APARIAN A-DNP3R User manual

DNP3 Router
User Manual
A-DNP3R
Document No. D109-010
09/2017
Revision 1.15

Preface
Document No. D109-010 Page 2 of 108
Revision 1.15
CONTENTS
1. Preface ............................................................................................................................... 5
1.1. Introduction to the DNP3 Router ................................................................................ 5
1.2. Features ....................................................................................................................... 5
1.3. Architecture ................................................................................................................. 6
1.4. Additional Information ................................................................................................ 9
1.5. Support ........................................................................................................................ 9
2. Installation ....................................................................................................................... 10
2.1. Module Layout .......................................................................................................... 10
2.2. Module Mounting ..................................................................................................... 12
2.3. Power ........................................................................................................................ 13
2.4. RS232 Port ................................................................................................................. 13
2.5. Ethernet Port ............................................................................................................. 13
3. Setup ................................................................................................................................ 14
3.1. Install Configuration Software .................................................................................. 14
3.2. Network Parameters ................................................................................................. 14
3.3. Creating a New Project .............................................................................................. 18
3.4. DNP3 parameters ...................................................................................................... 20
3.5. Message Routing ....................................................................................................... 29
3.5.1. Reactive Tag (Outstation) Mode ........................................................................ 29
3.5.2. Scheduled Tag (Master) Mode........................................................................... 35
3.5.3. Unscheduled Mode ............................................................................................ 40
3.6. DNP3 Events .............................................................................................................. 40
3.6.1. Reactive Mode (DNP3 Outstation) .................................................................... 40
3.6.2. Scheduled Mode (DNP3 Master) ....................................................................... 42
3.7. Module Download ..................................................................................................... 44
3.8. RSLogix 5000 Configuration ...................................................................................... 47
3.8.1. Studio 5000 Configuration (Version 20+) .......................................................... 47
3.8.2. RSLogix 5000 Configuration (Pre-Version 20) .................................................... 51
4. Logix Operation ................................................................................................................ 56
4.1. Message Routing ....................................................................................................... 56
4.2. RSLogix 5000 assemblies ........................................................................................... 56

Preface
Document No. D109-010 Page 3 of 108
Revision 1.15
4.2.1. Input Assembly................................................................................................... 57
4.2.2. Output Assembly................................................................................................ 58
4.3. Unscheduled Messaging ........................................................................................... 58
4.3.1. Example .............................................................................................................. 62
5. DNP3 Operation ............................................................................................................... 65
5.1. General ...................................................................................................................... 65
5.2. Analog/Binary Output Commands ............................................................................ 67
5.2.1. Receiving Output Commands ............................................................................ 68
5.2.2. Sending Output Commands ............................................................................... 69
5.3. Counter Freeze Commands ....................................................................................... 69
5.4. DNP3 Events – Unsolicited Responses ...................................................................... 71
5.4.1. Outstation Event Configuration ......................................................................... 71
5.4.2. Master Event Unloading .................................................................................... 73
5.5. Report-By-Exception ................................................................................................. 75
6. Security ............................................................................................................................ 77
7. Diagnostics ....................................................................................................................... 79
7.1. LEDs ........................................................................................................................... 79
7.2. Module Status Monitoring in Slate ........................................................................... 80
7.3. DNP3 Packet Capture ................................................................................................ 88
7.4. Module Event Log...................................................................................................... 91
7.5. Web Server ................................................................................................................ 92
8. Technical Specifications ................................................................................................... 94
8.1. Dimensions ................................................................................................................ 94
8.2. Electrical .................................................................................................................... 95
8.3. Ethernet ..................................................................................................................... 95
8.4. Serial Port .................................................................................................................. 96
8.5. DNP3 .......................................................................................................................... 96
8.6. DNP3 Secure Authentication ..................................................................................... 97
8.7. Certifications ............................................................................................................. 98
A. Appendix – DNP3 reference............................................................................................. 99
A.1. DNP3 Functions ......................................................................................................... 99
A.2. DNP3 Groups ........................................................................................................... 100
A.3. Supported DNP3 Group Variations ......................................................................... 102

Preface
Document No. D109-010 Page 4 of 108
Revision 1.15
A.4. DNP3 Qualifier Code ............................................................................................... 103
A.5. DNP3 Event Status Flags .......................................................................................... 105
Index ....................................................................................................................................... 107
Revision History
Revision Date Comment
1.0 29 May 2015 Initial document
1.1 26 June 2015 Add Scheduled mode Tag map status
1.2 14 July 2015 Add note that a maximum of 230 bytes can be transferred per mapped item
when in Scheduled Tag Mode.
1.3 24 July 2015 Indication of serial data and stop bits supported
1.4 25 August 2015 Add UL Listed mark
1.5 30 September 2015 Add support for EtherNet/IP retry statistics and configuration
1.6 13 May 2016 Add ODVA Conformance mark
1.7 26 June 2016 Updated temperature range
1.8 11 August 2016 Added RoHS2 compliant to certifications
1.9 8 September 2016 Updated Reactive Mode to support DNP3 Events
Support Group and Variations to DNP3 Conformance Level 3
Support for DNP3 Device Attributes
1.10 20 January 2017 Update new master event features
Create sections for unsolicited operation
1.11 21 February 2017 Added support for unsolicited connection creation in Outstation mode.
Added the ability to change the TCP connection timeouts in Master or
Outstation mode.
1.12 10 March 2017 Added support for Logix triggered outstation Event Logging.
1.13 23 May 2017 Add support for two additional interface modes.
Add RCM Conformance mark.
1.14 8 September 2017 Added support for Rockwell’s Micro820 and Micro850 controllers.
1.15 15 September 2017 Added option in Slate configuration to link CSQ of unsolicited to that of
aggressive mode.

Preface
Document No. D109-010 Page 5 of 108
Revision 1.15
1. PREFACE
1.1. INTRODUCTION TO THE DNP3 ROUTER
This manual describes the installation, operation, and diagnostics of the Aparian DNP3
Router. The DNP3 Router provides intelligent data routing between EtherNet/IP and DNP3
(serial, Ethernet UDP, or Ethernet TCP). The DNP3 Router allows the user to integrate DNP3
devices over a secure link into a Rockwell Logix platform (e.g. ControlLogix or CompactLogix)
with minimal effort.
Figure 1.1. – Typical Setup
1.2. FEATURES
The DNP3 Router is able to transfer data from various DNP3 devices to a maximum of three
Logix controllers. The module operates in one of three modes, simplifying the configuration
for all applications.
Mode Description Message Initiator
Reactive Tag The DNP3 Router will convert DNP3 messages to Logix controller tag
reads or tag writes. (DNP3 Outstation) Remote Device
Scheduled Tag The DNP3 Router transfers data between a DNP3 device and a
number of Logix tags, using a preconfigured scheduled.
(DNP3 Master)
DNP3 Router

Preface
Document No. D109-010 Page 6 of 108
Revision 1.15
No Logix or remote device configuration is required.
Unscheduled The DNP3 Router transfers messages received from a Logix Message
Instruction.
(DNP3 Master)
Logix (Msg)
Table 1.1. – Modes of Operation
The DNP3 Router is configured using the Aparian Slate application. This program can be
downloaded from www.aparian.com free of charge. Slate offers various configuration
methods, including a controller tag browser.
Hereafter the DNP3 Router will be referred to as the module.
The module can operate in both a Logix “owned” and standalone mode. With a Logix
connection the input and output assemblies will provide additional diagnostics information
which will be available in the Logix controller environment.
The DNP3 Router allows the user to integrate DNP3 devices into a Logix system with minimal
effort. No copying or mapping of data in the Logix controller is required as the DNP3 Router
writes directly into Logix tags.
The DNP3 Router also provides DNP3 Secure Authentication 5 which enables the user to
connect DNP3 devices to a Logix platform securely. The module also provides a range of
statistics and traffic analyser to help fault find any problems.
The DNP3 Router supports DNP3 on three ports which can be configured from the Slate
environment; Serial, Ethernet TCP, or Ethernet UDP.
Previously complicated data mapping is made easy by precompiled UDTs which converts the
various DNP3 data formats into sensible data in the Logix environment.
The module uses isolated RS232 for DNP3 serial communication providing better noise
immunity. The RS232 port also uses a terminal block for convenient installation.
A built-in webserver provides detailed diagnostics of system configuration and operation,
including the display of DNP3 operation and communication statistics, without the need for any
additional software.
1.3. ARCHITECTURE
The figure below provides an example of the typical network setup in reactive mode.

Preface
Document No. D109-010 Page 7 of 108
Revision 1.15
Figure 1.2. - Example of a typical network setup in reactive mode
By converting and redirecting serial DNP3 messages from legacy devices to EtherNet/IP, the
module provides an interface for data exchange to Allen-Bradley ControlLogix and
CompactLogix platforms. This enables user to replace legacy devices and systems with
minimal effort and downtime.
The DNP3 Router allows a Logix platform to seamlessly integrate into a DNP3 network with
Reactive Tag Mode. The module will route DNP3 message directly to Logix tags with no need
for additional ladder code.
Figure 1.3. - Example of a typical network setup in scheduled/unscheduled mode

Preface
Document No. D109-010 Page 8 of 108
Revision 1.15
Systems that rely on a central ControlLogix communicating to a number of remote DNP3
devices, (e.g. Eletrical Protection Units or Intelligent Relays), may find the DNP3 Router useful
when operating in Scheduled Tag Mode as shown in the image above. The module will
exchange data between the DNP3 device and Logix platform at a configured interval without
any need for additional coding or mapping.
Figure 1.4. – Example of a typical network setup when using secure authentication
The DNP3 Router also provides the latest DNP3 Secure Authentication 5 standard which
allows for secure authentication across the DNP3 network (Serial or Ethernet). The need for
network security is essential to utility installations and operations to prevent unwanted
attacks from outsiders. The DNP3 Router allows the user to configure the type and level of
security needed with minimal effort.

Preface
Document No. D109-010 Page 9 of 108
Revision 1.15
1.4. ADDITIONAL INFORMATION
The following documents contain additional information that can assist the user with the
module installation and operation.
Resource Link
Slate Installation http://www.aparian.com/software/slate
DNP3 Router User Manual
DNP3 Router Datasheet
Example Code & UDTs
http://www.aparian.com/products/dnp3router
Ethernet wiring standard www.cisco.com/c/en/us/td/docs/video/cds/cde/cde205_220_420/installation/guide/
cde205_220_420_hig/Connectors.html
CIP Routing The CIP Networks Library, Volume 1, Appendix C:Data Management
DNP3 http://www.dnp.org
Table 1.2. - Additional Information
1.5. SUPPORT
Technical support is provided via the Web (in the form of user manuals, FAQ, datasheets etc.)
to assist with installation, operation, and diagnostics.
For additional support the user can use either of the following:
Resource Link
Contact Us web link www.aparian.com/contact-us
Support email [e-mail]
Table 1.3. – Support Details

Installation
Document No. D109-010 Page 10 of 108
Revision 1.15
2. INSTALLATION
2.1. MODULE LAYOUT
The module has three ports at the bottom of the enclosure as shown in the figure below. The
ports are used for Ethernet, RS232 serial, and power. The power port uses a three-way
connector which is used for the DC power supply positive and negative (or ground) voltage as
well as the earth connection.
The RS232 port uses a four-way connector. This provides connection for the communication
transmit (TX), receive (RX), and ground (GND) conductors. The fourth connection (earth) is
used for shielding the cable in high noise environments.
The Ethernet cable must be wired according to industry standards which can be found in the
additional information section of this document.
Figure 2.1. – DNP3 Router side and bottom view
The module provides three diagnostic LEDs as shown in the front view figure below. These
LEDs are used to provide information regarding the module system operation, the Ethernet
interface, and the auxiliary communication interface (RS232).

Installation
Document No. D109-010 Page 11 of 108
Revision 1.15
Figure 2.2. – DNP3 Router front and top view
The module provides four DIP switches at the top of the enclosure as shown in the top view
figure above.
DIP Switch Description
DIP Switch 1 Used to force the module into “Safe Mode”. When in “Safe Mode” the module will not
load the application firmware and will wait for new firmware to be downloaded. This
should only be used in the rare occasion when a firmware update was interrupted at
a critical stage.
DIP Switch 2 This will force the module into DHCP mode which is useful when the user has forgotten
the IP address of the module.
DIP Switch 3 Reserved
DIP Switch 4 Reserved
Table 2.1. - DIP Switch Settings

Installation
Document No. D109-010 Page 12 of 108
Revision 1.15
2.2. MODULE MOUNTING
The module provides a DIN rail clip to mount onto a 35mm DIN rail.
Figure 2.3 - DIN rail specification
The DIN rail clip is mounted on the bottom of the module at the back as shown in the figure
below. Use a flat screw driver to pull the clip downward. This will enable the user to mount
the module onto the DIN rail. Once the module is mounted onto the DIN rail the clip must be
pushed upwards to lock the module onto the DIN rail.
Figure 2.4 - DIN rail mouting

Installation
Document No. D109-010 Page 13 of 108
Revision 1.15
2.3. POWER
A three way power connector is used to connect Power+, Power– (GND), and earth. The
module requires an input voltage of 10 – 28Vdc. Refer to the technical specifications section
in this document.
Figure 2.5 - Power connector
2.4. RS232 PORT
The four way RS232 connector is used to connect the transmit (TX), receive (RX), and GND
conductors for serial communication. The shield terminal can be used for shielded cable in
high noise environments.
NOTE: The shield of the RS232 port is internally connected to the power
connector earth. Thus when using a shield it is important to connect the Earth
terminal on the power connector to a clean earth. Failing to do this can lower
the signal quality of the RS232 communication.
NOTE: When using a shielded cable, it is important that only one end of the
shield is connected to earth to avoid current loops. It is recommended to
connect the shield to the DNP3 Router module, and not to the other DNP3
device.
Figure 2.6 - RS232 connector
2.5. ETHERNET PORT
The Ethernet connector should be wired according to industry standards. Refer to the
additional information section in this document for further details.

Setup
Document No. D109-010 Page 14 of 108
Revision 1.15
3. SETUP
3.1. INSTALL CONFIGURATION SOFTWARE
All the network setup and configuration of the module is achieved by means of the Aparian
Slate device configuration environment. This software can be downloaded from
http://www.aparian.com/software/slate.
Figure 3.1. - Aparian Slate Environment
3.2. NETWORK PARAMETERS
The module will have DHCP (Dynamic Host Configuration Protocol) enabled as factory default.
Thus a DHCP server must be used to provide the module with the required network
parameters (IP address, subnet mask, etc.). There are a number of DHCP utilities available,
however it is recommended that the DHCP server in Slate be used.
Within the Slate environment, the DHCP server can be found under the Tools menu.
Figure 3.2. - Selecting DHCP Server

Setup
Document No. D109-010 Page 15 of 108
Revision 1.15
Once opened, the DHCP server will listen on all available network adapters for DHCP requests
and display their corresponding MAC addresses.
Figure 3.3. - DHCP Server
NOTE: If the DHCP requests are not displayed in the DHCP Server it may be due
to the local PC’s firewall. During installation the necessary firewall rules are
automatically created for the Windows firewall. Another possibility is that
another DHCP Server is operational on the network and it has assigned the IP
address.
To assign an IP address, click on the corresponding “Assign” button. The IP Address
Assignment window will open.
Figure 3.4. - Assigning IP Address
The required IP address can then be either entered, or a recently used IP address can be
selected by clicking on an item in the Recent List.
If the “Enable Static” checkbox is checked, then the IP address will be set to static after the IP
assignment, thereby disabling future DHCP requests.
Once the IP address window has been accepted, the DHCP server will automatically assign the
IP address to the module and then read the Identity object Product name from the device.

Setup
Document No. D109-010 Page 16 of 108
Revision 1.15
The successful assignment of the IP address by the device is indicated by the green
background of the associated row.
Figure 3.5. - Successful IP address assignment
It is possible to force the module back into DHCP mode by powering up the device with DIP
switch 2 set to the On position.
A new IP address can then be assigned by repeating the previous steps.
NOTE: It is important to return DIP switch 2 back to Off position, to avoid the
module returning to a DHCP mode after the power is cycled again.
If the module’s DIP switch 2 is in the On position during the address assignment, the user will
be warned by the following message.
Figure 3.6. - Force DHCP warning
In addition to the setting the IP address, a number of other network parameters can be set
during the DHCP process. These settings can be viewed and edited in Slate’s Application
Settings, in the DHCP Server tab.
Once the DHCP process has been completed, the network settings can be set using the
Ethernet Port Configuration via the Target Browser.
The Target Browser can be accessed under the Tools menu.

Setup
Document No. D109-010 Page 17 of 108
Revision 1.15
Figure 3.7. - Selecting the Target Browser
The Target Browser automatically scans the Ethernet network for EtherNet/IP devices.
Figure 3.8. - Target Browser
Right-clicking on a device, reveals the context menu, including the Port Configuration option.
Figure 3.9. - Selecting Port Configuration

Setup
Document No. D109-010 Page 18 of 108
Revision 1.15
All the relevant Ethernet port configuration parameters can be modified using the Port
Configuration window.
Figure 3.10. - Port Configuration
Alternatively, these parameters can be modified using Rockwell Automation’s RSLinx
software.
3.3. CREATING A NEW PROJECT
Before the user can configure the module, a new Slate project must be created. Under the
File menu, select New.
Figure 3.11. - Creating a new project

Setup
Document No. D109-010 Page 19 of 108
Revision 1.15
A Slate project will be created, showing the Project Explorer tree view. To save the project
use the Save option under the File menu.
A new device can now be added by selecting Add under the Device menu.
Figure 3.12. - Adding a new device
In the Add New Device window select the DNP3 Router, and click the Ok button.
Figure 3.13 – Selecting a new DNP3 Router

Setup
Document No. D109-010 Page 20 of 108
Revision 1.15
The device will appear in the Project Explorer tree as shown below, and its configuration
window opened.
The device configuration window can be reopened by either double clicking the module in
the Project Explorer tree or right-clicking the module and selecting Configuration.
Figure 3.14. – DNP3 Router configuration
Refer to the additional information section in this document for Slate’s installation and
operation documentation.
3.4. DNP3 PARAMETERS
The DNP3 parameters will be configured by Slate. Refer to the additional information section
for documentation and installation links for Aparian Slate. The DNP3 parameter configuration
consists of a general configuration, security configuration as well as a serial configuration.
When downloading this configuration into the module it will be saved in non-volatile memory
that persists when the module is powered down.
NOTE: When a firmware upgrade is performed, the module will clear all DNP3
configuration and routing maps.
The general configuration consists of the following parameters:
Parameter Description
Instance Name This parameter is a user defined name to identify between various DNP3 Routers.