SMP User Manual

User Manual
SMP Gateway
Copyright Cooper Power Systems 2007, hardware, software and manual
The information in this document applies to softwar e ver sion 4.0 or later and is subject
to change without notice.
Cooper Power Systems

Ener gy Automation Solutions
730 Commerciale St.
Suite 200
Saint-Jean-Chrysostome (Quebec)
Canada
G6Z 2C5
Phone: (418) 834-0009
Fax: (514) 227-5256
Email: information@cybectec.com
Web Site: http://www.cybectec.com
GUI-00316-00001 T, version 16
Contents
Welcome 1
SMP models.........................................................................................................................1
Related documentation ........................................................................................................2
Getting assistance with our products ...................................................................................3
Getting started......................................................................................................................3
Document overview.............................................................................................................4
Principles of operation 7
Introduction .........................................................................................................................7
Logical architecture .............................................................................................................7
Masters and slaves.................................................................................................7
Introducing the SMP in the automation system.....................................................8
SMP internals ........................................................................................................8
Communication components ...............................................................................10
Configuring the SMP.........................................................................................................11
Step 1 The transparent SMP .............................................................................12
Using the SMP as a protocol translator ...............................................................14
Using the SMP as a data concentrator or device multiplexer ..............................15
Using the SMP as a communications gateway ....................................................16
Putting it all together ...........................................................................................17
Securing the substation........................................................................................17
The SMP Tools 19
SMP Manager 21
Starting SMP Manager and logging on..............................................................................21
Main window .....................................................................................................................22
Adding an SMP..................................................................................................................22
Information provided by the SMP gateway icon ...............................................................23
Customizing the display.....................................................................................................24
Adding or removing a column.............................................................................24
SMP Gateway User Manual i

Changing the position of a column......................................................................25
Configuring the SMP 27

Introduction .......................................................................................................................27
Creating master protocol instances ....................................................................................29
Creating a master protocol instance from a template ..........................................29
Creating a master protocol instance manually.....................................................30
Configuring the master protocol general settings ................................................30
Configuring the data points................................................................................................32
Adding data points from a protocol template ......................................................33
Creating a template from a master protocol instance.........................................................34
Duplicating a master protocol instance..............................................................................34
Configuring the communication links ...............................................................................35
Configuring the serial port interfaces ..................................................................35
Configuring the operation of the serial ports.......................................................36
Configuring TCP/IP connections.........................................................................37
Associating a master protocol instance with a communications link.................................38
Testing the configuration ...................................................................................................39
Validating and saving the configuration..............................................................39
Sending the configuration to the SMP gateway...................................................40
Retrieving an SMP gateway configuration file....................................................40
Working with SMP Config grids .......................................................................................41
Selecting cells and lines.......................................................................................41
Duplicating a line ................................................................................................41
Copying a value to a group of cells .....................................................................41
Resequencing a group of lines.............................................................................42
Deleting an item ..................................................................................................44
Using tooltips ......................................................................................................44
Viewing the SMP log files 45

Information provided by SMP Log....................................................................................45
SMP Log features ..............................................................................................................46
Searching in SMP Log.........................................................................................46
Printing a log .......................................................................................................46
Saving a log file...................................................................................................46
Viewing multiple log folders at once...................................................................47
Changing how the time is displayed....................................................................47
ii SMP Gateway User Manual

Viewing protocol exchanges in real time 49
Information provided by SMP Trace .................................................................................50
SMP Trace features............................................................................................................51
Searching in SMP Trace......................................................................................51
Printing a trace.....................................................................................................51
Recording a live trace..........................................................................................51
Saving all the scrolled information......................................................................52
Viewing communication statistics in real time 53

Information provided by SMP Stats ..................................................................................54
SMP Stats features.............................................................................................................54
Resetting statistics ...............................................................................................54
Printing statistics .................................................................................................54
Using a web browser to view data in real time 57

Applying a filter to a data point display.............................................................................58
Acknowledging data point value changes..........................................................................58
Connecting the SMP to a control center 61

Creating slave protocol instances.......................................................................................61
Configuring slave protocol instances.................................................................................61
Subscribing to the master data points ................................................................................62
Configuring the data points................................................................................................64
Configuring the communication links ...............................................................................64
Setting up a TCP/IP connection...........................................................................64
Associating a slave protocol instance with a communications link ...................................65
Validating and activating the configuration.......................................................................65
Testing the configuration ...................................................................................................65
Connecting to another SMP 67

Introduction .......................................................................................................................67
Configuring the slave SMP................................................................................................68
Configuring the master SMP .............................................................................................69
Security 72
Introduction .......................................................................................................................72
SMP Gateway User Manual iii

Meeting NERC CIP requirements .....................................................................................72
Managing the security configuration of one or more SMP gateways ................................73
Getting started .....................................................................................................73
Accessing the Login Information dialog box ......................................................74
Appropriate Use banner in the Login dialog box ................................................74
Defining your authentication policy ....................................................................75
Groups and privileges..........................................................................................77
Editing user groups and privileges ......................................................................78
Managing user groups and privileges..................................................................79
Validating and saving the security configuration ................................................81
Sending the security configuration to one or more SMP gateways .....................81
Retrieving the security configuration of an SMP gateway ..................................83
Removing the security configuration from one or more SMP gateways.............83
Unlocking a user account ....................................................................................84
Viewing the security log......................................................................................85
File certification and integrity checking ............................................................................85
Introduction .........................................................................................................85
Detecting an integrity check failure.....................................................................85
Recovering from an integrity failure ...................................................................86
VPN connections and the SMP gateway firewall ..............................................................86
Introduction .........................................................................................................86
Customizing the firewall and VPN connections..................................................86
Connecting and disconnecting VPN when the firewall is enabled ......................90
Connecting and disconnecting VPN when the firewall is disabled .....................91
Substation network security considerations.......................................................................92
Setting up a secure substation LAN ....................................................................92
Using the SMP Tools through a substation LAN firewall...................................93
Locking incoming RAS and passthru connections ............................................................95
Locking or unlocking all incoming RAS dialup connections..............................95
Locking or unlocking a passthru connection .......................................................96
Using passthru connections 97

Introduction .......................................................................................................................97
Principles of operation.......................................................................................................98
Setting up passthru connections.........................................................................................99
Configuring SMP passthru ..................................................................................99
Installing a loopback cable, if necessary ...........................................................100
iv SMP Gateway User Manual

Setting up a list of applications and loopback connections ...............................101
Connecting to the device..................................................................................................103
Testing the passthru connection.......................................................................................104
Deactivating the SMP passthru connection .....................................................................104
Retrieving DFRs or other event files retrieved from the devices 105
Defining the system folders .............................................................................................105
Configuring the master protocol event file processing ....................................................106
Creating an Annunciator interface 109

Introduction .....................................................................................................................109
Configuring an Annunciator in SMP Config ...................................................................110
Touch screen configuration in SMP Config ......................................................110
Creating the Annunciator ..................................................................................110
Setting General parameters................................................................................111
Setting Alarm inputs..........................................................................................112
Annunciator Pages editor.................................................................................................113
The Alarm tab....................................................................................................114
The Readings tab ...............................................................................................116
Setting cell contents...........................................................................................117
Displaying static text or colors ..........................................................................118
Displaying analog data points............................................................................119
Displaying binary data points............................................................................121
Formatting groups of cells.................................................................................121
Selecting the display font ..................................................................................123
Connecting to the Annunciator option into the SMP gateway.........................................124
Calibrating the touch screen ............................................................................................124
Using the Annunciator Interface......................................................................................125
Navigation .........................................................................................................125
Interface displayed in all the pages....................................................................125
The Alarms page ...............................................................................................125
The Readings page ............................................................................................129
The Blocked page ..............................................................................................129
The History page ...............................................................................................130
System States page ............................................................................................131
The SMPs automation functions 133
SMP Gateway User Manual v

Introduction .....................................................................................................................133
The SMP Automation Functions module ........................................................................133
Adding an Automation Functions instance........................................................134
Defining an automation function.......................................................................135
Understanding automation function settings .....................................................138
Logic Processor .................................................................................................138
The Soft PLC ...................................................................................................................145
The CoDeSys development environment ..........................................................146
Using CoDeSys to create SMP automation scripts............................................147
Using syslog with an SMP gateway 149

Introduction .....................................................................................................................149
Setting up SMP Config for syslog messages ...................................................................149
Redundancy 151
Introduction .....................................................................................................................151
Redundant group operation..............................................................................................151
Redundant IEDs ................................................................................................152
Priority...............................................................................................................153
Grouping 2 SMPs for redundancy ...................................................................................154
Introduction .......................................................................................................154
Setting up two SMPs with SMP Manager .........................................................154
The Redundancy column ...............................................................................157
Hot standby......................................................................................................................158
Managing redundancy .....................................................................................................159
Forcing an active SMP to become a standby SMP............................................159
Additional failover conditions...........................................................................159
Modifying the redundancy settings of an existing group...................................160
Ungrouping 2 SMP gateways............................................................................160
Testing and validating the configuration ...........................................................160
Checking the redundancy status through the front panel...................................160
Testing a redundant network .............................................................................161
Setting up the SNMP server 163

Introduction .....................................................................................................................163
SNMP traps......................................................................................................................163
Configuring the SNMP server .........................................................................................164
vi SMP Gateway User Manual

Time synchronization 165
Setting the clock in your SMP .........................................................................................165
Concerning daylight saving time in 2007..........................................................165
Why synchronize the SMP gateway? ..............................................................................166
IRIG-B and GPS accuracy...............................................................................................167
What is SNTP? ................................................................................................................168
Setting up SNTP on the SMP gateway ............................................................................168
Monitoring the SNTP status ............................................................................................169
Remote access to the SMP gateway through a serial port 171

Windows XP setup procedures ........................................................................................171
Setting up a dial-up (modem) connection..........................................................171
Setting up a direct serial connection..................................................................174
Windows 2000 setup procedures .....................................................................................176
Setting up a dial-up (modem) connection..........................................................176
Setting up a direct serial connection..................................................................178
Using a Dial-Up Connection for DNP3 or IEC 60870-5-101 181

Specifying which serial ports have modems....................................................................182
Creating a modem pool....................................................................................................182
Adding a modem to a modem pool..................................................................................184
Adding a modem pool master connection........................................................................185
Adding a modem pool slave connection ..........................................................................185
Updating the SMP software and tools 186

Software architecture of the SMP Gateway.....................................................................186
Procedure update checklist ..............................................................................................186
Updating the SMP Tools on the PC.................................................................................187
Updating the SMP software on the SMP Gateway ..........................................................187
Updating the SMP firmware..............................................................................187
Updating the SMP gateway application ............................................................190
Updating the configuration file..........................................................................190
Activating a new license 191

Updating your license information ..................................................................................191
Updating the SMP gateway application...........................................................................193
Miscellaneous SMP Tool features 194
SMP Gateway User Manual vii

SMP Manager features.....................................................................................................194
Setting SMP Manager options .........................................................................................194
SMP Config features........................................................................................................196
System data points ...........................................................................................................196
SMP Loader.....................................................................................................................199
Using SMP Loader ............................................................................................199
Transferring files to the SMP gateway ..............................................................202
Log file ..............................................................................................................203
Updating bootstraps under unusual circumstances............................................203
Troubleshooting 205
Introduction .....................................................................................................................205
Getting additional help ......................................................................................205
Creating an SMP gateway report file...............................................................................206
Viewing an SMP gateway report file...............................................................................207
Startup problems..............................................................................................................207
No configuration file .........................................................................................207
Protocols failed..................................................................................................208
Critical component missing ...............................................................................209
Safe mode ..........................................................................................................209
Communication problems................................................................................................209
Physical layer ....................................................................................................209
Link layer ..........................................................................................................210
Protocol layer ....................................................................................................210
Problems with data validity .............................................................................................211
Problems executing a control operation...........................................................................211
viii SMP Gateway User Manual

Figures
Figure 1 Master and slave systems .............................................................................................8
Figure 2 The SMP as a Master-and-slave system .......................................................................8
Figure 3 The SMP real-time data exchange................................................................................9
Figure 4 SMP communication components ..............................................................................10
Figure 5 The transparent SMP ..................................................................................................12
Figure 6 Additional SMP functions ..........................................................................................13
Figure 7 The SMP protocol translator.......................................................................................14
Figure 8 The SMP data concentrator ........................................................................................15
Figure 9 The SMP communications gateway ...........................................................................16
Figure 10 The SMP substation gateway......................................................................................17
Figure 11 The SMP substation gateway with a firewall .............................................................18
Figure 12 Network security ........................................................................................................92
Figure 13 Using a passthru connection .......................................................................................98
SMP Gateway User Manual ix

Welcome
Congratulations on acquiring your new SMP gateway! You now have unlimited connectivity for
all the equipment in your substation.
In this manual, we will show you how to use the SMP to integrate existing and new RTUs, IEDs,
PLCs and control centers into a single modern, homogeneous substation automation system.
You will learn how to set up your SMP as a:
Pr otocol Tr anslator The SMP translates standard or proprietary device protocols to control
center protocols such as DNP3, TEJAS, IEC-60870-5-101/103/104 or IEC-61850 (UCA 2.0).
Data Concentr ator The SMP collects the data from all connected devices, regardless of
protocol, and makes it available to control centers using LAN, WAN, modem or serial
connections.
Ter minal Server The SMP supports centralized maintenance, monitoring and control of all
devices by using the pass-thru communications mode.
Substation Communications Gateway The advanced capabilities of the SMP make it the
ideal choice for any substation automation project.
SMP models
There are currently 3 SMP models:
The SMP 4 has 4 ports. It comes in a compact and economical format that allows it to be
installed directly within relay protection enclosures. There is also an optional internal modem
available, which allows the SMP 4 to communicate with a SCADA or device via a dialup
connection.
The SMP 16, which can be mounted in a 19-inch rack, comes in two versions, both of which
have the same basic characteristics:
The SMP 16/CP is a gateway that offers 16 RS-232/422/485 universal serial ports,
2 Ethernet ports and an integrated modem.
The SMP 16/SG has, in addition, expansion slots where accessories and options can be
added to make it an ideal communications gateway for all your automation projects.
SMP Gateway User Manual 1

Both versions can also be equipped with the PM option, a new 1.1 GHz Pentium-M
processor, that improves the gateway's speed tenfold. This is ideal for high-capacity
application or complex automation schemes.
The manual applies to all models, and differences are indicated where applicable. Refer to your
SMP installation guide for a detailed description of your particular SMP model.
Related documentation
This manual provides you with the basic information you need to get started with your SMP
gateway. To reduce paper use, we have included the following related documentation on the CD-
ROM you received with the product. Should you want printed documents, you can order them
from Cybectec using reference number P-DPRN-0102.
Your Documentation folder contains the following related documents:
SMP 4-20 SMP 8-40 Installation Guide, GUI-00316-00027 T. This document gives you
detailed instructions on installing and setting up the SMP 4-20 or SMP 8-40.
SMP 4 Installation Guide, GUI-00316-00026 T. This document gives you detailed

instructions on installing and setting up the SMP 4.
SMP 16 Installation Guide, GUI-00316-00032 T. This document gives you detailed

instructions on installing and setting up the SMP 16/CP or the SMP 16/SG.
SIOM Adding Serial Ports to Your SMP, AUT-00123-00432 T. This document describes how
to add serial ports to an SMP 4-20 or SMP 8-40.
SMP 16 GPS Clock Option Installation Guide AUT-00316-0047-T. This document describes
how to install the wiring and setup the software if you have the GPS clock option for the
SMP 16.
Master Protocol Common Concepts. This document describes the concepts and settings
common to the protocols used by most substation devices. Separate documents describe the
protocol-specific settings.
SMP 4 Diagnostics Reference Guide, GUI-00316-00040 T. This document takes you through
the steps required to run diagnostic tests on the SMP 4.
SMP 16 Diagnostics Reference Guide, GUI-00316-00036 T. This document takes you through
the steps required to run diagnostic tests on the SMP 16.
SMP 4-20 SMP 8-40 Diagnostics Reference Guide, GUI-00316-00024 T. This document takes
you through the steps required to run diagnostic tests on the SMP 4-20 or SMP 8-40.
2 SMP Gateway User Manual

Getting assistance with our products
If you have any questions regarding the performance, application, testing or repair of this or any
other component of the Cybectec product line, do not hesitate to contact us. Our staff will be
happy to assist you.
Cybectec Technical Support
Cooper Power Systems
Energy Automation Solutions
730 Commerciale Street, Suite 200
Saint-Jean-Chrysostome, Quebec
Canada G6Z 2C5
Email: support@cybectec.com
Phone: (418) 834-0009
Fax: (514) 227-5256
For emergency service on weekends and holidays, you can reach us between 8 a.m. and
5 p.m. EST. Simply leave your name and phone number on our pager at (418) 260-6000, and we
will get back to you as soon as possible.
Getting started
When you receive your SMP, you have to go through several steps before you can perform the
tasks described in this document. Namely, you have to do the following:
Unpack the SMP.

Install the SMP.
Set-up the SMP.
Install the PC software.
Make the SMP Tools aware of your new SMP gateway.
Load the SMP firmware.
All of these steps ar e explained in detail in the following documents:
SMP 4-20 SMP 8-40 Installation Guide, GUI-00316-00027 T

SMP 4 Installation Guide, GUI-00316-00026 T.
SMP 16 Installation Guide, GUI-00316-00032 T.
Make sur e you have performed all the steps descr ibed in those documents befor e pr oceeding
with the mater ial explained in the pr esent document.

Document overview
Once you have performed all the steps explained in your SMP installation guide, you are ready to
perform the following tasks, as described in this user manual:
Configure your SMP so that it can communicate with your devices:
Define the hardware.

Configure the master protocol instances that will communicate with your substation
devices.
Configure the data points.
Set-up the communication links between the SMP and the substation devices.
Associate master protocol instances with communication links.
Validate, activate and test your configuration.
View the following information in real time:
The SMP log files.

Protocol exchanges.
Communication statistics.
Data points, using a Web browser.
Configure your SMP so that it can communicate with one or more control centers:
Configure a slave protocol instance for each control center.

Have each control center subscribe to the data points.
Associate slave protocol instances with communication links.
You will also become familiar with the following SMP features:
Security.
Passthru connections.
DFR and event file processing.
Automation functions.
Design a local HMI on the SMP 16
Redundancy.
SNMP exporting.
Time synchronization.
SMP access through a direct or dial-up connection.
SMP access through a dial-up connection for DNP3 and IEC 60870-5-101 protocols.

You will also learn how to update the SMP software and tools, and to troubleshoot any problems
you may encounter with your SMP gateway.

Principles of operation
Introduction
Electrical power utilities face a number of challenges when attempting to automate their
substations. They have legacy devices that they want to continue using. They want to integrate
new devices. They may want to add one or more control centers. They may want to use a local
HMI in order to keep a close watch on all events that occur in the substation.
There are a number of problems to contend with: connectivity, protocol incompatibilities,

interoperability problems, security considerations, logistics for migration, downtime, and not the
least of which, total project cost.
The SMP gateway has been specifically designed to address all these issues. It is the ideal product
to ensure a smooth, safe and cost-effective approach to substation modernization. Indeed, you can
use a step-by-step approach. You decide which steps to take, in which order, and when.
Logical architecture
The SMP is designed to meet all the requirements for power substation automation. It has an open
architecture that allows you to easily add new protocols, devices, local area networks, wide area
networks, and control centers.
In this section, we will describe the logical architecture of the SMP gateway and we will see how
it implements all the functions required of a substation gateway.
Masters and slaves

A typical automation system consists of a SCADA system, located in a control center, which is
connected to devices located in the substation. The SCADA regularly polls the devices in order to
retrieve device readings and statuses. The operator uses the SCADA system to perform control
functions on selected devices.
Since it is the control system that initiates data acquisition and control, it is considered to be the
master system. Since the substation device responds to data acquisition and control requests, it is
considered the slave system.

SCADA
MASTER
SLAVE
DEVICE
Figure 1 Master and slave systems
Introducing the SMP in the automation system

When an SMP is introduced in the automation system, it has to act as both a slave and a master.
The SCADA system interrogates the SMP as if it were a substation device. The SMP is thus a
slave to the SCADA. However, since the SMP is connected to the substation devices, it must also
be able to perform the functions of a master, such as polling for data and sending control requests.
SCADA
MASTER
SLAVE
MASTER
SLAVE
DEVICE
Figure 2 The SMP as a Master-and-slave system
SMP internals
The SMP's internal architecture is based on a series of software components called pr otocol
components. Slave pr otocol components implement all the functions necessary to process

requests received from a SCADA or control center. Master pr otocol components implement the
functions necessary to poll devices and send control requests. Cybectec provides components for
most standard protocols, such as DNP3, MODBUS, IEC-60870-5-101/103/104 and IEC 61850, as
well as a large number of proprietary protocols such as SEL, ABB TEN BYTE, Motorola MDAC,
and more.
The master protocol component polls the device and stores the data that it retrieves in an internal
database, called the Real-Time Data Exchange (RTDX). The RTDX is much more than a simple
data store. Besides storing the current value of all the device data points, it also stores the different
types of information than can be provided by a substation device, such as the quality and
timestamp of the data. It also stores information such as device tags used for control functions.
SCADA
SLAVE
PROTOCOL
REAL-TIME
DATA EXCHANGE
MASTER
PROTOCOL
DEVICE
Figure 3 The SMP real-time data exchange

Communication components
SMP protocol components process the messages exchanged among the control centers and the
devices. However, these messages can be transmitted using various communication methods. For
instance, the MODBUS protocol can be used on a TCP/IP network or on an RS-232 serial link.
SMP communication components implement all the functions required to communicate with a
device or control center using a variety of communication technologies. Cybectec provides
communication components for asynchronous serial ports, RS-232, RS-422, RS-485, TCP/IP and
modems.
SCADA
SLAVE
COMMUNICATION
COMPONENT
SLAVE
PROTOCOL
COMPONENT
REAL-TIME
DATA EXCHANGE
MASTER
PROTOCOL
COMPONENT
MASTER
COMMUNICATION
COMPONENT
DEVICE
Figure 4 SMP communication components

Configuring the SMP
The SMP configuration process consists of establishing the relationships among the internal
components, and providing the specific settings for each of these components. This task is greatly
simplified by Cybectecs SMP Tools family of software programs. These Windows-based
programs help you configure your SMP and identify and correct any problems.
The configuration process consists of the following steps:
Identifying the SMP model and the installed options.

Creating a master protocol component for each device that is connected to the SMP.
Defining all the data points in the device.
Defining the communications link to be used to connect the device to the SMP.
Creating a slave protocol component for each SCADA or control center.
Defining the data points that the SMP will report to the SCADA.
Defining the communications link to be used to connect to the SCADA.
Adding a firewall and optionally a security server that supports corporate network users.
Thus, the configuration settings define the functions that the SMP performs. These settings are
stored in a file that you load onto the SMP. The flexibility of the SMP architecture is the basis of
Cybectecs step-by-step substation modernization strategy.
In the following sections, we will show you how you can configure the SMP to perform all the
functions required of a substation gateway.

Step 1 The transparent SMP
As a first step in a substation automation project, you can easily set up the SMP to act as a
transparent interface between the SCADA and a substation device. The following diagram
illustrates how you can do this for a MODBUS protocol.
SCADA
RS-232
CONNECTION
MODBUS
SLAVE
REAL-TIME
DATA EXCHANGE
MODBUS
MASTER
RS-232
CONNECTION
DEVICE
Figure 5 The transparent SMP
In this configuration, the master component polls the device and stores the values in the RTDX.
The slave component processes the SCADA polling requests and sends the values provided by the
device.
There is not much use for a transparent SMP. However, it contains much more than the
components that we described previously. Simply by adding the SMP to the substation, you now
have access to the following advanced functions:
Centralized automation functions, using the built-in Automation functions or the IEC 61131-3
Soft PLC logic processor.
Real-time data display, using the built-in web server.

Transparent access to devices, using the passthru server, for local or remote IED maintenance.
SNMP support to monitor communication status.
Sophisticated HMI, interactive diagrams, data logging and reporting, using Cybectecs
Visual Substation software.
Sophisticated Windows tools for remote or local maintenance.
A sophisticated security server to support corporate network users.
Even more important, the transparent SMP is the first step in integrating new substation devices to
your existing SCADA and automation system.
VISUAL
SCADA INTERNET SUBSTATION
EXPLORER HMI
RS-232
CONNECTION
MODBUS WEB VISUAL

SLAVE SERVER SUBSTATION
REAL-TIME
PASSTHRU
DATA EXCHANGE
MAINTENANCE
TOOLS
MODBUS IEC 1131

SNMP
MASTER SOFT PLC
RS-232
STATS LOGS TRACES
CONNECTION
DEVICE
Figure 6 Additional SMP functions

Using the SMP as a protocol translator
As we saw in the last section, the SMP is transparent when the master and slave protocols are the
same. When you configure different master and slave protocols, the SMP becomes a protocol
translator.
Since you can independently configure the communication links for the master and slave
components, you can easily use the SMP to integrate legacy serial devices in a modern network
environment. Similarly, you can connect modern IEDs to a legacy control center.
SCADA
TCP/IP
CONNECTION
DNP3
SLAVE
REAL-TIME
DATA EXCHANGE
MODBUS
MASTER
RS-232
CONNECTION
DEVICE
Figure 7 The SMP protocol translator

Using the SMP as a data concentrator or device multiplexer
The SMP architecture is designed to simultaneously support any number of master components.
Each component has its own communications link and its own protocol. All the data retrieved
from the devices is stored in the RTDX, where it becomes available to the SCADA. Using the
SMP as a data concentrator is a simple matter of configuration, and it provides a highly efficient
means of adding new devices to an existing automation system. The SCADA system has no
knowledge of the new devices; it only sees new data points.
SCADA
TCP/IP
CONNECTION
DNP3
SLAVE
REAL-TIME
DATA EXCHANGE
MODBUS SEL
MASTER MASTER
RS-232 RS-232
CONNECTION CONNECTION
DEVICE DEVICE
Figure 8 The SMP data concentrator

Using the SMP as a communications gateway
The SMP architecture supports any number of slave components. Each component has its own
communications link, and all the device data can be sent to any number of SCADA and control
centers, each with its own protocol. Using the SMP, sending data to a new control center is a
simple matter of configuration.
MAINTENANCE
SCADA CENTER
RS-232 TCP/IP
MODBUS DNP3
SLAVE SLAVE
REAL-TIME
DATA EXCHANGE
MODBUS
MASTER
RS-232
CONNECTION
DEVICE
Figure 9 The SMP communications gateway

Putting it all together
The SMPs sophisticated architecture allows it to integrate existing and new RTUs, IEDs, PLCs
and control centers into a single homogeneous substation automation system. It provides you with
a complete solution for automating new substations and modernizing legacy systems.
VISUAL
INTERNET TOUCH
SCADA SCADA SUBSTATION
EXPLORER SCREEN
HMI
RS-232 TCP/IP
MODBUS DNP3 WEB VISUAL

LOCAL HMI
SLAVE SLAVE SERVER SUBSTATION
REAL-TIME
PASSTHRU
DATA EXCHANGE
MODBUS SEL IEC 1131

SNMP
MASTER MASTER SOFT PLC
RS-232 RS-232
STATS LOGS TRACES
DEVICE DEVICE
MAINTENANCE
TOOLS
Figure 10 The SMP substation gateway
Securing the substation

Widespread data access within the SMP Substation Gateway can become an important security
risk if it is compromised, but it can also become a security asset. This is why the gateways are
ready for NERC CIP-002-1 to CIP-009-1 Cyber Security Standards. The gateway provides a
single point of access to all substation data. The security features of the SMP gateway allow you
to protect the substation devices (see Figure 11).
If you activate the security features within your substation SMP you will be able to:
Comply with authentication and authorization policies.
Set-up a firewall to protect from substation LAN security breaches.
Monitor and lock out remote connections; and have a file integrity check on the SMP files.

The access inside the firewall protection has additional layers of protection, so that only a few
users of your choice will have the possibility to modify parameters inside the substation.
Figure 11 The SMP substation gateway with a firewall
In the following chapters, we will learn how to configure the SMP to perform these functions.

The SMP Tools
To assist you with the tasks you will want to perform with the SMPs in your organization, we have
provided you with our suite of SMP Tools.
The SMP Tools are Microsoft Windows-based programs that make it easy for you to configure
the SMP gateway and perform maintenance functions. They run on a PC, are simple to use, and
provide advanced features that allow you to rapidly configure all the devices and communication
links in your substation. They can be used locally or remotely through a LAN, WAN or VPN.
When security is activated, users must log in before they can use any function.
The Cybectec SMP Tools include the following applications:
SMP Manager
Manages all the SMPs in your organization. It displays the state of each SMP, manages their
configuration files, allows you to group two SMPs together to achieve redundancy, and is
used to invoke the configuration and maintenance tools for any SMP to which it is connected.
From SMP Manager, you can also start Internet Explorer to view the data points, logs and
traces in real time, and you can start a Telnet session in order to set-up certain advanced
features such as dial-up access or IRIG-B signal output type.
SMP Config
Used to configure the SMP. It has a spreadsheet-like grid that you use to specify the devices
and control centers connected to the SMP, their protocols, their communication links and their
data points. Advanced editing functions make it easy for you to enter the data points.
Template editing allows you to pre-define standard devices with standard data points, thereby
reducing labor intensity and the possibility of errors.
61850 Config
Used to configure the IEC 61850 and UCA 2.0 protocols on the SMP.
SMP Log
Used to browse through and manage the log files maintained by the SMP. All significant
events are logged, including local and remote control events, system failures, special protocol
events, and so on.
SMP Stats
Used to browse through and manage a large variety of dynamically updated statistics, ranging
from full communication statistics for each link to the processor load for each protocol
component.
SMP Tr ace
Used to browse through the real-time traces generated by the SMP. SMP Trace can display

detailed traces of all protocol and communications link activity. Traces are displayed in both
hexadecimal and application protocol format. The tracing functions are similar to those
usually provided by protocol analyzers, with the notable exception that they can be used
remotely at any time on any SMP and that they decode information at the application level.
As such, they constitute an excellent commissioning or debugging tool.
SMP Connect
Used to establish passthru connections with any IED connected to an SMP, for the purpose of
doing remote configuration and maintenance of IEDs using manufacturer-provided software.
SMP Loader
Used with the SMP 4-20 and SMP 8-40 to load new versions of most of the SMP firmware
components, and with the SMP 4, SMP 16/CP and SMP 16/SG, to load the secondary
bootstrap program. Refer to Appendix A and to your SMP installation guide for details on
using SMP Loader .
The next chapter will discuss how to create a list of SMP gateways with SMP Manager, and will
then explain how to do a complete configuration of your SMP using SMP Config.

SMP Manager
SMP Manager is the doorway to your SMPs. It runs on your PC, as do all the tools you launch
through SMP Manager. You are already familiar with the application, since you added your new
SMP to the list of SMP gateways managed by SMP Manager when you installed your SMP. This
section goes over a few of the points that were covered in your SMP installation guide, and
provides additional information.
Starting SMP Manager and logging on

To start SMP Manager :
On the Windows taskbar, click Start.

Point to Programs, then Cybectec, and then SMP Tools.
In the SMP Tools menu, click SMP Manager.
The SMP Manager main screen appears and shortly after the Login Infor mation dialog box
appears.
Just click OK to close the dialog box unless security is configured.

Main window
The following figure shows a typical SMP Manager window.
As illustrated, the main window displays information such as:
The list of SMP gateways and the tools that are currently running for each SMP gateway in
the list.
The current status of each SMP in the list (started, failed, safe mode, max safe mode, on
standby, and various intermediate states).
The SMP model: SMP 4-20, SMP 8-40, SMP 4, SMP 16/CP or SMP 16/SG.
The IP address and redundancy status of any SMPs you have grouped together for the purpose
of redundancy. This information is available only if your license supports redundancy. This
column is not available by default.
Whether the SMP's built-in firewall is active and whether VPN is connected or disconnected.
This information is available only if your version of the SMP software supports the SMPs
security features. The firewall information is not available by default
You can choose which columns you want to display and their order of appearance, with a right
click on the column header.
Adding an SMP
Creating a list of the SMP gateways you want to monitor is easy. Proceed as follows for each SMP
gateway you want to add to the list:
In the SMP Manager Gateway menu, click Add to add your SMP gateway to the list.
The Gateway Pr oper ties dialog box appears.

Enter the name by which you want to identify your SMP gateway in Gateway Name. The
Configuration file is the file that will be opened by default in SMP Config. If you change its
name afterwards through the File menu, you must come back to this dialog box and change
the name in the Configuration File text box, so it opens the right file at startup.
In the Fir st Addr ess box, type the IP address of the first Ethernet port. You can also type the
address of the second Ethernet port in the Second Addr ess box, although it is not necessary to
do so.
If the SMP gateway cannot be directly accessed through the network, but requires a dialup
connection, check the box The gateway is connected over a r emote dial-up to prevent SMP
Manager from polling the gateway for its status.
Click Add.
The SMP gateway gets added to the list, and SMP Manager automatically detects the model of
the new SMP and in the case of an SMP 4, whether an internal modem is installed.
Information provided by the SMP gateway icon

The SMP gateway icon, which is displayed beside each SMP gateway name, provides additional
information about the SMP gateway.
The following table gives the meaning of each icon:
Icon Description
A device with two red LEDs.

SMP Manager is unable to establish a connection with the SMP gateway.
A device with flashing yellow and green LEDs.

SMP Manager is connected to the SMP gateway.
A blank page.
A file (configuration file, new software, etc.) has been modified and will be activated
when the SMP is restarted.
A lined page and a pencil.

A report is currently in progress.
The report file provides detailed information about the SMP gateway. You should,

Icon Description
therefore, send an SMP gateway report file with any request for technical support.
A device, flashing yellow and green LEDs and a yellow telephone.

SMP Manager is connected to the SMP gateway via remote dialup.
A device and a telephone, greyed.

The SMP gateway is configured for remote dialup but not currently connected to SMP
Manager .
A device, red LEDs and a yellow telephone.

SMP Manager is unable to establish a connection with the SMP gateway over the
remote dialup connection.
Customizing the display

You can customize the display in the SMP Manager window to suit your needs. You can choose
which columns you want to display, and the order in which you want them to appear.
Column Description
Gateway The list of SMP gateways and, if you request it, the tools that are currently running for
each SMP gateway in the list.
IP Address The IP address of any SMPs you have grouped together in SMP Manager. This column
is not available by default.
Status The current status of each SMP in the list (started, failed, safe mode, max safe mode, on
standby, and various intermediate states).
Platform The SMP model: SMP 4-20, SMP 8-40, SMP 4, SMP 16/CP or SMP 16/SG.
Firewall Whether the SMP's built-in firewall is active. This information is available only if your
version of the SMP software supports the SMPs security features.
VPN If the SMP is connected to SMP Manager using VPN or not.
Group This column shows the virtual address given to the redundancy group. If the address is
modified, the new address will appear beside the old one, separated by an arrow. Upon
the next reboot, the device will be grouped under the new address only.
Security This column shows whether the security is activated or not, if it is global or local, and
how recent it is.
Adding or removing a column

To toggle between displaying a column and removing it from the display:

Right-click any column heading.
In the shortcut menu, locate the column you are interested in.
Put or remove a checkmark to add or remove the column to or from the display.
Changing the position of a column

To change the order of a column in the display:
Click the column heading of the column you want to relocate.

Drag the heading to the target location.

Configuring the SMP
Introduction
As we saw under Principles of operation, you have to configure the SMP before you can use it.
For this, you use SMP Config to define the characteristics of your SMP and the functions it has to
perform. The configuration is stored in a file that is then loaded onto the SMP, where it is stored in
non-volatile flash memory.
Using SMP Config, you will perform the following configuration steps:
For an SMP 4-20, SMP 8-40, or an SMP 16/SG define the hardware options installed.
Create a master protocol instance for each device to be supported.
Define each data point on each device.
Configure the communications link to be used to connect to each device.
Create a slave protocol instance for each SCADA or control center.
Configure the communications link to be used to connect to the SCADA.
Map the device data points to SCADA data points.
You will then use SMP Manager to send the configuration file to the SMP.
Note: There can only be one instance of SMP Config running at any given time.
If you launch the tool for a given SMP and then launch it again for a second SMP,
SMP Config will prompt you to save any changes you have made, close the
configuration file of the first SMP, and then open the configuration file of the
second SMP.
To create a configuration file for your SMP gateway, proceed as follows:
Start SMP Manager.

In the SMP Manager application window, click your SMP gateway.
In the Tools menu, click SMP Config to start the application.

The SMP Config display includes 3 panes. The left pane is a tree structure of all the configuration
topics. The top right pane displays the settings for the topic you have selected in the left pane. The
bottom right pane appears when your request that the configuration be validated; it displays error
and warning messages.
The gateway name is the name you assigned when you added the SMP gateway in SMP
Manager . The configuration file name on the title bar was also assigned when you added the SMP
gateway in SMP Manager .
If you open the Master Protocols and Slave Pr otocols branches, you will see that the tree
structure offers you a fixed set of protocols. These are the protocols currently supported by your
product license.

Creating master protocol instances
You need to add a master protocol instance for each device you want to access with your SMP
(see Figure 2). Even if a number of devices share a multidrop link, each of them requires its own
master protocol instance. Each device is a slave, so the SMP acts as a master when communicating
with the device, which is why it requires a master protocol instance.
There are two ways to add the master protocol instance:
You can use a template, which eases the task of configuring the master protocol instance, by
automatically entering the points list for the device. SMP Config provides templates for a
number of common substation devices.
If no template is available, you will need to enter the points list. If you are configuring a
number of devices of the same type, you can save the first device configuration as a template
that you will then use to enter the other devices.
Once you have added a master protocol instance and entered its data points (manually or via a
template), you can click a particular data point type in the left pane and see the list of data points
and their settings in the right pane, as shown next.
Creating a master protocol instance from a template

To add a master protocol instance from a template:
In the left pane, open the Master Protocols branch, to display the list of master protocols
provided under your product license.
In the left pane, click the protocol for which you want to add an instance.
The list of all defined master protocol instances appears in the right pane.
In the Tools menu, click New Instance From Template.

Choose the appropriate template, and click Open.
In the dialog box, enter:

The name of the new instance.
The device prefix.
The device prefix is a string that identifies the device and is used as a prefix for all of its
data point names. The prefix ensures that every name in the system is unique. An
explanation of the usage of prefixes is provided under Configuring the master protocol
general settings, in the next sections.
The new instance appears in the left pane. If you open its tree structure and click the various
physical data point types, all the data points supported by the device will be displayed in the right
pane.
Creating a master protocol instance manually

To add a master protocol instance manually:
In the left pane, open the Master Protocols branch, to display the list of master protocols
provided under your product license.
In the left pane, click the protocol for which you want to add an instance.
The list of all defined master protocol instances appears in the right pane.
In the right pane, enter the name of the new instance at the end of the list of names, and press
the Tab key on your keyboard.
The new protocol instance is added in the left pane, under the protocol type you had selected. If
you expand its tree branch and click an item, the corresponding protocol settings will be displayed
in the right pane. Note that if you click a physical data point type in the left pane, the right pane
will display an empty row since you will have to add the physical data points manually.
Configuring the master protocol general settings

All master protocol components share common settings that define how they interact with a
device. The following procedure describes how to enter these settings. If you created the protocol
instance from a template, the general settings have been defined for you. However, you should
verify the settings to make sure they match your device configuration, and you should familiarize
yourself with the naming conventions discussed in this section.
In the left pane, click General to display the list of general settings for the selected protocol.
In the right pane, enter a Device Pr efix.

The string you enter will be used as a prefix for all the I/O point names of the device. It is
mandatory for each instance of a protocol. It is used to distinguish data point names that are
on the same device type, but on multiple physical devices. The device prefix ensures that
every data point name in the system is unique. Device prefixes are described in the following
section, Adding data points from a protocol template.
Device prefix and naming conventions

A typical substation automation project requires the configuration of thousands of data points.
You can significantly reduce the effort by carefully planning how to name devices and data points.
Cybectec tools provide additional functionality if the names of data points are based on some type
of convention. For our engineering projects, we use a naming convention such as the following:
A data source name, such as the substation name: MAPLE, CEDAR.

A voltage level: 220 or 25.
A device name: L1 to indicate a line, T1 to indicate a transformer, F1 to indicate a feeder,
BUS for a bus bar.
A signal name: V_phsA_mag to indicate the phase A voltage magnitude, A_phsA_mag to
indicate the phase A current magnitude, Pos_st to indicate the status of a breaker or a line
switch.
With such a convention, a data point called CEDAR_220_BUS_V_phsA_mag clearly
indicates the voltage magnitude of phase A on the 220 kV bus of the CEDAR substation. A data
point called MAPLE_025_F1_Pos_st indicates the status of the breaker switch of feeder 1 at
the MAPLE substation.
Still in the Gener al settings, enter the scanning settings.

For instance, to configure a MODBUS master protocol, you would provide settings such as
the following:
A Device Addr ess, typically 1.
A MODBUS Type, typically RTU Ser ial.
A Scan Inter val, typically 1000 ms.
A complete description of all settings is provided in the document entitled Master Protocol
Common Concepts. Protocol-specific settings are described in individual documents, such as
DNP3 Master Protocol.
Accessing protocol-specific documentation

There are Cybectec documents available, to which you can refer for details on the settings of the
currently supported protocols.
To access the documents, proceed as follows:
Click Start, on the Windows taskbar.

Point to All Pr ogr ams, then Cybectec, then SMP Tools, and then Documentation.
In the Documentation menu, click Pr otocols.
The list of available documents is displayed in an explorer window.
Click the document you want to read.

In the File menu of the explorer window, click Open with Acr obat.
Your Adobe Acrobat program starts up and displays the document in a window.

Configuring the data points
Once you have provided the general settings of the protocol component, you then enter all the data
points on the device. If you created the protocol instance from a template, all the data points have
already been added; however, we suggest you read this section for your information.
Protocol components typically support physical and logical data points of the following types:
Analog inputs
Binary inputs
Analog outputs
Binary outputs
A physical data point represents a real-life value, implemented on an external device. You need
to identify all the device data points, either manually or using a device template.
A logical data point is a value managed by the SMP. These data points are built-in and cannot be
modified, but they can be disabled.
Analog inputs are measured values. The system keeps 2 values for each analog measurement
obtained: a raw value, which is usually the value retrieved from the device, and a calculated value
expressed in engineering units, obtained using the following standard formula:
Engineering value = Raw Value X Scaling Factor + Offset
Binar y inputs represent the state of a data point. The state is either ON or OFF.
Analog and binar y outputs are typically initiated by a slave component, which sends a control
request originating from a control center, to the master component involved.
When you create a data point, you specify the type of data and you indicate how the SMP will
retrieve it. General properties such as name, type and units, are independent of the type of device
or protocol used. Protocol-specific properties indicate how the SMP will retrieve the data from the
device. Each protocol uses its particular form of addressing, such as index values or data offsets.
For example, to add a data point for a MODBUS device:
Click the appropriate branch under the protocol instance.
In the right pane, enter the name of the data point and fill in all the appropriate settings.
For instance, to define an analog input you would provide the following settings:
The name of the data point, such as BUS_VA. SMP Config will automatically add the
device prefix to this name, thereby generating the full name of the data point.
The input source, such as Input Register s.
The input format, such as Unsigned Integer .
The input size, such as 16 or 32 bits.
The word offset in the MODBUS device memory.
The scaling information required to convert the raw value to engineering units.
The Units and Descr iption strings used to provide meaningful data displays.

A complete description of all settings is provided in the document entitled Master Protocol
Common Concepts. Protocol-specific settings are described in individual documents, such as
Modicon Modbus Master Protocol. A complete description of system data points can be found in
System data points on page 196 of this manual.
To access the various protocol documents:

Point to Programs, then Cybectec, then SMP Tools, and then Documentation.
Adding data points from a protocol template

Protocol templates can also be used to add points to a protocol component. For instance, you could
use a template to add the data points provided by an optional device feature. You can do this by
retrieving the data points from a protocol template.
To do this:
In the left pane, click the protocol instance to which you want to add the data points.
In the Tools menu, click New Points fr om Template.
A standard Windows Open dialog box appears.
In the Templates folder for the protocol type you selected, choose the .tpl file you want to
use, and click Open.
A dialog box appears, prompting you for the optional prefix and suffix to be added to every new
data point name. The upper portion of the dialog box provides information about the open
template file, while the lower portion shows warning and error messages.
Specify a prefix and a suffix, if applicable.
The new data points now appear in their respective categories under the selected protocol instance,
and their names contain the specified prefix and suffix.
Note that the prefix and suffix are not applied to logical data points, and that the logical data
points are reset every time you add data points from a protocol template. You should, therefore,
configure these data points once you have completed the list of physical data points.

Creating a template from a master protocol instance
You can create a template of a master protocol instance, which you can retrieve later in order to
quickly generate new protocol instances.
To create the template:
In the File menu, click Save As Template.

Choose the Templates folder in which you want to store the template, and click Save.
Note that a template file can contain only one protocol instance. So if you want to create templates
for several protocol instances, create a new configuration for each one and save individual
templates.
Duplicating a master protocol instance

Once you have created a master protocol instance and configured its data points, you may want to
generate one or more additional instances with the same general and data point settings. A quick
way to accomplish this is by duplicating the master protocol instance.
To do this:
In the left pane, click the protocol instance you want to duplicate.
In the Tools menu, click Duplicate.
A dialog box appears, prompting you for the instance name and device prefix, as shown in the
following.
Enter the name and prefix of the protocol instance, and click OK.

The new protocol instance now appears in the left pane.
Configuring the communication links

A protocol component communicates with a device or control center using one of the following: a
serial link, a modem or a TCP/IP network. The configuration of a communications component is
completely independent of the protocol used. Before you connect a device to the SMP, you have
to choose and configure the communications link.
Configuring the serial port interfaces

Depending on the options you choose in the hardware configuration, you can configure the SMP
serial ports to support RS-232, RS-422 or RS-485 communication.
Click Ser ial Por ts in the left pane, to display all the available ports.
For each port, choose the type of interface to be used. Most substation devices typically use
either Asynchr onous RS-232 or Asynchr onous RS-422/485. If you are using a serial port for
a touch screen, select ELO Touchscreen.
Serial port naming conventions
The SMP 16 provides 16 serial ports, identified as A01 through A16. It also has a modem port
labeled Modem, which has a Modem Asynchronous interface. The SMP 16/SG can also
house up to 2 additional serial ports boards, that will be identified as B01 to B16 and D01 to
D16.
The SMP 4 and SMP 4-20 both provide 4 built-in serial ports. These ports are identified as
COM1 Boar d A through COM4 Boar d A.
The SMP 4 also provides a built-in console serial port. This port is identified as Built-in
Console 1 Boar d A. This feature allows you to use the Console port as a standard serial port.
If the SMP 4 has an internal modem, then it provides 3 built-in serial ports and 1 built-in
modem port. These ports are also identified as COM1 Boar d A through COM4 Boar d A;
however, the Inter face column in the right pane indicates that the interface for COM4 Boar d
A is Modem Asynchronous.
The SMP 8-40 provides 4 additional ports named COM1 Board B through COM4 Board B.
The SMP 4-20 and SMP 8-40 SIOM use IPack modules to provide additional ports in groups
of 8. The ports in the first group are called IPack_A1 Boar d A through IPack_A8 Boar d A.
The ports in the second group are called IPack_B1 Boar d A through IPack_B8 Boar d A.
The SMP 8-40 supports two additional groups of ports called IPack_A1 Board B through
IPack_A8 Boar d B and IPack_B1 Boar d B to IPack_B8 Boar d B.
The purpose of each interface is given in the following table:
Interface Description
Asynchronous RS-232 Use this value to indicate that the serial port is dedicated to establishing
a standard asynchronous RS-232 connection.

Interface Description
Asynchronous RS-422/485 Use this value to indicate that the serial port is dedicated to establishing
an asynchronous RS-422 or RS-485 connection.
Modem Asynchronous This value indicates that the port is used for modem asynchronous
communication. The value is automatically assigned to the Modem port
of an SMP 16 and to the COM4 Boar d A port of an SMP 4 equipped
with an internal modem.
RAS (remote access server) Use this value to indicate that the serial port is configured to accept
incoming direct serial connections. This type of connection allows you
to use the SMP Tools as if you were connected to the SMP via a normal
network connection. By default, the console port is always configured
for RAS.
Refer to the SMP 4 Installation Guide, GUI-00316-00026 T, or to the

SMP 16 Installation Guide, GUI-00316-00032 T, for instructions on
setting up a RAS IP address pool. Then refer to Remote access to the
SMP gateway, page 171, in the present manual, for the step-by-step
installation procedure.
Constraint for the SMP 4-20 and the SMP 8-40:
An SMP CPU board can support up to 4 different bit rates for the serial
ports located on the front panel. This means that if you specify that the
console serial port is configured for RAS, only 3 other bit rates will be
available for the remaining 4 serial ports on Board A and that if all the
other Board A serial ports are used, 2 of the 5 serial ports must have the
same bit rate. Note that if you set the console serial port to Reserved and
you do, in fact, accept incoming direct serial connections on the console
serial port as well as on the 4 remaining serial ports, the SMP gateway
application will disable the console port connection. This constraint
obviously does not apply to Board B, since it has 4 serial ports and there
are 4 bit rates available.
Redundancy Use this value to indicate that the serial port is reserved for connecting
2 SMPs together as a redundancy group. See Er r or ! Not a valid r esult
for table., page 149.
Reserved Use this value to indicate that the serial port is reserved for purposes
other than those stated previously.
Configuring the operation of the serial ports

Each serial port needs to be configured with the appropriate settings for the connected device.
In the left pane, open the Connections branch to display all the supported connection types.
Click Asynchronous Ser ial Por ts to display the list of available ports.
Note that if you choose Redundancy as the interface for a serial port, that port will not
appear in the list of Asynchr onous Ser ial Por ts, as it will be reserved for connecting the
2 SMPs that will be grouped together.
In the right pane, enter the settings for the selected serial ports.
The required settings are usually provided in the device manufacturers reference manual:

If you are using RS-485 2-wire communication, choose RS-485. If you are using RS-485
4-wire communication, choose RS-422.
Choose the device communication settings: baud rate, byte size, parity and number of
stop bits, such as 9600 baud, 8 bits, no parity, and 1 stop bit.
Choose the device hardware handshaking mode:
If the link type is RS-232, most devices do not use handshaking, so you should keep
the default values: RTS to Always On, DTR to Always On, and CTS to Ignor e.
If the link type is RS-422, set RTS to Always On. You shouldnt have any problem
if you keep the other default values: DTR to Always On, and CTS to Ignor e.
If the link type is RS-485, set RTS to TX Request. You shouldnt have any problem
if you keep the other default values: DTR to Always On, and CTS to Ignor e.
If you are using RS-422 or RS-485 communication, specify whether or not you will be
using line terminators. Refer to your SMP installation guide for a discussion of
termination resistors.
Configuring TCP/IP connections

TCP/IP connections are most often used by slave components to connect to control centers.
However, an increasing number of modern IEDs can be connected to a substation LAN using a
TCP/IP connection.
To configure a TCP/IP connection for a master protocol component:
In the left pane, click Connections, and then on TCP/IP Master s, to display the list of
defined connections.
In the right pane, enter the settings for the new TCP/IP connection in an empty row of the
grid:
Provide a significant name for the connection
If you are setting up an SMP 8-40, specify whether you will be using board A or board B
to interface with the network.
Enter the IP address of the device.
Enter the logical port number of the device. This information is provided by the device
manufacturer.

Associating a master protocol instance with a
communications link
In the preceding steps, you configured a master protocol component and a communications
component. Now, you have to associate the protocol component with the communications
component.
To associate a master protocol instance with a communications link:
In the left pane, click Connection Usage.

In the right pane, for each master protocol instance under Master Connection Usage, put a
checkmark for the appropriate connection.
Note: If you have several devices that share a multidrop link, each device must have a
different device address.

Testing the configuration
Since the configuration of an SMP gateway offers so many features, SMP Config tests and
validates the configuration files before you load it onto the SMP gateway. Before going any
further, you should make sure your configuration is error-free. Then, you will send it to the SMP
in order to test it in a real-life situation.
Validating and saving the configuration

To validate the configuration:
In the Validate menu, click Validate All.
If your configuration contains any errors, messages will appear in the Messages pane, as shown
next.
Correct any errors and repeat the process until the configuration is error-free.
To save the configuration on your computer:
In the File menu, click Save.
Note: You cannot save a configuration file that contains errors. This feature is intended
to prevent you from inadvertently loading an invalid configuration file onto an
SMP gateway. However, you can save your configuration file if the message
pane displays warnings only.

Sending the configuration to the SMP gateway
Once the configuration file is valid, you can send it to the SMP gateway.
To do this:
Click your SMP gateway in the SMP Manager application window.

In the Gateway menu, click Send Configur ation File and choose your configuration file,
which has been saved in the location you specified in the Gateway Proper ties dialog box.
After sending the file to the SMP gateway, SMP Manager informs you that you have to restart
your SMP gateway for the new application to go into effect.
In the Restar t Gateway dialog box, choose Shutdown and Restar t to have the SMP restart
in normal mode.
All restarts are automatically logged in the SMPs internal log file. You can enter a comment
to indicate why you restarted the SMP. This comment will be added to the event log.
The SMP gateway will go through a series of startup steps, which will be displayed in the Status
column of your SMP gateway. When startup is complete, if your configuration file is correct, the
Status column will show Star ted, to indicate that the SMP has started normally.
If your configuration file is incorrect, the Status column will indicate that there is a problem.
There are a number of conditions that can prevent the SMP from activating a configuration. For
instance, the hardware settings may not match the actual physical configuration of the SMP. If the
SMP does not start up normally, turn to Troubleshooting, page 205.
Now that you have a working configuration file with all the master data points, you can use the
other SMP Tools and Internet Explorer to see what is going on with the SMP and with the
connected device.
Retrieving an SMP gateway configuration file

When you are about to send a configuration file to an SMP gateway, as described previously, you
should first retrieve the old configuration file from the SMP gateway and store it on your PC. This
will not be necessary when you first configure your SMP, but on subsequent updates, it becomes
an important precaution to take.
Proceed as follows:
Click the SMP gateway in the list of SMP gateways.

In the Gateway menu, click Get Configuration File.
In the Configur ation Download dialog box, SMP Manager displays the available configuration
files. The current configuration file is identified by the .par suffix, while the previous
configuration file is identified by .old. You might also see files with the extension .txt and .ait.
Choose the .old file, and click the OK button.

In the Save As dialog box, specify the name and path where the configuration file is to be
stored. The name of the configuration file on the SMP gateway is used as the default name.

Working with SMP Config grids
There are many time-saving features you can use to enter data in an SMP Config grid. These
features are presented next.
Selecting cells and lines

To select on or several cells:
Click single cell you wish to select.

To select several cells, hold down the CTRL key while clicking the cells.
To select part of a column or part of a row, click the first cell, hold down SHIFT and click the
last cell you wish to select.
To select a column or a row:
Click the header of the line you want to select.

To select several rows or columns, hold down the CTRL key while clicking their header.
To select a group of rows or columns in a sequential order, select the header of the first one,
hold down the SHIFT key and select the last one.
Duplicating a line
Proceed as follows to duplicate a line:
Click the header of the line you want to duplicate.

In the Edit menu, click Duplicate Line.
The line is duplicated after the last line in the display.
In the following example, we clicked on a line and clicked the Duplicate Line command twice, so
the line appears twice at the bottom of the list.
Copying a value to a group of cells

The Change Selection command of the Edit menu allows you to copy a value from a particular
cell, to one or more lines selected within the same column.
To copy a value to one or more selected cells:

Click the cell to which you want to copy a value.
If you are selecting more than one cell, use the Ctrl key or the Shift key on your keyboard, as
per standard Windows procedure.
In the Edit menu, click Select Cells.

This makes the cells turn gray, as shown next.
Click in the cell that contains the value you want to copy. In the example, we clicked in the
CI_01 Scale cell.
In the Edit menu, click Change Selection.

The value is copied to the selected cells.
To deselect the cells, click Clear Selection in the Edit menu.
Note:
If you have selected a group of cells and would like to add other cells to the group:
Select the desired cells using the Ctrl key or the Shift key on your keyboard, per the
standard Windows procedure.
In the Edit menu, click Add to selection.
Resequencing a group of lines

Some settings are sequenced, within a given column. You may decide to remove data points, in
which case you will need to remove gaps in the numbering sequence. Resequencing all the entries
would be quite tedious, the Resequence Selection command of the Edit menu makes it easy.
In the following example, the line with Index no. 7 has been deleted. All subsequent index
numbers are now incorrect.

To correct the problem, proceed as follows:
Click the cell with Index no. 8.
Hold down the Shift key of your keyboard and click the last cell in the column.
In the Edit menu, click Select Cells.

The cells turn gray.
In the Edit menu, click Resequence Selection.

A dialog box appears, in which you must specify the starting sequence number (7) and the
increment (1). The result is shown next.
To deselect the cells, click Clear Selection in the Edit menu.

Deleting an item
To delete a line in a gr id:
In the right pane, click the header of the line you want to delete.
Press the Del key on your keyboard, and confirm your intention of deleting the row.
The item disappears from the grid.
To delete a protocol instance:
In the left pane, click the protocol type.
The list of instances of this protocol type appears in the right pane.
In the right pane, click the protocol instance you want to delete.
Press the Del key on your keyboard, and confirm your intention of deleting the row.
The protocol instance disappears from both panes.
To delete a ser ial por t connection:
By their very nature, serial port connections cannot be deleted in the same way. To delete a serial
port connection, you have to reserve the corresponding serial port for another usage:
In the left pane, click Ser ial Por ts.

In the right pane, choose Reser ved in the Inter face list of the serial port.
Using tooltips
SMP Config provides context tooltips. These tooltips are not displayed on the status bar but rather
appear when you point with the mouse to a cell in any grid. This type of tooltip normally displays
the editing criteria for the field. For example, it may tell you that the value must fall between 10
and 1000, that the default value is 500 ms, that the field is mandatory if a certain other field
contains a checkmark, and so on. So they will assist you in editing grids.
Here is a sample tooltip:
This feature is a great time and effort saver, as it spares you from having to wait until you try to
validate or save your SMP configuration before finding out that you have a number of errors.

Viewing the SMP log files
The SMP gateway maintains an internal log of all significant events. Using SMP Log, you can
select and view the various log files in real time. You can view, print, search and save all or any
information in this application.
To start SMP Log and view the SMP log files, proceed as follows:

In the Tools menu, click SMP Log.
SMP Log starts up and displays the list of available logs.
Click a log in the left pane, to view its contents in the right pane.
Information provided by SMP Log

The following log files contain information that you will find useful for the configuration and
maintenance of your SMP:
The Star tup log records all the steps that the SMP performed when it last started. The log
indicates which configuration file was loaded and which protocol components were
configured and started. You should consult the startup log each time you change the SMP
configuration, in order make sure it is a success.

The Reset log records the time and reason for each SMP restart. It indicates whether the reset
occurred because of a power failure, a request from the front panel button, a remote request, a
watchdog trip, or a fatal hardware or software problem.
The Control log records the steps that the SMP performed in response to a local or remote
control request.
The Secur ity log records all events that concern the security options such as authentication
failures, file integrity check and much more.
The other SMP log files contain information that can help you and our technical support team in
identifying problems.
SMP Log features

SMP Log offers you several handy feature: searching, printing and saving log file, and have the
information displayed in UTC or local time.
Searching in SMP Log

To search in SMP Log:
From the menu View, click Sear ch.
Type a keyword in the text box and click the Sear ch button. All the results will become
highlighted, the first one will be lighter.
To go to the next result, click Sear ch Next in the View menu or press F3.
To go to the previous result, click Sear ch Pr evious in the View menu or press F3.
Once you have found, click Cancel Sear ch from the View menu and only the selected result
will remain highlighted.
Printing a log
To print a log:
Select a folder.
From the menu View, click Pr int.
Saving a log file

To save a log file:
Select a folder.
From the menu View, select Save As.

Type a name for the file, you can use a different extension such as .csv or .txt.
Viewing multiple log folders at once

To view e:
Select folders, using the shift or the ctrl key.
All folders content will be displayed, merged in on screen.
Changing how the time is displayed

To change how the time is displayed:
From the View menu, click Time Display Options.
From the Time Display Options dialog box, select the type of display from the Time Display
For mat drop box: you can choose between the local time and SMP UTC. Normally, your
gateway is set in UTC, but you can display the information how you wish it.

Viewing protocol exchanges in
real time
Using SMP Tr ace, you can view a continuous stream of protocol exchanges between the SMP
and the substation devices, or between the SMP and the control center.
At this stage, however, since you have only configured master protocol instances, you will only
see the protocol exchanges that take place between the SMP and the substation devices.
You can have the information displayed in UTC or local time, highlight the lines that contain
specific keywords, and you can clear the current display. SMP Tr ace can generate a continuous
log of all the events you are tracing, to a text file on your PC. It can also print or save to a text file,
a snapshot of the traced events that occurred since the last time you cleared the display.
To start SMP Tr ace and view the protocol exchanges:

In the Tools menu, click SMP Tr ace.

Information provided by SMP Trace
SMP Tr ace starts up and displays the list of available traces.
In the left pane, put a checkmark next to the item for which you want to view the protocol
exchanges.
If you click a folder, everything within the folder is automatically selected.
Using SMP Tr ace, you can view a detailed trace of all the system activity. The following traces
provide information that you will find useful during the configuration and maintenance of your
SMP gateway.
Master and Slave Protocol traces display the high-level information exchanges that occur
between the SMP and the other system components to which it is connected. These
application-level traces are similar to those provided by a protocol analyzer. They describe the
requests sent to a device and the values retrieved. The Slave Pr otocols folder appears only if
the protocol is defined.
Connection traces display the data being exchanged between the SMP and a device. These
low-level traces describe, in hexadecimal format, the byte stream sent and received to and
from a device.

SMP Trace features
SMP Trace offers you several handy features: recording traces, searching, printing and saving
trace records, and have the information displayed in UTC or local time.
Searching in SMP Trace

From the menu View, click Sear ch. You can also press CTRL-F.
Type a keyword in the text box and click the Sear ch button. All the results will become
highlighted, the first one will be lighter. You can click the Pause/Resume button in the
toolbar to stop the screen from scrolling; this command is also available from the View menu.
To go to the next result, click Sear ch Next in the View menu or press F3.
To go to the previous result, click Sear ch Pr evious in the View menu or press F3.
Once you have found, click Cancel Sear ch from the View menu and only the selected result
will remain highlighted.
Note: SMP Trace will keep highlighting matching results as long as you have not
canceled the search. You can either deselect the binoculars in the toolbar or stop
the search from the View menu.
Printing a trace
Select a folder.
From the menu File, click Pr int.
Recording a live trace

To record a live trace for further analysis:
From the Recor d menu, select Star t or click the red button in the toolbar. You are prompted
for a file name.

You can also choose to save it inside the SMP's memory by selecting Recor d to SMP. For
example, if you have an SMP 4 with a modem in a pole outdoors and you need to save
24 hours worth of activities, most of the time long distance costs are prohibitive. Use this
option and connect again 24 hours later to pick up your data.
When you wish to stop the recording, click the red button again or Stop in the Record menu.
Saving all the scrolled information

To save all the information in SMP Trace that scrolled since opening it:
Select a folder.
From the menu File, select Save As.
Type a name for the file, it will be saved in the .txt format.

To change how the time is displayed:

Viewing communication
statistics in real time
The SMP stores a large number of real-time statistics and internal counters to help you analyze the
performance of your SMP gateway and assist you in troubleshooting your configuration. Using
SMP Stats, you can view, in real time, various statistics about the communication links and about
the protocol exchanges that take place between the SMP gateway and the devices or control
centers. You can have the information displayed in UTC or local time. You can also print the
statistics, reset them, or save them to a text file for subsequent analysis.
To start SMP Stats and view the statistics:

In the Tools menu, click SMP Stats.
SMP Stats starts up and displays the list of available statistics.
In the left pane, click the item for which you want to view the statistics.
The statistics are displayed in the right pane and you can see them change dynamically.

Information provided by SMP Stats
The following items provide information on the system activity; you will find it useful for the
configuration and maintenance of your SMP.
The Connections folder contains counters and statistics about the performance of the SMP
communication components. The Networ k (TCPIP) folder contains the list of all the network
connections you defined under Connections, with SMP Config. The Ser ial (Asynchronous)
folder contains the list of all the serial connections. The Modem Pool folder contains the list
of any modem pools and modems you may have defined with SMP Config. You can
configure modem pools and modem usage only if you purchase a modem support option for
your SMP. The items in these folders provide an easy way to monitor the communication
status of the SMP. For example, you can look at the Receive counter and Transmit counter
values to determine whether the SMP is exchanging data with a connected device or control
center.
The Master Pr otocols and Slave Pr otocols folders contain counters and statistics about each
instance of a protocol component. Each protocol component contains protocol-specific items
that describe the messages exchanged with a device or control center. (The Slave Protocols
folder is missing, in the example, because we have to define slave protocol components first.)
The System folder contains counters and statistics about the operation of the SMP hardware
and software.
SMP Stats features

SMP Stats you several handy features: resetting statistics, printing them, refreshing them,
changing how time is displayed.
Resetting statistics
You can reset certain statistics, such as global RTDX or web server statistics:
From the menu View, select Reset; or click the 'X' button; or press CTRL-X.
Printing statistics
To print a statistics:
Select a folder.
From the menu File, click Pr int.



Using a web browser to view
data in real time
The SMPs built-in web server provides an easy way to view the log files and statistics using your
Internet Explorer web browser. It is also the easiest way to view the analog and digital input and
output points in real time.
To view the data points, you start Internet Explorer.

In the Tools menu, click Inter net Explor er.

The web server window has a number of tabs at the top that allow you to switch to different data
views. If you have password security, everything will be deactivated until you enter a valid
username and password.
The About tab gives you key information about your SMP gateway, such as its current state,
at what time it started up, and the master and slave protocol instances contained in your
configuration.
The Analog Input, Analog Output, Binary Input, and Binar y Output tabs display the
current value of all the SMP data points.
The Logs tab displays the contents of the internal SMP log files. The data is the same as that
provided by the SMP Log program.
The Statistics tab displays the real-time statistics of the SMP. The data is the same as that
provided by the SMP Stats program.
Note: The eSMP web server requires version 5.0 or a later version of the Microsoft
Internet Explorer web browser. JRE (Java Runtime Environment) must also be
installed on your computer. See your SMP installation guide for details.
Applying a filter to a data point display

If you click the Analog Input, Analog Output, Binar y Input and Binar y Output tabs, you can
see all the data points change dynamically on your screen. Since there may be a large number of
data points, you can use the Filter function to choose the points you want to display.
To apply a filter:
Click in the checkbox of each point you want to display.

Click Apply Filter , located at the top left above the window.
The window contents are refreshed, showing only the points you chose.
To remove a data point from the filtered display:
Click in the checkbox of the data point.
The data point disappears from the filtered view.
Acknowledging data point value changes

To help you analyze your data, the web server automatically highlights any data point that changes
values, by displaying it on a gray background. The data point stays highlighted until you
acknowledge the change of value. You can also have the web server automatically acknowledge
value changes after a short delay.
To have Internet Explorer automatically acknowledge the value changes:

Click the appropriate tab, to choose the type of data.
Put a checkmark in the Auto Ack. box located at the top right, above the data point display.
Data points will now be highlighted when their value changes, and the display will return to
normal after a short delay.
To manually acknowledge value changes for a particular type of data point:
Click the appropriate tab, to choose the type of data.

Make sure there is no checkmark in the Auto Ack. box.
Data points will now be highlighted when their value changes. They will remain highlighted until
you acknowledge the change of value.
Click Acknowledge, located at the top left above the data point display, to remove all
highlighting.

Connecting the SMP to a control
center
Now that we have seen how to configure master protocol instances, test the SMP configuration
and view the data, we will see how to configure a slave protocol instance in order to forward the
device data to a SCADA or control center.
Creating slave protocol instances

When the SMP communicates with a control center, it acts as a slave and as such, needs to use a
slave protocol. One slave protocol instance is required per control center.
To create a slave protocol instance:
In the left pane, under Slave Pr otocols, click the protocol for which you want to add an
instance.
In the right pane, enter the name of the new instance at the end of the list of names, and press
the Tab key on your keyboard.
The new protocol instance is added to the left pane, under the protocol type you had selected. If
you expand the protocol instance branch, SMP Config displays the protocol settings.
Configuring slave protocol instances

The configuration of a slave protocol component is similar to that of a master protocol component.
You choose the protocol, enter the protocol settings, and specify the data points you want
forwarded to the SCADA.
The following procedure describes how to configure a slave protocol instance:
In the left pane, click General, to display the list of general settings for the selected slave
protocol instance.
In the right pane, enter the protocol settings.

For instance, to configure a DNP3 slave component, you would provide settings such as:

The Link Addr ess, which identifies the logical slave device. The address has to match
the address used by the control center to communicate with the SMP.
The Master Link Addr ess, which identifies the control center.
Whether or not you want to support Unsolicited Repor ting.
In the left pane, click Default Var iations.
In the right pane, specify how you want the data points to be reported. For example, you may
want to specify that when there is a change to an analog input point, you want the change
reported as a 32-bit value, with the time at which the event took place.
A complete description of the protocol-specific settings is available in individual documents, such

as DNP3 Slave Protocol.
To access the various protocol documents:

Point to Programs, then Cybectec, then SMP Tools, and then Documentation.
Subscribing to the master data points

Slave protocol instances subscribe to data points in the real-time database. Whenever a master
protocol instance writes to the database, the slave instance retrieves the data and applies its own
settings to make it compatible with the requirements of the control center protocol.
When you configure a slave protocol component, you select from among all the data points
defined by the master protocol components, those data points to which you want to subscribe.
In the left pane, click the slave protocol instance.

In the Tools menu, click Subscr ibe To.
The Subscr ibe to Master I/O dialog box appears.

Click in the Master I/O list, to display the list of data points defined for each master protocol
instance.
Choose the data points you want to forward to the control center.
Use the Ctrl and Shift keys on your keyboard, to extend your selection.
Click the dialog boxs right arrow button.
The data points you choose are added to the Slave I/O list. If, for example, you click a binary
input point in the Master I/O list, the point is added to Binar y Inputs, in the Slave I/O list.
Normally, a data point that has been transferred to the Slave I/O list disappears from the Master
I/O list. However, if you want the transferred data points to continue being displayed in the
Master I/O list:
Put a checkmark in Show all enabled points.
If you change your mind, you can remove a data point from the Slave I/O list as follows:
Click the data point in the Slave I/O list.

Click the dialog boxs left arrow button.
The data point is removed from the Slave I/O list and reinserted in the appropriate data point list
for the appropriate master.

Configuring the data points
The slave component automatically converts the subscribed data points to the appropriate format
for the protocol. However, you should make sure the default settings are appropriate and perform
any necessary adjustments.
To configure the data points:
In the left pane, click the data point type, to display a list of all the data points and their
settings.
There are different settings for each protocol. However, you should at least check the address
or index assigned to each data point.
For instance, the following settings are provided for a DNP3 data point:
Each data point is automatically assigned an Index value according to the subscription
order. You should ensure that these index values correspond to those expected by the
control center.
The Event Class setting groups data points together for subsequent reporting to the
control center.
Configuring the communication links

We previously described how to configure a serial communications link for a master protocol
component. The procedure is identical for a slave protocol component that uses a serial
communications link (see Configuring the communication links, page 35).
However, a slave protocol component typically uses a TCP/IP connection over a LAN, to
communicate with the control center.
Setting up a TCP/IP connection

To configure a TCP/IP connection for a slave protocol component:
In the left pane, click TCP/IP Slaves, under Connections, to display the list of defined
connections.
Enter the settings for the new TCP/IP connection in an empty row of the grid:
Specify a significant name for the connection.
Specify the logical port number to be used.

Associating a slave protocol instance with a
communications link
You now have to identify the link via which the slave component will communicate with the
control center.
To associate a slave protocol instance with a communications link:
In the left pane, click Connection usage.

In the right pane, for each slave protocol instance under Slave Connection Usage, put a
checkmark for the appropriate connection.
Validating and activating the configuration

You will now validate the configuration, save it on your computer, send it to the SMP, and restart
the SMP in order to activate the configuration.
The procedures for doing this were described earlier, in the following sections:
Validating and saving the configuration, page 39.

Sending the configuration to the SMP gateway, page 40.
Testing the configuration

The SMP configuration now contains a slave component. Slave components are more difficult to
test than master components, since they only process data in response to a request from a control
center. You may find the following guidelines useful in determining whether the slave component
is working properly:
Using SMP Log, check the Star tup log, to see whether the slave component was started
correctly.
Using SMP Stats, open the Slave Pr otocols folder and check whether the slave component is
processing any data.
Using SMP Stats, open the Connections folder, and check whether any data is being
exchanged through the slaves communications link.
Using SMP Tr ace, open the Slave Pr otocols folder, and check whether the component is
receiving requests from the control center.
Using the web browser,
Using SMP Tr ace, open the Connections folder, and check whether any data is being
exchanged through the slaves communications link.

See the following sections for instructions on how to proceed to view the information:
Viewing the SMP log files, page 45.

Viewing protocol exchanges in real time, page 49.
Viewing communication statistics in real time, page 53.
Using a web browser to view data in real time, page 57.
A particularly effective way to test a slave protocol instance is to use the SMP itself to set up a
master protocol instance to poll the slave. Using this approach and the SMP Tools, you can easily
examine the effect of the various protocol features, such as report by exception.

Connecting to another SMP
Introduction
It is possible to connect two SMPs together, by the means of the Inter connections option in
SMP Config. In the case of an SMP Gateway, Interconnections will allow you to increase the
number of IEDs to more than 128, for example. A slave Interconnections option has to be
configured in one SMP, and a master Interconnections option is to be configured in the other
SMP.
This type of connection can be accomplished with such protocols as DNP3, but masters and slaves
have to be in perfect synchronization. With Interconnections, points do not have to be specified
one by one in the slave.
SCADA
DNP3 MASTER
DNP3 SLAVE
PARK AVENUE
INTERCONNECTIONS MASTER
INTERCONNECTIONS SLAVE
CEDAR CREEK
MASTER
SLAVE
IEDs
If you move from the device up to the SCADA, you will see how the master-slave configuration
must be designed for this to work. In the example above, you can see a SCADA, a first SMP
called Park Avenue, a second SMP called Cedar Creek, and an IED.
The main steps are the following, using the example:

In the device's master, create an Interconnections slave.
Create its connection, associate it in connection usage.
Create an Interconnections master in your SMP gateway.
Import points.
Give them a prefix to identify the different SMP when you see its readings in the web
browser.
Create its connection, associate it in connection usage.
Configuring the slave SMP

In the example, an IED was configured and is sending information to an SMP gateway called
Cedar Creek, and an SMP gateway called Park Avenue needs to be connected to it, to have its data
available for your SCADA.
The first step to get your SMPs to communicate is to signify in the slave SMP the existence of
your SMP.
Start SMP Config.
Configure the Interconnections slave:
In SMP Config, under Slave Pr otocols, select Inter connections.
Under Name in the right pane, type the master SMP's name (in the example, Park
Avenue) and click again the Inter connections branch.
A new branch will appear under Interconnections, name after what was just typed.
Expand it and select Clients.
Under Type, select SMP Gateway. Under Client name, type the client name (in the
example, Park Avenue).
Configure the slave connection:

Collapse the Slave Pr otocol branch and expand Connections, then select TCP/IP
Slaves.
Under name, type the TCP/IP slave's name. For example, you can name it
Interconnections.
Under Por t, type 6655.
Configure the connection usage:
Click the Connection Usage branch.
Under Slave Connection Usage in the right pane, you will see Park Avenue. Scroll to
the right and select the checkbox for the TCP/IP slave's name (in the example, the name
is Inter connections).
The procedure is identical for a slave protocol component that uses a serial communications link
(see Configuring the communication links, page 35).
Configuring the master SMP

You have configured the slave SMP to get its information, now you will configure your SMP as
an Interconnections master.
Select the master SMP; in the example it is called Park Avenue.
From the Tools menu, select SMP Config.
Configure the Interconnections master:

In SMP Config, under Master Pr otocols, select Inter connections.
Under Name in the right pane, type the slave's name (in this example it is Cedar
Creek) and click again the Inter connections branch.
A Cedar Creek branch will appear under Inter connections. Expand it and select
Gener al.
Type a prefix for the other SMP to distinguish its points. In this example, you can type
You_.
Configure the points selection:
From the Tools menu, select Configur e.
Select the configuration file for the slave (ex. SMP Cedar Creek 's file would be Cedar
Creek.par).
The Update Data Points dialog box will appear, listing all the possible points that can be
"interconnected". Click Update.
You will be returned to SMP Config.
Configure the master connection:
Collapse the Master Pr otocol branch and expand Connections, then select TCP/IP
Master s.
Under name, type the TCP/IP master's name. For example, you can name it
Interconnections.
Under IP Addr ess, type the slave's (Cedar Creek) IP address.
Under Por t, type 6655.
Configure the connection usage:

Click the Connection Usage branch.
Under Master Connection Usage, you will see Cedar Cr eek. Scroll to the right and
select the Interconnections checkbox.
Save the configuration file and close SMP Config; send the configuration file to the SMP
gateway using SMP Manager (see Updating the configuration file on page 190).
Send the configuration files to each SMP gateway. To see if it works, open a web browser in SMP
Manager for Park Avenue. You should see points with the prefix YOU_, coming from Cedar
Creek's IED.

Security
Introduction
The greatest benefits from IED integration can be derived when substation data becomes available
to users at the enterprise level. However, widespread data access can become an important security
risk if it is compromised.
In August 2003, the North American Electric Reliability Council (NERC) issued the NERC 1200
Urgent Action Cyber Security Standard in order To reduce risks to the reliability of the bulk
electric systems from any compromise of critical cyber assets (computers, software and
communication networks) that support those systems.
The NERC 1200 standard evolved into NERC 1300, and is now known as NERC CIP-002-1 to
CIP-009-1 Cyber Security Standards. These standards describe measures that utilities will have to
implement, as well as a strict timeline for implementation.
This chapter describes the advanced security features that Cybectec has implemented since
version 4 of the SMP gateway software and tools, in order to provide utilities with a secure,
NERC-compliant, solution to integrating their substation devices. It then takes you through the
steps required to customize the security settings to suit the needs of your organization, and
provides some general guidelines on setting up a secure substation LAN.
Meeting NERC CIP requirements

Cybectecs SMP gateway helps you meet NERC requirements by providing secure access to
substation devices. Its sophisticated software includes the following security features:
Authentication and author ization Each user is authenticated by the SMP gateway via a
user name and a password. Strong passwords, individual user accounts, user groups, and
detailed group permissions protect critical system functions from unauthorized access. All
access attempts are logged, and accounts are locked out in the event of multiple failed
attempts.
Pr otection fr om substation LAN secur ity br eaches The SMP gateway is protected by a
built-in firewall and a built-in VPN server. All TCP/IP ports are blocked, except those
required for control center communication and SMP status monitoring. All communication

between the SMP gateway and the SMP Tools goes through an encrypted VPN tunnel, even
when the SMP is in passthru mode.
Monitor ing and locking of r emote connections Modem and passthru access is
continuously monitored, and can be enabled or disabled by the control center. All accesses are
logged and limited to authorized users.
Integr ity checking All SMP software and firmware components are signed in order to
ensure their authenticity and integrity. All executable files are also continuously monitored to
prevent execution of unauthorized code.
Managing the security configuration of one or more

SMP gateways
Getting started
The following sections will take you through the steps required to customize your SMP gateway
configuration, in order to meet the security policy of your particular organization. To create a
secured system, you need to build a database describing the allowed user names, their password
and how many password errors they are allowed to make before being locked out. Every company
has its own security criteria and Cybectec software lets you configure it accordingly. When the
database is built and security is turned on, only the users in the list will be allowed to access the
gateway.
After setting up the authentication policy, establish a VPN connection to open a connection with
the SMP before installing a firewall. The you should set up a firewall. A firewall is a system that
blocks anything outside the company secured network. It protects the system against intrusion and
especially against unwanted access. Once the firewall is in place, you can then open IP addresses
for the SCADA and other such systems to specific IP services (ports).
Additionally, the security built in the SMP does not allow an unsigned file in, it has to be a file
signed by Cybectec to be allowed in the gateway. More information about this concept is given in
the section File certification and integrity checking.
Setting up your custom security configuration involves the following:
Defining your authentication policy.

Customizing the various user groups and privileges.
Identifying your users, setting their passwords, and assigning them to user groups.
Validating and saving the security configuration on your PC.
Sending your security configuration to one or more SMP gateways.
In this section, you will also learn the following:
Retrieve the security configuration of an SMP gateway and storing it locally.

Disable the security configuration of one or more SMP gateways.
Unlock a user account that has been locked out following failed login attempts.

View the security log.
Accessing the Login Information dialog box

When you start SMP Manager, you need to login to edit the security. If the login is not prompted
upon startup, you can access the Login Information dialog box the following way:
In the File menu, click Change Cur r ent Login.
The Login Infor mation dialog box appears.
If security is configured on the gateway, logging in will acknowledge your rights from a list of
authorized users so you can change settings. It is then highly recommended to check Always show
this dialog box at star tup because if you need to change settings you will already be logged in
with the rights to do so. You will automatically be prompted for you credentials whenever you
start the application.
If you cleared the checkbox Always show this dialog box at startup, you will no longer be
prompted at startup. It is more practical if no security is configured and that you do not plan it in a
near future.
Appropriate Use banner in the Login dialog box

NERC CIP standards require that an appropriate use banner be displayed. SMP Manager allows
this in the Login Information dialog box:
Create a text file named Appropriate Use Notice.txt in the folder

(drive)\Program Files\Cybectec\SMP Tools\Manager\.
In the text file, type the text required by the security policies of your company.
When you restart the SMP Manager, the Login Information dialog box will contain the
message you just typed in the text file.
The following is an example:

Defining your authentication policy
Your authentication policy forms an integral part of your security configuration. It specifies which
login requirements a user has to meet in order to be authenticated. It also specifies whether the
user account is to be locked out after a certain number of failed login attempts within a certain
number of minutes, and whether the account is to be automatically unlocked after a certain amount
of time.
To define your authentication policy for the ver y fir st time and assign a name to
your secur ity configuration:
Log into SMP Manager (see Starting SMP Manager and logging on, page 21).
The username and password you enter will automatically be assigned security management
privileges. This will allow you to set up your authentication policy and your user groups and
privileges.
In the SMP Manager Edit menu, click Secur ity Configuration.
The Authentication Policy dialog box appears, as shown in the next illustration, and you are
ready to enter the information.
To modify your authentication policy on subsequent occasions:
Log into SMP Manager with an authorized username and password. Only a person with
security management privileges can modify the authentication policy.
In the Edit menu, click Security Configuration.
The Secur ity Configur ation Editor window appears.
In the Secur ity menu of the Secur ity Configuration Editor window, click Authentication
Policy.
The Authentication Policy dialog box appears.

The dialog box contains the following elements:
Element Description
Secur ity Configur ation This section of the dialog box provides a description of the
group box security configuration, and shows when the security configuration
was last modified.
Description Use this box to enter a meaningful description for your security
configuration. This description will appear on the title bar of the
Secur ity Configur ation Editor window as soon as you close the
dialog box.
Modified by This read-only box indicates which SMP Manager user last
modified the security configuration.
Date modified This read-only box indicates the date and time when the security
configuration was last modified.
Passwor d group box This section of the dialog box specifies the login requirements a
user has to meet in order to be authenticated.
Minimum password length The password must contain at least the number of characters
specified in this box.
Password must meet A checkmark specifies that the password must contain characters
complexity requirements from at least 3 out of the following categories:
alphabetic high caps

alphabetic small caps
numeric
special characters.

Element Description
Account Lock group box This section of the dialog box specifies whether a user account is
to be locked out from SMP gateway access if the user fails to log
in properly and if so, what are the locking and unlocking
parameters.
Enable account lock If you remove the checkmark from this box, the user account will
not be locked out even after numerous failed login attempts. All
the other boxes in this section will become unavailable.
Maximum number of failed Specifies the number of times a user can enter incorrect login
login attempts information before the user account is locked out.
Lock account if max failed The system will lock out the user account if the user makes the
logins within maximum number of login attempts within the number of minutes
specified here.
Activate automatic account A checkmark specifies that a locked user account will be
unlock automatically unlocked by the system.
Remove lockout after A locked user account will be automatically unlocked after the
number of minutes specified here.
Modify your authentication policy to your needs, and click OK.
The dialog box closes, the description of your security configuration appears on the title bar of the
Secur ity Configur ation Editor window, and your authentication policy goes into effect as soon
as it is sent to the concerned SMP(s).
Groups and privileges

In the following table, you will find default user groups and privileges. You can change a group's
privileges at will; of course you have to update the security file in the SMP afterwards.
Note: If you remove privileges you must notice the concerned groups or users, or they
will keep trying to access the gateway and fill up the security log with access
denial messages.
Privilege Description Groups
Security Update security configuration: users, groups, Administrators

Management and privileges; unlock user accounts.
System Management Update firmware, software, license and Administrators

components; configure redundancy, firewall,
VPN, RAS, SNTP, and SNNP; access Telnet
and FTP servers.
Configuration Update SMP gateway configuration file. Administrators,

technicians.

Privilege Description Groups
Read only Read SMP gateway configuration file only. Administrators,

technicians, operators.
Diagnostic Use SMP gateway diagnostics tools. Administrators,

technicians, operators.
Device maintenance Perform direct IED maintenance via passthru Administrators,

connections. protection engineers.
Monitoring Monitor and access web access to SMP gateway Administrators,

central database. technicians, operators,
guests.
Operation Perform control, tag management and force Administrators,

operation on I/O points. operators.
Remote access Obtain remote access via dial-up or VPN. Administrators,

technicians, protection
engineers, operators.
Editing user groups and privileges

Initially, your security configuration includes the following elements:
One predefined user, namely an administrator with full privileges.

5 predefined user groups, each with predefined privileges. Privileges are described in the
Security Configuration Editor
You may want to add, delete or rename the user groups and change their privileges to reflect the
security policy of your particular organization.
Proceed as follows:
In the SMP Manager Edit menu, click Secur ity Configuration.
The Secur ity Configur ation Editor window appears. If you click a user group in the left pane,
the right pane shows the privileges assigned to this group and gives a description of each privilege.

To rename a group:
In the left pane, click the group.

In the Gr oup menu, click Rename.
Enter the new name.
Note: You cannot rename the Administr ator s group.
To delete a group:
In the left pane, click the group.

In the Gr oup menu, click Delete.
You will be advised if there are any users assigned to the group you are about to delete.
Note: You cannot delete the Administr ator s group.
To add a new group:
In the Gr oup menu, click New.

Enter the name of the new group.
You cannot add, delete or rename privileges. However, you can choose which predefined
privileges you want to assign to a particular group.
To do this:
In the left pane, click the user group.

In the right pane, add or remove checkmarks.
Managing user groups and privileges

You will now identify the users that are authorized to access the SMP gateway, and you will
assign each user to one or more groups.

To add a new user:
In the User menu, click New.

Enter the name of the new user.
To rename a user:
In the left pane, click the user.

In the User menu, click Rename.
Enter the new user name.
To delete a user:

In the User menu, click Delete.
Note: You cannot delete the user called Administr ator .
To assign a user to one or more user groups:

In the right pane, add or remove checkmarks, as shown next.
To assign a password to a new user or to change the password of an existing user:

In the User menu, click Set Passwor d.
In the Set Passwor d dialog box, enter and confirm the new password.
Note: The first time you edit the security configuration, we strongly suggest that you
rename the user called Administrator, since the name is so revealing that it
could open the door to a serious security breach. For the same reason, we also
recommend that you immediately assign a password to that user.

Validating and saving the security configuration
Your security configuration, which includes your authentication policy and the users and groups
you have defined, is automatically validated and stored locally on your PC when you close the
Secur ity Configur ation Editor window.
However, if you want to manually validate your security configuration without closing the
window, proceed as follows:
In the Secur ity menu, click Check Validity. This will compare your security parameters such
as passwords with the authentication policy that you defined beforehand.
There are two reasons why you may want to export to a file your security configuration on your
PC:
To create a backup copy.

To transfer your security configuration from one PC to another.
To manually save the security configuration to a file on your PC:
In the Secur ity menu, click Send to File.

In the Send Secur ity To File dialog box, specify a file name and click Save.
Sending the security configuration to one or more SMP

gateways
Your security configuration, which includes your authentication policy and the users and groups
you have defined, is stored locally on your PC. To activate your security configuration on one or
more SMP gateways, you have to send your local security configuration to the SMP gateway(s).
Sending the current security configuration

Proceed as follows to send the security configuration that is currently active on your PC:
In SMP Manager, click the SMP gateway or gateways to which you want to send the security
configuration.
In the Gateway menu, click Secur ity Management, and then click Update SMP Gateway
Secur ity Configur ation.
SMP Manager encrypts the information, and then sends the configuration to the SMP gateway or
gateways. In the following example, we sent the security configuration to a single SMP gateway.
The optional Secur ity column contains the message Up to date to indicate that the security policy
on the SMP4 ING gateway matches that on the PC.

Sending a previously saved security configuration
Let us suppose that an authorized person in your organization updated the local security
configuration on his or her PC, and sent you a copy of the security configuration file.
To load this new security configuration onto one or more SMP gateways, proceed as follows:
Retrieve the file:

In Secur ity menu of the Secur ity Configuration Editor window, click Get fr om File.
In the Get Secur ity Fr om File dialog box, specify the file name and click Open.
The retrieved file now becomes the currently active local security configuration.
Close the Secur ity Configur ation Editor window.
In SMP Manager, click the SMP gateway or gateways to which you want to send the security
configuration.
In the Gateway menu, click Secur ity Management, and then click Update SMP Gateway
Secur ity Configur ation.
The Security column

The Secur ity column displays the status of the security configuration that is currently active on
the SMP gateway.
Here is an explanation of the different values with a suggestion of what action to take, if any:
Up To Date
The security configuration on the SMP gateway is the same as the security configuration that
is currently active on your PC. This is the normal case.
Older (date and time)

You sent a security configuration to the SMP gateway, but subsequently modified the local
security settings. Therefore, the security configuration on the SMP gateway is older than your
local security configuration.
To rectify the situation:

Send your local security configuration to the SMP gateway (see Sending the current
security configuration, page 81). The Status column will now display Up To Date.
Newer (date and time)

You sent a security configuration to the SMP gateway, but someone on another PC
subsequently modified his or her own local security configuration and sent it to the SMP
gateway.
To rectify the situation:
Contact the person who made the changes.
If you approve:
Retrieve the security configuration from the SMP gateway in order to update your own
local security configuration (see Retrieving the security configuration of an SMP
gateway, next section). The Status column will now display Up To Date.
If the modifications should not have been made:
Send your local security configuration to the SMP gateway (see Sending the current
security configuration, page 81). The Status column will now display Up To Date.
? (a question mark)
The software installed on the SMP gateway does not support the security features.
Retrieving the security configuration of an SMP gateway

You may want to replace your current local security configuration with the security configuration
that exists on a particular SMP gateway.
Proceed as follows:
In SMP Manager, click the SMP gateway.

In the Gateway menu, click Secur ity Management, and then click Get Secur ity
Configuration from SMP Gateway.
SMP Manager retrieves the file from the SMP gateway and upon your approval, updates your
local security configuration with that retrieved from the SMP gateway.
Removing the security configuration from one or more SMP

gateways
Proceed as follows to remove the security configuration from one or more SMP gateways:
In SMP Manager, click the SMP gateway or gateways from which you want to remove the
security configuration.
In the Gateway menu, click Secur ity Management, and then click Remove Secur ity
Configuration from SMP Gateway.

Once you have confirmed your intention and the security configuration has been removed, the
Secur ity column of the SMP gateway(s) on which you clicked now displays the word Disabled.
Note: Only your authentication policy and your user groups and privileges are disabled.
The other security functions, such as integrity checking and firewall and VPN
management, are not disabled.
You can reactivate the security configuration of one or more SMP gateways by simply sending
them your local security configuration, as described under Sending the security configuration to
one or more SMP gateways, page 81.
Unlocking a user account

Only a person with security management privileges can unlock user accounts that have been
locked out following failed login attempts.
To unlock one or more user accounts:
In SMP Manager, click the SMP gateway for which you want to perform the unlock
operation.
In the Gateway menu, click Secur ity Management, and then click Unlock User Accounts.
In the Unlock Accounts for < SMP gateway > dialog box:
Click Unlock all accounts.
OR
Click Unlock specific account, and specify the account in the User Name box.
In the example shown next, 2 user accounts have been locked out, and we have asked to unlock a
specific account.
Click Unlock.
Following the unlocking operation, the number in the Accounts locked box is decremented
accordingly.

Viewing the security log
If you have security management privileges, you can view the security log and see all security-
related events, including:
All authentications, whether granted or refused.

All user account locks and unlocks.
All configuration, maintenance, and security management activities.
All Telnet, Web and passthru server accesses.
Integrity check status information.
Security server status information.
To view the security log:
In the SMP Manager Tools menu, click SMP Log.

In the SMP Log application window, click the Secur ity folder in the left pane.
The security-related events will appear in the right pane.
File certification and integrity checking
Introduction
Every executable file on the SMP gateway and every SMP Tool is signed to ensure that it
originates from Cybectec. A digital fingerprint is encrypted and inserted in the file at the factory.
Whenever you load a file onto the SMP gateway, SMP Manager or SMP Loader performs an
integrity check on the file. Furthermore, a continuous integrity check is performed on the SMP
gateway at all times, to detect whether any executable file has been tampered with by a virus or an
unauthorized file has been loaded via an unconventional method.
Once you have loaded a version of the SMP software that includes the security features, you
cannot use a previous version of the SMP software or of the SMP Tools since they would have
unsigned files and would, therefore, fail the integrity checks.
Detecting an integrity check failure

If a file fails the integrity check, the SMP gateway restarts and goes into a mode in which there is
no communication between the devices and the SMP gateway.
You can detect this situation as follows:
In the SMP Manager window, the Status column shows that the SMP gateway is in Safe
Mode.
All device points are tagged with a communications failure attribute. A series of alarms are
generated, that can be seen at the SCADA or in a local HMI.

The Reset log indicates that the integrity check function has restarted the SMP gateway in
Safe Mode.
The Secur ity log contains an entry indicating when the problem was detected, and several
entries identifying each file that failed the integrity check. It can take up to 5 minutes for all
entries to appear in the log.
Recovering from an integrity failure

Windows CE that is installed in the gateway, has an integrity check and if the gateway goes into
the safe mode, it means that the gateway application needs to be updated to match Windows CE.
To do so:
See Updating the SMP gateway application, page 193.

If the SMP gateway goes into Safe Mode after the update, contact Cybectec technical
support.
VPN connections and the SMP gateway firewall
Introduction
The SMP 4, SMP 16/CP and SMP 16/SG each offer their own built-in firewall, which provides
maximum security against intrusion through the substation LAN.
When enabled, the firewall shuts off all the TCP/UDP ports of the SMP gateway, except for the
VPN port (TCP 1723) and another port that is reserved for internal use. All the network messages
go through the VPN port, and if the security is enabled, are encapsulated and encrypted by the
VPN (Virtual Private Network) protocol before being forwarded to the destination port.
When the firewall is disabled, you can access the SMP gateway through the VPN port or through
any other TCP/UDP port on the SMP gateway. Thus, using VPN connections without the built-in
firewall is less secure since the network messages that go through the other ports are not
encrypted.
Customizing the firewall and VPN connections

If you have system management privileges, you can customize the firewall and VPN connections
to suit your needs.
Proceed as follows:
Pre-establish the VPN connection: In SMP Manager, click the menu Gateway and select
Establish a VPN Connection. What happens when you click this function the first time is
that it creates the settings in the Windows Control Panel, in Network Connections. In SMP
Manager you will see "Connecting". If you go to Network Connections in Windows, you will
now see a new icon named after your gateway, under Virtual Private Network. Once
connected, you can disconnect it and move on to the next step.
Click your SMP gateway in the SMP Manager application window, and from the Tools
menu. click Telnet to start a Telnet session.
In the Telnet window, enter the username and password of a user account that has system
management privileges.

At the prompt, enter the following command:
firewallmgr
The firewall manager displays the list of available commands, as the following shows:
Firewall Manager.
Available commands (case insensitive):
F Enable/disable the firewall.

L Enable/disable the firewall log.
A Add a custom firewall rule.
D Remove a custom firewall rule.
R Show custom firewall rules.
V Set the maximum number of incoming VPN connections.
S Show the current firewall and VPN status.
H Display the list of available commands.
Q Quit.
You can display the previous list anytime, by using the H command.
The commands are described as follows:
F command
The F command enables or disables the firewall.
The firewall is initially disabled and VPN is disconnected.
Befor e enabling the fir ewall, make sur e you can use VPN connections through your
cor por ate networ k; other wise, you will lose all communication with the SMP gateway, since
all but the VPN por t will be closed.
When you request to enable the firewall, you are warned that you need to be able to make VPN
connections. You are also given the option to enable the firewall either when you exit the firewall
manager or when you restart the SMP gateway.
If you have mistakenly enabled the firewall when, in fact, you cannot use VPN connections:
Ask your IT administrator to modify the corporate network to allow VPN connections to the
SMP gateway, if possible.
If your IT administrator cannot solve the problem:
Either:
Make a VPN connection via the SMP gateways subnetwork.

Start a Telnet session and disable the firewall.
Or:
Connect your PC to the SMP gateways console port.

Start a Telnet session and disable the firewall.
L command
The L command enables or disables the firewall log. If you enable the log, all significant
information related to firewall activity will be entered into the log. You will be able to view the
contents of the Firewall log with SMP Log.
A command
The A command adds a custom firewall rule. A firewall rule is used to open additional ports in the
firewall, to specify whether the ports will be accessed via the TCP or UDP protocol, and
optionally, which IP addresses will be allowed to go through the ports.
Example:
Pocket CMD v 4.20

\> firewallmgr
Firewall Manager.
F Enable/disable the firewall.

L Enable/disable the firewall log.
A Add a custom firewall rule.
D Remove a custom firewall rule.
R Show custom firewall rules.
V Set the maximum number of incoming VPN connections.
S Show the current firewall and VPN status.
H Display the list of available commands.
Q Quit.
"(H) Help, (Q) Quit: a"
Custom rules allow access to the SMP Gateway according to the

specified parameters.
"Specify a rule name, leave blank to cancel: PassthruServer"
What protocol do you want the rule to apply to?

(T)CP or (U)DP [T]: t
Specify the port range.

Example: 21
500-520
Port range: 32500
"This port can either be opened for any computer, or for a specific"
computer or subnet.

Do you want this port to be accessible from any computer [Y]? y
Rule summary:
Name: PassthruServer
Protocol: TCP
Port range: 80
Accessible from: any computer
Do you want to proceed creating the firewall rule [Y]?

Firewall rule created.
In the previous example, we opened ports 506 and 507 to TCP messages, and we specified that
only IP address 10.87.35.4 could access the ports. Give any name you wish to the rule you create,
as this space of text is only for you to remember it by.
If we had entered the same IP address but a subnet mask of 255.255.0.0, for example, we would
have granted access to all IP addresses within the range 10.87.0.0 and 10.87.255.255.
D command
The D command removes a particular firewall rule.
R command
The R command displays the list of firewall rules you have set-up.
V command
The V command specifies the maximum number of incoming VPN connections allowed. The
default value is 2, but you can increase this number to a maximum of 5. If you decrease the
number of VPN connections, some VPN connections will be closed when you activate the setting.
You are therefore given the option to activate the new value either when you exit the firewall
manager or when you restart the SMP gateway.
S command
The S command shows the current status of the firewall and VPN connections.
Example:
Firewall: disable (currently disabled)
Firewall log: enable (currently enabled)
VPN connections: 2* (currently 3)
* This setting will be applied on next restart.
In the previous example, we can see that at most 3 incoming VPN connections are currently
allowed, but that on the next restart of the SMP gateway, this number will be changed to 2.
H command
The H command displays the list of available commands, as shown at the beginning of this section.

Q command
The Q command is used to exit the firewall manager. If you have modified any settings that will
go into effect later, you are notified of the fact.
Example:
(H) Help, (Q) Quit: q
The following settings will be applied on next restart.
Maximum VPN connections: 2
Press any key to exit.
Connecting and disconnecting VPN when the firewall is enabled

If you are running Windows XP or Windows 2000 on your PC, you can connect to a maximum of
2 SMP gateways simultaneously. With Windows Server 2003, the maximum number of VPN
connections is 5.
When the firewall is enabled, there a 2 ways to establish a VPN connection and to subsequently
disconnect VPN.
Method 1
This is the preferred and simplest method.
To establish a VPN connection:
In SMP Manager, start any SMP Tool, or Telnet, or Internet Explorer.
The VPN connection is established automatically and remains active, regardless of how many
tools you launch. The IP Addr ess column displays the IP address of the VPN connection, and the
VPN column indicates that the VPN connection is established, as shown next.
To disconnect VPN:
Close all the tools.

When you close the last tool, VPN is automatically disconnected. The IP Addr ess column once
again shows the address of the SMP gateway, and the VPN column indicates that VPN is
disconnected.
Method 2
This method is useful when the client application is not under the control of SMP Manager . An
example might be the CoDeSys application. If you were programming the SMP gateways soft
PLC with CoDeSys, you would enter the CoDeSys commands via your PC workstation (see The
Soft PLC, page 145). Then when you were ready to load the CoDeSys script onto the SMP
gateway in order to test and debug the script, you would proceed as follows.
Start SMP Manager.

In the Gateway menu, click Make VPN Connection.
The IP Addr ess column displays the IP address of the VPN connection, and the VPN column
indicates that the VPN connection is established.
Use CoDeSys to download your script onto the SMP gateway via the VPN address associated
with the SMP.
In the Gateway menu, click Disconnect VPN.
The IP Addr ess column once again shows the address of the SMP gateway, and the VPN column
indicates that VPN is disconnected.
Connecting and disconnecting VPN when the firewall is disabled

As stated earlier, if you are running Windows XP or Windows 2000 on your PC, you can connect
to a maximum of 2 SMP gateways simultaneously. With Windows Server 2003, the maximum
number of VPN connections is 5.
To use a VPN connection when the firewall is disabled:
In the SMP Manager Gateway menu, click Make VPN Connection.
The IP Addr ess column displays the IP address of the VPN connection, and the VPN column
indicates that the VPN connection is established, as shown next.

Substation network security considerations
Setting up a secure substation LAN

Security, as implemented on the SMP gateway, is not a substitute for full network security that
includes properly configured firewalls. It can be argued that if unauthorized users get as far as
trying out the SMPs security features, there has already been a security breach at some other
level. The goal of the firewall, simply stated, is to minimize the risk of unauthorized access (or
network traffic) to internal components on the PCN or SCADA systems.
The substation LAN is a critical part of a utilitys network. To ensure its integrity, it must be
isolated as much as possible from the outside world. Ensuring the security of the substation LAN
is a complex subject beyond the scope of this document. However, in this section we will provide
some general guidelines on setting up a secure substation LAN.
A corporate LAN provides a number of access points to the outside world and is exposed to a
variety of threats through its connection to the Internet, external mail servers and file transfers,
which may contain viruses. If there is a direct connection between the corporate and substation
LANs, the substation is not secure.
A significant improvement is the use of firewalls with the ability to establish a number of
demilitarized zones (DMZ) between the enterprise and process control networks. Each DMZ holds
a separate "critical" component, such as the data historian, the wireless access point or remote and
third party access systems. In effect, the use of a DMZ-capable firewall allows the creation of an
intermediate network often referred to as a process information network (PIN).
To create a DMZ requires that the firewall offer three or more interfaces, rather than the typical
public and private interfaces. One of the interfaces is connected to the enterprise; the second is
connected to the PCN/SCADA network and the remaining interfaces to the shared or insecure
devices such as the data historian server or wireless access points. Figure 7 illustrates a typical
DMZ firewall design in a PCN/SCADA setting.
Figure 12 Network security
To isolate the substation LAN, you should take the following precautions:

There should be no email access.
There should be no Internet access.
There should be no direct connection to the corporate LAN.
Furthermore, a redundant path should be provided between the SCADA and the substation, to
ensure continued operation in the event of a failure of the corporate WAN. A dedicated
communication line is often maintained for this purpose.
A firewall must be used to isolate the substation LAN from the corporate WAN. The firewall
should be configured to block all ports and connections except those that are absolutely necessary
for the operation of the substation. For instance, the firewall could be set up to accept traffic
between the SCADA and the SMP gateway only. The firewall could also be configured to limit
traffic to a single port, such as that used by a DNP3 communications link.
Note, however, that such a security policy would prevent the use of the SMP Tools outside the
substation.
Using the SMP Tools through a substation LAN firewall

Cybectecs SMP Tools use Microsoft DCOM technology. This technology is designed to be used
on a LAN. There are two strategies available to use DCOM through a firewall.
The most secure approach is to establish a VPN (Virtual Private Network) connection
between the substation LAN and the client workstations on the corporate LAN. A VPN
encapsulates and encrypts network messages before forwarding them to the recipient. You
will not need any special setup when installing the SMP Tools. This approach will also secure
access by any other tools.
If you cannot use a VPN, you will need to open the necessary ports for DCOM on the
firewalls and routers that connect to the corporate LAN.
Here is the list of ports and port ranges that you have to open in the substation LAN firewall,
to let a PC on one side of the firewall communicate with an SMP on the other side of the
firewall:
For access when not using VPN, open

Application Port Protocol
FTP server 21 TCP
Telnet 23 TCP
SMP Status 23 UDP
Web server 80 TCP
RPC server and 135 TCP

DCOM
DCOM 1024 to 1124 TCP
SMP maintenance 49152 TCP

server

Optional ports, using VPN or not
SNMP server 161 UDP
SNTP server 123 TCP
CoDeSys server 1200 TCP
Passthru server 32500 TCP
If using VPN, open

SMP Status 23 UDP
PPTP (VPN) 1723 TCP and UDP
PPTP (VPN) - GRE
Here is a list of the most commonly used ports for RTU and SCADA communication:
SMP Config Protocol Port
DNP3 20000
ICC-60870-5-104/103 2404
IEC-61850 102
ICCP 102
MODBUS 502
IMPORTANT:
This configuration will work only if you are NOT doing address translation. Check with your
network administrator.
If you are using SNMP, you will also need to open the following ports:
GET and SET commands go through port number 161.

SNMP traps go through port 162.

Locking incoming RAS and passthru connections
Incoming RAS dialup connections to the SMP gateway, and passthru connections between the
SMP gateway and the devices, represent yet another danger to the security of the SMP gateway.
With the security features, the control center can lock all incoming RAS dialup connections, as
well as individual passthru connections.
The following logical data points, which you can view with the SMPs web browser, are used for
this purpose:
Data Point Description
_smp___dialupEnable This binary output point is used to lock or unlock all

incoming RAS dialup connections to the SMP gateway.
_smp___dialupEnabled This binary output point is used to lock or unlock all

incoming RAS dialup connections to the SMP gateway.
_smp___dialupInUse This binary input point indicates whether or not there is a

communication in progress via an incoming RAS dialup
connection.
_smp___passthru<connection>Enable This binary output point is used to lock or unlock a

particular passthru connection. The name of the connection,
as defined in SMP Config, is included in the name of the
data point.
_smp___passthru<connection>Enabled This binary input point indicates whether a particular

passthru connection is currently enabled or disabled.
_smp___passthru<connection>InUse This binary input point indicates whether a particular

passthru connection is currently active.
Locking or unlocking all incoming RAS dialup connections

The control center can lock all incoming RAS dialup connections at any time, regardless of
whether or not there is a communication in progress. After an SMP gateway restart, the
connections are restored to whatever state they had before the restart.
There are 2 ways to lock or unlock incoming RAS dialup connections:
Method 1
In the SMP Manager window, start a Telnet session.

Enter the command to start the RAS manager:
RASMGR
Enter the command to toggle between locking and unlocking incoming dialup connections.
X
Example:
(H) Help, (Q) Quit [h]: x

Do you want to lock the incoming dialup connections? [N]: y
The incoming dialup connections are now locked.
(H) Help, (Q) Quit [h]: x
Do you want to lock the incoming dialup connections? [Y]: n

The incoming dialup connections are now unlocked.
Method 2
Using an HMI or Visual Substation Explor er , perform the OPEN or CLOSE operation on
the _smp___dialupEnable data point. You can do a Direct Execute or a Select Before Operate
(SBO). (See the Visual Substation Explorer User Guide, GUI-00115-00020 T).
Locking or unlocking a passthru connection

The control center can lock or unlock passthru connections individually, and can also request that
a particular passthru connection be automatically locked or unlocked on SMP gateway startup.
To lock or unlock a passthru connection:
Using an HMI or Visual Substation Explor er , perform the lock or unlock operation on the
_smp___passthru<connection>Enable data point (see the Visual Substation Explorer User
Guide, GUI-00115-00020 T).
To request that a particular passthru connection be locked or unlocked on SMP gateway startup:
In SMP Manager, start SMP Config.

In the left pane, click Passthr u Connections.
In the right pane, select the passthru connection, and either enter or remove a checkmark in
the Blocked at Star tup box.

Using passthru connections
Introduction
Most manufacturers of new IEDs provide PC-based tools for the configuration and maintenance of
their devices. These tools usually connect to the device using a serial link or, less frequently, a
network connection.
The optional SMP passthru feature gives you the ability to use PC-based tools to access the
devices connected to an SMP. With this feature, you can use the SMP as a terminal server for
remote maintenance, monitoring and control of the connected devices.

Principles of operation
The maintenance and configuration programs expect the device to be connected to a serial port on
the PC. Since the device is now connected to the SMP instead, the passthru function has to
intercept this communications link and provide a mechanism to exchange messages between the
PC-based program and the SMP.
PC
SCADA
TOOL
VIRTUAL
LOOPBACK
PORT
SMP
CONNECT
COMM
LINK
SLAVE
COMPONENT
PASSTHRU REAL-TIME
SERVER DATA EXCHANGE
MASTER
COMPONENT
COMM
LINK
DEVICE
Figure 13 Using a passthru connection
To do so, you need to set up a virtual loopback connection between SMP Connect and the
maintenance or configuration tool. This allows SMP Connect to intercept the communications
link from the maintenance or configuration tool and forward the messages to the SMP gateway.
The SMPs passthru server then forwards the data to the device via a serial link. The combination
of the SMPs passthru feature and the SMP Connect program provides a passthru connection
between the PC-based maintenance program and a device. The maintenance and configuration
tools can operate as if the device were directly connected to the PC. SMP Connect acts as a
terminal server and gives you the ability to choose the device to which you want to connect.

While the PC application is communicating with the IED or RTU, the latter may have to suspend
its data acquisition; indeed, depending on the serial line and device type involved, it may be
necessary for all devices on the line to suspend their data acquisition, even though only one device
is engaged in communications with the PC application. SMP Connect terminates the passthru
connection if a problem arises or if there is no data exchanged during a specified timeout period.
Setting up passthru connections

Setting up a passthru connection involves a number of steps.
Using SMP Config, you identify the devices that will be using passthru connections. For each
device, you provide information such as the SMP port to be used for the passthru connection,
and the timeout after which the passthru connection is to be terminated if there has been no
data exchange.
In SMP Connect, you identify each application that will communicate with a device via a
passthru connection. For each of these applications, you specify the type of loopback
connection to be established between SMP Connect and the application, and you define the
communication settings of the loopback connection.
You use SMP Connect to select the target device and run the application.
Configuring SMP passthru

Using SMP Config, define the SMP passthru settings for each device that will be using a passthru
connection:
In the left pane, click Passthr u Connections.
In the following figure, we have set up passthru connections for 3 devices connected to an
SMP 16.
Create a new connection by entering the following information in the empty row:

IED Name
This name will be used to identify the device in the SMP Connect program. You should
use the same name that you assigned to the device when configuring the master protocol
component.
Port Name
Choose the serial port that links the SMP to the configuration port of the device. Some
devices use separate configuration and data ports. In that case, you will use two separate
cables to connect the device to the SMP; otherwise, the port will be the same as that used
by the master protocol.
Suspend Link
This setting indicates that data acquisition should be suspended for all other devices
sharing the multidrop link while SMP Connect is communicating with the selected
device. The default is that acquisition of the remaining devices NOT be suspended. This
setting applies only to devices that support the feature.
Suspend IED
This device-specific setting indicates whether or not the master protocol component
should suspend data acquisition while SMP Connect is communicating with the device.
The default is that acquisition be suspended. This setting applies only to devices that
support the feature.
IED Address
This address identifies the device in a multidrop configuration. The Suspend IED option
has to be checked or the value is ignored.
Modem Signals
This setting specifies whether or not the serial port associated with the IED supports
modem control signals. If you put a checkmark, the DTR and RTS modem control signals
will be transfered across the passthru connection. The default is that modem control
signals are NOT supported.
Blocked at Startup
This setting is a security feature. If you put a checkmark, the passthru connection will not
be available when the SMP starts up. You can subsequently make it available by enabling
specific logical data points, as explained under Locking incoming RAS and passthru
connections, page 95.
Inactivity Timeout
This mandatory setting specifies how long the SMP Connect link can remain inactive. If
the program detects that there has been no data exchange between the device and the
application during the specified timeout period, it prompts the user to either terminate the
session or specify a longer wait time.
Comments
This optional setting gives instructions to the SMP Connect operator, such as telling him
which communications program to use with the device.
Installing a loopback cable, if necessary

There are 3 types of loopback connections that you can set up between the device manufacturers
maintenance or configuration application and SMP Connect:

A virtual serial loopback connection.
This is the preferred choice.
A real serial loopback connection.
You set up this type of connection only if the device manufacturers application cannot use a
virtual communications port.
A TCP/IP loopback connection.
You set up this type of connection only if the device manufacturers application uses TCP/IP.
If you set up a real serial loopback connection, the manufacturers program will use one of the
PCs serial ports, such as COM1, to connect to the device, and you will connect that serial port to
another of the PCs serial ports, such as COM2. The data exchanged on COM1 will then become
available to the SMP Connect program.
To connect the 2 serial ports together:
Install a null modem cable.
This type of cable crosses the receive and transmit signals so that the output of one is fed into the
input of the other.
Setting up a list of applications and loopback connections

SMP Connect communicates with the device manufacturers application via a loopback
connection. There may be several applications running on the PC. You have to identify all the
available applications and for each application, you have to provide the following information:
Specify whether the application is to be started manually, identify the path to the application,
and provide any arguments required by the program.
Specify what type of loopback connection is to be used between SMP Connect and the
application, and define the communication settings of the loopback connection.
To start SMP Connect:

In the Tools menu, click SMP Connect.
The SMP Connect application window appears, showing a list of all the devices configured to
support passthru connections. The top portion of the screen shows what you entered in SMP
Config, with one add ional piece of information; the PThr u Active column indicates whether a
passthru connection is currently being used for a particular device. The bottom portion of the
screen shows a trace of passthru connection events. Using the SMP Connect menus, you can
specify whether the trace window is to show UTC or local time. You can clear the trace, and you
can save it to a text file on your PC.

To identify the application program that will communicate with a device and to define the
communication settings of the loopback connection, proceed as follows:
Click the device in the top pane of the SMP Connect window.
In the Contr ol menu, click IED Application Settings.
The IED Application Settings dialog box appears. The first time you use this box, you will use
the 4 buttons at the top to create the application list.
In the dialog box, click the application in the list, and specify:
Whether the application is to be started manually. If you put a checkmark, then when you
connect to the device, SMP Connect will start the passthru and loopback connections
without starting the application; you will be able to start the application manually.
The complete path to the devices maintenance and configuration tool.
The command line arguments required by the tool, if any (see the manufacturers
documentation).

Whether SMP Connect is to use a virtual serial loopback, a real serial loopback, or a
TCP/IP loopback connection to communicate with the tool. Most manufacturers tools
use a virtual or real serial connection. However, if you are using a terminal emulator
program such as Microsoft HyperTerminal, to communicate with the device, you can use
a TCP/IP connection.
The settings of the virtual serial loopback connection (Configur e button):

Application port.
Communication settings (parity, data bits, stop bits, flow control).
OR
The settings of the real serial loopback connection (Configur e button):

Application port.
SMP Connect port.
Communication settings (parity, data bits, stop bits, flow control)
OR
The settings of the TCP/IP loopback connection (Configure button):

(the dialog box shows the IP address of your PC).
Logical port number for the TCP/IP connection; enter the same TCP/IP port number
that you set in the device manufacturers tool or in the HyperTeminal program.
Indicate whether your application uses the Telnet protocol. Most terminal
applications using TCP/IP do use the Telnet protocol, so the box contains a
checkmark by default.
Connecting to the device

Click the device in the device list.
In the Contr ol menu, click Connect to IED .
In the IED Application Selection dialog box, choose the application to be used.
Click the Connect button.
Normally, the configured application window opens and you can start entering commands.
However, if you requested that the application be started manually, the trace window will show
that SMP Connect has established the SMP passthru connection and has started the loopback
connection with the application, but the application window will not open. You will have to start
the application manually before you can enter commands.

Testing the passthru connection
Setting up a passthru connection is usually a straightforward operation. When problems occur, it is
often because a device cannot communicate and perform data acquisition simultaneously.
You may find the following guidelines useful in identifying and solving problems with passthru
connections:
Using SMP Config, check the Suspend IED setting for the selected passthru connection. If
you modify the setting, remember to load the modified configuration and restart the SMP.
Using SMP Connect, check the message pane to see if the passthru connection is being
activated correctly.
Using SMP Tr ace, open the Master Pr otocols folder, and check whether the component is
receiving requests from the control center.
Using SMP Tr ace, open the PassThruSer ver folder, and check whether any data is being
exchanged with the device.
Using SMP Tr ace, open the Connections folder, and check whether any data is being
exchanged with the device.
Deactivating the SMP passthru connection

To deactivate the SMP passthru connection:
Close the manufacturers application or HyperTerminal.
OR
Click the device in the SMP Connect window.

In the Contr ol menu, click Disconnect from IED.
The SMP Connect trace window now shows that the passthru connection is no longer active.
Note: The passthru connection is automatically deactivated if there is no data

exchanged on the link during the inactivity timeout period specified in SMP
Config.

Retrieving DFRs or other event
files retrieved from the devices
Many devices can produce digital fault records or other event files. You can setup your SMP
gateway so that it automatically retrieves these files and stores them on one or more computers for
subsequent analysis.
Using SMP Config, you will go through the following steps:
You will define system folders located on the remote computer or computers.
When you configure the master protocol, you will specify the system folder in which the
master protocol is to store the event files that it retrieves from the device.
Defining the system folders

Proceed as follows to set up the system folders in which the event files are to be stored:
In the left pane of the SMP Config window, click System Folder s.
For each folder you want to define, fill in the following information in the right pane:
Enter a unique numerical Folder ID. The folders should be numbered 1 through 99.
Supply a name for the folder.
In Location, enter the path to a shared folder on a remote computer, using UNC (Unified
Naming Convention). For example, if you enter: \\cpu104\Events, the system folder you
are defining represents the shared folder called Events on the computer with machine
name cpu104. The SMP must have access to a WINS server in order to resolve computer
names. See the SMP installation guide for more information.
Enter the Username and Passwor d if access to the shared folder requires a username and
password. You must use the machinename\username or
domainname\username format.
Enter 0 for Low Disk Space Alar m if you do not want to be notified when disk space is
running low. Otherwise, enter the number of bytes that will trigger a transition on a
specific logical data point, thereby advising you that space is running low (see the Master

Protocol Common Concepts document for details). The maximum value you can enter is
2,147,483,647, and the default is 0.
You can provide a description of the folder, if you so choose.
Configuring the master protocol event file processing

Proceed as follows to specify where the master protocol is to store the event files that it retrieves
from the device.
In the left pane:

Open the master protocol instance tree structure.
Click Event Files.
In the right pane:
The event file has automatically been assigned a Name, based on the protocol. For
example, an IEC 60870-5-103 event file is called a Disturbance Data File, a Hathaway
BCM-200 event file is called a Breaker Operation Record, and a Hathaway DFR 1200
is called a Digital Fault Record. You cannot modify the name.
The event file has automatically been assigned a Shor t Name, based on the protocol. To
continue with the example, the 3 short names would be DDF, BOR and DFR,
respectively. You cannot modify the short name.
Put a checkmark in the Disabled checkbox if you want to disable the event file retrieval
function, in which case you should not fill in the remaining boxes. By default, there is no
checkmark since it is assumed that you will want to enable the retrieval.
Choose a folder in the Folder drop-down list. This list contains the names of the system
folders you defined previously.
In the File Rule drop-down list, choose which event files the master protocol instance is
to retrieve when it is launched during SMP startup:
New files only
Only those files that were generated since the last time a file was retrieved from the
device.
Files from last X days
All files generated in the last X days, regardless of whether or not some of them may
have already been stored in the system folder. If you choose this option, you must
specify the number of days in the Max File Age box.
All files
All available event files, without restriction.
In the Max File Age box, specify a number of days. If you enter a 5, for example, and
you had chosen Files from last X days for the File Rule, then all files generated in the
last 5 days would be retrieved.
In the Minimum Fr ee Disk Space box, specify the amount of available disk space that
has to be available in the system folder in order to store an event file. When there is less
disk space available than what you have specified, the event files will stop being
retrieved from the device. The maximum value you can enter is 2,147,483,647, and the
default is 0. If you enter a value of 0, the available disk space will not be verified.

Optionally, you can enter some meaningful information in the Extr a Info box, that will
be appended to each event file name.
Optionally, you can provide a description of the event files.

Creating an Annunciator
interface
Introduction
The SMP Gateway Annunciator option provides a cost-effective solution to providing operators
with an HMI for the substation. Using SMP Config, you can easily configure alarms on binary and
analog data points, design simple display pages, and send the configuration to the SMP; you can
then connect a touch screen directly on the gateway's video output and start using the Annunciator.
The SMP Gateway Annunciator provides the following display pages:
The Alar ms page displays the list of all active alarms, as well as alarms that have returned to
normal but have not been acknowledged.
The Readings pages, user-defined, that provide real-time display of values and states,
minimal graphic capabilities, and control functions.
The Blocked page that lists all the alarms blocked by the operator.
The alarms Histor y page displays the chronological list of previous alarms. The size of the
alarm log is user-configurable. The alarm log is circular, with new alarms replacing the
oldest alarms.
The System State page provides access to SMP Gateway internal statistics and the current
value of all data points, in a tabular format.
The SMP Tools automatically display the appropriate data whenever the Annunciator option is
activated for a given SMP Gateway. SMP Config displays an Annunciator folder and SMP Stats
provides Annunciator information.
In the following sections, we will describe how to create and setup the Annunciator touch screen
interface in SMP Config, then how to use the different display pages.
Note: The Annunciator option is only available for the SMP 16/CP and SMP 16/SG
gateways.

Configuring an Annunciator in SMP Config
The Annunciator is included in version 4 of the SMP Tools. Refer to SMP 16 or SMP 4, under
Updating the SMP firmware, on page 188 to update the firmware if you need to. The following
section walks you through the configuration of the Annunciator within SMP Config. To find out
more about analog and binary setup or protocol setup, refer to the section Configuring the SMP on
page 11.
Touch screen configuration in SMP Config

The touch screen has two cables: one cable for to the VIDEO connector of the SMP, the other one
that connects to either a USB port on the SMP, or one of the serial ports. That second cable
conveys the screen touching information; it is the equivalent of the mouse. If the cables are not
connected, refer to the SMP 16 Installation Guide for the cables connection.
If a USB cable is used, the SMP gateway will see it automatically and no configuration will
be necessary in SMP Config.
If you are using a serial cable, you have to select the port in SMP Config and also enable it in
Connections. Refer to the sections Configuring the serial port interfaces, page 35, for more
information. You do not need to configure the port's operation, programming for this function
is setting the parameters automatically.
Creating the Annunciator

To design the Annunciator, create its branch in SMP Config:
In SMP Manager, click the Tools menu and select SMP Config.
In the SMP Config program, from the tree view, select Annunciator .
In the Annunciator pane on the right, type a name for the Annunciator. For the illustration
that follows the name is Bay Control.
Click again the Annunciator branch to validate the instance, its name will appear, as
illustrated in the following image:

Just like you would for a protocol, you configure the Annunciator branch by branch, from top to
bottom, as described in the following sections.
Setting General parameters

Select Gener al from the tree view and define the general settings:
Field Description
Disable checkbox. You can disable the Annunciator in the SMP with this checkbox.
Screen saver wait Time, in minutes, before the touch screen connected to the SMP gateway goes
time into the screen saver mode.
Initial page The initial page displayed in the Annunciator: Alarms, History, Blocked,
Readings, System state.
Close relay contact on There is a relay output on the SMP gateway to trigger an output, typically an
alarm alarm buzzer, upon alarm. Check this box to use it.
Time zone Select the time zone you wish to display. This does not affect the internal
settings, you simply choose display preferences.
Daylight saving Check whether you wish to display Daylight Saving Time or not.
Date format Select the date format you normally use.
History length Select to display up to 1000 alarms in the Annunciator's Alarm History page.

Setting Alarm inputs
Expand the Alar ms branch to create the alarms you wish to manage in the Annunciator.
Select Analog Inputs from the tree view and define the alarm settings:
Field Description
Name Type the name of a previously defined analog input. If you used Subscr ibe
To, the name of the subscribed point will appear in that field.
Alarm level Select if this alarm will be of major or minor importance.
Low Threshold State at which level the analog reading becomes too low. Ex. : for 120-volt
line, 100 volts.
High Threshold Because an analog value is graded, you must state at which level the analog
reading becomes too high. Ex. : for 120-volt line, 130.
Deadband The deadband is of how much the value must exceed or be lower than the
high and low threshold.
Disabled You can design an alarm for later purposes and disable it until you wish it to
start using it.
High Threshold Type here what you want to display in the Descr iption field of the alarm.
Description When the high threshold of the alarm is reached, it will display it after the
general alarm description.
Low Threshold Type here what you want to display in the Descr iption field of the alarm.
Description When the low threshold of the alarm is reached, it will display it after the
general alarm description.
Select Binar y inputs from the tree view and define the alarm settings:
Field Description
Name Type the name of a previously defined analog input. Otherwise, it will display
the subscribed point.
Alarm level Select if this alarm will be of major or minor importance.
Appearance Filter Filter for rapid transitions. Type length, in milliseconds, you wish the alarm
condition to be on before the alarm is generated. For 3 seconds, type 3000.
Disappearance Filter Filter for rapid transitions. Type the length, in milliseconds, you wish the
alarm condition to be off before the alarm is turn off. For 3 seconds, type
3000.
Inverted If you wish to trigger the alarm upon a 0 instead of a 1, activate the Inverted
box.
Disabled You can design an alarm for later purposes and disable it until you wish to
start using it.

Description By default, nothing is displayed. You can type here what you wish to see in
the Description field of the alarm message.
Annunciator Pages editor

In the last section, alarm input points were conceived in SMP Config, as well as general
parameters. You will now map them on the grid of the Annunciator Readings page and design
the screen's layout. A finished design could look like this:
In SMP Config's tree-view, under Annunciator, select Readings. If pages are already created,
they will be listed in the right pane. You can disable the pages you do not wish to display in
the Annunciator right now.
From the Tools menu, select the Edit Annunciator pages command.
The Alar ms tab of the Annunciator page editor appears.

The Alarm tab
When you select the Edit Annunciator pages command from the Tools menu, the following
dialog box appears:
Element Description
Alar m list or der group box Select in which order you wish alarms to appear.
Oldest alarm at top Select this option button if you deal with each alarm in order
and work them down to the most recent.
Most recent alarm at top Select this option to deal with alarms as they occur.
Single alar m display group box The single-alarm display appears at the bottom of all screens
in the Annunciator. This group box allows you to choose
what to display in it.
Show oldest unacknowledged Select this option button to see the oldest unacknowledged
alarm alarm in the single alarm display.
Show most recent Select this option button to see the most recent
unacknowledged alarm unacknowledged alarm in the single alarm display.
Alar m acknowledgement group Choose the way alarms are acknowledged.

box
Alarms can be acknowledged and Select this option button to be free to acknowledge and recall
recalled in any order any alarm. In that case, you need to select the alarm then
acknowledge or recall.

Element Description
Alarms must be acknowledged Select this option button to only acknowledge and recall
and recalled in the order they alarms in the order they occur.
occurred
Alar m state group box This group box allows you to set colors if you wish for all the
types of available alarms in the Annunciator.
Alarm state Select colors for these four alarm states, for minor and major
alarms:
Active Unacknowledged
Active Acknowledged
Return to normal Unacknowledged
Return to normal Acknowledged
Major alarm Unacknowledged major alarms are usually red, to make sure
they are seen.
Minor alarm Unacknowledged minor alarms are usually yellow.
Reset Colors Click Reset Color s to set the colors back to the default
settings.
Pr eview group box In this group box, you will see the result of the selections
made in the Alar m tab for the Alarms page as well as for
single alarm display that can be viewed at all times in the
Annunciator.

The Readings tab
When you are done setting the parameters of the Alar m tab, click the Readings tab:
Reading pages are composed of a grid of 18 lines by 9 columns.
Element Description
Page list All the configured pages can be found under page list. The
title of each page will appear at the top of each page. When
in the Annunciator, all the pages will be displayed and the
same way Microsoft Excel sheets are displayed, and there
will be arrows to scroll them.
Add button Click this button to add a new page of readings to display in
the Annunciator.
Remove button Select a page in the page list and click this button to remove
a readings page from the Annunciator.
Rename button Select a page in the page list and click this button to rename
it.
Gr id The grid is where you design the actual interface. Its cells
and the different configurations you can select are described
in the next sections.
Gr id header s Click in one or several header cells to select one or several

Element Description
lines.
Click a cell in the grid to define your new reading.
Each cell in the grid can display one or more of the following:
A static text.
The value of an SMP gateway data point, analog or binary.
The following display attributes can be selected:

Text display color
Background display color
When displaying binary inputs, the additional display attributes are available:
Text label for states 0 and 1.
Text and background color for states 0 and 1.
In the following sections we describe how to use these capabilities to create displays and simple
diagrams.
Setting cell contents

To set the contents of a cell:
Click the cell to display the cell properties dialog box.
To set the contents of all cells in a row or a column:
Click the row or column header to display the cell properties dialog box.

Note: When selecting a complete row or column, it is only possible to set the
background color and font.
Displaying static text or colors

Static text allows you to place words wherever you wish in the cells, in the desired colors for
letters and backgrounds. This way you can also make the screen look like a control center's, add
descriptive text next to the cell of each alarm and much more. To add static text and colors:

Click the cell to display the Cell Pr oper ties dialog box.
In the Gener al tab, select Display static text.
Field Description
Text Enter text to be displayed. Use the Font tab to select the display font. There is
space for about 12 characters in a cell. If you type more, it will spill in the cell
on right, unless you change the alignment to left or center. You will not see it
in the design interface, but if you send it to the SMP it will display as you
asked in the Annunciator.
The text field can be left empty if you simply want to change the cell color.
Text color Select the text display color.
Background color Select the cell background color.
To change colors of a group of cells:
Drag the mouse on the area you wish to change: a blue square will display the selection.
When you release the mouse button, the Cell Gr oup Pr oper ties dialog box appears. This
dialog box lets you set the font and colors for the group, then you can configure individual
cells within the group and the rest of the group will remain the way you set it.
Displaying analog data points


In the Gener al tab, select Display analog data point.
Field Description
Data point Select the data point to display. The choice is limited to analog inputs.
The Annunciator will display the scaled value of the data point with 2 decimal
digits. Use the Font tab to select the display font.
There is space for about 12 characters in a cell. If you type more, it will spill
in the cell on right, unless you change the alignment to left or center.
Normal state Text color : Select the color to display the value when the data point is valid
and not in alarm condition.
Backgr ound color : Select the cell background color when the data point is
valid and not in alarm condition.
Alarm Text color : Select the color to display the value when the data point is in
alarm condition.
Backgr ound color : Select the cell background color when the data point is in
alarm condition.
Flash: Check this box to flash the value whenever the data point is in an
alarm condition.
Quality Text color : Select the color for values when the data point quality is bad.

Displaying binary data points
In the Gener al tab, select Display binar y data point.
Field Description
Data point Select the data point to display. The choice is limited to binary inputs.
State 0 or State 1 Text label: Enter a text to display when the value of the binary input is 0 for
State 0 or 1 for State 1. Default value is 0 for State 0 or 1 for State 1.
There is space for about 12 characters in a cell. If you type more, it will spill
in the cell on right, unless you change the alignment to left or center.
Text color : Select the color to display the value when the data point is valid
and not in alarm condition.
Backgr ound color : Select the cell background color when the data point is
valid and not in alarm condition.
Flash: Check this box to flash the display whenever the data point value is 0
for State 0 or 1 for State 1. Only one flashing state can be selected.
Quality Text color : Select the color to display the value or text when the data point
quality is bad.
Backgr ound color : Select the cell background color when the data point
quality is bad.
Formatting groups of cells

To format several cells at once:
Select them using a cell headers,

or
Drag the mouse on the two corners of the square of cells you wish to select:
When you release the mouse button, the Cell Gr oup Pr oper ties dialog box will appear:

Selecting the display font
Three fonts are available for each cell, in a variety of formats. To change the font:
Click a cell to display the Cell Pr operties dialog box.
Select the Font tab.
Field Description
Font Select the display font for the cell.
Style Select the display style: add italic or bold or both.
Alignment Select the cell alignment.

If more than approximately 12 characters are in the cell, it will spill into
another cell.
If it is left-aligned, it will spill to the right cell, if it is centered it will spill on
both sides, and if it is right-aligned, it will spill into the cell on the right.
You will not see the missing letters in SMP Config, but it will appear with
the Annunciator.
Size Select the font size.
Note: Windows CE only supports a limited number of fonts and display styles.

Connecting to the Annunciator option into the SMP
gateway
You should now be ready to see the resulting design.
To use the Annunciator in the SMP Gateway:
Save the configuration file in SMP Config.
Send it to the SMP gateway: from SMP Manager, in the Gateway menu, select Send
configur ation file.
SMP Manager will display the Restar t Gateway xxx dialog box.
Select Shutdown and r estar t and click OK.
On the touch screen you will see the SMP startup and eventually, the screen should become
totally black. The Annunciator will be displayed a few seconds later, but it could take one or
two minutes. You will be asked to calibrate the touch screen, as explained in the next section.
In SMP Manager you will see the booting sequence, when the LEDs all become green the
touch screen for the Annunciator will become white.
Calibrating the touch screen

The Annunciator screen will not be displayed on the touch screen until the SMP configuration file
featuring the Annunciator design is sent to your gateway. Therefore you have to perform the touch
screen calibration. When the screen becomes white, a cross will appear in one of the corners of the
touch screen.
Calibration can be accessed two ways: upon startup of the SMP gateway and by pressing the
Calibr ation button at the bottom of the screen. Once you are in calibration mode:
A cross will appear in a corner of the screen.
A message will prompt you to touch the screen from a position of normal use. This means that
you should be in your normal working position; either sitting down or in front of the rack
standing up, but as you should normally.
Touch the crosses as they appear on-screen. When this is over, a message will appear, asking
if the cursor follows you fingers.
Whether you press yes or no you will be taken to the Annunciator and you can recalibrate
as needed.

Using the Annunciator Interface
The screen is composed of 5 tabs:
The Alar ms page displays the list of all active alarms, as well as alarms that have returned to
normal but have not been acknowledged.
User-defined Readings pages that provide real-time display of values and states, minimal
graphic capabilities, and control functions.
The Blocked page that lists all the alarms blocked by the operator.
The alarms Histor y page displays the chronological list of previous alarms. The size of the
alarm log is user-configurable. The alarm log is circular, with new alarms replacing the
oldest alarms.
The System State page provides access to SMP Gateway internal statistics and the current
value of all data points, in a tabular format.
Navigation
The large arrow key buttons allow you to move from one line to another when it is too small
for fingers.
To change pages, simply press the tab's name.
Interface displayed in all the pages

At any time you can press Calibr ate to readjust the touch screen, if, for example, you change
your working position from sitting to standing. UTC time and date are displayed beside it.
At all times on the top left corner you can see the number of alarms and how many are
blocked.
Single alarm display:
At the very bottom, you will see either the oldest or newest alarm, according to what was
selected in SMP Config. Press it once to clear the alarm sound, twice to acknowledge.
If this alarm has several occurrences, a x will be displayed in the icon column.
The Alarms page

The Alar ms page is where all the alarms are listed, and where you can take action on them.

Element Description
Icon column In this column, the alarm type can be quickly determined: A red A is for an
appeared alarm, a green R is for a disappeared alarm, an x beside the
letter means that this alarm is a multiple alarm..
Description Text entered in the description fields of the binary and analog alarms in SMP
Config.
Date, time The date and time the event occurred, displayed in the format you selected in
SMP Config.
Clear Sound button Press Clear Sound to clear the sound warning system.
Acknowledge button Press Acknowledge, in order to acknowledge a specific alarm. You have to
remember that the process is configured in SMP Config: you could select
whether you have to acknowledge in order or not, and if the events appear
from the newest to the oldest or the opposite.
Clear button Press Clear , in order to clear the alarm display of the data point that has
returned to normal. You have to remember that the process is configured in
SMP Config: you could select whether you have to acknowledge in order or
not, and if the events appear from the newest to the oldest or the opposite
Gener al Ack./Clear Press Gener al Ack./Clear to acknowledge all newest or oldest alarms and
button clear the alarm display of all data points that have returned to their normal
condition
Block button Press Block at any time to stop the alarm sound and move it to the Blocked

page.
Arrows Use the arrows to navigate up or down in the alarms list.
How the Annunciator processes the appearance of alarms

When an alarm condition is detected, the Annunciator performs the following actions:
A sound warning system is turned on to let you know that an alarm condition has occurred.
The data point is added to the Alar ms page. If you chose the alarm color defaults in SMP
Config, a red symbol with the letter "A" is displayed in the Icon column to indicate the
appearance of the alarm condition. The color of the display line indicates the severity of the
alarm, with high priority alarms shown in red and low priority in yellow.
Acknowledging alarms
When an alarm occurs, you must first clear the sound warning system before you can acknowledge
the alarm. The sound warning system also acts as an interlock, ensuring that you are aware of all
the alarms that occur.
Press Clear Sound to clear the sound warning system.
Depending on the options you have selected in SMP Config, you can:
Press General Ack./Clear to acknowledge all new alarms and clear the alarm display of
all data points that have returned to their normal condition.

Or,
Select a particular alarm and click Acknowledge. Whenever you acknowledge an alarm,
the entire line turns a paler shade of its original color.
Or,
Press Block at any time to stop the alarm sound and move it to the Blocked page.
The data points that are in an alarm condition remain in the alarm display until the condition
disappears, at which time you can clear them from the display.
How the Annunciator processes the disappearance of alarms

The Annunciator also notifies you when the alarm condition returns to normal.
The sound warning system is turned off again.
The red "A" symbol beside the data point is replaced by a green "R" symbol, to let you know
that the alarm condition has returned to normal. The entire line also turns green.
Acknowledging the disappearance of alarms

You must once again clear the sound before you acknowledge that the alarm condition has
returned to normal. You can then clear the alarm point so that it is no longer displayed in the
Alar ms page.
Click Clear Sound to clear the sound warning system.
Click Gener al Ack./Clear to acknowledge all alarms and clear the alarm display of all
data points that have returned to their normal condition.
Or,
With the arrows, select a particular alarm and press Acknowledge, in order to
acknowledge a specific alarm.
Press Clear , in order to clear the alarm display of the data point that has returned to
normal.
Note that some alarms can never be deactivated or return to normal. You can acknowledge the
alarm, but you cannot clear it from the display.
Multiple alarms
Alarms are displayed differently on the Alar ms and Events pages. On the Alar ms page, alarm
appearances and disappearances are displayed on the same line, as are multiple instances of an
alarm. When an alarm appears and disappears more than once without being cleared, the "A" or
the "R" symbol in the column indicating the state of the alarm has an "X" in the bottom right
corner. This makes it easy for you to distinguish between single and multiple alarms, since
multiple appearances and disappearances are always displayed on the same line.

The Readings page
The Readings page displays the points that you mapped in SMP Config.
You can page through the different Readings page, with the arrows, if you designed several
of them. You will keep seeing the single-alarm display at the bottom.
The title of the page, in the top middle section of the page, is the name you typed when you
clicked Add in the Alar ms tab, in the Annunciator pages editor.
The Blocked page

The Blocked page is similar to the Alar ms page but contains only the blocked alarms. You can
reactivate one, or all of them, using the arrow button to scroll to them.

Element Description
Name The alarm name, as configured in SMP Config.
Config.
SMP Config.
Reactivate button Press the Reactivate button to clear the sound warning system.
Reactivate All button Press the Reactivate All button, to send all the alarms back to the Alar ms
page.
Arrows Use a single arrow to go down one line, a double arrow to go to the bottom or
the top of the list.
The History page

This page displays the alarms and operator actions. The additional column, T, stands for the alarm
type, where O is operator and A is alarm. You can toggle types on or off from the display by
pressing either one or both types at the bottom left corner.

Element Description
SMP Config.
T Type of intervention in the log. If the occurrence in the history is an alarm, it

will display A; if it is an operator's action it will display O.
Config.
Type to display Toggle on or off alarm events and operator events when you click these two
toggle buttons buttons.
Arrows Use a single arrow to go down one line, a double arrow to go to the bottom or
System States page

The System States page contains information on the SMP gateway and the data points. The data
points section concerns specific users or instances. Two sets of arrows are available: one for the
tree view and one for the statistics section.

Element Description
Left pane In the left pane, select a type of information you wish to display. This
information varies according to the options and the alarms designed in SMP
Config.
Right pane The right pane contains the detailed information of the type selected in the left
pane. You will find statistics, software and hardware information, protocol
information, varying according to the options in your gateway.
Arrows There are two sets of arrows, one for the left pane and one for the right pane.
Use a single arrow to go down one line, a double arrow to go to the bottom or

The SMPs automation functions
Introduction
Since it is connected between the substation devices and the control centers, the SMP gateway is
well positioned to implement advanced processing functions that would be impossible to perform
in less sophisticated devices.
The SMP gateway provides the following automation capabilities:
The SMP Automation Functions module, to add basic automation functions.

See The SMP Automation Functions module, next.
The Soft PLC module and CoDeSys development platform, to create sophisticated
automation scripts, such as closing circuit breakers and load balancing.
See The Soft PLC, page 145.
The SMP Automation Functions module

The SMP Automation Functions module is an optional software package designed to extend the
capabilities of existing devices by adding local automation capabilities similar to what could be
implemented using an external PLC. The module adds the following functions to the SMP
gateway:
The Analog Contr ol function, which performs a control operation on a physical analog
output point, based on the value change of a physical input point. It writes the value of an
input point to an output. A deadband value, in engineering units, can be specified so that only
changes that exceed the deadband value will trigger a control operation. A time filter, in
milliseconds, can be applied to value changes of the source point, to prevent control
operations from being triggered on transitions of short duration.
Analog Latch and Reset is similar to Binary Latch and Reset. It allows you to capture
transitional values on analog input points.
The Best Of function, which makes a logical input or output point an exact replica of the best
source point available of the same type. The evaluation of the best source point is based on
quality. An exact replica involves the support for redundant devices: value or state, the quality

and the timestamp. Furthermore, if the best of operation involves output points, the
requested command is sent to the best source point.
The Binar y Contr ol function, which performs a control operation on a binary output point,
based on the state change of a binary input point. A millisecond time filter can be applied to
value changes in the source point, to prevent control operations from being triggered on
transitions of short duration.
The Binary Debouncing function is the answer to a typical binary signals problem, by
filtering short-term transitions, considered as non-significant.
The Cr eate function, allows you to creates a logical analog or binary input point that acts as a
data holder. The only way to modify the data point is by using a For ce operation, using the
Force function. A validity delay can be specified to define a refresh period after which the
value of the created point must be refreshed to maintain a valid status. If the value is no longer
refreshed using the Force function after this delay, the point inherits the bad quality status.
This function, in conjunction with the Force function, allows a slave to update a input point
value (binary or analog) that can be read by any other slave.
The For ce function, which forces the value or state of an analog or binary input point, based
on control operations performed on force and unforce output points created by the function.
The Gr ouped Control function, which performs a control operation on a group of output
points, based on the value or state change of an analog or binary control point.
The Inhibition function, which uses a logical output point to control a group of physical
output points for the purpose of enabling or disabling control functions. This function can also
be used with physical input points, in which case it enables or disables reporting of transitions
for those points.
The Input Latching and Reset function, which changes the state of a logical input point,
called a latched point, whenever it detects a transition or pulse on a physical binary input
point. The latched point remains on until either a reset operation is done on a binary output
reset point or an internal timer expires. Optionally, the control operation on the reset point can
also apply to a physical binary output point called the controlled point.
The Logical function, which dynamically computes an AND or OR operation on a group

of binary input points. The result of this computation is stored in a logical binary input point.
The Logical Pr ocessor defines logical data points which values are based on calculations
performed on physical points that you build in the Logical Editor , to process existing points
through different operations described further. It is a much more elaborated version of
Logical.
Adding an Automation Functions instance

Proceed as follows to add an Automation Functions instance using SMP Config:
In the left pane, click Automation Functions, under Master Pr otocols.

In the right pane, assign a name to the new instance.
The new instance appears in the left pane.

As shown in the screenshot, the newly added instance includes the following items:
General settings, which set the general behavior of the component.

Settings for various data point types. Initially, there are no data points. You will create
logical data points for each function you set up. You will then specify the settings for
each of these logical data points.
Functions. All the currently supported functions appear in the list. You will define
specific functions of these various types, and these functions will refer to logical data
points.
In the left pane, click General.

Enter a prefix in the right pane. This prefix must be unique for each Automation Functions
instance.
Defining an automation function

Each instance includes one or more automation functions, such as Best Of, For ce, Cr eate, and so
on. The procedure next shows you how to define a Best Of function, but the process is similar for
all the various types of functions.
In the left pane, under Functions, click Best Of.
The right pane shows the settings you need to enter for the Best Of function.

The Best Of function makes a logical input or output point an exact replica of the best source
point available of the same type. The logical point is referred to as the result point.
In the right pane, enter a name for the function.

Define the result point:
In the left pane, click the type of data point you want for the result point. For the sake of
example, click Analog Inputs, and then on Logical Inputs. Thus, the result point will be
a logical analog input point.
In the right pane, enter a name of your choice for the result point. Let us call it Best Of
Result Point, and enter its settings: scale, offset, units, etc.
In the left pane, click again on Best Of.
In the right pane (see previous screenshot), choose Best Of Result Point in the Result
Point drop-down list.
Define the first source point:

Enter the name of the point in the Fir st Point box.
Or,
Enter the name of the point in the Put the cursor in the Fir st Point box.
In the Tools menu, click Select Points.
In the Select Points dialog box, choose the first source point to which you want to
subscribe. This point has to be an analog input point, to match the data point type of the
result point. In our example, we selected an analog input point on a DNP3 device. This
point represents the phase A current.
Click Paste to have the point appear in the Fir st Point box.

Define the second source point:
Enter the name of the point in the Fir st Point box.
Or,
Without closing the dialog box, put the cursor in the Second Point box.
In the Select Points dialog box, choose the second source point to which you want to
subscribe. This point also has to be an analog input point, to match the data point type of
the result point. In our example, we chose an analog input point on a MODICON
MODBUS device, which represents the phase A current, as did the DNP3 point.
Click Paste to have the point appear in the Second Point box.
Enter a description of the automation function, if you so choose.
The screen is shown next.
The Best Of function will choose the better of the 2 source points, and put the result in the result
point.
Note: In the example, we subscribed to device data points, but we could have
subscribed to any data point available in the SMP gateway.

Understanding automation function settings
Complete documentation on the automation functions is available in the Application Notes
folder, in the document called SMP Automation Functions.
Logic Processor
SMP Config enables you to derive a data point through a mathematical expression that includes
existing data points.
For instance, you may want to export the value of a certain power aspect such as phase imbalance
but no such data point is available. If data points are available for voltage and current, you can
simply define three new data points calculated as the voltage times the current for each phase, then
check power imbalance between the three points.
The expression for deriving a calculated data point can be evaluated in one of two ways:
By exception
Whenever there is a transition on the data points included in the expression. If you choose this
option, you also specify whether the evaluation is to be triggered by a specific data point or by
any data point in the expression.
Periodically
Every X milliseconds.
You can choose to have the expression evaluated either by exception or periodically, or both. If
you choose both, the expression will be evaluated once every X milliseconds as well as anytime
there is a transition on a data point or signal used in the expression. If you do not choose either
methods, the expression will be evaluated only once, on startup of the SMP Manager.
Note: This function is not available in the SMP 4-20 and the SMP 8-40.
To create a calculated data point:
In the left pane, at the bottom of the automated functions list, expand Functions and right-
click Logic Pr ocessor .
In the shortcut menu, select Logic Editor.
SMP Config displays the Logic Editor dialog box.

The Logic Editor is used to enter the expression that generates the value of the calculated data
point. It is displayed across several windows, which allow you to set the attributes of the
calculated data point and assist you in editing the expression.
Use the toolbar at the top of the dialog box to validate, save and close the expression, or to undo
the last change to the expression.
The table below describes the various areas of the dialog box:
Window Description
Properties Used to specify the different attributes of the calculated data point. These
attributes are described in the sections below.
Data Points Used to select and enter existing data points in the expression. You can select
data points from the list of available data points. These are grouped together in
folders, based on grouping criteria that you established with the Gr oup Settings
tab of the Display Options dialog.
If you open the various folders, you will note that binary points are displayed in
blue, while analog points are displayed in green.
The list is a memory jogger for selecting I/O points to be used in the expression.
Double-click on an item to insert it at the cursor location in the expression
window.
Functions Displays the list of all the functions that can be inserted in the expression.
Double-click on an item to insert it at the cursor location in the expression
window. The various functions are described in the sections below.
Operators Displays the list of all the operators, constants and variables that can be inserted
in the expression. Double-click on an item to insert it at the cursor location in
the expression window. The various operators are described in the sections
below.

Window Description
Expression Used to enter and edit the expression to be evaluated. You can enter the
(empty window at expression directly from the keyboard or use the memory-jogging windows
the bottom of the described above.
application
window) The result of the evaluation of the expression is assigned as the value of the
calculated data point.
A calculated data point has the following properties:
Properties Description
Produced point Resulting data point.
Name Name of the calculated data point for which the expression is currently being
edited. This field cannot be edited. To edit an expression for another calculated
data point, close the editor and select another data point in one of the analog or
binary point pages in the Site view.
Description Optional space for you to type a description of the new point.
Timestamp Defines how the calculated data point is to be time-stamped. Specify "Server" if
you want the system time to be used as the timestamp, and specify "Triggered
point" if you want the timestamp to be the time of the point that triggered the
calculation.
By default, the calculated data point is time-stamped by the Visual Substation

server.
Time-based Specifies whether the expression is to be evaluated on a periodic basis. The time
interval is then specified via the Time inter val attribute. Normally, expressions
are not evaluated on a periodic basis.
Time interval (ms) Specifies that the expression is to be evaluated every X milliseconds. This time
interval applies only if the Time-based attribute specifies "Yes". The minimum
value is 50 ms. If this condition is
By exception Specifies whether the expression is to be evaluated whenever there is a

transition on one of the data points or signals in the expression.
Specific trigger Specifies whether the evaluation of the expression is to be triggered by a single
data point ("Yes") or by any data point ("No") in the expression. This attribute
is ignored if By exception is set to "No".
Triggered by Used to specify the name of the data point or signal that will trigger the
evaluation of the expression. This attribute is ignored if Specific tr igger is set
to "No".
Data point names in expressions

To use a data point in an expression, simply enter the name of the data point. Make sure to include
the prefix, if applicable.
A data point name used in an expression must adhere to the following Visual Basic-like notation:

It must begin with a letter.
It can include alphanumeric characters (A-Z, a-z, 0-9), the underscore separator " _ " (without
the quotes), and special characters, such as a period.
If the data point name contains a special character, it must be surrounded by the delimiter
character ". For example, a physical data point name of T5.APHA must be declared as
"T5.APHA".
Here are some examples of valid expressions:
120 + ( CurrentPoint * 0.02 * ( Rand() - 1 ) )
( 0.85 "T5.APHA" * "T5.KVAB" ) / 1000
"1B17.MA" AND ("120-1.MA" AND NOT "120-1.MB" ) AND "1B1.MA"
Imbalance("T5.APHA", "T5.APHB", "T5.APHC")
Comments in expressions
Expressions can span several lines. To insert a comment into an expression, put a single quote at
the beginning of the line.
For instance:
' Calculates the imbalance of transformer #5

Imbalance("T5.APHA", "T5.APHB", "T5.APHC")
Condition statements
You can use the following condition statements in expressions:
Statement Description
If <condition> Then Evaluates the specified expression if the logical condition is true.
<expression>
Endif
IF <condition> Then Evaluates the expression specified after the "THEN" if the
<true expression> logical condition is true, or evaluates the expression specified
Else after the "ELSE" if the logical condition is false.
<false expression>
Endif Note that the expression can contain several embedded IF and
ELSE statements, in which case each ELSE statement is
associated with the IF statement closest to it.
Mathematical functions
You can use the following built-in mathematical functions in expressions:
Function Description
Abs( x ) Calculates the absolute value of x.

Pow( x, y ) Calculates the value of x to the power of y.
Sqrt( x ) Calculates the square root of x.
Exp( x ) Calculates the value of e raised to the power of x.
Log( x ) Calculates the logarithm of x to the base 10.
Sin( x ) Calculates the sine of angle x, expressed in radians.
Cos( x ) Calculates the cosine of angle x, expressed in radians.
Tan( x ) Calculates the tangent of angle x, expressed in radians.
ArcSin( x ) Calculates the arcsine of angle x.
ArcCos( x ) Calculates the arccosine of angle x.
ArcTan( x ) Calculates the arctangent of angle x.
Min( x, y ) Compares the values of x and y, and retains the lesser of the two.
Max( x, y ) Compares the values of x and y, and retains the greater of the
two.
Data point functions

You can use the following built-in data point functions in expressions.
Imbalance( point A, point B, point C Calculates the imbalance among three phases, for the current
) represented by the three data point names.
The calculation is defined as follows for a three-phase current:
((Imax - Imin) / Iavg) * 100
where:
Iavg = (AI + AB + IC) / 3
Imax = max (IA, IB, IC)
Imin = min (IA, IB, IC)
IsEqual( point1, point2, precision ) Compares point1 and point2, to the nearest precision significant
digits.
The expression evaluates to TRUE or FALSE, depending on

whether or not point1 = point2.
IsTrigger( point ) Evaluates to TRUE if the specified point causes the expression
to be reevaluated.
QualityOf( point ) Evaluates to TRUE if the value of the specified data point is

valid.
TimestampOf( point ) Returns the timestamp of a point, as a number of milliseconds

that have elapsed since an internal reference date and time. Use
this function for the sole purpose of comparing timestamps that
were obtained via a previous call to the TimestampOf() or
TransitionTimestamp() function.
BAD_QUALITY Sets the quality of a data point to bad. That is, the value of the
data point cannot be assumed to be correct.
Generators
You can use the following built-in generators in expressions. Generators are used to
mathematically generate input values for data points.
Generator Description
Sine( amplitude, frequency, phase ) Generates an expression of the form: Sine( A, f, P ).
Calculates the value of a sinusoid with an amplitude A, a

frequency f in hertz, and an initial phase P in degrees. P is
optional and if you don't specify it, it will be assigned a value of
0.
Pulse( amplitude, frequency, duty Generates an expression of the form: Pulse( A, f, dc, d ).
cycle, delay )
Calculates the value of a pulse stream with an amplitude A, a
frequency f in hertz, a duty cycle cd in percent, and a delay of d
milliseconds. d is optional and if you don't specify it, it will be
assigned a value of 0.
Saw( amplitude, frequency, delay ) Generates an expression of the form: Saw( A, f, d ).
Calculates the value of a sawtooth wave with an amplitude A, a

frequency f in hertz, and a delay of d milliseconds. d is optional
and if you don't specify it, it will be assigned a value of 0.
Randn( mean, variance ) Generates an expression of the form: Randn( mean, var ).
Calculates a random value with a normal distribution that has a

mean value of mean and a variance of var.
Rand() Generates an expression of the form: Rand( ).
Calculates a random value with a uniform distribution ranging

between 0.0 and 1.0.
Arithmetic operators
You can use the following arithmetic operators in expressions:

Operator Description
+ [Add] Calculates the sum of the left and right operands.
- [Subtract] Calculates the difference between the left and right operands.
* [Multiply] Calculates the product of the left and right operands.
/ [Divide] Divides the left operand by the right operand.
( [Opening parenthesis] Expressions are evaluated according to standard operator precedence.

Parentheses are used to group sub-expressions and control the order in
which expressions are evaluated.
1 + 2 * 3 evaluates to 7
(1 + 2) * 3 evaluates to 9
) [Closing parenthesis] Expressions are evaluated according to standard operator precedence.

Parentheses are used to group sub-expressions and control the order in
which expressions are evaluated.
1 + 2 * 3 evaluates to 7
(1 + 2) * 3 evaluates to 9
Binary operators
Binary operators are used to manipulate the individual bits of expressions or data points.
You can use the following binary operators in expressions:
BAND Calculates a bitwise AND between the left and right operands.
For instance, 12 BAND 5 evaluates to 4 (1100 BAND 0101 is 0100).
BOR Calculates a bitwise OR between the left and right operands.
For instance, 12 BOR 5 evaluates to 13 (1100 BAND 0101 is 1101).
BNOT Calculates a bitwise NOT of the value to the right.
For instance, BNOT 0 evaluates to -1 (BNOT 0000 is 1111).
BXOR Calculates a bitwise XOR between the left and right operands.
For instance, 12 BXOR 5 evaluates to 9 (1100 BXOR 0101 is 1001).
BEQV Calculates a bitwise EQV between the left and right operands.
For instance, 12 BEQV 9 evaluates to 6 (1100 BEQV 0101 is 0110).

Logical operators
Logical operators are used to combine the results of logical expressions such as comparisons.
You can use the following logical operators in expressions:
AND Evaluates to TRUE if the left and right operands are both TRUE.
OR Evaluates to TRUE if either the left or right operand is TRUE.
NOT Evaluates to TRUE if the value to the right is FALSE.
XOR Evaluates to TRUE if the left and right operands have different values.
EQV Evaluates to TRUE if the left and right operands have the same value.
Relational operators
You can use the following relational operators in expressions:
< [Less than] Evaluates to TRUE if the left operand is less than the right operand.
> [Greater than] Evaluates to TRUE if the left operand is greater than the right operand.
<= [Less than or equal Evaluates to TRUE if the left operand is less than or equal to the right
to] operand.
>= [Greater than or equal Evaluates to TRUE if the left operand is greater than or equal to the right
to] operand.
= [Equal to] Evaluates to TRUE if the left operand is equal to the right operand.
!= [Not equal to] Evaluates to TRUE if the left operand is different from the right operand.
Constants and Variables

You can use the following built-in constants and pseudo-variables in expressions:
CurrentPoint [Point Represents the current value, i.e., the value of the logical point being
value] edited, just prior to its evaluation.
The Soft PLC

The Soft PLC is an optional software module available on all models. Using this module, you can
create automation scripts that access the data points in the SMPs real-time database in order to
create sophisticated control functions.

Since the Soft PLC is part of the SMPs internal architecture, the scripts you define can be used to:
Create new logical data points, with values based on the result of calculations performed on
real data points.
Process data in real time before sending it to control centers.
Implement sophisticated local automation functions, such as automatic closing of circuit
breakers and load balancing.
The Soft PLC module is provided with the CoDeSys development platform, a complete
development environment that supports the IEC 61131 programming languages:
Instruction List (IL)

Structured Text (ST)
Function Block Diagram (FBD)
Continuous Function Chart (CFC)
Ladder Diagram (LD)
Sequential Function Chart (SFC)
The CoDeSys development environment

CoDeSys is one of the most popular IEC 61131-3 programming systems for PLCs and industrial
controllers. It supports the full range of standard IEC 61131-3 data types, as well as user-defined
data types: arrays, structures, enumerations, aliases and pointers. The tools provide a comfortable
programming environment, with full debugging support.

Using CoDeSys to create SMP automation scripts
While a detailed description of how to create automation scripts is beyond the scope of this
document, the process can be summarized in the following steps:
Install the CoDeSys development system on your PC.

Start CoDeSys and install the SMP Target Suppor t Package. A Target Support Package
(TSP) contains all the files and configuration information necessary to control the SMP from
a program created in CoDeSys.
Add the SMP Library to the CoDeSys project. This library contains all the information
necessary to access the SMP components from a programming language.
Create your automation script using one of the IEC 61131-3 programming languages.
Connect the CoDeSys development platform to the SMP.
Load the script on the SMP and use the CoDeSys advanced debugging features to test and
debug the script.
For complete details on using CoDeSys to create scripts for the SMP Soft PLC module, see SMP
Gateway PLC User Manual, GUI-00316-00003-T.

Using syslog with an SMP
gateway
Introduction
Typically used for computer system management and security auditing, syslog is supported by a
wide variety of devices and receivers across multiple platforms. Because of this, syslog can be
used to integrate log data from many different types of systems into a central repository (source:
http://en.wikipedia.org/wiki/Syslog). It is then possible for the system administrator to dispatch
these messages to e-mail or SMS systems, for example.
With the SMP gateway, you can start using the UDP syslog protocol as soon as you define it in
SMP Config and that the parameter file is sent to the gateway. Your syslog server will then start
receiving logs from the gateway. The next section explains the quick procedure to make it
possible.
Setting up SMP Config for syslog messages

For the SMP gateway, the procedure consists in setting up a syslog client, where you associate
SMP Log folders with syslog Facility messages:
In SMP Manager, from the Tools menu, select SMP Config to open it.
In the left pane, under your SMP gateway's name, expand the System branch.
Select the Syslog branch and type an appropriate name. In the following example, the name is
Main Syslog ser ver .

Expand the branch you just created. Select the General branch and select the time zone. This
is the time zone used by the server. You can also select Auto Adjust DST, for daylight saving
time schedule adjustments.
Select the Receiver branch and type a name and the server's IP address. Leave the port
numbers to default, that is 514.
Select the Facilities branch, the default settings, as illustrated above, should suffice your
needs. This is where your assign syslog messages to SMP Log folders. If you need to know
more, open SMP Log and look at the log's content. You can also refer to the section
Information provided by SMP Log on page 45.

Redundancy
Introduction
The SMP gateway is a critical component in a substation automation system. Hence, there are
circumstances in which losing an SMP gateway can severely impact substation operations. With
the redundancy option, you can group 2 SMP gateways together in a redundant configuration, to
ensure continued operation of the substation automation system in the event of a failure. If one
SMP fails, the other one takes over. There are different types of redundancies - IEDs, SMPs,
networks- can be redundant, in many combinations.
Redundant SMPs are addressed by a SCADA center as if they were a single SMP with a single IP
address. In the event that one SMP fails, the second SMP immediately becomes active and takes
ownership of the logical IP address. Failover from the active SMP to the standby SMP typically
takes less than 5 seconds. Network connections from the control center are temporarily lost when
the active gateway goes offline. The control center simply needs to reconnect to the same group IP
address in order to re-establish a new connection and restore system operation. An additional
benefit is that you can update SMP settings with minimum down time.
Note: The redundancy function is not available on the SMP 4.
Redundant group operation

In an SMP redundancy group, one SMP plays an active role while the other stands by. The active
SMP polls the substation devices and responds to requests from control centers. The standby SMP
initializes itself, places its serial links in a high-impedance state and waits to become active.

1 2 1 2
COMMUNICATION
COMMUNICATION
FAILURE
RESTORED
COMMUNICATION
OPTIONAL
The active SMP uses a special protocol to send regular heartbeat messages to the standby SMP. If
the standby SMP fails to receive these messages, it automatically assumes that it should become
active. 2 distinct communication channels are used for the heartbeat messages, to minimize the
chances of both SMPs becoming active due to a single faulty connection. These channels can be
LAN connections, dedicated serial connections, or a mixture of both.
The 2 SMPs in a group must have identical configurations and be physically connected to the
same substation devices. The active SIOM, which comes as an option with the SMP 4-20 and
SMP 8-40, also supports redundancy and can therefore be used to connect serial devices to 2
redundant SMP 4-20s or SMP 8-40s.
Redundant IEDs
When needed, breakers can be monitored and controlled by multiple protection relays to make
sure that a fault is always detected; normally different relays from different manufactures are used.
To report the only one data set to the control centre the SMP has the Best of automation function
(see The SMP Automation Functions module on page 133).

ACQUISITION OVER TWO
LINKS TO TWO DEVICES. SECONDARY SOURCE
INFORMATION IS USED.
INFORMATION FROM INFORMATION FROM
PRIMARY SOURCE IS TRYING TO RESTORE COMM. PRIMARY SOURCE IS
PREFERED. WITH PRIMARY SOURCE. PREFERED.
COMMUNICATION COMMUNICATION
FAILURE RESTORE
You should know that:
The best of automation function is protocol independent.
It is a per-point redundancy, allowing any failure in the acquisition path.
Connection with two links to the same device can also be done. However, this achieves
almost the same as the Master link redundancy but with more configuration effort.
When both IEDs have the same data map a redundant master can be used instead of a
best of configuration.
The main advantaged of the best of function compared to a master link redundancy is that the
best of allows the mixing of different devices. On the other hand, the disadvantage is the amount
of configuration (3 points are needed to get the data: 2 master points and 1 best of point).
Priority
It is possible to give one of the SMPs the priority; this will make the SMP with the higher priority
active when there are no error conditions. This setting will cause an additional failover when the
SMP with the highest priority recovers from a fault. In case the prioritized SMP has an error
condition, it will remain in standby mode. This is explained in the following sections.

Grouping 2 SMPs for redundancy
Introduction
The base SMP redundancy consists of an active SMP and a standby SMP. The active SMP is
polling the devices and communicates with the control center as if it was a stand-alone system.
The active and standby SMP are communicating with each other so that when the active SMP fails
the standby becomes active.
Both SMPs share a public IP address to which the control center can connect. This ensures that no
special network configuration is needed at the control center; in fact when the control centre
connects to the public IP-address it has no indication which SMP is active and which one is on
standby.
10.2.15.3 10.2.15.3 10.2.15.3
10.2.15.1 10.2.15.2 10.2.15.1 10.2.15.2 10.2.15.1 10.2.15.2
SMP SMP
ACTIVE STANDBY FAILURE ACTIVE RESTORED STANDBY ACTIVE
You should know that:
Each SMP has its own private IP address.
Both SMPs share a public IP address which is assigned to the active SMP.
Basic switchover condition is when the active SMP has a hardware failure.
Serial devices are connected to both SMPs through Y-cables.
The standby SMP can still be accessed by its private IP address for maintenance.
It is possible to force a switchover.
Both SMPs must have the same configuration.
Setting up two SMPs with SMP Manager

You will use SMP Manager to create an SMP redundancy group. The sections that follow
provide a brief overview of the configuration process.
To create a redundancy group:
In the SMP Manager window, choose the 2 SMP gateways you want to group together. Note
that they must be the same model and have the same configuration file currently loaded. The
SMP 4 does not support redundancy. Select one SMP and use the mouse and the Shift or Ctrl
key on your keyboard, as for any standard Windows selection, to select the second SMP.

In the Gateway menu, click Gr oup to display the Redundancy Parameter s dialog box.
The Redundancy Par ameter s dialog box allows you to specify redundancy settings such as
the virtual IP address, the LAN and serial connections to be used, and the conditions that have
to exist for the SMPs to switch roles.
Redundancy is defined by 3 categories of settings, corresponding to the tabs in the dialog box:
In the General settings tab, you identify the basic properties of the group:
The keep-alive settings, i.e., the frequency at which keep-alive messages are to be
sent by the active SMP (every x milliseconds, where x is between 200 and 10,000),
and the timeout interval after which the standby SMP presumes that the active SMP
has failed and takes over as the active SMP (between 600 and 30,000 ms).
The virtual address and subnet mask used to communicate with the group. The
virtual IP address is different from the physical IP addresses you set up during the
initial configuration of your SMPs. It identifies the group and is used by the control
center to communicate with the active SMP. If the active SMP fails, the virtual IP
address and subnet mask are assigned to the standby SMP.
Optionally, the virtual address and subnet mask of the secondary network, if you are
using a secondary network for the communication between the SMPs and the control
center.
Optionally, you can give priority to one of the SMPs for becoming the active SMP. If
neither SMP is in a failure state, the one with top priority will become active.

The Links tab is used to specify the 2 connections that will be used to link the redundant
SMPs to each other. These can be any combination of LAN or serial connections. The
SMP 4-20 supports 1 LAN connection, while the SMP 8-40 and the SMP 16 can support
2. The active SMP uses these links to send regular heartbeat messages to the standby
SMP. If the standby fails to receive the messages, it automatically assumes that it should
become active. 2 distinct communications links are used, in order to minimize the
chances of both SMPs becoming active due to a single faulty connection.
In the Links tab, you identify:
The type of first connection: LAN or serial.

The type of the second connection: LAN or serial.
The communication mode, either RS-232 or RS-422, if you are using one or more
serial connections between the 2 SMPs. With all 3 SMP models, you use a standard
null modem cable for RS-232. For RS-422, you use a standard null modem cable
with the SMP 16. However, you need a special cable for the SMP 4-20 or SMP 8-40;
see the SMP 4-20 SMP 8-40 Installation Guide, GUI-316-027 T, for details.
A failover will automatically happen if the active SMP faces a major problem, such as a
power failure, that prevents it from sending heartbeat messages. The Failover tab defines
optional conditions that will trigger a failover such as:
The system available memory falls below a defined threshold.
Low-voltage alarm detected on the unit power supply.
For 16/CP-PM and 16/SG-PM, SMP 8-40, 4-20, a high-temperature alarm.
The units network connections failed.
SMP Manager sends the settings to the 2 SMPs.
You will need to restart both SMPs in order to activate redundancy.
In the Restar t Gateway dialog box, choose Shutdown and Restar t to have the SMPs restart
in normal mode.
The screenshot next shows an example:

The Redundancy column
The Redundancy column shows the current state of each SMP within the redundancy group. In
the example, the second SMP is on hot standby. This happens if the data points of the devices
connected to the SMPs have been configured for hot standby (see the Master Protocol Common
Concepts document for details). There can be several intermediate states, such as initial, listen
or speak, while the grouping takes place. Thereafter, the following states may be displayed:
Active:
This is the active SMP. It communicates with the field devices and sends keep alive
messages at a frequency set through parameter settings. In the event of a failover, it becomes
the standby SMP.
Standby:
This is the standby SMP. It listens for keep alive messages from the active SMP and takes
over as the active SMP if the latter fails to send a message within the expected number of
milliseconds.
Hot Standby:
This is the standby SMP. It listens for keep alive messages from the active SMP. It also
synchronizes all the data points that have been set up for hot standby in SMP Config. That is,
whenever a transition occurs on a hot-standby data point, it updates the data point
information. It takes over as the active SMP if the latter fails to send a message within the
expected number of milliseconds. Failover time is shorter than with regular standby because
integrity scans are not always required, since the hot-standby data points are already
synchronized.
Blank
SMP Manager is not able to communicate with the SMP for one of the following reasons:
The SMP redundancy software is not running because you have not set the redundancy
parameters.
The SMP redundancy software is not installed.
The SMP is down.
This column may also advise you of exceptional situations, as described here:
Peer IP: nnn.nnn.nnn.nnn:

This is displayed for one of the SMPs in a redundancy group if the second SMP is not visible
in the list.
To fix the problem, add the second SMP to the list.
Too Many SMPs:

There are more than 2 SMPs in this redundancy group.
To fix the problem, remove the excess SMPs.
Different parameters:
The 2 SMP gateways in this group do not have the same redundancy settings.
To fix the problem, take the following steps:
Click one or both SMPs.
In the Gateway menu, click Gr oup Proper ties.

A warning message pops up, telling you that SMP Manager will use the default
redundancy settings and asking you if you want to go on. If you reply in the affirmative,
the Redundancy Parameter s dialog box pops up and you can change the settings to your
liking. When you close the dialog box, both SMPs will have the same settings.
Restart both SMPs to activate the parameters:

Click the SMP gateway to be restarted.
In the Gateway menu, click Restart.
In the Restar t Gateway dialog box, click Shutdown and Restar t.
War ning: Do NOT reset the SMPs by pressing the reset button on the SMP itself, or you
will lose your parameter settings!
Peer IP: nnn.nnn.nnn.nnn => Not in redundancy:

The Peer IP is in the SMP gateway list, but is not part of the redundancy group.
This could happen if one of the 2 SMPs in the redundancy group lost its redundancy
configuration.
To fix the problem, ungroup the SMP that is in the redundancy group and regroup the 2
SMPs.
Virtual gateway (IP: nnn.nnn.nnn.nnn):

You have added to the SMP gateway list, an SMP with the virtual IP address you assigned to
the 2 SMPs in the redundancy group. The address of the active gateway is indicated in
parentheses.
The redundancy configuration of all SMP gateways in the list is retrieved cyclically. This
mechanism allows you to see the current redundancy state of all SMP gateways, on the SMP
Manager main screen. Since the refresh cycle is relatively slow, the redundancy configuration of
a given SMP gateway is automatically retrieved when the SMP gateway is added to the list, when
it is restarted, and when one or more files are sent to it.
You can refresh the redundancy state of all SMP gateways as follows:
In the View menu, click Refresh.
Hot standby
The SMP software has the possibility to maintain a complete up-to-date data image on the standby
SMP. This feature, available on the most common master protocols, will duplicate all transitions
received by the master protocol to the standby SMP.
To take full advantage of the hot standby it is necessary to have the slave component also active:
In SMP Config, select the Gener al nod of the slave component.
In the Hot-Standby Suppor t column, Disabled should appear. From the drop box, select
Acquisition or Acquisition and Contr ol:
Acquisition: the slave will report the data to its master without accepting control
commands.

Acquisition and control: the slave will report data to its master and it will accept control
commands. The commands will be forwarded to the active SMP which will forward the
control command to the device.
3 3
10.2.15.3
10.2.15.1 10.2.15.2
2
ACTIVE STANDBY
1. The active SMP receives the data from the device.
2. The standby SMP is updated.
3. The data is sent to the control center by whichever SMP.
The public IP address is always associated with the active SMP. So when the control center wants
to connect to the standby SMP, it needs to use the physical IP address.
Managing redundancy
Forcing an active SMP to become a standby SMP

To force an active SMP to become a standby SMP, proceed as follows:
Click the active SMP in the list of SMP gateways.

In the Gateway menu, click For ce Standby.
The SMP on which you clicked will go into standby mode, while the other SMP in the group will
go into active mode.
Additional failover conditions

It is now possible to define additional failover conditions to have a better control of which SMP is
active. The failover conditions are defined in the SysSer ver Config.txt file and that file is be
loaded to the SMP as any other file. In this file an additional 16 error conditions can be defined
which will force a failover. An example file can be found in at \Pr ogr am Files\Cybectec\SMP
Tools\Documentation\Application notes.

Modifying the redundancy settings of an existing group
To modify the redundancy settings of an existing group of SMP gateways, proceed as follows:
In the SMP gateway list, click one or both SMPs.

In the Gateway menu, click Gr oup Proper ties.
Use the Redundancy Par ameter s dialog box to modify the desired settings.
Ungrouping 2 SMP gateways

To ungroup 2 SMPs that had been grouped together for redundancy, proceed as follows:
In the SMP gateway list, click both SMPs.

In the Gateway menu, click Ungr oup.
Testing and validating the configuration

SMP Manager displays the current state of both SMPs in a redundancy group. You can also use
SMP Log and SMP Tr ace to display additional information:
Using SMP Log, open the Redundancy folder of each SMP to check that one SMP is active
and the other one is in standby mode, waiting for a failover.
Using SMP Stats, open the System folder, then the Redundancy folder, to view additional
information on the redundancy function.
Checking the redundancy status through the front panel

The GRP LED on the front panel of the SMP 16 indicates the redundancy status, as does the ST2
LED on the front panel of the SMP 4-20 and SMP 8-40.
See your SMP installation guide for details.

Testing a redundant network
So far, we have discussed SMP redundancy. However, with the SMP 16 and the SMP 8-40, you
can also set up network redundancy. The SMP and the control center can communicate via either
network.
10.3.30.3 10.3.30.3
10.2.15.3 10.2.15.3
10.2.15.1 10.3.30.1 10.2.15.2 10.3.30.2 10.2.15.1 10.3.30.1 10.2.15.2 10.3.30.2
NETWORK
ACTIVE STANDBY FAILURE ACTIVE STANDBY
10.3.30.3
10.2.15.3
10.2.15.1 10.3.30.1 10.2.15.2 10.3.30.2
SMP
ACTIVE
FAILURE
Normally, the control center accesses the primary network and switches to the secondary network
only if the primary network fails. You should therefore make sure the secondary network is
working properly. To do this, you need to switch to the secondary IP address of your SMP, and
then run SMP Log and SMP Tr ace.
To switch from the first IP address to the second IP address:
In the SMP Manager Select menu, click Use Second Addr ess.
Note that the switch to the second IP address applies not only to the SMP that has the
secondary networ k, but to all the SMPs in your gateway list. From this point on, if you
launch the SMP Tools, Telnet or Internet Explor er for any SMP gateway, these applications
will use the second IP addr ess.
To switch back to the first IP address:
In the Select menu, click Use Fir st Addr ess.
Note that once a tool has been launched, it never switches IP addr esses regardless of how many
times you toggle the address selection. Address switching applies only to commands that take
place after you instruct SMP Manager to switch addresses.
Note further, that if there are other models in your SMP gateway list that support only one IP
address, such as the SMP 4 or the SMP 4-20, toggling back and forth between the first and second
IP address will have no effect. You will see the same logs, traces and statistics, regardless of
which address you specify.

Setting up the SNMP server
Introduction
The SNMP server is an optional software module that allows the SMP to export statistics using the
SNMP standard (Simple Network Management Protocol).
The SNMP agent publishes and supports both standard MIBS that are supported by the Windows
CE operating system and custom MIBS that are supported by the SMP gateway application. The
agent supports extensive reading capabilities as well as limited writing and trap capabilities.
SNMP traps
SNMP traps are messages that are automatically sent to selected SNMP clients when specific,
unusual events occur. They are the equivalent of alarms. Traps are automatically sent to listening
SNMP clients whenever:
The SMP restarts.

A communications link used by a master or slave protocol instance fails for more than 60
consecutive seconds. These traps are called link down traps.
A communications link used by a master or slave protocol instance becomes active. These
traps are called link up traps.
In order to send traps, the SMP gateway needs to know the IP addresses of the SNMP clients that
are listening on the network. You can enter a maximum of 32 SNMP client IP addresses using the
SMPs SNMP Manager .

Configuring the SNMP server
To configure the SNMP server:
In SMP Manager, click the SMP gateway and start a Telnet session.
Enter the following command:

snmpmgr
The SNMP manager lists all available commands, as shown next:
\> snmpgr
SNMP Manager
A Add a client.
R Remove a client.
L Display all clients.
M Modify the community membership of a client.
C Change a client description.
G Add a community.
D Remove a community.
B Display all communities and their permissions.
I Modify the permissions of a community.
T Modify the name of the system contact.
O Modify the location of the Gateway on which the agent is running.
F List information about system contact and Gateway location.
H Display the list of all commands.
esc Abort the current operation.
Q Quit.
You can display the previous list any time, by using the H command.
You should establish the SNMP settings in the following order:
Add communities and their permissions.

Add a system contact.
Add a system location.
Add a number of clients and associate them to communities.
Any modifications you make will go into effect the next time the SMP is reset.

Time synchronization
The SMP gateway supports time synchronization using a demodulated and modulated IRIG-B
signals, protocols, and SNTP. It can be synchronized by the GPS clock option, and IRIG-B signal
or SNTP, or it can synchronize other devices with IRIG-B or SNTP.
This section defines these time management systems, why it should be used, and how to use it
with the SMP gateway.
Setting the clock in your SMP

The time in the SMP Gateway is set once during the installation. If the clock does not indicate the
accurate time or was not set right, you can change it manually:
Note: If the SMP is synchronized by DNP3, a GPS clock or any other external system,
changing the time manually will not work.
From SMP Manager, in the menu Tools, click Telnet.
At the command prompt, type clockmgr.
Set the time, in the 24 hour notation. For example, if the displayed time is 7:03:32 P.M., type
19:03:32 PM.
Time is displayed in the 12-hour notation to accommodate the users, but when you set it you must
use the 24-hour notation.
Concerning daylight saving time in 2007

A majority of substations use the universal time. Impact on the SMP gateway for the new DST
schedule is therefore minimal. Please refer to the application note Changes to DST Schedule in
2007 on our web site http://www.cybectec.com for more information.

Why synchronize the SMP gateway?
The SMP internal clock is not synchronized to external elements. When the SMP gateway is
synchronized, you do not have to worry about the internal clock drifting. All I/O changes, logs,
traces, etc., are time-tagged with a greater degree of accuracy - typically one second or better.
There are three way to synchronize the clock:
With a SCADA protocol, such as DNP3. Among the information this type of protocol
provides, is a reliable time source for the gateway.
Through an external source, such as IRIG-B. It could come from another GPS antenna
connected to another device that redistribute demodulated or modulated IRIG-B. It could also
come from a SMP 16 with the GPS clock option that distributes IRIG-B to your SMP.
Directly from a GPS signal if you have an SMP 16 with the GPS clock option. You will then
have the GPS antenna collecting a highly accurate satellite signal.
The SMP can redistribute time in several different ways:
Through a modulated or demodulated IRIG-B signal.
With a protocol.
With its integrated SNTP.
Following the August 2003 blackout, NERC has recommended that substation devices be
synchronized using a GPS clock. When the SMP gateway is synchronized by an accurate time
source such as an external IRIG-B source or its internal GPS clock, it can distribute accurate time
to substation devices using IRIG-B or its internal SNTP time server:
Output Delay Accuracy ( ms)

Protocol SNTP Modulated Demodulated
output output IRIG-B IRIG-B
output output
Protocol 500 500 - -
input
SNTP input 500 100 - -
Modulated 500 100 10 10

IRIG-B input
Demodulated 500 100 10 1
IRIG-B input
GPS input 500 100 10 1
Note that demodulated IRIG-B signals cannot be carried over long distances while the modulated
IRIG-B can be carried in distances over 350 meters (1000 feet) without degrading.
The SMP 16 gateways GPS clock installs directly on Cybectecs SMP 16/CP and SMP 16/SG
gateways to provide a highly accurate internal time source. This factory-installed option provides a
cost-effective solution to maintain substation devices in accurate synchronization.

The SMP gateway does not perform accurate time-tagging when I/O changes are received from a
device, because the transmission delay is unpredictable. The device must time-tag the I/O changes
itself for the time to be accurate.
When the SMP gateway is synchronized, it can in turn synchronize other devices using different
protocols such as DNP3, IEC-60870-5-101 or IEC-60870-5-104. The accuracy may be limited by
the protocol, but the overall synchronization of all the devices is typically accurate to within one
second.
Here is a list of the possible synchronization types you can do with the different types of Cybectec
gateways:
SMP Protocol SNTP Modulated Demodulated GPS

model IRIG-B IRIG-B
SMP 4-20 O O -
SMP 8-40 O O -
SMP 4 - - -
SMP 16/CP G
SMP 16/SG G
Legend: O = With the SIOM option, G = with the SMP 16 GPS clock option.
IRIG-B and GPS accuracy

The Global Positioning System (GPS) is a satellite-based navigation system operated and
maintained by the U.S. Department of Defense (DoD). GPS uses a constellation of satellites to
calculate the exact position and altitude of the receiver station.
GPS technology requires a very accurate time source in order to calculate the orbital position of
the satellites and determine the position of the receiver. To ensure the required level of accuracy,
each GPS satellite is equipped with 4 atomic clocks that are kept in synchronization with the U.S.
Naval Observatory's Master Clock. Each satellite continuously transmits its current position and a
time code. This is why we offer GPS time stamping as an accurate time source option.
IRIG-B is a military standard of the Inter Range Instrumentation Group. The best known IRIG
standard is the IRIG Timecode standard used to timestamp video, film, telemetry, radar, and other
data collected at test ranges. The main difference between the codes that are classified in letters
from A to H is their rate, which varies between 1 pulse per second and ten thousand pulses per
second. The IRIG-B standard operates at 100 pulses per second.
The SMP 16 GPS Clock uses the time information provided by the GPS system to provide a
highly accurate time source for the substation.
Setting up the GPS clock option is explained in detail in the SMP 16 GPS Clock Option
installation guide, GUI-316-47 which is included on your documentation CD-ROM.
Setting up IRIG-B is described in the installation guide of gateways supporting it.

What is SNTP?
NTP stands for Network Time Protocol, and is a standard Internet protocol used to synchronize
the clocks of computers to a time reference. NTP was originally developed by Professor David L.
Mills of the University of Delaware.
As a full implementation of the NTP protocol seemed too complicated for many systems, a
simplified version of the protocol, namely SNTP, was defined. SNTP (Simple Network Time
Protocol) is basically NTP minus certain internal algorithms that are not required by all types of
servers. SNTP uses UTC time. This means that typically, the time you see on your watch and the
time that the SNTP uses do not match. Keep that in mind when you decide whether or not to
synchronize your devices.
Setting up SNTP on the SMP gateway

The same application is used to configure both the SNTP client (to synchronize the SMP) and the
SNTP server (to synchronize the devices).
Proceed as follows:
In SMP Manager, click the SMP gateway to be configured, and start a Telnet session.
Enter the following command:
sntpmgr
The current client and server statuses are displayed, followed by the menu.
Enter the command to set up SNTP.

S
To have the SMP gateway act as an SNTP server:
Respond Y to the first question.
To have the SMP act as an SNTP client and be synchronized with a remote SNTP server:
Respond Y to the second question.

Specify the SNTP server IP address using the format xxx.xxx.xxx.xxx.
Specify the refresh period. This is the frequency at which the SMP will connect to the server
in order to be resynchronized. The default is 720 minutes (12 hours).
Specify the recovery refresh period. This will be used if the SMP is not able to connect to the
server; the SMP will try to connect at each recovery period, rather than at the normal refresh
period. This value must be less than the normal refresh period. The default is 60 minutes
(1 hour).
Specify the maximum time variance. The SMP will ignore a time update if the difference
between the SMP time and the new time provided by the server is greater than this setting.
The default is 14,400 minutes (24 hours).

Right after the setup, there is a prompt that allows you to force the SMP gateway to synchronize
itself immediately.
Monitoring the SNTP status

For the SMP 16, when the SNTP is synchronized, the SYNC LED will be green, otherwise it will
be off. The status of synchronization can be seen in SMP Stats, in the Clock folder, from the
Inter nals folder located in the System folder. For more information on SMP Stats, see
Information provided by SMP Stats, on page 54. Also, clock information is explained in detail in
the SMP 16 GPS clock option installation guide, GUI-316-47 which is included on your
documentation CD-ROM.

Remote access to the SMP
gateway through a serial port
You may want to use the SMP Tools on an SMP gateway that is not connected to your PC via a
network. You would typically do this by setting up a dial-up connection and using a modem to call
the SMP gateway from your PC. Less typically, you might choose to access the SMP by setting up
a direct serial connection between a serial port on your PC and a serial port or the console port on
the SMP gateway.
This section explains how to set up dial-up and direct serial connections between a personal
computer and an SMP gateway. The procedure differs slightly, depending on whether your PC is
using the Windows XP or Windows 2000 operating system.
Windows XP setup procedures

If your PC operates under Windows XP, use the procedures outlined in this section to:
Setup a dial-up (modem) connection between the PC and the SMP gateway;
Setup a direct serial connection between the PC and the SMP gateway.
Setting up a dial-up (modem) connection

The table further next outlines the procedure for setting up a dial-up (modem) connection between
a PC running Windows XP, and an SMP gateway.
If Cybectec security features are activated, you must make sure your computer is authorized to
access the SMP (See Security, page 72) and that you selected Remote Access for the Guests
group in the Secur ity Editor , from SMP Managers File menu.

You must perfor m the steps in the or der pr esented in the table.
Step To do this Follow these steps:
1 Set up the SMP Perform this step for each SMP gateway with which you want to
gateway to communicate via modem.
accept a dial-up
connection 1. Start SMP Manager : Click the SMP gateway to be configured and in
the Gateway menu, select Pr oper ties. In the Gateway Pr oper ties
dialog box, select the check box This gateway is connected over a
r emote dialup. This will prevent polling on the dialup connection.
2. From the Tools menu, click Telnet.
3. Type RASMGR to start the RAS Manager connection application.
4. Enter L, to display the device list. The device list is actually the list
of ports on the SMP, including the console port.
5. Enter M, to modify the SMP COM port you will use for the dial-up
connection.
6. Enter the number of the MODEM device to be modified. Note that
you cannot specify the number of the console port, as the latter does
not support modem connections.
7. All the default settings should be OK, except for the last one: Use
Device for Incoming Connections.
8. Enter Y to allow incoming connections on the port and exit
RASMGR.
2 Install the 1. From the Windows Star t menu, access the Contr ol Panel.
modem, if
2. Double-click Phone and Modem Options.
necessar y
3. In the Phone and Modem Options dialog box, click the Modems
tab.
If the modem you plan to use appears in the list, skip the rest of this step
and proceed to the next item in the table, since your modem is already
installed.
4. Click Add.
5. In the Add Har dwar e Wizar d dialog box, allow Windows to detect
your modem automatically, and click Next.

6. Insert an installation CD for the modem driver, if you have one.

7. In the Found New Har dwar e Wizar d dialog box, choose whether
you want Windows to install the driver automatically or from a
specific location and click Next.
8. Once Windows advises you that it has installed the driver, click
Finish.
9. Click Finish to close the Add Har dwar e Wizar d dialog box.
10. Click OK to close the Phone and Modem Options dialog box.
3 Set up a new Perform this step for each SMP gateway with which you want to
dial-up (modem) communicate via modem.
connection for
the SMP 1. From the Windows Star t menu, access the Contr ol Panel.
gateway 2. Double-click Networ k Connections.
3. Double-click New Connection Wizar d.
4. In the New Connection Wizar d dialog box, click Next.
5. Click Connect to the network at my workplace and click Next.
6. Click Dial-up connection and click Next.
7. Enter a descriptive name for the connection and click Next.
8. Enter the phone number you will use to dial the SMP gateway and
click Next.
9. Under Create this connection for, click Anyones use, click Next and
click Finish.
10. In the Connect <Connection Name> dialog box, click Pr oper ties.
11. Click the Networ king tab, then click Settings.
12. In the PPP Settings dialog box, clear the Enable LCP extensions
checkbox, the Enable software compression checkbox, and the
Negotiate multi-link for single link connections checkbox. Click OK.
13. Under This connection uses the following items, clear the Client for
Microsoft Networks checkbox.
14. Click Internet Protocol (TCP/IP), and click Pr oper ties.
15. In the Inter net Pr otocol (TCP/IP) Pr oper ties dialog box, click
Advanced.
16. In the Advanced TCP/IP Settings dialog box, clear the Use default
gateway on remote network checkbox and the Use IP header
compression checkbox and click OK, three times
17. Close the Connect <Connection Name> dialog box.
4 Configur e 1. In the Gateway Pr oper ties dialog box, enter a significant name for
SMP Manager the new SMP gateway, such as SMP via modem.
to communicate
with the SMP 2. If you have an SMP 4-20 or an SMP 8-40:
gateway Enter 100.100.100.1 in the Fir st IP Addr ess box.
Enter 100.100.100.2 in the Second IP Addr ess box.
If you have an SMP 4 or an SMP 16:

In the Fir st IP Addr ess box, enter the IP pool starting address that

you specified when you installed your SMP (see your SMP
installation guide).
Do not enter anything in the Second IP Addr ess box. Click Add.
Note that even if you set up a number of SMP gateways to communicate

via a dial-up connection, the PC will be able to communicate with only
one SMP at a time, and will use the address(es) specified here.
Setting up a direct serial connection

The following table outlines the procedure for setting up a direct serial connection between a PC
running Windows XP, and an SMP gateway.
1 Set up the SMP By default, an incoming direct connection is supported on the SMP console
gateway to port. Skip to step 2 or if you want to use a direct connection on any other
accept a dir ect port, you have to set it up as follows:
connection
1. In SMP Manager , click the SMP gateway to be configured and start a
Telnet session.
2. Start the RASMGR application.
4. Enter M, to modify the SMP COM port you will use for the direct
connection.
5. Enter the number of the DIRECT device to be modified.
7. Enter Y to allow incoming connections on the port.
8. Exit RASMGR.
2 Add a 1. From the Windows Star t menu, access the Contr ol Panel.
communication
cable between
the PC and the 3. In the Phone and Modem Options dialog box, click the Modems tab.
SMP gateway Click Add.
4. In the Add Har dwar e Wizar d dialog box, put a checkmark in the
Dont detect my modem; I will select it from a list checkbox. Click
Next.
5. Under Manufacturer, click Standard Modem Types.
6. Under Models, click Communications cable between two computers.
Click Next.
7. Click Selected ports.
8. Click the communications port (COM1 or COM2) you want to use for
the communications cable.
9. Click Next, click Finish. Click OK to close the Phone and Modem

Options dialog box.
3 Set up a new 1. From the Windows Star t menu, access the Contr ol Panel.
dir ect ser ial
connection to 2. Double-click Networ k Connections.
the SMP 3. Double-click New Connection Wizar d.
gateway
4. In the New Connection Wizar d dialog box, click Next.
5. Click Set up an advanced connection. Click Next.
6. Click Connect directly to another computer. Click Next.
7. Click Guest. Click Next.
8. Enter a descriptive name for the connection. Click Next.
9. In the Select a device drop-down list, click Communications cable
between two computers. Click Next.
10. Under Create this connection for, click Anyones use. Click Next.
Click Finish.
12. From the Gener al tab, click Configur e.
13. In the Maximum speed drop-down list, select 115200 bps.
14. Clear the Enable hardware flow control checkbox. Click OK.
17. Under This connection uses the following items, clear the Client for
Microsoft Networks checkbox.
Advanced.
compression checkbox. Click OK three times.
4 Configur e 1. In the SMP Manager Gateway menu, click Add.

SMP Manager
2. In the Gateway Pr oper ties dialog box, enter a significant name for
to communicate
the new SMP gateway, such as SMP direct connection.
with the SMP
gateway 3. If you have an SMP 4-20 or an SMP 8-40:
Enter 100.100.100.1 in the Fir st IP Addr ess box.

In the Fir st IP Addr ess box, enter the IP pool starting address
that you specified when you installed your SMP (see your SMP
Do not enter anything in the Second IP Addr ess box.

4. Click Add.
The PC will communicate with the SMP using the address(es) specified
here.
Windows 2000 setup procedures

If your PC operates under Windows 2000, use the procedures outlined in this section to:
Setup a dial-up (modem) connection between the PC and the SMP gateway.
Setup a direct serial connection between the PC and the SMP gateway.
Setting up a dial-up (modem) connection

The following table outlines the procedure for setting up a dial-up (modem) connection between a
PC running Windows 2000, and an SMP gateway.
1 Set up the SMP Perform this step for each SMP gateway with which you want to
gateway to communicate via modem.
accept a dial-up
1. In SMP Manager , click the SMP gateway to be configured and start
connection
a Telnet session.
4. Enter M, to modify the SMP COM port you will use for the dial-up
connection.
5. Enter the number of the MODEM device to be modified. Note that
you cannot specify the number of the console port, as the latter does
not support modem connections.
8. Exit RASMGR.
2 Install the 1. From the Windows Star t menu, click Settings, and then click
modem, if Contr ol Panel.
necessar y
3. In the Phone and Modem Options dialog box, click the Modems
tab.
If the modem you plan to use appears in the list, skip the rest of this step
and proceed to the next item in the table, since your modem is already

installed. Click Add.
4. In the Add/Remove Har dwar e Wizar d dialog box, allow Windows
to detect your modem automatically, and click Next.
5. In the Found New Har dwar e Wizar d dialog box, click Next.
6. Choose whether you want Windows to search for a suitable driver or
whether you want to choose the driver from a list. Click Next.
7. If you have an installation CD, insert it in the drive, click CD-ROM
dr ives and clear the other checkboxes; otherwise, click Micr osoft
Windows Update and clear the other checkboxes. Click Next.
8. Once Windows advises you that it has found the driver, click Next.
9. Once Windows has finished installing the driver, click Finish.
10. Click Finish to close the Add/Remove Har dwar e Wizar d dialog
box.
3 Set up a new Perform this step for each SMP gateway with which you want to
dial-up (modem) communicate via modem.
connection for
1. From the Windows Star t menu, click Settings, and then click
the SMP
Contr ol Panel.
gateway
2. Double-click Networ k and Dial-up Connections.
3. Double-click Make New Connection.
4. In the Networ k Connection Wizar d dialog box, click Next.
5. Click Dial-up to private network. Click Next.
6. Enter the phone number you will use to dial the SMP gateway. Click
Next.
7. Under Create this connection, click For all users. Click Next.
8. Enter a descriptive name for the connection. Click Finish.
checkbox, the Enable software compression checkbox, and Negotiate
multi-link for single link connections checkbox. Click OK.
12. Under Components checked are used by this connection, clear the
Client for Microsoft Networks checkbox and the File and Printer
Sharing for Microsoft Networks checkbox.
Advanced.

SMP Manager

to communicate the new SMP gateway, such as SMP via modem.
with the SMP
3. If you have an SMP 4-20 or an SMP 8-40:
gateway

Note that even if you set up a number of SMP gateways to communicate

via a dial-up connection, the PC will be able to communicate with only
one SMP at a time, and will use the address(es) specified here.
Setting up a direct serial connection

The following table outlines the procedure for setting up a direct serial connection between a PC
running Windows 2000, and an SMP gateway.
1 Set up the SMP By default, an incoming direct connection is supported on the SMP
gateway to console port. If you want to use a direct connection on any other port, you
accept a dir ect have to set it up as follows:
connection
1. In SMP Manager , click the SMP gateway to be configured and start
a Telnet session.
4. Enter M, to modify the SMP COM port you will use for the direct
connection.
5. Enter the number of the DIRECT device to be modified.
8. Exit RASMGR.
2 Add a 1. From the Windows Star t menu, click Settings, and then click
communication Contr ol Panel.
cable between
the PC and the
SMP gateway 3. In the Phone and Modem Options dialog box, click the Modems
tab. Click Add.
4. In the Add/Remove Har dwar e Wizar d dialog box, put a checkmark
in the Dont detect my modem; I will select it from a list checkbox.
Click Next.

5. Under Manufacturers, click Standard Modem Types.

6. Under Models, click Communications cable between two computers.
Click Next.
7. Click Selected ports.
8. Click the communications port (COM1 or COM2) you want to use
for the communications cable. Click Next. Click Finish.
3 Set up a new 1. From the Windows Star t menu, click Settings, and then click
dir ect ser ial Contr ol Panel.
connection to
2. Double-click Networ k and Dial-up Connections.
the SMP
gateway 3. Double-click Make New Connection.
4. In the Networ k Connection Wizar d dialog box, click Next.
5. Click Connect directly to another computer. Click Next.
6. Click Guest. Click Next.
7. In the Select a device drop-down list, click Communications cable
between two computers. Click Next.
8. Under Create this connection, click For all users. Click Next.
9. Enter a descriptive name for the connection. Click Finish.
11. From the Gener al tab, click Configur e.
12. In the Maximum speed drop-down list, select 115200 bps.
13. Clear the Enable hardware flow control checkbox. Click OK.
14. Click the Options tab, and put a checkmark in the Redial if line is
dropped checkbox.
15. In the Time between redial attempts drop-down list, select 30
seconds.
18. Under Components checked are used by this connection, clear the
Client for Microsoft Networks checkbox and the File and Printer
Sharing for Microsoft Networks checkbox.
Advanced.

SMP Manager

to communicate the new SMP gateway, such as SMP direct connection.
with the SMP
3. If you have an SMP 4-20 or an SMP 8-40:
gateway

The PC will communicate with the SMP using the address(es) specified
here.

Using a Dial-Up Connection for
DNP3 or IEC 60870-5-101
The SMP Gateway could need a dialup connection for DNP3 or IEC 60870-5-101 protocols in a
situation where there is no network between the SMP and the control center and you cannot
establish a network connection to the SMP using the procedures described under Remote access
to the SMP gateway, page 171.
If the control center uses the DNP3 or IEC 60870-5-101 protocol, you can establish a serial
connection, via a dial-up modem, between the SMP and the control center. The control center will
call the SMP gateway.
The same holds true if you need to communicate between the SMP and a device that uses DNP3
or IEC 60870-5-101and that supports a modem connection. The SMP gateway will call the device.
Communication via modem is available as an option on all SMP models. On the SMP 4, you use
an internal modem. However, you have to order the modem at the time you purchase the SMP,
and the modem port replaces one of the serial ports. On the SMP 16/CP and SMP 16/SG, the
modem is internal and has its own port. With the SMP 4-20 and SMP 8-40, you have to use an
external modem, which you plug into a serial port. Note that will all SMP models, you can always
plug an external modem into any serial port.
Having the SMP communicate, via dial-up modem with a PC or a device using DNP3 or IEC
60870-5-101, requires that you perform the following configuration steps with SMP Config:
Define which serial ports have a modem.

Create a modem pool.
Add modems to the pool.
Create a modem pool master connection if the SMP gateway will call a device, or create a
modem pool slave connection if the control center will call the SMP gateway.

Specifying which serial ports have modems
To indicate that a modem is connected to a specific serial port:
Start SMP Config from the SMP Manager window.

In the left pane, click Ser ial Por ts.
In the right pane, in the Interface drop-down list of the corresponding serial port, click
Modem Asynchr onous.
Creating a modem pool

A modem pool manages a certain number of physical modems so that when an outgoing call is to
be made, the pool selects an available modem to perform the call. Similarly, when an incoming
call is received, the pool identifies the caller and dispatches the call to the appropriate connection
(eventually to the protocol component).
There must be at least one modem per pool. In the case of the SMP 8-40, all the modems in a pool
must be connected to serial ports on the same board.
When it receives an incoming call, a modem pool needs to identify the caller in order to dispatch
the call to the appropriate protocol component. Since the identification is protocol-specific, each
protocol has its own method for identifying the caller. The identification procedure returns the
callers DEVICE ADDRESS. This DEVICE ADDRESS is then compared with the DEVICE
ADDRESS of each modem pool slave connection connected to the pool. Note that a modem pool
slave connection DEVICE ADDRESS is set by the protocol components. When a match is found,
the communication path is set up from the modem pool slave connection to the modem.
Identification is performed by the Call Dispatcher . The identification procedure for each protocol
supported is specified in the table next.
Protocol Identification Procedure
IEC 60870-5-101 The Call Dispatcher sends an IEC 60870-5-101 RESET OF LINK
broadcast frame. The slave device is expected to respond with an ACK
frame containing its own DEVICE ADDRESS.
DNP3 The Call Dispatcher sends a DNP3 RESET OF LINK broadcast frame.
The slave device is expected to respond with an ACK frame containing
its own DEVICE ADDRESS as the source address.
To add a modem pool:
In the left pane, click Ser ial Por ts, then on Modem Pools.
In the right pane, enter the name of the pool.
Edit the modem pool settings.
These settings set up the behavior of the Call Dispatcher , as described in the table next.

Setting Description
Type The communications protocol supported by the modem pool. The

default value automatic means that the supported protocol will be
determined automatically.
Allowed values: Automatic

IEC 60870-5-101
DNP
Default value: Automatic
Dispatcher Address Size The size of the DEVICE ADDRESS, in bytes. This setting is taken into
account when a frame is sent or received, since it affects the size of the
frame.
Range: 1 to 8
Default value: 1
Dispatcher Response This setting specifies how much time the dispatcher will wait for the
Timeout reception of a response to a request.
Range: 0 to 60,000 ms
Default value: 10,000 ms
Dispatcher Interchar Delay This setting specifies the maximum time allowed between 2 received
bytes of a frame, for the frame to be considered valid.
Default value: 250 ms
Dispatcher Recover This setting specifies how much time the dispatcher will wait after a
Timeout failure (invalid frame format, etc.), before retrying.
Dispatcher Max Request This setting specifies how many times the dispatcher will try to identify
Retry the device.
Range: 0 to 20
Default value: 3

Adding a modem to a modem pool
To add a modem to a modem pool:
In the left pane, click Ser ial Por ts, then on Modems.
In the right pane, choose a modem pool in the drop-down list for each modem.
This will add the modem to the modem pool.
Edit the modem settings for each modem (see following table).
In the left pane, click Asynchr onous Ser ial Por ts.
In the right pane, edit the serial port settings for each modem.
The meaning of each modem setting is given below:
Setting Description
AT Init String This AT string is sent to the serial port to initialize the modem. It should
be a valid AT string to which the modem will respond with an OK.
Default value: ATZ
AT Off-Hook String This AT string is sent to the modem to answer the call when a RING
message is received. The modem must, therefore, be configured to NOT
auto-answer the calls (avoid S0=X, where X is other than 0).
Default value: ATA
AT Dial String This AT string is prefixed to the phone number and sent to the modem to
make outgoing calls.
Default value: ATDT
AT On-Hook String This AT string is sent to the modem to hang up. After a call has been
completed, the AT Init String is always sent to reinitialize the modem.
Default value: ATH0
Incoming Only Put a checkmark if you want the modem to receive incoming calls but
not be able to make outgoing calls. If you do not put a checkmark, the
modem will be able to make and receive calls.
Allowed values: checkmark / no checkmark
Default value: no checkmark
AT Response Timeout Specifies how much time the modem pool will wait for an answer to an
AT string command. There is an exception for the ATDT and ATA
commands, since it can take some time to synchronize the carriers and
complete the call. For these exceptions, the maximum time is set to 3
minutes.
The timeout value depends on the modem and more specifically, on the

Setting Description
response time required for the +++ and ATH commands.
Adding a modem pool master connection

A modem pool master connection is used by a protocol component to make outgoing calls to a
device. This connection makes the link between the protocol component and the modem pool.
To add a modem pool master connection, proceed as follows:
In the left pane, click Connections, then on Modem Master s.
In the right pane:

Enter the name of the connection.
Specify, via the drop-down list, the modem pool with which the connection will be
associated. The modems belonging to the specified modem pool will be used to make
outgoing calls for this connection.
Enter the phone number and a supplementary AT initialization string. The phone number
is mandatory and can contain any characters recognized by the modem. See your modem
documentation about the availability and meaning of each dialing option. This setting
cannot contain the ATDT prefix, since the latter is already configured in the modem
settings. The supplementary AT initialization string is an optional AT string that will be
sent to the modem just before the calling ATDTxxx command. This setting can be used
to fine-tune modem options for specific calls, which means that you can override options
specified in the general modem initialization string.
Adding a modem pool slave connection

A modem pool slave connection is used by a protocol component to receive incoming calls from a
control center. This connection makes the link between the protocol component and the modem
pool.
To add a modem pool slave connection:
In the left pane, click Connections, then on Modem Slaves.
In the right pane:

Enter the name of the connection.
Specify, via the drop-down list, the modem pool with which the connection will be
associated. Calls received by this modem pool will be dispatched to this connection
component if the DEVICE ADDRESS matches.

Updating the SMP software and
tools
This chapter explains the software architecture of the gateway, describes how to update the SMP
Tools and how to update the SMP gateway software using the Tool called SMP Loader.
Software architecture of the SMP Gateway

To configure the SMP Gateway you use the SMP Tools, the software run on your computer with
Windows XP or 2000. Inside the SMP gateway, there are also software components that need
upgrading:
The SMP runs on Windows CE, called a firmware, the equivalent of Windows XP on your
computer. The firmware file that run on the SMP gateway are the boot file, the Windows CE
file and the gateway application. A new gateway version might include a new firmware
version.
The SMP gateway application (.app file), that contains your protocol translators and other
gateway software files.
The configuration file (.par file), that tells the gateway how to communicate with the
computer.
Procedure update checklist

There is a software in the Tools specialized in carrying files from the computer to the gateway,
called SMP Loader. This tool is mainly used for SMP 4-20 and SMP 8-40 models, and is
described in the section SMP Loader, page 199).
Consequently, whenever you receive a CD from Cybectec (or a FTP access to a download site),
with a new version or release of the SMP software and tools, perform the upgrade by taking the
following steps, in the or der pr esented:
Upgrade the PC software, i.e., the SMP Tools (see Updating the SMP Tools on the PC,
page 187).
Use the table below for the next steps.

The table below shows the order in which you will update the SMP gateway components, and the
SMP Tool that you will use to modify the component.
SMP 4-20 or SMP 8-40

Component to update SMP 4 or SMP 16 Tool
Tool
Windows CE SMP Manager SMP Loader
Bootstrap programs SMP Manager SMP Loader
Resident diagnostics SMP Manager SMP Loader
SMP gateway application SMP Manager SMP Manager
Configuration file SMP Config and SMP Manager SMP Config and SMP Manager
Updating the SMP Tools on the PC

Whenever you receive a new version from Cybectec, with a new version or release of the SMP
software and tools, you will start by updating the SMP Tools on your PC. Much more rarely, you
may need to update JRE (Java 2 Runtime Environment).
Proceed as follows:
Insert the SMP Softwar e and Tools CD-ROM in your computers CD drive.
In the Welcome to the SMP Gateway window, click Upgrading.
There may be specific instructions that apply to the version you were using previously. If so,
follow these instructions before performing the upgrade.
Click the item you want to upgrade and follow the instructions.
The SMP Tools installer will automatically remove the previous version before installing the new
one.
Updating the SMP software on the SMP Gateway
Updating the SMP firmware

The functions of the SMP gateway are provided by a sophisticated embedded software system that
includes a number of components:
The Windows CE operating system, which provides real-time system services, network
services, and device drivers.
The bootstr ap pr ogram, in the very exceptional cases where it is a new version. That
program loads the SMP gateway application and the Windows CE operating system into
memory when the SMP starts up.

The r esident diagnostics, which allow you to ensure that the SMP is working properly.
The SMP gateway application, which implements all the functionalities of the SMP
gateway.
These components constitute the SMPs firmware.
SMP 16 or SMP 4
To update the SMP firmware, compare the version you get from your SMP gateway's SMP Stats
(for more information, refer to page 53) and to update any outdated file, execute the following
steps in the or der pr esented her e:
If you used the console port for any reason, remove the cable that you connected between
the SMP console port and the PC.
Start SMP Manager.
Update Windows CE if necessary:
In the SMP Manager window, click your SMP gateway.

In the Gateway menu, click Update SMP Gateway Fir mwar e.
The Select Fir mwar e Libr ar y dialog box appears.
In the SMP 16 or SMP 4 folder, under SMP Tools\Manager \SMP Fir mwar e
Libr ar ies, choose the Windows CE file. The file is called wince4.pkg.
SMP Manager transfers the file to your SMP gateway and then informs you that you
have to restart your SMP gateway for the new firmware to go into effect.
In the Restar t Gateway dialog box, choose Shutdown and Restar t to have the SMP
restart in normal mode.
All restarts are automatically logged in the SMPs internal log file. If you want to, you
can enter a comment in order to indicate why you restarted the SMP. This comment will
be added to the event log.
The SMP gateway will go through a series of startup steps, which will be displayed in the
Status column in SMP Manager. Once the startup is complete, the Status column will display
the current status of the SMP gateway:
If you are upgrading to ver sion 4.0 of the SMP software and tools, the Status column
will show that the SMP is now in Safe Mode. This means that Windows CE has detected
unsigned executable files. This is normal at this stage and requires no corrective action.
Go on to updating the SMP Gateway application.
For any other upgrade, the Status column should show that the SMP has Star ted. If the
Status column shows that your SMP did not start up normally, turn to
Troubleshooting, page 205.
Update the bootstrap program if necessary:

In the Gateway menu, click Update SMP Gateway Fir mwar e.

The Select Fir mwar e Libr ar y dialog box appears.
Libr ar ies, choose the bootstrap file. The file is called smpboot.pkg.
You will need to restart in this case.
Update the SMP Gateway application:

In the Gateway menu, click Update SMP Gateway Application.
The Select Libr ar y dialog box appears.
Libr ar ies, choose the application file. The file is called SmpApp(ver sion).app
Simply close the Restar t Gateway dialog box, if you are updating other components,
you do not need to restart the SMP gateway now. The application file could be updated
before or after the diags file.
Update the resident diagnostics if necessary:
Proceed as for the resident diagnostics, but in the firmware libraries, choose the diags
file. The file is called diagsSMP16.pkg or diagsSMP4.pkg.
SMP Manager transfers the file to your SMP gateway and then informs you that you have to
restart your SMP gateway for the new firmware to go into effect. The diags file could be
updated before or after the application file.
You can then move on to the configuration file with SMP Config and SMP Manager.

To update the SMP firmware, you will use SMP Loader . You will find detailed instructions on
under SMP Loader, page 199.
Execute the steps in the order pr esented her e:
Update the primary and secondary bootstrap programs.

Update the resident diagnostics.
Update Windows CE.
Remove the cable that you connected between the SMP console port and your PC when you
used SMP Loader .
Reset the SMP by holding down the reset button for at least 5 seconds, until the 4 front panel
LEDs turn amber.
Start SMP Manager.
The SMP gateway will go through a series of startup steps, which will be displayed in the Status
column. Once the startup is complete, the Status column should show that the SMP has Star ted.
If the Status column shows that your SMP did not start up normally, turn to Troubleshooting,

page 205.
Updating the SMP gateway application

You will now update the SMP gateway application.
Proceed as follows:

In the Gateway menu, click Update SMP Gateway Application.
Under Program Files\Cybectec\SMP Tools\Manager \SMP Softwar e Libr ar ies, select

folder SMP 16, SMP 4, SMP 4-20 or SMP 8-40, depending on your SMP model.
Choose the SMP gateway application version that you want to send to the SMP. The file has
the extension .app and its name indicates the application version. For example, a file called
SmpApp 1.14R2.app contains version 1.14, release 2, of the SMP gateway application.
SMP Manager sends the software to the specified SMP gateway and then informs you that you
have to restart your SMP gateway for the new application to go into effect.
Simply close the Restar t Gateway dialog box, without r estarting the SMP gateway.
Updating the configuration file

The last step in upgrading to a new version or release of the SMP software and tools consists of
updating the configuration file:
Start SMP Config and open your configuration file.

The file name in the title bar should have a star (*) beside to inform you there is a change.
From the File menu, select Save.
A message box will inform you that the current configuration file will be upgraded to a
current version. A backup is automatically saved with the word backup before the previous
files name.
Send the configuration file to the SMP using SMP Manager:
From the Gateway menu, select Send configuration file.
SMP Manager will transfer the file on the SMP

Activating a new license
Whenever you contact Cybectec to request support for a new device that you want to connect to
your SMP gateway, or to add support for a particular option for your SMP gateway, Cybectec will
provide you with a new license.
To activate your new license and take advantage of the new components, you need to go through
the following steps:
Update your license information (see Updating your license information, below).
Update the SMP gateway application (see Updating the SMP gateway application, page
193).
Updating your license information

Proceed as follows to update your license information:
In the Gateway menu, click Update SMP Gateway License.
The Update license dialog box appears.
In this dialog box, enter your license ID and your key (both rows) exactly as they appear in
the instructions (on the CD cover or in your email), and click OK.

If you are updating the license information for a group of SMP 4-20s or SMP 8-40s that have
the same license ID, you can simplify the task as follows:
Enter the license ID and key (both rows) of the first SMP. The license ID you have just
entered gets added to the License ID drop-down list, and SMP Manager keeps track of
the associated key. For the remaining SMPs, simply choose the license ID in the drop-
down list; the key information will be supplied automatically.
Another way to simplify the task is to select several SMPs of the same type before
performing the update. The license information will be applied to all the selected SMPs.
You can click the Details button, in order to view the functions provided by the new license
before actually performing the update.
If SMP Manager suggests that you restart the SMP gateway, restart it in normal mode by
choosing Shutdown and Restart in the Restar t Gateway dialog box. If there is a new
protocol, you must reload the gateway application and restart.
The License Infor mation dialog box displays the various software features supported by your
license, such as redundancy, Soft PLC and automation functions. It also displays information
about the number of master protocols (one per device) and slave protocols (one per control center)
supported by your license. For all models except the SMP 4, the dialog box also shows which
specific protocols are supported by your license.
The dialog box is shown below, first for an SMP 4-20 and then, for an SMP 4:

Here is a brief explanation of the classes shown in the dialog box:
Class 1 includes commonly used protocols such as DNP3, Modicon MODBUS, SEL and
IEC60870-5.
Class 2 currently includes only UCA 2.0.
Class 3 currently includes ICCP and 61850.
Updating the SMP gateway application

The second step in activating a new license consists of updating the SMP gateway application.
Proceed as follows:

In the Gateway menu, click Update SMP Gateway Application .
Under Program Files\Cybectec\SMP Tools\Manager \SMP Softwar e Libr ar ies, select

folder SMP 16, SMP 4, SMP 4-20 or SMP 8-40, depending on your SMP model.
Choose the SMP gateway application version that you want to send to the SMP. The file has
the extension .app and its name indicates the application version. For example, a file called
SmpApp 1.14R2.app contains version 1.14, release 2, of the SMP gateway application.
SMP Manager sends the software to the specified SMP gateway and then informs you that you
have to restart your SMP gateway for the new application to go into effect.
Simply close the Restar t Gateway dialog box, and r estart the SMP gateway.

Miscellaneous SMP Tool
features
This section presents SMP Manager and SMP Config commands that provide useful capabilities,
and that were not discussed in other sections of the document.
SMP Manager features

SMP Manager has a number of handy features:
Displaying only those SMPs with which SMP Manager is currently in communication.
(Click Active Gateways in the View menu.)
Choosing the time display format: local time or UTC.

(Click Time Display Options in the Edit menu.)
Exporting your SMP gateway list.

(Click Expor t List in the File menu.)
Importing an SMP gateway list.

(Click Impor t list in the File menu.)
Setting the behavior of SMP Manager.
Setting SMP Manager options

To set the options in the SMP Manager
In the Edit menu, click Options. The Options dialog box will appear:

The dialog box contains the following boxes and buttons:
Object Description
Show splash screen on If you put a checkmark in this box, the SMP Manager splash
startup screen will appear when you start up the application.
Show SMP Manager If you put a checkmark in this box, the SMP Manager main
topmost screen will always be displayed on top of all other screens on your
PC.
Upload directory Displays the folder that will be used when SMP Manager sends
files to an SMP gateway. The folder referred to here resides on the
SMP.
If remote file already exists Use this option to specify the action to be taken during a file
transfer to the SMP:
Overwrite
The remote file will automatically be overwritten with the
source file located on your PC.
Skip
The remote file will not be overwritten.
Prompt
You will be asked whether or not the remote file is to be
overwritten.

Object Description
Show SMP Manager Use this option to specify how you want SMP Manager to be
displayed at the bottom of your Windows screen.
On taskbar only.
Shows the SMP Manager name and icon on your Windows
taskbar but not in the system tray.
In system tray only.
Shows the SMP Manager name and icon in the system tray
but not on your Windows taskbar.
On taskbar and in system tray.
Shows the SMP Manager name and icon on the Windows
taskbar and in the system tray.
The system tray is located in the rightmost corner of the Windows

taskbar.
SMP Config features

SMP Config has a few handy features:
Exporting your SMP configuration to a .csv file.

(Click Expor t List in the File menu.)
Importing an SMP configuration previously saved as a .csv file.

(Click Impor t list in the File menu.)
Clearing the message pane.

(Click Clear Message Pane in the Validate menu.)
System data points

The SMP gateway has a set of system points for redundancy, status, remote access, security, and
synchronization. They can be seen in the SMP Web server and they can provide useful
information to trigger alarms. The following list describes all the available system data points:
Data point Description
Local Control points
_smp___localControl When this binary input indicates if the active SMP gateway is
controlled locally by Visual Substation or another HMI, this
point is a 1. If the gateway is controlled by remote, this point
is 0. When the SMP restarts, it becomes 0.
_smp___setLocalControl This binary output allows you to switch from local (Visual
Substation) to remote (SCADA) control. Use
_smp___localControl to see which state the SMP gateway is

in.
Redundancy points
_smp___rsLocal_ok This point will be 1 when the local gateway is operational.
_smp___rsRemote_ok This point will be 1 when the redundant gateway is

operational.
_smp___rsLocal_active This point will be 1 when the local gateway which is the
gateway being used, is active.
_smp___rsRemote_standby This point will be 1 when the redundant gateway is on

standby.
_smp___rsRemote_hotStandby This point will be 1 when the redundant gateway is on hot

standby, which means that both SMP gateways are fed the
same information.
_smp___rsFirstConnection_ok This point will be 1 when the first of two connections between
the SMP gateways is operational.
_smp___rsSecondConnection_ok This point will be 1 when the second of two connections

between the SMP gateways is operational.
_smp___rsSynchronized This point will be 1 when the SMPs are synchronized with the
same time source. This point is used in failover conditions.
_smp___rsLan_ok This point will be 1 when the LAN condition is operational.

This point is used in failover conditions.
_smp___rsVoltage_ok This point will be 1 when the voltage supply operates within
the set parameters. This point is used in failover conditions.
_smp___rsTemp_ok This point will be 1 if applicable when the temperature is

within the set parameters of normal temperatures. This point is
used in failover conditions.
_smp___rsMem_ok This point will be 1 when the available memory is within the
set parameters of normal use. This point is used in failover
conditions.
_smp___rsGroupAddress_ok This point will be 1 when the group address defined for the
redundant units is valid. This point is used in failover
conditions.
Common Power Status points
_smp___voltage_ok This point will be 1 when the voltage supply operates within
the set parameters.
SMP 4-20, SMP 8-40 and SMP 4
_smp___battery_ok This point will be 1 when the battery is operational.

SMP 4-20 & SMP 8-40
_smp___temp_ok This point will be 1 if when the temperature is within the set
parameters of normal temperatures.
Remote access points
_smp___dialupEnable This binary output point is used to lock or unlock all incoming
RAS dialup connections to the SMP gateway.
_smp___dialupEnabled This binary output point is used to lock or unlock all incoming
RAS dialup connections to the SMP gateway.
_smp___dialupInUse This binary input point indicates whether or not there is a

communication in progress via an incoming RAS dialup
connection.
Passthru system points
- This binary output point is used to lock or unlock a particular

_smp___passthru<connection>En passthru connection. The name of the connection, as defined in
able SMP Config, is included in the name of the data point.
- This binary input point indicates whether a particular passthru

_smp___passthru<connection>En connection is currently enabled or disabled.
abled
- This binary input point indicates whether a particular passthru

_smp___passthru<connection>In connection is currently active.
Use
Security-related points
_smp___securityAccountLocked This binary output point shows if the account is locked.
System Folder points destined to Enterprise Solutions
_smp___Folder(foldername)_Ava This binary output point will be 1 if the storage folder in the
ilable server, for this gateway, is available.
_smp___Folder(foldername)_Fre This binary output point will be 1 if the storage folder in the
eDiskSpace server, for this gateway, has free space.
_smp___Folder(foldername)_Lo This binary output point will be 1 if the storage folder in the
wDiskSpace server, for this gateway, has low disk space.
Clock and time-related points
_smp___clockSynchronized If the gateway is synchronized by a source such as IRIG-B,

this binary output point will show the clock synchronization
status. When the gateway's SYNC LED is green, whish means
that the clock is synchronized, this point shows a 1.

_smp___clockYear This analog output point states the clock's year.
_smp___clockMonth This analog output point states the clock's month of the year.
_smp___clockDay This analog output point states the clock's day of the month.
_smp___clockHour This analog output point states the clock's hour of the day.
_smp___clockMinute This analog output point states the clock's minute of the hour.
_smp___clockSecond This analog output point states the clock's second of the
minute.
Temperature sensor on SMP 16/CP-PM and SMP 16/SG-PM
_smp___temperature This analog output point states the temperature inside the
gateway.
SMP Loader
SMP Loader should be used for the following purposes:
To update Windows CE, the resident diagnostics, the primary bootstrap, or the secondary
bootstrap of an SMP 4-20 or an SMP 8-40.
To update the secondary bootstrap program of an SMP 16 or an SMP 4.
The primary bootstrap, which resides in the ROM, is factory-installed and cannot be updated
in the field. You can, in fact, load Windows CE and the resident diagnostics with SMP
Loader , but you should use SMP Manager unless there is a problem.
When the SMP is powered up or reset, the following components are started up, in the order listed:
Primary bootstrap program.

Secondary bootstrap program.
Windows CE.
In order to use SMP Loader , you need to interrupt the previous process before it gets to Windows
CE. You accomplish this by putting the SMP into Command mode.
Using SMP Loader

Using SMP Loader requires that you go through 3 steps:
Connect your PC to the SMP.

Start SMP Loader .

Connecting your PC to the SMP
Connect your PC to the SMP as follows:
Using a connection cable, connect one of the communication ports of your PC to the SMP
console port:
Use a standard RS-232 direct cable equipped with a DB9 male connector at one end and a
DB9 female connector at the other end. Note that if you are using a portable computer
that does not have an external serial port, you will need to use a USB to RS-232 serial
converter.
Connect the cable between the SMPs console port and the PCs serial communications
port (typically COM1 or COM2).
Starting SMP Loader

Once your PC is connected to the SMP, you will start SMP Loader as follows:
Click Start on the Windows taskbar.

Point to Programs, then to Cybectec, and then to SMP Tools.
In the SMP Tools menu, click SMP Loader.
The SMP Loader main screen appears.
In the Connection menu, click Communication Settings to display the Communication

Settings dialog box.
Most of the communication settings are unavailable, as they cannot be changed.

However, set the 2 active setting as follows:
Port The communications port you are using on your PC

(COM1, COM2, ).
File Transfer Speed 115200 bps.

Note, however, that some computers may not support your specified
speed. In that case, try a lower speed.
Putting the SMP into Command mode

To put the SMP into Command mode, you simply need to reset the SMP.
Proceed as follows, depending on the SMP model:
SMP 4-20 or SMP 8-40:

Hold down the reset button until all the LEDs (power, watchdog timer, ST1 and ST2)
simultaneously turn amber.
SMP 4:
Insert a pointed object in the reset aperture and apply pressure until the watchdog timer LED
stops flashing. Do not use a lead pencil, as it could break and damage the SMP since lead is
a conductor.

SMP 16:
Turn off the power to the SMP 16, and then power it up again.
Within approximately 30 seconds, the SMP Loader window will show the files that are currently
loaded on the SMP gateway.
Main screen
The SMP Loader main screen is shown next, first for an SMP 16/SG and then for an SMP 8-40.
As you can see, the SMP 16 display only shows Windows CE (in the example, version 4 is loaded
on the SMP). This is also true for an SMP 4. The SMP 8-40 screen shows Windows CE and the
resident diagnostics, and each file name is preceded by the board A or B on which the file is
located. The Created and Received columns will show N/A if the date and time are not
available due to certain hardware constraints.
It is important to note that the display area does not list the bootstrap programs, even though these
do indeed reside on the SMP. However, the secondary bootstrap version is shown on the status bar
at the bottom of the screen. In very rare cases, the status bar could show a primary bootstrap for an
SMP 4-20 or SMP 8-40 (see Corrupted secondary bootstrap, page 204).
You can also view the bootstrap versions as follows:
In the Connection menu, click Bootstrap Ver sions.
A dialog box appears, showing the versions of both bootstrap programs. For the SMP 4 and SMP
16, the dialog box indicates that the primary bootstrap version is unavailable since it resides in the
ROM and cannot be modified in the field.

Transferring files to the SMP gateway
You can transfer one or more files to the SMP gateway, and you can choose the files individually.
To choose the files to be transfered, take one of the following steps:
Using Windows Explorer, drag and drop the files in your SMP Loader main screen display.
OR
Click Send in the File menu.

A Windows file opening dialog box appears.
Point to SMP Tools\Manager \SMP Fir mwar e Librar ies, and then to the SMP 4, SMP 4-
20, SMP 8-40 or SMP 16 folder, depending on the type of SMP you have.
Choose SMP Loader Files in the Files of type drop-down list. This will display one or more
files with the extension .VL. Click the file you want to send, and click Open.
The File Infor mation dialog box appears, giving you a description of each file, within the .VL
file, that you are about to transfer and asking you to confirm your intention to carry out the
transfer.

The transfer takes place once you have responded to the question for all the files that were listed in
the .VL file, and a dialog box shows you the progress of the operation.
After the transfer, the transfered files appear in the list in the SMP Loader window, if they were
not already in the list. Otherwise, you will simply notice a difference in the version number, the
size and the creation date. In our example, we updated the diagnostics file from version 1.1R11 to
version 1.1R12 (compare with Main screen, page 201).
Notes:
The SMP will not use the transfered files until the next reset.
If you transfer a bootstrap program, it will not appear in the list even though the file has
indeed been transfered. Furthermore, if you look at the bootstrap version numbers (by
clicking Bootstr ap Ver sions in the Connection menu), you will see that the secondary
bootstrap number has not been updated. The version number will be updated on the next
reset of the SMP gateway.
Log file
SMP Loader records every significant event until you exit the application, including startup, file
transfers, file deletions, requests for bootstrap versions, communication port settings, transfer
cancellations, refreshes, communication errors, and exit.
The log file, which can be read with Notepad, is located in SMP Tools\Manager \SMP Fir mwar e
Libr ar ies, under the name Loader .log. Each time you start the application, SMP Loader
overwrites the information contained in the file.
Updating bootstraps under unusual circumstances

An unusual circumstance, such as a blackout during a bootstrap transfer, could cause a bootstrap
program to become corrupted. For an SMP 4-20 or SMP 8-40, this could happen to the primary or
the secondary bootstrap; for an SMP 4 or SMP 16, it could only happen to the secondary
bootstrap.

Corrupted primary bootstrap
If the primary bootstrap of an SMP 4-20 or SMP 8-40 is corrupted, contact Cybectec Technical
Support.
Corrupted secondary bootstrap

If the secondary bootstrap of your SMP is corrupted, use one of the following procedures.
SMP 4 or SMP 16
Contact Cybectec Technical Support.
Normally, SMP Loader communicates with the secondary bootstrap program of the SMP.
However, if the secondary bootstrap is corrupted, SMP Loader has to communicate with the
primary bootstrap in order to load a new secondary bootstrap.
In that case, you have to put the primary bootstrap in Update mode. In this mode, you do not
have access to the usual SMP Loader functions. All you can do is load the bootstr ap
pr ogr ams. Also note that SMP Loader will automatically set its communication speed to 19200
bits per second.
Proceed as follows:
Simultaneously hold down the reset, TEST1 and TEST2 buttons until all four LEDs
(power, watchdog timer, ST1 and ST2) turn amber.
Release ONLY the reset button and keep holding down the TEST1 and TEST2 buttons until
the first 2 LEDs (power and watchdog timer) go from amber to red, and the other 2 (ST1 and
ST2) go from amber to green.
Note: At this point, the information displayed on the LCD is not valid and is, ther efor e,
to be ignor ed.
Transfer the secondary bootstrap program to the SMP using SMP Loader (see Transferring
files to the SMP gateway, 202).

Troubleshooting
Introduction
The SMP gateway is a highly reliable substation-grade device. Most operational problems result
from configuration errors, and there are a few simple steps you can take to identify and solve these
problems.
This section discusses the following types of problems:
Startup problems.
Communication problems.
Problems with data validity.
Problems executing control operations.
Getting additional help

There are a number information sources that can help you solve your problems. You can turn to
our website - www.cybectec.com , to find answers to frequently asked questions (FAQ).
Also, if your problem seems to be related to a protocol instance, you can refer to the Cybectec
documentation on the particular protocol. To access the document, proceed as follows:

Point to All Pr ogr ams, then Cybectec, then SMP Tools, and then Documentation.
The list of available documents is displayed in an explorer window.
Click the document you want to read.

In the File menu of the explorer window, click Open with Acr obat.
Your Adobe Acrobat program starts up and displays the document in a window.

Creating an SMP gateway report file
In the next section, we will take you through the steps required to solve your problems. If after
going through all the required procedures, you find that you need to contact Cybectec, you will
need to create a report file. This file will help the technical support group in identifying and
solving the problem.
SMP gateway report files are stored in the SMP Manager Reports folder. Each time a report is
generated, SMP Manager creates an event log file, indicating all operations performed during the
report generation. The event log file is also stored in the Reports folder.
To create an SMP gateway report file:
Click the SMP gateway in the SMP Manager window.

In the Gateway menu, click Repor t.
Note: The Repor t command will not be available unless the SMP gateway is online.
The Gateway Repor t dialog box appears.
Click the Tell me mor e button to display:

the information that will be collected from the SMP gateway;
where the SMP gateway report file (*.GRF) will be stored.
Enter additional information in the text box, such as the problem description, or the reason
why you are requesting technical support.
Assign a name to the report, in the Report Name box. SMP Manager will automatically
append the date and time to the report name.
Put a checkmark in the Extract Automatically checkbox, if you want to see where the report
is located as soon as SMP Manager has finished retrieving the report information. The
information will be displayed in a Windows Explorer window.
Click the OK button to start the report generation.

The Gateway Repor t progress dialog box appears, showing each operation performed and
when the report generation is complete, the dialog box indicates the completion status of the
operation.
Click the dialog boxs Details button to display the event log for the report generation.
Click the Close button to close the dialog box.
If you had put a checkmark in the Extr act Automatically checkbox, a Windows Explorer window
appears, showing where the report file is located. You will see a .log file, a .grf file, and a folder
bearing the same name as the .grf file. If you click the folder, you will see a group of files and
folders with information about the data points, crashes, logs, and so on.
Send the .grf file to Cybectec with your request for technical support.
The .grf file is, in fact, a zipped file, which when unzipped, contains the files and folders
discussed previously.
Viewing an SMP gateway report file

At the time you generate a report, you can choose to see the report immediately. However, at all
times, you can view an existing report for any SMP gateway, as follows:
Click the SMP gateway in the SMP Manager window.

In the Gateway menu, click Extr act Repor t.
In the Windows Open dialog box, choose the desired .grf file.
A Windows Explorer window opens.
Click the folder that has the same name as the .grf file on which you clicked, and click Open.
You will now see a group of files and folders.
Click the items of interest and click Open to view the information.
Startup problems
When you start the SMP or reset it through SMP Manager, it goes through a sequence of steps,
after which you should see Started in the Status column of the SMP Manager application
window. However, if the SMP software detects a problem during startup, you may see something
else in the Status column. Here are some suggestions for troubleshooting the problem. If the
problem persists, do not hesitate to contact our technical support group.
No configuration file
If the status is No configuration file, you have not loaded a configuration file on the SMP.
Proceed as follows to correct the problem:
Create a configuration file using SMP Config, if you have not already done so.
Use SMP Manager to send the file to the SMP.

Restart the SMP via SMP Manager , in order to activate the configuration.
Protocols failed
If the status is Protocols failed, it may be due to one of the following reasons:
You changed your software license and did not update your SMP gateway application.
There is a problem with a master or slave protocol instance.
There is an incompatibility in the settings.
Proceed as follows to correct the problem:
If you have changed your software license without updating your SMP gateway application,
update the SMP gateway software using SMP Manager , as some components may be
missing. See Updating the SMP gateway application, page 193.
Otherwise, start SMP Log and examine the startup log.

Make sure you are using the correct configuration file.
Make sure you have described your hardware correctly.
For example, you may have specified the wrong SMP model.
Check the software versions.
You may be using the wrong protocol version.
Check the protocol settings.
The log will show you the startup of each protocol instance. You will see which one
failed to be loaded or did not start up properly. Check its parameter settings. Make sure
you have associated the protocol instance with an existing serial port. The number of
available ports depends on the hardware configuration settings.
If you are using the wrong configuration file, use SMP Manager to send the correct file to
the SMP gateway.
If you are using the correct configuration file, fix any errors using SMP Config, and then
send the file to the SMP using SMP Manager .
If you are using the wrong protocol version, send an updated version of the SMP gateway
application to the SMP, using SMP Manager .
If you are using the wrong protocol version and you have already sent an updated version of
the SMP gateway application to the SMP, you probably need to have SMP Config convert
your configuration file, after which you can send the file to the SMP.
If you have changed your license, update the SMP gateway software using SMP Manager , as
some components may be missing. See Updating the SMP gateway application, page 193.
If the problem persists after the SMP has restarted, try using a reduced version of the
configuration file, in an attempt to isolate the problem. For example, use a configuration file
that has only one device and one protocol instance.

Critical component missing
If the status is Critical components missing, there is a missing component in the SMP gateway
application. This situation can arise if you change your license without updating the SMP gateway
application.
Update the SMP gateway application using SMP Manager. See Updating the SMP gateway
application, page 193.
If the problem persists, contact Cybectec.
Safe mode
Communication problems
Communication problems always occur in one of the following layers:
SMP DEVICE
Protocol Protocol
Link Link
Physical Physical
SMP Tr ace and SMP Stats are the ideal tools for you to troubleshoot a communications problem
and determine in which layer the problem occurred. SMP Trace shows you the information that
was sent back and forth between the SMP and the device, while SMP Stats supplies you with
statistics that can help you detect an anomaly. For example, the statistics may show you that there
were no exchanges whatsoever on a particular link, or the trace may show you that the SMP never
got responses when it polled a particular device.
Physical layer
The physical connection between the SMP and a device is often at the root of a problem. You
should therefore ask yourself the following questions:
Am I using the correct type of cable?

Do I need to use a cable for RS-232 or for RS-485 communication?
Should I be using a 2-wire or a 4-wire cable for RS-485 communication?

Is the device connected properly?
Make sure the cable is connected to the correct port.
Do I need an adaptor?
For example, do I need a null-modem adapter for RS-232 communication?
Are the TCP/IP network settings configured correctly?

Use SMP Config to check the Asynchr onous Ser ial Por ts settings, under Connections:
If Im using RS-485 4-wire, did I choose RS-422?
If Im using RS-485 2-wire, did I choose RS-485?
Link layer
Problems in the link layer are often related to the settings of the communications component.
Here are examples of settings that can cause problems:
Verify the baud rate of both the SMP and the device.
Verify the parity, start and stop bit settings.
Verify the TCP/IP address and port configuration.
We suggest you take the following steps:
Examine the link layer byte exchanges, using SMP Trace and SMP Stats.
Using SMP Config, look at the Connections settings:
If your SMP communicates with the device over a serial link, check the communication
settings of the link used to communicate with the device, such as baud rate and parity.
These settings must be configured identically at both ends.
If your SMP communicates with the device over a WAN or LAN, make sure you have
specified the correct TCP/IP address and port number.
Protocol layer
Protocol problems are directly related to the settings of the pr otocol instance used to
communicate with the device.
You should proceed as follows:
Verify the configured device address.

Verify the protocol version.
Verify the packet size.
Make sure all scanning sequences are configured.
Does the device support the scanning parameters?
Different versions of the same device sometimes react differently.
We suggest you take the following steps:
Examine the protocol layer byte exchanges, using SMP Tr ace and SMP Stats.

Using SMP Config, make sure you have specified the correct protocol.
Look at the SMP Config general settings:
Check the settings of the protocol instance, such as packet size.
Make sure the device or link address is correct.
Check the polling parameters.
Some devices are not able to respond to rapid polling requests because they process the
information very slowly. Other devices only allow slow communication links - 9600
baud or less. If you poll too quickly, the request will arrive before the last block of data is
read, thereby causing communication problems.
Problems with data validity

When all the exchanges are taking place correctly and there are no protocol errors reported in the
statistics, but some of the acquired values are erroneous or incoherent:
Using SMP Config, examine the following settings for the points that are invalid:
Data point address.

Is the address of the physical data point correct? Some devices have flexible
configuration options, so you have to compare the SMP Config values with the values
set by the device manufacturers software.
Conversion factors.
Are the scale and offset factors correct for physical analog data point?
Polarity.
Is the polarity of the physical binary input point set correctly?
Warning messages.
Are there any warning messages in the message pane, regarding the data points that have
erroneous values?
Problems executing a control operation

When a control operation fails:
Use SMP Log to look in the control log, at all the exchanges involved.
All control operations are recorded in this log.
Use SMP Tr ace to see the exchanges.

Note, however, that you have to be connected to the SMP to view a control operation in real
time.
Make the following checks to determine the cause of the failure:
Using SMP Log, look at the control log and make sure the SCADA is sending the correct
sequence (direct operate, select before operate) of messages.

Using SMP Config, check the general settings of both the master and the slave protocol
instances. Make sure each of them has a checkmark in Contr ol Enabled.
Using SMP Config, make sure the binary and analog physical output points are set up
correctly. For example, for the DNP protocol, Contr ol Type requires a value other than
Not supported. See the device manufacturers documentation for the required setup and
refer to the appropriate Cybectec protocol documentation.
Refer to the device manufacturers documentation to check whether the device allows for
a polling message to be sent between a select and an operate or whether polling has to
wait until after the select and operate have completed. Some manufacturers deselect the
device if a polling message is sent between a select and an operate. If polling has to wait,
use SMP Config to make sure the master protocol has a checkmark for Tx Dur ing SBO
in its general parameters.
Using the web browser, make sure the point called _smp___localControl is set either to 0
to enable commands from the SCADA or to 1, to enable commands from Visual
Substation. If the value is not set properly, send either an open command to the point
called _smp___setLocalControl to set the value to 0, or a close command to set the value
to 1.
Using the web browser, check whether the point is set to inhibit operations. If so, remove
the inhibition.

SMP User Manual

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

SMP User Manual

Uploaded by

Copyright:

Available Formats

User Manual

Cooper Power Systems

The SMP Tools 19

SMP Gateway User Manual i

Configuring the SMP 27

Viewing the SMP log files 45

ii SMP Gateway User Manual

Viewing communication statistics in real time 53

Using a web browser to view data in real time 57

Connecting the SMP to a control center 61

Connecting to another SMP 67

SMP Gateway User Manual iii

Using passthru connections 97

iv SMP Gateway User Manual

Creating an Annunciator interface 109

The SMPs automation functions 133

SMP Gateway User Manual v

Using syslog with an SMP gateway 149

Setting up the SNMP server 163

vi SMP Gateway User Manual

Remote access to the SMP gateway through a serial port 171

Using a Dial-Up Connection for DNP3 or IEC 60870-5-101 181

Updating the SMP software and tools 186

Activating a new license 191

Miscellaneous SMP Tool features 194

SMP Gateway User Manual vii

viii SMP Gateway User Manual

SMP Gateway User Manual ix

You will learn how to set up your SMP as a:

SMP Gateway User Manual 1

Your Documentation folder contains the following related documents:

SMP 4 Installation Guide, GUI-00316-00026 T. This document gives you detailed

SMP 16 Installation Guide, GUI-00316-00032 T. This document gives you detailed

2 SMP Gateway User Manual

Unpack the SMP.

All of these steps ar e explained in detail in the following documents:

SMP 4-20 SMP 8-40 Installation Guide, GUI-00316-00027 T

SMP Gateway User Manual 3

Configure your SMP so that it can communicate with your devices:

Define the hardware.

View the following information in real time:

The SMP log files.

Configure a slave protocol instance for each control center.

4 SMP Gateway User Manual

SMP Gateway User Manual 5

There are a number of problems to contend with: connectivity, protocol incompatibilities,

Masters and slaves

SMP Gateway User Manual 7

Figure 1 Master and slave systems

Introducing the SMP in the automation system

Figure 2 The SMP as a Master-and-slave system

8 SMP Gateway User Manual

Figure 3 The SMP real-time data exchange

SMP Gateway User Manual 9

Figure 4 SMP communication components

10 SMP Gateway User Manual

The configuration process consists of the following steps:

Identifying the SMP model and the installed options.

SMP Gateway User Manual 11

Figure 5 The transparent SMP

12 SMP Gateway User Manual

A sophisticated security server to support corporate network users.

MODBUS WEB VISUAL