Voltage regulator TAPCON 240

Voltage regulator TAPCON 240 Supplement 2398461/01 Protocol description DNP3

All rights reserved by Maschinenfabrik Reinhausen Copying and distribution of this document and utilization and communication of its contents are strictly prohibited unless expressly authorized. Offenders will be held liable for the payment of damages. All rights reserved in the event of the grant of a patent, utility model or ornamental design registration. The product may have been modified after this document went to press. We expressly reserve the right to make changes to the technical data, the design or the scope of delivery. Generally, the information provided and the arrangements agreed during processing of the relevant quotations and orders are binding. The original operating instructions were drawn up in German.

Table of Contents Table of Contents 1 General notes... 5 1.1 About this document... 5 1.2 Abbreviations... 5 2 Voltage regulator connections... 7 3 Settings on the voltage regulator... 9 3.1 Communication interface RS232... 9 3.2 Communication interface RS485... 10 3.3 Fiber-optic cable (optional)... 10 3.4 Ethernet (RJ45) (optional)... 10 3.5 DNP3-specific settings... 11 4 Appendix... 13 Maschinenfabrik Reinhausen 2011 2398461/01 EN TAPCON 240 3

1 General notes 1 General notes 1.1 About this document This document describes implementation of the interface protocol DNP3 for the TAPCON 240. Read this description along with the technical file for the TAPCON 240. You can find more information on the DNP3-protocol in the appendix. The document shown in the appendix was drawn up by the DNP User Group and filled in by MR for TAPCON 240. 1.2 Abbreviations Abbreviation CIC DNP LED Fiber-optic cable MR SCADA TCP Table 1 Definition Communication Interface Card Distributed Network Protocol Light Emitting Diode Fiber-optic cable Maschinenfabrik Reinhausen Supervisory Control and Data Acquisition Transmission Control Protocol Abbreviations Maschinenfabrik Reinhausen 2011 2398461/01 EN TAPCON 240 5

2 Voltage regulator connections 2 Voltage regulator connections The physical interfaces RS232, RS485, optional fiber-optic cables and the Ethernet are provided on the Voltage regulator for data transfer via the DNP3 protocol. Figure 1 CIC card 1 RS232 (9 pin female SUB-D connector) 2 RS485 3 Ethernet RJ45 (optional) 4 FH-ST or F-SMA fiber-optic cable in 850 nm or 660 nm (optional) 5 Reset key 6 TxD LED for transmit signal 7 RxD LED for receive signal 8 Clk LED for operating mode (flashes for 2 seconds) 9 Clip for connecting cable shield with functional ground Maschinenfabrik Reinhausen 2011 2398461/01 EN TAPCON 240 7

2 Voltage regulator connections RS232 RS485 Ethernet (RJ45) Fiber-optic cable (optional) 9 pin female SUB-D connector Pin 2: TxD Pin 3: RxD Pin 5: GND 3 pin connector from Phoenix (MC1.5/3 GF 3.5) Pin 1: GND (100 Ω ground resistance) Pin 2: B (inverted) Pin 3: A (not inverted) Polarity: A > B by 200 mv corresponds to 1. A < B by 200 mv corresponds to 0. An interrupted communication line corresponds to 1. The start bit has the designation 0. Recommended terminating resistor 120 Ω. Pin 1: Tx+ Pin 2: Tx- Pin 3: Rx+ Pin 6: Rx- FH-ST (850 nm or 660 nm) F-SMA (850 nm or 660 nm) Table 2 Interfaces available Transfer on physical plane: Asynchronous with 8 data bits, no parity check, 1 stop bit (8N1) 8 TAPCON 240 2398461/01 EN Maschinenfabrik Reinhausen 2011

3 Settings on the voltage regulator 3 Settings on the voltage regulator The following chapters describe how to set the parameters for communication at the relevant interface on the TAPCON 240. > Configuration > Next* > Comm. interface Depending on the product version and software, you will need to press "Next" a varying number of times to reach the "Comm. interface" menu. You will find more information on how to set the parameters in the technical file for TAPCON 240. 3.1 Communication interface RS232 Communication interface RS232 Baud rate communication 9,6/19,2/38,4/57,6 kbaud Fiber-optic cable light ON/OFF not used Local SCADA address 0...9999 Send delay time not used Table 3 Interface settings RS232 Maschinenfabrik Reinhausen 2011 2398461/01 EN TAPCON 240 9

3 Settings on the voltage regulator 3.2 Communication interface RS485 Communication interface RS485 Baud rate communication 9.6/19.2/38.4/57.6 kbaud Fiber-optic cable light ON/OFF not used Local SCADA address 0...9999 0...254 ms (e.g 2 ms, in order to compensate Send delay time for the response time of an external converter RS485/RS232 when switching between transmit and receive operation) Table 4 Interface settings RS485 3.3 Fiber-optic cable (optional) Communication interface FOC Baud rate communication Fiber-optic cable light ON/OFF Local SCADA address 0...9999 9,6/19,2/38,4/57,6 kbaud ON (1 corresponds to light On) or OFF (1 corresponds to light Off) Send delay time not used Table 5 Interface settings FOC 3.4 Ethernet (RJ45) (optional) Communication interface Baud rate communication RJ45 fixed 19.2 kbaud Network address 0.0.0.0 TCP port 1234 Local SCADA address 0...9999 Send delay time not used Table 6 Interface settings RJ45 10 TAPCON 240 2398461/01 EN Maschinenfabrik Reinhausen 2011

3 Settings on the voltage regulator 3.5 DNP3-specific settings Local SCADA address 0...9999 Unsolicited messages On/Off Number of attempts to transmit 0...100* unsolicited messages Timeout for application confirm 1 s...60 s responses Table 7 DNP3-specific settings *If the value "0" is set, then an infinite number of attempts are made to transmit. Maschinenfabrik Reinhausen 2011 2398461/01 EN TAPCON 240 11

4 Appendix 4 Appendix Maschinenfabrik Reinhausen 2011 2398461/01 EN TAPCON 240 13

DNP3 Device Profile Document For Maschinenfabrik Reinhausen TAPCON 240 Revision Date: 30/04/11

DEVICE PROFILE REVISION HISTORY Date Version 1 Reason for change Edited by 01/11/10 1.00 Initial Revision Braeckle 30/04/11 1.01 Datapointlist BinaryOutputs Data Link Address Braeckle 1 Version of the Device Profile Document is indicated by a whole number incremented with each new release. The most recent version number should match the Device Profile Document Version Number (item 1.1.6) in the Current Device Settings Table.

Contents 1 DEVICE PROPERTIES... 8 1.1 Device Identification... 9 1.1.1 Device Function:... 9 1.1.2 Vendor Name:... 9 1.1.3 Device Name:... 9 1.1.4 Device manufacturer s hardware version string:... 9 1.1.5 Device manufacturer s software version string:... 9 1.1.6 Device Profile Document Version Number:... 9 1.1.7 DNP Levels Supported for:... 10 1.1.8 Supported Function Blocks:... 10 1.1.9 Notable Additions:... 10 1.1.10 Methods to set Configurable Parameters:... 11 1.1.11 DNP3 XML files available On-Line:... 11 1.1.12 External DNP3 XML files available Off-line:... 12 1.1.13 Connections Supported:... 12 1.2 Serial Connections... 13 1.2.1 Port Name... 13 1.2.2 Serial Connection Parameters:... 13 1.2.3 Baud Rate:... 13 1.2.4 Hardware Flow Control (Handshaking):... 14 1.2.5 Interval to Request Link Status:... 15 1.2.6 Supports DNP3 Collision Avoidance:... 15 1.2.7 Receiver Inter-character Timeout:... 15 1.2.8 Inter-character gaps in transmission:... 16 1.3 IP Networking... 17 1.3.1 Port Name... 17 1.3.2 Type of End Point:... 17 1.3.3 IP Address of this Device:... 17 1.3.4 Subnet Mask:... 17 1.3.5 Gateway IP Address:... 17 1.3.6 Accepts TCP Connections or UDP Datagrams from:... 17 1.3.7 IP Address(es) from which TCP Connections or UDP Datagrams are accepted:... 17 1.3.8 TCP Listen Port Number:... 18 1.3.9 TCP Listen Port Number of remote device:... 18 1.3.10 TCP Keep-alive timer:... 18 1.3.11 Local UDP port:... 18

1.3.12 Destination UDP port for DNP3 Requests (Master Only):... 18 1.3.13 Destination UDP port for initial unsolicited null responses (UDP only Outstations):... 18 1.3.14 Destination UDP port for responses:... 19 1.3.15 Multiple outstation connections (Masters only):... 19 1.3.16 Multiple master connections (Outstations Only):... 19 1.3.17 Time synchronization support:... 19 1.4 Link Layer... 20 1.4.1 Data Link Address:... 20 1.4.2 DNP3 Source Address Validation:... 20 1.4.3 DNP3 Source Address(es) expected when Validation is Enabled:... 20 1.4.4 Self Address Support using address 0xFFFC:... 20 1.4.5 Sends Confirmed User Data Frames:... 20 1.4.6 Data Link Layer Confirmation Timeout:... 21 1.4.7 Maximum Data Link Retries:... 21 1.4.8 Maximum number of octets Transmitted in a Data Link Frame:... 21 1.4.9 Maximum number of octets that can be Received in a Data Link Frame:... 21 1.5 Application Layer... 22 1.5.1 Maximum number of octets Transmitted in an Application Layer Fragment other than File Transfer: 22 1.5.2 Maximum number of octets Transmitted in an Application Layer Fragment containing File Transfer: 22 1.5.3 Maximum number of octets that can be Received in an Application Layer Fragment:... 22 1.5.4 Timeout waiting for Complete Application Layer Fragment:... 22 1.5.5 Maximum number of objects allowed in a single control request for CROB (group 12):... 23 1.5.6 Maximum number of objects allowed in a single control request for Analog Outputs (group 41): 23 1.5.7 Maximum number of objects allowed in a single control request for Data Sets (groups 85,86,87): 23 1.5.8 Supports mixing object groups (AOBs, CROBs and Data Sets) in the same control request:23 1.6 Fill Out The Following Items For Masters Only... 24 1.6.1 Timeout waiting for Complete Application Layer Response(ms):... 24 1.6.2 Maximum Application Layer Retries for Request Messages:... 24 1.6.3 Incremental Timeout waiting for First or Next Fragment of an Application Layer Response:24 1.7 Fill Out The Following Items For Outstations Only... 25 1.7.1 Timeout waiting for Application Confirm of solicited response message:... 25 1.7.2 How often is time synchronization required from the master?... 25 1.7.3 Device Trouble Bit IIN1.6:... 25 1.7.4 File Handle Timeout:... 25 1.7.5 Event Buffer Overflow Behaviour:... 25 1.7.6 Event Buffer Organization:... 25 1.7.7 Sends Multi-Fragment Responses:... 26 1.7.8 DNP Command Settings preserved through a device reset:... 26

1.8 Outstation Unsolicited Response Support... 27 1.8.1 Supports Unsolicited Reporting:... 27 1.8.2 Master Data Link Address:... 27 1.8.3 Unsolicited Response Confirmation Timeout:... 27 1.8.4 Number of Unsolicited Retries:... 28 1.9 Outstation Unsolicited Response Trigger Conditions... 29 1.9.1 Number of class 1 events:... 29 1.9.2 Number of class 2 events:... 29 1.9.3 Number of class 3 events:... 29 1.9.4 Total number events from any class:... 29 1.9.5 Hold time after class 1 event:... 29 1.9.6 Hold time after class 2 event:... 29 1.9.7 Hold time after class 3 event:... 30 1.9.8 Hold time after event assigned to any class:... 30 1.9.9 Retrigger Hold Timer:... 30 1.9.10 Other Unsolicited Response Trigger Conditions:... 30 1.10 Outstation Performance... 31 1.10.1 Maximum Time Base Drift (milliseconds per minute):... 31 1.10.2 When does outstation set IIN1.4?... 31 1.10.3 Maximum Internal Time Reference Error when set via DNP (ms):... 31 1.10.4 Maximum Delay Measurement error (ms):... 31 1.10.5 Maximum Response time (ms):... 32 1.10.6 Maximum time from start-up to IIN 1.4 assertion (ms):... 32 1.10.7 Maximum Event Time-tag error for local Binary and Double-bit I/O (ms):... 32 1.10.8 Maximum Event Time-tag error for local I/O other than Binary and Double-bit data types (ms): 32 1.11 Individual Field Outstation Parameters:... 33 1.11.1 User-assigned location name or code string (same as g0v245):... 33 1.11.2 User-assigned ID Code/number string (same as g0v246):... 33 1.11.3 User-assigned name string for the outstation (same as g0v247):... 33 1.11.4 Device Serial Number string (same as g0v248):... 33 2 CAPABILITIES AND CURRENT SETTINGS FOR DEVICE DATABASE (OUTSTATION ONLY) 34 2.1 Single-Bit Binary Inputs... 35 2.1.1 Static Variation reported when variation 0 requested:... 35 2.1.2 Event Variation reported when variation 0 requested:... 35 2.1.3 Event reporting mode:... 35 2.1.4 Binary Inputs included in Class 0 response:... 35 2.1.5 Definition of Binary Input Point List:... 35 2.2 Binary Output Status and Control Relay Output Block... 39

2.2.1 Minimum pulse time allowed with Trip, Close, and Pulse On commands:... 39 2.2.2 Maximum pulse time allowed with Trip, Close, and Pulse On commands:... 39 2.2.3 Binary Output Status included in Class 0 response:... 39 2.2.4 Reports Output Command Event Objects:... 39 2.2.5 Event Variation reported when variation 0 requested:... 39 2.2.6 Command Event Variation reported when variation 0 requested:... 39 2.2.7 Event reporting mode:... 39 2.2.8 Command Event reporting mode:... 40 2.2.9 Maximum Time between Select and Operate:... 40 2.2.10 Definition of Binary Output Status/Control relay output block (CROB) Point List:... 40 2.3 Counters/Frozen Counters... 44 2.3.1 Static Counter Variation reported when variation 0 requested:... 44 2.3.2 Counter Event Variation reported when variation 0 requested:... 44 2.3.3 Counters included in Class 0 response:... 44 2.3.4 Counter Event reporting mode:... 44 2.3.5 Static Frozen Counter Variation reported when variation 0 requested:... 44 2.3.6 Frozen Counter Event Variation reported when variation 0 requested:... 45 2.3.7 Frozen Counters included in Class 0 response:... 45 2.3.8 Frozen Counter Event reporting mode:... 45 2.3.9 Counters Roll Over at:... 45 2.3.10 Counters frozen by means of:... 45 2.3.11 Definition of Counter/Frozen Counter Point List:... 46 2.4 Analog Input Points... 48 2.4.1 Static Variation reported when variation 0 requested:... 48 2.4.2 Event Variation reported when variation 0 requested:... 48 2.4.3 Event reporting mode:... 48 2.4.4 Analog Inputs Included in Class 0 response:... 48 2.4.5 How Deadbands are set:... 49 2.4.6 Analog Deadband Algorithm:... 49 2.4.7 Definition of Analog Input Point List:... 49 2.5 Analog Output Status and Analog Output Control Block... 51 2.5.1 Static Analog Output Status Variation reported when variation 0 requested:... 51 2.5.2 Analog Output Status Included in Class 0 response:... 51 2.5.3 Reports Output Command Event Objects:... 51 2.5.4 Event Variation reported when variation 0 requested:... 51 2.5.5 Command Event Variation reported when variation 0 requested:... 52 2.5.6 Event reporting mode:... 52 2.5.7 Command Event reporting mode:... 52

3 2.5.8 Maximum Time between Select and Operate:... 52 2.5.9 Definition of Analog Output Status/Analog Output Control Block Point List:... 53 IMPLEMENTATION TABLE... 55

1 DEVICE PROPERTIES

1.1 DEVICE IDENTIFICATION Capabilities Current Value If configurable, list methods 1.1.1 Device Function: Masters send DNP requests, while Outstations send DNP responses. If a single physical device can perform both functions, a separate Device Profile Document must be provided for each function. 1.1.2 Vendor Name: The name of the organization producing the device. 1.1.3 Device Name: The model and name of the device, sufficient to distinguish it from any other device from the same organization. 1.1.4 Device manufacturer s hardware version string: 1.1.5 Device manufacturer s software version string: 1.1.6 Device Profile Document Version Number: Version of the Device Profile Document is indicated by a whole number incremented with each new release. This should match the latest version shown in the Revision History at the beginning of this document. o Master Outstation Outstation Maschinenfabrik Reinhausen Tapcon 240 T24R3b V53.19 30/04/11

1.1 DEVICE IDENTIFICATION Capabilities Current Value If configurable, list methods 1.1.7 DNP Levels Supported for: Indicate each DNP3 Level to which the device conforms fully. For Masters, requests and responses can be indicated independently. Masters Only Requests Responses Outstations Only Requests and Responses None Level 1 Level 2 Level 3 None Level 1 Level 2 Level 3 1.1.8 Supported Function Blocks:. Self-Address Reservation Object 0 attribute objects Data Sets File Transfer Virtual Terminal Mapping to IEC 61850 Object Models defined in a DNP3 XML file Function code 31, activate configuration 1.1.9 Notable Additions: A brief description intended to quickly identify for the reader the most obvious features the device supports in addition to the Highest DNP Level Supported. The complete list of features is described in the Implementation Table. function code 13 (cold restart) is not supported

1.1 DEVICE IDENTIFICATION Capabilities Current Value If configurable, list methods 1.1.10 Methods to set Configurable Parameters: XML Loaded via DNP3 File Transfer XML Loaded via other transport mechanism Terminal ASCII Terminal Command Line Software Vendor software named TAPCONtrol Proprietary file loaded via DNP3 file transfer Proprietary file loaded via other transport mechanism Direct Keypad on device front panel Factory Specified when device is ordered Protocol Set via DNP3 (e.g. assign class) Other explain 1.1.11 DNP3 XML files available On-Line: XML configuration file names that can be read or written through DNP3 File Transfer to a device A device s currently running configuration is returned by DNP3 on-line XML file read from the device. DNP3 on-line XML file write to a device will update the device s configuration when the Activate Configuration (function code 31) is received.. Rd Wr Filename Description of Contents dnpdp.xml dnpdpcap.xml dnpdpcfg.xml *.xml Complete Device Profile Device Profile Capabilities Device Profile config. values * The Complete Device Profile Document contains the capabilities, Current Value, and configurable methods columns. * The Device Profile Capabilities contains only the capabilities and configurable methods columns. * The Device Profile Config. Values contains only the Current Value column.

1.1 DEVICE IDENTIFICATION Capabilities Current Value If configurable, list methods 1.1.12 External DNP3 XML files available Offline: XML configuration file names that can be read or written from an external system, typically from a system that maintains the outstation configuration. External off-line XML file read permits an XML definition of a new configuration to be supplied from off-line configuration tools. External off-line XML file write permits an XML definition of a new configuration to be supplied to offline configuration tools. Rd Wr Filename Description of Contents dnpdp.xml dnpdpcap.xml dnpdpcfg.xml *.xml Complete Device Profile Device Profile Capabilities Device Profile config. values * The Complete Device Profile Document contains the capabilities, Current Value, and configurable methods columns. * The Device Profile Capabilities contains only the capabilities and configurable methods columns. * The Device Profile Config. Values contains only the Current Value column. 1.1.13 Connections Supported: Serial (complete section 1.2) IP Networking (complete section 1.3) Other, explain: Optical fiber (serial) RS232 (serial) Keypad on Frontpanel TAPCONtrol Software

1.2 SERIAL CONNECTIONS Capabilities Current Value If configurable, list methods 1.2.1 Port Name Name used to reference the communication port defined in this section. 1.2.2 Serial Connection Parameters: Asynchronous - 8 Data Bits, 1 Start Bit, 1 Stop Bit, No Parity Other, explain 1.2.3 Baud Rate: Fixed at Configurable, range to Configurable, selectable from 9600,19200,38400,57600 Configurable, other, describe 9600 Keypad on Frontpanel TAPCONtrol Software

1.2 SERIAL CONNECTIONS Capabilities Current Value If configurable, list methods 1.2.4 Hardware Flow Control (Handshaking): Describe hardware signaling requirements of the interface. Where a transmitter or receiver is inhibited until a given control signal is asserted, it is considered to require that signal prior to sending or receiving characters. Where a signal is asserted prior to transmitting, that signal will be maintained active until after the end of transmission. Where a signal is asserted to enable reception, any data sent to the device when the signal is not active could be discarded. None RS-232 / V.24 / V.28 Options: Before Tx, Asserts: Before Rx, Asserts: Always Asserts: RTS DTR RTS DTR RTS DTR Before Tx, Requires: Asserted Deasserted CTS DCD DSR RI Rx Inactive Before Rx, Requires: Asserted Deasserted CTS DCD DSR RI Always Ignores: CTS DCD DSR RI Other, explain RS-422 / V.11 Options: Requires Indication before Rx Asserts Control before Tx Other, explain RS-485 Options: Requires Rx inactive before Tx Other, explain

1.2 SERIAL CONNECTIONS Capabilities Current Value If configurable, list methods 1.2.5 Interval to Request Link Status: Indicates how often to send Data Link Layer status requests on a serial connection. This parameter is separate from the TCP Keep-alive timer. 1.2.6 Supports DNP3 Collision Avoidance: Indicates whether a device uses a collision avoidance algorithm. Documentation by the vendor will provide information on collision avoidance schemes. 1.2.7 Receiver Inter-character Timeout: When serial interfaces with asynchronous character framing are used, this parameter indicates if the receiver makes a check for gaps between characters (i.e. extension of the stop bit time of one character prior to the start bit of the following character within a message). If the receiver performs this check and the timeout is exceeded then the receiver discards the current data link frame. A receiver that does not discard data link frames on the basis of intercharacter gaps is considered to not perform this check. Where no asynchronous serial interface is fitted, this parameter is not applicable. In this case none of the options shall be selected. Not Supported Fixed at seconds Configurable, range to seconds Configurable, selectable from,, seconds Configurable, other, describe No Yes, explain Not checked No gap permitted Fixed at bit times Fixed at ms Configurable, range to bit times Configurable, range to ms Configurable, Selectable from,, bit times Configurable, Selectable from,, ms Configurable, other, describe Variable, explain

1.2 SERIAL CONNECTIONS Capabilities Current Value If configurable, list methods 1.2.8 Inter-character gaps in transmission: When serial interfaces with asynchronous character framing are used, this parameter indicates whether extra delay is ever introduced between characters in the message, and if so, the maximum width of the gap. Where no asynchronous serial interface is fitted, this parameter is not applicable. In this case none of the options shall be selected. None (always transmits with no inter-character gap) Maximum bit times Maximum ms

1.3 IP NETWORKING Capabilities Current Value If configurable, list methods 1.3.1 Port Name Name used to reference the communication port defined in this section. RJ45 1.3.2 Type of End Point: TCP Initiating (Master Only) TCP Listening (Outstation Only) TCP Dual (required for Masters) UDP Datagram (required) (list all active) 1.3.3 IP Address of this Device: Keypad on Frontpanel TAPCONtrol Software 1.3.4 Subnet Mask: N.N. 1.3.5 Gateway IP Address: N.N. 1.3.6 Accepts TCP Connections or UDP Datagrams from: Allows all (show as *.*.*.* in 1.3.7) Limits based on an IP address Limits based on list of IP addresses Limits based on a wildcard IP address Limits based on list of wildcard IP addresses Other validation, explain 1.3.7 IP Address(es) from which TCP Connections or UDP Datagrams are accepted:

1.3 IP NETWORKING Capabilities Current Value If configurable, list methods 1.3.8 TCP Listen Port Number: If Outstation or dual end point Master, port number on which to listen for incoming TCP connect requests. Required to be configurable for Masters and recommended to be configurable for Outstations. 1.3.9 TCP Listen Port Number of remote device: If Master or dual end point Outstation, port number on remote device with which to initiate connection. Required to be configurable for Masters and recommended to be configurable for Outstations. 1.3.10 TCP Keep-alive timer: The time period for the keep-alive timer on active TCP connections. 1.3.11 Local UDP port: Local UDP port for sending and/or receiving UDP datagrams. Master may let system choose an available port. Outstation must use one that is known by the master. 1.3.12 Destination UDP port for DNP3 Requests (Master Only): 1.3.13 Destination UDP port for initial unsolicited null responses (UDP only Outstations): For a UDP only Outstation, the destination UDP port for sending initial unsolicited Null response Not Applicable (Master w/o dual end point) Fixed at 20,000 Configurable, range 0 to 32767 Configurable, selectable from,, Configurable, other, describe Not Applicable (Outstation w/o dual end point) Fixed at 20,000 Configurable, range to Configurable, selectable from,, Configurable, other, describe Fixed at 0 ms (No control) Configurable, range to ms Configurable, selectable from,, ms Configurable, other, describe None Fixed at 20,000 Configurable, range to Configurable, selectable from,, Configurable, other, describe Let system choose (Master only) None Fixed at 20,000 Configurable, range to Configurable, selectable from,, Configurable, other, describe Keypad on Frontpanel TAPCONtrol Software

1.3 IP NETWORKING Capabilities Current Value If configurable, list methods 1.3.14 Destination UDP port for responses: For a UDP only Outstation, the destination UDP port for sending all responses other than initial unsolicited Null Response. 1.3.15 Multiple outstation connections (Masters only): Master only. Indicates whether multiple outstation connections are supported. 1.3.16 Multiple master connections (Outstations Only): Outstation only. Indicates whether multiple master connections are supported and the method that can be used to establish connections. None Fixed at 20,000 Configurable, range to Configurable, selectable from,, Configurable, other, describe Use source port number Supports multiple outstations (Masters only) No Supports multiple masters (Outstations only) If supported, the following methods may be used: Method 1 (based on IP address) - required Method 2 (based on IP port number) - recommended Method 3 (browsing for static data) - optional 1.3.17 Time synchronization support: DNP3 LAN procedure (function code 24) DNP3 Write Time (not recommended over LAN) Other, explain Not Supported

1.4 LINK LAYER Capabilities Current Value If configurable, list methods 1.4.1 Data Link Address: Indicates if the link address is configurable over the entire valid range of 0 to 65,519. Data link addresses 0xFFF0 through 0xFFFF are reserved for broadcast or other special purposes. 1.4.2 DNP3 Source Address Validation: Indicates whether the device will filter out messages not from a specific source address. 1.4.3 DNP3 Source Address(es) expected when Validation is Enabled: Selects the allowed source address(es). 1.4.4 Self Address Support using address 0xFFFC: If an Outstation receives a message with a destination address of 0xFFFC it shall respond normally with its own source address. It must be possible to disable the feature if supported. 1.4.5 Sends Confirmed User Data Frames: A list of conditions under which the device transmits confirmed link layer services (TEST_LINK_STATES, RESET_LINK_STATES, CONFIRMED_USER_DATA). Fixed at Configurable, range 0 to 9999 Configurable, selectable from,, Configurable, other, describe Never Always, one address allowed (shown in 1.4.3) Always, any one of multiple addresses allowed (each selectable as shown in 1.4.3) Sometimes, explain Configurable to any 16 bit DNP Data Link Address value Configurable, range to Configurable, selectable from,, Configurable, other, describe Yes (only allowed if configurable) No Always Sometimes, explain Never Keypad on Frontpanel TAPCONtrol Software

1.4 LINK LAYER Capabilities Current Value If configurable, list methods 1.4.6 Data Link Layer Confirmation Timeout: This timeout applies to any secondary data link message that requires a confirm or response (link reset, link status, user data, etc) 1.4.7 Maximum Data Link Retries: The number of times the device will retransmit a frame that requests Link Layer confirmation. 1.4.8 Maximum number of octets Transmitted in a Data Link Frame: This number includes the CRCs. With a length field of 255, the maximum size would be 292. 1.4.9 Maximum number of octets that can be Received in a Data Link Frame: This number includes the CRCs. With a length field of 255, the maximum size would be 292. The device must be able to receive 292 octets to be compliant. None Fixed at 2000ms Configurable, range to ms Configurable, selectable from,, ms Configurable, other, describe Variable, explain Never Retries Fixed at 3 Configurable, range to Configurable, selectable from,, Configurable, other, describe Fixed at 292 Configurable, range to Configurable, selectable from,, Configurable, other, describe Fixed at 292 Configurable, range to Configurable, selectable from,, Configurable, other, describe

1.5 APPLICATION LAYER Capabilities Current Value If configurable, list methods 1.5.1 Maximum number of octets Transmitted in an Application Layer Fragment other than File Transfer: This size does not include any transport or frame octets. Masters must provide a setting less than or equal to 249. Outstations must provide a setting less than or equal to 2048. 1.5.2 Maximum number of octets Transmitted in an Application Layer Fragment containing File Transfer: 1.5.3 Maximum number of octets that can be Received in an Application Layer Fragment: This size does not include any transport or frame octets. Masters must provide a setting greater than or equal to 2048. Outstations must provide a setting greater than or equal to 249. 1.5.4 Timeout waiting for Complete Application Layer Fragment: Timeout if all frames of a message fragment are not received in the specified time. Measured from time first frame of a fragment is received until the last frame is received. Fixed at 512 Configurable, range to Configurable, selectable from,, Configurable, other, describe Fixed at Configurable, range to Configurable, selectable from,, Configurable, other, describe Fixed at 256 Configurable, range to Configurable, selectable from,, Configurable, other, describe None Fixed at ms Configurable, range to ms Configurable, selectable from,, ms Configurable, other, describe Variable, explain

1.5 APPLICATION LAYER Capabilities Current Value If configurable, list methods 1.5.5 Maximum number of objects allowed in a single control request for CROB (group 12): 1.5.6 Maximum number of objects allowed in a single control request for Analog Outputs (group 41): 1.5.7 Maximum number of objects allowed in a single control request for Data Sets (groups 85,86,87): 1.5.8 Supports mixing object groups (AOBs, CROBs and Data Sets) in the same control request: Fixed at 1(enter 0 if controls are not supported) Configurable, range to Configurable, selectable from,, Configurable, other, describe Variable, explain Fixed at 1 (enter 0 if controls are not supported) Configurable, range to Configurable, selectable from,, Configurable, other, describe Variable, explain Fixed at 0(enter 0 if controls are not supported) Configurable, range to Configurable, selectable from,, Configurable, other, describe Variable, explain Not applicable controls are not supported Yes No

1.6 FILL OUT THE FOLLOWING ITEMS FOR MASTERS ONLY Capabilities Current Value If configurable, list methods 1.6.1 Timeout waiting for Complete Application Layer Response(ms): Timeout on Master if all fragments of a response message are not received in the specified time. None Fixed at ms Configurable, range to ms Configurable, selectable from,, ms Configurable, other, describe Variable, explain 1.6.2 Maximum Application Layer Retries for Request Messages: The number of times a Master will retransmit an application layer request message if a response is not received. This parameter must never cause a Master to retransmit control or time sync messages. Outstations should never transmit retries. None (required) Fixed at Configurable, range to Configurable, selectable from,, Configurable, other, describe Variable, explain 1.6.3 Incremental Timeout waiting for First or Next Fragment of an Application Layer Response: None Fixed at ms Configurable, range to ms Configurable, selectable from,, ms Configurable, other, describe Variable, explain

1.7 FILL OUT THE FOLLOWING ITEMS FOR OUTSTATIONS ONLY Capabilities Current Value If configurable, list methods 1.7.1 Timeout waiting for Application Confirm of solicited response message: None Fixed at ms Configurable, range 1000 to 60000 ms Configurable, selectable from,, ms Configurable, other, describe Variable, explain 5000ms 1.7.2 How often is time synchronization required from the master? Never needs time Within 120 seconds after IIN1.4 is set Periodically every 1.7.3 Device Trouble Bit IIN1.6: If IIN1.6 device trouble bit is set under certain conditions, explain the possible causes. Never used Reason for setting: Parameter or Hardware error 1.7.4 File Handle Timeout: If there is no activity referencing a file handle for a configurable length of time, the outstation must do an automatic close on the file. The timeout value must be configurable up to 1 hour. When this condition occurs the outstation will send a File Transport Status Object (group 70 var 6) using a status code value of file handle expired (0x02). Not applicable, files not supported Fixed at ms Configurable, range to ms Configurable, selectable from,, ms Configurable, other, describe Variable, explain 1.7.5 Event Buffer Overflow Behaviour: Discard the oldest event Discard the newest event Other, explain 1.7.6 Event Buffer Organization: Explain how event buffers are arranged (per Object Group, per Class, single buffer, etc,) and provide their sizes Arrangement per object group

1.7 FILL OUT THE FOLLOWING ITEMS FOR OUTSTATIONS ONLY Capabilities Current Value If configurable, list methods 1.7.7 Sends Multi-Fragment Responses: Indicates whether an Outstation sends multi-fragment responses (Masters do not send multi-fragment requests). 1.7.8 DNP Command Settings preserved through a device reset: If any of these settings are written through the DNP protocol and they are not preserved through a restart of the Outstation, the Master will have to write them again anytime the Restart IIN bit is set. Yes No Assign Class Analog Deadbands Data Set Prototypes Data Set Descriptors Function Code 31 Activate Configuration

1.8 OUTSTATION UNSOLICITED RESPONSE SUPPORT Capabilities Current Value If configurable, list methods 1.8.1 Supports Unsolicited Reporting: When the unsolicited response mode is configured off, the device is to behave exactly like an equivalent device that has no support for unsolicited responses. If set to On, the Outstation will send a null Unsolicited Response after it restarts, then wait for an Enable Unsolicited Response command from the master before sending additional Unsolicited Responses containing event data. 1.8.2 Master Data Link Address: The destination address of the master device where the unsolicited responses will be sent. 1.8.3 Unsolicited Response Confirmation Timeout: This is the amount of time that the outstation will wait for an Application Layer confirmation back from the master indicating that the master received the unsolicited response message. As a minimum, the range of configurable values must include times from one second to one minute. This parameter may be the same one that is used for normal, solicited, application confirmation timeouts, or it may be a separate parameter. Not Supported Configurable, selectable from On and Off Not supported for TCP/IP connection Fixed at Configurable, range 0 to 32767 Configurable, selectable from,, Configurable, other, describe Fixed at ms Configurable, range to ms Configurable, selectable from,, ms Configurable, other: Is equivalent to Timeout waiting for Application Confirm of solicited response message Variable, explain o Off Keypad on Frontpanel TAPCONtrol Software 5000ms Keypad on Frontpanel TAPCONtrol Software

1.8 OUTSTATION UNSOLICITED RESPONSE SUPPORT Capabilities Current Value If configurable, list methods 1.8.4 Number of Unsolicited Retries: This is the number of retries that an outstation transmits in each unsolicited response series if it does not receive confirmation back from the master. The configured value includes identical and regenerated retry messages. One of the choices must provide for an indefinite (and potentially infinite) number of transmissions. None Fixed at Configurable, range 1 to 100 and Infinite Configurable, selectable from,, Configurable, other, describe Always infinite, never gives up 3

1.9 OUTSTATION UNSOLICITED RESPONSE TRIGGER CONDITIONS Capabilities Current Value If configurable, list methods 1.9.1 Number of class 1 events: Class 1 not used to trigger Unsolicited Responses Fixed at 5 Configurable, range to Configurable, selectable from,, Configurable, other, describe 1.9.2 Number of class 2 events: Class 2 not used to trigger Unsolicited Responses Fixed at 5 Configurable, range to Configurable, selectable from,, Configurable, other, describe 1.9.3 Number of class 3 events: Class 3 not used to trigger Unsolicited Responses Fixed at 5 Configurable, range to Configurable, selectable from,, Configurable, other, describe 1.9.4 Total number events from any class: Total Number of Events not used to trigger Unsolicited Responses Fixed at Configurable, range to Configurable, selectable from,, Configurable, other, describe 1.9.5 Hold time after class 1 event: A configured value of 0 indicates that responses are not delayed due to this parameter. 1.9.6 Hold time after class 2 event: A configured value of 0 indicates that responses are not delayed due to this parameter. Class 1 not used to trigger Unsolicited Responses Fixed at 5000ms Configurable, range to ms Configurable, selectable from,, ms Configurable, other, describe Class 2 not used to trigger Unsolicited Responses Fixed at 5000ms Configurable, range to ms Configurable, selectable from,, ms Configurable, other, describe

1.9 OUTSTATION UNSOLICITED RESPONSE TRIGGER CONDITIONS Capabilities Current Value If configurable, list methods 1.9.7 Hold time after class 3 event: A configured value of 0 indicates that responses are not delayed due to this parameter. Class 3 not used to trigger Unsolicited Responses Fixed at 5000ms Configurable, range to ms Configurable, selectable from,, ms Configurable, other, describe 1.9.8 Hold time after event assigned to any class: A configured value of 0 indicates that responses are not delayed due to this parameter. Class events not used to trigger Unsolicited Responses Fixed at ms Configurable, range to ms Configurable, selectable from,, ms Configurable, other, describe 1.9.9 Retrigger Hold Timer: The hold-time timer may be retriggered for each new event detected (increased possibly of capturing all the changes in a single response) or not retriggered (giving the master a guaranteed update time). Hold-time timer will be retriggered for each new event detected (may get more changes in next response) Hold-time timer will not be retriggered for each new event detected (guaranteed update time) 1.9.10 Other Unsolicited Response Trigger Conditions:

1.10 OUTSTATION PERFORMANCE Capabilities Current Value If configurable, list methods 1.10.1 Maximum Time Base Drift (milliseconds per minute): If the protocol is synchronized by DNP, what is the clock drift rate over the full operating temperature range. 1.10.2 When does outstation set IIN1.4? Never Asserted at startup until first Time Synchronization request received Periodically, range to seconds Periodically, selectable from,, seconds Range to seconds after last time sync Selectable from,, seconds after last time sync When time error may have drifted by range to ms When time error may have drifted by selectable from,, 1.10.3 Maximum Internal Time Reference Error when set via DNP (ms): The difference between the time set in a DNP Write Time message, and the time actually set in the Outstation. 1.10.4 Maximum Delay Measurement error (ms): The difference between the time reported in the delay measurement response and the actual time between receipt of the delay measurement request and issuing the delay measurement reply. 50 5

1.10 OUTSTATION PERFORMANCE Capabilities Current Value If configurable, list methods 1.10.5 Maximum Response time (ms): The amount of time an Outstation will take to respond upon receipt of a valid request. This does not include the message transmission time. 1.10.6 Maximum time from start-up to IIN 1.4 assertion (ms): 1.10.7 Maximum Event Time-tag error for local Binary and Double-bit I/O (ms): The error between the time-tag reported and the absolute time of the physical event. This error includes the Internal Time Reference Error. 1.10.8 Maximum Event Time-tag error for local I/O other than Binary and Double-bit data types (ms): 10 1000 1000 1000

1.11 INDIVIDUAL FIELD OUTSTATION PARAMETERS: 1.11.1 User-assigned location name or code string (same as g0v245): Value of Current Setting If configurable, list methods 1.11.2 User-assigned ID Code/number string (same as g0v246): Keypad on Frontpanel 1.11.3 User-assigned name string for the outstation (same as g0v247): TAPCON240 1.11.4 Device Serial Number string (same as g0v248): xxxxxxxx ( x = any number between 0 and 9 )

2 CAPABILITIES AND CURRENT SETTINGS FOR DEVICE DATABASE (OUTSTATION ONLY) The following tables identify the capabilities and current settings for each DNP3 data type. Each data type also provides a table defining the data points available in the device or a description of how this information can be obtained if the database is configurable. Tables for data types not supported may be deleted. Additional columns may be added to the point list table if necessary.

2.1 SINGLE-BIT BINARY INPUTS Static (Steady-State) Group Number: 1 Event Group Number: 2 Capabilities Current Value If configurable, list methods 2.1.1 Static Variation reported when variation 0 requested: Variation 1 Single-bit Packed format Variation 2 Single-bit with flag Based on point Index (add column to table below) 2.1.2 Event Variation reported when variation 0 requested: Variation 1 without time Variation 2 with absolute time Variation 3 with relative time Based on point Index (add column to table below) 2.1.3 Event reporting mode: When responding with event data and more than one event has occurred for a data point, an Outstation may include all events or only the most recent event. All events are typically reported for Binary Inputs. Only most recent All events 2.1.4 Binary Inputs included in Class 0 response: If Binary Inputs are not included in the Class 0 response, Binary Input Events (group 2) may not be reported. Always Never Only if point is assigned to Class 1, 2, or 3 Based on point Index (add column to table below) 2.1.5 Definition of Binary Input Point List: List all addressable points. Points that do not exist (for example, because an option is not installed) shall be omitted from the table. Fixed, list shown in table below Configurable(current list may be shown in table below) Other, explain

Point Index Name 0 Auto/Manual Status Default Class Assigned to Events (1, 2, 3 or none) 1 Name for State when value is 0 Name for State when value is 1 Description Manual Auto Status of Auto/Manual regulation mode 1 Raise 1 Raise Command inactive 2 Lower 1 Lower Command inactive 3 Desired Voltage Level 1 1 Raise Command active Lower Command active When the Voltage Regulator is setting a raise command When the Voltage Regulator is setting a lower command VL 1 inactive VL 1 active Activation status of Desired Voltage Level 1 4 Desired Voltage Level 2 5 Desired Voltage Level 3 1 AVL 2 inactive 1 AVL 3 inactive AVL 2 active Activation status of Desired Voltage Level 2 AVL 3 active Activation status of Desired Voltage Level 3 6 SI Command 1 1 SI Command 1 inactive 7 SI Command 2 1 SI Command 2 inactive 8 SI Command 3 1 SI Command 3 inactive 9 Motor Drive running 1 Motor Drive running 10 Parallel Status 1 Independent Mode SI Command 1 active SI Command 2 active SI Command 3 active Motor Drive doesn t running Status of SI Command 1 Status of SI Command 2 Status of SI Command 3 Status of Input motor drive running Parallel Mode Parallel control status 11 Parallel Error 1 No Error Error Parallel Error status 12 Local / Remote Status 13 User Indication 3 1 1 Local (SCADA controls ignored) User Indication 3 inactive 14 Overvoltage 1 No overvoltage Remote (SCADA controls enabled) User Indication 3 active Overvoltage Control mode status of Voltage Regulator Parametrizable indication no.3 The TAPCON has four parametrizable inications. These can be set to an input or to a relay. The indications will be 1 if there is a signal at the parametrized input or if the parametrized relay is ON. Overvoltage detection status

Point Index Name Default Class Assigned to Events (1, 2, 3 or none) Name for State when value is 0 15 Undervoltage 1 No undervoltage 16 Overcurrent 1 No Overcurrent 17 Reserved 1 No Ondercurrent 18 Function Monitoring 19 Reserved 1 1 Normal mode Name for State when value is 1 Undervoltage Overcurrent Undercurrent 15 min out of Bandwidth Description Undervoltage detection status Overcurrent detection status Undercurrent detection status Function Monitoring (15 min out of Bandwidth) 20 User Indication 1 1 User Indication 1 inactive 21 User Indication 2 1 User Indication 2 inactive 22 Parallel Master 1 Parallel control mode master inactive 23 Parallel Follower 1 Parallel control mode follower inactive 24 Circulating Current 1 Parallel control mode circulating current inactive 25 User Indication 4 1 User Indication 4 inactive 26 Reserved 1 27 Reserved 1 28 Reserved 1 29 Reserved 1 30 Reserved 1 User Indication 1 active User Indication 2 active Parallel control mode master active Parallel control mode follower active Parallel control mode circulating current active User Indication 4 active Parametrizable indication no. 1 Parametrizable indication no. 2 Status of Parallel control mode master Status of Parallel control mode follower Status of Parallel control mode circulating current Parametrizable indication no. 4

Point Index Name Default Class Assigned to Events (1, 2, 3 or none) Name for State when value is 0 Name for State when value is 1 Description 31 Reserved 1 32 Reserved 1 33 Reserved 1 34 Reserved 1 35 Reserved 1 36 Reserved 1 37 Reserved 1 38 Reserved 1 39 Reserved 1 40 Reserved 1 41 Reserved 1 42 Reserved 1 43 Status Alarm Relay 1 No Alarm Alarm Status of Status Alarm Relay

2.2 BINARY OUTPUT STATUS AND CONTROL RELAY OUTPUT BLOCK Binary Output Status Group Number: 10 Binary Output Event Group Number: 11 CROB Group Number: 12 Binary Output Command Event Object Num: 13 Capabilities Current Value If configurable, list methods 2.2.1 Minimum pulse time allowed with Trip, Close, and Pulse On commands: Fixed at ms (hardware may limit this further) Based on point Index (add column to table below) 2.2.2 Maximum pulse time allowed with Trip, Close, and Pulse On commands: Fixed at ms (hardware may limit this further) Based on point Index (add column to table below) 2.2.3 Binary Output Status included in Class 0 response: If Binary Output Status points are not included in the Class 0 response, Binary Output Status Events (group 11) may not be reported. Always Never Only if point is assigned to Class 1, 2, or 3 Based on point Index (add column to table below) 2.2.4 Reports Output Command Event Objects: Never Only upon a successful Control Upon all control attempts 2.2.5 Event Variation reported when variation 0 requested: 2.2.6 Command Event Variation reported when variation 0 requested: 2.2.7 Event reporting mode: When responding with event data and more than one event has occurred for a data point, an Outstation may include all events or only the most recent event. Variation 1 without time Variation 2 with absolute time Based on point Index (add column to table below) Variation 1 without time Variation 2 with absolute time Based on point Index (add column to table below) Only most recent All events

2.2.8 Command Event reporting mode: When responding with event data and more than one event has occurred for a data point, an Outstation may include all events or only the most recent event. 2.2.9 Maximum Time between Select and Operate: 2.2.10 Definition of Binary Output Status/Control relay output block (CROB) Point List: List all addressable points. Points that do not exist (for example, because an option is not installed) shall be omitted from the table. Only most recent All events Not Applicable Fixed at 5seconds Configurable, range to seconds Configurable, selectable from,, seconds Configurable, other, describe Variable, explain Based on point Index (add column to table below) Fixed, list shown in table below Configurable(current list may be shown in table below) Other, explain

Supported Control Operations Default Class Assigned to Events (1, 2, 3 or none) Point Index Name 0 Auto / Manual Switch Select/Operate Direct Operate Direct Operate No Ack Pulse On Pulse Off Latch On Latch Off Trip Close Count > 1 X X X X X X X 1 Raise X X X X X 2 Lower X X X X X 3 Desired Voltage Level 1 4 Desired Voltage Level 2 X X X X X X X X X X Cancel Currently Running Operation Name for State when value is 0 Name for State when value is 1 Change Command Manual On Auto On None None - Raise None None - Lower None None - Select VL 1 None None - Select VL 2 None None Description Activation of Auto or Manual voltage regulation method. Pulse/Latch On/Off times are fixed hardware dependent. Variable On/Off times will be ignored. Force Voltage Regulator to Raise operation Pulse/Latch On/Off times are fixed hardware dependent. Variable On/Off times will be ignored. Force Voltage Regulator to Lower operation Pulse/Latch On/Off times are fixed hardware dependent. Variable On/Off times will be ignored. Selection of Desired Voltage Level 1 Pulse/Latch On/Off times are fixed hardware dependent. Variable On/Off times will be ignored. Selection of Desired Voltage Level 2 Pulse/Latch On/Off times