Manual - CP-8050 - ENG - DC8-026-2 - 11 Nov IEC104
Manual - CP-8050 - ENG - DC8-026-2 - 11 Nov IEC104
13.5.1 Introduction
The IEC 60870-5-104 protocol is a standardized transmission protocol (TCP/IP) for communication with remote
stations in the network (LAN, WAN).
The IEC 60870-5-104 protocol is a transmission protocol on OSI-layer 5-7 for the communication between
control systems or between master stations and remote terminal units. For OSI-layer 3+4 the TCP/IP protocol is
implemented.
The protocol is especially suitable for SCADA applications.
In contrast to the IEC 60870-5-101 protocol, which establishes connections over serial interfaces, the IEC
60870-5-104 interface enables the communication over networks (Local Area Network "LAN" and Wide Area
Network "WAN"). Thereby common network components such as switches and routers can be used.
The IEC 60870-5-104 protocol uses a signal-orientated data model. Every message represents one data point,
such as e.g. one measured value, setpoint value, command or alarm. This message is thereby defined by an
address and a data type. The address then determines which signal is concerned, i.e. transmitter and receiver
must know the meaning of the address.
For the transmission of data, a "TCP-Connection" is established between 2 participating stations. One station
can establish an independent connection to several different stations.
Each station has equal access and can spontaneously perform a data transmission.
When using both firmwares in CP-8050 - ETI4 with Linux TCP/IP Stack and FWI4 with Embedded TCP/IP Stack - a
separation of the networks through the Application Layer Firewall (realized via "TCP/IP Stack Separation") is
achieved.
Schematic representation:
Example:
13.5.2 Functions
■ Interoperability
– IEC 60870-5-104 Ed.2 X X
– Interoperability according to 13.5.10 Interoperability IEC 60870-5-104 (ETI4, X X
FWI4)
■ License
– License required to use the firmware in CP-8050 - X
– License management with Siemens ALM "Automation License Manager" - X
– Engineering: Import license from ALM - X
■ Special functions
● WhiteList-Filter X X
● WhiteList-Filter “TI-Filter” X X
● Data Throughput Limitation X X
● Time stamp (IV=1) in Messages in Transmit Direction X X
● Originator address = 0 for all messages in transmit direction X X
● Summer time bit (SU) = 0 for all messages in transmit direction (time tag) X X
● Day of week (DOW) = 0 for all messages in transmit direction (time tag) X X
● Special functions DBAG
– Breaker delay in transmit direction (<TI=150>) X X
– Send originator address with settable value X X
● Special functions RWE
– Bit by bit marking of the field X X
– Cyclic measured values X X
– Address of the return information for selection command 2 X X
– NT-Bit, IV-Bit according to RWE requirements X X
● Suppress error in case of connection failure X X
● Error handling for connection with “failure = suppress”
– NT-Bit simulation after connection failure X X
– General interrogation after connection is OK X X
■ Security
● TLS (IEC 62351-3 “Transport Layer Security”)
– max. Connections with TLS 25 -
– Mixture of connections with/without TLS X -
– Portnumber (TCP) for TLS 19998 -
– Port number (TCP) for TLS parameter-settable (1024 – 65535) X -
– PKI Certificate-Management X -
● Whitelist-Filter
– WhiteList-Filter (predefined for all TI’s + COT‘s) X X
– WhiteList-Filter “TI-Filter” (type identification pass-through filter - parameter- X X
settable)
● Data throughput limit
– Data Throughput Limitation in Receive Direction X X
– Data Throughput Limitation in transmit direction X X
■ Engineering
● SICAM Device Manager X X
● SICAM TOOLBOX II X X
● Remote operation
– Remote operation with SICAM TOOLBOX II based on http/https X 128 X 128
– Remote operation via control message “enable/disable” X 128 X 128
– Warning for “remote operation active” X 128 X 128
NOTE
i
13.5.4 Communication
For the stations to communicate with each other, suitable transmission facilities and/or network components
may be needed in addition.
IP Addresses
Every device which is connected to a TCP/IP network has an unambiguous IP address.
The protocol firmware supports only IP addresses in the format IPv4 (=32 Bit). With that 232, therefore
4,294,967,296 addresses can be represented. The IP address is mostly represented in the dotted decimal nota-
tion.
Example: 192,168,122,195
The IP address of the own station is to be parameterized with the parameter [BSE] System settings |
Network settings | Interface | IPV4 address .
With CP-8050, a separate IP address can be parameterized for each Ethernet interface.
The IP address(es) of the remote station(s) is(are) to be parameterized for each connection in the system-tech-
nical parameters with parameter [PRE] Station definition (Connection definition) .
Port Numbers
Every IP connection is defined by the IP address of the own station and the remote station and the port
number. The port numbers are determined by the IANA (Internet Assigned Numbers Authority).
Port numbers used in the LAN/WAN protocol firmware:
Port Number Protocol Standard
2404 IEC 60870-5-104 IEC 60870-5-104 Edition 2.0
A network mask with 27 set bits produces a network part of 192.168.122.192. 5 bits and therefore 32
addresses are left over for the device part.
In the above example the smallest host address ends with 11000000 (decimal: 192), the greatest possible
host address with the octet 11011111 (decimal: 223). The address range for the subnet in the example is
therefore 192.168.122.192 to 192.168.122.223.
The greatest address is by definition reserved for the IP Broadcast and the smallest address describes the
network itself. They are therefore not included in the freely usable addresses.
In practice the Default Gateway is often assigned to the smallest (binary in the example: 11000001, decimal:
193) or largest (binary in the example: 11011110, decimal: 222) usable IP address in the network.
Connection-specific parameters
In the master station and in the remote terminal unit(s), the required settings are to be carried out in the
parameters of the Station definition (Connection definition) .
The following parameters can be set for each connection:
• Connection
A parameterized connection can be activated/deactivated with the parameter [PRE] Station defi-
nition (Connection definition) | Connection definition | Connection ; e.g. this
way connections can be prepared, which are activated at a later time by means of parameterization.
• IP-address
For every connection the IP address of the remote station is to be parameterized.
The IP address (Internet-Protocol) is a number, which permits the addressing of parties in LAN/WAN IP
networks. This address must always be unambiguous in a network.
The IP address is to be parameterized as follows (example): 192,168,122,195. The IP address of the
remote station is to be parameterized for every connection with the parameters [PRE] Station
definition (Connection definition) | Station definition | IP address .
• Redundancy
For every connection, its redundancy function is to be determined for the selected redundancy control:
– No redundancy [Default]
– Real connection
– Virtual connection
– Connection has IEC 60870-5-104 Controlling functionality - i.e. no redundancy
For further details refer to section "Functions for the support of redundant communication routes".
With the parameter [PRE] Station definition (Connection definition) | Station
definition | Redundancy the function of the own station is to be parameterized for every connec-
tion.
• RedGroup
When using the redundancy according to IEC 60870-5-104, every connection can be assigned to one of
several redundancy groups.
For further details refer to section "Functions for the support of redundant communication routes".
With the parameter [PRE] Station definition (Connection definition) | Station
definition | RedGroup the redundancy group number is parameterized for the connection.
• Stop behavior
If the own station is parameterized as "Controlled Station" and the IEC 60870-5-104 data transfer has
been stopped by the "Controlling Station" with "STOP DataTransfer activation", with the parameter [PRE]
Station definition (Connection definition) | Station definition | Stop behav-
iour it can be selected, if in state “STOP” all messages in transmit direction (including End of Init) will be
saved or discarded.
Note: With “stop behavior = discard” a buffer overflow is avoided in the state “STOP”
• Network connection
Optimized IEC 60870-5-104 parameters for network connection:
– LAN (IEC 104 default)
– WAN
– LAN (fast dropout detection)
– GPRS
– Satellite
– free definable 1
– free definable 2
– free definable 3
• Station failure
For certain redundancy configurations or operating modes, for the SICAM RTUs internal diagnostics, the
failure of a connection can be suppressed with the parameter [PRE] Station definition
(Connection definition) | Station definition | Station failure .
If the failure is suppressed, the connection is never signaled in the diagnostic as failed and all messages
in transmit direction (also INIT-End) are discarded until the connection is established!
Note: With that a ring overflow is avoided with non-connected remote stations.
• Day of week
With function enabled with the parameter [PRE] Station definition (Connection defini-
tion) | Station definition | Day of week the day of week (DOW field of the time tag) is
always set to “0” by the LAN/WAN protocol element for all messages in transmit direction.
• Originator address
With function enabled with the parameter [PRE] Station definition (Connection defini-
tion) | Station definition | Originator address the originator address is always set to
“0” by the LAN/WAN protocol element for all messages in transmit direction.
NOTE
i If one parameter does not correspond to the required setting, a parameter error is reported!
NOTE
i The modifying of the 104 specific parameters requires detailed knowledge of the IEC 60870-5-104 protocol
and should therefore only be performed by communications experts or after consultation!
Network connection
LAN (fast
LAN (IEC dropout free free free
104 detec- GPR Satel- defin- defin- defin-
Parameters default) WAN tion) S lite able 1 able 2 able 3
IEC 104 Parameter
timeout connection setup 5 5 5 60 5 5 5 5
t0
Timeout transmit t1 15 60 7 250 60 15 15 15
timeout transmit acknowl- 10 10 2 10 10 10 10 10
edge t2
timeout connection check 20 20 10 250 20 20 20 20
t3
Max. no. of APDUs until 12 12 12 12 60 12 12 12
acknowledgement (k)
Number od APDUs until 8 8 8 8 8 8 8 8
acknowledge (w)
TCP-parameters *) *)
transmission optimization **) **) **) **) **) **) **) **)
initial TCP retransmission 2500 2500 100 2500 2500 2500 2500 2500
timeout
minimum TCP retransmis- 250 250 100 1000 250 250 250 250
sion timeout
maximum TCP retransmis- 5000 5000 200 1000 5000 5000 5000 5000
sion timeout 0
MSS (maximum segment 1460 1460 1460 512 1460 1460 1460 1460
size) transmit direction
TCP connection close ***) ***) ***) ***) ***) ***) ***) ***)
*) ... The settings for TCP parameters can not be changed in CP-8000/
CP-802x (ET84)
**) ... Possible settings:
The following IEC 60870-5-104 parameters can be set per parameter group:
• Timeout transmit t1
Timeout for transmit or test frames.
Transmitted data (Information/Transmit-/Test frames) must be acknowledged by the remote station at
the latest before expiry of the Timeout t1 with a transmit or test frame. On timeout the connection is
terminated and then re-established.
The Timeout t1 is to be parameterized with the parameter [PRE] Interface parameter |
Network connection | LAN (IEC 104 default) | IEC 104-Parameter | Timeout
transmit t1 .
The following parameters can be set for each parameter group for "Maximum number of unacknowledged I-
format frames k and acknowledgement w":
• Transmission optimization
The data transmission over TCP/IP can be optimized with the parameter [PRE] Interface param-
eter | Network connection | LAN (IEC 104 default) | TCP parameter | Transmis-
sion optimization for the following requirements:
– default (ack delay, no nagle)
– bandwith (ack delay, no nagle)
– throughput (no ack delay, nagle)
– Response time (no ack delay, no nagle)
(For details see chapter "Data Transmission Procedure")
• If a TCP packet is not full, then this is first sent when a TCP acknowledgement is received.
The data pick-up from the basic system element is performed in such a way, that on the one hand the blocking
per connection is optimally utilized, and on the other, one connection with a lot of data does not block others
unnecessarily long. With the data pick-up for transmission, the connections are processed in ascending order.
The communications function on the basic system element performs the prioritization of the data per connec-
tion. During the data pick-up, the highest priority data object is always offered for transmission.
Note:
For the optimum prioritization and blocking of the data with LAN/WAN communication, only 1 priority level is
to be used.
→ As a result a more favorable prioritization for LAN is achieved, since the data for transmission for each
connection (=destination station) are requested in groups (=blocked) by the LAN/WAN protocol element. In
addition, through the blocking at TCP/IP level, several messages for this connection are transmitted.
→ Due to this the processing of the connections according to the Round-Robin principle is ensured (Connec-
tions are processed in ascending order).
System data is processed with high priority by the communications function on the basic system element and
transferred to the LAN/WAN protocol element for transmission as fast as possible.
• "Save" [Default]
The data are saved in the data storage of the communication function on the basic system element (BSE)
until they are deleted by the dwell time monitoring or can be transmitted to the remote station.
Advantage: Storage of the data with stopped data transfer
Disadvantage: Ring overflow possible
• "Discard"
All data in transmit direction are read out immediately from the basic system element (BSE) by the
protocol firmware, not transmitted and discarded without error message. As a result an overflow of the
data storage (rings) is prevented.
Advantage: Ring overflow is prevented
Disadvantage: Data loss
Connection Termination
The following possibilities for closing a TCP/IP connection are available:
Acknowledgement Procedure
For each connection, all data messages transmitted must be acknowledged by the remote station. Thereby,
not every individual IEC 60870-5-104 packet that can contain several IEC 60870-5-104 message objects must
be acknowledged, rather several consecutively numbered messages received without error up to a moment in
time can also be acknowledged in one operation with one acknowledgement message (sum acknowledge-
ment procedure)
With this sum acknowledgement procedure, user data is transmitted from a station to the remote station
without an acknowledgement needing to be received immediately for the transmitted user data. If no
acknowledgement has been received after a maximum number (k) of transmitted but not yet acknowledged
IEC 60870-5-104 packets (ASDU's), no further data is sent until reception of the acknowledgement.
The max. number (k) of messages is to be set with the parameter [PRE] Interface parameter |
Network connection | LAN (IEC 104 default) | IEC 104-Parameter | Max. no. of
APDUs until acknowledgement (k) .
An acknowledgement must now be sent by the remote station before expiry of t1. With the simultaneous
transmission of user data (I-Frames) in both directions, acknowledgments are sent together in the user data
messages. For the data transmission of user data in only one direction, an acknowledgment (S-frame) is sent
after Timeout t2 at the latest.
On reception of IEC 60870-5-104 packets (APDUs) with user data, an acknowledgement must be sent at the
latest after reception of a settable maximum number of messages. The max. number (w) of messages is to be
set with the parameter [PRE] Interface parameter | Network connection | LAN (IEC 104
default) | IEC 104-Parameter | Number of APDUs until acknowledgement (w) .
The retries are (insofar as necessary) performed automatically by the TCP/IP layer of the protocol until the
termination of the connection and can only be influenced indirectly with the parameter [BSE] System
settings | Network settings | Interface | TCP min. acknowledge time .
The data transmission at TCP level starts the data transmission with the settable initial value for the expected
acknowledgement time. Depending on the quality of the connection the expected acknowledgement time is
adapted dynamically between the parameterized minimum or maximum TCP expected acknowledgement
time.
If, with connection established, the IEC 60870-5-104 acknowledgement for transmitted data (information/
transmit/test frames) is missing for longer than the set 104 expected acknowledgement time (timeout t1), all
IEC 60870-5-104 messages already sent but not yet acknowledged are negatively acknowledged to the basic
system element (BSE), the TCP connection is terminated with RST and the remote station flagged as failed.
The connection is setup again after a fixed implemented delay time of 2 seconds.
NOTE
i The parameter [PRE] Interface parameter | Network connection | LAN (IEC 104
default) | IEC 104-Parameter | Timeout connection setup t0 is not evaluated by the
protocol!
The error message for the failed connection is reset after successfully established connection at TCP level.
Failure Monitoring
The monitoring of every established connection is carried out by the active master / remote terminal unit
either by means of (subject to acknowledgement) spontaneously transmitted user data messages or by means
of cyclic transmitted messages (Test-Frames). The failure monitoring can be carried out independently by both
participating stations of a connection.
The Test-Frames are generated by the protocol firmware itself and are not transferred to the basic system
element.
If no user data is transmitted with a connection established and activated data transfer, a Test-Frame (TESTFR
act) is sent at the latest after expiry of the time t3 (Timeout Connection Test). This Test-Frame must be replied
(acknowledged) by the remote station with a Test-Frame (TESTFR con) at the latest before expiry of the
timeout t1.
The "Test function of the link layer" (test command) also enables a cyclic message transmission and moni-
toring controlled by the basic system element. This test function can be parameterized on the basic system
element (BSE) in the IEC 60870-5-101/104 parameter block.
The timeout t3 is retriggered with the transmission of user data messages or test frames. After a message
transmission, the remote station is signaled as failed after expiry of the monitoring time t1 (Timeout) and the
TCP connection is terminated with RST or FIN. For further details, refer to section “Acknowledgement Proce-
dure”.
No further data is sent to failed remote stations until successful establishment of the connection.
The data is stored in the data storage of the communication function on the basic system element (BSE) until
these are deleted by the dwell time monitoring or can be transmitted to the re-reachable remote station.No
further data is sent to a failed remote station until successful station initialization.
• no error in diagnostics
130 ETA2 supports only mode-1 (without parameter)! not supported by ETA4 with “IEC 60870-5-104 redundancy with 2 Ethernet inter-
faces”! During connection failure all data messages in transmit direction (including “End of Init”) will be discarded. With that a ring
overflow is avoided with non-connected remote stations.
• no error in diagnostics
After startup, the connection is first established on the TCP/IP level. Then the Controlling Station starts the
connection on the 104-level by means of STARTDTact (Start Data Transfer Activation). Afterwards the trans-
mission of user data and other system messages to the remote station is started either immediately or only
after the transmission of the INIT-End message.
End of Initialization
The INIT-End message "<TI=70> End of Initialization" is only transmitted to the remote station for each ASDU
after startup of the component or the basic system element, if the following preconditions are fulfilled:
• Sending of „end of initialization" must be enabled on the basic system element in the IEC
60870-5-101/104 parameter block
The transmission of the data from the remote terminal unit to the master station as well as from the master
station to the remote terminal unit takes place spontaneously with connection established and for each
connection. The prioritization and 104-blocking of the data ready to be sent takes place on the basic system
element (BSE). The data transmission is started after a startup or, with redundancy switchover, after successful
establishment of the connection.
For further details, see to section "Data Transmission Procedure".
The general interrogation (outstation interrogation) function is used to update the master station after the
internal connection initialization or after the master station has detected a loss of information. The general
131 All real connections of a redundancy group must have the same parameter settings!
interrogation function <TI:=100> of the master station requests the remote terminal unit connected over one
connection to transmit the current values of all its process variables.
A general interrogation command "to all" triggered in the system is always transferred by the communications
function on the basic system element (BSE) station-selective (per connection) to the protocol element of the
master station and transmitted by this to the remote terminal units.
A general interrogation command to a "prepared connection" will not be transmitted but positive confirmed
(ACTCON+) by the protocol element.
After start of the IEC 60870-104 data transfer with the message STARTDTact by the controlling station, a
general interrogation command can be sent to the controlling station if required (for update of the process
data base). For further details, refer to section "Data Transmission Procedure" | "Data trans-
mission control with Start/Stop (data flow block)".
If the IEC 60870-104 data transfer will be stopped by the controlling station using STOPDTact during running
general interrogation, the not sent general interrogation data stored on BSE can be discarded or continued
with sending after STARTDTact.
This function can be enabled on BSE with the parameter [PRE] Data base management | Data base
management at failure | Failure behavior for process inform (GI) . With selection
“Delete“ all process information with cause of transmission “interrogated by station interrogation“ including
ACTCON and ACTTERM will be deleted in case of communication failure or STOPDTact.
The deactivation of a general interrogation <COT:= 8> (DEACT) is not supported. If a deactivation is received,
the protocol element responds with DEACTCON- with <COT:=45> (unknown cause of transmission).
• current time, if the automation unit already has been synchronized previously
• relative time from startup (reference date), if the automation unit already has never been synchronized
Reference date for SICAM RTUs: 1.1.2001 1.1.2001
Reference date for Ax1703: 1.1.1997 1.1.1997
In both cases, the time tag is marked as invalid until the first reception of the synchronizing event.
NOTE
i With SICAM RTUs the new time must be sent in (advance) at change of daylight saving time, otherwise the
time is not correct for up to 1 minute.
Error signalization To localize the error, the number of commands discarded by the command delay moni-
toring since RESET is summed and the last discarded command messages are additionally saved in a diagnostic
ring. The counters and the diagnostic ring can be read out with the SICAM TOOLBOX II (ST-Emulation).
Monitoring the command delay for the following message types (TI's):
• <TI:=63> Setpoint command, short floating point number value with time tag CP56Time2a
NOTE
i • The message conversion in receive direction can also generate the assigned message types without
time tag. As a result, indirectly the internal type identifications <TI=45, 46, 47, 48, 59, 50, 51 and
104> are also affected.
• The command delay monitoring is only carried out for command messages with the cause of transmis-
sion ACT (Activation)!
A counter interrogation command "to all" triggered in the system is always transferred by the communications
function on the basic system element (BSE) station-selective (per connection) to the protocol element of the
master station and transmitted by this to the remote terminal units.
The functionality implemented in the System SICAM RTUs concerning integrated totals is documented in the
document "Common Functions Peripheral Elements according to IEC 60870-5-101/104."
13.5.6 Redundancy
To increase the availability central stations as well as remote terminal units can be implemented redundantly.
In this section, not the possible redundancy concepts themselves that can be realized are described, rather
only those functions supported by the protocol element (PRE) for the support of redundant systems or
communication routes.
The following redundancy modes are supported:
• 104-Redundancy
• PRE-Redundancy
• Device redundancy
NOTE
13.5.6.1 104-Redundancy
The "104-Redundancy" is defined in the IEC 60870-5-104 standard.
With 104-redundancy, one or more substations (Controlled Station) are connected to one or more redundant
master stations (Controlling Stations) via several logical connections. The data transfer always takes place via
only 1 started connection per redundancy group.
• The master station (Controlling Station) and the remote terminal unit (Controlled Station) support
multiple "logical connections"
• Only the master station (Controlling Station) decides which logical connection within a redundancy
group is started
• One redundancy group is only supplied by one process image (data base)
There is a TCP connection for each redundant Ethernet interface of the remote station and these redundant
connections are combined into a redundancy group. Only one of the redundant connections may be started
by the controlling station and transmit data. At the NIP, the 104-redundancy group can be described like a
switch which controls the sending of data to the started connection.
The 104-redundancy with 2 Ethernet interfaces uses an additional logical switch on the BSE which selects to
which NIP the data to be sent is forwarded, and thus the redundancy group extends over both NIPs and the
BSE.
NOTE
i The 104-redundancy "Controlled with 2 Ethernet interfaces" can only be used within one basic system
element (BSE).
A distribution of 104-redundancy over several BSE's is not supported!
The controlling station switches between the redundant connections. There are two types of redundancy
switching, the "soft switchover" and the "hard switchover".
The soft switchover is applied, e.g. during tests or when a part of the controlling station is to be decommis-
sioned. First, the previously started connection is stopped with a STOPDTact. Only when STOPDTcon has been
received by the controlling station a STARTDTact will be sent from the controlling station to another connec-
tion. This then becomes the new started connection.
The hard switchover occurs primarily when the controlling station detects a connection failure (for example,
a 104 timeout). The controlling station will immediately send a STARTDTact to another connection. This then
becomes the new started connection. If the previously started connection in the controlled station is still
established at this time (because the controlled station has not yet detected a connection failure), it is immedi-
ately closed.
Several independent redundancy groups are possible. Each connection can be assigned to exactly one redun-
dancy group.
The connection parameterization, the connection state and the redundancy state can be read out from PRE in
the ST emulation with the command "idh".
The 104-redundancy “Controlled” with 1 Ethernet interface allows the interfacing of a remote station with
redundant Ethernet interfaces over 1 Ethernet network to redundant master stations.
Example for a remote station with redundant interfaces is e.g. one system with two Ethernet interfaces or two
systems that are operated redundantly or a combination of both.
Operating Mode of the 104-Redundancy with 1 Ethernet Interface in the Controlled Station:
• Each redundancy group consists of one or more "real" connections and exactly 1 "virtual connection" for
the communication to the BSE. The connections of a redundancy group in transmit direction are handled
as one connection (=virtual connection) from the point of view of the communication function on the
BSE.
• The data is transferred from the BSE to the PRE via the "virtual connection" assigned to the redundancy
group. As a result, the connections of a 104 redundancy group for 1 Ethernet interface are supplied from
only one process image (data base).
• The 104 data transmission is controlled by the controlling station with STARTDT / STOPDT act - only 1
Connection may be started per redundancy group.
• The data is transmitted to the remote station only over the started "real connection" of the 104-redun-
dancy group.
• Each connection (and therefore the 104 sequence numbers) is managed independently.
• In receive direction, the data of a 104-redundancy group are transmitted to the BSE with the station
number assigned to the "virtual connection".
• Connections for 104 redundancy and normal connections (without redundancy) can be mixed on the
same PRE.
Parameter settings for the 104-Redundancy with 1 Ethernet Interface in the Controlled Station:
• The parameters of the connection definitions [PRE] Station definition (Connection defi-
nition) | Station definition | Station enable must be set to yes .
• For all connections of the 104 redundancy group, the parameter [PRE] Station definition
(Connection definition) | Station definition | Controlling/Controlled must be
set to "controlled" .
• For each 104 redundancy group, a connection must be defined with the parameter [PRE] Station
definition (Connection definition) | Station definition | Redundancy as
"virtual Connection" .
The virtual connection is used only for internal communication with the BSE. This connection is not
present on the LAN (the IP address of the virtual connection is not relevant and will not be used).
Notes:
– "suppress station failure" must not be set for virtual connections!
– only the virtual connection must be included in the topology definition. (including a real connection
of a 104-redundancy group in topology definition will cause buffer overflow)
• All connections of the 104 redundancy groups to the remote stations must be defined with the param-
eter [PRE] Station definition (Connection definition) | Station definition |
Redundancy as "real Connection" .
For the real connections additionally all necessary parameters like IP address of the remote station, ...
must be defined in the parameters of the [PRE] Station definition (Connection defini-
tion) | Station definition .
• With 104-redundancy, a connection can be assigned to one of several redundancy groups. Each redun-
dancy group can be controlled independently of the other 104-redundancy groups. For each 104-redun-
dancy group, the data transmission can be started via 1 of the assigned connections. The redundancy
group is set with parameter [PRE] Station definition (Connection definition) |
Station definition | RedGroup .
• The Stop behavior must be set with parameter [PRE] Station definition (Connection defi-
nition) | Station definition | Stop behavior to "store".
• The function "Clear ring buffer" must be set with parameter [PRE] Station definition (Connec-
tion definition) | Station definition | Clear ring buffer to "no".
• The parameter [PRE] | Redundancy | Station number for received telegrams is not
evaluated.
• If the PRE is switched to "passive" by the redundancy control of the BSE, the transmission of the telegram
"<TI:=103> Clock synchronization command“ can be suppressed with parameter [PRE] | Redundancy
| Send time setting (TI103) if passive .
• If the PRE is switched to "passive" by the redundancy control of the BSE, the transmission of the telegram
"<TI:=107> Check command with time tag CP56Time2a“ can be suppressed with parameter [PRE] |
Redundancy | Send test command (TI107) if passive .
The 104-redundancy "Controlled" with 2 Ethernet interfaces enables the redundant interfacing of a compo-
nent as substation to remote stations with redundant Ethernet interfaces via 2 Ethernet networks. Example for
a remote station with redundant interfaces is e.g. one system with two Ethernet interfaces or two systems
that are operated redundantly or a combination of both. This type of redundancy requires two PRE’s on the
same BSE.
In addition to the two redundancy groups on the PRE's there is a "switch" on the BSE, which switches between
the two PRE redundancy groups. The two PRE redundancy groups and the BSE switch work as a single redun-
dancy group.
The CP-8050 internal redundancy control telegrams are not used in the controlled station.
Operating Mode of the 104-Redundancy “Controlled” with 2 Ethernet Interfaces” in the Controlled
Station.
Only the differences or extensions compared to the functionality of the 104-redundancy with 1 Ethernet inter-
face are described here:
• The data transfer is started by the controlling station with the telegram STARTDTact. For each redundancy
group (which is assigned to two PRE's and the BSE) only 1 connection may be started. i.e. either a real
connection has been started on the Ethernet interface 1 or on the Ethernet interface 2. The data transfer
from the BSE to the PRE takes place only via the "virtualConnection" of the started Ethernet interface. This
supplies the connections of a redundancy group for 2 Ethernet interfaces from only one process image.
• The data transmission to the remote station is done only via the real connection with data transmission
started with STARTDTact.
Parameter settings for the 104-Redundancy “Controlled” with 2 Ethernet Interface in the Controlled
Station.
Only the differences or extensions compared to the functionality of the 104-redundancy with 1 Ethernet inter-
face are described here:
• The virtual connections must be configured identically on both PRE’s (same number of virtual connec-
tions, same assignment to station numbers, same redundancy groups).
• The number of real connections and the station numbers of the real connections may be different on
both PRE's.
• On the PRE, connections for 104-redundancy and normal connections (without redundancy) can only be
parameterized mixed on the primary protocol element.
• For the remaining parameters in 104-redundancy with 2 Ethernet interfaces the same rules apply to
parameter settings as with 104-redundancy with 1 Ethernet interface.
The 104 redundancy "Controlling" enables the interfacing of a central station to one or more remote stations.
One PRE in the central station works as a controlling station. The number of controlling stations depends on
the redundancy configuration and the PRE's can be equipped as required (mixed configurations are also
possible):
• on one BSE
In the following cases, a connection is not taken into account during redundancy switching and the handling
of the A/P control message acknowledgment (FC 159, IC 2):
• the connection fails (remote device close the connection → IEC 104 Timeout) before a STARTDTcon /
STOPDTcon is received. The A/P control acknowledgment message will be delayed until the remote
station is detected as failed.
Prosess data message handling between BSE and PRE depends on the redundancy and connection state.
Process data messages to the PRE are, depending on the operating state, fetched and sent, fetched up and
discarded or piled up.
PRE active/passive Connection Handling of Data Note
104-data transfer (Data BSE → PRE)
passive/STOPDT down fetched and discarded • loss of data on this
PRE
passive/STOPDT up fetched and discarded • loss of data on this
PRE
Process data messages received from the remote station are forwarded without change to the BSE.
• The parameters of the connection definitions [PRE] Station definition (Connection defi-
nition) | Station definition | Station enable must be set to yes .
• The IEC 60870-5-104 data flow control of the own station (Controlling / Controlled) must be set in the
parameters of the connection definitions with the parameter [PRE] Station definition
(Connection definition) | Station definition | Controlling/Controlled must be
set to controlled.
• The “redundancy“ mode must be set in the parameters of the connection definitions with the parameter
[PRE] Station definition (Connection definition) | Station definition |
Redundancy to 104-Contr-Red.
• In the parameters of the connection definitions the parameter [PRE] Station definition
(Connection definition) | Station definition | RedGroup is not relevant.
• In the parameters of the connection definitions, set the parameter [PRE] Station definition
(Connection definition) | Station definition | Stop behavior to store.
• In the parameters of the connection definitions, set the parameter [PRE] Station definition
(Connection definition) | Station definition | Station failure to notify.
• In the parameters of the connection definitions, set the parameter [PRE] Station definition
(Connection definition) | Station definition | Clear ring buffer to No.
• In addition, all required parameters such as the IP address of the remote station, ... must be parameter-
ized for the connections in the parameters of the [PRE] Station definition (Connection
definition) | Station definition .
• The parameter [PRE] | Redundancy | Station number for received telegrams is not
evaluated.
• If the PRE is switched to "passive" by the redundancy control of the BSE, the transmission of the telegram
"<TI:=103> Clock synchronization command“ can be suppressed with parameter [PRE] | Redundancy
| Send time setting (TI103) if passive .
• If the PRE is switched to "passive" by the redundancy control of the BSE, the transmission of the telegram
"<TI:=107> Check command with time tag CP56Time2a“ can be suppressed with parameter [PRE] |
Redundancy | Send test command (TI107) if passive .
13.5.6.5 PRE-Redundancy
With PRE redundancy one remote terminal unit (Controlled Station) is connected with one or several master
stations (Controlling Stations) over several logical connections. The data transmission takes place over all
connections.
The PRE redundancy mode is selected by setting the parameter Connection definition | Redundancy
to none .
The switchover of the redundancy state ("ACTIVE" ↔ "PASSIVE") takes place system-internal through redun-
dancy control messages.
• There is no difference between redundancy state "ACTIVE/PASSIVE" on the IEC 60870-5-104 interface.
• The data transmission is started by the controlling station for every connection with STARTDTact but not
stopped with redundancy state "PASSIVE".
• The data transmission is carried out on all connections independent of the other connections
• All data transferred from the BSE to the PRE for transmission are transmitted to the remote station even
with the redundancy state "PASSIVE".
• The data transmission is controlled from one specific process image for each connection.
• The switchover to "PASSIVE" takes place globally per PRE and not selectively per connection.
• The "PRE-Redundancy" is selected by setting the parameter [PRE] Station definition (Connec-
tion definition) | Station definition | Redundancy to none.
• The parameter [PRE] | Redundancy | Station number for received messages is not eval-
uated.
• For all connections of the 104 redundancy group, the parameter [PRE] Station definition
(Connection definition) | Station definition | Controlling/Controlled must be
set to "controlled" .
• In the redundancy state "PASSIVE", the message "<TI=107> check command with time tag CP56Time2a"
can be disabled for transmission by the PRE with the parameter [PRE] | Redundancy | Redun-
dancy | Send test command (TI107) if passive .
• In the redundancy state "PASSIVE", the message "<TI:=103> Clock synchronization command" can be disa-
bled for transmission by the PRE with the parameter [PRE] | Redundancy | Redundancy | Send
time setting (TI103) if passive .
• In the redundancy state "PASSIVE", the Ethernet interface can be deactivated with the parameter [PRE]
Redundancy | Disable Ethernet-Port if passive .
NOTE
i There is no difference between redundancy state "active / passive" on the IEC 60870-5-104 interface.
When using IEC 104 redundancy “Controlled" and "PRE Redundancy" at the same time, the following must
be observed with the following configuration:
Configuration:
• 2 telecontrol front ends (at one time one is active and one passive).
On each telecontrol front end, 104 redundancy "Controlled" is parameterized.
• In total there are two IEC 104 redundancy groups with two connections each.
For each redundancy group, a connection has been started.
• The IEC 104 redundancy control in the SCADA system must recognize which telecontrol frontend is
active.
e.g.: only the active telecontrol front end send <TI:=103> or <TI:=107> messages.
With this the SCADA system can recognize the active telecontrol frontend.
– in SICAM RTUs telecontrol frontend the sending of messages with <TI:=103> or <TI:=107> can be
disabled in redundancy state “passive”.
The redundancy mode "PSI-Redundancy (synchronous connections)" is a proprietary function and is only
implemented in plants with a control system (Controlling Station) from the manufacturer "PSI".
This redundancy function is not defined in the IEC 60870-5-104 standard! This redundancy mode is selected
by setting the parameter [PRE] Redundancy | Redundancy mode to PSI-Redundancy and with that is
continuously activated.
A switchover/control of the redundancy through system-internal redundancy control messages as well as the
redundancy functions of the Controlling Station are not supported for this redundancy mode!
Functioning method of synchronous connections:
• The data is sent over the synchronous connections with the same data content
• The data is sent over the synchronous connections in the same order
• The data is sent over the synchronous connections with the same IEC 60870-5-104 sequence number
The data to the first synchronous connection established is transmitted beginning with the sequence
number "0". The data to other synchronous connections established later is transmitted with the current
consecutive sequence number (the sequence number for received data is individual for each synchro-
nous connection)
• The data is transmitted over the synchronous connections with as little chronological offset as possible
• In receive direction, there is no specific function for synchronous connections – received data is trans-
ferred to the BSE for each synchronous connection
On the LAN/WAN-protocol element, synchronous connections for PSI redundancy and normal connections
(without redundancy) can be used mixed.
For synchronous connections, system internally only 1 virtual connection may be parameterized and at least 2
or more real connections. The synchronous connections form a group – these are handled as one connection
in transmit direction from the perspective of the communications function on the BSE.
The synchronism of the connections is controlled directly by the LAN/WAN-protocol element. The data trans-
ferred from the BSE for transmission to the synchronous connections are duplicated by the LAN/WAN-protocol
element to the assigned connections. Due to the synchronism of the connections during transmission, the
data throughput is defined by the slowest remote station. With acknowledgement required, a further trans-
mission can only then take place when all remote stations have acknowledged.
In transmit direction, on the BSE the data is only routed to the "virtual connection“ and passed on immediately
to the remote station by the LAN/WAN-protocol element without TCP/IP blocking. If the control of the data
transmission is stopped for one connection, the data for this connection are discarded.
In receive direction, the data is passed on to the BSE either with the station number of the virtual connection
or with the station number of the real connection. The selection of the station number is performed with the
parameter [PRE] | Redundancy | Station number for received telegrams .
On failure of one real connection, this is signaled as failed. On failure of all real connections, in addition the
virtual connection is signaled as failed.
Necessary parameter settings for synchronous connection on the LAN/WAN-protocol element:
• Virtual connection
A selected connection is to be defined as virtual connection in the parameters [PRE] Station defi-
nition (Connection definition) | Station definition | Redundancy .
The virtual connection is used only for internal communication with the BSE. This connection is not
present on the LAN (the IP address of the virtual connection is not relevant and will not be used).
Note:
For connections that are operated without redundancy, the parameter Connection definition |
Redundancy is to be set to "none".
• For the failure management, the real connections must be entered in the topology
• For the real connections the disabling of system data must be activated in the topology
• For the failure management of the data in receive direction, the parameter setting of the topology and
the source ID is required
• The virtual connection and all real connections must be parameterized as "Controlled"
• With synchronous connections the remote station may not use Start/Stop for the control of the data
transmission!
Data in transmit direction are transferred from the basic system element (BSE) to the protocol element (PRE) in
the SICAM RTUs internal format. These are converted by the protocol element to the IEC 60870-5-104
message format on the line and transmitted according to the transmission procedure of the IEC 60870-5-104
protocol.
Data in receive direction are converted on the transmission line by the protocol element from IEC
60870-5-104 format to a SICAM RTUs internal format and transferred to the basic system element.
Object Numbering
All IEC 60870-5-104 message objects are transmitted with an unambiguous IEC 60870-5-104 sequence
number. In one TCP-packet several IEC 60870-5-104 message objects can be transmitted. A blocked IEC
60870-5-104 message (with several individual messages) is handled as one message object.
The sequence number is managed for each connection and is an ascending number in the range 0-32767
(modulus 32768). The sequence number is used for the acknowledgement procedure defined for IEC
60870-5-104.
13.5.7.1 Blocking
For the optimum utilization of the transmission paths, for the data transmission with IEC 608705104 protocols
the "Blocking" according to IEC 60870-5-101/104 is implemented. This function is performed on the basic
system element (BSE) according to the rules applicable for this. Data to be transmitted are thereby already
blocked on the basic system element and passed on to the protocol element for transmission.
With LAN-communication, several messages blocked according to IEC 60870-5-104 can be entered in one TCP-
packet before this is transmitted.
Received data in blocked format according to IEC 60870-5-104 are passed on from the protocol element to the
basic system element in blocked format. On the basic system element the blocked data is split up again into
individual information objects by the detailed routing function and passed on as such to the further
processing. Received messages with maximum length are transmitted SICAM RTUs internal in several blocks to
the basic system element (BSE) because of the additionally required transport information.
The parameters necessary for the blocking are to be set on the basic system element (BSE) in the IEC
60870-5-101/104 parameter block
For the coupling to external systems, if necessary the following special functions can be activated for the
adaptation of the message conversion:
• WhiteList-Filter
NOTE
i This function is only active for process information messages in transmit direction.
The day of week in clock synchronization command message is not affected!
NOTE
i In Ax 1703 the I bit of the internal system clock will not be set.
The failure of the time synchronization of the own AU must be sent in Ax 1703 with a protocol element
control message to the protocol element (user error → message conversion → protocol element control
message).
WhiteList-Filter
Caused by increased using of the norm protocol IEC 60870-5-101/104 in the area of the telecontrol engi-
neering/process automation this protocol is also very often used to exchange data between different providers
(net couplings).
For the protection of the own network and also not send any unwanted telegrams to the remote network, the
data traffic is reduced to the absolutely necessary minimum at such interfaces.
Only defined telegrams (selected by type identification and cause of transmission) will be sent in transmit
direction to the remote network and only defined telegrams will be taken in receive direction at WhiteList-
Filter enabled.
The WhiteList-Filter can be enabled for each single connection with the parameter [PRE] Station defi-
nition (Connection definition) | Station definition | Profile (type identifica-
tion check) .
Following WhiteList-Filters can be selected: 133
• WhiteList-Filter
– This profile can be used on interfaces between different providers or regions within same provider.
– From the pre-defined WhiteList-Filter only selected type identifications in transmit/receive direction
are passed through (siehe Profile Definition: “WhiteList-Filter“ , Page 902).
• TI-Filter + WhiteList-Filter
– From the pre-defined WhiteList-Filter only selected type identifications are passed through by the TI-
Filter.
– The TI-Filter can be parameterized separately in transmit-/receive direction.
– IEC 60870-5-104 messages with type identifiers are already filtered out by the WhiteList-Filter
cannot be passed through by the TI-Filter.
– IEC 60870-5-104 messages with type identifiers that are filtered out by the TI-Filter are acknowl-
edged to the remote station and then discarded (ACTCON / ACTTERM will not be sent).
133 For profiles additional parameter settings (BSE + PRE) are required! (Profile definitions later in this chapter)
• TI-Filter
– Only the IEC 60870-5-104 messages with type identifiers selected in the TI-Filter will be passed in
transmit-/receive direction (the cause of transmission is not evaluated).
– The TI-Filter can be parameterized separately in transmit-/receive direction.
– IEC 60870-5-104 messages with type identifiers that are filtered out by the TI-Filter are acknowl-
edged to the remote station and then discarded (ACTCON / ACTTERM will not be sent).
WhiteList-Filter
• Filtered messages in receive direction will be confirmed to remote station and discarded without error 134
(filtered messages cannot be logged in data flow test)
134 Error will be set for messages with type identifications not supported according WhiteList-Filter definition. No Error will be set for
messages with type identifications supported according WhiteList-Filter definition but with cause of transmission not supported
according WhiteList-Filter definition.
The type identifiers which shall be passed through by the TI filter in the send/receive direction are set with the
parameters [PRE] IEC60870-5-104 | WhiteList-Filter | TI-Filter.
• max. 30 type identifiers can be defined in the TI-Filter. (also TI’s sent during GI and TI’s for system infor-
mation must be defined)
• For each type identification, you can select in TI-Filter "Type identification pass in":
– Transmit- and Receive direction
– Transmit direction
– Receive direction
.
• The TI-Filter can be used either selectively or in combination with the WhiteList-Filter.
• If the TI-Filter is used with the WhiteList-Filter, only the IEC60870-5-101/104 messages with type identi-
fiers passsed by the WhiteList-Filter and selected in the TI-Filter will be passed in transmit-/ receive direc-
tion (the cause of transmission is evaluated by the WhiteList-Filter). Not selected TI’s in TI-Filter will be
discarded.
• If the TI-Filter is used without the WhiteList-Filter, only the IEC 60870-5-101 messages with type identi-
fiers selected in the TI-Filter will be passed in transmit-/ receive direction (the cause of transmission will
not be evaluated). Not selected TI’s in TI-Filter will be discarded.
• IEC 60870-5-101 messages, with type identifiers that are filtered out by the TI-Filter in receive direction,
are acknowledged to the remote station and then discarded (ACTCON / ACTTERM will not be sent).
Use Cases
Following function is the same for different sample applications.
When WhiteList-Filter is enabled:
• ACTCON/ACTTERM for commands will be sent only if this command was received before via this interface
[whitelist_partnerkopplung_sic_rtus, 1, en_US]
Partner Interface between SICAM RTUs System and 3rd Party System
Data exchange via interface (LAN, serial) between different partners (utilities) – one partner use SICAM RTUs
system the other partner uses a 3rd party system.
[whitelist_partnerkopplung_sic_rtus_fremdsys, 2, en_US]
[whitelist_intern_segm_sic_rtus, 1, en_US]
Internal Segmentation between SICAM RTUs Systems and 3rd Party Systems
Data exchange via interface (LAN, serial) between different divisions within the same customer – one division
uses a SICAM RTUs system the other division uses a 3rd party system.
[whitelist_intern_segm_sic_rtus_fremdsys, 2, en_US]
• The WhiteList-Filter disables possible unwanted routing of system messages or messages in the private
range via possible communication loops in redundancy configuration for redundant BSE.
Note: A routing of data messages to redundant BSE will be suppressed per standard by passive BSE.
• The parameter "WhiteList-Filter for passive PRE" must be applied to both BSE.
• The WhiteList-Filter is only activated on “passive” BSE and deactivated on “active” BSE.
• The WhiteList-Filter disables possible unwanted routing of system messages via communication loops in
this redundancy configuration
• The parameter "WhiteList-Filter for passive PRE" must be applied to both BSE.
• The messages from SICAM TOOLBOX II will be discarded by the activated WhiteList- Filter on “passive” BSE
but passed through on “active” BSE by non active WhiteList-Filter.
• data throughput limitation in receive direction in case of exceeded limit by delay of acknowledge
message according IEC 60870-5-104
• data throughput limitation in transmit direction in case of exceeded limit by delay of transmission of IEC
60870-5-104 data messages
NOTE
i The data throughput limitation works properly only if the IEC 60870-5-104 parameters are set to the same
values on both sides.
NOTE
i The format <TI=150> is only defined with 7 bytes time, 3 bytes IOA, 2 bytes CASDU and 2 bytes URS! For
this format no double transmission is defined as format without time tag!
NOTE
i • all bits with "1" in the mask declare the address range of the field
• all bits with "0" in the mask declare the address range of the data points within the field
• the bit by bit marking of the field is always the same for RWE projects!
Example:
Parameterized Return Bit by Bit marking of Addresses of the Return Information deter-
Information Address the Field "Mask" mined by this
[HEX] [BIN] [HEX] BIN Dec [HEX]
CASDU1 00 00000000 FF 11111111 0-255 [00-FF]
CASDU2 00 00000000 FF 11111111 0-255 [00-FF]
IOA1 21 00100001 00 00000000 21
IOA2 56 01010110 00 00000000 56
IOA3 03 00000011 FC 11111100 3,7,11,15,19,…,255 [03,07,0F,13,…,FF]
NOTE
i The functional groups required for cyclic measured values must not be used for other functions!
The updating of the process image for cyclic measured values takes place during the transmission of sponta-
neous measured values or during general interrogation to the LAN/WAN protocol element – from now on
these measured values are transmitted cyclic (not spontaneous and not with GI) to the remote station.
For the transmission of the cyclic measured values, SICAM RTUs internal (between basic system element and
LAN/WAN protocol element) the message format "<TI:=35> measured value, scaled value with time tag
CP56Time2a" is used.
Cyclic measured values are always transmitted from the LAN/WAN protocol element to the remote station
without time tag with the message format "<TI:=11> measured value, scaled value" and with the cause of
transmission "cyclic".
The cycle time for the transmission of cyclic measured values can be set with the parameter [PRE]
Advanced parameters | Project specific settings | RWE functions | Cyclic meas-
ured value | Base cycle time and the parameter [PRE] Advanced parameters | Project
specific settings | RWE functions | Cyclic measured value | High priority cycle
time .
The transmission of the cyclic measured values to the remote station takes place with maximum possible
blocking according to IEC 60870-5-104. The blocking for cyclic measured values is performed by the LAN/WAN
communications element itself. The parameters provided for the blocking on the basic system element (BSE)
in the IEC 60870-5-101/104 parameter block are not evaluated.
During the transmission of the cyclic measured values, the transmission of spontaneous data is disabled. All
cyclic measured values are prepared for transmission in one operation at the respective cycle moment.
Limitations:
• Cyclic measured values are only supported in SICAM RTUs with selective data flow
NOTE
i So that the process data is transmitted with the latest values as fast as possible after a going interface fault,
the function "delete ring with communication failure" is to be deactivated in the communications function
on the basic system element. This setting is therefore necessary, because the general interrogation in the
system is only triggered later and consequently, until the updating of the cyclic measured values, due to
the general interrogation, old values are transmitted to the remote station.
The selection of the group 2 measured values is supported for all fields, whose address range has been deter-
mined by the "Bit by bit marking of the field".
The address of the return information for the selection command 2 is to be parameterized with the parame-
ters [PRE] Advanced parameters | Project specific settings | RWE functions |
Cyclic measured value | Address of the return information of select command 2 |
*.
As return information address, only those sections of the address are to be parameterized that are not part of
the address range for the field. Consequently, as return information address only the field-internal address is
to be parameterized. The bits of the address which identify the field in the return information address for
selection command 2 are not evaluated by the LAN/WAN protocol element.
For the return information of the selection command 2, SICAM RTUs internal only the message format
"<TI:=30> single-point information with time tag CP56Time2a" is used.
The cyclic transmission of the group 2 measured values is activated with the single-point information state
"ON" and deactivated with the state "OFF".
The selection of the group 2 measured values can be carried out either "Locally" or "Remotely". The return
information for the selection command 2 is only transmitted spontaneously to the remote station with the
cause of transmission "Return information, caused by a remote command" or "Return information, caused by a
local command".
With general interrogation, the return information for the selection command is not transmitted to the remote
station!
The assignment of the measured values to the fields is determined by the structuring of the address for RWE.
With the return information for selection command 2, those cyclic group 2 measured values whose address for
the field after masking matches the mask for "Bit by bit marking of the field“ are activated/deactivated for
transmission.
NT-Bit, IV-Bit according to RWE requirements
For projects for the customer RWE, a special handling can be activated for the NT-bit and the IV-bit of the
quality descriptor of the messages in transmit direction.
If the RWE-specific functions are not activated, the NT-bit and the IV-bit in the messages are transferred to the
remote station unchanged.
If the RWE-specific functions are activated, the special handling for the NT-bit and the IV-bit can be selected
with the parameter [PRE] Advanced parameters | Project specific settings | RWE func-
tions | Convert of the NT bits to the IV bit in transmit direction from the following
options:
This function is used for the user-specific influencing of the functions of the protocol elements.
This function contains two separate independent parts:
Block Diagram
Protocol element internal functions can be controlled with protocol element control messages. On the basic
system element, IEC 60870-5-101/104 messages with process information in the control
direction are converted to protocol element control messages and transmitted to the selected protocol
element (see 13.1.4.8 Protocol element control messages).
Supported protocol element control functions: (see 13.1.4.8 Protocol element control messages)
SF Protocol element control function ETI4 FWI4
Control function_(PRE) [LAN] [LAN]
0 "Activate" interface X X
1 "Deactivate" interface X X
Legend:
SF .. Control function_(PRE)
Protocol element return information are internal status information of the protocol elements which are trans-
mitted spontaneously and in the event of a general interrogation with internal message formats from the
protocol element to the basic system element. On the basic system element, the protocol element responses
(see 13.1.4.9 Protocol element return information) are converted to IEC 60870-5-101/104 messages with
process information in the monitoring direction.
Supported protocol element return informations: (see 13.1.4.9 Protocol element return information)
Protocol element return information Station UMPMI0 UMPSI0
Return information function_(PRE) [Master] [Slave]
• Station Failure 0 to 99 X X
protocol-specific return information 0 0 to 99 X X
A web server is integrated in the protocol firmware for internal diagnostic information. The web server is part
of basic system element – the PRE specific web pages will be provided by protocol element.
System Firmware Protocol function PRE-specific
web pages
SICAM A8000 Series ETI4 IEC 60870-5-104 ✓
SICAM A8000 CP-8050 FWI4 IEC 60870-5-104 ✓
135 the state of the “DATA TRANSFER (BSE)” can be changed by the parameter “Stop behavior” and “Failure"” (see connection specific
parameters) and und can be different to the state of “DATA TRANSFER (104 Connection)”.
136 Actual state of “DATA TRANSFER (104 Connection)”.
NOTE
• The values displayed on the web pages indicate the current status when the web page is started. The
values of a website are updated when they change. Some websites require manual updating of the
website for certain functions (“refresh” or “reload this page” in the web browser).
Start the web server via the SICAM Device Manager or internet browser
Refer to 13.1.4.10 Web server for PRE specific websites.
Field Note
Redundancy state Current redundancy status of the firmware:
• Firmware active
• Firmware passive
Redundancy system Current redundancy status of the firmware:
• not used
• A
• B
Firmware state State of the firmware:
• Ready
• startup
• KILL
• not available
[ETI4_SICWEB_Overview, 1, en_US]
Field Note
Port Used TCP port number for this connection.
(2404 = Standard Port Number for IEC 60870-5-104)
Communication state State of the connection:
• ok
• nok
• prepared
Station failure Communication status of this station:
• suppress
• notify
104 data transfer Status IEC 60870-5-104 data transfer:
• started
• stopped
Controlling / controlled IEC 60870-5-104 function of the own station for this connection:
• controlling
• controlled
TCP connection State of the TCP connection for this connection:
• up
• down
TLS Encryption of the connection with TLS:
• not used
• encrypted
• null chiper
Redundancy Used redundancy mode for this connection:
• not used
• real connection
• virtual connection
• 104 controlling redundancy
[ETI4_SICWEB_Connections, 1, en_US]
Field Note
Count Number of all parameterized data points in transmit direction
(total for all stations)
Count measured value Number of parameterized data points for "values" in transmission
direction (total for all stations)
Count error Number of faulty parameterized data points in transmit direction
(total number for all stations)
Error Error number
• ERR = 0 .. No error
• ERR = 1 .. Type identification (TI) not valid
• ERR = 2 .. SICAM RTUs sub-address (=IOA3) not valid
• ERR = 3 .. IEC-address not unique
• ERR = 4 .. Station number faulty
• ERR = 5 .. Type of SIP message address conversion not valid
• ERR = 10 .. Parameter not valid: X_0 greater or equal X_100
• ERR = 11 .. Parameter not valid: Y_0 greater or equal Y_100
• ERR = 12 .. Wrong parameters for adaptation for TI35
• ERR = 13 .. Wrong parameters for adaptation for TI34
• ERR = 14 .. Threshold not valid
• ERR = 15 .. Neither adaption nor threshold parametrized
TI IEC 60870-5-101/104 type identification of the data point
CASDU1, CASDU2 IEC 60870-5-101/104 address of the data point
IOA1, IOA2, IOA3
Station CP-8050 internal station number for this connection
[ETI4_SICWEB_Routing_Transmit, 1, en_US]
•
The filter is activated with .
[ETI4_SICWEB_Routing_Transmit_Filter, 1, en_US]
• ERR = 0 .. No error
• ERR = 1 .. Type identification (TI) not valid
• ERR = 2 .. SICAM RTUs sub-address (=IOA3) not valid
• ERR = 3 .. IEC-address not unique
• ERR = 4 .. Station number faulty
• ERR = 5 .. Type of SIP message address conversion not valid
• ERR = 10 .. Parameter not valid: X_0 greater or equal X_100
• ERR = 11 .. Parameter not valid: Y_0 greater or equal Y_100
• ERR = 12 .. Wrong parameters for adaptation for TI35
• ERR = 13 .. Wrong parameters for adaptation for TI34
• ERR = 14 .. Threshold not valid
• ERR = 15 .. Neither adaption nor threshold parametrized
TI IEC 60870-5-101/104 type identification of the data point
CASDU1, CASDU2 IEC 60870-5-101/104 address of the data point
IOA1, IOA2, IOA3
Station CP-8050 internal station number for this connection
[ETI4_SICWEB_Routing_Receive, 1, en_US]
•
The filter is activated with .
[ETI4_SICWEB_Routing_Receive_Filter, 1, en_US]
[ETI4_SICWEB_IDU, 1, en_US]
With Clear user diagnosis (manual reload necessary) the recorded user diagnostic entries are
deleted from the display (the website must be updated manually to update the display).
With Snapshot the current logged user diagnosis entries are saved internally and can be accessed
[idu, 1, en_US]
This companion standard presents sets of parameters and alternatives from which subsets must be selected to
implement particular telecontrol systems. Certain parameter values, such as the choice of “structured“ or
“unstructured“ fields of the INFORMATION OBJECT ADDRESS of ASDUs represent mutually exclusive alterna-
tives. This means that only one value of the defined parameters is admitted per system. Other parameters,
such as the listed set of different process information in command and in monitor direction allow the specifi-
cation of the complete set or subsets, as appropriate for given applications. This clause summarizes the
parameters of the previous clauses to facilitate a suitable selection for a specific application. If a system is
composed of equipment stemming from different manufacturers it is necessary that all partners agree on the
selected parameters.
The interoperability list is defined as in IEC 60870-5-101 and extended with parameters used in this standard.
The text descriptions of parameters which are not applicable to this companion standard are strike-through
(corresponding check box is marked black).
NOTE: In addition, the full specification of a system may require individual selection of certain parameters for
certain parts of the system, such as the individual selection of scaling factors for individually addressable
measured values.
The possible selection (blank, X, R, or B) is specified for each specific clause or parameter.
A black check box indicates that the option cannot be selected in this companion standard.
(system-specific parameter, indicate the system’s or station’s function by marking one of the following with
"X")
System definition
(network-specific parameter, all configurations that are used are to be marked "X")
Point-to-Point Multipoint-partyline
(network-specific parameter, all interfaces and data rates that are used are to be marked "X")
(network-specific parameter, all options that are used are to be marked "X") Specify the maximum frame
length. If a non-standard assignment of class 2 messages is implemented for unbalanced transmission, indi-
cate the Type ID and COT of all messages assigned to class 2.)
Frame format FT 1.2, single character 1 and the fixed time out interval are used exclusively in this companion
standard.
2 Octets
structured
unstructured
Frame length
NOTE: In response to a class 2 poll, a controlled station may respond with class 1 data when there is no class 2
data available.
1 Octet 2 Octets
1 Octet structured
2 Octets unstructured
3 Octets
Cause of transmission
(system-specific parameter, all configurations that are used are to be marked "X")
2 Octets (with originator address)
1 Octet
Only originator address not used (=0) is used
Length of APDU
(system-specific parameter, specify the maximum length of the APDU per system)
The maximum length of the APDU in both transmission directions is 253. This is a fixed system parameter.
Length of APDU
Maximum length of APDU per system in control direction
Maximum length of APDU per system in monitoring direction
<14> := Measured value, short floating point number with time tag M_ME_TC_1
<18> := Packed start events of protection equipment with time tag M_EP_TB_1
<19> := Packed output circuit information of protection equipment with time tag M_EP_TC_1
<20> := Packed single-point information with status change detection M_PS_NA_1 M_PS_NA_1
<34> := Measured value, normalized value with time tag CP56Time2a M_ME_TD_1
<35> := Measured value, scaled value with time tag CP56Time2a M_ME_TE_1
<36> := Measured value, short floating point number with time tag CP56Time2a M_ME_TF_1
<39> := Packed start events of protection equipment with time tag CP56Time2a M_EP_TE_1
<40> := Packed output circuit information of protection equipment with time tag
M_EP_TF_1
CP56Time2a
In this companion standard only the use of the set <30> – <40> for ASDUs with time tag is permitted.
6) Reception possible, thereby the blocked single-point information is deblocked and further individually
processed as TI = 30 (address translation occurs algorithmic).
<61> := Set point command, normalized value with time tag CP56Time2a C_SE_TA_1
<62> := Set point command, scaled value with time tag CP56Time2a C_SE_TB_1
<63> := Set point command, short floating point with time tag CP56Time2a C_SE_TC_1
Either the ASDUs of the set <45> - <51> or of the set <58> - <64> are used.
File transfer
(station-specific parameter, mark each Type ID "X" if function is only used in the standard direction, "R" if only
used in the reverse direction, and "B" if used in both directions)
<122> := Call directory, select file, call file, call section F_SC_NA_1
[Type_Identification_1, 1, en_US]
[Type_Identification_2, 1, en_US]
[Bedeutung_Übertragunsursachen, 1, en_US]
Station Initialization
(station-specific parameter, mark "X" if function is used)
Station Initialization
Read procedure
(station-specific parameter, mark each Type ID "X" if function is only used in the standard direction, "R" if only
used in the reverse direction, and "B" if used in both directions)
Read procedure
Spontaneous transmission
(station-specific parameter, mark each Type ID "X" if function is only used in the standard direction, "R" if only
used in the reverse direction, and "B" if used in both directions)
Spontaneous transmission
The following type identifications may be transmitted in succession caused by a single status change of an
information object. The particular information object addresses for which double transmission is enabled are
defined in a project-specific list.
Bitstring of 32 bit M_BO_NA_1, M_BO_TA_1 and M_BO_TB_1 (if defined for a specific project)
Measured value, short floating point value M_ME_NC_1, M_ME_TC_1 and M_ME_TF_1
Station Interrogation
(station-specific parameter, mark "X" if function is only used in the standard direction, "R" if only used in the
reverse direction, and "B" if used in both directions)
Global
group 5 group 11
Information Object
group 6 group 12
Addresses assigned to each
group must be shown in a
separate table.
Clock synchronization
(station-specific parameter, mark "X" if function is only used in the standard direction, "R" if only used in the
reverse direction, and "B" if used in both directions)
Clock synchronization
B** supported but not recommended (bad accuracy) By default time synchronization is done by NTP/SNTP
Command transmission
(object-specific parameter, mark "X" if function is only used in the standard direction, "R" if only used in the
reverse direction, and "B" if used in both directions)
No additional definition
Persistent output
B* can be used only when the COT is generated via a function plan application (CAEx)
Supervision of maximum delay in command direction of commands and set point commands
Counter read
counter reset
Threshold value
Smoothing factor
Parameter activation
(object-specific parameter, mark "X" if function is only used in the standard direction, "R" if only used in the
reverse direction, and "B" if used in both directions)
Test procedure
(station-specific parameter, mark "X" if function only used in standard direction, "R" if only used in the reverse
direction, and "B" if used in both directions)
Test procedure
file transfer
(station-specific parameter, mark "X" if function is used)
Transparent file
Transparent file
X* Data can be transparently transported by the system but not generated or evaluated. A maximum of
220 bytes of user data can be transported in a segment telegram for file transfer.
Background scan
(station-specific parameter, mark "X" if function is only used in the standard direction, "R" if only used in the
reverse direction, and "B" if used in both directions)
Background scan
Note: used for data which are transmitted caused by a self-initiated general interrogation
Redundant Connections
Ethernet 802.3