GE Grid Solutions

Multilin D400TM Substation Gateway

Instruction Manual

994-0089 Version 2.40 Revision 4

GE Information GE Grid Solutions

Copyright Notice

© 2006-2019, General Electric Company. All rights reserved. The information contained in this online publication is the exclusive property of General Electric Company, except as otherwise indicated. You may view, copy and print documents and graphics incorporated in this online publication (the “Documents”) subject to the following: (1) the Documents may be used solely for personal, infor- mational, non-commercial purposes; (2) the Documents may not be modified or altered in any way; and (3) Gen- eral Electric Company withholds permission for making the Documents or any portion thereof accessible via the internet. Except as expressly provided herein, you may not use, copy, print, display, reproduce, publish, license, post, transmit or distribute the Documents in whole or in part without the prior written permission of General Electric Company. The information contained in this online publication is proprietary and subject to change without notice. The software described in this online publication is supplied under license and may be used or copied only in accor- dance with the terms of such license.

Trademark Notices

GE and are trademarks and service marks of General Electric Company.

* Trademarks of General Electric Company. CompactFlash is a registered trademark of SanDisk Corporation. ERNI is a registered trademark of ERNI Elek- troapparate GMBH. Hyperterminal is a registered trademark of Hilgraeve, Incorporated. Tera Term is a registered trademark of T. Teranishi, IEC is a registered trademark of Commission Electrotechnique Internationale. IEEE is a registered trademark of the Institute of Electrical and Electronics Engineers, Inc. , , and Windows are registered trademarks of Microsoft Corporation. JAVA and J2SE are registered trademarks of Sun Microsystems, Inc. Maxell is a registered trademark of Hitachi Maxell, Ltd. MiniSQL is a trademark of Hughes Technologies. Netscape is a registered trademark of Netscape Communications Corporation. Modbus is a regis- tered trademark of Schneider Automation Inc. Panduit is a registered trademark of Panduit Corp. Saft is a regis- tered trademark of SAFT société anonyme. SEL is a registered trademark of Schweitzer Engineering Laboratories, Inc. Silicon Systems is a registered trademark of Silicon Systems, Inc. Sonnenschein is a registered trademark of Deutsche Exide GMBH. Tadiran is a registered trademark of Tadiran Israel Electronics Industries Ltd. Toshiba is a registered trademark of Kabushiki Kaisha Toshiba, doing business as Toshiba Corporation. VESA is registered trademark of Video Electronics Standards Association Corporation. Other company or product names mentioned in this document may be trademarks or registered trademarks of their respective companies.

This printed manual is recyclable. Please return for recycling where facilities exist. D400 Substation Gateway

Table of contents

PRODUCT SUPPORT Access the GE Grid Solutions Web site...... 9 Search GE Grid Solutions technical support library...... 9 Contact GE Grid Solutions technical support ...... 9 GE Grid Solutions address ...... 10 Product returns...... 10

ABOUT THIS Purpose ...... 11 DOCUMENT Intended audience ...... 11 Additional documentation ...... 11 How to use this guide ...... 12 Safety words and definitions...... 12

1. BEFORE YOU Safety precautions ...... 13 START Warning symbols ...... 14 Regulatory compliance information ...... 15 CE Mark compliance ...... 15 Restriction of Hazardous Substances (RoHS)...... 15 EAC compliance ...... 16 Product overview...... 17 Functional overview...... 18 Hardware overview...... 19 Features...... 19 Firmware compatibility...... 20 Ordering guide...... 21 Upgrade kit...... 21 Product identification number...... 22 Product specifications ...... 23 Approvals...... 26 Storage recommendations...... 26 Storage conditions ...... 26 Battery life...... 26

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 3 TABLE OF CONTENTS

2. INSTALLING THE Installation steps...... 27 D400 Required tools ...... 28 Unpacking and inspecting the D400...... 28 First look at the D400...... 29 Front panel...... 29 Rear panel ...... 29 Physical installation...... 30 Rack mounting...... 30 Panel mount...... 31 Battery installation...... 31 Battery removal...... 31

3. SETTING UP Communication cards ...... 33 COMMUNICATION Types of communication cards...... 34 CARDS Changing card settings ...... 34 RS-232 adapter ...... 35 Configuration options...... 35 Factory default...... 36 Switch SW1/SW2 configuration...... 36 Switch SW3/SW4 configuration...... 37 RS-485 adapter ...... 38 Configuration options...... 38 Factory default...... 38 Switch SW1/SW2 configuration...... 39 Switch SW3/SW4 configuration...... 40 Fiber optic serial adapter...... 41 Configuration options...... 41 Factory default...... 41 Switch SW1 configuration ...... 41 IRIG-B input adapter ...... 43 Configuration options...... 43 Factory default...... 43 Switch SW1 configuration ...... 44 Switch SW2 configuration ...... 44 IRIG-B distribution adapter ...... 45 Output Voltage...... 45 Configuration options...... 45 4-Port twisted-pair Ethernet switch ...... 46 Configuration options...... 46 10Base-FL hot standby fiber optic Ethernet switch...... 47 Configuration options...... 47 100Base-FX hot standby fiber optic Ethernet adapter ...... 48 Configuration options...... 48 COM2 port adapter ...... 49 Configuration options...... 49 Redundant twisted-pair Ethernet + COM2 port adapter ...... 50 Configuration options...... 51 USB KVM and audio adapter...... 52 Configuration options...... 52

4 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL TABLE OF CONTENTS

4. CONNECTING TO Connection types...... 53 DEVICES AND Serial...... 53 NETWORKS Network...... 54 Time synchronization ...... 54 Local substation computer...... 54 Local maintenance ...... 54 Cabling overview...... 55 General cabling requirements ...... 55 High-voltage installations ...... 55 RS-232 connections...... 56 RS-485 connections...... 56 Cabling requirements...... 57 2-Wire connections...... 57 4-Wire connections...... 58 Fiber optic serial connections...... 60 Glass optical fiber...... 60 Plastic optical fiber ...... 60 IRIG-B connections...... 61 IRIG-B input adapter ...... 61 IRIG-B distribution adapter...... 62 Hot standby fiber optic connections ...... 63 Network connections...... 63 Front network port...... 64 Modem connections...... 65 Local HMI connection ...... 67 Front maintenance port...... 68 Minimal required connection...... 69 D400 connection to DNP3 I/O modules...... 69 D400 system redundancy ...... 70 Failover sequence...... 70 Required components...... 70 RS232 switch panel...... 72 Redundancy wiring diagrams ...... 72 Troubleshooting D400 Redundancy...... 79

5. POWERING UP Power supply options ...... 81 THE D400 Redundant power supply ...... 82 Power configurations ...... 82 Power input ranges ...... 82 Power connections...... 82 Wiring requirements...... 83 External power requirements...... 83 Power supply alarms ...... 85 Power fail alarm ...... 85 System fail alarm...... 86 Powering down the D400 ...... 88

6. SETTING UP THE Start the D400...... 89 D400 Task 1: Connect to the D400...... 90 Task 2: Create user accounts ...... 91 Task 3: Change the root password...... 91

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 5 TABLE OF CONTENTS

Task 4: Set up the network interface ...... 92 Task 5: Create a supervisor password...... 94 Task 6: Set up secure HMI access ...... 94 Installing the certificate and key ...... 95 Task 7: Access the D400 HMI ...... 96 Task 8: Test the network connection ...... 96

7. SETTING UP THE Prerequisites ...... 97 D400 FOR Configure Warm-Standby redundancy ...... 97 REDUNDANCY Task 1: Warm standby - Configure the D400s for operation ...... 98 Task 2: Warm standby - Connect the D400s ...... 98 Task 3: Warm standby - Create user accounts ...... 98 Task 4: Warm standby - Configure the primary D400 for redundancy...... 98 Task 5: Warm standby - Configure the secondary D400 for redundancy...... 99 Task 6: Warm standby - Verify configuration...... 100 Task 7: Warm standby - Verify redundant D400 operation...... 100 Configure Hot-Standby redundancy...... 100 Task 1: Hot standby - Configure the D400s for operation...... 100 Task 2: Hot standby - Connect the D400s...... 101 Task 3: Hot standby - Create user accounts...... 101 Task 4: Hot standby - Configure the primary D400 for redundancy ...... 101 Task 5: Hot standby - Configure the secondary D400 for redundancy...... 102 Task 6: Hot standby - Verify configuration ...... 103 Task 7: Hot standby - Verify redundant D400 operation ...... 103

8. USING THE D400 Front panel LED indicators ...... 105 System status LEDs...... 106 Serial port status LEDs...... 106 HMI ...... 107 D400 HMI ...... 107 Local HMI ...... 108 System utilities...... 109 From the front maintenance port...... 109 From the local substation computer ...... 109 Over a network connection...... 109 File transfer ...... 110 USB portable memory device ...... 110 System status points ...... 110 Shutting down the D400 ...... 111

9. USING THE LOCAL Start the local gateway configuration utility...... 114 GATEWAY Configure authentication...... 117 CONFIGURATION Configure network settings...... 118 UTILITY Configure network interfaces ...... 119 Network summary...... 121 Configure secure access ...... 122 Configure Remote HMI Non Observer Privileges ...... 123 Configure Rsyslog service...... 124 Configure firewall settings ...... 125 Configure host names ...... 127 Configure time and time synchronization ...... 127

6 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL TABLE OF CONTENTS

Reset system logs...... 128 Reset mSQL database tables ...... 129 Reset NVRAM...... 129 Delete NVRAM Data...... 129 Reset file persistence data ...... 130 Configure local HMI...... 130 Standby local HMI redirects to the active D400 ...... 131 Configure sync manager...... 133 Redundancy...... 136 Power supply...... 138 Automatic Record Retrieval Manager ...... 138 Suppress Forced Qualities To Masters ...... 139 Emulate D20 RTU IEC101 DPA Unbalanced Mode ...... 139 Suppress IEC101+104 DPA Startup Quality Events...... 139 Restore factory default ...... 140 Configure D.20 Client DO Poll Frequency ...... 140 Reboot Device ...... 140 Configuring a Linux-based Enterprise Server ...... 140 SSH Server ...... 140 Rsync utility ...... 140 Installation steps...... 140

10. SERVICING THE Removing the D400 main module ...... 143 D400 Replacing the battery...... 144 Before you remove the battery…...... 145 Supported battery types...... 145 To insert or replace the D400 battery...... 145 Checking voltage...... 146 Cleaning and handling Lithium batteries...... 146 Recycling of batteries...... 146 Battery life...... 146 Dual Ethernet upgrade kit with card 580-3410 ...... 147 Valid combinations...... 147 Installing the 580-3410 dual Ethernet card...... 147 Changing the CompactFlash ...... 150 Replacing the power supply ...... 152

11. REMOVING THE Service life...... 155 D400 FROM SERVICE Remove configuration data and sensitive information from the D400 ...... 155 Removing configuration data on a PC...... 156 Equipment disposal...... 156

A. INSTALLING AND Overall procedure to install and connect DNP3 I/O modules...... 157 CONNECTING DNP3 Installing DNP3 I/O modules in a rack...... 158 I/O MODULES Rack spacing ...... 158 Required clearances ...... 158 Rack mounting procedure ...... 158 Connecting to protective ground ...... 158 Connecting DNP3 I/O modules (Low Voltage) ...... 160 DNP3 I/O module (LV) interconnect cabling...... 160

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 7 TABLE OF CONTENTS

DNP3 I/O module (LV) connection to the Power Source...... 161 Connecting DNP3 I/O modules (High Voltage) ...... 162 Connecting to a D400...... 162

B. STANDARDS & Compliance standards ...... 163 PROTECTION

C. LIST OF Acronym Definitions ...... 167 ACRONYMS

D. MISCELLANEOUS Warranty...... 171 Revision history ...... 171

8 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL D400 Substation Gateway

Product Support

Product Support If you need help with any aspect of your GE Grid Solutions product, you can: • Access the GE Grid Solutions Web site • Search the GE Technical Support library • Contact Technical Support Also covered are: • The GE Grid Solutions address • Instructions on returning a D400 to GE Grid Solutions

Access the GE Grid Solutions Web site

The GE Grid Solutions Web site provides fast access to technical information, such as manuals, release notes and knowledge base topics. Visit us on the Web at: http://www.gegridsolutions.com

Search GE Grid Solutions technical support library

This site serves as a document repository for post-sales requests. To get access to the Technical Support Web site, go to: http://sc.ge.com/*SASTechSupport

Contact GE Grid Solutions technical support

GE Grid Solutions Technical Support is open 24 hours a day, seven days a week for you to talk directly to a GE representative. In the U.S. and Canada, call toll-free: 1 800-547-8629 International customers, please call: + 1 905-927-7070

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 9 PRODUCT SUPPORT

Or e- to [email protected] Have the following information ready to give to Technical Support: • Ship to address (the address that the product is to be returned to) • Bill to address (the address that the invoice is to be sent to) •Contact name • Contact phone number • Contact fax number • Contact e-mail address • Product number / serial number • Description of problem Technical Support will provide you with a case number for your reference.

GE Grid Solutions address

The GE Grid Solutions company address is: GE Grid Solutions 650 Markland Street Markham, Ontario Canada L6C 0M1

Product returns

A Return Merchandise Authorization (RMA) number must accompany all equipment being returned for repair, servicing, or for any other reason. Before you return a product, please contact GE Grid Solutions to obtain an RMA number and instructions for return shipments. You are sent the RMA number and RMA documents via fax or e-mail. Once you receive the RMA documents, attach them to the outside of the shipping package and ship to GE. Product returns are not accepted unless accompanied by the Return Merchandise Authorization number. NOTE

10 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL D400 Substation Gateway

About this Document

About this Document

Purpose

This manual provides information about installing, setting up, using and maintaining your D400TM Substation Gateway. This manual does not provide any procedures for configuring the software of the D400.

Intended audience

This manual is intended for use by field technicians and maintenance personnel who are responsible for the installation, wiring and maintenance of SCADA equipment. This guide assumes that the user is experienced in: • Electrical utility applications • Electrical wiring and safety procedures • Related other manufacturer’s products, such as protective relays and communications equipment

Additional documentation

For further information about the D400, refer to the following documents. • D400 Online Help • Module layouts, as available • The D400 Substation Gateway Software Configuration Guide (GE part number SWM0066). For the most current version of the D400 Instruction Manual, please download a copy from: http://www.gegridsolutions.com/app/ViewFiles.aspx?prod=d400&type=3

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 11 ABOUT THIS DOCUMENT

How to use this guide

This guide describes how to install the D400 and get it up and running for the first time. Procedures are provided for all component options available for the D400. The components included in your D400 depend on what was ordered for your substation application. Follow only the procedures that apply to your D400 model. To check what options are included in your D400, see See “Ordering guide” on page 21. The software-related procedures in this guide are based on using a computer running Windows® XP. Some steps and dialog boxes may vary slightly if you are using another version of Windows.

Safety words and definitions

Before attempting to install or use the device, review all safety indicators in this document to help prevent injury, equipment damage or downtime. The following safety and equipment symbols are used in this document: Indicates a hazardous situation which, if not avoided, result in death or serious injury.

Indicates a hazardous situation which, if not avoided, could result in death or serious injury.

Indicates a hazardous situation which, if not avoided, could result in minor or moderate injury.

Indicates practices that are not related to personal injury.

12 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL D400 Substation Gateway

Chapter 1: Before You Start

Before You Start Before you begin installing and using the D400TM, review the information in this chapter, including the following topics: • Safety precautions • Regulatory compliance information •Product overview • Product specifications •Approvals • Storage recommendations Read and thoroughly understand this guide before installing and operating the unit. Save these instructions for later use and reference. Failure to observe the instructions in this manual may result in serious injury or death.

Safety precautions

Follow all safety precautions and instructions in this manual. Only qualified personnel should work on the D400. Maintenance personnel should be familiar with the technology and the hazards associated with electrical equipment. • Never work alone. • Before performing visual inspections, tests, or maintenance on this equipment, isolate or disconnect all hazardous live circuits and sources of electric power. Assume that all circuits are live until they have been completely de-energized, tested, and tagged. Pay particular attention to the design of the power system. Consider all sources of power, including the possibility of back feed. • Turn off all power supplying the equipment in which the D400 is to be installed before installing and wiring the D400. • Operate only from the power source specified on the installed power supply module. • Beware of potential hazards and wear personal protective equipment.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 13 CHAPTER 1: BEFORE YOU START

• The successful operation of this equipment depends upon proper handling, installation, and operation. Neglecting fundamental installation requirements may lead to personal injury as well as damage to electrical equipment or other property. • All AC voltage terminals are protected from accidental contact by a mechanical safety shield. • All electronic components within the D400 are susceptible to damage from electrostatic discharge. To prevent damage when handling this product use approved static control procedures. • Hazardous voltages can cause shock, burns or death. To prevent exposure to hazardous voltages, disconnect and lock out all power sources before servicing and removing components. • If the D400 is used in a manner not specified in this manual, the protection provided by the equipment may be impaired. • Changes or modifications made to the unit not authorized by GE Grid Solutions could void the warranty.

Warning symbols Table 1 explains the meaning of warning symbols that may appear on the D400 or in this manual. Table 1: Warning symbols that appear on the D400 and in this manual Symbol Description The relevant circuit is direct current.

The relevant circuit is alternating current. Caution: Refer to the documentation for important operation and maintenance instructions. Failure to take or avoid specified actions ! could result in loss of data or physical damage. Warning: Dangerous voltage constituting risk of electric shock is present within the unit. Failure to take or avoid specified actions could result in physical harm to the user. Earth/Ground Terminal

Protective Ground Terminal

Caution: Hot Surface

14 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 1: BEFORE YOU START

Regulatory compliance information

CE Mark compliance The D400 is rated as CISPR 11 Group 1 Class “A” equipment. To provide higher EMC immunity and maintain CE Mark compliance, the serial cables used for permanent RS-232 and RS-485 connections must comply with the following NOTE requirements: • Cables must be shielded • D type connector covers must provide EMC shielding (e.g. metalized plastic or die cast metal covers) for permanently connected RS-232 cables Class “A” equipment is intended for use in an industrial environment. The equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with these instructions, may cause interference to other devices in the vicinity. If this equipment does cause interference with other devices, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: • Reorient or relocate the receiving device • Increase the separation between the equipment • Connect the equipment into an outlet on a circuit different from that to which the other device(s) is connected • Consult the manufacturer or field service technician for help

Restriction of Hazardous Substances (RoHS) The environmental protection use period (EPUP), as defined in PRC SJ/T11363- 2006, for the D400 hardware assemblies listed in Table 2, is in excess of 20 years.

Table 2: RoHS Material Declaration Data Content by Assembly GE part Description Lead Mercury Cadmium Hexavalent Polybromina Polybrominated number (Pb) (Hg) (Cd) Chromium ted biphenyls diphenyl ethers (Cr6) (PBB) (PBDE) 500-0340LF Chassis Assembly O O O O O O 520-0190 Power Supply Blank Assembly O O O O O O 520-0191 Adapter Blank Assembly O O O O O O 520-0204 650 MHz Celeron w Single Ethernet X O O O O O 520-0205LF 1.0 GHz Celeron w Single Ethernet O O O O O O 520-0232LF 1.6 GHz CPU (Atom) O O O O O O 520-0206LF USB KVM Assembly O O O O O O 520-0207LF RS-232 IO Assembly O O O O O O 520-0208LF RS-485 IO Assembly O O O O O O 520-0209LF Glass Fiber Optic IO Assembly O O O O O O 520-0210LF Plastic Fiber Optic IO Assembly O O O O O O 520-0211LF IRIG-B Input Assembly O O O O O O 520-0212LF IRIG-B Distribution Assembly O O O O O O 520-0213LF Ethernet 4 Port Switch Assembly O O O O O O 520-0214LF Hot Standby Ethernet Glass Fiber Optic O O O O O O Assembly

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 15 CHAPTER 1: BEFORE YOU START

GE part Description Lead Mercury Cadmium Hexavalent Polybromina Polybrominated number (Pb) (Hg) (Cd) Chromium ted biphenyls diphenyl ethers (Cr6) (PBB) (PBDE) 520-0215LF 100Base-FX Hot Standby. Fiber Optic O O O O O O Ethernet Adapter. 520-0216LF DC-DC Supply 5V 12A Assembly O O O O O O 520-0217LF AC-DC Supply 5V 12A Assembly O O O O O O 520-0218LF Redundant TP Ethernet + COM2 Port O O O O O O Assembly 520-0219LF COM2 Port Assembly O O O O O O 580-3410 PC/104-Plus 10/1000 Base-TX Ethernet O O O O O O RTL8110SC 977-0544 Cable Assy, C-GRID, 12SKT-10SKT+4SKT O O O O O O 977-0209 Cable, UTP Patch Cord Stranded, 60 Inch O O O O O O 977-0529 Cable, Null Modem DB9F-DB9F, 80°C, O O O O O O 150V, 72 Inch

O Indicates that this toxic or hazardous substance contained in all of the homogeneous materials for this item is below the limit required in PRC SJ/ T11363-2006 and EU Directive 2002/95/EC (RoHS) X: Indicates that this toxic or hazardous substance contained in at least one of the homogeneous materials used for this item is above the limit requirement in PRC SJ/T11363-2006 and EU Directive 2002/95/EC (RoHS) The maximum concentration limits (MCV's) apply. Lead (Pb) 0.1% by weight = 1000 mg/kg = 1000 ppm Mercury (Hg) 0.1% by weight = 1000 mg/kg = 1000 ppm Cadmium (Cd) 0.01% by weight = 100 mg/kg = 100 ppm Chromium VI (Cr6) 0.1% by weight = 1000 mg/kg = 1000 ppm PBB, PBDE 0.1% by weight = 1000 mg/kg = 1000 ppm

EAC compliance The EAC Technical Regulations (TR) for Machines and Equipment apply to the Customs Union (CU) of the Russian Federation, Belarus, and Kazakhstan.

Product Description Country of origin Assembled in Canada; see label on rear of D400 Date of manufacture See label on rear of D400 Declaration of Conformity and/or Certificate of Available upon request Conformity

16 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 1: BEFORE YOU START

Product overview

The D400 Substation Gateway is a secure, substation hardened and CE Marked communications gateway that collects metering, status, event and fault report data from intelligent electronic devices (IEDs). It summarizes the data from devices and makes it available to a master station or host computer over standard SCADA protocols. TCP/IP network connections are supported over the built-in 10/100 MB Ethernet interface and dial-up (external modem required). The D400 comes with a built-in human machine interface (HMI)/annunciator as part of the base software. A Local HMI can be accessed through the Keyboard, Video, Mouse interface. A full featured substation HMI is accessed using a secure stand-alone HMI Viewer (HTTP/HTTPS) network connection. The D400 is configured “online” through a stand-alone HMI.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 17 CHAPTER 1: BEFORE YOU START

Functional overview

The data flow managed by a D400 is shown in Figure 1. The D400 communicates data with the: • Control Center which can comprise an EMS (Enterprise Management System) or a DMS (Distribution Management System) SCADA (Supervisory Control and Data Acquisition) system. • IEDs (Intelligent Electronic Devices) to monitor and control field inputs and outputs. Figure 1: D400 - Data flow

Control Centre

EMS or DMS SCADA System: Processes data for centralized management of substation switches and breakers

Client Connectors

Data flow through protocols such as DNP, IEC 104, Modbus D400 Server Connectors

Pseudo Server Maps points

Autom ation Applications

Client Maps

Client Connectors

Data Concentration through protocols such as DNP, 61850, IEC 101/103,104, IED Modbus, Hydran, and SEL

ServerConnectors

Client Connectors

Field Input and Output:  Digital Inputs  Digital Outputs  Analog Inputs  Analog Outputs

18 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 1: BEFORE YOU START

Hardware overview The D400 is (see Figure 2) built on a flexible, high-performance, expandable platform powered by a 1.6 GHz processor. It is distinguished by the noticeable lack of a hard drive and fan, employing instead the rugged and reliable CompactFlash mass storage and engineered heat sink and ventilation. The D400 supports various communication media types through a choice of input/output (I/0) adapter cards: • Serial (up to 8 configurable 2-port adapter cards): RS-232, RS-485, Fiber Optic (Glass or Plastic) • Ethernet: 10/100BaseT, 100BaseFX, or 10BaseFL Figure 2: D400 - front view

Features • Secure Web server (128-bit encryption) • Secure SCADA communications through Secure Sockets Layer or Transport Layer Security (SSL/TLS) • Secure access using SSH (Secure Shell)/SCP (Secure Copy)/HTTPS • Secure server, gateway, and/or data concentrator using SSL • User configurable access level • Support for remote user authentication • Built-in alarm annunciator • Support for time synchronization signals, including Network Time Protocol (NTP) and IRIG-B • Support for DNP protocol for communications to multiple masters • High-performance real-time database engine • Internal Mini SQL™ database for archival of SOE and alarm records • Built-in basic math/logic functions • Event notification (e-mail) • Portable memory device plug-in • Dual CompactFlash cards for main and user storage • Dual hot swappable power supply units • Communication adapter cards

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 19 CHAPTER 1: BEFORE YOU START

Firmware compatibility Table 3 lists the released D400 firmware versions and indicates the CPUs that support those firmware versions. Table 3: D400 firmware and CPU compatibility D400 Firmware Version CPU 650 MHz 1.0 GHz 1.6 GHz 2.75    3.00    3.20   3.20 with Service Pack 1  3.20 with Service Pack 2   3.20 with Service Pack 3   4.10  5.01   5.10   5.10 with Service Pack 1   3.11   5.20   5.30  

D400 Firmware versions:

NOTE • 2.75, 3.00, 3.20, and 3.20 with Service Pack 2 can run on the 1.6 GHz CPU the respective 1.6 GHz patch is applied. • 3.20 with Service Pack3, 5.01, 5.10, 5.10 with Service Pack 1, 5.11, and 5.20 can run on the 1.6 GHz CPU. • 3.20 with Service Pack1, and 4.10 do not run on the 1.6 GHz CPU.

Table 4 lists the released D400 firmware versions and indicates the JRE supported. Table 4: D400 firmware and JRE version compatibility D400 firmware version JRE supported JRE version tested with ... 2.75 JRE 6 JRE 6 update 22 3.00 JRE 6 JRE 6 update 22 3.20 JRE 6 JRE 6 update 27 3.20 with Service Pack 1 JRE 7 JRE 7 update 11 3.20 with Service Pack 2 JRE 7 JRE 7 update 11 3.20 with Service Pack 3 JRE7/JRE8 JRE 7 update 71 / JRE 8 update 31 4.10 JRE 7 JRE 7 update 17 5.01 JRE 7 JRE 7 update 71 5.01 + Java Patch JRE 8 JRE 8 update 31 5.10 JRE7/JRE8 JRE 7 update 71 / JRE 8 update 40 5.10 with Service Pack 1 JRE7/JRE8 JRE 7 update 71 / JRE 8 update 40 5.11 JRE8 JRE 8 update 60 5.20 JRE8 JRE 8 update 92 5.30 JRE8 JRE 8 update 112, 121, 131

20 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 1: BEFORE YOU START

Ordering guide

The latest D400 Substation Gateway ordering guide, which includes accessories, is available on the GE Grid Solutions website: http://store.gegridsolutions.com/viewprod.asp?Model=D400 You can select the required options from the available Product Option items. The Order Code automatically updates as each option is selected. The Product Options are: • D400 CPU Options • Main and Redundant (optional) Power Supply Options • Up to 8 Serial Communication Slots • IRIG-B Input Card Option (Slot 9) • IRIG-B Distribution Card Options (Slot 10) • Primary and Secondary (optional) Network Slots •USB KVM, Audio • D400 Local HMI (One Line Viewer) • D400 IEC61850 • D400 LogicLinx Executor License • D400 Setup Software • D400 Image Firmware

Upgrade kit The D400 Upgrade Kits can be configured to include all the components necessary to upgrade existing D400 units. An Upgrade Kit comprises the: • Hardware (as selected), • Upgrade Manager, and • Migration Tool The D400 Upgrade Kits are available for order though GE Grid Solutions Online store at: http://store.gegridsolutions.com/viewprod.asp?model=D400-UGK

Upgrade manager The Upgrade Manager allows you to: • Upgrade the D400 firmware release, and • Automatically transfer configuration and license files The firmware of your D400 can be upgraded to provide the latest functionality and improvements. Refer to the Multilin D400* Substation Gateway Upgrade Manager Quick Start Guide which is available with the D400 Upgrade Kits. The D400 Upgrade Kits are available for order though GE Grid Solutions Online store at: http://store.gegridsolutions.com/viewprod.asp?model=D400-UGK

Migration tool The Migration Tool allows you to migrate existing firmware and configuration files for the D400 Main Module from a 1.0 GHz CPU to a 1.6 GHz CPU. The Migration Tool is a orderable option from the D400 upgrade kits though GE Grid Solutions Online store.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 21 CHAPTER 1: BEFORE YOU START

Product identification number The D400 comes with an ID number that identifies the supplied options and hardware configuration of the unit. This ID number (see Figure 3) is composed of * followed by 6 alphanumeric characters. The ID number is listed on a label located next to Slot 1 on the rear panel of the D400. Figure 3: D400 identification number

Location of ID number label

22 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 1: BEFORE YOU START

Product specifications

The D400 adheres to the following product specifications: • System on page 23 • Communications on page 23 • Electrical on page 24 • Physical on page 24 • Environmental on page 25 • Software on page 26 Additional Standards and Protection are listed in Appendix A, Standards & Protection.

System Processor 1.6 GHz Embedded CPU 1.0 GHz Embedded CPU (obsolete) 650 MHz Embedded CPU (obsolete) Memory 1.0 GB of DDR2-533 (PC2-4200) RAM (1.6 GHz Embedded CPU) 1.0 GB of PC133 DDR RAM (1.0 GHz Embedded CPU) 16 MB NVRAM standard for persistent event storage Storage No hard drive 1 GB of Main and 1 GB of User CompactFlash card ship standard Both expandable to 16 GB, depending on available capacity of industrial CompactFlash cards Time deviation When the D400 is powered up, and the GPS signal is lost, the D400 system clock tick is provided by the FPGA where time stored is driven by a 2.0 ppm oscillator. The maximum clock drift is 0.90 ms every 300 seconds. This specification includes the effects of a -20 °C to +65 °C temperature swing, and one year of oscillator aging. When the D400 is not powered up, the drift of the battery backed up RTC is provided by a 100 ppm crystal; the maximum clock drift is 45 ms every 300 seconds. Linux Embedded Mini SQL Archive of SOE reports, alarm records, operator notes, HMI quality changes, database PRFs, and point tags LED indicators Main module System status: Power, Ready, IRIG-B and Network port status Serial port status: Transmit and Receive status per port Power Supplies Power on (Green)

Communications Network connections Single or optional redundant Ethernet interface Fiber Optic and/or Twisted Pair 10/100BaseT (Isolated RJ-45 connector) 100BaseFX (Fiber Optic: 1300 nm, 50/125 µm, 62.5/125 µm multi-mode duplex fiber cable-ST connectors) 10BaseFL (Fiber Optic: 820 to 850 nm, 50/125 µm, 62.5/125 µm, 100/140 µm, and 200 µm HCS (hard clad silica) multimode duplex fiber cable-ST connectors) Data rate: 10 MBps and 100 Mbps

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 23 CHAPTER 1: BEFORE YOU START

Serial 16 channels: RS-232/RS-485/Fiber optic communications Data rate: 300 to 115.2 Kbps RS-232 Configurable for DCE/DTE operation Galvanic isolation Can drive IRIG-B signal to RS-232 ports (with optional IRIG-B Input card) RS-485 2-Wire/4-Wire support Galvanic isolation Fiber Optic Glass Optical Fiber serial port: (820 to 850 nm) 50/125 µm, 62.5/125 µm, 100/140 µm and 200 µm HCS multi-mode fiber with ST connectors Plastic Optical Fiber (POF) serial port: (660 nm), 1 mm core with Agilent Versatile Link Simplex connectors. POF is limited to a maximum of 38.4 kbps. Configurable ambient state (ON/OFF) Time synchronization IRIG-B Input Module IRIG-B format pulse width coded (PWC) signal, HCMOS or TTL levels on terminal block, IRIG-B format 1kHz AM modulated signal on BNC connector, and IRIG-B PWC signal on Fiber Optic (820 to 850 nm) ST connector. CPU time sync for internal database time stamping Distribution Module Can drive IRIG-B TTL signal from the input module for 16 IEDs Signal Propagation Propagated to all 16 RS-232 ports for devices Propagated to the distribution module USB KVM & Audio Three USB v1.1 compliant Type A ports for connecting keyboard, mouse, or touchscreen HD D-Sub 15 socket for connecting an industrial SVGA display (in accordance with VESA® Plug & Display Standard)3.5 mm stereo audio jack for audible alarms User connections Front Ethernet port for local connection to HMI Two USB v1.1 compliant Type A ports for USB device plug-in, such as keyboard, mouse, or touchscreen Front serial communication port (RS-232) for local maintenance

Electrical Rated power supplies AC-DC 100 to 240 VAC (±10%) 127 VA maximum Minimum/Maximum AC voltage: 90 VAC / 265 VAC 100 to 300 VDC (±10%) 135 W maximum Minimum/Maximum DC voltage: 88 VDC / 330 VDC DC-DC 20 to 55 VDC (±10%) 135 W maximum Minimum/Maximum DC voltage: 18 VDC / 60 VDC

Peak inrush current at AC-DC 26.5 Apeak (< 145 VAC or 205 VDC) 25 °C on cold start 40 Apeak (< 264 VAC or 370 VDC) DC-DC 35 Apeak (< 60 VDC) Rated frequency (AC-DC) 47 to 63 Hz (50/60 Hz) Contact closures Solid-state photo-MOS device Output ratings at maximum ambient temperature: – Continuous current: 0.1 A continuous at 300 VAC or 300 VDC – Peak current: 0.28 A peak for 10 ms – Maximum on resistance: 35 ohm – Dielectric isolation: 2 kVRMS

Physical Overall height 2U (3.47”) [88.12 mm] Width 19” rack mount [482.59 mm] Depth 12.24” [310.95 mm] for chassis and rear connectors 13.04” [331.34 mm] with front clearance for protruding parts Recommended cable 3.75” [95.25 mm] for units with fiber optic connections clearance 2.0” [50.8 mm] for units without fiber optic connections

24 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 1: BEFORE YOU START

Recommended work area 36” [0.91 m] depth by 30” [0.76 m] width on front and back of device. clearance Unit gross weight 15.4 lb [7.0 kg] Packing carton Size: 23.6” x 16.1” x 14.6” [600 mm x 410 mm x 372 mm] Gross Weight: 20.0 lb [9.1 kg] Material/Finish Galvannealed steel with black powder coat

Figure 4: D400 dimensions 2U [3.47" /88.12 /88.12 mm] 2U [3.47"

19 " rac k m ou nt [48 2.5 9 ] m mm m] 5 4.0 28 " [ .18 11

Environmental Operating temperature 20 °C to +65 °C  Maximum ambient temperature is +50 °C for unit to fully comply with IEC 61010-1 Section 10.1 regarding surface temperature limits for protection against burns. Plastic optical fiber lower limit is 0 °C

The top cover of the D400 can get hot during peak operation. Ensure that there is at least 1U (1.75 inch [44.45 mm]) of free space above the D400 unit for proper ventilation. When the unit is operating above 50 °C ambient temperature, safe handling precautions are recommended to prevent burns.

Humidity rating 5% to 95% relative humidity, non-condensing Environmental rating Ingress protection: IP30 (IEC 60529) Installation / CAT II (2) overvoltage category Pollution degree 2 Use Indoor use only Altitude Maximum altitude 6,560 ft [2000 m] MTBF (MIL-217F) 39,400 hours at 40 °C in a fully loaded single Ethernet configuration Noise 0 dB(A)

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 25 CHAPTER 1: BEFORE YOU START

Software Firmware Supports various IED and host protocols as well as HMI-based user interface and secure access Human machine Built-in graphical user interface (HMI based) interface Configuration Built-in graphical user interface (HMI based)

Approvals

Table 5: Compliance approvals Compliance Applicable council directive ... According to ... CE Low voltage directive IEC 61010-1 EMC directive EN 61326-1 EAC Machines and Equipment TR CU 0102011

Storage recommendations

Storage conditions Always store the D400 in an environment compatible with operating conditions. Recommended environmental conditions for storage are: •Temperature: 40 °C to +90 °C • Relative humidity: 5% to 95%, non-condensing Exposure to excessive temperature or other extreme environmental conditions might cause damage and/or unreliable operation. To avoid deterioration and early failure of electrolytic capacitors, power up units that are stored in a de-energized state once every 12 months, for one hour continuously. NOTE

Battery life To maintain the life of the battery, the battery should be removed if the D400 is to be powered down or stored for more than two weeks. See “Replacing the battery” on page 144. The battery sustains the NVRAM. If the battery is removed, the NVRAM storage is lost.

NOTE

26 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL D400 Substation Gateway

Chapter 2: Installing the D400

Installing the D400 This chapter covers the following topics: • Overview of the steps and tools required to install the D400 • Physical installation the D400 in a rack or substation panel Before you install and operate the D400, read and follow the safety guidelines and instructions in “Safety precautions” on page 13.

Installation steps

The installation procedure varies depending on the components ordered and shipped with your D400. Follow the procedures in this manual that apply to the specific hardware configuration of your D400.

Follow these main 1. Mount the D400 in the rack or panel. See “Physical installation” on page 30. steps to install and set 2. Install the supplied battery on the D400 main board. See Chapter 10, Replacing the up the D400 battery “section. 3. Set up the communication cards. See Chapter 3, Setting Up Communication Cards. 4. Make device and network connections. See Chapter 4, Connecting to Devices and Networks. 5. Make power connections and verify operation. See Chapter 5, Powering Up the D400. 6. Set up the D400 network interface. See Chapter 6, Setting Up the D400. 7. Configure the D400; see Chapter 8, Using the D400.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 27 CHAPTER 2: INSTALLING THE D400

Required tools

Before beginning the installation procedures, have the following tools and equipment available: • Appropriate device cables for serial connections • CAT5 network cables for RJ-45 Ethernet connections • Flathead screwdriver with 0.6 mm by 3.5 mm blade (for terminal block wiring) • Flathead screwdriver with 0.3 mm by 2.5 mm blade (for removing and installing the adapter cards and changing switch positions) • #1 Phillips screwdriver (for power terminal block wiring and adapter card removal) • #2 Phillips screwdriver (for rack mounting the unit) • Needle-nose pliers • Wire cutters • Wire strippers • Wire-crimping tool (Panduit® CT-1525 or equivalent) • Six fork connectors, Panduit part number PV14-6F for 16-14 AWG [1.3-2.1 mm²] wire or PV18-6F for 22-18 AWG [0.3-0.8 mm²] wire (or equivalent) for terminal block connections • One ring connector, Panduit part number PV10-14R for 12 AWG [3.3 mm²] wire for protective earth terminal • Approved network settings for the device • Windows-based PC

Unpacking and inspecting the D400

To unpack and inspect the D400: 1. Carefully remove the D400 from its packaging. 2. Open the product package and check that the following items have been delivered: – D400 unit (Product ID D400*XXXXXX) – Ethernet cable, 60 inch [1.5 m], (GE Item No. 977-0209/60) for local network connection – Serial null modem cable, 72 inch [1.8 m], (GE Item No. 977-0529/72) for local maintenance connection – ½ AA 3.6 V Lithium Battery (GE Item No. 980-0038) – Substation Automation products - Documentation CD (GE Item No. 581-0002) – Mini SQL Proof of License (GE Item No. 580-1703) 3. Visually inspect the unit to ensure it has not sustained any visible damage during transit. If there are visible signs of damage, report it immediately to the carrier. 4. \Verify that you have received all items. GE parts include a unique number, typically in the format XXX-XXXX, that can be used as a reference. 5. Verify the hardware configuration of the D400 using the Product ID number. For an explanation of the Product ID. See “Ordering guide” on page 21.

28 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 2: INSTALLING THE D400

First look at the D400

Front panel The front panel of the D400 provides easy access to the status indicators, user connections and power supply units. Figure 5: D400 front panel

Power Optional Redundant Supply Power Supply Main Module

User CompactFlash System Status Serial Port Status access panel LED indicators LED indicators

Ethernet port for local connection to HMI Two USB Type A ports for USB device plug-in

Rear panel The rear panel provides access to the communication ports, field wiring connections and power connections. Figure 6: D400 rear panel

IRIG-B Distribution Slot Network Slots IRIG-B Input Slot USB KVM Slot Serial Communication Slots External Power Source

Power Supply and System Fail Alarms Slot 1 Slot 2 Slot 3 Slot 4 Slot 5 Slot 6 Slot 7 Slot 8 Slot 9 Slot 10 Slot 11 Slot 12 Slot 13 Slot

The D400 contains 13 I/O adapter card slots for the communication cards. The communication cards are powered from the backplane of the D400. The types of communication cards included in your D400 depend on what was ordered for your substation application.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 29 CHAPTER 2: INSTALLING THE D400

Physical installation

The D400 can be installed in a standard 19-inch rack or substation panel. The D400 is supplied with a ½ AA 3.6 V 0.9 Ah Lithium battery that you must insert on the D400 main board when the D400 is installed. The top cover of the D400 can get hot during peak operation. Ensure that there is at least 1U (1.75 inch [44.45 mm]) of free space above the D400 unit for proper ventilation.

When the unit is operating above 50 °C ambient temperature, safe handling precautions are recommended to prevent burns.

As per NERC/CIP guidelines, equipment shall be protected from unauthorized access using strong physical security measures such as placing the equipment in a locked cabinet inside an access controlled site. Strong physical security is required because the User Compact Flash card, which is accessible from the front panel, contains your configuration data and other sensitive information.

Rack mounting The D400 mounts directly into an industry standard 19-inch [482.6 mm] equipment mounting rack with EIA universal mounting rail hole spacing.

To mount the D400 on 1. Position the D400 in the rack. a rack 2. Holding the D400 firmly in the rails of the mounting rack, insert and tighten the four rack screws. The recommended tool torque settings for zinc-plated mounting screws are: – 10-32 UNF screws use 22.2 in-lb [2.50 Nm] – 12-24 UNC screws use 31.0 in-lb [3.51 Nm] – M5x0.45 screws use 18.1 in-lb [2.04 Nm] – M6x0.5 screws use 33.3 in-lb [3.76 Nm] For information on wiring the D400, see “Power connections” on page 82. It is not recommended to ship the D400 installed in a rack without support brackets and adequate conductive foam blocking in place. NOTE

30 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 2: INSTALLING THE D400

Panel mount If you are using a panel cutout, use the following cutout dimensions: Figure 7: D400 front panel dimensions

.162 in. 18.3 in. [464.8 mm] [4.1 mm] 17.5 in. [444.5 mm]

Cutout for panel mounting 3.50 in. 1.75 in. [88.90 mm] [88.90 mm] [44.46

Battery installation

To insert the Lithium Remove the D400 main module from the chassis and insert the battery in the battery battery holder BT1. See “Replacing the battery” on page 144 for more information.

Battery removal

J12 - battery backup The D400 card contains a 3.6V lithium battery to maintain NVRAM contents (processor and enable/disable date/time) in the event of a power failure. Move jumper J12 to position 2-3 when storing board for extended periods. Return jumper J12 to position 1-2 for normal operation. Table 6 describes the J12 jumper positions and associated functions. Table 6: Jumper J12 positions Jumper Position Function J12 pin 1 to 2 Connects the battery to the NVRAM and date/time. Note: This is recommended jumper setting. pin 2 to 3 Disconnects the battery from the NVRAM and date/time

Disconnect the battery if the board is to be stored for extended periods. This conserves the battery energy.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 31 CHAPTER 2: INSTALLING THE D400

32 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL D400 Substation Gateway

Chapter 3: Setting Up Communication Cards

Setting Up Communication Cards This chapter describes the D400 communication cards and how to change the card settings for the different configuration options. The communication cards are factory installed in the D400 with default settings.

Communication cards

All communication cards plug into I/O adapter card slots at the rear of the D400 chassis. The communication cards are powered from the backplane of the D400. Figure 8: D400 I/O adapter card slots

IRIG-B Distribution Slot Network Slots IRIG-B Input Slot USB KVM Slot Serial Communication Slots External Power Source

Power Supply and System Fail Alarms Slot 1 Slot 2 Slot 3 Slot 4 Slot 5 Slot 6 Slot 7 Slot 8 Slot 9 Slot 10 Slot 11 Slot 12 Slot 13 Slot

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 33 CHAPTER 3: SETTING UP COMMUNICATION CARDS

Types of communication cards The types of communication cards included in your D400 depend on what was ordered for your substation application. The following types of communication cards are available for the D400: • Serial (Slots 1 to 8) – RS-232 – RS-485 • Fiber Optic Serial (glass or plastic) – IRIG-B (Slots 9 and 10) –IRIG-B Input – IRIG-B Distribution • Network (Slots 11 and 12) – 4-Port Twisted-Pair Ethernet Switch – Hot Standby Fiber Optic Ethernet Switch – Redundant Twisted-Pair Ethernet + COM2 Port –COM2 Port • USB KVM (Slot 13) – Keyboard, Video and Mouse

Changing card settings

The communication cards are factory installed with default settings. You may want to adjust individual card settings to work with your specific system set up.

To change the 1. At the rear panel of the D400, using a flathead or Phillips screwdriver loosen (but don't settings on a completely remove) the two screws from the top and bottom of the communication communication card card. 2. Using the flathead screwdriver, gently pry the top of the card from the slot and remove it from the chassis. 3. Refer to the instructions in the following sections to make any required changes to the switch settings on the card. Use a small flathead screwdriver (same as used to remove the communication card screws) to change switch positions. TIP 4. Slide the card into the same slot you removed it from, and tighten the two screws. For proper transient protection, the recommended tool torque settings for communication card screws are 2.6 in-lb [0.294 Nm].

34 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 3: SETTING UP COMMUNICATION CARDS

RS-232 adapter

The RS-232 Adapter (GE Item No. 520-0207LF) is a standard RS-232 serial I/O adapter card that plugs into any serial communication slot (slots 1 through 8) on the D400. It contains two independently isolated RS-232 serial ports (Port 1 J3 and Port 2 J2) each with a DB-9 connector with common shields. See “RS-232 connections” on page 56 for typical cable connections and connector pin outs.

Configuration options The RS-232 card supports the following configuration options on each port: • DCE (Data Communications Equipment), if SW1/SW2 pin 1 is set to A • DTE (Data Terminal Equipment), if SW1/SW2 pin 1 is set to A • +5V (320mA) output on pin 1 of rear DB9 connector if SW1/SW2 position 1 is OFF and position 2 is set to ON. Refer to module layout drawing 520-0207-ML for details. In addition, the RS-232 card is configurable to optionally provide an IRIG-B signal (on pin 4) and individually isolated Ground (on pin 6). The signal type and pin options for each port are selectable via two sets of switches on the RS-232 card: •Port 2 (J2) is configured by switches SW1 and SW3 •Port 1 (J3) is configured by switches SW2 and SW4 Follow instructions for setting the switches to select the appropriate functions for each port. The signal format outputted to the RS-232 cards is dependent upon the format applied to the IRIG-B input adapter:

IRIG-B Input Format... IRIG-B Output Format... Pulse Width Modulated (B0xx) Pulse Width Modulated (B0xx) Manchester (B2xx) Manchester (B2xx) AM Modulated (B1xx) Pulse Width Modulated (B0xx)

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 35 CHAPTER 3: SETTING UP COMMUNICATION CARDS

Factory default The factory default setting is DTE on each port. Figure 9: RS-232 adapter top side

J2 SW1 SW3

SW2 SW4 J3

Switch SW1/SW2 configuration Switches SW1 (for Port 2) and SW2 (for Port 1) control the signal type of the RS-232 port. Each switch contains ten switch positions that can each be set to position ON or OFF to select the appropriate port option. Table 7: RS-232 Card Switch SW1/SW2 Settings

Port Option SW1/SW2 Switch Position 1 2 3 4 5 6 7 8 9 10 DTE (default) - see Figure 10 ON OFF ON OFF ON OFF ON OFF ON OFF DCE - see Figure 11 - OFF OFF ON OFF ON OFF ON OFF ON +5 V (320 mA) isolated source * ON * * * * * * * *

*Use DTE or DCE settings as appropriate

DCD output is not supported in DCE mode.

NOTE If configured with SW1/SW2, each +5 V is output on Pin 1 of rear DB9 connector and is independently isolated and fused with a PTC (positive temperature coefficient) resettable NOTE fuse at 320 mA at 65 °C.

36 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 3: SETTING UP COMMUNICATION CARDS

Figure 10: Switch SW1/SW2 configuration for port DTE (default)

ON

1 2 3 4 5 6 7 8 9 10

Figure 11: Switch SW1/SW2 configuration for port DCE

ON

1 2 3 4 5 6 7 8 9 10

Switch SW3/SW4 configuration Switches SW3 (for Port 2) and SW4 (for Port 1) control the signals on Pins 4 and 6 of the RS- 232 port. Each switch contains four switch positions that can each be set to ON or OFF to select the appropriate function for the port option. Table 8: RS-232 Card Switch SW3/SW4 Settings

Function Pin 6 Signal SW3/SW4 Positions Pin 4 Signal SW3/SW4 Positions 1 2 3 4 5 6 7 8 DTE (default) DSR Input OFF OFF ON OFF DTR Output OFF ON OFF OFF DCE DTR Output OFF ON OFF OFF DSR Input OFF OFF ON OFF IRIG-B Enable Ground OFF OFF OFF ON IRIG-B Output ON OFF OFF OFF

The switch positions are listed for: • DTE (Pin 4 DTR Output to DCE and Pin 6 DSR Input from DCE). See Figure 12. • DCE (Pin 4 DTR Input from DTE and Pin 6 DSR Output to DTE). See Figure 13. • IRIG-B Enable (on Pin 4) and Ground (on Pin 6). See Figure 14. Figure 12: Switch SW3/SW4 configuration for port DTE (default)

ON

1234 5678

Figure 13: Switch SW3/SW4 configuration for port DCE

ON

1234 5678

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 37 CHAPTER 3: SETTING UP COMMUNICATION CARDS

Figure 14: Switch SW3/SW4 configuration for port IRIG-B)

ON

1234 5678

RS-485 adapter

The RS-485 Adapter (GE Item No. 520-0208LF) plugs into any serial communication slot (slots 1 through 8) on the D400. It contains two independently isolated RS-485 channels on a single terminal block TB1: Channel 1 on terminals TB1-1 through TB1-5 and Channel 2 on terminals TB1-6 through TB1-10. TB1 is a 10 position pluggable 5.08 mm pitch connector, Molex P/N 39530-0010 (GE Item No. 640-0955). See “RS-485 connections” on page 56 for typical cable connections.

Configuration options The RS-485 card supports two configuration options on each channel: •2-wire •4-wire Pull-up/pull-down and line termination selection is available for RS-422 signals. The signal mode for each channel is selectable via two sets of switches on the RS-485 card: • Channel 1 (TB1-1 to TB1-5) is configured by switches SW2 (top side) and SW4 (bottom side). • Channel 2 (TB1-6 to TB1-10) is configured by switches SW1 (top side) and SW3 (bottom side). Follow instructions for setting the switches to select the appropriate functions for each channel.

Factory default The factory default setting is 2-wire on each channel and without RS-422 pull-up/pull- down or line termination resistors selected.

38 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 3: SETTING UP COMMUNICATION CARDS

Switch SW1/SW2 configuration Switches SW1 (for Channel 2 on TB1-6 through TB1-10) and SW2 (for Channel 1 on TB1-1 through TB1-5) control the signal mode for each channel. Each switch contains two switch positions that can each be set to ON or OFF to select the appropriate channel option. Table 9: RS-485 Card Switch SW1/SW2 Settings

Channel Option SW1/SW2 Switch Positions 1 2 2-Wire (default) ON OFF 4-Wire OFF ON

Figure 15: RS-485 Adapter Top Side)

Figure 16: RS-485 Adapter Bottom Side)

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 39 CHAPTER 3: SETTING UP COMMUNICATION CARDS

Switch SW3/SW4 configuration Switches SW3 (for Channel 2 on TB1-6 through TB1-10) and SW4 (for Channel 1 on TB1-1 through TB1-5) contain ten DIP-switches that control RS-422 pull-up and pull-down resistors for the differential data lines and provide line termination between the differential data pairs. Each DIP-switch can be set to ON or OFF to select the appropriate function for the switch. That is, if all pins are set to ON, switch is ON. If all pins are set to OFF, switch is OFF. If RS-422 termination/pull-up is selected, the TX+ and RX+ signals have a 680 ohm pull-up resistor, the TX- and RX- signals have a 680 ohm pull-down resistor, and the RX and TX signals have a 120 ohm termination. Figure 17: RS-485 Mode - 12 KOhm (Single Unit Load))

ON

1234 5678 9 0

Figure 18: RS-422 120 Ohm Line Termination on TX and RX

ON

1234 5678 9 0

Figure 19: RS-422 120 Ohm Line Termination with 680 Ohm Pull-Up and Pull-Down Resistors

ON

1234 5678 9 0

40 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 3: SETTING UP COMMUNICATION CARDS

Fiber optic serial adapter

The Fiber Optic Serial Adapter is available in two variants: • Glass Optical Fiber (GOF) Serial with 820-850 nm ST connectors  (GE Item No. 520-0209LF) • Plastic Optical Fiber (POF) Serial with 660 nm Agilent Versatile Link connectors (GE Item No. 520-0210LF) The plastic optical fiber is limited to 38.4 kbps operation and a lower operating temperature limit of 0 °C. NOTE The Fiber Optic Serial cards include two pairs of channels for signal transmission (TX1/TX2) and reception (RX1/RX2) through ST (GOF) or Versatile Link (POF) connectors. The cards plug into any serial communication slot (slots 1 through 8) on the D400.

Configuration options The Fiber Optic Serial card supports the following configuration options for each channel: • Standard state •Inverted state The state for each channel is selectable via a single two-position pin switch SW1 on the Fiber Optic Serial card. Follow instructions for setting the switch to select the appropriate state for each channel. The fiber optic channel settings on the D400 must match the set up of the other end of the fiber optic communications channel. NOTE

Factory default The factory default setting is Standard state on each channel.

Switch SW1 configuration Switch SW1 controls the state of each fiber optic channel. The switch contains four two- position pins that can each be set to A or B to select the appropriate state. Table 10: Fiber Optic Serial Card Switch SW1 Settings

State Option SW1 Switch Position 1 2 3 4 Standard (default) B A B A Inverted A B A B

In Standard state fiber is lit when a “1” is transmitted. In Inverted state fiber is lit when a “0” is transmitted. NOTE

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 41 CHAPTER 3: SETTING UP COMMUNICATION CARDS

Figure 20: Glass Optical Fiber Serial Adapter

Figure 21: Plastic Optical Fiber Serial Adapter

42 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 3: SETTING UP COMMUNICATION CARDS

IRIG-B input adapter

The IRIG-B Input Adapter (GE part number 520-0211LF) plugs into a dedicated IRIG-B slot (slot 9) on the D400. The IRIG-B Input card accepts an IRIG-B signal in one of three input formats through a corresponding connector type: • Modulated IRIG-B through a BNC connector J2 AM modulated input accepts B12X, however, the SBS (straight binary seconds) in B120, B124, and B127 are decoded but not used to set the time • Pulse Width Code IRIG-B (TTL) through a terminal block TB1 (TTL) input accepts B00X and B22x, however, the SBS field is decoded but not used to set the time. The connector used is a 2 position pluggable terminal block, Molex P/N 39530-0002 (GE part number 640-0956) • Fiber Optic through a Receive (RX) 820 to 850 nm ST connector U12 The IRIG-B signal (TTL) can be subsequently distributed to attached devices through one of the following options: • IRIG-B Distribution Adapter (GE Item No. 520-0212LF). See “IRIG-B distribution adapter” on page 45. • RS-232 Adapter (GE Item No. 520-0207LF). See “RS-232 adapter” on page 35. See “IRIG-B connections” on page 61 for wiring instructions.

J2 Input Range 4.0 VP-P to 8.0 VP-P; No DC offset Input Impedance >1 M@ 1 kHz TB1 Voltage Range High: > 3.5 V Low: < 1.5 V Load One HCMOS load U12 Receiver Sensitivity 25.4 dBm

Configuration options The input signal formats and output options are selectable via two switches on the IRIG-B Input card: • IRIG-B state option is configured by switch SW1 • Input signal format is configured by switch SW2 Follow instructions for setting the switches to select the appropriate IRIG-B signal formats and functions.

Factory default The factory default setting is the Standard state on each channel.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 43 CHAPTER 3: SETTING UP COMMUNICATION CARDS

Switch SW1 configuration Switch SW1 controls the state option for the IRIG-B Input card. It contains two switch positions that can be set to ON or OFF to select the appropriate IRIG-B state option. Table 11: IRIG-B Input Card Switch SW1 Settings

IRIG-B State Option SW1 Switch Positions 1 2 Standard (default) ON OFF Fiber TX Continuous Test Mode OFF ON

Leave switch SW1 in the Standard position as it is required for the D400 to properly decode and set the system time. NOTE Figure 22: IRIG-B Input Adapter

Switch SW2 configuration Switch SW2 controls the signal option for the selected state option (SW1). It contains three switch positions that can be set to ON or OFF to select the appropriate signal. Table 12: IRIG-B Input Card Switch SW2 Settings

Input Signal Option SW2 Switch Positions 1 2 3 Fiber Optic (RX) ON OFF OFF TTL (TB1) (default) OFF ON OFF BNC (J2) OFF OFF ON

44 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 3: SETTING UP COMMUNICATION CARDS

IRIG-B distribution adapter

The IRIG-B Distribution Adapter (GE part number 520-0212LF) is an optional IRIG-B output card to supply a pulse width coded IRIG-B (TTL) signal passed from the IRIG-B Input card to attached devices. The IRIG-B Distribution card provides four channels on a single terminal block. Each channel is capable of supplying a signal to up to four devices, for a total of 16 devices. The IRIG-B Distribution card plugs into a dedicated IRIG-B slot (slot 10) on the D400.

Output Voltage Output as per advanced HCMOS duty cycle may vary up to ±10% from nominal when the AM modulation option is used. The connector used is a 10 position, 5.08 mm pitch pluggable connector, Molex part number 39530-0010 (GE Item No. 640-0955). See “IRIG-B connections” on page 61 for wiring instructions.

Configuration options There are no selectable options on the IRIG-B Distribution card. The signal format outputted to the IRIG-B distribution adapter is dependent upon the format applied to the IRIG-B input adapter:

IRIG-B Input Format... IRIG-B Output Format... Pulse Width Modulated (B0xx) Pulse Width Modulated (B0xx) Manchester (B2xx) Manchester (B2xx) AM Modulated (B1xx) Pulse Width Modulated (B0xx)

Figure 23: IRIG-B Distribution Adapter

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 45 CHAPTER 3: SETTING UP COMMUNICATION CARDS

4-Port twisted-pair Ethernet switch

The 4-Port Twisted-Pair Ethernet Switch (GE Item No. 520-0213LF) is a 10/100BaseT network switch that plugs into the NET1 slot (slot 11) on the D400. It provides local area network connections for up to five Ethernet connections: four RJ-45 connectors on the rear panel and one RJ-45 connector on the front panel. The connector used is four RJ-45 connectors ganged together. The data rate is automatically detected and set to either 10 Mbps or 100 Mbps. A second Ethernet switch can be installed in the NET2 slot (slot 12). If two Ethernet switches are installed in the NET slots, the D400 may be used in a dual-IP redundancy mode. That is, each switch can be configured with a different IP address to provide a backup network connection if the primary channel fails. Use of this card in slot 12 requires installation of the dual redundant Ethernet CPU option which includes the PC/104-Plus Ethernet Module and cable (GE item 580-3410 & 977-0544). See “Network connections” on page 63 for typical cable connections. If additional ports are required, two Ethernet switches can be connected to each other with an Ethernet cable. This increases the number of available 10/100BaseT ports to 6. TIP

Configuration options There are no selectable options on the 4-Port TP Ethernet card. Figure 24: 4-Port Twisted-Pair Ethernet Switch Card

46 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 3: SETTING UP COMMUNICATION CARDS

10Base-FL hot standby fiber optic Ethernet switch

The Hot Standby Fiber Optic Ethernet Switch (GE Item No. 520-0214LF) is a 10BaseFL (820 to 850 nm) network switch that supports single-IP redundancy for the D400. It provides automated fail over between two Ethernet fiber optic network connections (RX1/TX1 and RX2/TX2) that share a single MAC address. When the primary port (Fiber Optic Channel 1) receives no signal, or detects a fault signal from the remote link partner, the D400 switches to the secondary port (Fiber Optic Channel 2) if it has a valid link. The D400 reverts to the primary port if the primary link is restored or no signal is present on the secondary port. The Hot Standby Fiber Optic Ethernet Switch can be installed in the NET1 or NET2 slot (slots 11 and 12) on the D400. Use of this card in slot 12 requires installation of the dual redundant Ethernet CPU option which includes the PC/104-Plus Ethernet Module and cable (GE item 580-3410 & 977-0544) See “Fiber optic serial connections” on page 60 for typical cable connections.

Configuration options There are no selectable options on the Hot Standby Fiber Optic Ethernet Switch card. Figure 25: Hot Standby Fiber Optic Ethernet Switch Card

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 47 CHAPTER 3: SETTING UP COMMUNICATION CARDS

100Base-FX hot standby fiber optic Ethernet adapter

The 100Base-FX Hot Standby Fiber Optic Ethernet Adapter (GE part number 520-0215LF) is a 100Base-FX (1300 nm) network switch that supports single-IP redundancy for the D400. It provides automated fail over between two Ethernet fiber optic network connections (RX1/TX1 and RX2/TX2) that share a single MAC address. When the primary port (Fiber Optic Channel 1) receives no signal, or detects a fault signal from the remote link partner, the D400 switches to the secondary port (Fiber Optic Channel 2) if it has a valid link. The D400 reverts to the primary port if the primary link is restored or no signal is present on the secondary port. The data rate on each port is 100 Mbps. The Hot Standby Fiber Optic Ethernet Switch can be installed in the NET1 or NET2 slot (slots 11 and 12) on the D400. Use of this card in slot 12 requires installation of the dual redundant Ethernet CPU option which includes the PC/104-Plus Ethernet Module and cable (GE item 580-3410, 977-0549, and 977-0544). See “Fiber optic serial connections” on page 60 for typical cable connections. You must enable Far End Fault Indication (FEFI) or Loss Link Alert (LLA) in connected external devices for proper redundant operation. NOTE External switches must have Spanning Tree Protocol port settings configured to edge for proper operation of 100Base-FX connected ports. NOTE

Configuration options There are no selectable options on the 100Base-FX Hot Standby Fiber Optic Ethernet Adapter card. Figure 26: 100Base-FX Hot Standby Fiber Optic Ethernet Adapter Card

48 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 3: SETTING UP COMMUNICATION CARDS

COM2 port adapter

The COM2 Port Adapter card is being discontinued on December 31, 2016, and can be replaced by the 520-0218 card; see section: “Redundant twisted-pair Ethernet + COM2 port adapter” on page 50.

The COM2 Port Adapter (GE Item No. 520-0219LF) provides a single DB-9 connector (P2) wired for an RS-232 DCE signal. The COM2 Port card can support serial connections for the following dial-up interfaces: •External modem • Point-to-point protocol (PPP) services •Wide area network The COM2 Port Adapter plugs into any NET slot (slots 11 and 12) of the D400. The COM2 Port requires an external modem to provide dial-up functionality.

NOTE See “Modem connections” on page 65 for typical cable connections.

Configuration options There are no selectable options on the COM2 Port card. Figure 27: COM2 Port Adapter

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 49 CHAPTER 3: SETTING UP COMMUNICATION CARDS

Redundant twisted-pair Ethernet + COM2 port adapter

The Redundant TP Ethernet + COM2 Port card (GE Item No. 520-0218LF) provides: • Two local area network connections with unique MAC addresses through Ethernet RJ- 45 connectors. The LAN input routes to a three-port Ethernet switch and the WAN input routes to the PC/104-Plus Ethernet Module. The Ethernet switch can support a dual-redundancy network option on the D400. The data rate on the LAN port is independently detected and set to either 10 Mbps or 100 Mbps. The data rate on the WAN port is set to 100 Mbps. The LAN port can be configured to use network parameters provided by a DHCP server when the Dynamic Address option is selected for the Network Interface (NET1 when this card is installed in slot 11 and NET2 when installed in slot 12). The WAN port does not support the Dynamic Address option and should not be selected for the Network Interface (NET2 when this card is installed in slot 11 and NET3 when installed in slot 12). • An RS-232 DCE connection through a DB-9 connector. The Redundant TP Ethernet + COM2 Port card is normally installed in the NET1 slot (slot 11) on the D400. The Redundant TP Ethernet + COM2 Port card can also be installed in the NET2 slot (slot 12). Use of the Redundant TP Ethernet + COM2 Port card requires the installation of the dual redundant Ethernet D400 CPU option, which includes the PC/104-Plus Ethernet Module NOTE and cables (GE part number 580-3410, 977-0544, and 977-0549). The COM2 Port requires an external modem to provide dial-up functionality.

See “Network connections” on page 63 and “Modem connections” on page 65 for typical cable connections.

50 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 3: SETTING UP COMMUNICATION CARDS

Configuration options There are no selectable options on the Redundant TP Ethernet + COM2 Port card. Figure 28: Redundant TP Ethernet + COM2 Port Adapter Card

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 51 CHAPTER 3: SETTING UP COMMUNICATION CARDS

USB KVM and audio adapter

The USB Keyboard, Video, Mouse Adapter (GE Item No. 520-0206LF) plugs into the USB KVM slot (slot 13) on the D400. The card provides connections for setting up a local workstation, including: The card provides connections for the following external devices: • Three USB v1.1 compliant Type A ports (P3-P5) for keyboard command line interface, mouse or other USB device • Single 3.5 mm audio jack (P2) for stereo audio output • High-density D-sub 15-socket connector (J1) for video output See “Local HMI connection” on page 67 for typical cable connections.

Configuration options There are no selectable options on the USB KVM card. Figure 29: USB KVM Adapter

52 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL D400 Substation Gateway

Chapter 4: Connecting to Devices and Networks

Connecting to Devices and Networks This chapter provides guidelines for making physical connections between the D400 and substation and network devices.

Connection types

The D400 can accommodate a wide range of devices and network connections through a variety of communication card options. For more information about the types of communication cards and configuration options, see Chapter 3, Setting Up Communication Cards.

Serial The D400 can support up to 16 serial connections (up to 8 serial adapter cards with 2 ports each). The D400 can support up to 16 serial connections (up to 8 serial adapter cards with 2 ports each) to a variety of GE and other vendor devices, including: •Protective relays •Meters • Programmable logic controllers (PLCs) • Remote terminal units (RTUs) • Monitoring equipment • Digital fault recorders (DFRs) • Sequence of event (SOE) recorders • Load tap changers (LTCs) The following types of serial connections are supported in single or multi-dropped set ups: • RS-232 • RS-485 (2-wire or 4-wire) • Fiber Optic Serial (glass or plastic) • Glass Optical Fiber Optic

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 53 CHAPTER 4: CONNECTING TO DEVICES AND NETWORKS

Network The D400 can support up to eight network connections to host and network clients, including: • SCADA master station •Substation LAN • Enterprise network (Corporate wide area network). The following networking connections are supported: – Ethernet (Twisted pair or Fiber optic) – COM2 (for dial-up)

Time synchronization

The D400 accepts a time synchronization input (IRIG-B format) from GPS receivers that can be subsequently distributed to connected devices.

Local substation computer A substation computer can be set up with the D400 through the USB KVM connections to access the local HMI. Optionally, a portable PC can be connected to the front Ethernet port to access the HMI.

Local maintenance A local PC can be directly connected to the D400 through the front serial communications port to perform system maintenance using the D400 System Utilities.

54 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 4: CONNECTING TO DEVICES AND NETWORKS

Cabling overview

The D400 provides a series of I/O adapter cards for connecting cables and wiring from substation devices and network interfaces. All physical connections are made to easily accessible connectors on the rear panel of the D400. Figure 30: D400 Field and Network Connections

IRIG-B Distribution Slot Network Slots IRIG-B Input Slot USB KVM Slot Serial Communication Slots External Power Source

Power Supply and System Fail Alarms Slot 1 Slot 2 Slot 3 Slot 4 Slot 5 Slot 6 Slot 7 Slot 8 Slot 9 Slot 10 Slot 11 Slot 12 Slot 13 Slot

The types of communication cards included in your D400 depend on what was ordered for your substation application. For a list and detailed description of the types of communication cards available, see Chapter 3, Setting Up Communication Cards.

General cabling requirements Cabling required to make physical connections to the D400 are as follows:

Media Designation Cabling Connector Fiber Optic Ethernet 10BaseFL 62.5/125 µm or 50/125 µm ST Connectors 100BaseFX multi-mode fiber cable (820 to 850 nm) Twisted Pair Ethernet 10/100BaseT UTP– Unshielded Twisted RJ-45 Pair – CAT 5 or better Redundant Twisted Pair Ethernet 10/100BaseT UTP– Unshielded Twisted RJ-45 Pair – CAT 5 or better PPP Serial Over External Modem RS-232 Standard RS-232 cable DB-9

High-voltage installations To provide higher EMC immunity and maintain CE Mark radiated emission compliance, the serial cables used for permanent RS-232 and RS-485 connections must comply with the following requirements: • Cables must be shielded • D-type connector covers must provide EMC shielding (e.g. metalized plastic or die cast metal covers).

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 55 CHAPTER 4: CONNECTING TO DEVICES AND NETWORKS

RS-232 connections

The D400 accepts connections to RS-232 type devices through the RS-232 Adapter. The RS-232 Adapter (GE Item No. 520-0207LF) is an RS-232 serial I/O adapter card that plugs into any serial communication slot (slots 1 through 8) on the D400. It contains two independently isolated RS-232 serial ports (Port 1 and Port 2) each with a DB-9 connector. The required RS-232 cable is a serial null modem, DB-9F to DB-9M cable. The cables must be shielded and DB-9S connector covers must provide EMC shielding (e.g. metalized plastic or die-cast metal covers). See “RS-232 adapter” on page 35 for configuration options.

To connect RS-232 Use the cable connection shown in Figure 31. type devices to the Figure 31: RS-232 cable connection RS-232 adapter 6 1 1 6

2 2 7 7 3 3 8 8 5 5 Relay 9 5 5 9

Table 13: RS-232 Port DB-9 Connector Signal Definitions

Pin DTE (default) DCE Numbers Signal Acronym Signal Flow Signal Acronym Signal Flow 1 DCD IN from DCE a a 2 RXD IN from DCE RXD OUT to DTE 3 TXD OUT to DCE TXD IN from DTE 4 DTR OUT to DCE DTR IN from DTE 5 Signal GND - Signal GND - 6 DSR IN from DCE DSR OUT to DTE 7 RTS OUT to DCE RTS IN from DTE 8 CTS IN from DCE CTS OUT to DTE 9 Not connected - Not connected -

a DCD output not supported in DCE mode.

RS-485 connections

The D400 accepts connections to RS-485 2-wire and 4-wire type devices through the RS- 485 Adapter. The RS-485 Adapter (GE Item No. 520-0208LF) plugs into any serial communication slot (slots 1 through 8) on the D400. It contains two independently isolated

56 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 4: CONNECTING TO DEVICES AND NETWORKS

RS-485 channels on a single terminal block: Channel 1 on terminals TB1-1 through TB1-5 and Channel 2 on terminals TB1-6 through TB1-10. Terminal blocks accept a range of 24- 14 AWG [0.2-2.1 mm²] Recommended wire strip length is 0.2" [5.0 mm]. Screws shall be torqued with tool setting of 4.2 in-lb [0.46 Nm]. A 3.0 to 3.5 mm flat screwdriver tip is recommended. The transceiver in 2-wire mode and the receiver in 4-wire mode present 1 unit load (UL), nominally 12 KOhm, to the external network with switches SW3/SW4 all off. See “RS-485 adapter” on page 38 for configuration options.

Cabling requirements The recommended total maximum length for RS-485 cables is 4000 ft [1300 m] when operating at 115 kbps. Refer to the manual of the connecting device for its recommended maximum cable length. The cables must be shielded and the shield of each RS-485 cable section should be grounded at one end only. This prevents circulating currents and can reduce surge- induced current on long communication lines. The RS-485 Adapter supports a maximum of 32 transceivers of standard unit load per channel (64 unit loads per RS-485 Adapter card).

2-Wire connections

To connect RS-485 2- Use the following wiring connection: wire type devices to the RS-485 Adapter Before wiring devices, ensure that the RS-485 Adapter is configured to 2-wire mode (see “RS-485 adapter” on page 38). NOTE Figure 32: RS-485 2-wire devices - wiring connection

Relay

+ - GND RS485-

RS485+

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 57 CHAPTER 4: CONNECTING TO DEVICES AND NETWORKS

Table 14: RS-485 2-Wire Terminal Block Signal Definitions

RS-485 Channel Position Number 2-Wire Function Signal Flow Channel 1 1 TX1+ IN/OUT 2 TX1 IN/OUT 3 FGND 1 Shield 4 RX1 - 5 RX1+ - Channel 2 6 TX2+ IN/OUT 7 TX2 IN/OUT 8 FGND 2 Shield 9 RX2 - 10 RX2+ -

The terminal block positions are numbered from 1 to 10 starting from the bottom of the card. NOTE

4-Wire connections See “RS-485 adapter” on page 38 for configuration options.

To connect RS-485 4- Use the following wiring connection: wire type devices to the RS-485 Adapter Before wiring devices, ensure that the RS-485 Adapter is configured to 4-wire mode (see “RS-485 adapter” on page 38). NOTE

58 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 4: CONNECTING TO DEVICES AND NETWORKS

Figure 33: RS-485 4-wire devices - wiring connection

Device 1 Device 2 Device 3 RX+ RX- TX+ TX- GND RX+ RX- TX+ TX- GND RX+ RX- TX+ TX- GND

RX1+ RX1- FGND1 TX1- TX1+

Table 15: RS-485 4-Wire Terminal Block Signal Definitions

RS-485 Channel Position Number 4-Wire (default) Function Signal Flow Channel 1 1 TX1+ OUT 2 TX1 OUT 3 FGND 1 Shield 4 RX1 IN 5 RX1+ IN Channel 2 6 TX2+ OUT 7 TX2 OUT 8 FGND 2 Shield 9 RX2 IN 10 RX2+ IN

The terminal block positions are numbered from 1 to 10 starting from the bottom of the card. NOTE

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 59 CHAPTER 4: CONNECTING TO DEVICES AND NETWORKS

Fiber optic serial connections

For devices located some distance from the D400, they may be connected using glass or plastic optical fiber cables. Fiber optic cabling also offers superior performance in electrically noisy environments.

Glass optical fiber You can use the following glass optical fiber (GOF) cabling with the D400 Glass Optical Fiber Serial adapter: • 50/125 µm core/cladding multi-mode (gradient index) cable • 62.5/125 µm core cladding multi-mode (gradient index) cable • 100/140 µm core/cladding multi-mode (gradient index) cable • 200 m core Hard-Clad Silica (HCS) multi-mode (step index) cable You can use the following fiber optic terminations for D400 cabling: • ST Connectors When calculating cable length, consider the following optical power levels: • Glass optical fiber transmitter power is –19.0 ± 2 dBm • Glass optical fiber receiver sensitivity is typically –31.0 dBm over life of our product. LED transmitters are classified as IEC 60825-1 Accessible Emission Limit (AEL) Class 1M. Class 1M devices are considered eye safe to the unaided eye. Do not view directly with optical instruments.

Figure 34: D400 Glass Optical Fiber Serial adapter

Plastic optical fiber You can use 1 mm plastic optical fiber (POF) cabling with the D400 Plastic Optical Fiber Serial adapter. The recommended termination is the Agilent Versatile Link Simplex Connector. When calculating cable length, consider the following optical power levels: • Plastic optical fiber transmitter power is –9.0 ± 4.5 dBm • Plastic optical fiber receiver sensitivity is typically –39 dBm LED transmitters are classified as IEC 60825-1 Accessible Emission Limit (AEL) Class 1M. Class 1M devices are considered eye safe to the unaided eye. Do not view directly with optical instruments.

60 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 4: CONNECTING TO DEVICES AND NETWORKS

Figure 35: D400 Plastic Optical Fiber Serial adapter

It is possible to saturate the receiver input if the cable used is too short. Inline attenuation may be required. NOTE See “Fiber optic serial adapter” on page 41 for configuration options.

To connect fiber optic Plug fiber optic cables into the corresponding TX and RX connectors. links to the Fiber Optic adapters

IRIG-B connections

The D400 uses a pair of IRIG-B adapter cards, the IRIG-B Input Adapter and the IRIG-B Distribution Adapter, to accept an IRIG-B signal from a GPS receiver then distribute the signal to connected IEDs. See “IRIG-B input adapter” on page 43 and “IRIG-B distribution adapter” on page 45 for more information.

IRIG-B input adapter The IRIG-B Input Adapter (GE Item No. 520-0211LF) plugs into a dedicated IRIG-B slot (slot 9) on the D400. The IRIG-B Input card accepts an IRIG-B signal in one of three input formats through a corresponding connector type: • Modulated IRIG-B through a BNC connector • Pulse width coded IRIG-B (TTL) through a terminal block • Fiber Optic through a Receive (RX) 820-850 nm ST connector Terminal blocks accept a range of 24 to 14 AWG [0.2 to 2.1 mm²] Recommended wire strip length is 0.2" [5.0 mm]. Screws shall be torqued with tool setting of 4.2 in-lb [0.46 Nm]. A 3.0 to 3.5 mm flat screwdriver tip is recommended. You can use the following glass optical fiber (GOF) cabling with the D400 Glass Optical Fiber Serial adapter: • 50/125 µm core/cladding multi-mode (gradient index) cable • 62.5/125 µm core cladding multi-mode (gradient index) cable • 100/140 µm core/cladding multi-mode (gradient index) cable • 200 m core Hard-Clad Silica (HCS) multi-mode (step index) cable You can use the following fiber optic terminations for D400 cabling: • ST Connectors When calculating cable length, consider the following optical power levels: • Glass optical fiber receiver sensitivity is typically –25.4 dBm

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 61 CHAPTER 4: CONNECTING TO DEVICES AND NETWORKS

LED transmitters are classified as IEC 60825-1 Accessible Emission Limit (AEL) Class 1M. Class 1M devices are considered eye safe to the unaided eye. Do not view directly with optical instruments.

Figure 36: IRIG-B Input Adapter

IRIG-B distribution adapter The IRIG-B Distribution Adapter (GE Item No. 520-0212LF) is an optional IRIG-B output card to supply a pulse width coded IRIG-B (TTL) signal passed from the IRIG-B Input card to attached IEDs. The IRIG-B Distribution card provides four channels on a single terminal block. Each channel is capable of supplying a signal to up to four IEDs, for a total of 16 IEDs. The IRIG-B Distribution card plugs into a dedicated IRIG-B slot (slot 10) on the D400. Terminal blocks accept a range of 24 to 14 AWG [0.2 to 2.1 mm²] Recommended wire strip length is 0.2" [5.0 mm]. Screws shall be torqued with tool setting of 4.2 in-lb [0.46 Nm]. A 3.0 to 3.5 mm flat screwdriver tip is recommended. Figure 37: IRIG-B Distribution Adapter

Table 16: IRIG-B Distribution Terminal Block Signal Definitions

Channel Terminal Block Position Function Signal Flow Channel 1 1 IRIG-B TTL OUT 2 GND - 3 FGND - Channel 2 4 IRIG-B TTL OUT 5 GND - Channel 3 6 IRIG-B TTL OUT 7 GND - 8 FGND - Channel 4 9 IRIG-B TTL OUT 10 GND -

The terminal block positions are numbered from 1 to 10 starting from the bottom of the card. NOTE

62 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 4: CONNECTING TO DEVICES AND NETWORKS

Hot standby fiber optic connections

The Hot Standby Fiber Optic Ethernet Switches support single-IP redundancy for the D400. They provide automated fail over between two Ethernet fiber optic network connections (RX1/TX1 and RX2/TX2) that share a single MAC address. The 10-BaseFL switch (GE Item No. 520-0214LF) operates at 820-850 nm and the 100BaseFX switch (GE Item No. 520- 0215LF) operates at 1300 nm. Hot Standby Fiber Optic Ethernet Switches can be installed in the NET1 or NET2 slot (slots 11 and 12) on the D400. If two Hot Standby Ethernet switches are installed in the NET slots, the system may be used in a dual-IP redundancy mode. That is, each switch can be configured with a different IP address to provide a back up network connection if the primary channel fails. You can use the following glass optical fiber (GOF) cabling with the D400 Hot Standby Fiber Optic Ethernet Switches: • 50/125 µm core/cladding multi-mode (gradient index) cable • 62.5/125 µm core cladding multi-mode (gradient index) cable • 100/140 µm core/cladding multi-mode (gradient index) cable • 200 µm core Hard-Clad Silica (HCS) multi-mode (step index) cable You can use the following fiber optic terminations for D400 cabling: • ST Connectors When calculating cable length, consider the following optical power levels: • 100BaseFX optical transmitter power is –15.0 ± 4 dBm • 100BaseFX optical fiber receiver sensitivity is typically –34.0 dBm • 10BaseFL optical transmitter power is –19.0 ± 2 dBm • 10BaseFL optical fiber receiver sensitivity is typically –31.0 dBm LED transmitters are classified as IEC 60825-1 Accessible Emission Limit (AEL) Class 1M. Class 1M devices are considered eye safe to the unaided eye. Do not view directly with optical instruments.

Table 17: Fiber Optic Connector Signal Definitions

Connector Function TX1 Primary Fiber Optic Transmit Port RX1 Primary Fiber Optic Receive Port TX2 Hot Standby Secondary Fiber Optic Transmit Port RX2 Hot Standby Secondary Fiber Optic Receive Port

See “10Base-FL hot standby fiber optic Ethernet switch” on page 47 or “100Base-FX hot standby fiber optic Ethernet adapter” on page 48 for more information.

Network connections

The D400 supports a network interface through Ethernet connections to the 4-Port Twisted-Pair Ethernet Switch or Redundant Twisted-Pair Ethernet + COM2 Port Adapter. Within the operating system of the D400, the card in slot 11 is assigned to Ethernet interface eth0 and the card in slot 12 is assigned to Ethernet interface eth1.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 63 CHAPTER 4: CONNECTING TO DEVICES AND NETWORKS

All RJ-45 connectors have the same signal definition. However, the rear Ethernet ports are auto MDI/MDIX and can support a straight-through or crossover cable. See “4-Port twisted-pair Ethernet switch” on page 46 and “Redundant twisted-pair Ethernet + COM2 port adapter” on page 50 for more information.

To connect the D400 Plug network cables into the D400 Ethernet ports. to network devices Figure 38: D400 Ethernet ports

If the D400 is deployed in the presence of strong RF energy in the 110 MHz to 125 MHz band, such as airport Instrument Landing System (ILS) localizers or aviation radio NOTE transmitters, it is recommended that shielded twisted-pair Ethernet cables be used.

Front network port To access the D400 HMI, a local or portable PC can be directly connected to the network port located on the front panel of the D400. The front network port is tied to the network interface card in the NET1 slot (slot 11) (eth0 for configuration purposes in a single Ethernet configuration or eth1 for dual Ethernet configuration).

To connect a local PC Connect the supplied straight-through Ethernet cable (GE Item No. 977-0209LF) to your to the D400 computer’s network communications port and to the D400's front Ethernet port. Older computers without auto MDIX Ethernet capability may require an Ethernet cross-over cable. Figure 39: Front network port

If your portable PC contains an older Ethernet chip and you are having difficulty connecting, try forcing the connection speed to 10 Mbps, full duplex, on your PC. TIP The network interface must be configured before the network ports can be used. See “Task 4: Set up the network interface” on page 92 for more information. NOTE

64 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 4: CONNECTING TO DEVICES AND NETWORKS

Table 18: Ethernet RJ-45 Connector Signal Definitions

Position Function Signal Flow Color 1 RX+ IN White w/ Orange 2 RX IN Orange 3 TX+ OUT White w/ Green 4 P1+ - Blue 5 P1 - White w/ Blue 6 TX OUT Green 7 P2+ - White w/ Brown 8 P2 - Brown Shield - -

Table 19: Ethernet Crossover Cable (RJ-45) Pin Out

D400 Switch/Hub Name Pin Pin Name TX_D1+ 1 3 RX_D2+ TX_D1 2 6 RX_D2 RX_D2+ 3 1 TX_D1+ RX_D2 4 2 TX_D1 BI_D3+ 5 7 BI_D4+ BI_D3 6 8 BI_D4 BI_D4+ 7 4 BI_D3+ BI_D4 8 5 BI_D3

Table 20: Ethernet Straight-Through Cable (RJ-45) Pin Out

D400 PC Name Pin Pin Name TX_D1+ 1 1 RX_D2+ TX_D1 2 2 RX_D2 RX_D2+ 3 3 TX_D1+ RX_D2 4 4 TX_D1 BI_D3+ 5 5 BI_D4+ BI_D3 6 6 BI_D4 BI_D4+ 7 7 BI_D3+ BI_D4 8 8 BI_D3

Modem connections

A COM2 port is provided on the COM2 Port Adapter or the Redundant TP Ethernet + COM2 Port Adapter. The COM2 port can support serial connections for the following dial-up interfaces: •External modem • Point-to-point protocol (PPP) services •Wide area network

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 65 CHAPTER 4: CONNECTING TO DEVICES AND NETWORKS

The COM2 port provides a single DB-9 connector wired for an RS-574 DTE signal. The COM2 Port Adapter plugs into any NET slot (slots 11 and 12) of the D400. The Redundant TP Ethernet + COM2 Port Adapter plugs into the NET1 slot (slot 11). The COM2 Port requires an external modem to provide dial-up functionality.

NOTE See “COM2 port adapter” on page 49 for more information.

To connect a modem Connect a straight-through modem cable (not supplied with the D400) to the modem and to the COM2 Port the D400 COM2 port. Connect using the settings provided below. Adapter Modem Settings: • Baud rate: 38400 bps • Data bits: 8 • Parity: Disabled • Stop bit: 1 Figure 40: Modem to COM2 port 2 adapter

1 14

2 3 6 1 4 5 6 7 20 Modem

9 5 22

13 25

Table 21: COM2 Port DB-9 Connector Signal Definitions

Pin Number DTE Signal Acronym Signal Flow 1 DCD IN from DCE 2 RXD IN from DCE 3 TXD OUT to DCE 4 DTR OUT to DCE 5 Signal GND - 6 DSR IN from DCE 7 RTS OUT to DCE 8 CTS IN from DCE 9 Not connected -

Table 22: COM2 Port DB-9 to DB-25 Pin Out

Signal Acronym DB-9 Pin # DB-25 Pin # TD 2 3 RD 3 2

66 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 4: CONNECTING TO DEVICES AND NETWORKS

Signal Acronym DB-9 Pin # DB-25 Pin # RTS 4 20 CTS 5 7 DSR 6 6 DCD 7 4 DTR 8 5 GND 9 22

Local HMI connection

A permanent local workstation can be set up with the D400 to access the D400 Local HMI (human machine interface). The computer peripherals connect to the USB KVM Adapter located on the rear panel of the D400. The D400 supports the following peripheral connections: • Three USB v1.1 compliant Type A ports for USB keyboard, mouse, touchscreen, or other USB device • Single 3.5 mm audio jack for stereo audio output to speakers • High-density D-sub 15-socket connector for video display

To connect a local substation computer to the KVM Adapter Ensure the D400 is powered down before connecting devices to the USB KVM card.

NOTE 1. Connect the SVGA monitor to the video port. 2. Connect the keyboard and mouse to the USB ports. 3. Connect speakers (if available) to the audio jack. You can also connect a USB touchscreen, keyboard, and mouse to the front USB ports.

TIP

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 67 CHAPTER 4: CONNECTING TO DEVICES AND NETWORKS

Figure 41: USB KVM adapter

The local HMI connection through the USB KVM card supports two simultaneous terminal sessions: • tty1 is for the HMI session • tty2 is for the D400 command line interface The local HMI connection defaults to the HMI session (tty1) when you log in. To switch the terminal session at the D400#>> command prompt: • To the command line interface (tty2) at the D400#>> command prompt, press Ctrl- Alt-F2. • Back to the HMI session, press Ctrl-Alt-F1. For information on accessing the D400 command line interface, see the Setting Up a Terminal Session topic in the D400 online help.

Front maintenance port

The serial communications port on the front panel of the D400 provides a local connection with the D400 to perform the initial setup of the D400 and to carry out maintenance and diagnostic procedures. The front maintenance port provides for a direct serial connection to a PC using a serial null modem cable (GE Item No. 977-0529), which is supplied with the D400. See “Start the D400” on page 89 for more information on setting up communications with the D400.

To connect your Connect the supplied serial null modem cable (GE Item No. 977-0529) to your computer’s computer to the D400 serial communications port and to the D400's front serial communications port.

68 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 4: CONNECTING TO DEVICES AND NETWORKS

Figure 42: Front serial port

Minimal required connection The minimal cable connection required to establish successful communication between your PC and the D400 is as follows:

PC Pin # 9-Pin Female D400 Pin # 9-Pin Female (w/o Converter) Signal Acronym 2 3 TXD 3 2 RXD 5 5 GND

D400 connection to DNP3 I/O modules

To configure a D400 to operate with a DNP3 I/O module. 1. Log in to the D400. Result: The D400 HMI appears.  Refer to the D400 online help for detailed information on the D400 HMI. 2. Create the Device Type: 2.1. Click the Configuration powerbar button. 2.2. Click Client Map. 2.3. Click New to create a new device map file. Result: The Map File window appears. 2.4. Select DNP and click OK. 2.5. In the left-hand pane, configure the device point settings. 2.6. In the right-hand pane, configure the device polling parameters. 2.7. Click Save. 3. Configure the DNP3 serial port parameters: 3.1. Click Connections. 3.2. Click Add Connection. Result: The New Connection window appears. 3.3. Select Serial Connection and select DNP Multidrop on the Serial Configuration Type drop-down list. 3.4. Configure the connection as required. For Map File, select the client map file you created in Step 2. 3.5. Click Save Configuration. Refer to Appendix B for DNP3 I/O module installation instructions.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 69 CHAPTER 4: CONNECTING TO DEVICES AND NETWORKS

D400 system redundancy

A redundant D400 setup allows a secondary D400 to automatically take over operations from a paired D400 unit that has failed. D400 equipment redundancy requires two D400 units and zero, one, or two RS232 switch panels. The RS-232 switch panel is optional for Warm and Hot Standby redundancy.

NOTE A pair of LEDs marked CCU A and CCU B indicate which of the D400 units is currently active. If the hardware or software of the active unit fails, it is automatically switched offline and serial connections to the field are transferred to the standby unit. A toggle switch on the RS232 switch panel can be used to switch the D400 devices between active and standby modes.

Failover sequence If the active D400 unit fails, the following actions occur: 1. The standby D400 unit detects the failure through the lack of a heartbeat signal on the ping cable or through a status change on the watchdog cable. 2. The standby D400 unit attempts to pull the RS232 switch panel to assume the active state. 3. The RS232 switch panel transfers all serial field connections to the standby D400, which then becomes the active D400.

Required components To implement a redundant D400 system, you need the following components:

Component Function GE part number RS232 Switch Panel Communications switch. 517-0247 Power Supply Power supply to power the RS232 switch panel. 580-0046 Input: 85 – 264 VAC or 90 – 350 VDC. Watchdog Cable Connects D400 A to the RS232 switch panel. 977-0540 Assembly Connects D400 B to the RS232 switch panel. 977-0541 Ping Cable Assembly Links both D400 units to facilitate a heartbeat message 977-0146 that determines the status of the active unit. RS232 Serial Cable Connects the D400 to the RS232 switch panel which is 977-0145 then connected to external field devices. Power/SysFail Cable Connects the RS232 switch panel to an external power 970-0161 supply and to the D400 SysFail terminal block. Ground Cable Provides a ground connection for the RS232 switch panel. 970-0182 : The serial ports on your D400 are galvanically isolated from each other, however, when the RS232 switch panel is used, the serial common of all ports are tied together. NOTE Pins 4 on switch panel connectors J2 through J9 are tied together and to the panel’s power supply. Any loading from field devices on these pins, loads the RS232 panel power supply NOTE and should be taken into consideration when sizing power supplies.

70 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 4: CONNECTING TO DEVICES AND NETWORKS

The D400 RS232 adapter card that contains the redundancy control port must use the DTE (default) switch positions. Refer to “Switch SW1/SW2 configuration” on page 36 and “Switch NOTE SW3/SW4 configuration” on page 37. This card must also be 520-0207 revision 08A or higher or any revision of 520-0207LF (the revision number is shown on a white label affixed to the top or bottom of the RS232 adapter card). If your card is 07C or below, it is at least 10 years old and a newer card would need to be acquired.

To set up a redundant It is recommended that you install and configure one standalone D400 unit to ensure that system: your configuration is valid and that device communications are operating properly. Once this is done, proceed with the installation of the redundant system. 1. Mount the D400 units in a rack and connect power and ground. Refer to “Power connections” on page 82. 2. Mount the RS232 switch panel. 3. Plug the connector of watchdog cable A (GE part number 977-0540) to a serial connector on the first D400 (CCU A). 4. Plug the connector of watchdog cable B (GE part number 977-0541) to a serial connector on the second D400 (CCU B). This cable must be connected to the same serial port number on both units. 5. Connect the bare leads of both watchdog cables to TB1 on the RS232 switch panel and the DB9 serial connector to either P1 or P9 as shown below. 6. Remove jumper Z1 from the RS232 switch panel. 7. Connect one end of the ping cable to the first D400 and the other end to the second D400. This ping cable must be connected to the same serial port number on both units. 8. Use standard RS232 cables (GE part number 977-0145) to connect the D400 serial communication ports to the serial ports on the RS232 switch panel. P2 through P8 are connected to the first D400, P10 through P16 are connected to the second D400. Connections from the switch panel to both D400 units should be made in the same order. For example, if P2 is connected to port 3 on the first D400, P10 should also be connected to port 3 on the second D400. 9. Connect field devices to J2 through J8 on the RS232 switch panel. 10. Configure the software. See section: “D400 system redundancy” on page 70.

To set up a redundant In cases where more than 7 serial connection ports are required, a second RS232 panel system with two can be added to the redundancy setup. RS232 switch panels: 1. Mount the D400 units in a rack and connect power and ground. See section “Power connections” on page 82. 2. Mount the two RS232 switch panels. 3. Plug the connector of watchdog cable A (GE part number 977-0540) to a serial connector on the first D400 (CCU A). 4. Plug the connector of watchdog cable B (GE part number 977-0541) to a serial connector on the second D400 (CCU B). This cable must be connected to the same serial port number on both units. 5. Connect the bare leads of both watchdog cables to TB1 on the master RS232 switch panel as shown below. 6. Connect TB4 pins 1 (SET) and 2 (RESET) on the master RS232 switch panel to TB2 pins 1 and 2 on the slave RS232 switch panel using the cable specified (GE part number 970- 0161) or similar. 7. Remove jumpers Z1 and Z2 from the slave RS232 switch panel.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 71 CHAPTER 4: CONNECTING TO DEVICES AND NETWORKS

8. Connect one end of the ping cable to the first D400 and the other end to the second D400. This ping cable must be connected to the same serial port number on both units. 9. Use standard RS232 cables (GE part number 977-0145) to connect the D400 serial communication ports to the serial ports on the RS232 switch panels. P2 through P8 are connected to the first D400, P10 through P16 are connected to the second D400. Connections from the switch panel to both D400 units should be made in the same order. For example, if P2 is connected to port 3 on the first D400, P10 should also be connected to port 3 on the second D400. 10. Connect field devices to J2 through J8 on the first RS232 switch panel and to J1 through J8 on the second panel. 11. Configure the software. See section: “D400 system redundancy” on page 70.

RS232 switch panel The RS232 switch panel has two sets of indicator LEDS: • PWR A/PWR B: When lit, power and communications are received from the connected units. Normally, both LEDs are lit. • CCU A/CCU B: Normally, one LED is lit, indicating which unit is active. The active/standby switch on the front of the RS232 switch panel is used to: • Restore a previously failed unit to active status once it has been repaired. • Manually force a unit to active status so that routine maintenance can be performed on the other unit.

To manually operate 1. Pull the active/standby switch straight out to release it from the locked position the RS232 switch 2. Switch it up to make unit A active or down to make unit B active panel: The CCU A/CCU B LED indicator indicates which unit has been activated.

Redundancy wiring diagrams The following diagrams illustrate how to wire the D400 units and RS232 switch panels to enable system redundancy: • Redundancy Wiring - Single RS232 Switch Panel See “Redundancy Wiring - Single RS232 Switch Panel” on page 74. • Redundancy Wiring - Dual RS232 Switch Panel. The wiring drawing is provided in two parts: left and right. – For the left side of the drawing, see “Redundancy Wiring - Dual RS232 Switch Panel (1 of 2)” on page 75 – For the right side of the drawing, see “Redundancy Wiring - Dual RS232 Switch Panel (2 of 2)” on page 76 This configuration is used to provide up to 15 serial connections to the redundant D400 units. • Redundancy Wiring - Redundant RS232 Switch Panel. The wiring drawing is provided in two parts: left and right. – For the left side of the drawing, see “Redundancy Wiring - Redundant RS232 Switch Panel (1 of 2)” on page 77 – For the left side of the drawing, see “Redundancy Wiring - Redundant RS232 Switch Panel (2 of 2)” on page 78 This configuration is used to provide RS232 panel redundancy for up to 7 serial connections.

72 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 4: CONNECTING TO DEVICES AND NETWORKS

When connecting to more than 7 field devices, you must double the number of RS232 switch panels used. When using this configuration, follow the instructions in “To set up a NOTE redundant system with two RS232 switch panels:” on page 71.

The D400 watchdog (control) port, heartbeat (ping) port, and serial port assignments are software configurable. Refer to section: “D400 system redundancy” on page 70. NOTE

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 73 CHAPTER 4: CONNECTING TO DEVICES AND NETWORKS

Figure 43: Redundancy Wiring - Single RS232 Switch Panel 7R'$ 7R'% 3LQJ3RUW 3LQJ3RUW &RQWURO3RUW &RQWURO3RUW &DEOHDVVHPEO\ 7R'% 7R'$ SDUWQXPEHU 56 56  6\V)DLO 7% 6\V)DLO 7% WR9$&RUWR9'& WR9$&RUWR9'& 7R'% *(SDUWQXPEHU *(SDUWQXPEHU 3RZHU6XSSO\$ 3RZHU6XSSO\% WR9'&: WR9'&: 7R'$ 2SWLRQDO &DEOHSDUWQXPEHU &DEOHDVVHPEO\SDUWQXPEHU &DEOHSDUWQXPEHU &DEOHSDUWQXPEHU &DEOHDVVHPEO\SDUWQXPEHU

*1' 1RWXVHG 7% 1RWXVHG  6HW 7% 

6HW  5HVHW  5HVHW  &RP%  &RP$ = 7% = 5HPRYHMXPSHU 1RWXVHG 3 3 - 6HULDO3RUW 7R'$ 6HULDO3RUW 'HYLFH 3 3 - 6HULDO3RUW 7R'% 6HULDO3RUW 7R'$ 6HULDO3RUW 'HYLFH 3 3 - 6HULDO3RUW 7R'%  SDUWQXPEHU &DEOHDVVHPEO\

74 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 4: CONNECTING TO DEVICES AND NETWORKS

Figure 44: Redundancy Wiring - Dual RS232 Switch Panel (1 of 2) &RQWURO3RUW &RQWURO3RUW 7R'$ 7R'% 3LQJ3RUW 3LQJ3RUW 7R'$ 7R'% 56 56 &DEOHDVVHPEO\ SDUWQXPEHU  6\V)DLO 7% 6\V)DLO 7% WR9$&RUWR9'& WR9$&RUWR9'& 7R'% *(SDUWQXPEHU *(SDUWQXPEHU 3RZHU6XSSO\$ 3RZHU6XSSO\% 7R'$ WR9'&: ²9'&: 2SWLRQDO &DEOHSDUWQXPEHU &DEOHSDUWQXPEHU &DEOHSDUWQXPEHU &DEOHDVVHPEO\SDUWQXPEHU &DEOHDVVHPEO\SDUWQXPEHU

*1' 1RWXVHG 7% 7%  6HW 7%  

1A = 6HW 5HVHW 

2A 5HVHW  &RP%  &RP$ 7% = 1RWXVHG 3 3 - 6HULDO3RUW 7R'$ 6HULDO3RUW 'HYLFH 3 3 - 6HULDO3RUW 7R'% 6HULDO3RUW 7R'$ 6HULDO3RUW 'HYLFH 3 3 - 6HULDO3RUW 7R'%  SDUWQXPEHU &DEOHDVVHPEO\

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 75 CHAPTER 4: CONNECTING TO DEVICES AND NETWORKS

Figure 45: Redundancy Wiring - Dual RS232 Switch Panel (2 of 2) WR9$&RUWR9'& WR9$&RUWR9'& *(SDUWQXPEHU *(SDUWQXPEHU 3RZHU6XSSO\% 3RZHU6XSSO\$ WR9'&: WR9'&: 2SWLRQDO &DEOHSDUWQXPEHU  &DEOHSDUWQXPEHU *UHHQ

*1' 7%  7% 6HW 1A  6HW 5HVHW  2A  5HVHW  &RP% 7%  = &RP$ QXPEHU &DEOHSDUW 7% = 5HPRYHMXPSHUV 6HULDO3RUW 7R'$ 6HULDO3RUW 'HYLFH 6HULDO3RUW 7R'% 3 3 - 6HULDO3RUW 7R'$ 6HULDO3RUW 'HYLFH 3 6HULDO3RUW 7R'% 3 - 6HULDO3RUW 7R'$ 6HULDO3RUW 'HYLFH 3 6HULDO3RUW 7R'% 3 -  SDUWQXPEHU &DEOHDVVHPEO\

76 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 4: CONNECTING TO DEVICES AND NETWORKS

Figure 46: Redundancy Wiring - Redundant RS232 Switch Panel (1 of 2) &RQWURO3RUW 6\V)DLO 7% 7R'$ WR9$&RUWR9'& 56 *(SDUWQXPEHU 7R'$ 3RZHU6XSSO\$ WR9'&:

1B &DEOHSDUWQXPEHU &DEOHSDUWQXPEHU 2B  &DEOHDVVHPEO\SDUWQXPEHU &DEOHSDUWQR*UHHQ

*1' 1RWXVHG 7% 7%  6HW 7% 3B  6HW 

= 5HVHW 4B  5HVHW  &RP%  &RP$ 7% QXPEHU &DEOHSDUW = 1RWXVHG 3 3 - 6HULDO3RUW 7R'$ 3ULPDU\6HULDO 'HYLFH 3RUW 3 - 3 3ULPDU\6HULDO 6HULDO3RUW 7R'$ 'HYLFH 3RUW 3 - 3  SDUWQXPEHU &DEOHDVVHPEO\

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 77 CHAPTER 4: CONNECTING TO DEVICES AND NETWORKS

Figure 47: Redundancy Wiring - Redundant RS232 Switch Panel (2 of 2) &RQWURO3RUW 7R'$ 7R'% 6\V)DLO 7% 7R'% 3LQJ3RUW 3LQJ3RUW WR9$&RUWR9'& 56 *(SDUWQXPEHU 7R'% 3RZHU6XSSO\% WR9'&: SDUWQXPEHU &DEOHDVVHPEO\ &DEOHSDUWQXPEHU

1B &DEOHSDUWQXPEHU 2B &DEOHDVVHPEO\SDUWQXPEHU  &DEOHSDUWQXPEHU

*1' 7%  7% 3B

7% 6HW 

6HW  5HVHW 4B 

5HVHW  &RP% 

= &RP$ 7%  &DEOHSDUWQXPEHU = 5HPRYHMXPSHUV 1RWXVHG 3 3 - 6HFRQGDU\ 6HULDO3RUW 'HYLFH 6HULDO3RUW 7R'% 3 3 -

&DEOHDVVHPEO\SDUW QXPEHU 6HULDO3RUW 7R'% 6HFRQGDU\ 6HULDO3RUW 'HYLFH 3 3 - &DEOHDVVHPEO\SDUW QXPEHU

78 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 4: CONNECTING TO DEVICES AND NETWORKS

Troubleshooting D400 Redundancy

D400 redundancy works very well when it is set up properly, but can be difficult to troubleshoot issues. Examining the Diagnostic Log, Diagnostic Log R5 and System Event Log can be helpful in diagnosing the issue. Please check the following points for possible solutions to issues that may be experienced: 1. D400 cannot pull the switch towards itself Solution: Re-check the wiring. Ensure that the cable between the RS232 Switch Panel and D400 units are the proper cables (977-0540 to D400 A and 977-0541 to D400 B) and are connected correctly. Solution: Double check that Z1 in the proper position: eg: Removed for a single switch panel setup. 2. The switch panel appears to frozen: When the switch on the RS232 switch panel is used to change the active D400, nothing happens (no LEDs change, etc). Solution: Verify the +12VDC power to the RS232 switch panel. A minimum of 10V is required to operate the switch panel. If the power dips below, the switch panel could stop working. 3. Moving the switch on the RS232 switch panel causes the CCUA-CCUB LEDs on the switch panel to change positions but does not trigger a switchover. Solution: Usually this indicates that the switch panel is set up in Slave mode in d400cfg. 4. The “Standby Config Out of Sync” digital input point is ON when CCUA is active but is not when CCUB is active. Solution: This indicates that the configuration of CCUA contains more information than the configuration for CCUB. To resolve this, either: A) Do a Sync From on CCUA and then a Sync To onto CCUB, or B) Use the pseudo point to Sync the configuration from A to B, switch over to B, and then sync the configuration from B to A. 5. The “Code Out of Sync” digital input point is offline. Solution: This usually indicates that the Redundancy Keys are not properly synced between the two D400 units. 6. Diagnostic Log R5 contains an error similar to “RM00000,B034 : L : ERROR 0 : Active: Standby Sync command ….. rsync …. SSHKeys/id_rsa …. failed with error code = 12” Solution: This indicates that the Redundancy Keys are not synced between the D400 units. Re-sync the keys to resolve this issue. 7. Diagnostic Log contains a warning similar to “RM00000,B034 : L : WARN 0 : [ACTIVE]: Switch pulled away: Rejecting CHANGE OVER since Other D400 is in Service/Failed Mode ,” Solution: This is normal if the other D400 is in failed mode. Examine the logs to determine why the other D400 is in failed mode. 8. Diagnostic Log contains messages similar to: RM00000,B034 : L : INFO 0 : Timeout During Initial Send Recv HB Msg , RM00000,B034 : L : INFO 0 : Pulling switch towards this D400, RM00000,B034 : L : WARN 0 : D400 failed to pull switch towards itself, RM00000,B034 : L : WARN 0 : Communication failed with peer D400: failing this D400, Analysis: This indicates that the ping cable or heartbeat mechanism between the D400 units is not working. The Standby D400 attempted to communicate with the Active and was not able to. As such, it assumed that the D400 unit was not

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 79 CHAPTER 4: CONNECTING TO DEVICES AND NETWORKS

functioning and attempted to become active by pulling the switch on the RS232 switch panel towards itself. This operation failed, which usually indicates that the other D400 was actually Active. To prevent both D400 units being active at the same time, this D400 then failed itself to indicate that something had gone wrong and needs to be investigated and resolved.

80 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL D400 Substation Gateway

Chapter 5: Powering Up the D400

Powering Up the D400 This chapter describes the power supplies and how to make power connections.

Power supply options

The D400 supports one or two power supplies that provide 5 V to the D400 main module. The following power supplies may be provided in the Power Supply slots: • AC-DC power supply (GE Item No. 520-0217) • DC-DC power converter (GE Item No. 520-0216) For information on installing power supplies, See “Replacing the power supply” on page 152. Figure 48: Power supply module

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 81 CHAPTER 5: POWERING UP THE D400

Redundant power supply The D400 may be provided with an optional redundant power supply unit in Power Supply Slot 2. The second power supply provides continuous power to the D400 in the event the primary power supply unit fails. Additional protection can be provided if a secondary external power source is available. In the event the primary power source fails, an automatic switchover takes place to the redundant power source to ensure continuous power to the D400.

Power configurations The D400 supports the following power configurations: • Single External AC Power Source • Single External DC Power Source • Two External AC Power Sources with optional redundant D400 AC-DC Power Supplies • Two External DC Power Sources with optional redundant D400 DC-DC Power Converters

Power input ranges Table 23: AC-DC Power Supply Rated voltage range 100 to 240 VAC / 100 to 300 VDC with overvoltage protection of 110% to 150% Rated power If the unit is… Then the rated power is… AC 127 VA maximum DC 135 W maximum

Inrush current at 26.5 Apeak (< 145 VAC/205 VDC) 25°C on cold start 40 Apeak (< 264 VAC/370 VDC) Rated frequency 47 to 63 Hz (50/60 Hz)

Table 24: DC-DC Power Supply Rated voltage range 20 to 55 VDC with over voltage protection of 110% to 150% Rated power 135 W maximum

Inrush current at 25 °C 35 Apeak (< 60 VDC) Applying AC voltages to a DC-DC power supply may cause irreparable damage.

Power connections

The D400 accepts power connections through two terminal blocks on the rear panel: •Terminal block TB1 is reserved for connecting power from one or two external sources to the D400. •Terminal block TB2 provides contact closure outputs for power supply fail and system fail alarms.

82 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 5: POWERING UP THE D400

Figure 49: Power supply rear panel

Protective Earth Terminal

Power Supply Connections

Power Supply Alarms

The label on the power supply unit lists all possible power sources. Use only the source that conforms to the specifications of the installed power supply type.

Wiring requirements The supply wiring for the D400 must be a minimum of 18 AWG [0.82 mm²], 3-conductor cable with an external insulation jacket, and a minimum certified voltage rating of 600 V. Consult local and national electrical wiring codes. The protective conductor must be minimum 16 AWG [1.3 mm²] wire with (green-&-yellow) insulation. Recommended conductor size is 12 AWG [3.3 mm²]. The wires must be terminated with an insulated #6 Forked Terminal. The clear plastic protective barrier provided with the terminal strip connector must be in place once wiring of the mains is completed.

External power requirements Before connecting an external power source to the D400, ensure that the following external power requirements are met: • An IEC 61010 qualified primary disconnect device and over current protection not exceeding 15 A must be externally provided in the AC/DC mains supply system. • All current carrying conductors must be switched, including neutral (for AC) and negative (for DC). • Primary disconnect device must be rated for the proper voltages (AC and/or DC), as well as inrush currents for the power supplies. See “Power supply options” on page 81 • Protective earth conductor must be connected to the provided protective earth terminal before any mains power conductors. • The primary disconnect device shall be in close proximity to the D400 equipment and easily accessed by the operator. • The primary disconnect device shall be marked as the disconnecting device for the D400 equipment.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 83 CHAPTER 5: POWERING UP THE D400

To connect the power 1. Remove the terminal block TB1 protective plastic cover. source to the D400 2. Connect power source as follows:

If your power supply is… then… AC Connect the AC line connection to the L connection point(s) and the AC neutral connection to the N connection point(s) on terminal block TB1 DC Connect the DC power supply, observing the correct polarity, to the +VDC and VDC connection point(s) on terminal block TB1

For proper connection, the recommended tool torque settings for power terminal screws are 10.8 in-lb [1.22 Nm]. A Phillips (#1) screwdriver tip is recommended. See the wiring diagrams in Table 25. Table 25: Power Source Configurations Power Source Connection Wiring Diagram Single External AC Connected to SUPPLY1 Power Source and SUPPLY2 input Supply 1 Supply 2 terminals.

L N AC Power Source GND

Single External DC Connected to SUPPLY1 Power Source and SUPPLY2 input Supply 1 Supply 2 terminals.

+ DC Power Source -

Two External AC First source connected Power Sources to SUPPLY1 terminals. Supply 1 Supply 2 with Optional Second source Redundant D400 connected to SUPPLY2 AC/DC Power terminals. Supply

L N AC Power Source #1 GND

GND L AC Power Source #2 N

84 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 5: POWERING UP THE D400

Power Source Connection Wiring Diagram Two External DC First source connected Power Sources to SUPPLY1 terminals. Supply 1 Supply 2 with Optional Second source Redundant D400 connected to SUPPLY2 DC Power terminals. Converter

+ DC Power Source #1 -

+ DC Power Source #2 -

3. Connect protective earth wire to the Protective Earth terminal on the rear panel. The terminal is an M5 threaded stud with M5 nut and washers. The recommended order for stacking the washers on the chassis is: flat washer, ground wire ring terminal, toothed washer, M5 nut. For proper transient protection, the recommended tool torque settings for the M5 nut is 18.1 in-lb [2.04 Nm]. It is recommended to terminate 12 AWG green & yellow wire with a Panduit PV10-14R or equivalent ring terminal. NOTE 4. Verify that Power LEDs on the front panel of the power supplies and the D400 main module are lit. 5. Replace the terminal block protective plastic cover.

Power supply alarms

The D400 includes connections for two alarm outputs: • Power Fail to indicate one of the two power supplies or one of the two power feeds has failed • System Fail to indicate system operation status Terminal block TB2 on the rear panel of the D400 provides contact closure outputs for connection to an external circuit, for example, to connect an external LED indicator or audible alarm. The contact closure used for alarm outputs is a solid-state photo-MOS device. Contact closure output ratings at maximum ambient temperature are: • Continuous current: 0.1 A continuous at 300 VAC / 300 VDC • Peak current: 0.28 A peak for 10 ms • Maximum on resistance: 35 ohm

• Dielectric isolation: 2 kVRMS

Power fail alarm The Power Fail contact closure provides for an external indication upon loss of power. The Power Fail alarm is also indicated by the Power LED on the front panel of the power supply turning off. The front panel Power indicator LED is lit when any one power supply is ON, but does not indicate that any one power supply has failed.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 85 CHAPTER 5: POWERING UP THE D400

The back panel contact closure indicator or audible alarm can be wired to operate as follows: • Lit when a power failure has occurred • Lit when power is present The Power Fail contact closure provides three contacts (terminals 1, 2 and 3) on terminal block TB2. Contact closure rated for 0.1 A @ 300 V maximum.

To connect the Power 1. Remove the terminal block protective plastic cover. Fail contact closure 2. Wire a lamp or audible alarm to terminals 1, 2 or 3 on terminal block TB2 as follows (see figure):

To enable the indicator when power is… Wire the lamp between… Absent Terminals 1 and 2 Present Terminals 2 and 3

For proper connection, the recommended tool torque settings for power terminal screws are 10.8 in-lb [1.22 Nm]. A Phillips (#1) screwdriver tip is recommended. 3. Replace the terminal block protective plastic cover. Figure 50: Power Fail Alarm Connection

TB2 Power System Fail Fail

Station Battery / Power Source

Light ON Light ON after failure when operational

System fail alarm The D400 includes a System Fail contact closure to provide an external indication of system status. The System Fail alarm is also indicated by the CPU Ready LED on the front panel of the main module turning off. The indicator or audible alarm can be wired to operate as follows: • ON when system failure has occurred • ON when system is functioning properly

86 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 5: POWERING UP THE D400

The System Fail contact closure provides three contacts (terminals 4, 5 and 6) on terminal block TB2. Contact closure rated for 0.1 A @ 300 V maximum.

To connect the 1. Remove the terminal block protective plastic cover. System Fail relay 2. Wire a lamp to terminals 4, 5 and 6 on terminal block TB2 as follows:

To enable the indicator when system is… Wire the lamp between… Failed Terminals 4 and 5 Functioning properly Terminals 5 and 6

For proper connection, the recommended tool torque settings for power terminal screws are 10.8 in-lb [1.22 Nm]. 3. Replace the terminal block protective plastic cover. Figure 51: System Fail Alarm Connection

TB2 Power System Fail Fail

Station Battery / Power Source

Light ON Light ON after failure when operational

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 87 CHAPTER 5: POWERING UP THE D400

Powering down the D400

Powering down or shutting down the D400 without using the proper procedure could result in loss of system log data (SOE log, alarm log, user log, etc.), and could prevent the D400 from restarting properly. Follow the instructions provided to shut down the D400 safely. The D400 is like a computer and the system must be shut down properly before removing the power. For the shut down procedure, see Chapter , Using the D400 > section: “Shutting down the D400” on page 111. It may take a couple of minutes for the D400 to fully shut down and for the CPU Ready LED to go off. NOTE Once you have completely shut down the D400, you can safely disconnect the power.The IP-Server can be shut down at any time by disconnecting power input to the unit.

88 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL D400 Substation Gateway

Chapter 6: Setting Up the D400

Setting Up the D400 When you receive your D400, it is configured with default communication settings. To enable the D400 to communicate over your substation LAN you must change the settings as required by your network. Refer to the D400 online help and D400 Software Configuration Guide SWM0066 for complete information on configuring the D400.

Start the D400

The tasks performed to set up the D400 for operation are: • “Task 1: Connect to the D400” on page 90 • “Task 2: Create user accounts” on page 91 • “Task 3: Change the root password” on page 91 • “Task 4: Set up the network interface” on page 92 • “Task 5: Create a supervisor password” on page 94 • “Task 6: Set up secure HMI access” on page 94 • “Task 7: Access the D400 HMI” on page 96 • “Task 8: Test the network connection” on page 96 In the following procedures, the term “enter” indicates that the menu item number is typed in and then the Enter key is pressed. TIP

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 89 CHAPTER 6: SETTING UP THE D400

Task 1: Connect to the D400

To perform the initial set up of the D400, you need to connect your computer directly to the D400 through the front serial communications port. The front communications port provides a local connection and terminal session with the D400 and is used to perform system administrative and maintenance procedures.

Terminal session The terminal session is enabled through a terminal emulation application; for example, one of the following: •Tera Term • HyperTerminal (provided with Windows® XP) • HyperACCESS (provided with Windows® 7 Commercial Edition and later) • PuTTY A application is required to set up a terminal session with the D400. This procedure is described using Tera Term, but any terminal emulation program can be used.

Procedure To connect to the D400: 1. Connect the supplied null modem cable (GE Item No. 977-0529) to your computer’s serial communications port and to the D400's front communications port. See “Front maintenance port” on page 68 for cabling information. If your personal computer does not include a serial port and does include an available USB port, you require a USB/Serial adapter for connection to the null modem cable. TIP 2. From the Windows , select All Programs > Tera Term folder > Tera Term. Result: The Tera Term New Connection window appears and the Tera Term VT window appears. 3. Click the Serial option, and click OK. Result: The Tera Term New Connection window closes. 4. On the Tera Term VT window, select the Setup menu > Serial port... command Result: The Tera Term Serial Port Setup window appears. 5. Select the communications settings: – Port: Select the appropriate communication port (for example COM3) from the drop-down list. – Baud rate: 19200 – Data: 8 bit – Parity: none – Stop: 1 bit – Flow control: none 6. Click OK. Result: The Tera Term Serial Port Setup window closes. 7. On the Tera Term VT window, select the Setup menu > Terminal... command Result: The Tera Term Terminal Setup window appears. 8. Select the terminal setting: – Terminal: VT100. 9. Click OK. Result: The Tera Term Terminal Setup window closes.

90 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 6: SETTING UP THE D400

10. In the Tera Term VT terminal window, press Enter. Result: The D400 login: prompt appears. 11. At the D400 login: prompt, type the default username root and press Enter, 12. Type the default password geroot and press Enter. When you type in the password, it does not appear on the screen. Result: The D400#>> command prompt appears. You are now online with the D400.

Task 2: Create user accounts

Since you cannot use the root user account to access the D400 remotely, you must create administrator-level user accounts for this purpose. This must be done for the first time through the D400 front serial communications port.

Procedure To create a new administrator-level user account: 1. Connect to the front maintenance port. See “Task 4: Set up the network interface” on page 92. 2. At the D400#>> command prompt, enter d400cfg. 3. Enter 1. Configure Authentication. 4. Enter 6. Administrator Group Users. 5. Complete the on screen prompts as required to create a new administrator-level user. You may now use this user account to access the D400 remotely through TELNET or SSH. By default, the D400 is configured to restrict access to various command line services like TELNET and SSH to administrator-level users only. You can use the Configure NOTE Administrator Only Logins setting under Secure Access to change this parameter and allow both administrator- and supervisor-level access.

Task 3: Change the root password

Procedure To change the root password: 1. At the D400#>> command prompt, type d400cfg and press Enter. 2. Enter 1. Configure Authentication. 3. Enter 3. Root Administrator Settings.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 91 CHAPTER 6: SETTING UP THE D400

4. Enter 1. Change Root Password. 5. Follow the instructions to enter a new password for the root user. Do not share the root user's password and do not forget it; this is crucial information. No method is available to regenerate this password.

Task 4: Set up the network interface

Prerequisites The following information is required to set up the D400 network interface: • D400’s assigned IP addresses (Maintenance and Subnet Mask) • Gateway address (if applicable) This set up must be done the first time from the D400’s front serial communications port.

Procedure To configure the network interface: 1. Connect to the front maintenance port. See “Task 1: Connect to the D400” on page 90. 2. At the D400#>> command prompt, enter d400cfg. Result: The Gateway Configuration Utility Menu appears. Figure 52: Gateway Configuration Utility Menu

3. Enter 3. Configure Network Interface. Result: The Available Network Interfaces menu appears.

92 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 6: SETTING UP THE D400

In a multiple network interface configuration you are prompted to enter which device to configure (NET1 or NET2). NOTE 4. Enter 1. Net1, or enter 2. Net2. Result: The Network Interface: Net1 or Net2 menu appears. 5. Enter 2. Static IP Address. Result: You are prompted to enter the D400 IP address. 6. Enter the appropriate Static IP Addresses: 6.1. Enter 1. Configure Maintenance IP Address. Note: This entry is mandatory. Result: You are prompted to enter the D400 IP Address. 6.2. Enter 2. Configure Active IP Address (for redundancy). Note: This entry is mandatory for Redundant systems only if Hot/Warm Redundancy is configured. Configuring an Alias IP enables the D400 to be accessed through two different IP Addresses; that is, primarily through the Maintenance IP Address and secondarily through the Alias IP Address (optional). Result: You are prompted to enter the D400 IP Address. 6.3. Enter 3. Configure Alias IP Address (alternate subnet), Result: You are prompted to enter the D400 IP Address. 7. Enter the IP address of the D400, or just press Enter to accept a previously-set IP address. Result: The default IP address appears: 192.168.168.81. 8. Enter the Subnet Mask of the D400, or press Enter to accept a previously-set subnet mask. Result: The default Subnet Mask appears: 255.255.255.0. Result: The Broadcast IP Address appears. 9. Do one of the following: – Accept the settings by typing y and pressing Enter. – Not accept the settings by typing n and pressing Enter. Repeat steps 4. to 9. to make the necessary changes. 10. Configure the Default Gateway settings. From the Available Network Interfaces menu, select Configure Default Gateway by typing 5 and pressing Enter. Result: The Default Gateway menu appears. 10.1. Enter 1. Configure Maintenance Default Gateway. Result: You are prompted to select the Network Interface. 10.2. Enter 2. Configure Active Default Gateway (For Redundancy). Result: You are prompted to select the Network Interface. 11. Enter 1. Net1, or enter 2. Net2. 12. Enter in the Gateway IP address of the D400. 13. Go back to the Gateway Configuration Utility Menu, and enter 19. Reboot Device. Result: The Device Reboot Menu appears. 14. Enter Y to confirm that the D400 is to be restarted. The D400 restarts and is updated with the new network settings. You can now configure the D400 using the D400 HMI over the network connection. See Chapter 8, Using the D400. You must create administrator-level user accounts before you can access the D400 remotely through TELNET or SSH.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 93 CHAPTER 6: SETTING UP THE D400

You may also have to modify your local network connection on your PC if you want to plug directly into the D400’s front network port. The PC connecting to the front NOTE Ethernet port of the D400 must be configured to be on the same network as Net1 (slot 11) and the host ID must be unique to the network.

Task 5: Create a supervisor password

Procedure To create a supervisor password: 1. At the D400#>> command prompt, type d400cfg and press Enter. 2. Enter 1. Configure Authentication. 3. Enter 4. HMI Supervisor Settings. 4. Enter 1. Change HMI Supervisor Password. 5. Follow the instructions to enter a new password for the root user.

Do not share the supervisor user's password. The Supervisor user's password can be changed in future if required. This operation can only be performed using root credentials.

Task 6: Set up secure HMI access

The D400 provides security features to authenticate its identity and to maintain the privacy of information between the D400 and your computer when communicating over the Internet. The D400 makes use of digital signatures and secure HMI access to ensure this security. Secure HMI access to the D400 is provided using the Secure Sockets Layer (SSL) protocol over a 128-bit connection. To support the D400's secure HMI access features, you need to obtain and install a security certificate and a private key on the D400.

Prerequisites You need the following items to set up secure HMI access for the D400: • Approved IP address, host name and fully qualified domain name for the D400 • Security certificate and private key

Requesting a Security certificates are issued by independent certification authorities (CAs). Your HMI certificate Viewer must host the certificate for the CA you choose to use. Refer to your browser's configuration to find out which certification authorities are supported. Optionally, you can install a CA's certificate if it doesn't exist in your browser. To obtain a certificate, you need to create and send a Certificate Signing Request (CSR) to the CA. At the same time you create the CSR, you also create a private key. The CSR and the provided certificate and private key are supplied in individual text files, typically named server.csr, server.crt and server.key respectively.

Obtaining a security Contact a certification authority to request a certificate and to create your private key. certificate and private When making your CSR request, provide the host name of the D400 (the full name that key users are to enter in the HMI Viewer to connect to the D400) for the certificate's “Common Name”, and specify a non-encrypted private key file. When you receive your certificate and private key, you should create a back up copy and store it in a secure place other than the D400. TIP

94 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 6: SETTING UP THE D400

Installing the certificate and key Once you have obtained your security certificate and private key, you can install them on the D400 in two ways: • Secure Copy - requires a PC with an installed Secure Copy Program (SCP) and a network connection to the D400 • USB Portable Memory Device - requires local access to the D400

Prerequisites Before installing the certificate and key, check that the files are named as follows and rename if necessary: • Certificate is server.crt • Private key is server.key

Procedures To install using Secure Copy 1. Start the Secure Copy Program. 2. Connect to and log in to the D400 using your network connection. 3. Using the Secure Copy Program, copy the server.crt and server.key files to the following directory on the D400: /mnt/usr/D400_SysConfig/Certificate 4. Reboot the D400. See “Shutting down the D400” on page 111.

To install from the USB drive 1. Copy the server.crt and server.key files to the root directory of the USB drive. 2. Insert the USB drive into one of the front USB ports on the D400. 3. Start a terminal session and log in to the D400. 4. At the D400#>> command prompt, enter the following commands: mkdir /mnt/usbdrive mount -t vfat /dev/sda1 /mnt/usbdrive cp /mnt/usbdrive/server.crt /mnt/usr/_SysConfig/Certificate cp /mnt/usbdrive/server.key /mnt/usr/_SysConfig/Certificate sync umount /dev/sda1 5. Remove the USB drive. 6. Reboot the D400. See “Shutting down the D400” on page 111. Since a USB drive could be lost or stolen, it is recommended you remove the private key and certificate from the USB drive once you are done installing them on the D400. TIP Once you have installed and set up your security certificate, your secure HMI access with the D400 is enabled. From this point on, whenever you access the D400 HMI using a HMI Viewer, the D400 automatically sends you its HTTPS site certificate, and your HMI Viewer displays a lock icon on the status bar. This indicates that you have a secure connection with the D400. If you receive any other security warnings or do not see the secure connection icon in your HMI Viewer, your computer and network connection may not be safe from outside NOTE intruders. Check with your IT administrator on how to proceed.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 95 CHAPTER 6: SETTING UP THE D400

Task 7: Access the D400 HMI

Procedure To access the D400 HMI: 1. Open a HMI Viewer. 2. Enter the IP address (assigned in Task 4) of the D400. Result: The Log-In screen appears. 3. Enter your user name as supervisor and the newly created password. 4. Click Log In. Result: The D400 HMI (Human Machine Interface) appears. Multiple D400 HMI users can be created. Each user can be assigned with different access levels. NOTE

Task 8: Test the network connection

Once you have finished setting up the D400's network interface, you may want to test the connection to ensure that your computer and the D400 are communicating properly. To test the connection, you can run the ping command at the D400's command line interface. To use the ping command your computer must be set up in the same subnet mask as the D400. For security reasons, the D400 does not reply to ping messages by default. D400 ping reply behavior can be modified using the d400cfg utility. NOTE

Procedure To test the network connection using ping 1. Using the front maintenance port, start a Telnet session and log into the D400. 2. At the D400#>> command prompt, enter ping followed by your computer's IP address. If you get a reply, then the communication is working between the D400 and your computer. If you do not get a reply, check the following items: – You entered the IP address correctly in the ping command. – Your computer is set up in the same subnet mask as the D400. – The network interface setup in the D400 is correct.

96 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL D400 Substation Gateway

Chapter 7: Setting Up the D400 for Redundancy

Setting Up the D400 for Redundancy This chapter describes how to: • “Configure Warm-Standby redundancy” on page 97 • “Configure Hot-Standby redundancy” on page 100 Do not share the root user's password and do not forget it; this is crucial information. No method is available to regenerate a lost password.

Prerequisites

In order to set up two D400s for redundant operation, the following is required: • Two D400s running Firmware R5.01 (or later) Production Build • An SSH client: PuTTY.exe (http://en.wikipedia.org/wiki/PuTTY) • KVM set connected to the D400s

Configure Warm-Standby redundancy

Before configuring the D400s for Warm-Standby redundancy, ensure that the listed “Prerequisites” on page 97 are on-hand. The procedure to configure Warm -Standby Redundancy in a D400 R5.01 (or later) comprises the following tasks: • “Task 1: Warm standby - Configure the D400s for operation” on page 98 • “Task 2: Warm standby - Connect the D400s” on page 98 • “Task 3: Warm standby - Create user accounts” on page 98 • “Task 4: Warm standby - Configure the primary D400 for redundancy” on page 98 • “Task 5: Warm standby - Configure the secondary D400 for redundancy” on page 99 • “Task 6: Warm standby - Verify configuration” on page 100 • “Task 7: Warm standby - Verify redundant D400 operation” on page 100

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 97 CHAPTER 7: SETTING UP THE D400 FOR REDUNDANCY

Task 1: Warm standby - Configure the D400s for operation Set up both D400s for operation. See section: “Start the D400” on page 89.

Task 2: Warm standby - Connect the D400s To connect the two D400s: 1. Connect to the D400s (D400 A and D400 B) through a secure shell client. 2. Enter the root/admin login credentials. 3. Login to and start the d400cfg local Gateway Configuration Utility. You can also use the Local HMI available to login to and start d400cfg.

Task 3: Warm standby - Create user accounts To configure redundancy, both D400s are required to have a user account. Skip this task if a user account has already been created. In the following procedures, the term “enter” indicates that the menu item number is typed in and then the Enter key is pressed. TIP To create a user account on each D400: 1. At the D400#>> command prompt, enter d400cfg if you are a root user. Otherwise, enter sudo d400cfg. Result: The Gateway Configuration Utility Menu appears. See Figure 52 on page 92. 2. Enter 1. Configure Authentication. Result: The Gateway Configuration Utility Menu - Authentication menu appears. 3. Enter 6. Administrator Group Users. Result: The Gateway Configuration Utility Menu - Admin Group Users menu appears. 4. Enter 2. Add User. Result: The Gateway Configuration Utility Menu - Admin Group Users - Add User in Group command details appear. 5. Enter the desired user name. 6. Enter the password, conforming to the password security rules. 7. Repeat this task to add a new user in the second D400.

Task 4: Warm standby - Configure the primary D400 for redundancy To configure a D400 for single LAN Redundancy: 1. Navigate back to the main d400cfg menu. Result: The Gateway Configuration Utility Menu appears. See Figure 52 on page 92. 2. Enter 14. Redundancy. Result: The Gateway Configuration Utility Menu - Redundancy menu appears. 3. Enter 2. Enable/Disable Redundancy. 4. Enter Y to enable Redundancy. Result: You are prompted for the redundancy type. 5. Enter 1. Warm Standby to configure the D400s in Warm-Standby mode. 6. Enter Y to confirm your selection. 7. Enter 3. Heart Beat Configuration. Result: The Gateway Redundancy Configuration Menu - Heart Beat Configuration Parameters menu appears.

98 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 7: SETTING UP THE D400 FOR REDUNDANCY

8. Enter 1. Configure Heart Beat Timeout. 9. Enter a value for the Heart Beat Timeout (in milliseconds) within the suggested range (100 to 1000 milliseconds). 10. Enter 2. Configure Heart Beat Retries. 11. Enter the number of Heart Beat Retries within the suggested range (1 to 10). 12. Enter 3. Configure Heart Beat Communication Mechanism. Result: The Gateway Redundancy Configuration Menu - Heart Beat Mechanism menu appears. 13. Enter 1. Serial Only to select the required Heart Beat Mechanism. 14. Navigate back to the Gateway Configuration Utility Menu > Redundancy menu. 15. Enter 6. Configure Time Sync with Standby. (Optional) Skip this option if both D400s are already in time-sync through other means (for example, IRIG-B or NTP). 16. Enter 8. Configure Gateway A/B Designation. (Applicable if the switch panel is not configured through the Remote HMI). Result: The Gateway Redundancy Configuration Menu > Redundancy Gateway Designation (A/B) Configuration menu appears. 17. Follow the provided instructions and enter 1. Gateway_A. 18. Enter 10. Configure Switch Panel Type. (Applicable if switch panel is not configured through the Remote HMI) Skip this step if the Switch Panel serial connection is not configured. Otherwise, go through the instructions provided and make your selection. 19. Navigate back to the main menu. Result: The Gateway Configuration Utility Menu appears. 20. Enter 19. Reboot Device and wait for a minute. Result: This command: – Restarts all the applications and runs them in Warm-Standby mode. – Starts the ACTIVE Gateway in Warm Standby Mode. After the first D400 is configured, it enters into the Active mode. 21. Login to the peer D400 and enter d400cfg. 22. Repeat the steps of Task 4 to configure the peer D400.

Task 5: Warm standby - Configure the secondary D400 for redundancy To configure the secondary D400: 1. Navigate back to the main d400cfg menu. Result: The Gateway Configuration Utility Menu appears. See Figure 52 on page 92. 2. Enter 14. Redundancy. Result: The Gateway Configuration Utility Menu - Redundancy menu appears. 3. Enter 8. Gateway A/B Designation. Result: The Gateway Redundancy Configuration Menu - Redundancy Gateway Designation (A/B) Configuration menu appears. 4. Enter 2. Gateway_B. (Applicable if switch panel is not configured in Remote HMI). 5. Enter the remaining configuration settings to be identical to the primary D400. See “Task 4: Warm standby - Configure the primary D400 for redundancy” on page 98.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 99 CHAPTER 7: SETTING UP THE D400 FOR REDUNDANCY

6. Enter 19. Reboot Device and wait for a minute. Result: All of the D400 applications are restarted and run in Warm-Standby mode. This D400 (Gateway_B) communicates to the peer D400 (Gateway_A) and declares itself to be the Standby D400 since the peer D400 is already in Active mode.

Task 6: Warm standby - Verify configuration To verify that the configuration is correct: 1. At the D400#>> command prompt of the primary D400, enter d400cfg. 2. Enter 14. Redundancy. 3. Enter 1. Current Configuration. 4. Repeat the steps of this task for the secondary D400. 5. Compare the primary and secondary configurations.

Task 7: Warm standby - Verify redundant D400 operation To verify that the D400s are operating as redundant devices: 1. Login to D400 remote-HMI and enter credentials. 2. Click Point Summary button. 3. Click the Application tab. 4. Click Redundancy Manager Details. 5. Repeat the steps of this task for the secondary D400. 6. Compare the configurations. 7. Confirm that the State of peer D400 pseudo point is Standby.

Configure Hot-Standby redundancy

Before configuring the D400s for Warm-Standby redundancy, ensure that the listed “Prerequisites” on page 97 are on-hand. The procedure to configure Warm -Standby Redundancy in a D400 R5.01 (or later) comprises the following tasks: • “Task 1: Hot standby - Configure the D400s for operation” on page 100 • “Task 2: Hot standby - Connect the D400s” on page 101 • “Task 3: Hot standby - Create user accounts” on page 101 • “Task 4: Hot standby - Configure the primary D400 for redundancy” on page 101 • “Task 5: Hot standby - Configure the secondary D400 for redundancy” on page 102 • “Task 6: Hot standby - Verify configuration” on page 103 • “Task 7: Hot standby - Verify redundant D400 operation” on page 103

Task 1: Hot standby - Configure the D400s for operation Set up both D400s for operation. Refer to section: “Start the D400” on page 89.

100 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 7: SETTING UP THE D400 FOR REDUNDANCY

Task 2: Hot standby - Connect the D400s To connect the two D400s: 1. Connect to the D400s (D400 A and D400 B) through a secure shell client. 2. Enter the root/admin login credentials. 3. Login to and start the d400cfg local Gateway Configuration Utility. You can also use the Local HMI available to login to and start d400cfg.

Task 3: Hot standby - Create user accounts Creation of user accounts follows the same procedure whether it is for hot standby or warm standby redundancy. See the procedure for “Task 3: Warm standby - Create user accounts” on page 98.

Task 4: Hot standby - Configure the primary D400 for redundancy To configure a D400 for single LAN Redundancy: 1. Navigate back to the main d400cfg menu. Result: The Gateway Configuration Utility Menu appears. See Figure 52 on page 92. 2. Enter 14. Redundancy. Result: The Gateway Configuration Utility Menu - Redundancy menu appears. 3. Enter 2. Enable/Disable Redundancy. 4. Enter Y to enable Redundancy. Result: You are prompted for the redundancy type. 5. Enter 2. Hot Standby to configure the D400s in Hot-Standby mode. 6. Enter Y to confirm your selection. 7. Enter 3. Heart Beat Configuration. Result: The Gateway Redundancy Configuration Menu - Heart Beat Configuration Parameters menu appears. 8. Enter 1. Configure Heart Beat Timeout. 9. Enter a value for the Heart Beat Timeout (in milliseconds) within the suggested range (100 to 1000 milliseconds). 10. Enter 2. Configure Heart Beat Retries. 11. Enter the number of Heart Beat Retries within the suggested range (1 to 10). 12. Enter 3. Configure Heart Beat Communication Mechanism. Result: The Gateway Redundancy Configuration Menu - Heart Beat Mechanism menu appears. 13. Enter 1. Single LAN (the default value). 14. Navigate back to the Redundancy menu. 15. Enter 4. Configure IP Address of PEER Gateway. 16. Enter 1. Configure/Update Peer IP Address. 17. Enter the new Primary address of the peer D400. 18. If a secondary IP for the peer D400 is available, enter the new secondary address. 19. Confirm the primary and secondary IP address changes by entering Y. 20. Enter 5. UserName of PEER Gateway. 21. Enter the user name defined by you earlier in the peer D400.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 101 CHAPTER 7: SETTING UP THE D400 FOR REDUNDANCY

22. Enter 6. Configure Time Sync with Standby. (Optional) Skip this option if both D400s are already in time-sync through other means (for example, IRIG-B or NTP). 23. Enter 7. Configure Enable/Disable DTAs in Standby. Result: The Gateway Redundancy Configuration Menu - Enable/Disable DTAs on Standby menu appears. If the “Enable/Disable DTAs in Standby” parameter is set to Enabled, the LogicLinx, Calculator and Enhanced Automation DTAs run normally on the standby D400. If this parameter is set to Disabled, these applications suspend processing on the standby D400 and resume normal operations when the D400 state becomes active. Skip this option if DTA applications (that is, automation applications such as LogicLinx, Calculator, Enhanced Automation) on the Standby D400 are to run (default option). 24. Enter 8. Configure Gateway A/B Designation. Result: The Gateway Redundancy Configuration Menu - Redundancy Gateway Designation (A/B) Configuration menu appears. 25. Follow the provided instructions and enter 1. Gateway_A. 26. Enter 9. Setup Public Key Authentication with Peer Gateway. 26.1. Enter Y to copy the public key of this D400 to peer the D400. 26.2. Enter the password of the user defined in the peer D400. This option exchanges the public and private keys. 27. Enter 10. Configure Switch Panel Type. Skip this step if the Switch Panel serial connection is not configured. Otherwise, go through the instructions provided and make your selection. 28. Enter 11. Enable/Disable Non-Sync mode. 29. Default option: The D400 in Hot-Standby mode runs with Non-Sync Mode Enabled. You can disable this mode. 30. Enter either: – Y to disable Non-Sync Mode. – N to continue operation with the default option (Non-Sync mode enabled). 31. Navigate back to the main menu. 32. Enter 19. Reboot Device and wait for a minute. 33. Result: This: – Restarts all of the applications and runs them in Hot-Standby mode. – Starts the ACTIVE D400 in Hot Standby Mode. Result: After the first D400 is configured, it enters into the Active mode. 34. Login to the peer D400 and enter d400cfg. 35. Repeat the steps of Task 4 to configure the peer D400.

Task 5: Hot standby - Configure the secondary D400 for redundancy To configure the secondary D400: 1. Navigate back to the main d400cfg menu. Result: The Gateway Configuration Utility Menu appears. See Figure 52 on page 92. 2. Enter 14. Redundancy. Result: The Gateway Configuration Utility Menu - Redundancy menu appears.

102 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 7: SETTING UP THE D400 FOR REDUNDANCY

3. Enter 4. Configure IP Address of PEER Gateway. Result: The Gateway Redundancy Configuration Menu - Peer IP Configuration menu appears. 4. Specify the Peer IP address. 5. Enter 8. Gateway A/B Designation. Result: The Gateway Redundancy Configuration Menu - Redundancy Gateway Designation (A/B) Configuration menu appears. 6. Enter 2. Gateway_B. 7. Enter the remainder of the configuration settings identical to the primary D400. See “Task 4: Hot standby - Configure the primary D400 for redundancy” on page 101. 8. Enter 19. Reboot Device and wait for a minute. Result: All of the D400 applications are restarted and run in Hot-Standby mode. This D400 (Gateway_B) communicates to the peer D400 (Gateway_A) and declares itself to be the Standby D400 since the peer D400 is already in Active mode.

Task 6: Hot standby - Verify configuration To verify that the configuration is correct: 1. At the D400#>> command prompt of the primary D400, enter d400cfg. 2. Enter 14. Redundancy. 3. Enter 1. Current Configuration. 4. Repeat the steps of this task for the secondary D400. 5. Compare the primary and secondary configurations.

Task 7: Hot standby - Verify redundant D400 operation To verify that the D400s are operating as redundant devices: 1. Login to D400 remote-HMI and enter credentials. 2. Click Point Summary button. 3. Click the Application tab. 4. Click Redundancy Manager Details. 5. Repeat the steps of this task for the secondary D400. 6. If the State of peer D400 point is Non Sync, then synchronize the configuration by entering the DirectOperate -> PulseOn command on the SyncConfig point. 7. Compare the configurations. 8. Confirm that the State of peer D400 pseudo point is Standby.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 103 CHAPTER 7: SETTING UP THE D400 FOR REDUNDANCY

104 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL D400 Substation Gateway

Chapter 8: Using the D400

Using the D400 This chapter describes the user interfaces available with the D400. The: • Front panel LEDs allow you to view the operational status of the D400. • D400 HMI allows you to view and configure the operational status of the D400. • System Utilities allow you to manage the D400 system setup.

Front panel LED indicators

Once the D400 is powered up, the LED indicators on the front panel of the D400 become active. The indicators provide status information on the operation of the D400. Figure 53: Front panel LEDs

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 105 CHAPTER 8: USING THE D400

System status LEDs The System Status LEDs indicate the unit’s operational status are listed in Table 26. Table 26: System status LED descriptions LED Display Status Description Power is correctly supplied to the unit (+5 V present on the D400 Main Board).

Initialization (boot-up and self-diagnostics) of the D400 is complete and the unit is ready to process data.

IRIG-B signal is being correctly processed. This LED flashes at a 2 Hz rate.

Link integrity for the Ethernet Switch in NET1 and NET2 slots. See note below.

Transmission activity for the Ethernet Switch in NET1 and NET2 slots. See note below.

The NET2 ACT/LINK LEDs on the front panel may not be properly driven on the D400 Main Module with FPGA revision V1.4 and earlier when using the Redundant TP Ethernet + COM2 NOTE Port card (GE Item No. 520-0218LF). To check the FPGA revision, enter dmesg -s 16392 | grep -i FPGA at the D400#>> command prompt and search for FPGA in the output.

Serial port status LEDs The Serial Port Status LEDs provide a visual indication of the status for each serial communication port. For a given serial communication port: Table 27: Serial port status LED descriptions LED Display Status Description TXD Serial transmission activity on the serial port

RXD Serial reception activity on the serial port

If a pair of LEDs is not lit, it does not indicate a problem, only that the connected device is not active at that moment. NOTE If a serial communication card slot is empty, (that is, no card is installed) the serial Receive (RXD) LED may be lit. NOTE

106 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 8: USING THE D400

HMI

The D400 includes a built-in HMI (human machine interface). The HMI is your window into the D400. Through the HMI you can monitor the status of your substation network, view data, execute control commands, configure devices and SCADA masters, and change the system set-up. The HMI includes the following components: • Runtime HMI to view and control the operation of the power network. An optional One Line Viewer is available for viewing one-line diagrams. Power bar buttons give access to D400 display screens and utilities. • Configuration tool to manage configuration settings directly on the D400. Includes One Line Designer for creating/editing one-line diagrams. Accessed from the Configuration Power bar button. • Command line interface to configure platform level components. Accessed from the Utilities Power bar button. The D400, depending on how it is configured, is protected by a secure HTTPS or standard HTTP access that requires a user name and password. Your HMI user access level determines which D400 HMI features you have access to and what your privileges are in the run-time and configuration tools. For more information on the D400 HMI, refer to the online Help once you have logged in. The D400, when equipped with a 1.0 GHz or 1.6 GHz CPU, also includes a Local HMI that offers all the features of the D400 HMI through a local connection. A feature-reduced version of the Local HMI is available for D400 units containing a 650 MHz CPU.

D400 HMI You can use a network connection and your computer's HMI Viewer to access the D400 HMI. The D400 HMI Login screen may not appear correctly if you are using Internet Explorer 8 with the Security level set to High. To see the entire Login screen, set the Security level to TIP Medium: go to Tools > Internet Options > Security > Local Intranet > Custom Level > Reset to.

The D400 supports a network connection over the LAN or through a connection to the D400’s front network port. For network connection setup information, see “Network connections” on page 63”. The D400 HMI is based on the HMI based programming language Java. The HMI Viewer must be equipped with a plug-in that supports Java. The D400 is designed to operate with version 6.0 (or later) of the Internet Explorer®. You must have JRE Version 6.0 or 7.0 installed and enabled on your PC to operate the D400 HMI. When you log into the D400, the D400 automatically detects if your HMI Viewer has the JRE installed. If not, the JVM Detection window gives choices for installing the JRE.

To access the D400 1. Open your HMI Viewer and enter the URL (in the form of http://aaa.bbb.ccc.ddd) of the HMI over a network D400. The Log In screen displays. The default IP address is http://192.168.168.81. connection 2. Type your HMI Supervisor user name and password. The default user name is supervisor and the default password is super123$. 3. Click Log In. Result: If your login is successful, the D400 Home page appears.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 107 CHAPTER 8: USING THE D400

Local HMI The access to the Local HMI is through a keyboard, monitor, and mouse connected to the USB KVM card on the rear panel of the D400. For KVM setup information, see “Local HMI connection” on page 67. The D400’s Local HMI is presented within an X Windows environment running on the Linux operating system. It provides limited functionality from the standard HMI. You cannot configure the D400 through the Local HMI.

To access the Local 1. If not already on, turn on the video display monitor. HMI from a local If you just powered up the D400, wait for the start up messages to complete and the substation computer D400 login: prompt to appear. 2. At the D400 login: prompt, enter your D400 administrator user name (default is root) and your administrator password (default is geroot). Leave the IP address at 127.0.0.1. 3. Click Connect. X Windows starts and the Local HMI main screen displays.

X Windows functions The Local HMI is an application with a title bar. Once the user has logged in the application window may be minimized, moved, or closed through the controls on the right hand side of the title bar. An application toolbar displays across the bottom of the screen. Click the D400 button on the toolbar and select an option from the shortcut menu. The following functions are available: • Operator Interface – opens an additional HMI session • X Terminal – displays the D400#>> command prompt in a pop-up window from which you can run the D400 system utilities • Quit – closes the HMI session and X Windows and returns you to the D400#>> command prompt. To restart windows, enter startx. • Restart – restarts the windows manager without ending the HMI session.

Log out The local HMI does not have a session timeout. So you must log out of the HMI and the D400 command line interface to fully exit and secure the system.

To log out from the 1. Click X on the title bar. local HMI 2. At the D400#>> command prompt, type logout and press Enter. Result: The D400 login: prompt appears. The monitor is set to go into standby mode when not used for a few minutes. Touch the keyboard or mouse to wake it up. TIP If the keyboard stops responding during use, simply unplug and re-connect the keyboard cable.

108 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 8: USING THE D400

System utilities

The D400 includes on-board utilities for managing the D400 system setup, such as network settings, passwords, system time, and advanced configuration and diagnostic tools. The System Utilities are accessed at the command line interface using a terminal session. You can access the command line interface in a few ways: • Local terminal session through the front maintenance port • Local substation computer connected to the KVM adapter • Telnet/SSH terminal session through a network connection For more information see section: “System utilities” on page 109.

From the front maintenance port To access the D400 utilities through the front maintenance port: •See section “Start the D400” on page 89.

From the local substation computer To access the D400 utilities through the local substation computer: •See section “To access the Local HMI from a local substation computer” on page 108.

Over a network connection Once you have completed the initial network interface setup, you can initiate a Telnet/SSH session through one of the D400 network connections to access the System utilities. You need terminal emulation software (e.g., Tera Term) that supports the Telnet and SSH protocols. You cannot use the root user account to access your D400 remotely. You must use an Administrator-level user account (or a Supervisor-level user account, if so configured). See section “Start the D400” on page 89 for more information. You can also initiate a Telnet/SSH session by clicking the Utilities button on the Power bar in the D400 HMI. When accessing the D400 with an Administrator-level user account, you may not have sufficient security privileges to execute the all commands listed in the user documentation. TIP If this occurs, type “sudo” before of each command.

To access the D400 1. From the Windows Start menu, select Run. utilities through a 2. In the Run dialog box, enter telnet and click OK. Telnet session in Windows

Result: The command prompt window appears.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 109 CHAPTER 8: USING THE D400

3. Log in to the D400.

To access the D400 1. Open the terminal emulator program. utilities through a SSH 2. Enter the D400’s IP address and use SSH port number 22. session 3. Log in to the D400.

File transfer

The D400 contains two CompactFlash cards on the main board to store software and data: • System CompactFlash card stores system firmware • User CompactFlash card is accessible from the front panel and stores system data such as event logs To copy files from the CompactFlash cards you can use an ftp session through the D400’s command line interface or a portable memory device connected to the D400’s front USB port.

To copy files using ftp: 1. Connect and log in to the D400 using a terminal session. 2. At the D400#>> command prompt, type ftp. 3. Enter one of the following commands to go to the file directories: – cd /mnt/hmiSystem directory where firmware is located – cd /home/ConfigureConfiguration directory where configuration files are located

USB portable memory device The D400 accepts a USB portable memory device from the front USB port. The USB port does not currently auto detect the memory device so you need to manually mount it.

To connect a USB 1. Insert the USB drive in the top front USB port. portable memory 2. Connect and log in to the D400 using terminal session. device: 3. At the D400#>> command prompt, enter mkdir /mnt/frontusb1. 4. Enter mount –t vfat /dev/sda1 /mnt/frontusb1 –o shortname=win95.

System status points

You can obtain status information about your D400 through several system points. These points can be viewed through the Application tab on the Point Summary window. Table 28: D400 System Status Points Name Data Type Description Power Supply 1 Good Digital Input Value is 1 when a failure has occurred or the power supply is not installed. Because this point remains Power Supply 2 Good Digital Input online even when the power supply is not installed, you can force the point for the missing supply to the offline state or you can apply a tag indicating that the unit is not installed. IRIG-B Enabled Digital Input Value is 1 when enabled

110 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 8: USING THE D400

Name Data Type Description IRIG-B Watchdog Expired Digital Input Value is 1 when expired Front Port Link Good Digital Input Value is 1 when true

NET1 Port 1 Link Good Digital Input Note that “Active” is not the same as “Activity”. It is used NET1 Port 1 Active Digital Input in the same sense as Active and Standby for redundant Ethernet configurations. The point does not flicker on NET1 Port 2 Link Good Digital Input and off in the same way that the activity LED does for NET1 Port 2 Active Digital Input an Ethernet port. NET1 Port 3 Link Good Digital Input The actual number of ports available depend on the configured options of the D400 unit. Points associated NET1 Port 3 Active Digital Input with unavailable ports are made offline and invalid. NET1 Port 4 Link Good Digital Input NET1 Port 4 Active Digital Input NET2 Port 1 Link Good Digital Input NET2 Port 1 Active Digital Input NET2 Port 2 Link Good Digital Input NET2 Port 2 Active Digital Input NET2 Port 3 Link Good Digital Input NET2 Port 3 Active Digital Input NET2 Port 4 Link Good Digital Input NET2 Port 4 Active Digital Input System PLD Revision Analog Input A string that describes the revision or ID number of the specified component. Main Board ID Analog Input Mid-Plane ID Analog Input NET1 Card ID Analog Input NET2 Card ID Analog Input USB KVM Card ID Analog Input

FPGA Version 1.10 or above is required to provide system status points for the power supplies and 100BASE-FX card. In previous FPGA versions, these points appear as offline NOTE regardless of their actual status. If your FPGA version is 1.09 or less, please contact Product Support.

Shutting down the D400

Powering down or shutting down the D400 without using the proper procedure could result in loss of system log data (SOE log, alarm log, user log, etc.), and could prevent the D400 from restarting properly. Follow the instructions provided to shut down the D400 safely.

Like a computer, you should shut down the D400 before removing power or to perform a complete system reboot. Shutting down the D400 ensures that all applications are properly terminated, settings are saved, and the CPU is safely turned off. It also helps for a smoother restart. The shut down command is run at the D400's command line interface and can be performed locally or remotely using a terminal session. You have the option to completely halt operation of the D400 or to stop and then restart it.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 111 CHAPTER 8: USING THE D400

To shut down the 1. Log in to the D400 system. See “System utilities” on page 109. D400 before powering 2. At the D400#>> command prompt, type shutdown -h now and press Enter. down The D400 shuts down. If you are performing the shut down locally, you can verify that the CPU Ready LED on the D400 front panel turns off and the System Fail power supply alarm is set (if wired). You can now safely disconnect the power. It may take a couple of minutes for the D400 to fully shut down and for the CPU Ready LED to go off. NOTE

To reboot the D400 1. Log in to the D400 system. See “System utilities” on page 109. 2. At the D400#>> command prompt, type shutdown -r now and press Enter. The D400 software shuts down and then restarts automatically. Once the restart is complete, you can log back into the D400.

112 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL D400 Substation Gateway

Chapter 9: Using the Local Gateway Configuration Utility

Using the Local Gateway Configuration Utility The Gateway Configuration Utility (d400cfg) is used to configure system level settings on the D400. Using the Gateway Configuration Utility, you can perform the following actions: • Control user authentication mode • Configure network and network interface settings • Configure secure access • Configure host names • Configure time synchronization • View the size of system logs, mSQL database tables, and the NVRAM or reset them to delete the information stored within • Reset NVRAM and File Persistence • Configure local HMI settings • Configure the Sync Manager to copy files to a remote directory • Delete retrieved records, temp files, and cache files created by the ARRM utility. • Configure system redundancy settings • Modify power supply fail alarm settings • Delete ARRM records • Restore to the factory default configuration • Reboot the D400 Most of the configuration changes made through d400cfg are only saved after a reboot (d400cfg option 18) or after committing changes using the Local or Remote HMI. After making a configuration change, you are advised to follow the instructions provided in the d400cfg. Also, while performing d400cfg session, all unsaved configuration changes may be lost if the d400cfg session is forcibly terminated or if the D400 device is improperly shut down.

There is a difference between the local Gateway Configuration Utility and the D400 Configuration Tool in the D400 HMI: • The local Gateway Configuration Utility directly modifies Linux system configuration files. • The D400 Configuration Tool in the D400 HMI generates XML configuration files.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 113 CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

Start the local gateway configuration utility

To start the local gateway configuration utility: 1. At the D400#>> command prompt, type d400cfg. 2. Press the Enter key. Result: The Gateway Configuration Utility Menu appears.

3. Type a function number. The Gateway Configuration Utility menu items (see Figure 54) are described in the following sections: – 1. Configure Authorization; see page 117 – 2. Configure Network Settings; see page 118 – 3. Configure Network Interfaces; see page 119 – 4. Configure Secure Access; see page 122 – 5. Configure Firewall; see page 125 – 6. Configure Host Names; see page 127 – 7. Configure Time & Time Sync; see page 127 – 8. Reset System Logs; see page 128 – 9. Reset mSQL Database Tables; see page 129 – 10. Reset NVRAM; see page 129 – 11. Rest File Persistence Data; see page 130 – 12. Local HMI; see page 130 – 13. Configure Sync Manager; see page 133 – 14. Redundancy; see page 136 – 15. Power Supply; see page 138

114 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

– 16. ARRM; see page 138 – 17. Suppress Forced Qualities To Masters; see page 139 – 18. Emulate D20 RTU IEC101 DPA Unbalanced Mode; see page 139 – 19. Suppress IEC101+104 DPA Startup Quality Events; see page 139 – 20. Restore Factory Default; see page 140 – 21. Configure D.20 Client DO Poll Frequency; see page 140 –22. Reboot Device; see page 140 4. Press the Enter key. Result: A sub-menu for the selected function appears.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 115 CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

Figure 54: Configuration utility navigation structure

Gateway Configuration Utility Menu Authentication 1. Configure Authorization 1. Local Authentication Mode 2. Remote Authentication Mode 2. Configure Network Settings Network Settings 3. Root Administrator Settings 1. Current Settings 3. Configure Network Interfaces 4. HMI Supervisor Settings 2. Enable IP Forwarding 5. Pass-Through Authentication 4. Configure Secure Access 3. Enable ICMP Echo 6. Administrator Group Users 4. Configure Machine Host Name 5. Configure Firewall Available Network Interfaces 6. Configure Host Names Secure Access 1. Net1 1. Current Configuration 2. Enable Parallel Redundancy Protocol 7. Configure Time & Time Sync 2. Configure SSH Service 3. Point-to-Point (PPP) 3. Configure SFTP Service 8. Reset System Logs 4. Default Gateway 4. Configure Web Mode 5. Custom Routing 9. Reset mSQL Database Tables 5. Configure Emergency Access Ports 6. Networking Summary 6. Configure Telnet Service 10. Reset NVRAM 7. Configure FTP Service Firewall 11. Reset File Persistence Data 8. Configure Remote HMI Non 1. Current Configuration Observer Privileges 2. Enable/Disable Firewall 12. Local HMI 9. Configure Rsyslog Service 3. Edit Generated Rules 13. Configure Sync Manager 4. Add/Edit/Remove Custom Rules

14. Redundancy Host Names Time and Time Sync 15. Power Supply 1. Add a New Host 1. Show Time and Current Settings 2. Delete a Host 16. ARRM 2. Set System Clock 3. Modify a Host 3. Set System Time Zone 4. Delete all Hosts 17. Suppress Forced 4. Time Sync Input 5. View all Hosts Qualities To Masters 5. Time Sync Output 18. Emulate D20 RTU IEC101 System Logs 1. Check Size of Archived Logs DPA Startup Quality Events mSQL Tables 2. Check Size of current Application Logs 19. Suppress IEC101+104 DPA 1. Delete Digital Even Data : SOE Startup Quality Events and Alarm records 3. Delete Archived Logs 20. Restore Factory Default 2. Delete Quality records 4. Delete Current Logs 3. Delete PRF Event records 21. Configure D.20 Client DO Local HMI Poll Frequency 4. Delete Operator Note records 1. Current Settings 22. Reboot Device 5. Delete Accumulator records 2. Desktop Mode 3. Monitor Sync Manager 4. DPMS 5. Screen Resolution 1. Enable Sync Manager 6. Monitor Type 2. Generate SSH Authentication Keys 7. Volume Control 3. Configure Sync Sets 8. Standby Local HMI (Redundancy) 9. Java Cache Management

Redundancy Power Supply 1. Current Configuration 1. Configure PowerSupply Failure 2. Enable/Disable Redundancy Alarm Mode 3. Heart Beat Configuration 4. Configure IP Address of PEER Gateway ARRM Configuration 5. UserName of PEER Gateway 1. Delete Records 6. Configure Time Sync with Standby 7. Configure Configure Enable/ Suppress Local & Remote Forced Disable DTAs in Standby Qualities 8. Configure Gateway A/B Designation 1. Suppression Mode Time Stats 9. Setup Public Key Authentication 2. Enable/Disable Mode for all with Peer Gateway Masters 10. Configure Switch Panel Type 3. Enable/Disable Mode for only Specified Masters 11. Enable/Disable Non-Sync mode

116 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

Configure authentication

From the Authentication menu, you can select the authentication mode and change the system access settings. The Authentication settings are described in Table 29. The Local Authentication Mode and Remote Authentication Mode settings have been moved to the D400 HMI in FW release 5.20. NOTE You must login to the D400 HMI with Administrator privileges to configure local and remote authentication. See the Software Configuration Guide > User Accounts and Authentication section for details. Table 29: Authentication setting descriptions

Setting Description Root Administrator Use this function to change the password associated with the system root Settings user account. HMI Supervisor HMI supervisors are allowed full privileges to access to all configuration, Settings runtime, operation and system administration screens in the D400 HMI. One default supervisor account with the username supervisor is always available on the D400. You can set the password of this account using the gateway configuration utility. This setting is not available if you are using remote authentication mode. Pass-Through Use this function to enable or disable pass-through authentication. When Authentication authentication is enabled, a valid username and password is required to access client applications through pass-through ports. Enabled by default. Administrator Group Use this function to create administrator-level users (if you are using local Users authentication mode) and to change details associated with existing administrator user accounts.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 117 CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

Configure network settings

The Network Settings menu includes optional settings for the D400 network interface. The Network settings are described in Table 30. The D400 must be rebooted to activate changed network settings.

NOTE Table 30: Network setting descriptions

Setting Description Current Settings Use this function to view the current state of the D400 network settings. Enable IP Forwarding Use this function to allow a device on the D400's first network interface (eth0) to communicate with devices coming in on a second network interface (eth1) or a dial up connection. This configuration is only possible if the D400 has two Ethernet interfaces and/or uses PPP dial-in. Note: You cannot enable this feature when the D400 firewall is enabled. Enable ICMP Echo Use this function to enable the ICMP echo (ping) feature which helps secure and test the D400. By default the ICMP is disabled, so that the D400 cannot be pinged on any interface. ICMP can be enabled by the administrator. Configure Machine Use this function to assign a (host) name to the D400 unit. Within the Host Name network that the D400 is connected to, the name must be unique to this D400. The name can only contain alphanumeric characters (- [hyphen] is supported); e.g., D400_B or D400_WestLondon.

118 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

Configure network interfaces

The Configure Network Interfaces menu includes settings for the D400's network connections. The Network Interface settings are described in Table 31. The D400 must be rebooted to activate any changed network settings.

NOTE Table 31: Network Interface setting descriptions

Setting Description Net1 Current Configuration Use this function to view the current state of the available D400 network interfaces.

Static IP Address Use this function to configure the D400 to use manually defined network parameters. Configurable addresses include: • Maintenance: Also referred to as the static address, this is the primary IP address, subnet mask, and default gateway for use by this D400. Note: In a non-redundant system, the maintenance address is used as the network address of the device. • Active: Used for D400 system redundancy. Whichever redundant D400 is active at the time assumes this IP address; the standby unit reverts to its own maintenance IP address. The active address settings should be the same on both redundant units. • Alias: An alternate address that can be configured to allow a secondary communications link with the D400. This is typically used for redundant LAN D25s. When used within a redundant D400 system setup, the alias address settings should be the same on both redundant units. The alias addresses must be on a different subnet mask than the maintenance and active addresses. If your D400 contains a second Ethernet card, you can configure secondary maintenance, active, and alias IP addresses.

Dynamic Address Configure the D400 to use network parameters that are provided by a DHCP server. This requires a DHCP server to be on the same network as the D400. Note: Dynamic addressing is not compatible with D400 system redundancy or redundant LAN D25s as the active and alias addresses are not provided by DHCP.

Network Zone By default, all network interfaces except Net 1 are set to the External firewall mode, which restricts the type of traffic permitted. You can change the selected network interface to the Internal mode with this option. For more information on the D400 firewall, refer to section “Configure firewall settings” on page 125.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 119 CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

Setting Description Net1 VLAN (continued) It is common to use a VLAN when connecting D400 and D.20 RIO Distributed I/O Controller devices over a network. By assigning your D.20 RIO to a VLAN, you can ensure a higher priority for data transmitted from it and you can reduce the amount of extraneous information the D.20 RIO receives from other devices on the network. Figure 55: Sample D.20 RIO VLAN configuration

D400D400 Switch A

VLAN NET1

D.20 RIO Switch B

LAN A

In Figure 55 a VLAN has been created on the NET1 interface on the D400. NET1 is connected to a third party switch, which is also connected to another third party switch. These connections are called the trunks, since they carry the VLAN data as well as all other data transmitted on the interface. The switch B is also configured to support a VLAN on a certain network port, which is connected to the D.20 RIO. Since this port is dedicated to the VLAN, only information flagged for the VLAN is transmitted to the D.20 RIO. As well, information sent on this VLAN from the D.20 RIO device can be classified with a higher priority, which ensures a higher likelihood of transmission during times of network congestion. You can configure the following options on each VLAN you create: • IP address, subnet mast, and default gateway: You can assign static values or obtain dynamic values via DHCP. Once you have configured these values, you can use them to access your VLAN. • Network zone: Assign the VLAN to either the internal or external network zone. For more information on network zones, refer to section “Configure firewall settings” on page 125. Note: You can always assign a VLAN to the external network zone. However, you can only assign it to the internal zone when the associated physical interface is also configured to the internal zone. • EGRESS priority mapping: Set the QoS priority level for data transmitted on this VLAN. Priority levels range from 0 to 7 with 7 being the highest priority. If a QoS-enabled device receives packets transmitted on this VLAN, it should apply a priority based on the level you specify. • Ethernet reorder flag header: This option is reserved for use by GE Grid Solutions staff for Technical Support tasks.

Remove Configuration Use this command to remove the current Network Interface settings. All configured Maintenance IP Addresses, Active IP Addresses, Alias IP Addresses, Network Zones and VLANs are removed. This command also allows you to backup the current configuration. Enable Parallel Use this command to enable or disable the PRP on the D400 network ports. Redundancy Protocol Enabling PRP: • Removes the existing Network Interface settings. • Uses the PRP LANID and PRP Supervision Frame Interval. • Moves the network interface to internal zone of the firewall.

120 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

Setting Description Point -to-Point (PPP) The D400 supports a PPP dial-in connection from a host computer using a Telnet or Secure Shell terminal session. To establish a PPP connection, the D400 must have a COM2 adapter card installed and configured for DTE communications. You must configure an IPv4 address for the D400 device as well as the remote device. You can also use the configuration menu to enable or disable the PPP service or to change the network zone of the interface. After you have configured the PPP interface on the D400, set up the host computer for a basic dial-up connection and use the D400 administrator user name and password. Default Gateway Use this command to set the Default Gateway IP Address (optional). The IP Address of the Gateway can be configured for both of the Network Interfaces. If redundancy is configured, you are advised to configure the Active Gateway IP Address. Custom Routing Use this command to display, enable and disable custom routes in the D400. For addition of custom routes in the D400, you may need to provide the following: • Destination IP Address, • Destination subnet mask • Next Gateway IP Address (optional) • Network interface of D400 that needs to be used. Networking Summary Use this command to display a summary of all the configured network interfaces in the D400.

Network summary You can view a summary of all configured network interfaces in the D400 along with the type of interface. For example, the Network Summary option provides a list of available network subnets in the D400: 1. 10.12.232.250/16 Net1 Maintenance Internal 2. 10.12.232.251/16 Net1 Active Internal 3. 11.12.232.250/16 Net1 Alias Internal 4. 1.5.4.3/16 vlan1@Net1 Active Internal 5. 172.12.232.250/16 Net2 Maintenance Internal 6. 172.12.232.251/16 Net2 Active Internal 7. 72.12.232.250/16 Net2 Alias Internal The slash and the number following the slash represents the subnet mask, expressed in CIDR (Classless Inter-Domain Routing) notation. NOTE The number after the slash represents the number of consecutive 1's in the subnet mask.

For example, 192.168.10.0/24 is equal to the network 192.168.10.0 with a 255.255.255.0 subnet mask. (i.e If user converts 255.255.255.0 to binary, it results in 24 consecutive 1's).

Other examples are: IP 192.168.0.0, netmask 255.255.0.0 is written as 192.168.0.0/16 IP 192.168.0.0 netmask 255.255.248.0 is written as 192.168.0.0/21

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 121 CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

Configure network To configure Network Summary in the D400: summary procedure 1. Log into the D400 Utilities page. Result: The D400#>> command prompt appears. 2. Type d400cfg and press Enter. Result: The Gateway Configuration Utility Menu appears. 3. Select option 3. Configure Network Interfaces. 4. Select option 6. Networking Summary. Result: The available network subnet details appear: 1 172.12.232.25/24 Net1 Maintenance Internal 2. 1.5.4.3/16 vlan33@Net1 Active Internal

Configure secure access

SECURITY NOTICE: HTTP, FTP and TELNET services are considered unsecure. It is strongly recommended that the user employ secure services HTTPS, SFTP, and SSH. The Secure Access settings are described in Table 32. The SFTP, and SSH services are automatically configured by default. The HTTPS service is not enabled by default. It is the user's responsibility to install a server certificate and enable HTTPS. The user assumes all responsibility for associated security risks when enabling unsecured services (i.e., HTTP, FTP, and TELNET) onto an unprotected network. The Configure Secure Access menu allows you to configure the modes through which users can access the D400. Table 32: Secure access setting descriptions

Setting Description Current Configuration Use this function to view the current state of the D400 secure access settings. Configure SSH Service Use this function to enable or disable access to the D400 through the SSH protocol for Pass Through and Terminal Server Connections Configure SFTP Service Use this function to enable or disable access to the D400 through the Secure FTP protocol Note: When transferring files to and from the D400, you may receive file permission errors. Disable “permission change error reporting” in your file transfer utility to prevent these messages from appearing. Configure Web Mode Select the mode used to access the D400 web interface. That is, either: - Through an HTTP connection, or - Redirected to an HTTPS connection. Configure Emergency Access By default, the root user cannot access the D400 remotely. Instead, Ports this account can only be used to access the D400 locally through one of the configured emergency access ports. Configure TELNET Service Use this function to enable or disable access to the D400 through the TELNET protocol Configure FTP Service Use this function to enable or disable access to the D400 through the FTP protocol Note: When transferring files to and from the D400, you may receive file permission errors. Disable “permission change error reporting” in your file transfer utility to prevent these messages from appearing.

122 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

Setting Description Configure Remote HMI Non Use this command to enable or disable privileges for the Non Observer Privileges Observer users from the Remote HMI. It is necessary to reboot the D400 after configuring this parameter. If redundancy is configured, this parameter must also be configured in the Standby D400. Configure Rsyslog Service Use this command to enable or disable Remote Syslog service in the D400. Rsyslog service supports the following features: • Receiving of Syslog Messages through UDP. • Receiving of Syslog Messages through TCP. • Add or Delete Subnets/Hosts for receiving Syslog Messages. Note: The D400 Rsyslog service changes the firewall settings to allow messages/logs on the configured port numbers for UDP/TCP based connections. These rules update the Firewall rulesets once configured and rebooted. While choosing a different port number configured for either TCP/UDP based connections, ensure that no other application is using/running with the same port number in the D400. In the firewall configuration, it is the user's responsibility to connect Internal zone interfaces to networks that are protected from unauthorized use.

Configure Remote HMI Non Observer Privileges This feature prevents users with D400 operator and supervisor role (class) credentials from logging into the D400 from the Remote HMI and consequently prevents them from executing commands and other controllable actions (force, ACK alarms, etc.), or from changing configurations. When this feature is enabled, all Remote HMI users are granted the observer role (class) after successful login. There is no impact on users logged in through Local HMI. This feature is enabled or disabled using the Gateway Configuration Utility (d400cfg). For security reasons, only a super user or users with elevated admin class privileges in Linux d400cfg can update the configuration of this feature. When Redundancy is configured, this parameter must be enabled or disabled both in the Active D400 and the Standby D400 for proper operation. NOTE

Disable controls from To disable controls from Remote HMI: Remote HMI 1. Log into the D400 through maintenance port. procedure Result: The D400#>> command prompt appears. 2. Type d400cfg and press Enter. Result: The Gateway Configuration Utility Menu appears. 3. Select option 4. Configure Secure Access. Result: The Secure Access sub-menu appears. 4. Select option 8. Configure Remote HMI Non Observer Privileges. Result: The following message appears: Currently Remote HMI Non Observer privileges are Enabled. Do you want to disable Remote HMI Non Observer privileges [Y/N]?: 5. If you enter Y, then the controls from the Remote HMI are disabled. If you enter N, then the controls from the Remote HMI are not disabled. Result: The settings take effect.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 123 CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

Enable controls from To enable controls back from Remote HMI: Remote HMI 1. Log into the D400 through maintenance port. procedure Result: The D400#>> command prompt appears. 2. Type d400cfg and press Enter. Result: The Gateway Configuration Utility Menu appears. 3. Select option 4. Configure Secure Access. Result: The Secure Access sub-menu appears. 4. Select option 8. Configure Remote HMI Non Observer Privileges. Result: The following message appears: Currently Remote HMI Non Observer privileges are Disabled. Do you want to enable Remote HMI Non Observer privileges [Y/ N]?: 5. If you enter Y, then the controls from the Remote HMI are enabled. If you enter N, then the controls from the Remote HMI is not enabled. Result: The settings take effect.

Configure Rsyslog service The D400 can be configured to accept system logs from an IED or any substation equipment that can support the syslog remote logging feature. The D400 supports both TCP- and UDP-based remote connections to the IEDs on the standard port numbers. When configuring Rsyslog service in a redundant D400 setup: • Start configuring Rsyslog service in the Active D400 (see section: “Rsyslog service configuration procedure”). • Reboot the device. Rebooting the device initializes Rsyslog with the newly committed configuration. • Once Active D400 is back online, sync the configuration to the Standby D400 and reboot the Standby D400 as well. This ensures that both Active D400 and Standby D400 configurations and firewall settings are in sync. SECURITY NOTICE: The D400 Rsyslog service changes the firewall settings to allow messages/logs on the configured port numbers for UDP/TCP based connections. These rules update the Firewall rulesets once configured and rebooted. While choosing a different port number configured for either TCP/UDP based connections, ensure that no other application is using/running with the same port number in the D400. In the firewall configuration, it is the user's responsibility to connect Internal zone interfaces to networks that are protected from unauthorized use.

Rsyslog service To configure Rsyslog Service: configuration 1. Navigate to the Rsyslog Service configuration menu. procedure Choose option 4. Configure Secure Access > 9. Configure Rsyslog Service. Result: The Configure Rsyslog Service menu appears. 2. Choose option 1. Current Settings to view the current settings configured. 3. Return to the Configure Rsyslog Service menu. 4. Choose option 2. Configure Rx via UDP. Result: Receiving Messages via UDP - Settings menu appears. 5. Choose option 1. Enable/Disable Rsyslog Logging service By default syslog UDP uses the 514 port number. If this is to be changed, choose option 2. Edit UDP Port Number.

124 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

Before proceeding with this step, ensure that no other D400 applications/services are using the same port number. You can do this by manually checking the Connections NOTE tab of the D400 remote/local HMI. 6. Return to the Configure Rsyslog Service menu. 7. Choose option 3. Configure Rx via TCP. Result: The Receiving Messages via TCP - Settings menu appears. The configuration options are similar to UDP. 8. Return to the Configure Rsyslog Service menu. 9. Choose option 4. Configure Hosts/Subnets filters. Result: The Configure Hosts/Subnets filters menu appears. This setting allows the D400 Rsyslog service to bind to the subnet/Host address. By default, no binding filter rules are applied. That is, the D400 syslog application logs messages being pushed IEDs connected through all available D400's network interfaces. 10. Choose option 2. Add Hosts/Subnets to add Subnets and IP address of the Hosts/ IEDs. 11. Select the applicable interface from the list of available interfaces in the D400. If the particular subnet is missing in the list choose one of the Custom Filters options. Adding a subnet configures the D400 Rsyslog to log messages only being sent from the IED-IP addresses which are in range of the configured subnet. 12. Choose option 3. Delete Hosts/Subnets to delete any of the added addresses. 13. Choose option 1. Current Settings to view the current settings configured.

Configure firewall settings

The D400 contains a firewall capable of stateful packet inspection to protect your device from unauthorized access. By default, network interfaces on the D400 drop packets that are determined to be invalidly routed or unsolicited. SECURITY NOTICE: The D400 firewall is intended only to protect itself and does not extend protection to other devices on the network. As such, it does not replace the need for a network firewall which offers deep packet inspection and detailed configuration capabilities. The D400 firewall is automatically configured by default to its most secure setting. The user assumes all responsibility for associated security risks if the firewall configuration is manually changed. It is the user's responsibility to connect Internal zone interfaces to networks that are protected from unauthorized use. The D400 firewall is intended only to protect itself and does not extend protection to other devices on the network. As such, it does not replace the need for a network firewall which offers deep packet inspection and detailed configuration capabilities. Network interfaces can operate in one of two modes: • Internal The Internal mode permits traffic from known protocols and should only be enabled on interfaces connected to known devices only. The Internal mode is the default mode for Net1 and would typically be used when the interface is connected to the substation LAN. •External

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 125 CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

The External mode offers a stricter set of rules and is the default mode for all interfaces except Net 1. The External mode would typically be used when the interface is connected to a WAN. By default, the firewall allows outbound traffic on internal interfaces and blocks all outbound traffic except outbound SSH on external interfaces. If you want the firewall to allow outbound traffic for a particular protocol on an external interface you must create a “custom” rule. See section: “Add/Edit/Remove Custom Rules” on page 127. By default, the firewall blocks inbound traffic on both internal and external interfaces. The D400 automatically generates rules allowing inbound traffic on internal interfaces for all configured services. If you want the firewall to allow inbound traffic on an external interface, you may modify the associated “generated” rule to allow the traffic on ALL interfaces rather than only the “Internal” interface. See section: “Add/Edit/Remove Custom Rules” on page 127. Table 33: Service traffic through the firewall

Service Name Notes External Mode Internal Mode Modbus/TCP Server (Inbound) Deny Allow DNP/UDP Server (Inbound) Deny Allow DNP/TCP Server (Inbound) Deny Allow DNP/TCP Client (Inbound) Dual Endpoint Enabled Deny Allow DNP/UDP Client (Inbound) Deny Allow IEC 60870-5-104 Server (Inbound) Deny Allow Terminal Server (Inbound) SSL/TLS Disabled Deny Allow DCA Pass-Through (Inbound) SSL/TLS Disabled Deny Allow Secure Connection Relay (Inbound) Allow Allow Secure DCA Pass-Through (Inbound) SSL/TLS Enabled Allow Allow Secure Terminal Server (Inbound) SSL/TLS Enabled Allow Allow SNMP Client (Inbound) Deny Allow LogicLinx Executor (Inbound) Deny Allow HTTP (Inbound) When enabled in d400cfg Deny Allow HTTPS (Inbound) When enabled in d400cfg, Deny Allow see note below DHCP Client (Inbound) When enabled in d400cfg Deny Allow Telnet Server (Inbound) When enabled in d400cfg Deny Allow FTP Client/Server (Active & Passive, When enabled in d400cfg Deny Allow Inbound) SSH/SFTP/SCP Server (Inbound) When enabled in d400cfg, Deny Allow see note below TFTP Client (Inbound) When enabled in d400cfg Deny Allow NTP Client (Inbound) When enabled in d400cfg Deny Allow NTP Server (Inbound) When enabled in d400cfg Deny Allow SSH/SFTP/SCP (Outbound) When enabled in d400cfg Allow Allow All other services (Outbound) Don't Care Deny Allow All other services (Inbound) Don't Care Deny Deny Note: By default, HTTPS and SSH do not provide strong client authentication since only a password is required to access the system. Therefore, these protocols are not considered secure enough for use over external interfaces. They can be considered secure if you employ a remote authentication server that provides two-factor authentication. In that case, you may opt to modify the firewall rule and allow HTTPS and SSH on external interfaces.

The default firewall rules should be sufficient for most users. However, you may create a set of custom rules if you desire more granular permissions for the protocols you are accessing.

126 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

Additional notes on the D400 firewall: • In a redundant setup, the same firewall rules above apply to both the active and standby device. • When the firewall is active, you cannot perform IP routing between an external and internal interface. The only way to pass through the firewall is by using a secure SSL/ TLS connection or the proxy. Configure the settings of the firewall through the Firewall menu. The Secure Access settings are described in Table 33. Table 34: Firewall setting descriptions

Setting Description Current Configuration Use this function to view the status of the firewall and the rules currently being enforced. Enable/Disable Firewall Use this function to turn the firewall feature on or off. By default, the firewall is enabled when the D400 is received from the factory. If you disable the firewall, incoming traffic is not filtered. Edit Generated Rules When the firewall is active, rules are generated for the services in use on your D400 based on the parameters specified in the table above. Use this option to modify these generated rules. Add/Edit/Remove Custom Use this option to create a custom firewall rule that is applied in Rules addition to the system generated rules.

Configure host names

The Configure Host Names menu allows you to assign a host name to your D400 and to view, add, and delete entries in the hosts file. The Host Name settings are described in Table 35. The D400 only allows you to enter IPV4 addresses.

NOTE Table 35: Host name setting descriptions

Setting Description Add a New Host Use this function to add a host name and IP address to the hosts file. Delete a Host Use this function to view a list of configured hosts. Select an item number to delete the associated host entry. Modify a Host Use this function to view a list of configured hosts. Select an item number to modify the associated host name and IP address. Press Enter to use the previously entered value. Delete All Hosts Use this function to remove all entries from the hosts file. View All Hosts Use this function to view a list of configured hosts.

Configure time and time synchronization

The Configure Time Synchronization menu allows you set the D400's internal date and time as well as modify options associated with time synchronization. The Time and Time Synchronization settings are described in Table 36.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 127 CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

Table 36: Time and Time Synchronization setting descriptions

Setting Description Show Time and Current Use this function to display the time, time zone, and synchronization Settings settings currently configured. Set System Clock Use this function to configure the current date and time of day. Note: The D400 system time is automatically set to the firmware build time whenever the D400 reboots and the system time is less than the firmware build time. Set Time Zone Use this function to enter the time zone of the D400. Note: The D400 uses the IEEE POSIX® standard for time zone naming. POSIX uses the time zone offset to get GMT from the local time (that is, GMT - local time) instead of the more common format (local time - GMT). For example, Eastern Standard Time in North America, which is 5 hours behind GMT, is listed as “GMT+5”, and not “GMT-5”. Time Sync Input Configures the D400 to use either IRIG-B or NTP to calibrate the system clock. • IRIG-B: Enter the IRIG-B format, options are TTL (pulse width code), Sine wave (amplitude modulated), and Manchester. Ensure SW2 of the IRIG-B Input Adapter is configured for the proper input type: Fiber Optic or TTL for TTL and Manchester, BNC for Sine wave. • NTP: Enter the IP address of the NTP server. The D400 verifies if the source is accessible by pinging the address. When configuring a D.20 RIO, refer to the D.20 RIO Hardware User's Manual (994-0141) section: Time Synchronization Strategies. Time Sync Output Use this function to configure the D400 to operate as an NTP time server.

Reset system logs

Use the Reset System Logs menu to clear various system logs that are stored in the D400. The Reset System Log settings are described in Table 37. Table 37: Reset System Log setting descriptions

Setting Description Check Size of Archived Logs Active system logs are automatically archived when they reach a size of 256 KB. Up to 10 archives are kept within the D400, with newer logs overwriting older stored logs. Check Size of Archived Logs lets you view the amount of disk space occupied by these archived log files. The value is shown in KB. Check Size of Current Use this function to view the amount of disk space occupied by the Application Logs current application logs. The value is shown in KB. Delete Archived Logs Use this function to permanently delete archived logs from the D400. Delete Current Logs Use this function to permanently delete current application logs from the D400.

128 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

Reset mSQL database tables

Modify tables in the mSQL database through the Reset mSQL Database Tables menu. The Reset System Log settings are described in Table 38. Use the DB Exporter tool on the Utilities page of the D400 HMI to save a backup of the mSQL database tables before deleting them. TIP Table 38: Reset mSQL database table setting descriptions

Setting Description Delete Digital Event Data Use this command to clear or delete the Digital Event Data from the mSQL database of the D400. • This action stops all running applications and permanently deletes entries from the digital events database. • If NVRAM based persistence is configured for SOE and Alarm records, also reset NVRAM using d400cfg. Delete Quality Records Use this command to clear or delete the Quality Data from the mSQL database of the D400. The quality status and quality attributes (also referred to as the quality flags) are stored in the D400 mSQL database along with the point or object, and are updated as the status or value of the point or object changes. Delete PRF Event Records Use this command to clear or delete the Protective Relay Faults (PRF) stored in the mSQL database of the D400. All PRF fields including the Event ID, Trip Description, Fault code etc. are deleted permanently from the mSQL database of the D400. Delete Operator Records Use this command to delete the operator notes that have been entered by users and stored in the mSQL database of the D400. Each Operator Note record entered in the mSQL database of the D400 contains a custom Note/Text message entered by an operator. This record also contains the last modified record date and time details. Delete Accumulator Records Use this command to clear or delete the Accumulator records from the mSQL database of the D400.

Reset NVRAM

You can reset the data being held in NVRAM through the Reset NVRAM menu.

Delete NVRAM Data Permanently delete data stored in the NVRAM of the D400. After you have reset the NVRAM, you must restart the processes running on the D400.

NOTE To restart the processes on the D400: 1. Exit the Gateway Configuration Utility. 2. Type go at the command line. 3. Press the Enter key.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 129 CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

Reset file persistence data

Use this command to reset the data being stored by the File Based Persistence application in the D400 mSQL database. This command permanently deletes data stored in the Persistence Files of the D400. After you have reset the data stored in the Persistence Files, you must restart the D400. It is advised to restart the File Based Persistence application when the d400cfg prompts for user action.

Configure local HMI

You can configure the settings of the local KVM monitor output through the Local HMI menu. The Local HMI settings are described in Table 39. Table 39: Local HMI setting descriptions

Setting Description Current Settings Use this command to view the existing Local HMI Settings. Desktop Mode Use this function to enable or disable “kiosk” mode. Kiosk mode displays the local HMI in a full screen rather than within a Window. Monitor Use this function to enter the horizontal and vertical refresh rates, in Hertz. Never exceed the maximum refresh rates of your monitor as damage may occur. Refer to the manual that came with your monitor for more information. DPMS Use this function to enable or disable DPMS (Display Power Management Signaling). These settings determine how much time must pass without user interaction before your monitor is put into a reduced power mode. A setting of “00” prevents the D400 from triggering the power mode. The following modes are available: • Stand-by: Monitor blanks but power supply remains on; screen restores in approximately one second when reactivated by keyboard or mouse input by user. • Suspend: Monitor power supply shuts off; screen restores in approximately 2-3 seconds. • Turned off: Monitor is fully powered down except for an auxiliary circuit to detect a wake-up signal; screen restores in approximately 8-10 seconds Note: Refer to the manual that came with your monitor for more information on how it receives and responds to DPMS signals. Screen Resolution Use this function to select one of three output resolutions: • 1280 x 1024 • 1024 x 786 • 800 x 600 Never exceed the maximum resolution of your monitor as damage may occur. Refer to the manual that came with your monitor for more information. Monitor Type Select the type of monitor: • Standard • EL0 1379L • Fanuc IMpact • eGalax Touch

130 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

Setting Description Volume Control Set the volume of the D400. Range: 0 to 100. To mute the D400, set the volume to 0. Standby Local HMI Use this command to enable or disable Standby Local HMI redirects (Redundancy) to the Active D400 feature. Note: This parameter must be configured in both D400s for proper operation. Java Cache Management Use this command to clear the Java cache in D400.

Standby local HMI redirects to the active D400 This feature applies to redundant D400 units, where both D400s are equipped with a Local HMI (KVM card). When this feature is enabled, it is recommended to enable auto-login and configure Local HMI in KIOSK mode in both the redundant D400 units. If the D400 units are configured in non-redundant configuration, this feature is not applicable. This feature allows a user to interact with the Local HMI of the active D400 using KVMs of both D400s at the same time, allowing two separate Local HMIs to show data from the same active D400. When auto-login is enabled, the Local HMI screens of redundant D400s display default pages as per their designation (Gateway_A or Gateway_B) and the configured Local UI Main Page for Gateway_A / Gateway_B. This allows the Local HMI screen of a D400 to display same UI page, regardless of its active or standby state. Table 40: Redundant D400 display default pages

D400 Designation Default UI Page as per Parameter GatewayA Local UI Main Page for GatewayA (D400) GatewayB Local UI Main Page for GatewayB (D400)

These parameters can be configured using D400 Configuration GUI > Systemwide > Runtime GUI > Global configuration tab. Refer to D400 Software Configuration Guide for details. • The Standby HMI redirects to Active D400 parameter must be enabled or disabled both in Active and Standby D400s for proper operation. NOTE • When auto-login is not enabled, the Local HMI screens of redundant D400s display the configured User Home page in the User Management tab. Refer to the D400 Software Configuration Guide for details. • Standby Local HMI redirecting to Active D400 depends on the configured peer D400 IP addresses and Keys transferred to the peer D400, but is independent of the heartbeat communications options. • The Local HMI on the Standby D400 behaves same as Local HMI on the Active D400 for all access purposes. As a result, the “Configure Remote HMI Non Observer Privileges” feature does not take effect on the StandbyD400. • The Utilities Login feature to login to the Standby D400 only though the Local HMI is redirected to the Active D400. • The Export Database feature in D400 Utilities downloads the database into the USB mounted on the Standby D400. • The Export Database CSV Files feature in D400 Utilities stores the files on the Standby D400.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 131 CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

Enable standby local To enable Standby Local HMI redirects to Active D400: HMI redirects to active 1. Log into the D400 Utilities page. D400 procedure Result: The D400#>> command prompt appears. 2. Type d400cfg and press Enter. Result: The Gateway Configuration Utility Menu appears. 3. Select option 12. Local HMI. Result: The Local HMI sub-menu appears. 4. Select option 8. Standby Local HMI (Redundancy). Result: The following prompt appears: IMPORTANT! * Currently Redundancy configuration is Disabled. * Active Gateway Access from Standby Local HMI configuration is applicable only when Redundancy is Enabled. * Number of simultaneous users must be a minimum of 2 for the configured user role in both Gateways, which can be configured from HMI (Configuration > Systemwide > AccessManager) menu.

Currently Active Gateway Access from Standby Local HMI is Disabled. Are you sure you want to Enable Active Gateway Access from Standby Local HMI [Y/N]?: 5. If you enter Y, then this feature is enabled. If you enter N, then this feature is not enabled.

Disable standby local To disable Standby Local HMI redirects to Active D400: HMI redirects to active 1. Log into the D400 Utilities page. D400 procedure Result: The D400#>> command prompt appears. 2. Type d400cfg and press Enter. Result: The Gateway Configuration Utility Menu appears. 3. Select option 12. Local HMI. Result: The Local HMI sub-menu appears. 4. Select option 8. Standby Local HMI (Redundancy). Result: The following prompt appears: Currently Active Gateway Access from Standby Local HMI is Enabled. Are you sure you want to Disable Active D400 Access from Standby Local HMI [Y/N]?: 5. If you enter Y, then this feature is disabled. If you enter N, then this feature is not disabled.

132 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

Configure sync manager

The Configure Sync Manager utility can be used to securely copy files from a location on your D400 device to a specified directory on a remote device. The utility monitors the specified local directory for changed or added files. To reduce bandwidth demands on your network, only files found to have been changed or created since the last synchronization are transferred. This utility employs the Linux-based rsnyc/ftp/sftp command to perform this function. You can configure the settings of the Sync Manager through the Sync Manager menu. The Sync Manager settings are described in Table 41. Reboot the D400 after the Sync manager configuration is complete. Table 41: Sync Manager setting descriptions

Setting Description Enable Sync Manager Use this command to enable the Sync Manager application. This command deletes the old pair of Public-Private Keys and generates a new pair of Public-Private Keys. The existing/newly generated keys are available at: /mnt/datalog/SSHKeys/SyncMgr/id_rsa. This command provides an option to configure the “sync set” through the rsnyc, ftp, and sftp features. Rsync is a software utility and network protocol for Unix-like systems (with a port to ) that synchronizes files and directories between one location and another location while minimizing data transfer. It also includes the option to provide encrypted transfer by using the SSH. FTP (File Transfer Protocol) is a popular method of transferring files between two remote systems. SFTP (Secure File Transfer Protocol) is a separate protocol packaged with SSH that works in a similar way over a secure connection. Generate SSH Files from the D400 are securely copied to the remote device over an SSH Authentication Keys connection. To facilitate authentication on this link, a private/public key pair must be generated and transferred to the remote device. When a key set is generated, the files are stored in /mnt/datalog/ SSHKeys/SyncMgr/. You should copy the public key file (id_rsa.pub) from this location and store it in the appropriate location on the remote device. Refer to the user documentation provided with your remote device to determine where this location is. Do not remove the private key from this location since the Sync Manager will not be able to establish a secure connection. You must copy the public key (or host fingerprint) from any remote device you are connecting to into the /mnt/datalog/SSHKeys/SyncMgr/ known_hosts/ folder on your D400. This file likely has a “.pub” extension; refer to the user documentation provided with your remote device to determine where the key can be obtained. These keys are used with either rsync or sftp server for authentication. Configure Sync Sets Up to 8 sync sets can be created at any time. Table 42 lists the settings can be configured for each set:

Table 42: Settings for each sync set

Setting Description Range Configure Server File transfer to Enterprise server from D400 Rsync, ftp, or sftp occurs on selected Protocol Sync Set ID A unique number used by the system to Auto-incremented from 1. Once identify the sync set. Not editable; a number has been assigned, it automatically assigned. is never reused. Destination IP The IP address of the remote device where Valid IPv4 address Address the files are to be copied.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 133 CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

Setting Description Range Destination User The username used for SSH authentication 1 to 128 ASCII characters Name on the remote system. Password The password required for establishing a Text string; 1 to 22 characters session on FTP. Alphabetic letters, numbers 0 to This is not applicable to rsync and sftp 9, and special characters are protocols. allowed Source Path Name The absolute directory pathname that is 2 to 120 ASCII characters synched to the remote device. pointing to a valid location on the D400 file system Destination Path The absolute directory pathname that the 2 to 120 ASCII characters Name files are to be copied to pointing to a valid location on the remote device's file system Check and sync The amount of time, in seconds, that the 60 to 86400 seconds Interval Sync Manager waits before checking the source path for changes. If changed or created files are detected, an rsync/ftp/sftp operation is triggered. Forced sync Interval The amount of time, in seconds, that the 60 to 86400 seconds Sync Manager waits before a forced sync operation is triggered, regardless of detected changes. If rsync is configured, then forced sync recreates files that have been deleted from the remote device as well as forcing the transfer of files whose changes may not have been detected due to MD5 collision, an extremely rare occurrence.

Table 43: Sync Set Example 1

Field Value Configure Server rsync Sync Set ID 1 Destination IP Address 192.168.1.1 Destination User Name admin Password xxxxxx Source Path Name /mnt/datalog/arrm Destination Path Name /cygdrive/c/Stations_Data Check and sync Interval 60 Forced sync Interval 60

134 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

Table 44: Sync Set Example 2

Field Value Configure Server rsync Sync Set ID 2 Destination IP Address 192.168.1.2 Destination User Name admin Password xxxxxx Source Path Name /mnt/datalog/arrm Destination Path Name /cygdrive/c/Stations_Data/GW/Station_1/ D400_Name_1%D400_DESIGNATION Where %D400_DESIGNATION is the place holder for the D400 Designation; i.e., _A or _B. For the above example, the destination path is: For GatewayA: /cygdrive/c/Stations_Data/GW/Station_1/D400_Name_1_A For GatewayB: /cygdrive/c/Stations_Data/GW/Station_1/D400_Name_1_B Check and sync Interval 60 Forced sync Interval 60

Table 45: Sync Set Example 3

Field Value Configure Server rsync Sync Set ID 3 Destination IP Address 192.168.1.3 Destination User Name admin Password xxxxxx Source Path Name /mnt/datalog/arrm Destination Path Name /cygdrive/c/Stations_Data/GW/[Station_1,Station_2,Station_3]/ D400_Name_1%D400_DESIGNATION Where %D400_DESIGNATION is the place holder for the D400 Designation; i.e., _A or _B. For the above example, the destination path is: For GatewayA: /cygdrive/c/Stations_Data/GW/[Station_1,Station_2,Station_3]/ D400_Name_1_A For GatewayB: /cygdrive/c/Stations_Data/GW/[Station_1,Station_2,Station_3]/ D400_Name_1_B Check and sync Interval 60 Forced sync Interval 60

The Sync Manager only copies files to the remote device. Files are not deleted from the remote device if they are deleted from the D400 after synchronization. Instead, they are NOTE recreated during the next sync operation. A forced sync is performed upon each startup of your D400 device. The D400 Designation Place holder %D400_DESIGNATION is only to be used with redundant D400s. In the configured Syncset, ensure that the total text string length does not exceed 200 characters for the Source Path and Destination Path fields.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 135 CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

Redundancy

If you are configuring your D400 for use within a redundant setup, you can configure redundancy application settings through the Redundancy menu. The Redundancy settings are described in Table 46. Table 46: Redundancy setting descriptions

Setting Description Current Configuration Use this command to view the current redundancy configuration. Enable/Disable Redundancy Use this function to enable or disable redundancy functionality within the D400.

Redundancy Type The available types of redundancy that can be configured are: • Warm Standby • Hot Standby (Default) Note: This configuration parameter must be set to the same value on both D400s. Heart Beat Configuration Configure Heart Beat Timeout The interval within which the D400 must receive at least one message or heartbeat from the other D400. The valid range is 100 to 1000 msec; the default is 300 msec. Note: This configuration parameter must be set to the same value on both D400s.

Configure heart Beat retries Use this function to set the number of times the D400 re-transmits a heartbeat message before assuming that the other D400 has failed. The valid range is 1 to 10; the default is 3. Note: This configuration parameter must be set to the same value on both D400s.

Configure Heart Beat Communication Mechanism through Hot standby Select the heartbeat communication option: 1. Single LAN (Default) 2. LAN1 and LAN2 3. LAN and Serial 4. LAN1, LAN2 and Serial

Configure Heart Beat Communication Mechanism through Warm standby Select the heartbeat communication option: 1. Serial Only 2. Single LAN 3. LAN1 and LAN2 4. LAN and Serial 5. LAN1, LAN2 and Serial In both Hot Standby and Warm Standby redundancy, the heartbeat communication option includes serial and LAN. Note: This configuration parameter must be set to the same value on both D400s Note: If the heartbeat communication option includes a serial link, then a primary and an optional backup serial port must be configured on the Connection configuration page of online HMI.

136 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

Setting Description Configure IP Address of PEER Use this function to set the unique IP address of the other D400 Gateway device configured within the redundant system. If the PEER D400 has a second Ethernet interface, you can configure it as well. The maintenance IP addresses of the PEER D400 must be entered here (see the Ethernet Connections topic in the D400 online help. Username of PEER Gateway Use this function to enter the username of an administrator user account on the PEER D400 unit (see Administrator Group Users). This parameter value should be the same on both D400 units. This setting is used in conjunction with the authentication mechanism defined in section: “Configure authentication” on page 117. Note: Both D400s must be configured with the same authentication mode (i.e., either Local or Remote). The peer username should be reconfigured when the authentication mode changes from local to remote and vice versa. Configure Time Sync with Use this function to enable or disable time synchronization of the Standby standby D400 from the active D400. This option should be enabled only if the standby D400 does not have an IRIG-B or NTP/SNTP based time synchronization mechanism. Note: This configuration parameter must be set to the same value on both D400s. Configure Enable/disable DTAs Use this function to enable DTA applications to run normally on the in Standby standby D400. If set to False, DTA applications suspend processing on the standby D400. This setting is applicable to LogicLinx, Calculator, and Load Shed DTAs only. Note: This configuration parameter must be set to the same value on both D400s. Configure Gateway A/B Use this function to configure the A/B designation of the D400. Designation This parameter is only used if a switch panel is not configured. If a switch panel is configured, the Gateway A/B Designation is read from the switch panel and this parameter is not used. Configure Switch Panel Type Use this function to configure the type of switch panel: • MASTER: A change-over can be initiated from the switch panel. The switch panel is also used to route serial connections to the active unit. • SLAVE: The switch panel is only used to route serial connections to the active unit. Note: This parameter is only applicable to Hot Standby Redundancy. This parameter is only used, if switch panel is configured (see section Redundancy Switch Panel). In Warm Standby redundancy mode, this parameter is ignored since the switch panel is always MASTER. Note: This configuration parameter must be set to the same value on both D400s. Enable/Disable Non-sync If Non-Sync mode is disabled, then the standby D400 does not enter Mode into non-sync mode at startup, even if the firmware or configurations are not the same on both D400s (see the Non-Sync Mode topic in the D400 online help). Note: This configuration parameter must be set to the same value on both D400s.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 137 CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

Power supply

The D400 provides a hard wired power supply failure alarm circuit as well as power supply failure pseudo points through the system status manager. By default, the power supply failure alarm is triggered whenever one or both supplies fail (single PSU alarm mode). However, you can configure the D400 to only trigger an alarm when both supplies have failed (redundant PSU alarm mode). The Power Supply settings are described in Table 47. Table 47: Power supply setting descriptions

Setting Description Configure Power Supply Use this function to display the power fail alarm mode that is Failure Alarm Mode configured. You then have the option of switching to the alternate alarm mode (see Table 48) for the Power Supply Unit (PSU). Note: You must have FPGA version 2.0 or greater installed for this feature to work. To check the FPGA version, enter dmesg -s 16392 | grep -i FPGA at the D400#>> command prompt and search for FPGA in the output.

Table 48: Power supply operation - alternate alarm modes

Power Supply Unit Operation Alarm Mode Redundant PSU Single PSU Both supplies failed Alarm triggered Alarm triggered Single supply failed Alarm triggered No alarm Both supplies operating No alarm No alarm

Automatic Record Retrieval Manager

From the ARRM menu, you can configure the Automated Record Retrieval Manager (ARRM) which retrieves and stores record files from devices connected to the D400. For example, the SELBinary DCA application retrieves and archives the Event Log files from the SEL IEDs/ numerical relays. The Automated Record Retrieval Manager settings are described in Table 49. ARRM uses the Distributed Network Protocol (DNP), MODBUS, SELBIN, GENASCII and the IEC 61850 protocol to communicate with a variety of devices and uses the Trivial File Transfer Protocol (TFTP), File Transfer Protocol (FTP), Secure File Transport Protocol (SFTP), MMS or ASCII (for SEL devices) to archive the files from the IED to the device over a local area network (LAN) or serial connection. Retrieved files are stored on the D400 file system in the folder /mnt/datalog/arrm/ with the structure Company > Station > Device. Table 49: Automated Record Retrieval Manager setting descriptions

Setting Description Delete Records You can use the ARRM menu to delete the contents of these folder structures, as well as temp and cache files, while leaving the directory structure intact for future downloads. You can also retrieve downloaded records from the D400 using any FTP/SCP/SFTP client as needed or on a scheduled basis

138 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

Figure 56: ARRM connections

Suppress Forced Qualities To Masters

From the Suppress Forced Qualities To Masters menu, you can suppress forced qualities being reported to the IEC101-104 Master for a configured duration of time. When a master is configured in this mode: • All of the values with Forced/Substituted flags are communicated to the Master as value changes only. • All other flags are still communicated normally. Only elevated users (that is, administrator users with root access privileges) can execute this functionality. Re-starting the processes has no impact on the functionality. This functionality is canceled (and the forced qualities are reported back to the master): • Upon time expiration, or • When the D400 is rebooted.

Emulate D20 RTU IEC101 DPA Unbalanced Mode

This option emulates IEC 101 DPA Unbalanced Mode functionality similar like D20RTU. So, when this option is set to TRUE then: 1. DI spontaneous events are allowed and AI/Counters are suppressed during General Interrogation(GI) of IEC101 DPA from the IEC 101 Master. 2. IEC101 DPA will follow IEC610870-5 Ed1 ‘s behavior for Class1 polling i.e. sends Class1 data only when Master specifically asks the same.

Suppress IEC101+104 DPA Startup Quality Events

This option suppresses Quality events during startup. The default value is 0 Seconds( i.e. Suppress startup Quality events are disabled) and the maximum value is 600 seconds.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 139 CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

Restore factory default

A root user or a super (“sudo”) user can restore a D400 to the factory default (or “clean”) configuration. After this command is initiated (prior to restoration), you are prompted to make a backup copy of the current configuration onto a USB key.

Configure D.20 Client DO Poll Frequency

This option enables periodic DO polling from the D.20 Network Client to D.20 RIO. The default value is 0 secs and the maximum value is 36000 secs.

Reboot Device

This option reboots the Gateway (D400).

Configuring a Linux-based Enterprise Server

SSH Server Almost all Linux distributions typically come with an SSH server pre-installed on them.

Rsync utility The rsync package is open-source software that enables the rsync utility on a Linux-based computer. The rsync utility/software synchronizes files and directories from one location to another while minimizing data transfer using delta encoding when appropriate. An important feature of rsync not found in most similar programs/protocols is that the mirroring takes place with only one transmission in each direction. Since rsync does not provide any security while transferring data it is recommended that you use rsync over an SSH session. This allows a secure remote connection.

Installation steps Use any one of the following commands to install rsync. If you are using Debian or Ubuntu Linux, type the following command: # apt-get install rsync or $ sudo apt-get install rsync If you are using Red Hat Enterprise Linux (RHEL) / CentOS 4.x or older version, type the following command: # up2date rsync

140 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

If you are a RHEL / CentOS 5.x or newer (or Fedora Linux) user, type the following command: # yum install rsync Since rsync does not provide any security while transferring data it is recommended that you use rsync over ssh session. This allows a secure remote connection. NOTE

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 141 CHAPTER 9: USING THE LOCAL GATEWAY CONFIGURATION UTILITY

142 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL D400 Substation Gateway

Chapter 10: Servicing the D400

Servicing the D400 The D400 does not require any scheduled maintenance. However, you may need to replace the following parts occasionally: • System battery • CompactFlash card A periodic inspection is also suggested to ensure that: • Unit has sustained no accidental physical damage • Airflow is not obstructed • Connectors and cables are intact and firmly attached • Battery condition is good Only trained personnel should perform maintenance on the D400.

Removing the D400 main module

You need to remove the D400 main module from the chassis to access the system battery and the main CompactFlash card for maintenance. Figure 57: D400 Main Module

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 143 CHAPTER 10: SERVICING THE D400

To remove and re- 1. Power down the D400. insert the D400 main 2. Hand-loosen the two thumb screws on the front panel of the D400 main module. module 3. Grasping the two handles, pull out the D400 main module. 4. Make the necessary changes. 5. Slide the main module back into the chassis. Push firmly to ensure the connectors at the rear of the main board are fully seated. 6. While pressing the main module panel against the chassis frame, hand-tighten the two thumb screws (applying a torque of no more than 5.8 in-lb [0.66 Nm]) on the front panel. 7. Power up the D400 and verify that the Power LED is illuminated.

Replacing the battery

The lithium battery maintains power to the D400's NVRAM if there is a power disconnect. The D400 is supplied with a 1/2AA 3.6 V 0.9 Ah Lithium battery that you must insert on the D400 main board when the D400 is installed. To ensure the battery is good, it is recommended you check the battery voltage before installation and replace the battery every five years. You can access the battery compartment by removing the D400 main module from the chassis. The battery holder BT1 is located near the front corner of the board, behind the two rows of Serial Port Status LEDs. Figure 58: D400 Battery Location

BT1

144 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 10: SERVICING THE D400

Before you remove the battery…

Note the following items before you begin battery replacement: • Disconnect power to the D400 before changing the battery. • Avoid exposure to high temperatures, such as soldering or spot-welding • Avoid excessive force to terminals • Use extreme caution and proper procedures for servicing electrostatically sensitive components. Electrostatically-sensitive components are located near the battery. Removing the battery causes the internal clock to reset and the non-volatile RAM to be erased. NOTE

Supported battery types The D400 is supplied with a 1/2AA 3.6 V 0.9 Ah Lithium Thionyl Chloride non-rechargeable battery (GE Item No. 980-0038). The following battery types may be used as a replacement. Table 50: Supported Battery Types

Manufacturer Manufacturer part number. Tadiran® TL-2150 Tadiran TL-4902 Tadiran TL-5101 Tadiran TL-5902 Toshiba® ER3V Toshiba ER4V Saft® LS-14250 Saft LS-14250C Sonnenschein® SL-350 Sonnenschein SL-750 Maxell® ER3 XENO Energy XL-050F

To insert or replace the D400 battery

Ensure that all hazardous live circuits are isolated or disconnected before attempting battery replacement.

1. Power down the D400. 2. Remove the D400 main module from the chassis. See “Removing the D400 main module” on page 143. 3. Using a plastic or other non-conductive tool, pry the black plastic clip holding the battery cover away from the battery holder BT1. When free, the battery and clip can be removed together. 4. Remove the cover from the battery holder and keep it. 5. Place the new battery into the battery holder, ensuring polarity is correct. 6. Replace the cover and press down until the clips click into the retaining notches of the battery holder. 7. Replace the D400 main module. 8. Power up the D400 and verify that the Power LED is illuminated.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 145 CHAPTER 10: SERVICING THE D400

Checking voltage To check battery voltage, use a meter or other measuring device that has a high input impedance (10 Mohm or higher).

Cleaning and handling Lithium batteries • Wear gloves or finger caps when handling batteries to keep them clean. • Use non-conductive cleaning solution to prevent deterioration of battery performance • Dry batteries at a temperature below 85 °C to prevent seal deterioration that may, in turn, result in leakage

Recycling of batteries The D400 Lithium battery is recyclable and does not contain mercury, cadmium, or lead in levels above those regulated by the European Union. Recycle the battery according to local waste management regulations. In accordance with European Directive 2006/66/EC, batteries are marked with the crossed out wheeled bin, which indicates that they cannot be disposed of as unsorted municipal waste in the European Union. Users of batteries must use the collection points available to customers for the return, recycling, and treatment of batteries. Customer participation is important to minimize the negative effects of batteries to the environment and sustain available natural resources. For more information see www.weeerohsinfo.com.

Battery life If the battery is disconnected, or if the D400 is never powered down, the life of the battery should exceed five years. The life of the battery is severely shortened if the battery is left connected while the D400 is powered down for extended periods or stored. For long-term storage: • Remove the battery • Keep the equipment at temperatures and humidity below normal • Avoid shorting or loading while stored

146 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 10: SERVICING THE D400

Dual Ethernet upgrade kit with card 580-3410

The D400 Dual Ethernet Upgrade Kit allows you to upgrade your existing D400 device to support dual Ethernet network connections. This upgrade kit contains the following components: • PC/104-PLUS 10/100/1000BASE-TX Dual Ethernet card (GE part number 580-3410) • Ethernet card to main board cable assemblies (GE part numbers 977-0544 and 977- 0549) • Phillips screws (4 pieces) • Hexagonal standoffs (4 pieces) • Hexagonal nuts (4 pieces)

Valid combinations This upgrade can be performed using the following components:

D400 Main Board Ethernet Module Card Network Cards GE part # 520-0205LF [1.0 GHz] GE part # 580-3410 GE part # 520-0218LF [NET1 slot] GE part # 520-0232LF [1.6 GHz] GE part # 520-0213LF [NET2 slot] GE part # 520-0214LF [NET2 slot] GE part # 520-0215LF [NET2 slot] GE part # 520-0218LF [NET2 slot]* * This configuration is only supported with firmware v5.01 configured for PRP.

Perform this procedure on an ESD-safe surface to prevent damage to the D400 device and its components.

Installing the 580-3410 dual Ethernet card The 580-3410 dual Ethernet card only works in conjunction with the 1.0 GHz or 1.6 GHz CPU. NOTE To install the Dual Ethernet Upgrade Kit: 1. Power down your D400 device. 2. Remove the D400 main module from the chassis. See “Removing the D400 main module” on page 143. 3. Locate the four mounting holes in the D400 main module PCB board noted below. Attach the hexagonal standoffs to the top of the main board and secure the standoffs using the four provided hexagonal nuts.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 147 CHAPTER 10: SERVICING THE D400

Figure 59: Dual Ethernet upgrade kit - four mounting holes

4. Plug the first provided cable assembly (GE part number 977-0544) into connector LAN2 and LED2 on PC/104 card and connector P3 on the main board. 5. Plug the second provided cable assembly (GE part number 975-0549) into connector LAN1 and LED1 on PC/104 card and connector J7 on the main board. 6. Confirm all shunts on: JP1 are in position 2-3; JP2 are not installed; JP3 are in position 1-2; JP4 are not installed. Figure 60 shows the shunt positions on the 580-3410 card. Figure 60: Dual Ethernet upgrade card 580-3410 - jumper settings

148 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 10: SERVICING THE D400

The proper orientation of the LED1/2 connector is for the polarity tab keying feature to be facing out towards the card edge), and for the LAN1/2 connector polarity tab NOTE keying feature to be facing in from the card edge. 7. Attach the Ethernet Module card to the expansion slot and secure using the four provided Philips screws. Figure 61: Dual Ethernet upgrade kit with card 580-3410 - attach Ethernet module card

8. Re-insert the D400 main module. 9. Power up the D400 and configure the network connections as required using d400cfg . Refer to chapter: “Using the Local Gateway Configuration Utility” on page 113 for more information.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 149 CHAPTER 10: SERVICING THE D400

Changing the CompactFlash

CompactFlash cards are designed with flash technology, a non-volatile storage solution that can retain data indefinitely without a battery. The cards are solid state, meaning they contain no moving parts, and provide much greater protection of data than conventional magnetic disk drives. The D400 contains two CompactFlash cards on the main board to store software and data: • Main CompactFlash card located at connector P2 stores system firmware • User CompactFlash card located at connector P1 is accessible from the front panel and stores system data such as event logs and configuration files. As per NERC/CIP guidelines, equipment shall be protected from unauthorized access using strong physical security measures such as placing the equipment in a locked cabinet inside an access controlled site. Strong physical security is required because the User CompactFlash card, which is accessible from the front panel, contains your configuration data and other sensitive information. In addition, ensure that in-transit or in-storage User CompactFlash cards containing field data are handled with strong security supervision at all times.

650 MHz and 1.0 GHz Use the following Industrial Temp CompactFlash cards for 650 MHz and 1.0 GHz D400 D400 main main processors: processors? • GE part number: 160-0125 (1 GB Industrial Temp CompactFlash) for the Main or User CompactFlash. (Used on 520-0204/520-0205/520-0205LF/520-0232LF main boards) • GE part number: 160-0124 (16 GB Industrial Temp CompactFlash) for the User CompactFlash CompactFlash cards from a D400 1.0 GHz main board are not compatible with a D400 1.6 GHz main board, D400 1.0 GHz CompactFlash cards can be identified by the absence of “1.6GHz+” text on the CompactFlash label.

1.6 GHz D400 main Use the following Industrial Temp CompactFlash cards for the 1.6 GHz D400 main processor processor: • GE part number: 160-0141 (1 GB Industrial Temp CompactFlash, DMA Access) for the Main or User CompactFlash (Used on 520-0232LF - RoHS compliant main board) • GE part number: 160-0142 (16 GB Industrial Temp CompactFlash, DMA Access) for the User CompactFlash (Used on 520-0232LF - RoHS compliant main board) CompactFlash cards from a D400 1.6 GHz main module are not compatible with a D400 1.0 GHz main module. D400 1.6 GHz CompactFlash cards can be identified by the “1.6GHz+” text on the CompactFlash label.

To change the Main 1. Power down the D400. CompactFlash card 2. Remove the D400 main module from the chassis. See “Removing the D400 main module” on page 143. If your D400 contains the Redundant Twisted-Pair Ethernet + COM2 Port Adapter: 2.1. Unscrew the four Philips screws attaching the PC/104-Plus Ethernet Module card to the expansion slot. 2.2. Lift the card straight up to detach and move it aside. Do not disconnect the ribbon cable from the main module.

150 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 10: SERVICING THE D400

3. At connector P2, press the Eject button to eject the CompactFlash card. 4. Insert the new CompactFlash card. – Reattach the Ethernet Module to the expansion slot and replace the four screws. 5. Replace the D400 main module. 6. Power up the D400. Figure 62: Replace the main CompactFlash card

PC/104-Plus Ethernet Module

Eject button

Connector P2

To change the User 1. Power down the D400. CompactFlash card 2. Using a Phillips Screwdriver, remove the screws from the CompactFlash slot cover located on the front panel of the D400 main module. 3. Press the Eject button to eject the CompactFlash card. 4. Insert the new CompactFlash card into the slot. 5. Replace the CompactFlash slot cover and secure it with the screws. 6. Power up the D400. Figure 63: Change the user CompactFlash card

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 151 CHAPTER 10: SERVICING THE D400

Replacing the power supply

The D400 may contain one or two power supplies (AC-DC and/or DC/DC) in the power supply slots. The D400 may be supplied with an optional redundant power supply (in Slot 2) to provide dual hot swappable power supplies. The power supply module is accessible and easily replaced from the D400 front panel. If the D400 contains dual power supplies, you can replace one power supply unit without having to power down the D400, as long as the other power supply unit is operational. The D400 power supplies do not contain user replaceable fuses. The entire power supply module must be replaced if the fuse has failed. NOTE Figure 64: D400 Power Supply Unit

Power Supply Slot 1 Power Supply Slot 2

Before You Remove Note the following items before you begin power supply replacement. the Power Supply… • Ensure the other power supply unit (if available) is functioning (the green Power LED is illuminated) to ensure that the D400 doesn’t power down during replacement. • Make sure that the unit is wired in accordance with “Power connections” on page 82.

Dangerous voltages may be present after the power supply chassis has been removed from the D400. Wait 10 seconds for stored energy to dissipate.

152 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 10: SERVICING THE D400

To replace D400 1. If only a single power supply unit is installed (in Slot 1), power down the D400. If dual power supply units power supplies are installed (in Slot 1 and Slot 2), ensure that the secondary unit is functioning. 2. Hand-loosen the two thumb screws on the front panel of the power supply unit. 3. Pulling on the handle, slide the power supply unit out of the chassis. 4. Slide the new power supply unit into the chassis. 5. While pressing the power supply module panel against the chassis frame, hand- tighten the two thumb screws (applying a torque of no more than 5.8 in-lb [0.66 Nm]) on the front panel. 6. Verify that the Power LED is illuminated on the replaced power supply unit.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 153 CHAPTER 10: SERVICING THE D400

154 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL D400 Substation Gateway

Chapter 11: Removing the D400 from Service

Removing the D400 from Service When the D400 is to be removed from service, it is necessary to: • Remove the configuration data and sensitive information from: –The D400 – A PC used to remotely configure the D400 • Dispose of the equipment.

Service life

The expected service life of a D400 is 20 years when the environment and electrical conditions are within stated specifications.

Remove configuration data and sensitive information from the D400

In the event that it is necessary to remove the configuration data and sensitive information from the D400 (for example, the D400 is being disposed of or being returned for maintenance [i.e., RMA]), this chapter provides the data removal procedure. To remove configuration data and sensitive information from the D400: 1. Remove the D400 compact flash card. 2. Destroy the compact flash card in order to prevent access to the user flash card content. GE recommends that you destroy the device (i.e., shred, disintegrate, pulverize, or incinerate by burning the device in a licensed incinerator) as per Draft NIST Special Publication 800-88 Revision 1, Guidelines for Media Sanitization, Recommendations of the National Institute of Standards and Technology: (http://csrc.nist.gov/publications/drafts/800-88-rev1/sp800_88_r1_draft.pdf).

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 155 CHAPTER 11: REMOVING THE D400 FROM SERVICE

The primary flash card contains other useful D400 information. The primary flash card can also be destroyed to prevent access to the device firmware.

Removing configuration data on a PC

When a PC application is used to configure the D400, configuration data resides on the data storage media (e.g., hard drives, memory cards, etc.) of the PC running the configuration application. The D400 configuration data can be removed from the PC by either: • Recommended: Physically removing and destroying the data storage media, or • Using a program to securely wipe (that is, completely erase) the data storage media (that is, not just reformat or remove the names of the files from the ).

Equipment disposal

To prevent non-intended use of the unit, remove the modules, dismantle the unit, and recycle the metal when possible. Other than the battery, there are no special requirements for disposal of the unit at the end its service life.

156 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL D400 Substation Gateway

Appendix A: Installing and Connecting DNP3 I/O Modules

Installing and Connecting DNP3 I/O Modules This Appendix describes how to install and connect DNP3 I/O modules, and connect to the D400. For more details on the DNP3 I/O module, refer to the 994-0085 Installation and Maintenance Guide.

Overall procedure to install and connect DNP3 I/O modules

To install and connect DNP3 I/O modules: 1. Configure the DNP3 I/O module from the D400 HMI. See section “D400 connection to DNP3 I/O modules” on page 69 for the procedure to configure the D400. 2. Physically locate and mount DNP3 I/O module in a 19 inch rack or cabinet. See section “Installing DNP3 I/O modules in a rack”. 3. Connect the DNP3 I/O module to site ground. See section “Connecting to protective ground” on page 158. 4. Interconnect the DNP3 I/O modules and connect power: – For low voltage DNP3 I/O, see section “Connecting DNP3 I/O modules (Low Voltage)” on page 160. – For high voltage DNP3 I/O where connection is made to an external power supply, see section “Connecting DNP3 I/O modules (High Voltage)” on page 162. 5. Turn power on to the module, and test it to make sure it is functioning properly. It is recommended that you complete the above procedure before connecting and testing your field wiring.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 157 APPENDIX A INSTALLING AND CONNECTING DNP3 I/O MODULES

Installing DNP3 I/O modules in a rack

Rack spacing When mounting multiple DNP3 I/O modules in a rack, or when mounting DNP3 I/O modules in a rack with other equipment, verify that there is at least one rack unit (RU) of space above and below the DNP03 I/O module to allow for cooling air flow and cable routing (1 RU = 1.75 inches or 44.5 mm).

Required clearances

The exterior dimensions of the DNP3 I/O module are:

Dimension Measurement Width 19 inches (483 mm) Height 5.25 inches (133.4 mm) Depth 2.5 inches (63.5 mm)

Allow about 14 inches (356 mm) of total cabinet depth, to provide clearance for cables and maintenance access.

Rack mounting procedure

To mount the DNP3 I/O module in a rack: 1. Determine the location of the DNP3 I/O module in a 19-inch mounting rack. 2. Install, but do not tighten the top two mounting screws.  Install the DNP3 I/O module with the LEDs visible from the front of the rack. NOTE 3. Slide the DNP3 I/O module over the top mounting screws and drop down into position. 4. Insert the bottom mounting screws. 5. Tighten all four mounting screws. You are now ready to connect ground to the DNP I/O module. See “Connecting to protective ground” on page 158.

Connecting to protective ground

Connect your DNP3 I/O module to site ground, using a separate 2.05 mm (12 AWG) Yellow/ Green wire.  Each type of DNP I/O Module has a different ground point, as shown in the examples of Table 51.

The location of the protective ground terminal varies between WESTERM I/O module types. Refer to Module Layout drawing of your module for detailed information. For example, see Table 51.

158 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL APPENDIX A: INSTALLING AND CONNECTING DNP3 I/O MODULES

Table 51: Site ground connection examples

Module Type Site Ground Connection DC Analog Input Module 47 48 49 50 TB1 97 98 99 100

122.05 AWG mm (12 AWG) GNDgreen Wire wire Site GroundSite

Digital Input Module 63 64 65 66 TB1 129 130 131 132

2.0512 AWG mm (12 AWG) GRNgreen GNDwire Site GroundSite

Control Output Module 50 51 52 53 TB1 103 104 105 106

2.0512 AWG mm (12 AWG) GRNgreen GNDwire Site GroundSite

Combination Input Output Module 47 48 49 50 TB1 97 98 99 100

2.0512 mmAWG (12 AWG) Greengreen wire Wire Site GroundSite

After site ground has been connected, you are now ready to connect power, and DNP3 link cabling to the DNP I/O module. See “Connecting DNP3 I/O modules (Low Voltage)” on page 160 or “Connecting DNP3 I/O modules (High Voltage)” on page 162.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 159 APPENDIX A INSTALLING AND CONNECTING DNP3 I/O MODULES

Connecting DNP3 I/O modules (Low Voltage)

For a Low Voltage (LV) DNP3 I/O module, connect the: • Interconnect cabling between each DNP3 I/O module, and • Power to the last DNP3 I/O module of the chain.

DNP3 I/O module (LV) interconnect cabling

The D400 (RTU Master) to DNP3 I/O module interconnect cabling is shown in Figure 65. Figure 65: Interconnect cabling between each DNP3 I/O module and power (LV)

Cable ToTo RTU RTU Master Master GE Part RTU Master Number Cable: RTU Master GE Part Number: 977-0503 First DNP I/O J1 Module IP- Server 977-0503 J2J2

To Field Equipment Standard Cables DB9 To Field Equipment male to DB9 male GE part number: 977-0089 Second DNP I/O J1J1 Module J2J2 Pin Function 1 GND To Field Equipment 4 +DC1 To Field Equipment 5 -DC1 Daisy- chained 6 TX/RX2 to other DNP I/O 7 TX/RX2 Modules Other Not Used

Last DNP I/O J1J1 Module J2J2 Cable: Power Source GE Part Number: 997-0551 ToTo Field Field Equipment Equipment

ToTo Power Power Source Source After DNP3 I/O modules have been interconnected, you are now ready to connect power to the DNP3 I/O modules. See “DNP3 I/O module (LV) connection to the Power Source” on page 161.

160 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL APPENDIX A: INSTALLING AND CONNECTING DNP3 I/O MODULES

DNP3 I/O module (LV) connection to the Power Source

Connect the power supply to the last DNP3 I/O module in the chain. The cable from J2 on the last DNP3 I/O module to the power source (GE part number 977- 0500) provides the connections shown in the wiring diagram of Figure 66. Figure 66: Power cable 977-0500 wiring diagram

DB 9 Male Power Supply

1 2 Not Connected 3

4 + DC + V 5 -DC -V

6 7 Not Connected 8 9

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 161 APPENDIX A INSTALLING AND CONNECTING DNP3 I/O MODULES

Connecting DNP3 I/O modules (High Voltage)

For a High-Voltage (HV) DNP I/O Module, for example: WESTERM D20SZ (517-0249-ML): 1. Interconnect the DNP3 link cabling between each DNP3 I/O module. 2. Connect pins 1 and 2 (and also pins 3 and 4 if a redundant power supply is used) on TB2 to an External Power Supply (40 to 150 VDC) as shown in Figure 67. Figure 67: Interconnect cabling between each DNP3 I/O module and power (HV)

RTU Master

Cable: RTU Master To Ext Power External DNP 3 GE Part Number: 977-0503 I/O Module Power Supply

To Field Equipment

To Ext Power

To Field Equipment

To Ext Power

To Ext Power

Terminator GE Part Number: 977-0049 To Field Equipment

The location of the External (Ext) Power Supply terminal varies between WESTERM I/O module types. NOTE

Connecting to a D400

When connecting the DNP3 I/O modules to the D400, configure the D400 port for 2-wire mode. Refer to section: “RS-485 connections” on page 56 which indicates the corresponding cable connections.

162 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL D400 Substation Gateway

Appendix B: Standards & Protection

Standards & Protection

Compliance standards

Compliance standards are listed for the following categories: • Emission standards; see Table 52 • Immunity standards; see Table 53 • Safety publications; see Table 54 • Environmental standards; see Table 55 • Communication Standards; see Table 56 Table 52: Emission standards

Standard Name Description Test Specification EN55011 (CISPR 11)1 ISM RF equipment – Electromagnetic Radiated Emissions 30 MHz to disturbance characteristics 1 GHz Conducted Emissions 150 kHz to 30 MHz IEC 60255-25 Electromagnetic emission tests for measuring relays and protection equipment IEC 61000-3-2 Limits for harmonic current emissions (equipment input current <= 16 A per phase) IEC 61000-3-3 Limitation of voltage changes, voltage fluctuations and flicker in public low- voltage supply systems, for equipment with input current <= 16 A per phase and not subject to conditional connection

1 To comply, all RS232 cables must be double shielded (that is, foil shield plus braid).

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 163 APPENDIX B: STANDARDS & PROTECTION

Table 53: Immunity standards

Standard Name Description Test Specification IEC 61000-4-2 Electrostatic discharge (ESD) immunity IEC 60255-22-2 test IEEE® C37.90.3 IEC 61000-4-3 Radiated, radio-frequency IEC 60255-22-3 electromagnetic field immunity test IEEE C37.90.2 (10 V/m) IEC 61000-4-4 Electrical fast transient/burst immunity IEC 60255-22-4 test IEEE C37.90.1 IEC 61000-4-5 Surge immunity test IEC 61000-4-6 Immunity to conducted disturbances, IEC 60255-22-6 induced by radio-frequency fields IEC 60255-22-1 1 MHz burst immunity test IEC 61000-4-8 Power frequency magnetic field immunity test IEC 61000-4-12 Ring wave immunity test IEC 60255-22-1 Damped Oscillatory and Ring wave Ontario Hydro A-28M-82 IEEE C37.90.1 Oscillatory SWC Waveform Immunity IEEE C37.90.1 Temperature Testing: Operational Test IEEE C37.90.1 Temperature Testing: Non-operational Test IEC 61000-4-11 Voltage dips, short interruptions and voltage variations immunity tests IEC 61000-4-16 Test for immunity to conducted, common mode disturbances in the frequency range 0 Hz to 150 kHz IEC 61000-4-17 Ripple on DC input power port immunity test IEC 61000-4-18 Damped oscillatory wave immunity test IEC 61000-4-29+ Voltage dips, short interruptions and voltage variations on DC input power port immunity test This standard only applies when using high voltage DC as the source (100 VDC to 300 VDC). IEC 60255-11 Interruptions to and alternating component (ripple) in DC auxiliary energizing quantity of measuring relays

Table 54: Safety publications

Standard Name Description Test Specification IEC 61010-1 Safety requirements for electrical equipment for measurement, control and laboratory use - General requirements IEC 60255-5 Insulation coordination for measuring relays and protection equipment- Requirements and tests

164 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL APPENDIX B: STANDARDS & PROTECTION

Table 55: Environmental standards

Standard Name Description Test Specification IEC 60068-2-1 Cold 2 hours non powered, soak at  40 °C, then warm to 20 °C and leave powered for 16 hours IEC 60068-2-2 Dry Heat 16 hours powered at +65 °C IEC 60068-2-6 Vibration (sinusoidal) A logarithmic sweep from 10 Hz IEC 60255-21-1 to 150 Hz to 10 Hz at 1 oct/min for 1 sweep cycle in the 3 orthogonal axes. Acceleration level 1 g IEC 60068-2-27 Shock - Operating Response Test Pulse shape: Half sine Pulse Shock - Non-Operating Withstand Test duration: 11 mS - Operating Response Test: Acceleration level: 5 g's - Non-Operating Withstand Test: Acceleration level: 15 g's 3 pulses per polarity per axis for a total of 18 pulses IEC 60068-2-29 Bump – Non operating test Pulse shape: Half sine Pulse duration: 11 mS Acceleration level: 10 g's 1000 pulses per polarity per axis for a total of 6000 pulses IEC 60068-2-30 Damp heat, cyclic (12 h + 12 h cycle) IEC 60068-2-31 Drop and topple Dropping on each face Dropping on each corner Toppling (or pushover) For a total of 12 drops IEC 60068-2-78 Humidity Testing 96 hours steady state humidity at 40 °C & 93% RH IEC 60255-21-2 Shock and bump tests IEEE 1613, Section Power Supply Temperature Testing Temperature range: 4.1.1 Operational 20 °C to +65 °C IEEE 1613, Section Power Supply Temperature Testing Non- Temperature range: 4.1.1 operational 40 °C to +85 °C

Table 56: Communication standards

Standard Name Description Test Specification IEEE 802.3 CSMA/CD Access Method (and physical layer specifications) IEC 61850-3 Communication networks and systems in substation – General requirements IEEE 802.3 CSMA/CD Access Method (and physical layer specifications)

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 165 APPENDIX B: STANDARDS & PROTECTION

166 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL D400 Substation Gateway

Appendix C: List of Acronyms

List of Acronyms

Acronym Definitions

This Appendix lists and defines the acronyms used in this manual.

Acronym Definition A Amperes, unit of measure AEL Accessible Emission Limit ANSI American National Standards Institute AWG American Wire Gauge, unit of measure bps Bits per second, unit of measure CCU Central Control Unit CE Mark Mandatory conformity mark for products placed on the market in the European Economic Area (EEA) CISPR Special international committee on radio interference CMOS Complementary Metal Oxide Semiconductor COM1/COM2 Communications port CPU Central Processing Unit CSR Certificate Signing Request CU Customs Union dBm Decibel-milliwatt, unit of measure - an electrical power unit in decibel (dB) DCD Data Carrier Detect DCE Data Communications Equipment DFR Digital Fault Recorders DMS Distribution Management System DPMS Display Power Management Signaling DTE Data Terminal Equipment EAC The new mark of conformity for CU (Customs Union) countries EIA Electronic Industries Alliance EMC Electromagnetic Capability

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 167 APPENDIX C: LIST OF ACRONYMS

Acronym Definition EMI Electromagnetic Interference EMS Energy Management System EPUP Environmental Protection Use Period ESD Electro Static Discharge EU European Union FDIR Fault Detection, Isolation, and Restoration FPGA Field-Programmable Gate Array GE General Electric GUI Graphical User Interface (also called Human Machine Interface – HMI) HCMOS High-speed CMOS HCS Hard Clad Silica HMI Human Machine Interface (also called Graphical User Interface – GUI) HTTP Hyper Text Transfer Protocol HTTPS Designated the use of HTTP but with a different default port and an additional encryption/authentication layer between HTTP and TCP Hz Hertz, unit of measure for frequency IEC International Electrotechnical Commission Standards IED Intelligent Electronic Device ILS Instrument Landing System in-lb Inch-pound, unit of measure for energy IRIG-B Inter Range Instrumentation Group (IRIG) - an American standardized network time code format JRE JAVA Runtime Environment JVM Java Virtual Machine Kbps Kilo bits per second, unit of measure KVM Keyboard, Video, Mouse kVRMS kilo Volts (root mean square), unit of measure LAN Local Area Network lb Pound, unit of measure for weight LED Light Emitting Diode LTC Load Tap Changer Mb Mega bits, unit of measure MB Mega bytes, unit of measure Mbps Mega bits per second, unit of measure MBps Mega bytes per second, unit of measure MCV Maximum concentration values MDI Medium Dependent Interface MDIX Medium Dependent Interface, Crossover MOS Metal oxide semiconductor ms milliseconds, unit of measure NIC Network Interface Card Nm Newton-meter, measure of energy NTP Network Time Protocol NVRAM Non-Volatile Random Access Memory PC Personal Computer PLC Programmable Logic Controllers POF Plastic Optical Fiber

168 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL APPENDIX C: LIST OF ACRONYMS

Acronym Definition ppm parts per million PPP Point-to-point protocol PRF Protective Relay Faults PRP Parallel Redundancy Protocol PSU Power Supply Unit PTC Positive Temperature Coefficient RMA Return Merchandise Authorization RoHS Restriction of Hazardous Substances RTU Remote terminal unit Rx Receive SCADA Supervisory Control and Data Acquisition SCP Secure Copy Program (SCP SNTP Standard Network Time Protocol SOE Sequence of Events SQL™ Structured Query Language SSH Secure Shell SSL Secure Sockets Layer SVGA Super Video Graphics Array TIA Telecommunication Industries Association TCP/IP Transmission Control Protocol - Internet Protocol TLS Transport Sockets Layer TTL Transistor-Transistor Logic Tx Transmit UNC Unified coarse thread UNF Unified fine thread URL Universal Resource Locater USB Universal Serial Bus UTP Unshielded Twisted Pair VA Volt Amps, unit of measure VAC Volts, Alternating Current, unit of measure VDC Volts, Direct Current, unit of measure

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 169 APPENDIX C: LIST OF ACRONYMS

170 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL D400 Substation Gateway

Appendix D: Miscellaneous

Miscellaneous This appendix provides the warranty and revision history.

Warranty

For products shipped as of 1 October 2013, GE Grid Solutions warrants most of its GE manufactured products for 10 years. For warranty details including any limitations and disclaimers, see the GE Grid Solutions Terms and Conditions at  https://www.gegridsolutions.com/multilin/warranty.htm For products shipped before 1 October 2013, the standard 24-month warranty applies.

Revision history

Version Revision Date Change Description 1.00 0 July 12, 2006 Document created 1 Nov. 17, 2006 Deleted Supported Devices sections. Moved signal definitions to Chapter 4 and added more connections information. Added Chapter “Setting Up the D400.” 2 Feb. 28, 2007 Added RoHS and recycling info, updated RS-485 channel numbering order 3 July 31, 2007 Added chapter 7, updated network interface setup, updated ordering guide. General editing for commercial release. 4 Sept. 12, 2007 Updates to hardware platform 5 Sept. 29, 2007 Revised power/system alarms sections & Local HMI function 6 Nov. 29, 2007 Updated required JVM version from 5.0 to 6.0 7 June 16, 2008 Added 1.0 GHz CPU information 8 Sept. 10, 2008 Added 100Base-FX Hot Standby Fiber Optic Ethernet Adapter 1.10 0 Nov. 6, 2008 Added system redundancy and system status manager 1 Nov. 10, 2008 Revised system redundancy wiring diagrams and procedure 2 Dec. 3, 2008 Added minor notes to redundancy section 3 Jul. 21, 2009 Added modem settings and redundant power feed in redundant serial panel diagram

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 171 APPENDIX D: MISCELLANEOUS

Version Revision Date Change Description 1.20 0 Apr. 6, 2010 Changed RS-485 adapter card default setting to 2-wire. 1.30 0 Jan 27, 2012 Added content for Hot Standby configuration. 1 Feb 17, 2012 Added GE part numbers for CompactFlash to the Changing the CompactFlash section. 2 Mar 20, 2012 Added Appendix C: List of Acronyms 3 Jun 29, 2012 Updated the RoHS Material Declaration. 4 Aug 31, 2012 Added Dual ethernet upgrade kit for card 580-3410 5 May 7, 2013 Added product disclaimer. 6 Aug 15, 2013 Removed product disclaimer. Updated the RoHS Material Declaration Data Content by Assembly table. Updated IRIG-B input adapter section; removed SW3. Corrected the Power Fail Alarm section. Updated the Changing the Compact Flash section. 7 Oct 18, 2013 Added note for 580-3410 dual ethernet card; not used with 1 GHz CPU. Replaced 501-0612 part number with D400-DE-UPGRADE. Added Battery Removal section. 8 Nov 6, 2013 Added Service Pack & Service Updates information for firmware to Chapter 2. 9 Nov 29 2013 Added Product Specifications > Environmental > Operating Temperature notes. 10 Jan 14 2014 Corrected Glass optical fiber receiver sensitivity in Glass Optic Fiber section. 11 Apr 30, 2014 Added SW1/SW2 settings for RS-232 adapter card configuration options. Corrected RS-485 4-wire devices - Wiring Connection drawing for RX1+ and RX1-. 12 May 7, 2014 Added reference to module layout 520-0207 for the RS-232 adapter card configuration options. 1.40 0 Jul 25, 2014 Added 1.6 GHz CPU (520-0232LF) Added connection from D400 to DNP 3 I/O Modules 2.00 0 Nov 24, 2014 Moved some content to this manual from the D400 Software Configuration Guide V3.20 /V4.10 (SWM0066). Added 1.6 GHz CPU. Updated D400 Configuration Utility. Changed RS-232 Adapter - Switch SW1/SW2 content. 1 Feb 20, 2015 Updated Figure: RS-232 adapter top side. Added NOTICES to section: Changing the CompactFlash. Added D400 firmware version and JRE support table. Replaced D400 firmware version 5.00 with 5.01. 2 Mar 20, 2015 Corrected D400 firmware and CPU compatibility table to show that FW v5.01 is compatible with a 1.0 GHz CPU. Corrected link to order Upgrade Kit. 2.10 0 June 26, 2015 Added d400cfg content for new commands. 1 Sep 10, 2015 Removed System Parameters from d400cfg local configuration utility. 2 Oct 20, 2015 Added EAC compliance content. 2.20 0 Jun 17, 2016 Re-branded for GE Grid Solutions. Notice added for discontinuance of 520-0219/520-0219LF COM2 Port Adapter card. Changed commands in the Using the Local Configuration Utility chapter. Added new features to Introducing D400 Features chapter. Added torque limit for main module and power supply module thumb screws. 2.30 0 Mar 27, 2017 Updated Firmware Compatibility and Java Compatibility tables. Removed references to Ethernet 100BaseSX.

172 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL APPENDIX D: MISCELLANEOUS

Version Revision Date Change Description 2.40 0 May 5, 2017 Moved the following chapter content to the D400 Substation Gateway Software Configuration Guide: - About the D400 Applications - Introducing the D400 Configuration - Introducing the D400 Features Updated Automated Record Retrieval Manager section. Updated chapter: Using the Local Configuration Utility for firmware V5.30. 1 July 20, 2017 Changed Specifications > System >Memory 2 Mar 14, 2019 Added Troubleshooting D400 Redundancy section and updated Redundancy Wiring drawings. 3 April 10, 2019 Updated the D400 Redundancy Wiring drawings and Local Configuration Utility chapter. 4 July 23, 2019 Updated the Heart Beat Configuration content from Redundancy section.

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 173 APPENDIX D: MISCELLANEOUS

174 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL D400 Substation Gateway

Index

Numerics C 2-WIRE CONNECTIONS ...... 57 CABLING 4-PORT TWISTED-PAIR ETHERNET SWITCH ...... 46 overview ...... 55 configuration options ...... 46 requirements ...... 57 4-WIRE CONNECTIONS ...... 58 CARD SETTINGS ...... 34 CARDS, COMMUNICATION ...... 33 CE MARK COMPLIANCE ...... 15, 26 A CHANGE ...... 34, 171 ACCESS HMI ...... 96 CHANGE THE COMPACTFLASH ...... 150 ACCOUNTS CHECK BATTERY VOLTAGE ...... 146 create user ...... 91 CLEAN AND HANDLE BATTERY ...... 146 ADAPTER COM2 PORT ADAPTER ...... 49 IRIG-B distribution ...... 62 configuration options ...... 49 IRIG-B input ...... 61 COMMUNICATION CARDS ...... 33, 45 ALARM 10base-fl hot standby fiber optic ethernet switch ...... 47 power fail ...... 85 10base-fx hot standby fiber optic ethernet adapter ...... 48 power supply ...... 85 4-port twisted-pair ethernet switch ...... 46 system fail ...... 86 change settings ...... 34 APPROVAL com2 port adapter ...... 49 CE mark ...... 15, 26 fiber optic serial adapter ...... 41 EAC ...... 16, 26 IRIG-B input adapter ...... 43 AUTHENTICATION, CONFIGURE ...... 117 redundant twisted pair ethernet + com2 port adapter ...... 50 RS-232 adapter ...... 35 AUTOMATIC RECORD RETRIEVAL MANAGER ...... 138 RS-485 adapter ...... 38 types ...... 34 USB KVM & audio adapter ...... 52 B COMPANY ADDRESS ...... 10 BATTERY COMPLIANCE check voltage ...... 146 CE ...... 15, 26 cleaning and handling ...... 146 EAC ...... 16, 26 insert ...... 145 COMPLIANCE, STANDARDS AND PROTECTION ...... 163 installation ...... 31 CONFIGURATION life ...... 26, 146 fiber optic serial adapter switch sw1 ...... 41 recycling ...... 146 IRIG-B input adapter switch sw1 ...... 44 replace ...... 144, 145 IRIG-B input adapter switch sw2 ...... 44 types supported ...... 145 RS-232 adapter switch sw1/sw2 ...... 36 RS-232 adapter switch sw3/sw4 ...... 37

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 175 INDEX

RS-485 adapter switch sw1/sw2 ...... 39 RS-485 adapter switch sw3/sw4 ...... 40 D CONFIGURATION DATA DEVICE HMI ...... 107 removal from GE device ...... 155 DISPOSAL ...... 156 removal from PC ...... 156 DNP 3 I/O MODULES CONFIGURATION OPTIONS connection configuration ...... 69 10base-fl hot standby fiber optic ethernet switch ...... 47 high voltage connection ...... 162 10base-fx hot standby fiber optic ethernet adapter ...... 48 install in rack ...... 158 4-port twisted-pair ethernet switch ...... 46 low voltage connection ...... 160 com2 port adapter ...... 49 protective ground ...... 158 fiber optic serial adapter ...... 41 DOCUMENTATION IRIG-B distribution adapter ...... 45 additional ...... 11 IRIG-B input adapter ...... 43 audience ...... 11 redundant twisted pair ethernet + com2 port adapter ...... 51 DUAL ETHERNET UPGRADE KIT RS-232 adapter ...... 35 card 580-3410 ...... 147 RS-485 adapter ...... 38 change the compactflash ...... 150 USB KVM & audio adapter ...... 52 valid combinations ...... 147 CONFIGURATION UTILITY, START ...... 114 CONFIGURE authentication ...... 117 connection to DNP 3 I/O modules ...... 69 E firewall settings ...... 125 EAC COMPLIANCE ...... 16, 26 host names ...... 127 EQUIPMENT DISPOSAL ...... 156 hot standby redundancy ...... 100 EXTERNAL POWER REQUIREMENTS ...... 83 network interfaces ...... 119 network settings ...... 118 power ...... 82 F redundancy ...... 136 FACTORY DEFAULT secure access ...... 122 fiber optic serial adapter ...... 41 sync manager ...... 133 IRIG-B input adapter ...... 43 time ...... 127 RS-232 adapter ...... 36 time synchronization ...... 127 RS-485 adapter ...... 38 warm standby redundancy ...... 97 FAILOVER SEQUENCE ...... 70 CONNECTION FEATURES ...... 19 2-wire ...... 57 FIBER OPTIC SERIAL ADAPTER ...... 41 4-wire ...... 58 configuration options ...... 41 DNP 3 I/O modules ...... 157 factory default ...... 41 fiber optic serial ...... 60 switch sw1 configuration ...... 41 front maintenance port ...... 68 FIBER OPTIC SERIAL CONNECTIONS ...... 60 glass optical fiber ...... 60 FILE TRANSFER ...... 110 hot standby fiber optic ...... 63 FRONT IRIG-B ...... 61 maintenance port ...... 68, 109 local HMI ...... 67 network port ...... 64 modem ...... 65 panel ...... 29 network ...... 54, 63 panel LEDs ...... 105 plastic optical fiber ...... 60 FUNCTIONAL OVERVIEW ...... 18 power ...... 82 RS-232 ...... 56 RS-485 ...... 56 serial ...... 53 G test the network ...... 96 GENERAL CABLING REQUIREMENTS ...... 55 types ...... 53 GLASS OPTICAL FIBER ...... 60 CREATE GUARANTEE ...... 171 supervisor password ...... 94 GUIDE, HOW TO USE ...... 12 user accounts ...... 91

H HARDWARE OVERVIEW ...... 19

176 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL INDEX

HIGH-VOLTAGE INSTALLATIONS ...... 55 MAINTENANCE PORT, FRONT ...... 109 HMI ...... 107 MODEM CONNECTIONS ...... 65 GE device ...... 107 MSQL DATABASE TABLES ...... 129 local ...... 108 HOST NAMES ...... 127 HOT STANDBY N fiber optic connections ...... 63 NETWORK redundancy ...... 100 connection ...... 54, 63, 109 HOT STANDBY FIBER OPTIC ETHERNET connection port ...... 64 10base-fl switch ...... 47 interface, setting up ...... 92 10base-fx adapter ...... 48 settings ...... 118 HUMAN MACHINE INTERFACE ...... 107 NVRAM, RESET ...... 129

I O IDENTIFICATION NUMBER, PRODUCT ...... 22 OPTIONS, POWER SUPPLY ...... 81 INPUT RANGES, POWER ...... 82 ORDERING GUIDE, PRODUCT ...... 21 INSERT, BATTERY ...... 145 OVERVIEW INSTALL cabling ...... 55 DNP 3 I/O modules ...... 157 features ...... 19 DNP 3 I/O modules in rack ...... 158 functional ...... 18 INSTALL CERTIFICATE AND KEY hardware ...... 19 secure web access ...... 95 product ...... 17 INSTALLATION battery ...... 31 first look ...... 29 high voltage ...... 55 P panel mount ...... 31 PANEL physical ...... 30 front ...... 29 rack mounting ...... 30 mount ...... 31 steps ...... 27 rear ...... 29 IRIG-B PASSWORD connections ...... 61 create supervisor ...... 94 distribution adapter ...... 45, 62 PHYSICAL INSTALLATION ...... 30 distribution adapter configuration options ...... 45 PLASTIC OPTICAL FIBER ...... 60 IRIG-B INPUT ADAPTER ...... 43, 61 POWER configuration options ...... 43 configurations ...... 82 factory default ...... 43 connections ...... 82 switch sw1 configuration ...... 44 fail alarm ...... 85 switch sw2 configuration ...... 44 input ranges ...... 82 POWER SUPPLY ...... 138 alarms ...... 85 L options ...... 81 redundant ...... 82 LEDS replace ...... 152 front panel ...... 105 POWERING DOWN THE DEVICE ...... 88 serial port status ...... 106 PRECAUTIONS LOCAL safety ...... 13 HMI ...... 108, 130 warning symbols ...... 14 HMI connections ...... 67 PREREQUISITES maintenance ...... 54 configure redundancy ...... 97 substation computer ...... 54, 109 remove the battery ...... 145 LOG ...... 171 secure web access ...... 94, 95 PRODUCT identification number ...... 22 M ordering guide ...... 21 MAIN MODULE, REMOVE ...... 143 overview ...... 17

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 177 INDEX

return ...... 10 NVRAM ...... 129 specifications ...... 23 system logs ...... 128 PRODUCT SPECIFICATIONS RETURN PRODUCT ...... 10 communications ...... 23 REVISION HISTORY ...... 171 electrical ...... 24 ROHS COMPLIANCE ...... 15 environmental ...... 25 RS-232 physical ...... 24 connections ...... 56 software ...... 26 switch panel ...... 72 system ...... 23 RS-232 ADAPTER ...... 35 configuration options ...... 35 factory default ...... 36 R switch sw1/sw2 configuration ...... 36 RACK MOUNTING ...... 30 switch sw3/sw4 configuration ...... 37 REAR PANEL ...... 29 RS-485 ADAPTER ...... 38 RECOMMENDATIONS configuration options ...... 38 battery life ...... 26 factory default ...... 38 storage ...... 26 switch sw1/sw2 configuration ...... 39 storage conditions ...... 26 switch sw3/sw4 configuration ...... 40 RECYCLE BATTERY ...... 146 RS-485 CONNECTIONS ...... 56 REDUNDANCY ...... 136 failover sequence ...... 70 hot standby ...... 100 S power supply ...... 82 SAFETY PRECAUTIONS ...... 13 required components ...... 70 SECURE ACCESS ...... 122 RS-232 switch panel ...... 72 SECURE WEB ACCESS system ...... 70 install certificate and key ...... 95 warm standby ...... 97 prerequisites ...... 94, 95 wiring diagrams ...... 72 requesting a certificate ...... 94 REDUNDANT TWISTED PAIR ETHERNET + COM2 PORT setting up ...... 94 ADAPTER ...... 50 SERIAL configuration options ...... 51 connection ...... 53 REGULATORY COMPLIANCE ...... 15 port status LEDs ...... 106 CE mark ...... 15 SERVICE LIFE ...... 155 EAC ...... 16 SETTING UP RoHS ...... 15 network interface ...... 92 REMOVE secure web access ...... 94 battery ...... 145 SHUTTING DOWN THE DEVICE ...... 111 main module ...... 143 SPECIFICATIONS REMOVE CONFIGURATION DATA communications ...... 23 from GE device ...... 155 electrical ...... 24 from PC ...... 156 environmental ...... 25 REPAIR ...... 171 physical ...... 24 REPLACE product ...... 23 battery ...... 144, 145 software ...... 26 power supply ...... 152 system ...... 23 REQUESTING A CERTIFICATE STANDARDS AND PROTECTION, COMPLIANCE ...... 163 secure web access ...... 94 START CONFIGURATION UTILITY ...... 114 REQUIRED STORAGE components ...... 70 conditions ...... 26 tools ...... 28 recommendations ...... 26 REQUIREMENTS SUPPORT cabling ...... 55 contact ...... 9 external power ...... 83 library ...... 9 RS-232 cabling ...... 57 SUPPORTED BATTERY TYPES ...... 145 wiring ...... 83 SWITCH SW1 CONFIGURATION RESET fiber optic serial adapter ...... 41 mSQL DB tables ...... 129 IRIG-B input adapter ...... 44

178 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL INDEX

SWITCH SW1/SW2 CONFIGURATION redundancy ...... 97 RS-232 adapter ...... 36 WARNING SYMBOLS ...... 14 RS-485 adapter ...... 39 WARRANTY ...... 171 SWITCH SW2 CONFIGURATION WIRING REQUIREMENTS ...... 83 IRIG-B input adapter ...... 44 SWITCH SW3/SW4 CONFIGURATION RS-232 adapter ...... 37 RS-485 adapter ...... 40 SYNC MANAGER ...... 133 SYSTEM fail alarm ...... 86 redundancy ...... 70 reset logs ...... 128 status points ...... 110 SYSTEM UTILITIES ...... 109 from a front maintenance port ...... 109 from a local substation computer ...... 109 over a network connection ...... 109

T TECHNICAL SUPPORT contact ...... 9 GE Grid Solutions web site ...... 9 library ...... 9 TEST NETWORK CONNECTION ...... 96 TIME ...... 127 show settings ...... 128 sync input ...... 128 synch output ...... 128 synchronization ...... 127 system clock ...... 128 zone ...... 128 TIME SYNCHRONIZATION ...... 54 local maintenance ...... 54 local substation computer ...... 54 TOOLS, REQUIRED ...... 28 TRANSFER FILE ...... 110 TYPES battery ...... 145 connections ...... 53

U UNPACKING THE DEVICE ...... 28 UPGRADE KIT dual ethernet card 580-3410 ...... 147 USB KVM & AUDIO ADAPTER ...... 52 configuration options ...... 52 USB PORTABLE MEMORY DEVICE ...... 110 UTILITIES system ...... 109

W WARM STANDBY

D400 SUBSTATION GATEWAY INSTRUCTION MANUAL GE INFORMATION 179 INDEX

180 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL