The recovery password can be applied through any interface, local or remote. It will achieve the same result
irrespectiv
e of which interface it is applied through.
4.4.2 PASSWORD ENCRYPTION
The IED supports encryption for passwords entered remotely. The encryption key can be read from the IED through
a specific cell av
ailable only thr
ough communication interfaces, not the front panel. Each time the key is read the
IED generates a new key that is valid only for the next password encryption write. Once used, the key is invalidated
and a new key must be read for the next encrypted password write. The encryption mechanism is otherwise
transparent to the user.
4.5 DISABLING PHYSICAL PORTS
It is possible to disable unused physical ports. A level 3 password is needed to perform this action.
To pr
event accidental disabling of a port, a warning message is displayed according to whichever port is required
to be disabled. For example if rear port 1 is to be disabled, the following message appears:
REAR PORT 1 TO BE
DISABLED.CONFIRM
The following ports can be disabled, depending on the model.
● Front por
t (Front Port setting)
● Rear port 1 (Rear Port 1 setting)
● Rear port 2 (Rear Port 2 setting)
● Ethernet port (Ethernet setting)
Note:
It is not possible to disable a port from which the disabling port command originates.
Note:
W
e do not generally advise disabling the physical Ethernet por
t.
4.6 DISABLING LOGICAL PORTS
It is possible to disable unused logical ports. A level 3 password is needed to perform this action.
Note:
The por
t disabling setting cells are not provided in the settings file. It is only possible to do this using the HMI front panel.
The following protocols can be disabled:
● IEC 61850 (IEC61850 setting)
● DNP3 Ov
er Ethernet (DNP3 OE setting)
● Courier Tunnelling (Courier Tunnel setting)
Note:
If any of these protocols are enabled or disabled, the Ethernet card will reboot.
P14x Chapter 19 - Cyber-Security
P14xEd1-TM-EN-1 469
To Next Page
Loading...
Need help?
General
