3.7.5 Statistics and security events
Security statistics counters analyze and diagnose authentication-related events.
As required by the standard, the counters are preserved in the relay's memory
during the device reboot. The statistics counters are available via Configuration>
Monitoring> Communication> Protocols> Secure IEC104 (n).
The security statistics are also readable as TypeId 41 (S_IT_TC) integrated totals
data which is monitored by the IEC 60870-5-104 master. The master can obtain the
counters by performing either a counter interrogation or a freeze command on the
corresponding counter group. After a freeze command, the counters are reported
to the master as spontaneous events if the
Counter reporting
parameter is set
to "Spontaneous mode". Counter reset operation is not allowed due to security
reasons.
The S_IT_TC objects’ counter group and base IOA address are configured in
Configuration> Communication> Protocols> Secure IEC104 (n)> General> Sec
Stat Cnt Grp and Configuration> Communication> Protocols> Secure IEC104
(n)> General> Sec Stat Cnt IOA.
The IOA address of each security statistics counter is the base IOA address plus the
standard index of the counter.
A threshold deadband can be set for the security statistics counters to
filter reporting of counter values constantly as S_IT_TC events. The threshold
setting is common to all security statistics counters and can be configured via
Configuration> Communication> Protocols> Secure IEC104 (n)> Statistics
Thresholds.
3.7.6 Troubleshooting
If the secure authentication communication cannot be successfully established,
check the Pre-shared Update Key and MAC algorithm settings.
• Check that there is no mismatch between the Pre-shared Update Key and the
Common user's update key of the IEC 60870-5-104 master or the user's Session
Key is successfully updated.
• Check that the MAC algorithm settings match between the relay and the IEC
60870-5-104 master.
3.8 Commissioning
None of the available protocol instances are enabled by default. To take into use
any instance (n), the setting
Operation
under Configuration> Communication>
Protocols> IEC60870-5-101/104 (n) must be configured "On".
2NGA001859 A
Vendor-specific implementation
REX615
IEC 60870-5-104 Communication Protocol Manual
25
To Next Page
Loading...
