form in which he wants the measurements to be transmitted. (For more details, see "Conversion modes for measurement transmission" and "Interoperability table" chapters). End of initialization sending An end of initialization can be sent by the T200. The T200 will send it after power up or after a change of configuration (in certain conditions). For the T200 to behave in this way, simply check the box. The SCADA will then know that the database representing the state of its T200 is possibly no longer up-todate. As a consequence, it will then be able to execute the interrogation command and the counter interrogation command (if necessary) to update its database.
NT00156-EN-05
IEC 60870-5-101
Clock validity Like any clock, the T200's clock deviates over time. Depending on the deviation he considers acceptable, the user will configure the time after which he determines that the deviation is too great to consider the time tag valid. The T200 declares the clock invalid after power up or when the set time has elapsed since the last clock synchronization command received. This time can be as much as 24 h. By setting 0, the T200 considers the time as infinite, i.e. the clock will not be declared invalid. The clock deviation is 5 ppm at 25 C, i.e. about 40 0 ms per day (less than 15 s per month). If the user wants a deviation of less than 100 ms, he will have to set the time on the T200 approximately every 6 h. He need then merely program 22,000 ms (leaving a little margin) for the clock to be declared invalid if the T200 has not received a time setting within a period of slightly more than 6 h (6 h 6 min. 40 s). Special case of the GPS option: In this case, time setting of the T200 is performed from the GPS. The clock will be declared invalid only after power up or after expiry of the time without the GPS providing valid time setting data. The user will then be notified, when he receives a time tagged event, that the GPS is not working correctly.
Command type A telecontrol can be executed by 2 modes. - Direct execution: the command (if it is authorized) is executed as soon as the order is received. - Select before execute: in this case, the T200 will first receive a command selection, then, within a maximum authorized time, an execution. It will execute the command (if it is authorized) only after receiving execution (and only if the device indeed corresponds to that previously selected). After receiving a selection, it may receive the abort of this command, in which case it will have to receive a new complete cycle to execute a command. The operating mode is selected here. Selection timeout This is the maximum time authorized between receiving a command selection and receiving its execution. After that time, the command is rejected. This time is applicable only in the select before execute mode. It can be set to between 1 and 60 s.
In unbalanced mode, the objects sent by the T200 can belong to 2 different classes. Their class (1 or 2) is selected from the following sections. Single commands class Double commands class Single signals class Double signals class Integrated totals class Measurements class Class 1 is generally assigned to commands, signals and integrated totals. Measurements are customarily assigned to class 1 when they are sent upon a change or exceeding a threshold, and to class 2 when they are sent cyclically.
Class data 1 are considered as priority data. The SCADA asks the T200 whether it has class 2 data. The latter replies with the data it has in this class, indicating if it also has class 1 data. If this is the case, the SCADA then asks for the data in said class 1. In the T200, the objects sent, upon a change or regularly, can be time tagged or not, depending on their type. Simply fill in the following sections as needed. Single signals time tag Double signals time tag Integrated totals time tag Measurements time tag Cyclic measurements time tag
10
NT00156-EN-05
IEC 60870-5-101
Link layer specific parameters: Reset on hang up: With non-permanent communication media (GSM, PSTN), enable or disable initialization of primary and secondary after each call Reset on com fault : Not used in unbalanced mode. Check Sec. state : Not used in unbalanced mode.
Page Settings / Protocol There is an additional section by comparison with unbalanced mode, concerning the parameters specific to this mode.
NT00156-EN-05
11
IEC 60870-5-101
TL (link timeout interval) Since the frames sent can be disturbed, a repetition system is implemented. The time defined here indicates the time that the T200 will wait until the SCADA indicates to it that it has correctly received the frame sent to it by the T200. The choice of a value depends on the speed of transmission. The higher the speed, the lower the value that will be inserted. In systems in which the frames sent by the T200 can come into collision with the frames sent by the Control Centre, it is important to insert a time-out value greater than that appearing at the SCADA end. For example, if the SCADA and the T200 send at the same time frames which come into collision (half-duplex type operation), repetition of these frames will be performed first at the SCADA end and then at the T200 end. If the values had been identical, they would have been executed simultaneously, thus creating a new collision. Maximum number of send operations When two equipments on a link are no longer able to understand one another, this may be due to the fact that they are desynchronized. Reinitialization of the link is therefore required. This section will specify the number of frame send operations without acknowledgement (first sending and repetitions) after which the T200 will go into link reinitialization. The customary values are in the range between 3 and 5. Station With each end of the link is associated a station type. There is a station A and a station B. This makes it possible to know the direction of a message. The SCADA is normally declared as station A. However, for various reasons, it may have been configured as station B. In that case the T200 must be declared as station A. Service There are two ways of handling sent frames. The send / no reply expected service entails no confirmation by the equipment for which it is destined. The send / confirmation expected service requires confirmation by the destination. The send / no reply expected service makes it possible to reduce the number of frames exchanged and hence accelerate the flow of information over a link. However, it should be avoided on noisy transmission media (messages are frequently disturbed and in this case the sender does not know that the frame has not been received correctly). It is therefore in practice usable only on dependable media. Such media are links such as RS232 links, optical fibre links, etc. on which the speeds are generally very high. This explains why it is generally not used. However, it is possible to configure it. Collision avoidance With certain transmission media, collisions can occur: - between frames sent by the SCADA and frames sent by a far-end equipment, - between frames sent by various far-end equipments. It is often easy to limit its consequences in the former case. A different TL (Timeout Link) - see above - will be set at the SCADA end and at the far-end equipment end, and if two frames come into collision, their repetitions will be staggered and the problem will be solved. The second case is more complex. To avoid collisions insofar as possible, one must know the network occupancy state. The more reliable this information, the more efficient the system. It is true that one can forcibly adopt sending only if the network is free. However, this has its limits, since two equipments may see the network free and start sending simultaneously. Even apart from this case, there is always a time lag for detection of network occupancy. Let us consider an equipment going into sending mode. Throughout the time needed for detection of this state, another equipment will consider the network as free and will therefore be authorized to send. To overcome this, it is possible to use a collision avoidance algorithm proposed by the T200. This algorithm may differ depending on the protocol used; it is called Standard in the IEC 60870-5-101 case and its parameters appear in the protocol parameters screen. Depending on the transmission medium, there will be several possible options: - Non-activated or Standard - Non-activated, Standard (squelch used for busy state), Standard (DCD used for busy state).
12
NT00156-EN-05
IEC 60870-5-101
The first group of options is proposed when the transmission medium can provide the occupancy state via the DCD signal. This is the case when the sent frames are delimited by a signal (generally RTS), said signal being linked to the DCD or causing its activation (case in which the RTS signal causes rising of a carrier detected on DCD by the other equipment). The second group of options is proposed when using a radio medium. There are generally 2 signals: the DCD signal (carrier detection) and the squelch signal. When the squelch signal is available, it should be preferred to the DCD signal. This is because carrier detection can be caused by noise on the line, whereas the squelch is generally more "secure" and gives more reliable information. In the second option, when collision avoidance is activated, an additional window appears in the protocol parameters screen.
Before describing the various parameters used, we shall explain how collision avoidance operates. We shall consider two types of frame: - acknowledgement frames; - other frames. When a T200 receives a frame from the Supervisor and this must be acknowledged by it, the acknowledgement frame is sent immediately. For the other frames, the T200 will allow for a waiting time before sending: This time is calculated by the following formula: time = (priority x min. random time) + random time The random time ranges between the min. random time and the max. random time. Priority This parameter can be used to hierarchize various T200s. The smaller the number, the more priority is assigned to the T200 (it will wait for a shorter time). Usually, this priority is left at 0. Min. random timeout Max. random timeout The random timeout, added to the wait related to the priority, is in a range between the minimum and maximum values defined here. There are no typical values for these parameters. Setting should be performed taking into account the following comments: - The timeouts are to be set according to the sending time for a frame. - The smaller the minimum timeout, the smaller the added timeout can be. - The greater the difference between the minimum timeout and the maximum timeout, the smaller the risk of sending by two T200s at the same time. - The preceding condition is achieved by increasing the maximum timeout. But allowance should be made for the fact that the greater this timeout, the longer the T200 risks waiting before sending. Generally, therefore, one opts for a value that will not be too high. The ideal solution, therefore, is to choose parameters in accordance with the above rules, and then refine them in the field.
NT00156-EN-05
13
IEC 60870-5-101
The other parameters concern the signal used to obtain the network occupancy state. Active squelch level Depending on the equipment, the squelch active state will be a low level or a high level. One should therefore choose, here, the appropriate level. Squelch protection The squelch is an occupancy signal provided by analogue type radio equipment. With this transmission medium, the transmission conditions vary with time. For example, the transmission conditions are altered depending on whether or not there are leaves on the trees. Therefore, reception levels generally vary throughout the year. Accordingly, the squelch is related to the value to which its detection level has been set. This setting is normally performed in the field and in periods when reception is the least satisfactory. However, despite all the precautions taken, squelch detection may become active permanently or over long periods of time. This means that, in this case, the T200 is therefore no longer authorized to send. To avoid this, squelch protection can be activated. When it is activated, this protection system will ensure that, when the squelch is active at the time when the T200 wants to send and when it remains active permanently during the time defined below, sending by the T200 will be authorized after this time. Tsqu (squelch protection) This time is the time referred to above. The customary value is approximately 10 s.
Explanatory diagrams Normal case The T200 needs to send here Squelch T200 sending waiting for free network waiting for calculated time
Case of permanent squelch - with squelch protection The T200 needs to send here Squelch T200 sending waiting for set time - without squelch protection The T200 needs to send here Squelch T200 sending The T200 is not authorized to send
14 NT00156-EN-05
IEC 60870-5-101
Reset on hang up: With non-permanent communication media (GSM, PSTN), enable or disable initialization of primary and secondary after each call Reset on com fault : Balanced mode only. Reset secondary if a spontaneous event as not been confirmed after retransmission. Check Sec. state : Balanced mode only. Allow to check or ignore the secondary state when data are ready to be sent by primary.
NT00156-EN-05
15
IEC 60870-5-101
16
NT00156-EN-05
IEC 60870-5-101
Adjusted mode
This mode is also known as Scaled mode. If this mode is selected, all the measurements will be transferred as M_ME_NB_1, M_ME_TB_1 or M_ME_TE_1 objects. The scaled value is a signed integer 16 bits value (-32768 to 32767) Following rules are applied to "Adjusted" mode: - Any invalid value (the value cant be read properly by the equipment) will be transmitted with the value 0x8000, and the invalid quality bit set - Any 16bits measurement will be transferred without conversion - The 32 bits measurements will be converted depending on their Max value parameter.
o If the Max Value has not been set (= 0, default value), the biggest value (=0x7FFFFFFF) is used instead o If the measurement is bigger than the Max Value, it will be transferred as 0x7FFF with the overflow quality bit set o If the measurement is lower than the (-Max Value), it will be transferred as 0x8000 with the overflow quality bit set o The measurement will be divided by ten as many times as the Max value must be divided by ten to fit into the -32768 to 32767 interval. The transmitted value is rounded. Examples: Scaled value transmitted, depending on the internal value and the max value : For 16 Bits types (TM16): Internal value 0 Max Value (parameter) 0 0 4000 0 400000 0 For 32 Bits types (TM32): Internal value 0 Max Value (parameter) 0 0 4000 0 400000 0
357 0 357 3
-700 0 -7
NT00156-EN-05
17
IEC 60870-5-101
Normalized mode
If this mode is selected, all the measurements will be transferred as M_ME_NA_1, M_ME_TA_1 or M_ME_TD_1 objects. The normalized value is a signed integer 16 bits value (-32768 to 32767) Following rules are applied to Normalized mode: - Any invalid value (the value cant be read properly by the equipment) will be transmitted with the value 0x8000, and the invalid quality bit set - The 16 bits and 32 bits measurements will be converted depending on their Min value and Max value parameters.
o If the Max value = Min value (= 0, default value), the biggest interval is used instead (-32768 to 32767 for 16 bits, -2147483648 to -2147483647 for 32 bits. o If the measurement is bigger than the Max Value, it will be transferred as 0x7FFF with the Overflow quality bit set o If the measurement is lower the Min Value, it will be transferred as 0x8000 with the overflow quality bit set o The measurement will be converted using a bijection from the min-max interval to the -32768 to 32767 interval, or 0 to 32767 (depending on the min and max) The applied formulas are: - If Min >=0 and Max > 0: Transmitted value = (Internal value Min)*32767 / (Max Min). - If Min < 0 and Max <= 0: Transmitted value = (Internal value Max)*32768 / (Max Min). - If Min < 0 and Max > 0: Transmitted value = (Internal value Min)*65535 / (Max Min) 32768. The transmitted value is rounded. Examples: Normalized value transmitted, depending on the internal value and the min and max values Internal value Min/Max Value (parameters) 0 / 0 (TM16) 0 / 0 (TM32) 0 / 4000 0 / 400000 -4000 / 4000 -4000 / 400000 -400000 / 400000 -32768 / 32767 0 0 0 0 0 0 -32119 0 0 10000 10000 0 0x7FFF 819 0x7FFF -30496 818 10000 357 357 0 2924 29 2924 -32061 28 357 80000 0 0x7FFF 6553 0x7FFF -19141 6553 0x7FFF 552000 7 0x7FFF 0x7FFF 0x7FFF 0x7FFF 0x7FFF 0x7FFF -700 -700 0 0x8000 0x8000 -5734 -32232 -57 -700 -5000 -5000 0 0x8000 0x8000 0x8000 0x8000 -410 -5000 -75000 -1 0x8000 0x8000 0x8000 0x8000 -6144 0x8000 Invalid 0x8000 0x8000 0x8000 0x8000 0x8000 0x8000 0x8000 0x8000
Scaling example: for a full scale at 400 amperes (= Max value), an internal TM value of 8192 (0x2000) corresponds to: 8192 * 400 / 32767 + 0 = 100 A (with Max = 400 and Min = 0)
18
NT00156-EN-05
IEC 60870-5-101
Page Settings / Port 2 : transmission Of course, the Control Centre must be able to be also set to "no parity". In this case one should be aware that this can have major consequences for the system's operating security. In particular, the frame coding, thus modified, no longer ensures transmission security (or at least transmission security is greatly diminished, the likelihood of considering a disturbed frame as correct being greater). To see whether this is acceptable or not, we must take into consideration the transmission scheme. This consists of three portions: the Supervisor - modem link, the modem - modem link (involving the transmission medium), and the modem - T200 link. It is therefore necessary either to reduce disturbances on these sections or to add a system which will eliminate the disturbed frames. In what follows, we shall speak, to simplify, of zero risk when the risks are extremely low. Between the T200 and the modem, if the modem is a modem located on the communication card (Easergy modem), the risks are zero. If the modem is external and located in the enclosure, it is possible to consider the risks as zero if wiring precautions are taken (cable of minimum length, shielded cable, etc.).
NT00156-EN-05
19
IEC 60870-5-101
Between the Supervisor and the modem, it is also possible to limit the risks insofar as possible by complying with the wiring precautions (shorter Supervisor - modem distance, shielded cable, etc.), especially since, in general, the Control Centre is not located like the T200 in a "hostile" environment. The most difficult part to protect is therefore the modem-to-modem link. The problem must therefore be examined on a case by case basis: - Analogue radio or leased line (LL) medium of radio type. These media are highly disturbable and they cannot be protected. It is therefore essential to use the even parity specified by the standard. This can generally be done because the modems used normally have this capability (this is the case for Easergy modems mounted on the communication card). - Digital radio medium. If this medium itself provides transmission security, it is possible to use no-parity transmission without any risk. Otherwise, it is absolutely essential to use an even parity. - PSTN medium. This transmission medium is generally undisturbed. But this is not guaranteed and may change over time. It is therefore strongly recommended to use a modem which allows even parity to be configured (this is the case for Easergy modems mounted on the communication card and for practically all "modern" modems). If this is not the case, this medium should be used only if an undetected disturbed frame would have no major impact (the execution of an unwanted order should have no serious consequences). - GSM medium. Transmission security is provided by the GSM system. The risks are therefore zero. Line idle interval between 2 characters of the same frame Some transmission systems do transmission by packets. This is the case, for example, of GSM and certain types of digital radios. To use these systems, one should therefore inhibit frame rejection when a gap exceeding the duration of one bit is detected by the receiver. For GSM, the T200 does this systematically. In those cases when it does not do so, it is possible to inhibit it by selecting "No" for "Frame error on idle line".
Page Settings / Port 2 : transmission As in the previous section, this has important consequences for transmission security. The wiring precautions mentioned above should therefore be followed scrupulously. On the other hand, modem-to-modem security, in the case of GSM, is ensured by the GSM system itself, as we said before. The risks are therefore zero. This is also generally the case for digital radios which perform transmission by packets (they operate in a similar way to GSM). If, after obtaining information from the supplier of your digital radio system, you are assured of this transmission security, and you can therefore devalidate frame rejection upon detection of a gap exceeding the duration of one bit between two characters. Otherwise, you must set up another transmission medium.
20
NT00156-EN-05
IEC 60870-5-101
Use of the transmission control character I It is impossible to use the transmission control character I (frame consisting of a single character for which the hexadecimal code equals 0xE5) in certain conditions. This is the case when using multipoint transmission media and noisy transmission media. The former include radio, radio type leased lines (LL), RS485 links, optical fibre links, and all media providing a link toward the Supervisor, common to several T200s. For such media, it is actually impossible to use the transmission control character I only in balanced mode. In this case, this is due to the fact that the single control character contains no address field and, as a consequence, the receiver cannot know who is its sender. The latter include radio (analogue type), and to a lesser extent radio type leased lines (LL). In this case, it can happen that, in the noise generated, the receiver manages to decode this character and interprets it as such, which then leads to incorrect operation. It is therefore essential, in such cases, to prohibit the use of frames consisting of this single control character. For this purpose, the following boxes will have to be deselected:
NT00156-EN-05
21
IEC 60870-5-101
Other specific configuration settings relating to transmission media, but which are not specific to the protocol, are to be implemented. They are described in the sections of the manual relating to such media.
Delay = 0s T200 B
SCADA
Radio exchanges
Delay = 3mn
=> If the next sending is scheduled at 3:15 pm, T200 A will send its alarm at 3:15 pm whereas T200 B will send it at 3:16 pm and T200 C will send it at 3:18 pm. - Settings: The new parameter appears on the protocol page only if a radio modem has been selected and if the selected mode is Balanced.
- Remark: Make sure that all settings have been defined properly. (Time-lag, cyclic period, number of repetitions in case of failure, Timeout, caller communication delay). Time-lag should be defined last.
22
NT00156-EN-05
IEC 60870-5-101
5. Diagnostic
This chapter provides information which may be necessary when operating problems are encountered. They may help with problem resolution in such cases.
NT00156-EN-05
23
IEC 60870-5-101
Receipt of positive confirmation indicates by means of bit (ACD) that the T200 has class 1 information to send. The Control Centre then demands this class 1 information. The T200 sends this information back to it. This is an end of initialization which thereby indicates to the SCADA that the T200 has just started up.
Informed of this start-up, the SCADA will generally perform time setting and repatriate all the static information (T200 database).
24
NT00156-EN-05
IEC 60870-5-101
The time setting may or may not include a delay acquisition request.
To retrieve all the T200 states, the SCADA sends it an interrogation command. The T200 sends back to it all the objects managed by it except for the integrated totals. Below, the interrogation command and its application confirmation.
single signals,
and measurements.
NT00156-EN-05
25
IEC 60870-5-101
In this reply, the T200 also indicates that it has no more class 1 data to transmit. The SCADA will then send class 2 data requests from time to time (polling).
Thus, the T200 will be able to send new data if necessary. If the SCADA manages the counters, it will send a counter interrogation command to the T200 before starting polling. In the following case, the T200 has no integrated totals to send (there are none or their information object addresses are not configured). This can be seen from the fact that there is no counter message between confirmation of the counter interrogation command and the end of counter interrogation command sent by the T200.
26
NT00156-EN-05
IEC 60870-5-101
The T200 having something to say (sending of an end of initialization has been configured), it tries to establish the link with the SCADA by sending link status requests. Below, the SCADA is not in service, it does not reply, and the T200 therefore regularly repeats this request.
Page Maintenance / Port 2 The SCADA starts up, it then replies to the request of the T200, which then sends a Communication Reset (remote link reset) which is acknowledged by the Control Centre.
The SCADA will normally set the T200 time and repatriate its database. But before this, it must initialize the link in the SCADA to T200 direction (the other direction has been initialized by the T200).
NT00156-EN-05
27
IEC 60870-5-101
The SCADA performs time setting. Here, it includes a delay acquisition command (this is not always done).
Note, here, the 2 types of acknowledgement: link level acknowledgement, application acknowledgement. The positive confirmation frames are link level acknowledgements (the far end indicates that it has received a correct frame, without prejudging the data it conveys). The user data frame interrogation command with a cause of transmission Cot = 7 (activation confirmation) returned by the T200 is the application acknowledgement. Then come signals (double and then single).
Contrary to unbalanced mode, note that, here, the T200 sends the information spontaneously without waiting for the SCADA request.
28
NT00156-EN-05
IEC 60870-5-101
The reply is terminated by sending an interrogation command with a cause of transmission Cot = 10 (activation termination).
If the SCADA manages the counters, it will send a counter interrogation command to the T200.
Here, the T200 has no integrated totals to send (there are none or their information object addresses are not configured). This can be seen from the fact that there are no counter data in the T200's reply. Change of signal transmission In unbalanced mode Following a class 2 user data request, the T200 indicates that it has a class 1 object to send. The SCADA recovers it by making a class 1 user data request. Once the change(s) has (have) been repatriated, the Control Centre resumes polling.
NT00156-EN-05
29
IEC 60870-5-101
The change is sent spontaneously by the T200. Telecontrol In unbalanced mode - Direct mode The Control Centre interrupts T200 polling to send the command. For this command, there is first an application acknowledgement by the T200. Here, the necessary conditions for execution of a telecontrol are met (the T200 is in remote mode, there is no command in progress, etc.) and the acknowledgement is therefore an activation confirmation (Cot = 7). The T200 starts order execution. The SCADA continues polling on the T200 until it obtains the change of state following the command (if the command has gone well) and the indication that the command is terminated.
The change of position of the actuated switch and command activation termination are shown below.
30
NT00156-EN-05
IEC 60870-5-101
Here again, the SCADA interrupts its polling sequence to send the command. This is done in two stages: an initial selection stage, then a confirmation stage. Each time, the T200 checks that the order execution conditions are complied with (T200 in remote mode, no command in progress, execution properly corresponding to the selected device, etc.). It confirms these tests by sending activation confirmations (select before execute).
NT00156-EN-05
31
IEC 60870-5-101
The interchange is far more limited than in unbalanced mode, since the T200 polling frames do not exist.
- Select before execute mode Here again, there are far fewer interchanges than in unbalanced mode. First, the select phase.
32
NT00156-EN-05
IEC 60870-5-101
The SCADA performs its polling normally on the T200. From time to time, the T200 records the measurements declared as cyclic and delivers them to the Control Centre in reply to one of its polling operations.
Comment: Despite the fact that the measurements are cyclic, it may be worthwhile time stamping them. This is because they cannot be time stamped using the measurement reception time, because it depends on the time of the class 2 user data request and not on the time at which they were stored in memory. The difference between the two may increase with the time difference between 2 SCADA polling operations. In balanced mode The cyclic measurements are stored in memory and then sent to the SCADA regularly by the T200.
Here, measurement time stamping is useful to obtain greater precision and in the event that, following a busy network or transmission problems, the frame will be received only a long time after cyclic measurement recording.
NT00156-EN-05
33
IEC 60870-5-101
Frame repetition In balanced mode We give, here, 2 examples showing the mechanism of frame repetition by the T200, when a transmission problem occurs. The first case corresponds to a temporary transmission problem, the second to a problem lasting a longer time. Below, the SCADA has not received the change of signal frame sent by the T200 or the T200 has not seen the acknowledgement due to a transmission disturbance. As a consequence, the T200 repeats the frame after expiry of the waiting time (the link timeout interval - TL - is set to 5 s).
If the disturbance lasts longer, the T200 repeats the frame, complying with the link timeout interval (TL Timeout Link here set to 5 s) and the maximum number of send operations (which includes the first sending and repetitions here set to 3). Still having no acknowledgement, it waits until the SCADA replies again by sending link status requests.
As soon as the SCADA replies, the T200 reinitializes the link in the T200 to SCADA direction, then sends the change frame.
34
NT00156-EN-05
IEC 60870-5-101
6. Glossary
B Balanced The balanced transmission mode is a master master transmission mode. Broadcast The Supervisor can perform T200 time setting in broadcast mode (the link address is in that case equal to 255 if it is on 1 octet or 65535 if it is on 2 octets and the common address of ASDUs is likewise equal to 255 if it is on 1 octet or 65535 if it is on 2 octets). In this case, the latter will not reply to the time setting frame (the service used is then, mandatorily, the send/no reply expected service). C Cause of transmission The objects transmitted are accompanied by a cause of transmission. It can be coded on 1 or 2 octets depending on the configuration. When it is on 2 octets, the second octet contains the originator address. This equals 0 for the T200, and it is equal to the value received in the reflected frames. The cause of transmission is denoted Cot in the traces. Clock synchronization command This command is sent by the SCADA to set the T200 time. It can be sent in broadcast mode. In that case, all the T200s allow for it. Depending on the transmission medium, good synchronization between the SCADA and the T200s (when the transmission time is constant) can be achieved, if necessary, by making a correction to the transmission delay (by the delay acquisition command), or not (when the transmission delay is variable). In the latter case, the absolute time tag of events in the SCADA and in the T200 will be different, but the relative time tag between different events in the T200 will be correct and precise. Common address of ASDUs In the T200, this address has no functionality. It is, however, checked (in the information frames received) relative to the configured value or set to the configured value (in the sent frames). It can be coded on 1 or 2 octets depending on the configuration. In general, it is set to 0, 1 or the same value as the link address. It is denoted Addr ASDU in the traces. Counter interrogation command This command, executed by the Supervisor, allows repatriation of all T200 counters (for which an information object address has been defined). D Delay acquisition command This command, possibly executed by the Supervisor, is used on transmission media for which transmission delays are repetitive. It permits correction of the transmission delay when setting the T200 time. If this command is not executed, the T200 will perform time setting with a null transmission delay correction. Direct execution In this command execution mode, the command, when it is authorized, is executed upon receiving this message. The wanted selection relay is actuated, and, after verification, it is the turn of the execution relay. During all the command sequences, checks are performed. Any detected anomaly causes immediate stoppage of the command. Double command The protocol supports single commands and double commands. They are executed in select before execute or direct execution mode depending on the configuration. Double point information Both information types, double point information and single point information are supported by the protocol.
NT00156-EN-05
35
IEC 60870-5-101
E Enhanced Performance Architecture 3-layer transmission model used in the IEC 60870-5-101 standard (simplified version of the 7-layer ISO model). End of initialization This object can be sent by the T200 or not depending on the configuration. When it is sent, it can indicate to the Supervisor that the T200 has just started up and that, as a consequence, the SCADA does not have a correct image of its status. Generally, the Supervisor then performs time setting on the T200 and repatriates its status by an interrogation command and, if necessary, a counter interrogation command. I Information object address This is the address characterizing an object in the T200. It can be coded on 1, 2 or 3 octets depending on the configuration. It is possible to adopt the same ranges of values for objects having different type identifications. Accordingly, one can have a single signal or a measurement having, for example, the address 15 as information object address. However, many users prefer to have different addresses for each object. Integrated totals The T200 can manage counters which it transmits in the form of integrated total type objects. Interrogation command This command, executed by the Supervisor, allows repatriation of all single and double signals and all T200 measurements (for which an information object address has been defined). L Link address This is the transmission address which must be specific to each SupervisorT200 link in the network. It can be coded on 1 or 2 octets depending on the configuration. It is denoted LinkAddr in the traces. Link status request This request allows the Supervisor or the T200 (in the case of balanced mode) to check the presence of the far-end equipment. It is therefore the first frame acknowledged by the far end when the latter replies again after a loss of link. M Measured value The T200 can transmit the measurements in 2 formats: normalized value or scaled value. The T200 Control cards provide Com card with the values expressed in the reference unit. The Com card will convert this value into the selected format before transmitting it. Refer to section 4.1 General configuration of the protocol Measured value, for more details. O Object Every information item transmitted is called an object. They belong to various categories characterized by a type identification. For example, there are single command, double signal information, measured value and interrogation command objects, etc. Originator address This address is coded on the second octet of the cause of transmission when the latter is on 2 octets. It equals 0 for the T200, and it is equal to the value received in the reflected frames. It is denoted org in the trace. P Polling This method, allowing information to be repatriated from the T200s, is the simplest to implement at the Supervisor end. It involves interrogating each T200 in succession so that it may return its information. The operating mode is in that case unbalanced mode. It has the disadvantage of entailing numerous interchanges even for a small quantity of useful information. Moreover, the greater the number of T200s, the greater the cycle time on all the T200s. This can mean that status refreshment for a T200 may take place only a long time after the status has changed.
36
NT00156-EN-05
IEC 60870-5-101
R Remote link reset For the Supervisor and a T200 to be able to exchange data, they must be synchronized. Now, data frames are numbered (by the FCB bit) so as to be able to detect a frame loss or repetition. Accordingly, the number of the frame expected by a station must correspond to the number of the frame sent by the remote station. This synchronization of numbering at both ends of the link is performed by the remote link reset message. In balanced mode, each end of the link will send this frame before sending data transmitted on its initiative. S Select before execute In this command execution mode, the command, when it is authorized, is executed in two stages. The T200 first receives a select message. It then receives an execute message. It checks that the same device is involved. If this check is satisfactory, it executes the command sequence. Throughout the command's duration, checks are performed. Any detected anomaly causes immediate stoppage of the command. Moreover, if, after receiving the select message, an excessive time elapses without the T200 receiving the execute message, the command is cancelled. The SCADA, after sending the select, can send a command cancellation message. Send/confirm expected When the sender uses this transmission service, the receiver must confirm to it that it has received the frame. Send/no reply expected When the sender uses this transmission service, it expects no confirmation by the receiver of correct frame reception. Sequence of information objects When an equipment has several objects of the same type to send (after an interrogation command, for example), it can, when the addresses of these objects follow one another, code them in sequence, which has the effect of shortening the frame and hence the transmission time. It is therefore advantageous to enter consecutive addresses for all objects of the same type. Single command The protocol supports single commands and double commands. They are executed in select before execute or direct execution mode depending on the configuration. Single point information Both information types, double point information and single point information are supported by the protocol. T Transmission control character I Ack and Nack frame reception acknowledgements can be coded either as fixed-length frames or using the transmission control character I. This character is coded E5 in hexadecimal. In the case of non-noisy point-to-point links (e.g., RS-232 link, PSTN link), the single control character I can be used in place of the fixed-length frame to reduce transmission times. When working with noisy transmission, one should not use the single control character I, because it can easily be generated by noise. Moreover, some SCADAs do not handle this character. In that case the box must be deselected. Likewise, on multipoint networks, the single control character cannot be used because in this case the receiver cannot know who is the sender. Type identification This defines the object transmitted. One can find, for example, double command, single point information with time tag on 7 octets, delay acquisition command, etc. It is denoted Tid in the traces. U Unbalanced The unbalanced transmission mode is a master - slave transmission mode in which the Supervisor acts as master and the T200 acts as slave.
NT00156-EN-05
37
IEC 60870-5-101
7. Interoperability
7.1 System or device
(system-specific parameter) System definition Controlling station definition (master)
Multipoint-partyline Multipoint-star
38
NT00156-EN-05
IEC 60870-5-101
Unbalanced transmission
Unstructured
Frame length 255 255 9 Maximum length L (control direction) Maximum length L (monitor direction) Number of repetitions
When using an unbalanced link layer, the following ASDU types are returned in class 2 messages (low priority) with the indicated causes of transmission:
The standard assignment of ASDUs to class 2 messages is used as follows: Type identification 9,11,13,21 Cause of transmission <1>
A special assignment of ASDUs to class 2 messages is used as follows: Type identification Cause of transmission
Note: In response to a class 2 poll, a controlled station may respond with class 1 data when there is no class 2 data available.
NT00156-EN-05
39
IEC 60870-5-101
One octet
Two octets
Structured
Unstructured
One octet
Two octets (with originator address) Originator address is set to zero if not used
40
NT00156-EN-05
IEC 60870-5-101
Process information in monitor direction (station-specific parameter) (Mark each ID with an "X" if it is only used in the standard direction, "R" if only used in the reverse direction, "B" if used in both directions).
<1> := Single-point information <2> := Single-point information with time tag <3> := Double-point information <4> := Double-point information with time tag <5> := Step position information <6> := Step position information with time tag <7> := Bitstring of 32 bits <8> := Bitstring of 32 bits with time tag
M_SP_NA_1 M_SP_TA_1 M_DP_NA_1 M_DP_TA_1 M_ST_NA_1 M_ST_TA_1 M_BO_NA_1 M_BO_TA_1 M_ME_NA_1 M_ME_TA_1 M_ME_NB_1 M_ME_TB_1 M_ME_NC_1 M_ME_TC_1 M_IT_NA_1 M_IT_TA_1 M_EP_TA_1 M_EP_TB_1 M_EP_TC_1 M_PS_NA_1 M_ME_ND_1 M_SP_TB_1 M_DP_TB_1 M_ST_TB_1 M_BO_TB_1 M_ME_TD_1 M_ME_TE_1 M_ME_TF_1 M_IT_TB_1 M_EP_TD_1 M_EP_TF_1
<9> := Measured value, normalized value <10> := Measured value, normalized value with time tag <11> := Measured value, scaled value <12> := Measured value, scaled value with time tag <13> := Measured value, short floating point value <14> := Measured value, short floating point value with time tag <15> := Integrated totals <16> := Integrated totals with time tag <17> := Event of protection equipment with time tag <18> := Packed start events of protection equipment with time tag <19> := Packed output circuit information of protection equipment with time tag <20> := Packed single-point information with status change detection <21> := Measured value, normalized value without quality descriptor
<30> := Single-point information with time tag CP56Time2a <31> := Double-point information with time tag CP56Time2a <32> := Step position information with time tag CP56Time2a <33> := Bitstring of 32 bits with time tag CP56Time2a <34> := Measured value, normalized value with time tag CP56Time2a <35> := Measured value, scaled value with time tag CP56Time2a <36> := Measured value, short floating point value with time tag CP56Time2a <37> := Integrated totals with time tag CP56Time2a <38> := Event of protection equipment with time tag CP56Time2a <40> := Packed output circuit information of protection equipment with time tag CP56Time2a
<39> := Packed start events of protection equipment with time tag CP56Time2a M_EP_TE_1
NT00156-EN-05
41
IEC 60870-5-101
Process information in control direction (station-specific parameter) (Mark each ID with an "X" if it is only used in the standard direction, "R" if only used in the reverse direction, "B" if used in both directions).
<45> := Single command <46> := Double command <47> := Regulation step command <48> := Set point command, normalized value <49> := Set point command, scaled value <50> := Set point command, short floating point value <51> := Bitstring of 32 bits
System information in monitor direction (station-specific parameter) (Mark each ID with an "X" if it is only used in the standard direction, "R" if only used in the reverse direction, "B" if used in both directions).
M_EI_NA_1
System information in control direction (station-specific parameter) (Mark each ID with an "X" if it is only used in the standard direction, "R" if only used in the reverse direction, "B" if used in both directions).
<100> := Interrogation command <101> := Counter interrogation command <102> := Read command <103> := Clock synchronization command <104> := Test command <105> := Reset process command <106> := Delay acquisition command
42
NT00156-EN-05
IEC 60870-5-101
Parameter in control direction (station-specific parameter) (Mark each ID with an "X" if it is only used in the standard direction, "R" if only used in the reverse direction, "B" if used in both directions). <110> := Parameter of measured value, normalized value <111> := Parameter of measured value, scaled value <112> := Parameter of measured value, short floating point value <113> := Parameter activation P_ME_NA_1 P_ME_NB_1 P_ME_NC_1 P_AC_NA_1
File transfer (station-specific parameter) (Mark each ID with an "X" if it is only used in the standard direction, "R" if only used in the reverse direction, "B" if used in both directions). <120> := File ready <121> := Section ready <122> := Call directory, select file, call file, call section <123> := Last section, last segment <124> := Ack file, ack section <125> := Segment <126> := Directory F_FR_NA_1 F_SR_NA_1 F_SC_NA_1 F_LS_NA_1 F_AF_NA_1 F_SG_NA_1 F_DR_TA_1
NT00156-EN-05
43
IEC 60870-5-101
Assignment of type identifications and causes of transmission (station-specific parameter) The shaded boxes are not required. Blank = The function or the ASDU is not used. The type identification/cause of transmission combinations are marked: "X" if used only in the standard direction; "R" if used only in the reverse direction; "B" if used in both directions. Type identification 1 2 3 4 5 6 7 Cause of transmission 8 9 10 11 12 13
<1> <2> <3> <4> <5> <6> <7> <8> <9> <10> <11> <12> <13> <14> <15> <16> <17> <18> <19> <20> <21> <30> <31> <32> <33> <34> <35> <36> <37> <38> <39> <40> <45> <46> <47> <48> <49>
M_SP_NA_1 M_SP_TA_1 M_DP_NA_1 M_DP_TA_1 M_ST_NA_1 M_ST_TA_1 M_BO_NA_1 M_BO_TA_1 M_ME_NA_1 M_ME_TA_1 M_ME_NB_1 M_ME_TB_1 M_ME_NC_1 M_ME_TC_1 M_IT_NA_1 M_IT_TA_1 M_EP_TA_1 M_EP_TB_1 M_EP_TC_1 M_PS_NA_1 M_ME_ND_1 M_SP_TB_1 M_DP_TB_1 M_ST_TB_1 M_BO_TB_1 M_ME_TD_1 M_ME_TE_1 M_ME_TF_1 M_IT_TB_1 M_EP_TD_1 M_EP_TE_1 M_EP_TF_1 C_SC_NA_1 C_DC_NA_1 C_RC_NA_1 C_SE_NA_1 C_SE_NB_1
X X X X
X X X X
20 to 36 X X
37 to 41
44
45
46
47
X X
X X X
X X X
X X
X X
X X
X X
X X
X X X
X X X
X X
X X
X X
X X
X X
44
NT00156-EN-05
IEC 60870-5-101
Type identification 1 2 3 4 5 6 7
Cause of transmission 8 9 10 11 12 13
20 to 36
37 to 41
44
45
46
47
<50> C_SE_NC_1 <51> C_BO_NA_1 <70> M_EI_NA_1 <100> C_IC_NA_1 <101> C_CI_NA_1 <102> C_RD_NA_1 <103> C_CS_NA_1 <104> C_TS_NA_1 <105> C_RP_NA_1 <106> C_CD_NA_1 <110> P_ME_NA_1 <111> P_ME_NB_1 <112> P_ME_NC_1 <113> P_AC_NA_1 <120> F_FR_NA_1 <121> F_SR_NA_1 <122> F_SC_NA_1 <123> F_LS_NA_1 <124> F_AF_NA_1 <125> F_SG_NA_1 a) <126> F_DR_TA_1 a) Exclusively blank or X
X X X X X X X X X X X X X X X X
NT00156-EN-05
45
IEC 60870-5-101
Remote initialisation
Cyclic data transmission (station-specific parameter) (Mark each ID with an "X" if it is only used in the standard direction, "R" if only used in the reverse direction, "B" if used in both directions).
Read process (station-specific parameter) (Mark each ID with an "X" if it is only used in the standard direction, "R" if only used in the reverse direction, "B" if used in both directions).s
Read process
Spontaneous transmission (station-specific parameter) (Mark each ID with an "X" if it is only used in the standard direction, "R" if only used in the reverse direction, "B" if used in both directions).
Spontaneous transmission
46
NT00156-EN-05
IEC 60870-5-101
Double transmission of information objects with cause of transmission spontaneous (station-specific parameter) (Mark each information type with an "X" where both a type ID without time and corresponding type ID with time are issued in response to a single spontaneous change of a monitored object). The following type identifications may be transmitted in succession caused by a single status change of information object. The particular information object addresses for which double transmission is enabled are defined in a project-specific list. Single-point information M_SP_NA_1, M_SP_TA_1, M_SP_TB_1 and M_PS_NA_1 Double-point information M_DP_NA_1, M_DP_TA_1 and M_DP_TB_1 Step position information M_ST_NA_1, M_ST_TA_1 and M_ST_TB_1 String of 32 bits M_BO_NA_1, M_BO_TA_1, and M_BO_TB_1 (if defined by a specific project) Measured value, normalized value M_ME_NA_1, M_ME_TA_1, M_ME_ND_1 and M_ME_TD_1 Measured value, scaled value M_ME_NB_1, M_ME_TB_1 and M_ME_TE_1 Measured value, short floating point number M_ME_NC_1, M_ME_TC_1 and M_ME_TF_1 Station interrogation (station-specific parameter) (Mark each ID with an "X" if it is only used in the standard direction, "R" if only used in the reverse direction, "B" if used in both directions).
Global Group 1 Group 2 Group 3 Group 4 Group 5 Group 6 Group 7 Group 8 Group 9 Group 10 Group 11 Group 12 Group 13 Group 14 Group 15 Group 16
Information object addresses assigned to each group must be shown in a separate table. Clock synchronisation (station-specific parameter) (Mark each ID with an "X" if it is only used in the standard direction, "R" if only used in the reverse direction, "B" if used in both directions).
Clock synchronisation Day of week used RES1, GEN (substituted/not substituted timetag) used SU-bit (summertime) used
NT00156-EN-05
47
IEC 60870-5-101
Command transmission (object-specific parameter) (Mark each ID with an "X" if it is only used in the standard direction, "R" if only used in the reverse direction, "B" if used in both directions).
Direct command transmission Direct set point command transmission Select and execute command Select and execute set point command C_SE_ACTERM used No additional definition Short-pulse duration (duration determined by a system parameter in the controlled station) Long-pulse duration (duration determined by a system parameter in the controlled station) Persistent output
Transmission of integrated totals (station- or object-specific parameter) (Mark each ID with an "X" if it is only used in the standard direction, "R" if only used in the reverse direction, "B" if used in both directions).
Mode A: Local freeze with spontaneous transmission Mode B: Local freeze with counter interrogation Mode C: Freeze and transmit by counter interrogation commands Mode D: Freeze by counter interrogation command, frozen values reported spontaneously Counter read Counter freeze without reset Counter freeze with reset Counter reset General request counter Request counter group 1 Request counter group 2 Request counter group 3 Request counter group 4
48
NT00156-EN-05
IEC 60870-5-101
Parameter loading (object-specific parameter) (Mark each ID with an "X" if it is only used in the standard direction, "R" if only used in the reverse direction, "B" if used in both directions). Threshold value Smoothing factor Low limit for transmission of measured value High limit for transmission of measured value Parameter activation (object-specific parameter) (Mark each ID with an "X" if it is only used in the standard direction, "R" if only used in the reverse direction, "B" if used in both directions). Act/deact of persistent cyclic or periodic transmission of the addressed object Test procedure (station-specific parameter) (Mark each ID with an "X" if it is only used in the standard direction, "R" if only used in the reverse direction, "B" if used in both directions). Test procedure File transfer (object-specific parameter) File transfer in monitor direction Transparent file Transmission of disturbance data of protection equipment Transmission of sequences of events Transmission of sequences of recorded analogue values File transfer in control direction Transparent file Background scan (station-specific parameter) (Mark each ID with an "X" if it is only used in the standard direction, "R" if only used in the reverse direction, "B" if used in both directions). Background scan Acquisition of transmission delay (station-specific parameter) (Mark each ID with an "X" if it is only used in the standard direction, "R" if only used in the reverse direction, "B" if used in both directions).
NT00156-EN-05
49
IEC 60870-5-101
8. Object addressing
In the following tables will be found the default settings for the access classes and information object addresses. The addresses defined here are compatible with the information object addresses of the series 2 T200s. In these tables do not appear objects which may have been acquired by the T200 (in MODBUS protocol) on the optional link to accessory equipment. This is because their configuration is completely free in relation to the IEC 60870-5-101 protocol (type, information object address), and the only rule to be obeyed is, of course, not to use for one object an address used for another object.
8.1 Legend
Abbreviation Type Internal No. TCD TSS TSD TM CNT Access Class 0 1 2 Options I U P 2U AOI NA Meaning Transmitted as
Tlcommande double (double telecontrol) Tlsignalisation simple (single telesignal) Tlsignalisation double (double telesignal) Tlmesure (remote measurement) Counter Defined as Viewing Operator Administrator Required commercial option I, IU, IUP, I2UP TR IU, IUP, I2UP TR IUP, I2UP TR I2UP TR
Double command Single-point information Double-point information Measured value Integrated totals
Meaning Not Accessible by SCADA: no information object address has been configured. For the SCADA to be able to access the Object, simply configure an information object address (which is not already used)
50
NT00156-EN-05
IEC 60870-5-101
Type - Internal No. Access Channel 1 Switch position Switch locked Switch command Operation counter Operation counter preset command Auxiliary DI MV voltage present Earth fault Phase fault Phase current 1 Phase current 2 Phase current 3 Neutral current Average current U21 voltage measurement V1 voltage measurement Frequency Active power Reactive power Apparent power Power factor Active energy Active energy preset command Reactive energy Reactive energy preset command Channel 2 Switch position Switch locked Switch command Operation counter Operation counter preset command Auxiliary DI MV voltage present Earth fault Phase fault Phase current 1 Phase current 2 Phase current 3 Neutral current Average current U21 voltage measurement V1 voltage measurement Frequency Active power Reactive power Apparent power Power factor Active energy Active energy preset command Reactive energy Reactive energy preset command
NT00156-EN-05
Options
AOI (Hex) 20 44 04 NA NA NA NA 3D 3C NA NA NA NA C0 C2 NA NA NA NA NA NA NA NA NA NA 21 45 05 NA NA NA 4F 3E 3F NA NA NA NA C1 C3 NA NA NA NA NA NA NA NA NA NA
51
TSD 1 TSS 49 TCD 1 CNT 1 TCD 25 TSS 51 TSS 73 TSS 71 TSS 77 TM 2 TM 3 TM 4 TM 5 TM 6 TM 47 TM 50 TM 8 TM 53 TM 54 TM 55 TM 7 CNT 5 TCD 29 CNT 13 TCD 37 TSD 2 TSS 81 TCD 2 CNT 2 TCD 26 TSS 83 TSS 105 TSS 103 TSS 109 TM 9 TM 10 TM 11 TM 12 TM 13 TM 56 TM 59 TM 15 TM 62 TM 63 TM 64 TM 14 CNT 6 TCD 30 CNT 14 TCD 38
0 0 1 0 2 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 2 0 2 0 0 1 0 2 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 2 0 2
I I I I I U U P P P P P P P
I I I I I U U P P P P P P P
IEC 60870-5-101
Type - Internal No. Access Common objects Local/Remote position Door opening Fault detection reset command Immediate AC power supply defect Time-delayed AC power supply defect Power cut imminent Automatic controls Automatic control ON/OFF position Automatic control ON/OFF command Automatic control has operated Internal faults Motorization power supply failure Accessory equipment power supply failure Charger fault Battery fault Digital Inputs/Outputs Digital input 1 Digital input 2 Digital input 3 Digital input 4 Digital input 5 Digital input 6 Digital input 7 Digital input 8 Digital output 1 position Digital output 1 command Digital output 2 position Digital output 2 command Digital output 3 position Digital output 3 command TSS 23 TSS 24 TCD 17 TSS 17 TSS 18 TSS 25 TSD 9 TCD 9 TSS 57 TSS 19 TSS 20 TSS 21 TSS 22 TSS 1 TSS 2 TSS 3 TSS 4 TSS 5 TSS 6 TSS 7 TSS 8 TSD 5 TCD 5 TSD 6 TCD 6 TSD 7 TCD 7 0 0 1 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 1 0 1
Options
AOI (Dec) 82 78 21 83 88 NA 35 7 89 87 NA 85 86 76 77 NA NA NA NA NA NA NA NA NA NA NA NA
AOI (Hex) 52 4E 15 53 58 NA 23 07 59 57 NA 55 56 4C 4D NA NA NA NA NA NA NA NA NA NA NA NA
52
NT00156-EN-05
IEC 60870-5-101
Type - Internal No. Access Channel 1 Switch position Switch locked Switch command MV voltage present (auxiliary DI) Earth fault Phase fault Phase current Channel 2 Switch position Switch locked Switch command MV voltage present (auxiliary DI) Earth fault Phase fault Phase current Channel 3 Switch position Switch locked Switch command MV voltage present (auxiliary DI) Earth fault Phase fault Phase current Channel 4 Switch position Switch locked Switch command MV voltage present (auxiliary DI) Earth fault Phase fault Phase current Channel 5 Switch position Switch locked Switch command MV voltage present (auxiliary DI) Earth fault Phase fault Phase current Channel 6 Switch position Switch locked Switch command MV voltage present (auxiliary DI) Earth fault Phase fault Phase current TSD 1 TSS 49 TCD 1 TSS 54 TSS 71 TSS 77 TM 2 TSD 2 TSS 81 TCD 2 TSS 86 TSS 103 TSS 109 TM 9 TSD 3 TSS 113 TCD 3 TSS 118 TSS 135 TSS 141 TM 17 TSD 4 TSS 145 TCD 4 TSS 150 TSS 167 TSS 173 TM 24 TSD 41 TSS 321 TCD 41 TSS 326 TSS 343 TSS 349 TM 84 TSD 42 TSS 353 TCD 42 TSS 358 TSS 375 TSS 381 TM 91 0 0 1 0 0 0 0 0 0 1 0 0 0 0 0 0 1 0 0 0 0 0 0 1 0 0 0 0 0 0 1 0 0 0 0 0 0 1 0 0 0 0
Options
AOI (Dec) 32 68 4 78 61 60 192 33 69 5 79 63 62 193 34 70 6 80 65 64 194 35 71 7 81 67 66 195 36 100 8 110 93 92 196 37 101 9 111 95 94 197
AOI (Hex) 20 44 04 4E 3D 3C C0 21 45 05 4F 3F 3E C1 22 46 06 50 41 40 C2 23 47 07 51 43 42 C3 24 64 08 6E 5D 5C C4 25 65 09 6F 5F 5E C5
NT00156-EN-05
53
IEC 60870-5-101
Type - Internal No. Access Channel 7 Switch position Switch locked Switch command MV voltage present (auxiliary DI) Earth fault Phase fault Phase current Channel 8 Switch position Switch locked Switch command MV voltage present (auxiliary DI) Earth fault Phase fault Phase current Channel 9 Switch position Switch locked Switch command MV voltage present (auxiliary DI) Earth fault Phase fault Phase current Channel 10 Switch position Switch locked Switch command MV voltage present (auxiliary DI) Earth fault Phase fault Phase current Channel 11 Switch position Switch locked Switch command MV voltage present (auxiliary DI) Earth fault Phase fault Phase current Channel 12 Switch position Switch locked Switch command MV voltage present (auxiliary DI) Earth fault Phase fault Phase current TSD 43 TSS 385 TCD 43 TSS 390 TSS 407 TSS 413 TM 99 TSD 44 TSS 417 TCD 44 TSS 422 TSS 439 TSS 445 TM 106 TSD 81 TSS 593 TCD 81 TSS 598 TSS 615 TSS 621 TM 166 TSD 82 TSS TCD 82 TSS TSS TSS TM 173 TSD 83 TSS TCD 83 TSS TSS TSS TM 181 TSD 84 TSS TCD 84 TSS TSS TSS TM 188 0 0 1 0 0 0 0 0 0 1 0 0 0 0 0 0 1 0 0 0 0 0 0 1 0 0 0 0 0 0 1 0 0 0 0 0 0 1 0 0 0 0
Options
AOI (Dec) 38 102 10 112 97 96 198 39 103 11 113 99 98 199 40 132 12 142 125 124 200 41 133 13 143 127 126 201 42 134 14 144 129 128 202 43 135 15 145 131 130 203
AOI (Hex) 26 66 0A 70 61 60 C6 27 67 0B 71 63 62 C7 28 84 0C 8E 7D 7C C8 29 85 0D 8F 7F 7E C9 2A 86 0E 90 81 80 CA 2B 87 0F 91 83 82 CB
54
NT00156-EN-05
IEC 60870-5-101
Type - Internal No. Access Channel 13 Switch position Switch locked Switch command MV voltage present (auxiliary DI) Earth fault Phase fault Phase current Channel 14 Switch position Switch locked Switch command MV voltage present (auxiliary DI) Earth fault Phase fault Phase current Channel 15 Switch position Switch locked Switch command MV voltage present (auxiliary DI) Earth fault Phase fault Phase current Channel 16 Switch position Switch locked Switch command MV voltage present (auxiliary DI) Earth fault Phase fault Phase current Common objects Local/Remote position Fault detection reset command channels 1 to 4 Fault detection reset command channels 5 to 8 Fault detection reset command channels 9 to 12 Fault detection reset command channels 13 to 16 Immediate AC power supply defect Time-delayed AC power supply defect Power cut imminent TSD 121 TSS 865 TCD 121 TSS 870 TSS 887 TSS 893 TM 248 TSD 122 TSS 897 TCD 122 TSS 902 TSS 919 TSS 925 TM 255 TSD 123 TSS 929 TCD 123 TSS 934 TSS 951 TSS 957 TM 263 TSD 124 TSS 961 TCD 124 TSS 966 TSS 983 TSS 989 TM 270 TSS 23 TCD 17 TCD 57 TCD 97 TCD 137 TSS 17 TSS 18 TSS 25 0 0 1 0 0 0 0 0 0 1 0 0 0 0 0 0 1 0 0 0 0 0 0 1 0 0 0 0 0 1 1 1 1 0 0 0
Options
AOI (Dec) 44 164 16 174 157 156 204 45 165 17 175 159 158 205 46 166 18 176 161 160 206 47 167 19 177 163 162 207 82 21 NA NA NA 83 88 NA
AOI (Hex) 2C A4 10 AE 9D 9C CC 2D A5 11 AF 9F E 9 CD 2E A6 12 B0 A1 A0 CE 2F A7 13 B1 A3 A2 CF 52 15 NA NA NA 53 58 NA
NT00156-EN-05
55
IEC 60870-5-101
Type - Internal No. Access Automatic controls Automatic control ON/OFF position channels 1 to 4 Automatic control ON/OFF command channels 1 to 4 Automatic control ON/OFF position channels 5 to 8 Automatic control ON/OFF command channels 5 to 8 Automatic control ON/OFF position channels 9 to 12 Automatic control ON/OFF command channels 9 to 12 Automatic control ON/OFF position channels 13 to 16 Automatic control ON/OFF command channels 13 to 16 Internal faults Motorization power supply failure Accessory equipment power supply failure Charger fault Battery fault Fault detector link defect Digital inputs Digital input 1 Digital input 2 Digital input 3 Digital input 4 Digital input 5 Digital input 6 Digital input 7 Digital input 8 Digital input 9 Digital input 10 Digital input 11 Digital input 12 Digital input 13 Digital input 14 Digital input 15 Digital input 16 Digital input 17 Digital input 18 Digital input 19 Digital input 20 Digital input 21 Digital input 22 Digital input 23 Digital input 24 TSD 9 TCD 9 TSD 49 TCD 49 TSD 89 TCD 89 TSD 129 TCD 129 0 1 0 1 0 1 0 1
Options
AOI (Dec) 52 24 53 25 54 26 55 27
AOI (Hex) 34 18 35 19 36 1A 37 1B
TSS 19 TSS 20 TSS 21 TSS 22 TSS 47 TSS 1 TSS 2 TSS 3 TSS 4 TSS 5 TSS 6 TSS273 TSS274 TSS275 TSS276 TSS277 TSS278 TSS545 TSS546 TSS547 TSS548 TSS549 TSS550 TSS817 TSS818 TSS819 TSS820 TSS821 TSS822
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
87 NA 85 86 NA 76 77 84 89 90 91 108 109 116 121 122 123 140 141 148 153 154 155 172 173 180 185 186 187
57 NA 55 56 NA 4C 4D 54 59 5A 5B 6C 6D 74 79 7A 7B 8C 8D 94 99 9A 9B AC AD B4 B9 BA Bb
56
NT00156-EN-05
IEC 60870-5-101
NT00156-EN-05
57
IEC 60870-5-101
0 0 0 0 0 0 0 0
35 34 38 37 NA NA NA NA
23 22 26 25 NA NA NA NA
TM10 TM11
0 0
NA 39
NA 27
TSS1 TSS2 TSS3 TSS4 TSS5 TSS6 CNT1 CNT2 CNT3 CNT4 CNT5 CNT6 TCD1 TCD2 TCD3 TSD1 TSD2 TSD3 TCD4 TSD4
0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 0 0 0 1 0
10 11 12 13 14 15 NA NA NA NA NA NA 1 2 3 31 32 33 NA NA
A B C D E F NA NA NA NA NA NA 1 2 3 1F 20 21 NA NA
58
NT00156-EN-05
NT00156-EN-05
59
Schneider Electric Industries SAS Schneider Electric Telecontrol 839 chemin des Batterses Z.I. Ouest 01700 St Maurice de Beynost Tel : +33 (0)4 78 55 13 13 Fax : +33 (0)4 78 55 50 00 http://www.schneider-electric.com E-mail : [email protected] NT00156-EN-05 02/2011
As standards, specifications and designs change from time to time, please ask for confirmation of the information given in this publication.
Publication, production and printing : Schneider Electric Telecontrol Made in France - Europe