ABB Relion 670 series - Generic Security Application GSAL; Security Alarm SECALARM

Name Values (Range) Unit Step Default Description
ExtLogSrv2IP 0 - 18 IP
Address
1 127.0.0.1 External log server 2 IP-address
ExtLogSrv3Type Off
SYSLOG UDP/IP
SYSLOG TCP/IP
CEF TCP/IP
- - Off External log server 3 type
ExtLogSrv3Port 1 - 65535 - 1 514 External log server 3 port number
ExtLogSrv3IP 0 - 18 IP
Address
1 127.0.0.1 External log server 3 IP-address
ExtLogSrv4Type Off
SYSLOG UDP/IP
SYSLOG TCP/IP
CEF TCP/IP
- - Off External log server 4 type
ExtLogSrv4Port 1 - 65535 - 1 514 External log server 4 port number
ExtLogSrv4IP 0 - 18 IP
Address
1 127.0.0.1 External log server 4 IP-address
ExtLogSrv5Type Off
SYSLOG UDP/IP
SYSLOG TCP/IP
CEF TCP/IP
- - Off External log server 5 type
ExtLogSrv5Port 1 - 65535 - 1 514 External log server 5 port number
ExtLogSrv5IP 0 - 18 IP
Address
1 127.0.0.1 External log server 5 IP-address
ExtLogSrv6Type Off
SYSLOG UDP/IP
SYSLOG TCP/IP
CEF TCP/IP
- - Off External log server 6 type
ExtLogSrv6Port 1 - 65535 - 1 514 External log server 6 port number
ExtLogSrv6IP 0 - 18 IP
Address
1 127.0.0.1 External log server 6 IP-address
6.4 Generic security application GSAL
GUID-D0CE0102-C651-4914-8FBF-854151D7E360 v3
As a logical node GSAL is used for monitoring security violation regarding
authorization, access control and inactive association including authorization
failure. Therefore, all the information in GSAL can be configured to report to
61850 client. For more information about GSAL, see IEC 61850 Edition 2
Communication Protocol Manual.
6.5
Security alarm SECALARM
GUID-205B0024-DA06-4369-8707-5E1D2D035995 v2
The function creates and distributes security events for mapping the security events
on protocols such as DNP3.
Section 6 1MRK 511 399-UEN B
User activity logging
80 670 series 2.2 IEC
Cyber security deployment guideline