S&C SpeedNet ME Manual

Supersedes Instruction Sheet dated December 15, 2014
August 14, 2017
© S&C Electric Company 2014-2017, all rights reserved Instruction Sheet 1074-530
S&C SpeedNet™ME Mesh End-Point Radio
Setup
Table of Contents
Section Page Section Page
Introduction
Qualified Persons ..............................2
Read this Instruction Sheet ......................2
Retain this Instruction Sheet......................2
Proper Application..............................3
Warranty .....................................3
Safety Information
Understanding Safety-Alert Messages ..............4
Following Safety Instructions .....................4
Replacement Instructions and Labels...............4
Network Setup
Overview ...................................5
SpeedNet Security Administration
SpeedNet Security Information................. 7
KeyGen Utility ...............................7
Creating a Security Association Database ........ 7
User Management Window.................... 8
Adding a User .............................. 9
Deleting a User ............................ 10
Modifying a User ........................... 10
Clearing All Users .......................... 11
Adding a MAC Address to the Revocation List .... 11
Deleting a MAC Address from the Revocation List . 12
Clearing the Revocation List .................. 12
Key Generation ............................ 13
Adding a Keyset ........................... 13
Deleting a Keyset .......................... 14
Generating a Security File ................... 15
Saving a Security Association Database. . . . . . . . . 17
Creating Another Security Association Database .. 18
Opening a Security Association Database ....... 18
Network Configuration ...................... 20
SpeedNet Client Tool
Overview ................................. 27
Logging In ................................ 27
Main Window.............................. 28
Interfaces Window, Ethernet Tab............... 29
Interfaces Window, Wireless Tab ............... 30
Interfaces Window, Serial Mode Tab ............ 32
Multiple SCADA Masters..................... 34
Interfaces Window, Serial Port Tab ............. 34
IP Routing Window, Ad Hoc Routing Tab. . . . . . . . . 35
IP Routing Window, Routes Tab ............... 38
IP Routing Window, ARP Tab ................. 39
IP Routing Window, Blacklist Tab .............. 40
Security Window, Encryption Tab .............. 41
Security Window, MAC Filter Tab .............. 42
Admin Window, System Tab .................. 43
Admin Window, Firmware Tab ................. 44
Admin Window, Shell Tab .................... 44
Statistics Window, Ethernet Tab ............... 46
Statistics Window, ICMP Tab.................. 47
Statistics Window, UDP Tab .................. 48
Statistics Window, IP Tab .................... 49
Statistics Window, Wireless Tab ............... 50
Statistics Window, AODV Tab ................. 51
Statistics Window, RSSI Tab .................. 52
NOTICE
SpeedNet ME Radio Software and Instruction Sheets can be downloaded at
sandc.com/support/automation-customer-support-portal.asp If you need assistance,
please contact customerpor[email protected] or phone [phone].

2 S&C Instruction Sheet 1074-530
Qualified Persons WARNING
The equipment covered by this publication must be installed, operated, and maintained
by qualified persons who are knowledgeable in the installation, operation, and main-
tenance of overhead electric power distribution equipment along with the associated
hazards. A qualified person is one who is trained and competent in:
• The skills and techniques necessary to distinguish exposed live parts from non live
parts of electrical equipment
• The skills and techniques necessary to determine the proper approach distances
corresponding to the voltages to which the qualified person will be exposed
• The proper use of the special precautionary techniques, personal protective equip-
ment, insulating and shielding materials, and insulated tools for working on or near
exposed energized parts of electrical equipment
These instructions are intended only for such qualified persons. They are not intended
to be a substitute for adequate training and experience in safety procedures for this
type of equipment.
Read this
Instruction Sheet NOTICE
Read this instruction sheet thoroughly and carefully before installing or operating your
S&C IntelliRupter fault interrupter. Familiarize yourself with the Safety Information and
Safety Precautions on pages 3 through 5. The latest version of this publication is avail-
able online in PDF format at sandc.com/Support/Product-Literature.asp.
These instructions apply to SpeedNet ME Radio Firmware Version v2.5.2. The version
number can be found on the Admin–System window of the SpeedNet Client Tool version
2.5.2, as shown in Figure 1.
Retain this
Instruction Sheet
This instruction sheet should be available for reference wherever SpeedNet ME Radio
is to be used. Retain this instruction sheet in a location where you can easily retrieve
and refer to it.
Proper Application WARNING
The equipment in this publication must be selected for a specific application. The appli-
cation must be within the ratings furnished for the selected equipment.
Introduction
Figure 1. Admin–System window in the SpeedNet Client Tool.

S&C Instruction Sheet 1074-530 3
Introduction
Regulatory
Information
This device complies with part 15 of the FCC Rules. Operation is subject to the following
two conditions: (1) This device may not cause harmful interference, and (2) this device
must accept any interference.
This device complies with Industry Canada license exempt RSS standard(s). Operation
is subject to the following two conditions: (1) this device may not cause interference,
and (2) this device must accept any interference, including interference that may cause
undesired operation of the device.
Cet appareil est conforme avec Industrie Canada exempts de licence (s) standard RSS.
Son fonctionnement est soumis aux deux conditions suivantes: (1) ce dispositif ne doit
pas causer d’interférences, et (2) cet appareil doit accepter toute interférence, y compris
celles pouvant causer un mauvais fonctionnement de l’appareil.
IMPORTANT! Changes or modifications not expressly approved by S&C Electric
Company could void the user’s authority to operate the equipment.
NOTICE
This equipment has been tested and found to comply with the limits for a Class B
digital device, pursuant to part 15 of the FCC Rules. These limits are designed to
provide reasonable protection against harmful interference in a residential installation.
This equipment generates, uses and can radiate radio frequency energy and, if not
installed and used in accordance with the instructions, may cause harmful interference
to radio communications. However, there is no guarantee that interference will not occur
in a particular installation. If this equipment does cause harmful interference to radio
or television reception, which can be determined by turning the equipment off and on,
the user is encouraged to try to correct the interference by one or more of the following
measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and receiver.
• Connect the equipment into an outlet on a circuit different from that to which
the receiver is connected.
• Consult the dealer or an experienced radio/TV technician for help.
CAN ICES-3 (B)/NMB-3(B)
Warranty The warranty and/or obligations described in S&C’s Price Sheet 150 “Standard
Conditions of Sale – Immediate Purchasers in the United States” (or Price Sheet 153,
Standard Conditions of Sale – Immediate Purchasers Outside the United States) plus
any special warranty provisions, as set forth in the applicable product-line speci-
cation bulletin, are exclusive. The remedies provided in the former for breach of these
warranties shall constitute the immediate purchaser’s or end user’s exclusive remedy
and a fulllment of the entire seller’s liability. In no event shall the seller’s liability to
immediate purchaser or end user exceed the price of the specic product which gives
rise to immediate purchaser’s or end user’s claim. All other warranties whether express
or implied or arising by operation of law, course of dealing, usage of trade or otherwise,
are excluded. The only warranties are those stated in Price Sheet 150, (or Price Sheet
153) and THERE ARE NO EXPRESS OR IMPLIED WARRANTIES OF MERCHANT-
ABILITY OR FITNESS FOR A PARTICULAR PURPOSE. ANY EXPRESS WARRANTY
OR OTHER OBLIGATION PROVIDED IN PRICE SHEET 150 (OR PRICE SHEET 153) IS
GRANTED ONLY TO THE IMMEDIATE PURCHASER AND END USER, AS DEFINED
THEREIN. OTHER THAN AN END USER, NO REMOTE PURCHASER MAY RELY ON ANY
AFFIRMATION OF FACT OR PROMISE THAT RELATES TO THE GOODS DESCRIBED
HEREIN, ANY DESCRIPTION THAT RELATES TO THE GOODS, OR ANY REMEDIAL
PROMISE INCLUDED IN PRICE SHEET 150 (or PRICE SHEET 153.)

4 S&C Instruction Sheet 1074-530
Safety Information
Understanding
Safety-Alert Messages
Several types of safety-alert messages may appear throughout this instruction sheet as well
as on labels attached to crate, packing, and equipment. Familiarize yourself with these
types of messages and the importance of these various signal words:
DANGER
“DANGER” identifies the most serious and immediate hazards that will likely result in
serious personal injury or death if instructions, including recommended precautions,
are not followed.
WARNING
“WARNING” identifies hazards or unsafe practices that can result in serious personal
injury or death if instructions, including recommended precautions, are not followed.
CAUTION
“CAUTION” identifies hazards or unsafe practices that can result in minor personal injury
if instructions, including recommended precautions, are not followed.
NOTICE
“NOTICE” identifies important procedures or requirements that can result in product or
property damage if instructions are not followed.
Following Safety
Instructions
If you do not understand any portion of this instruction sheet and need assistance,
contact your nearest S&C Sales Ofce or S&C Authorized Distributor. Their telephone
numbers are listed on S&C’s website sandc.com, or call S&C Headquarters at
[phone]; in Canada, call S&C Electric Canada Ltd. at [phone].
DANGER
Read this instruction sheet thoroughly and
carefully before installing or operating your
S&C SpeedNet ME Radio.
Replacement
Instructions and
Labels
If you need additional copies of this instruction sheet, contact your nearest S&C Sales
Ofce, S&C Authorized Distributor, S&C Headquarters, or S&C Electric Canada Ltd.
It is important that any missing, damaged, or faded labels on the equipment be replaced
immediately. Replacement labels are available by contacting your nearest S&C Sales
Office, S&C Authorized Distributor, S&C Headquarters, or S&C Electric Canada Ltd.

S&C Instruction Sheet 1074-530 5
Network Setup
Overview SpeedNet ME Radios serve as a communication end point for SCADA devices. They can
connect to a SpeedNet ME Radio mesh network. They can be installed in a variety of
network congurations. Plan your network in advance, and develop a logical IP addressing
scheme for your particular application. Depending on your network type, several factors
may inuence your design:
• Point-to-point vs. end-point within a mesh
• Stand-alone network connection
When network topology has been determined, the SpeedNet ME Radios can be
configured appropriately.
SpeedNet ME Radios route IP data between separate Ethernet subnets to their next hop
neighbor. Data are routed between the Ethernet subnets over a common IP-based wireless
network. Route information can be entered manually, or it can be handled automatically
by Ad hoc On demand Distance Vector (AODV) routing protocol.
AODV is a routing protocol for mobile ad hoc networks and other wireless ad hoc
networks. SpeedNet ME Radios use a proprietary AODV routing system that works
dynamically to maintain message routing. It generates fewer transmissions and conserves
network capacity. In the case of SpeedNet ME Radios, AODV is limited to discovering
and establishing the best possible point-to-point link. SpeedNet ME Radios will not act as
message relays for other nodes in the network.
Prior to implementing a SpeedNet ME Radio network, you should plan the IP
addressing scheme. The use of private IP addresses is recommended when designing a
SpeedNet network. The diagram shown in Figure 2 shows a sample IP address scheme
for a simple three-node network using private IP addresses.
Ethernet Interface: 192.168.1.2
Subnet Mask: 255.255.255.0
Default gateway: 192.168.1.1
Ethernet Interface: 192.168.1.1
Subnet Mask: 255.255.255.0
Wireless Interface: 192.168.202.1
Subnet Mask: 255.255.255.0
Ethernet Interface: 192.168.3.2
Subnet Mask: 255.255.255.0
Default gateway: 192.168.3.1
Ethernet Interface: 192.168.3.1
Subnet Mask: 255.255.255.0
Wireless Interface: 192.168.202.3
Subnet Mask: 255.255.255.0
End Point Node 1 End Point Node 2
Ethernet Interface: 192.168.2.1
Subnet Mask: 255.255.255.0
Wireless Interface: 192.168.202.2
Subnet Mask: 255.255.255.0
Repeater Node
Figure 2. Multi-node SpeedNet network.

6 S&C Instruction Sheet 1074-530
Network Setup
The SpeedNet ME Radio network in this example contains three Ethernet segments.
The first segment uses the 192.168.1.0 Class C subnet, encompassing a range of addresses
from 192.168.1.1 to 192.168.1.254. The second segment uses the 192.168.2.0 Class C subnet,
encompassing a range of addresses from 192.168.2.1 to 192.168.2.254. The third segment
uses the 192.168.3.0 Class C subnet, encompassing a range of addresses from 192.168.3.1
to 192.168.3.254.
The wireless network in the example uses the 192.168.202.0 Class C subnet. This
subnet is different from the subnets used for the Ethernet segments. The wireless inter-
face of the SpeedNet ME Radio from the End Point Node 1 is assigned an address of
192.168.202.1. The wireless interface of the SpeedNet ME Radio from the Repeater Node
is assigned an address of 192.168.202.2. The wireless interface of the SpeedNet ME Radio
from End Point Node 2 is assigned an address of 192.168.202.3.
In this example, each SpeedNet ME Radio host ID is 1 (as in 192.168.3.1), while the
connected application device uses a host ID of 2 (as in 192.168.3.2). Following a
numbering scheme such as this will make it easier to keep track of which IP addresses
are assigned to each device.
NOTE: All SpeedNet ME Radios, regardless of their role within the network,
must use unique IP addresses for their Ethernet and wireless interfaces. All of the
SpeedNet ME Radios on the same mesh should have wireless IP addresses in the same
subnet. All the SpeedNet ME Radios on the same mesh should have different Ethernet
subnets.
Refer to S&C Instruction Sheet 1074-510 for additional information about network
planning.

S&C Instruction Sheet 1074-530 7
SpeedNet Security Administration
SpeedNet Security
Information
SpeedNet ME Radios use a comprehensive security suite to prevent unauthorized network
access and to protect sensitive data. The security features include user access controls,
network data encryption, node access revocation, and anti-spoofing measures. These
security features should be incorporated as part of a complete security policy, which
should include application-level user authentication and stringent password policies. For
example, a policy requiring user password changes at a defined interval.
KeyGen Utility Administrative control of SpeedNet ME Radio security configuration is provided by the
SpeedNet KeyGen Utility, an application that generates security keys, updates user access
and radio revocation lists, and saves updated security profiles within a Security Association
Database (SAD). The KeyGen Utility also allows generation of a common configuration
file to load into multiple radios, easing configuration overhead.
Creating a Security
Association Database
STEP 1. Launch the KeyGen application. The main window will open. See Figure 3.
Figure 3. KeyGen application launch window.
STEP 2. Click the Create button to create a Security Association Database (SAD). The SAD
dialog box will open. See Figure 4.
Figure 4. Security Association Database dialog box.
STEP 3. Enter a network name that is 4 to 64 characters in length. Use the Tab key on your
keyboard to proceed to the next eld.
STEP 4. Enter a pass phrase that is 8 to 64 characters in length. Use the Tab key on your
keyboard to proceed to the next eld.
STEP 5. Retype the pass phrase to conrm the previously entered pass phrase.

8 S&C Instruction Sheet 1074-530
SpeedNet Security Administration
STEP 6. Select a region from the drop down list. Then click the OK button.
STEP 7. Save the Security Association Database le as a .sad le. See Figure 5. The User
Management window will open. See Figure 6.
Figure 5. Security Association Database save dialog.
NOTICE
The Security Association Database, stored in a .sad file, is encrypted and protected by
the network name and pass phrase combination specified at the creation of the database.
Loss of the network name and pass phrase combination means the Security Association
Database becomes unusable. This may imply that a new database would need to be
created and all radios reset to factory settings and re-programmed with security files
derived from a new database. As such, it is vital to keep track of the network name and
pass phrase credentials associated with the database.
User Management
Window
Figure 6. KeyGen User Management window.
The User Management window allows the administrator to add up to six users to the
system. Any users with a checkmark entered in the Admin column will have full
security access. Users created without this checkmark entered have limited, read-oriented
privileges when accessing the radios. Admin-level access is required to congure the radios.

S&C Instruction Sheet 1074-530 9
SpeedNet Security Administration
Adding a User STEP 1. Click the Add button on the User Management window. The User File dialog
box will open. See Figure 7.
Figure 7. KeyGen User File dialog box.
STEP 2. Enter a username that is 8 to 16 characters in length. Valid case-sensitive
characters are a-z, A-Z, and 0-9. Use the Tab key on your keyboard to proceed to
the next eld.
STEP 3. Enter a password that is 8 to 16 characters in length. Valid case-sensitive
characters are a-z, A-Z, and 0-9. Use the Tab key on your keyboard to proceed to
the next eld.
STEP 4. Retype the password to conrm the previously entered password. Click to check
the Administrator checkbox if the user will be an administrator. Click the OK
button. See Figure 7. The newly added user will appear in the KeyGen User
Management window. See Figure 8.
Figure 8. KeyGen User added.

10 S&C Instruction Sheet 1074-530
SpeedNet Security Administration
Deleting a User To delete a user from the users list, highlight that user’s name. Then, click the Delete
button. See Figure 9.
Figure 9. KeyGen User Management window Delete button.
The User Management dialog box will open. See Figure 10.
Figure 10. User Management dialog box.
Click the Yes button to delete the selected user from the user list.
Modifying a User To modify a user name and/or password, rst select the user from the User Management
list. Then, click the Modify button. See Figure 11.
Figure 11. KeyGen User Management window.