EngineeringAccess_RS

Engineering Access Exercise Page 1 20140827

SEL-3530 RTAC Hands-On Session

Engineering Access Exercise

Cat 5 Cable

SEL-2725Five-Port Ethernet Switch

SEL-3530

Port 1

Port 2SEL-C273A

SEL-351S

Figure 1 Connection Diagram

Access Point and Access Point Router An access point is a connection into the SEL-3530 Real-Time Automation Controller (RTAC) via an Ethernet port or a physical serial connection. The access point router application makes the connection from the access point to a downstream device. This feature in the RTAC provides remote engineering access. In this exercise, you will learn how to use the RTAC as a proxy to facilitate engineering access to SEL relays in a secure manner with access points and access point routers.

Exercise Step 1. Start the ACSELERATOR RTAC SEL-5033 Software. Click the Access Points folder in the

project connection tree.

Step 2. Add an access point to the RTAC by clicking Insert > Other > Access Point.

Figure 2 Add an Access Point


Step 3. Change the Device Name to EA_Transparent and select Ethernet Incoming (Listens for Connections) as your Connection Type. Click Insert.

Figure 3 Transparent Engineering Access Connection Type

Step 4. Select Telnet as the Network Connection Type and 8001 as the Local Port Number for your transparent engineering access to the relay.

Figure 4 TCP Port Settings for Transparent Engineering Access


Step 5. Click the Access Point Routers folder in the project connection tree. Add an access point router by clicking the Access Point Routers icon on the Insert tab.

Figure 5 Add an Access Point Router

Step 6. Change the Name to EA_Transparent and the Source Access Point to EA_Transparent_AP_AP, and check the Feeder_1_SEL_TAP checkbox. Click Insert.

Figure 6 Adding an Access Point RouterTransparent

Note that the Source Access Point is the connection into the RTAC, while the Destination Access Point is the end device you are connecting to. Devices that end with TAP are for transparent (interleave) connections. Devices that end with AP are for direct transparent connections (i.e., supervisory control and data acquisition [SCADA] polling is stopped while the access point router is in use).


Step 7. Click the POU Pin Settings tab. Change the Default Value for Auto_Connect to TRUE. This will automatically connect the source access point to the destination access point once the RTAC detects an incoming connection.

Figure 7 EA_Transparent POU Pin Settings

Step 8. Create a direct transparent engineering access connection to the SEL-351S Protection System. Add an access point to the RTAC by clicking Insert > Other > Access Point.


Step 9. Change the Device Name to EA_Direct and select Ethernet Incoming (Listens for Connections) as your Connection Type. Click Insert.

Figure 8 Direct Transparent Engineering Access Connection Type

Step 10. Select SSH as the Network Connection Type and 9001 as the Local Port Number for your direct transparent engineering access to the relay.

Figure 9 TCP Port Settings for Direct Transparent Engineering Access


Step 11. Click the Access Point Routers folder in the project connection tree. Add an access point router by clicking the Access Point Routers icon on the Insert tab.

Step 12. Change the Name to EA_Direct and the Source Access Point to EA_Direct_AP_AP, and check the Feeder_1_SEL_AP checkbox. Click Insert.

Figure 10 Adding an Access Point RouterDirect Transparent

Step 13. Click the POU Pin Settings tab. Change the Default Value for Auto_Connect to TRUE. Step 14. Press to save the settings in your RTAC project, and click Go Online.


Step 15. Use any terminal software package to connect to your RTAC using its Internet Protocol (IP) address and the engineering access Transmission Control Protocol (TCP) ports you configured. Example Tera Term settings are shown below for both connections. Note that 192.168.1.XX in the following figures should be replaced with the IP address of your RTAC.

Figure 11 Transparent Engineering Access in Tera Term

Figure 12 Direct Transparent Engineering Access in Tera Term

Note that if ACSELERATOR QuickSet SEL-5030 Software is unable to connect, you will need to make a settings change to Auto-Detect Connection. Click Tools > Options. Click the Communications tab and check Enable Advanced Communication Settings. Uncheck Auto-Detect Connection. Click OK to save the settings, and then retry your connection.


Figure 13 Advanced Communications Settings

Step 16. Once the terminal window opens, press and wait for the equal prompt. Enter the ID command to verify connectivity to the SEL-351S.


Step 17. Under the Controller tab, click the Feeder_1_SEL tab. Click the + symbol to expand Feeder_1_SEL_POU. Verify that when you access the relay using the transparent engineering access point connection, the Transparent_Connection tag is set to TRUE and the Message_Sent_Count and Message_Received_Count tags are incrementing. Verify that when you access the relay using your direct transparent engineering access point connection, the Direct_Transparent_Connection and Offline tags are set to TRUE.

Figure 14 Feeder_1_SEL Controller Tab

Optional Device Manager Setup Step 1. Start QuickSet. Click the Device Manager icon on the QuickSet screen to open the

ACSELERATOR Database login screen.

Figure 15 Device Manager Icon


Step 2. Enter the proper credentials in the User Name and Password fields. Note that if this is the first time ACSELERATOR Database is being used, the default user is admin with no default password (leave the field blank).

Figure 16 Log in to ACSELERATOR Database

Step 3. Right-click in the Connection Explorer window and select Add > Device.

Figure 17 Add Device in Connection Explorer


Step 4. Scroll down to select SEL-351S-7 in the Select Device Type window and click OK.

Figure 18 Add SEL-351S-7 Device

Step 5. Double-click the SEL-351S-7 device in the Connection Explorer window and click Edit. Change the Device Name to Feeder_1_EA_Transparent.

Figure 19 Feeder_1_EA_Transparent Device Tab


Step 6. Click the Connection tab and change the Connection Type to Network. Enter the IP address of the RTAC in the Host IP Address field. Ensure that the Port Number is set to 8001 and that the File Transfer Option is set to Telnet. Click Apply.

Figure 20 Feeder_1_EA_Transparent Connection Tab

Step 7. Create a direct transparent engineering access connection in Connection Explorer. Right-click in the Connection Explorer window and select Add > Device.

Step 8. Scroll down to select SEL-351S-7 in the Select Device Type field and click OK. Step 9. Double-click the SEL-351S-7 device in Connection Explorer and click Edit. Change the

Device Name to Feeder_1_EA_Direct.

Figure 21 Feeder_1_EA_Direct Device Tab


Step 10. Click the Connection tab and change the Connection Type to Network. Enter the IP address of the RTAC in the Host IP Address field. Ensure that the Port Number is set to 9001, the File Transfer Option is set to SSH, and the Credential Source is Prompt. Click Apply.

Figure 22 Feeder_1_EA_Direct Connection Tab

Step 11. Now you will use the direct and transparent engineering access connections. Right-click on Feeder_1_EA_Transparent and click Connect.

Figure 23 Connect to Device


Step 12. Click the Terminal icon to open a terminal window.

Figure 24 Click Terminal Icon

Once the terminal window opens, press and wait for the equal prompt. Enter the ID command to verify connectivity to the SEL-351S.

Figure 25 QuickSet Terminal

Step 13. Right-click Feeder_1_EA_Transparent and click Disconnect. Step 14. Right-click Feeder_1_EA_Direct and click Connect. Step 15. Enter your username and password in their respective fields to log in to the RTAC.

Figure 26 Credentials Window


Step 16. Click Trust to allow the SSH connection.

Figure 27 SSH Authentication

Step 17. Click the Terminal icon to open a terminal window. Step 18. Once the terminal window opens, press and wait for the equal prompt. Enter the ID

command to verify connectivity to the SEL-351S.

EngineeringAccess_RS

Documents

Transcript of EngineeringAccess_RS