ABB REF 542plus User manual

REF 542plus
Installation Manual for Web Interface
Installation manual

3
Contents
Copyrights ................................................................................. 5
1. Introduction.... ..................................................................... 7
1.1. This manual.................................................................... ...... 7
1.2. Use of symbols.... .......................................................... ...... 7
1.3. Intended audience.......................................................... ...... 7
1.4. Product documentation.... .............................................. ...... 8
1.5. Document revisions........................................................ ...... 8
2. Safety Information.... .......................................................... 9
3. Supported browsers .... ................................................... 11
3.1. Problems with browsers or operating systems.... ......... .... 11
3.2. Advice on using Internet Explorer.... ............................. .... 11
4. Web access and security requirements ....................... 15
4.1. User authentication.... .................................................... .... 16
4.2. Security for writing operations.... ................................... .... 16
4.3. Security for saving passwords .... ................................. .... 16
4.4. Attack from remote......................................................... .... 17
4.5. Number of devices allowed per subnet......................... .... 17
5. WebREF Configuration.... ................................................ 19
5.1. SLD design constraints ................................................. .... 19
5.2. Switchgear overview.... .................................................. .... 20
5.3. Web communication configuration.... ............................ .... 21
5.4. Set TCP/IP properties.... ................................................ .... 21
5.5. Set WEB SERVER properties.... ................................... .... 22
5.6. GSM SMS properties.... ................................................. .... 23
5.6.1. REF as SMS gateway..................................... .... 24
5.6.2. GSM modem configuration.... ......................... .... 24
5.6.3. IP address of SMS gateway.... ....................... .... 25
5.7. Language file generation.... ........................................... .... 26
5.8. Web pages language selection.... ................................. .... 26
6. Communication requirements and network
installation.... ..................................................................... 29
6.1. REF 542plus Ethernet physical interface ..................... .... 29
6.1.1. Assignment of the RJ-45 female connector.... .... 29
6.1.2. Connecting REF 542plus.... ............................ .... 29
6.2. Network devices required.... .......................................... .... 29
6.2.1. Network cables................................................ .... 29
6.2.2. Using media converter.... ................................ .... 30
6.2.3. Hubs................................................................. .... 31
Multifunctional Protection and Switchbay
Control Unit
Installation Manual for Web Interface
Installation manual
REF 542plus
1MRS755865
Issued: 22.01.2004
Version: B/30.09.2006

6.2.4. Switches.... ...................................................... .... 32
6.2.5. Router.... .......................................................... .... 32
6.3. Network topology............................................................ .... 33
6.3.1. Bus topology.... ................................................ .... 33
6.3.2. Star topology.................................................... .... 33
6.3.3. Example of star topology with REF 542plus........ 34
6.3.4. Ring topology................................................... .... 35
6.3.5. Example of redundant ring topology with REF
542plus.... ........................................................ .... 36
6.3.6. Integration within the switchgear.... ................ .... 37
6.3.7. Example of complex topology......................... .... 38
6.4. Network address configuration.... .................................. .... 39
6.4.1. MAC address configuration............................. .... 39
6.4.2. TCP/IP configuration.... ................................... .... 39
6.4.3. IP address.... ................................................... .... 40
6.4.4. Subnet mask.................................................... .... 40
6.4.5. Default gateway configuration......................... .... 41
6.4.6. Example of a subnet configuration.... ............. .... 41
6.4.7. Examples of communication system
addressing.... ................................................... .... 42
6.5. Communication system security.... ................................ .... 44
6.5.1. Access through standard Ethernet router....... .... 45
6.5.2. IPSec function.... ............................................. .... 45
7. Terminology.... ................................................................... 47
8. Abbreviations.... ................................................................ 49
4
REF 542plus Multifunctional Protection and Switchbay
Control Unit
Installation Manual for Web Interface
Installation manual
1MRS755865

5
Copyrights
The information in this document is subject to change without notice and
should not be construed as a commitment by ABB Oy. ABB Oy assumes no
responsibility for any errors that may appear in this document.
In no event shall ABB Oy be liable for direct, indirect, special, incidental or
consequential damages of any nature or kind arising from the use of this
document, nor shall ABB Oy be liable for incidental or consequential
damages arising from use of any software or hardware described in this
document.
This document and parts thereof must not be reproduced or copied without
written permission from ABB Oy, and the contents thereof must not be
imparted to a third party nor used for any unauthorized purpose.
The software or hardware described in this document is furnished under a
license and may be used, copied, or disclosed only in accordance with the
terms of such license.
Copyright © 2006 ABB Oy
All rights reserved.
Trademarks
ABB is a registered trademark of ABB Group. All other brand or product
names mentioned in this document may be trademarks or registered
trademarks of their respective holders.
Guarantee
Please inquire about the terms of guarantee from your nearest ABB
representative.
1MRS755865 Multifunctional Protection and Switchbay
Control Unit
Installation Manual for Web Interface
Installation manual
REF 542plus

6

7
1. Introduction
1.1. This manual
Before attempting any operation with the REF 542plus, read carefully this
manual first.
This manual describes how to install the WebREF function of the
REF 542plus. Please note that Web Page views and pictures are to be
considered exemplary.
This manual is addressed to engineering and commissioning personnel and to
anyone who needs to administrate the WebREF with REF 542plus via the
Ethernet network and the Web Browser interface.
1.2. Use of symbols
This publication includes the following icons that point out safety-related
conditions or other important information:
The warning icon indicates the presence of a hazard which could
result in personal injury.
The caution icon indicates important information or warning
related to the concept discussed in the text. It might indicate the
presence of a hazard which could result in corruption of software
or damage to equipment or property.
The information icon alerts the reader to relevant facts and
conditions.
It should be understood that operation of damaged equipment could, under
certain operational conditions, result in degraded process performance
leading to information or property loss. Therefore, comply fully with all
notices.
1.3. Intended audience
This manual is intended for installation personnel, administrators and skilled
operators to support installation of the software.
1MRS755865 Multifunctional Protection and Switchbay
Control Unit
Installation Manual for Web Interface
Installation manual
REF 542plus

1.4. Product documentation
Name of the Manual Document ID
Application Notes 1MRS755870
CAN Manual 1VTA100189-Rev 1, en
Configuration Manual 1MRS755871
iButton Programmer User Manual 1MRS755863
Manual Part 3, Installation and Commission 1 VTA100004
Manual Part 4, Communication 1VTA100005
Motor Protection with ATEX Certification, Manual 1MRS755862
Operator’s Manual 1MRS755869
Protection Manual 1MRS755860
Technical Catalogue 1MRS755859
Technical Reference Modbus RTU 1MRS755868
Web Manual, Installation 1MRS755865
Web Manual, Operation 1MRS755864
1.5. Document revisions
Version IED Revision
number
Date Comment
1VTA100264
Release 1.0
22.01.2004 First release
1VTA100264
Release 1.1
14.05.2004 Update
A 28.02.2006 Document
updated
*language
*layout
B 2.5 30.9.2006 Updated to
software version
V4E03x.
Applicability
This manual is applicable to REF 542plus Release 2.5, software version
V4E03x. Please consider also the Users Manual WebREF 1VTA 100180.
8
REF 542plus Multifunctional Protection and Switchbay
Control Unit
Installation Manual for Web Interface
Installation manual
1MRS755865

9
2. Safety Information
The safety warnings should always be observed. Non-observance can result
in death, personal injury or substantial damages to property. Guarantee claims
might not be accepted when safety warnings are not respected.
The WebREF isn’t designed for connecting to the Internet. It is
further using internet technologies.
ABB cannot take any warranty for any damages resulting from
the WebREF function, in case the REF 542plus Ethernet
network is connected to a company intranet or the Internet.
In case the customer decides, on his own risk, to connect to
intranet or the Internet, special security advices have to be
considered. To setup switches and gateways with the IPSec
feature is mandatory as described in this manual.
Do not make any changes to the REF 542plus configuration
unless you are familiar with the REF 542plus and its
configuration tool. This might result in disoperation and loss of
warranty.
1MRS755865 Multifunctional Protection and Switchbay
Control Unit
Installation Manual for Web Interface
Installation manual
REF 542plus

10

11
3. Supported browsers
The WebREF supports Microsoft Internet Explorer 5.x, 5.5 and 6.x for
Windows.
To parse the xml-files and requests, the browser needs the MSXML 3.0
parser, which comes with IE 5.5 and higher. By user IE 5.x it is necessary to
install MSXML 3.0 in replace mode, which can be downloaded from
http://www.microsoft.com/downloads.
To install MSXML 3.0 in replace mode:
From the command prompt, enter: pathname > xmlinst –u, where the
pathname is the folder where xmlinst.exe is installed. This command
uninstalls any registry entries for MSXML.
From the command prompt, enter: regsvr32 msxml3.dll. This registers
MSXML 3.0.
From the command prompt, enter: pathname > xmlinst. This installs the latest
version of MSXML in replace mode.
3.1. Problems with browsers or operating systems
Adobe SVG Viewer 3.0 supports javascript-api, which is necessary to change
the SLDs, only with IE under Windows. If the SVG viewer is running on a
Macintosh system or a Netscape Browser, the plugin can only display svg-
files, but no interaction such as moving or clicking elements.
Most of the other used technologies and browser functions are also Netscape
6.x and Mozilla 1.x compatible. For more information about svg-support in
browsers have a look at www.adobe.com/svg.
You can download, if necessary, the SVGview.exe from the Adobe's
download page to your PC. Simply install the SVG viewer by starting the
execution file.
If Unicode fonts shall be used, for example, to display Chinese characters, the
file unifonts.ttf for MS Windows 2000 or MS Windows XP shall be added
accordingly to the PC.
3.2. Advice on using Internet Explorer
It is recommended to put the address of WebREF on the “Trusted sites”list of
the browser. Otherwise, problems with displaying the SLD and other
interfaces can occur. Select Internet Options in the Tools menu of your
browser. Select the security options in the pop up window and click trusted
sites. Add the IP addresses of the devices and index pages to the menu. See
Fig. 3.2.-1.
1MRS755865 Multifunctional Protection and Switchbay
Control Unit
Installation Manual for Web Interface
Installation manual
REF 542plus

A051090
Fig. 3.2.-1 Trusted sites selection in the Internet browser
A further setting required for user authentication services is the enable setting
for proxy connections, See Fig. 3.2.-2. It can be found in the Internet
Options; Advanced. Browse to HTTP1.1 settings and enable Use HTTP 1.1
through proxy connections.
12
REF 542plus Multifunctional Protection and Switchbay
Control Unit
Installation Manual for Web Interface
Installation manual
1MRS755865

13
A051093
Fig. 3.2.-2 Enable the setting for proxy connections
1MRS755865 Multifunctional Protection and Switchbay
Control Unit
Installation Manual for Web Interface
Installation manual
REF 542plus

14

15
4. Web access and security requirements
Web access to REF 542plus has to be protected with IPSec authentication (IP
level), if the substation is connected to a company’s intranet. In this case, a
gateway which provides the IPSec feature to be installed is recommended, as
shown in Fig. 4.-1.
A051276
Fig. 4.-1 Example of a connection to an enterprise network
It assures that only certified clients, that is Web browsers, can access the IP
address of REF. That is, “pinging”to the IP address is in this case not
possible.
1MRS755865 Multifunctional Protection and Switchbay
Control Unit
Installation Manual for Web Interface
Installation manual
REF 542plus

4.1. User authentication
The user has to authenticate himself by giving a user name and password. The
user name and password have to be communicated to the core unit to check
the authentication. For security reasons, to avoid access from intruders and
not authenticated users, the information (user name and password) is
encrypted with a non-convertible key.
Therefore, digest authentication algorithms are used in the configuration tool
and REF 542plus core unit. This way passwords are not communicated as
plain text through the communication line because they are already converted
on the PC level with an AES algorithm encryption key and converted back on
the device level. The AES algorithm is a symmetric block cipher that can
encrypt (encipher) and decrypt (decipher) information. The encryption
converts data to an unintelligible form called ciphertext; decrypting the
ciphertext converts the data back into its original form called the plaintext.
The AES algorithm is capable of using cryptographic keys of 128, 192, and
256 bits to encrypt and decrypt data in blocks of 128 bits.
4.2. Security for writing operations
Web-enabled REF 542plus allows some writing operations. This means that
the user can change information on the server, such as the telephone numbers
for SMS messaging.
This writing operation needs an authentication based on user name and
password. For security reasons, the digest authentication is applied. This way
passwords are not communicated as plaintext through the communication
line.
4.3. Security for saving passwords
Web-enabled REF 542plus allows interaction with the device for different
types of user rights. Operation requiring special rights needs an authentication
based on the user name and password. All the passwords are stored in the
SCL file on the PC. This file is prepared by the Configuration Tool and then
sent to the device. For security purposes, all the passwords are not stored as
plaintext but as already encrypted.
Selecting a suitable password is crucial and part of the security aspects of the
application. A password should be handled like a key and should never be
public. The password should be changed randomly and it should not contain
names or words in order to increase access security for hackers and unwanted
actions. It is further recommended to have figures and special characters in
the password to increase the security level for any intruders.
The password must have a minimum of 8 characters, otherwise
the password is not accepted.
16
REF 542plus Multifunctional Protection and Switchbay
Control Unit
Installation Manual for Web Interface
Installation manual
1MRS755865

17
4.4. Attack from remote
An attack from remote, meaning from outside the local REF network, should
be prevented. Therefore, unauthorized users should not be able to get access
to REF 542plus. A remote attack is only possible when the devices are
connected to company intranet or Internet. Installing the IPSec function is
recommended.
4.5. Number of devices allowed per subnet
The number of devices per subnet is limited. The limitation is set to 254
devices.
The practical subnet size should be defined by the application and have a
practical size of 10 devices. In case a GSM Modem is connected, one device
per total network is sufficient.
1MRS755865 Multifunctional Protection and Switchbay
Control Unit
Installation Manual for Web Interface
Installation manual
REF 542plus

18

19
5. WebREF Configuration
With the Configuration Tool of REF 542plus the WebREF function can be
enabled and configured. To have the single line diagrams correctly displayed
on the Web page, some requirements in the graphical design of SLD are
needed. They are described in more detail in this chapter.
The language file can be configured to the user needs. Two languages can be
displayed, thereby the English language is always available. If a local
language, for example Chinese, is selected by the user, the English language
becomes automatically the second one. Then the local language is the default
one on the pages, when starting the WEBREF functionality on the PC.
The GSM and the network configuration are handled by the Configuration
Tool as well.
5.1. SLD design constraints
Drawing of busbar symbol has to be on the same vertical coordinates and the
whole width of the drawing field should be used.
*The vertical Y-coordinates should be the same (Example: 7)
*Use the whole width X-coordinates (Example: 0, 118)
1MRS755865 Multifunctional Protection and Switchbay
Control Unit
Installation Manual for Web Interface
Installation manual
REF 542plus

A051094
Fig. 5.1.-1 SLD design constraints
5.2. Switchgear overview
The switchgear overview is generated automatically. No configuration to get
the page is necessary. To get the overview on the right shape, some rules have
to be respected:
*The overview is oriented according to the IP addresses. The lower IP
address is left of the device you want to monitor and the higher IP address
is right to the station you want to monitor.
*The size of the overview is the size of a subnet. In the subnets, click Next
to continue or use the numbered navigation buttons
*There are 3 SLDs displayed per page. You can continue and move back
with the Next button or use the numbered navigation buttons
*When drawing SLD in the Configuration Tool, use the full width of the
drawing area in order to prevent a discontinued (only from visual point of
view) busbar in the overview. See Section 5.1. SLD design constraints .
20
REF 542plus Multifunctional Protection and Switchbay
Control Unit
Installation Manual for Web Interface
Installation manual
1MRS755865