IEC 61850 (MMS) Messages Traced with Wireshark, Local Host, and Loopback

Have you tried to trace some IEC 61850 (MMS) messages with Wireshark? 

Usually you expect to run Client and Server on different machines to have communication going through an Ethernet Network! Yes! No!

You could easily run the two on one PC and trace the traffic using Wireshark and select the TCP loopback adapter as the interface for Wireshark to look at !!! It is simple.

The address for the server is:

The Client and Server using the IEDScout 5.2 from Omicron:

Trace:

IEDScout 5.00 Available - One of the Most Crucial Test Tools for IEC 61850

IEDScout is a well known test tool for most of the needed support in the communication with IEC 61850 compliant devices.
Omicron has released the version 5.00 ... providing crucial extensions compared to version 4.2:



IEDScout is a versatile software tool for working with IEC 61850 devices. With Version 5.0, IEDScout offers a new level of cyber security and powerful simulation utilizing the new MBX1/RBX1 hardware.
Additional improvements are:

• IEDScout now supports function-related naming for logical devices
• The icon set has been updated to provide a smooth user experience when used together with StationScout/StationGuard.
• When writing data to an IED, IEDScout will now automatically update the “t” attribute of the data object.
• Improved screen scaling for better readability on high resolution screens.
• License information is now available in the configuration dialog.
• OMICRON’s IEC 61850 library has been updated to include the latest developments in standardization and improve interoperability.
• The usability of IEDScout is continuously improved based on expert reviews and customer feedback.
• Several smaller tweaks and bug fixes improve overall performance and stability.

Click HERE for more information on IEDScout 5.0

Conflicting Use of TCP Port 102 for IEC 61850 and Simatic S7

IEC 61850-8-1 defines how the abstract IEC 61850 services (ACSI) are mapped to MMS (ISO 9506). The MMS protocol runs on ISO/OSI Transport Layer, ISO/OSI Session Layer, ... For IEC 61850 it has been decided to use TCP/IP as transport protocol.

TCP has to be "extended" by some definitions to get the same services and protocol features as provided by ISO/OSI Transport Layer class 0: The IETF RFC 1006 defines how to use TCP for MMS. RFC 1006 defines among other issues to use TCP Port number 102 for the MMS Server role. Any IEC 61850 Server role has to run on port 102 - independent of the platform it is running on: protection device, control device or a Windows PC.

Siemens SIMATIC S7 PLCs use RFC 1006 entitled "ISO Transport Service on top of the TCP" (ISO-on-TCP) as a protocol extension for the TCP protocol for connection between two systems.

RFC 1006 (and thus Port 102) is used for standard connections in the SIMATIC environment.

• STEP 7 remote programming via LAN
• ISO-on-TCP connections
• S7 connections via Industrial Ethernet

I have come across situations where PCs are running SIMATIC S7 tools that are using Port 102! In that case you cannot run an IEC 61850 Server role on the same PC (with the same IP address) - because Port 102 is already in use!!

If you have trouble running an IE 61850 Server role on your computer - check also if Port 102 is already in use. In one case we figured out this situation with a server model (SCL) that we tried to simulate with the Omicron IED Scout! IED Scout reported an error: TCP Port 102 already in use. We stopped the SIMATIC S7 application to free the Port 102.

This is another use case where the IEDScout reports very useful error information!

Here is an example of the command "netstat -a" (may use as well "netstat -a -b") to figure out, if the port 102 is used or not: Waiting for port "102": 


Click HERE for the Server demo (shown on the right).

Click HERE for a list of ports used by Siemens SIMATIC S7.

An All NEW Evaluation, Demo, Hands-On Package for IEC 61850 and IEC 61400-25

NettedAutomation GmbH (Karlsruhe, Germany) has released an All NEW Evaluation, Demo, Hands-On Package for IEC 61850 and IEC 61400-25 (EvaDeHon) for immediate download and use!
The new EvaDeHon Package comprises the roles Client, Server, Publisher, and Subscriber running on a PC, HMS (IXXAT, Beck IPC) Gateways, SystemCorp IEDs, ...
The new solutions allow to run multiple IED models (all roles) in parallel on one PC (simulating IEDs of a complete system!) ... and more. The roles and applications are configured directly by SCL files (.cid). You can build your own models and run them with all roles ... if configured.
This Package is based on our 30+ years of experience. We are really proud of offering these tools to the industry today! Sit down, enjoy and relax ...


Copyright, 2017, Michael Hüter

Click HERE to download the documentation only [pdf, 3.2 MB]
Click HERE for downloading the demo package including the documentation and license conditions.

Example: Server and Client on two PCs:


Many topologies on PCs:


... and topologies with gateways:


Click HERE to download the documentation only [pdf, 3.2 MB]
Click HERE for downloading the demo package including the documentation and license conditions.

How to get Interoperability and Interchangeability with IEC 61850?

The standardization process in the context of IEC 61850 is picking up quite fast. As you have learned in the posts of today and older ones, there are several new topics on the list of items to work on for future new parts of IEC 61850.
One of the crucial objectives is the interoperability and INTERCHANGEABILITY of devices from different vendors in a multi-vendor system.
To reach this goal, we need standards! Sure. But what is absolutely required is the EDUCATION of experts from Vendors, Utilities and System integrators.
We offer the right courses for you: With focus on protection, automation and SCADA.In English and German.
Due to the request from power engineers FMTP and NettedAutomation have scheduled several dates for public training courses in 2017:
The next courses are:

19-23 September 2016 in Stockholm, Sweden [EN]
10-13 Oktober 2016 in Karlsruhe, Germany [EN]
07-09 Dezember 2016 in Karlsruhe, Germany [DE]

Click HERE for more details.

Hurry to reserve your seat!

You would get more than in any other course - because two of most experienced experts (Andrea Bonetti and Karlheinz Schwarz) will guide you through the most crucial aspects of IEC 61850. The combined experience of the two is unparalleled.

Experience with the OMICRON IEDScout Version 4.10 - The Name Space Concept

As you may know we have defined a very powerful namespace concept into IEC 61850. It allows to use logical nodes and data objects from multiple application domains in one single SCL File.
This concept has been incorporated into the standard (IEC 61850-6, -7-1, -7-2, -7-3, 7-4, and 8-1) some 15 years ago. At that time I was the editor of parts -7-1 and -7-2.
By the way: These five (5) parts are often called "The Core Parts of IEC 61850".

The name space “IEC 61850-7-4:2003” indicates that ALL instances within this logical device
are derived from the 2003 editions of IEC 61850-7-4, IEC 61850-7-3, and IEC 61850-7-2. The logical device name space could be understood as the prime name space. The attribute ldNs is an attribute contained in the name plate of the logical node zero (LLN0).
A device that implements more than one Logical Device can support multiple prime name spaces - one per Logical Device.

The name space for Edition 2 of the core documents is as follows:

        IEC 61850-7-4:2007A

The Omicron IEDScout V4.1 analyzes this Logical Device name space and acts according to the name space configured. Let's see how that works.

If the LD name space is missing then the default value will be used: this means Edition 1 of the core documents).
The following figure shows an SCL file that does not contain a value for the "ldNs". Now we open the SCL file with the IEDScout 4.1.The IEDScout figures out that the prime name space is Edition 1 of the core parts. In Edition 1 of IEC 61850-7-3 (Common Data Classes) there are no CDCs like ENS and ENC defined. This is indicated in the warning area. Edition 1 of IEC 61850-7-3 defines INS and INC instead.



The new enumerated Common Data Classes (ENS, ENC and ENG) have been added in Edition 2 of IEC 61850-7-3. The SCL File with the Edition 2 prime name space is shown next:


The IEDScout does not show any warning!

Smart!

What does that mean for all of us? We have to make sure that our IEC 61850 models configured in an SCL File are according to the prime name space we want to use!

And: The IEDScout has many other powerful (browsing, testing, ...) features build-in that help you to get your IEC 61850 based system running according to the standard series IEC 61850, IEC 61400-25, ...

I am using the IEDScout 4.1 in my training courses. Attendees learn how to model IEDs and how to test them.

Click HERE for downloading a 30 days fully functional evaluation license.

Started the Year 2016 successfully with the Omicron IEDScout 4.10

I hope you had a good start into the year 2016!

During the last days of 2015 and the first days of 2016 I have set up a new notebook and upgraded to Windows 10, Office 2013, ... and Omicron's IEDScout 4.10.

I had to test a control model with operate services. The version 3.0 was very confusing in getting me the information I was looking for. So I decided to upgrade immediately to version 4.10.

This was one of the best decisions of the "young" year 2016!

The version 4.10 is way easier and less confusing to be used for testing real products! The model shows exactly what is crucial for the tester:

This version is an IEC 61850 tool - not just a MMS browser with some flavor of IEC 61850.

Here is the link to the page for free downloading of the fully functional demo version:

https://www.omicronenergy.com/en/products/all/secondary-testing-calibration/iedscout/noc/1/#Description

If you are looking for a professional IEC 61850 Browser and testing tool: The IEDScout is exactly what should test and consider to purchase.

So, the second day of 2016 was already a successful day here in my office. More to come.

I look forward to helping you to get the right education and tools.

New: Hands-On Training with Real Devices and Process Signals

19 years after IEC 61850 standardization started, 10 years after publication of the first set of IEC 61850 core documents, and 10 years after intensive training worldwide, we are now facing a new challenge: Can everybody do hands-on work with the new technology without spending a lot of money?

Yes, You can – if you work with NettedAutomation GmbH.

NettedAutomation GmbH is entering into a new phase of training: using real devices and solutions to work with in the public 3 days general training courses. The program of the 3 days courses is as follows:

• 1 1/2 days Introduction and basics on IEC 61850 (and briefly on IEC 60870-5-104)
• 1/2 day Hands-on training on designing ICD and CID documents
• 1/2 day Configuring and using Server devices for monitoring and control using IEC 61850 and IEC 60870-5-104
• 1/2 day Configuring and using Client devices for IEC 61850 and gateways to IEC 60870-5-104 and proxy server to IEC 61850

The first new training session according to this program will be conducted from October 15-17, 2014 in Frankfurt (Germany). The hands-on sessions using real devices, as depicted in the following figure, show the devices involved. Further evaluation software running under Windows (offered for free) will be provided at the beginning of the course.

On request we are preparing the above evaluation package with one com.tom 3.1S (104 Server, 61850 client and server), one com.tom 5.1 (104 Server, 61850 Server, Modbus client), a simple meter with Modbus RTU, 24 V power supply, relay to operate a fan, and a fan - mounted on DIN Rail. The com.tom (application, communication, and gateways) are configured via a web browser and a CID file – no programming or extra tools required.

Contact NettedAutomation GmbH to receive an offer for the above evaluation set, for the training in Frankfurt in October, or for an in-house training.

NettedAutomation will provide several evaluation sets for the hands-on training in October. For in-house hands-on training NettedAutomation can offer communication with these and other devices – even: bring your own devices.

By the way, beginning in fall 2014, NettedAutomation will also offer (with senior power and protection engineers) intensive 3 days Seminars on Protection and Control with IEC 61850 for HV/MV substations using GOOSE, SV, SCADA, … SCL:

• IEC 61850 Introduction and experience. Where are we today?
• Return of experience and application: with Protection and Control (mainly in medium and high voltage) Substation Automation and with SCADA systems.

All Presentations will be supported by practical examples

Contact NettedAutomation for further details on the special protection and SCADA training courses.

Please stay tuned.

What does Self-Description in IEC 61850 and IEC 61400-25 mean?

The other day I was asked to explain the self-description to a larger group of SCADA and Asset management experts. The requirement was, to do it in some 3 minutes. I have many ways to explain it: slides, live presentation, or just a white-board.

I decided to produce a short video clip – because I have the right equipment on my desk and convenient tools to produce a video.

The result is now online and can be viewed.

Click HERE to view the 4 minutes clip.

I have planned to provide more video clips showing benefits of IEC 61850 and IEC 61400-25 and IEC 6070-5-104, …

Final Call: IEC 61850 Hands-on Training with Protection Relays and other IEDs in Stockholm, 2-5 November 2010

NIST has recommended to FERC that IEC 61850 is among the first set of six crucial International Standards for Smart Grids. The upcoming IEC 61850 Hands-on Training in Stockholm, 2-5 November 2010 conducted by STRI and NettedAutomation is THE opportunity to learn more about this Standard and how vendors have implemented the various parts of the standard. The course is also applicable for those people that are interested in IEC 61400-25 (Wind Power Extensions of IEC 61850). The lessons presented are also applicable for any other application domain like factory or process automation or building automation.

We will intensively use the FREE IEC 61850 DLL Evaluation Kit. You will get copies of the Evaluation Kit for the training - if you do not yet have them.

There are still seats available - Get two seats for the price of one seat!

Click HERE to check the program etc.

IEC 61850 IEDScout - Version 2.11 Available

Omicron has posted a new version (2.11) of their IEC 61850 IEDScout.

The new version supports Windows 7 (64 bit and 32 bit); some modifications resolve minor issues.

Click HERE to go to the IEDScout web page.