Bausch Datacom DinBox RTU M4, Reference Manual

Page 1: ...Reference Manual for DinBox RTU M4 IEC60870 5 104 V0 1 preliminary version Bausch Datacom NV Tiensesteenweg 56 3360 Korbeek Lo Belgium info bausch be ...

Page 2: ... CAUTION ELECTRIC SHOCK HAZARD IF COVER REMOVED SERVICE BY QUALIFIED PERSONEL ONLY ...

Page 3: ... SIM MMC SD card readers 4 LED Indicators 5 Configuration Setup 5 1 Configuration via HTML GUI 5 2 Configuration via the serial interface 5 3 Remote configuration 5 4 Modbus mapping configuration 5 4 1 Defining the configuration 5 4 2 Generating the Modbus mapping configuration file 5 4 3 Installing the configuration file 5 5 SSL TLS Encryption configuration 5 5 1 Generating keys 5 5 2 Entering th...

Page 4: ......

Page 5: ...d receive data to from a IEC60870 5 104 master via a GSM GPRS network The main functionalities of the DinBox RTU M4 are DIN rail mountable housing Configuration setup and monitoring via a GUI via HTML in a standard web browser 2 x non isolated analog inputs 8 x active galvanically isolated digital inputs 2 x galvanically isolated and independent digital outputs 2 x analog inputs Sierra Wireless HL...

Page 6: ...ls the interconnection of the different functional units within the DinBox RTU M4 STM32 Corex M4 HLxxxx 8x DI 2x DO 2x AI 64K FRAM 64K FRAM RTC Power Supply MMC SD DEBUG GPIO GPIO 12 bit ADC SPI USART USART I2C I2C RS 485 USART SuperCap CONFIG ETH ...

Page 7: ...rs the flexibility to easily migrate communication technologies thus making it future proof Depending on the application the modem can be provided with standard 3GPP cellular 2G GPRS 3G UMTS 4G LTE LPWA low power wide area LTE Cat M1 or NB IoT LPWA with 3GPP 2G GPRS fallback is also possible Most modules are available for global or NAM EMEA and APAC only regions The following options are possible ...

Page 8: ... in from the MMC SD memory optional MMC SD The DinBox RTU M4 has an optional MMC SD card socket This memory can be used to store firmware code configuration measured data and log information IO This RTU has 2 analog inputs 2 digital outputs and 8 digital inputs 2 x AI not galvanically isolated connection GND 8 x DI galvanically isolated optocoupler active inputs with internal 24Vdc dc dc convertor...

Page 9: ...dity non condensing 85 maximum IP class IP20 3 2 Housing The DinBox RTU M4 is enclosed into a Phoenix UEG EU BE housing This housing has a DIN rail snap slot for easy DIN rail mounting dimensions 172 mm x 35 mm x 135 mm 3 3 Power Supply AC Power Supply Input voltage range 85 264 Vac 120 370 Vdc Frequency range 47 440 Hz Safety standards EMC UL1950 TUV EN60950 Withstand voltage 3 KVac DC Power Supp...

Page 10: ...the DinBox RTU M4 Bausch Datacom DO1 DO1 DO2 DO2 AI1 AI1 AI2 AI2 8x DI active 24Vdc 2x DO 100mA non inductive 2x AI 0 5Vdc Integrated GSM GPRS CAUTION Electric shock hazard if covers removed Service by qualified personal only Disconnect mains before opening CE AC 85 264Vac DC 9 25Vdc N L IN DO AI MAINS N L DI IO RS232 MMC CARD 1 2 GSM 3 DinBox RTU M4 DI RST GND G A B DI1 DI2 DI3 DI4 DI5 DI6 DI7 DI...

Page 11: ...dered via two wires onto the main PCB 3 5 2 Ethernet Interface The InduBox RTU M4 has a standard 10 100 Mbit s Ethernet LAN interface This interface must be used to configure locally the RTU via the HTML GUI 3 5 3 Configuration interface Local communication with the DinBox RTU M4 for configuration setup debugging and trace logging is done via the serial configuration interface The RTU has a serial...

Page 12: ...RTU Transmit data 7 7 From PC to RTU Request to sent 8 8 From RTU to PC Clear to sent 5 5 Signal ground DI1 DI2 DI3 DI4 DI5 DI6 DI7 DI8 DI RST GND G A B DO1 DO1 DO2 DO2 AI1 AI1 AI2 AI2 1 nc 2 RXD 3 TXD 4 5 GND 6 7 RTS 8 CTS DO AI MAINS N L DI IO RS232 MMC CARD 1 2 GSM 3 DinBox RTU M4 ETH ...

Page 13: ...1 5 mm2 flexible max 1 5 mm2 3 5 5 Digital input connection The DinBox RTU M4 can monitor up to 8 digital inputs The inputs are active thanks to an internal 24Vdc dc dc convertor To minimize contacts one common contact is used opto coupler SFH6156 1 active voltage 24 Vdc Conductor cross section rigid min 0 08 mm2 flexible min 0 08 mm2 rigid max 1 5 mm2 flexible max 1 5 mm2 10K 24Vdc BAS16 Active I...

Page 14: ...de Trisil Vp 320V not suitable for 240Vac mains voltage switching Conductor cross section rigid min 0 08 mm2 flexible min 0 08 mm2 rigid max 1 5 mm2 flexible max 1 5 mm2 3 5 7 RS485 2 wire The DinBox RTU M4 has one isolated 2 wire RS485 interface This interface can be used to communicate with intelligent bus like Modbus peripherals Three connections are provided A B and G round JP5 can be used to ...

Page 15: ...unication in progress 1 IEC60870 5 104 master 1 or Group 1 of masters slow flash running mode NOT connected to IEC60870 5 104 master fast flash running mode connected to IEC60870 5 104 master 2 IEC60870 5 104 master 2 or Group 2 of masters slow flash running mode NOT connected to IEC60870 5 104 master fast flash running mode connected to IEC60870 5 104 master 3 RSSI GSM receive level signal Always...

Page 16: ...SCADA system functions as the master and the RTU or PLC as the slave The IEC 60870 5 104 protocol uses a number of acronyms in describing data types and addressing The configuration of IEC 60870 5 104 features in this manual uses the following protocol terms ASDU Application Service Data Unit A data item at the application layer of a IEC 60870 5 protocol ASDU Type ID ASDU Type Identifier IEC 60870...

Page 17: ...rough a GUI via HTML The default ip address of the modem is 192 168 1 44 Username admin Password password Click on login to enter the configuration pages of the modem To make changes always save the change at the bottom of the page and reboot the modem before the change is executed ...

Page 18: ...Status Displays the most important configuration General ...

Page 19: ...and indicator frequency band of the mobile connection Operator selection Network operator to which the modem is connected RSSI Received Signal Strength indicating the received power level A higher number indicates a better connection IP Address received used WAN IP address Netmask Uptime time passed after getting a WAN IP address IEC60870 5 104 Info about the IEC60870 5 104 master connection Conne...

Page 20: ... local Ethernet interface IPv4 IP Address set the IP address of the local Ethernet interface Subnet Mask set the IP subnet mast of the local Ethernet interface Default gateway leave empty when not in use DNS1 leave empty when not in use DNS2 leave empty when not in use DHCP Client Turn on to get an IP address from a DHCP server off for static IP ...

Page 21: ...ections At this moment only PAP CHAP can be used APN Access Point Network name depends on the service provider see SIM card documentation APNUN APN username some carriers use a user name and password for authentication should be provided by the the carrier APNPW APN Password see APNUN MRU Maximum Receive Unit size max size of one packet received standard is 1500 which is the maximum of an Ethernet...

Page 22: ...CP server to be sure that the RTU isn t disconnected and not listening to port 2404 Periodical reset The RTU will completely reset after this timeout if no TCP connection is detected Periodical Ping Host If the basic router function is used the connection can be tested by a periodical ping GSM module will reset after 3 failed pings Periodical Ping Interval Interval for the periodical pings ...

Page 23: ... 255 255 to only allow one specific IP address NAT Configure port forwarding for the NAT in the modem Ethernet interface is the private network mobile network is the public network Don t forget to Enable the configured Port Remote Services Remote HTTP access Configure the Port on which the HTTP server is available for accessing the configuration GUI Radio button makes the port available on the pub...

Page 24: ...o create 2 groups of IEC60870 5 104 masters each with it s own basic parameters CA of ASDU Defines the Common Address of ASDU COT Size Defines the Cause od Transmission size T1 Ack Period ms Defines the timeout in which sent messages should be acknowledged T2 S Frame Period ms Defines the timeout to acknowledge received messages T2 T1 T3 Test Period ms Defines the timeout for the test frames ...

Page 25: ...04 handshake option is firmware specific and fixed and can be used in cases where the master needs to receive 1 or more predefined ADSU s to recognize a IEC60870 5 104 slave Contact Bausch Datacom NV if this option is needed Command Settings Command Age seconds This is the maximum time a command can be executed The time between the moment the master initiates a command and the time the RTU execute...

Page 26: ...ong as no master has send a GI Each group of masters can have 1 active master Note an exception is made for the optional and specific IEC60870 5 104 handshake option events Send Events ONLY on change of value To decrease the amount of data between slave and master and communication costs it s possible to avoid sending events when values are not changed Remark for Modbus mapping If Send Events ONLY...

Page 27: ...IEC104 IOA Configuration of the used IEC60870 5 104 addresses IOA Monitor IOA addresses for all RTU hardware related inputs Control IOA addresses for all RTU hardware related outputs ...

Page 28: ...e 2 wire RS485 interface is used to communicate with a the Modbus slave s Baudrate Defines the baud rate of the RS485 communication interface Data bits Defines the amount of databits 7 8 Parity Defines the parity None Even Odd Stop Bits Defines the amount of stop bits 1 2 ...

Page 29: ... RTU to reset the flag indicating whether an error has occurred Mapping source There are two ways to enter the Modbus mapping json file 1 locally via the Configuration Modbus Mapping file 2 remotely via FTP transfer FTP file name Defines the to download file name FTP server IP Defines the FTP server IP address FTP server PORT Defines the FTP server IP PORT FTP server name Defines this FTP client u...

Page 30: ...ile There are two ways to enter the Modbus mapping json file 1 locally via the Configuration Modbus Mapping file 2 remotely via FTP transfer Use Browse and Upload to locally upload a json mapping file Loaded mapping If a Modbus mapping is present details can viewed in this table ...

Page 31: ...gital inputs All inputs are active the input line must be short circuited with the common input to activate an input Rising or positive slope when the input line is connected to the common input Falling or negative slope when the input line is disconnected from the common input ...

Page 32: ... to the IEC60870 5 104 master Combined detection of digital signals This option can be enabled disabled This feature is specially implemented for short circuit detectors With this option enabled short pulses within pulses will be combined This detection is polarity dependent A positive slope will be detected as a valid event when the puls is 3 ms After a positive slope a falling slope detection wi...

Page 33: ...m value and when the signal comes above the default value again Mains Disconnect When this option is enabled if the mains voltage is disconnected detected via an internal optocoupler circuit an event with ASDU TI30 value 1 with IOA 528 default will be transmitted If the mains detection is reestablished an event with ASDU TI30 value 0 with IOA 528 default will be transmitted RSSI When this threshol...

Page 34: ...e voltage on the analog inputs will be checked after the configured number of seconds If the voltage has changed by more than or equal the entered digital value 0 2048 an event with ASDU TI36 with IOA 420 AI1 default 421 AI2 default will be transmitted Modbus Scanning Periodic sending of Modbus measurements can be enabled here ...

Page 35: ... certificate cacert der file Public Certificate Allows to upload the public certificate cacert_ der file Private Key Allows to upload the private certificate cakey_ der file Configuration Allows to turn encryption on or off See chapter 5 5 for more information about the SSL TLS configuration ...

Page 36: ... be transmitted onto the RS232 debug interface For each topic there are 3 levels of severity 1 info 2 warning 3 error Each severity level includes the traces for a higher level traces for info also include traces for warning and error traces for warning include traces for error Use the standard Bausch Datacom white RJ45 to DB9 serial cable to connect to the serial interface DinBox RTU M4 The async...

Page 37: ...hange password Change the password used to access the configuration web page default is admin password Factory Reset Will do a factory reset on all the parameters Software upgrade Updates the modem firmware Select Browse pick the correct file and upload Reboot Reboots the modem Should be done after any saved change in the modem configuration If shown red it means that there are unsaved changes tha...

Page 38: ... 30 INFO Target STM32F437 Bank 1 15 24 30 INFO starting picoTCP 15 24 30 INFO picoTCP stack initialized 15 24 31 INFO WM 104 Server 15 24 41 INFO HL module up and running 15 25 00 INFO WAN IP address 10 35 0 10 Via the Administration Traces page it s possible to enable trace information about a specific functionality Via proprietary at commands it s possible to configure test or debug the DinBox R...

Page 39: ...king mode 104 Server Serial Interface Network Band UMTS Band I 2100 MHz Operator Proximus RSSI 6 WAN IP 10 35 0 10 OK to check all basic parameters 5 3 Remote configuration It s possible to access the DinBox RTU M4 remotely via Telnet or HTML This option has to be enabled via the Configuration Routing page Leaving either TELNET or HTML checked allows remotely access the TELNET server or web server...

Page 40: ...esponds stays incorrect after the x retries the received object value will be send to the IEC60870 5 104 master with a INVALID flag Simultaneously the RTU will send an IOA Modbus failed TI30 ASDU with value 1 to inform the IEC60870 5 104 master that there was a Modbus problem This value will go back to 0 when the RTU establishes again a good Modbus communication OR when the RTU receives a IOA clea...

Page 41: ... changes is set to yes Only valid for input direction Type This is the type of Modbus item to retrieve and corresponds to the Modbus function codes This can be one of FC1 Read Single Coil FC1 read a single coil register FC3 Read Holding Registers FC3 x read 1 16 bit Modbus holding register x from 1 to 8 if 32 bit x must be even 2 4 6 8 FC4 Read Input Registers FC4 x read x 16 bit Modbus holding re...

Page 42: ...the same as for the corresponding Modbus item IOA The IEC 60870 5 104 information object address dec used to address the item from the master Representation Only for 32 bit type IOA s LONG ABCD TI7 TI13 LONG CDAB TI7 TI13 FLOAT ABCD TI13 FLOAT CDAB TI13 empty value if standard 32 bit value is used TI7 TI13 Type The IEC 60870 5 104 type used for the item This is one of ...

Page 43: ... value scaled value with CP56Time2a TI 36 MME C 32 bit measured value short floating point with CP56Time2a Process information in control direction for outputs TI 45 CSC single point command TI 46 CDC double point command TI 48 CSE A set point command normalized value TI 49 CSE B set point command scaled value TI 50 CSE C set point command short floating point number direction The direction input ...

Page 44: ...ion file for the DinBox RTU M4 from the spreadsheet This requires either Microsoft excel or OpenOffice to be installed Upon starting the program ModbusMappingCreator a window is displayed to the user Input file The name of the spreadsheet that has the items configured in OpenOffice ods Output file The name of the configuration file to generate json Pressing generate will generate the configuration...

Page 45: ...ault IOA is 6000 This ASDU TI58 single command with time tag that should be turned on The status of the FTP download can be monitored through the IOA for download status event Default IOA is 6001 This is a IEC 60870 5 104 item of type MME C IOA Value 0 no download done 1 downloading 2 download successful 3 download error B Locally It s possible to locally upload the json file via the Configuration...

Page 46: ...t exist it will be created and then it will generate the certificate and key for the identity cacert der root certificate cacert hex textual decimal version of the same contents as cacert der Output files generated for the identity with identifier RTU001 cacert_RTU001 certificate file for RTU001 cakey_RTU001 key file for RTU001 Output files generated for the identity with identifier WS001 cacert_W...

Page 47: ...se contact us for commercial support or non GPL licenses Free community based support is also available via stunnel users mailing list Stunnel can be downloaded from https www stunnel org downloads html Run this file as administrator and run trough the usual installation process In the end stunnel will ask some questions to generate a certificate this certificate will not be used so it is not impo...

Page 48: ...1001 connect 10 35 0 11 2404 cert C temp output cacert_WS001 pem key C temp output cakey_WS001 pem debug 7 RTU2 client yes accept 1002 connect 10 35 0 12 2404 cert C temp output cacert_WS002 pem key C temp output cakey_WS002 pem debug 7 RTU2 client yes accept 1003 connect 10 35 0 13 2404 cert C temp output cacert_WS003 pem key C temp output cakey_WS003 pem debug 7 ...

Page 49: ...61000 4 3 Immunity to Radiated Electromagnetic fields enclosure EN 61000 4 4 Immunity to electrical Fast Transients 230 VAC I O s EN 61000 4 5 Immunity to surges 230 VAC I O s EN 61000 4 6 Immunity to conducted fields 230 VAC I O s EN 61000 4 8 Immunity to magnetic fields enclosure EN 61000 4 11 Immunity to Dips and Interruptions 230 VAC EN 61000 4 13 Inter harmonics test All test rapports availab...

Page 50: ...ingle Point information with time tag MSP 30 527 Mains disconnect Single Point information with time tag MSP 30 528 IOA Modbus failed Single Point information with time tag MSP 30 530 Digital output 1 Single Command with time tag 58 600 Digital output 2 Single Command with time tag 58 601 Map download trigger Single Command with time tag 58 6000 Map download status Measured Value Short Floating Po...