Page 4
Copyright This document and parts thereof must not be reproduced or copied without written permission from ABB, and the contents thereof must not be imparted to a third party, nor used for any unauthorized purpose. The software or hardware described in this document is furnished under a license and may be used, copied, or disclosed only in accordance with the terms of such license.
Page 5
ABB is not liable for damages and/or losses related to such security breaches, unauthorized access, interference,...
Page 6
(Low-voltage directive 2006/95/EC). This conformity is the result of tests conducted by ABB in accordance with the product standards EN 50263 and EN 60255-26 for the EMC directive, and with the product standards EN 60255-6 and EN 60255-27 for the low voltage directive.
Section 1MRS240173-IB B Table of contents Section 1 Introduction................7 This manual....................7 Intended audience..................7 Document revision history ................ 7 Related documentation ................7 Symbols and conventions ................ 8 Safety indication symbols..............8 Section 2 Modbus point list mapping mitigations ......... 9 Overview ....................
Page 8
Section 1MRS240173-IB B Physical and Logical Input / Output state Block ........ 41 Function code 16 (Preset multiple register)..........42 Control mask block (read and write)..........42 Control command format change..........42 Control command addresses change .......... 42 Function code 23 (Read/write 4x registers)..........45 Fault Record..................
Page 9
Section 1MRS240173-IB B Table of tables Section 1 Introduction................7 Section 2 Modbus point list mapping mitigations ......... 9 Section 3 0x registers................. 11 Table 1. Mitigations of Modbus registers mapping for the logical output points in single-bit block ............. 11 Table 2.
Page 10
Section 1MRS240173-IB B Table 20. Mitigation of Modbus mapping for fault records block ... 46 Table 21. Mitigation of Modbus mapping for operation records .... 48 Table 22. One example of Modbus event record value ......48 Section 6 6x Registers................ 51 Section 7 Selected PCM ACT logic examples or explanations ..
Page 11
Section 1MRS240173-IB B Table of figures Section 1 Introduction................7 Section 2 Modbus point list mapping mitigations ......... 9 Section 3 0x registers................. 11 Section 4 1x Registers ............... 21 Section 5 4x Registers ............... 27 Figure 1. Snapshot of CMT in UDR view ..........27 Figure 2.
Page 12
Section 1MRS240173-IB B REF615R DPU2000R Modbus Point List Mitigation Manual...
Section 1 1MRS240173-IB B Introduction Section 1 Introduction This manual The mitigation manual compares REF615R's Modbus point list mapping with DPU2000R's. The manual should be used in conjunction with the corresponding communication point list mapping and protocol manual. Intended audience This manual addresses, from substituting REF615R for DPU2000R perspective, the communication system engineer or system integrator responsible for pre-engineering and engineering for communication setup in a substation.
Section 1 1MRS240173-IB B Introduction Symbols and conventions 1.5.1 Safety indication symbols The caution icon indicates important information or warning related to the concept discussed in the text. It might indicate the presence of a hazard which could result in corruption of software or damage to equipment or property.
IEC 61850 path as well. The DPU2000R relay was developed by ABB in the 1990s and has served the industry successfully for over a decade. As time went by, some of its hardware components and software design modules have become obsolete, restricting its use in the future power grid network communication systems.
Section 2 1MRS240173-IB B Modbus point list mapping mitigations REF615R, please refer to the "Feeder Protection and Control REF615R Modbus Point List Manual" with Document ID: 1MRS240052-IB. REF615R DPU2000R Modbus Point List Mitigation Manual...
Section 3 1MRS240173-IB B 0x registers Section 3 0x registers Function Code 1 (Read coil status) REF615R maps status information into two types of blocks as in DPU2000R. One is single-bit block, the other one is double-bit block. The single-bit block only provides status information, and the double-bit block provides both of the status and momentary change information.
Section 3 1MRS240173-IB B 0x registers DPU2000R REF615R Comments on REF615R register DPU 2000R description register IEC 61850 path Modbus points mapping addr. addr. Breaker is Closing LD0.MVGAPC8.Q3.stVal Configured by PCM600 (Close) ACT. DPU is in ALARM (ALARM) LD0.LLN0.Health.stVal Converted enum value to boolean to read ALARM as same in DPU2000R.
Page 19
Section 3 1MRS240173-IB B 0x registers DPU2000R REF615R Comments on REF615R register DPU 2000R description register IEC 61850 path Modbus points mapping addr. addr. Blown Fuse Alarm (BFUA) LD0.SEQRFUF1.Str.general Kilo amperes Symmetrical Inverted Alarm LD0.SSCBR1.APwrAlm.stVal (KSI) Recloser Counter Alarm 1 (79CA1) LD0.SSCBR1.OpNumAlm.stVal High Power Factor Alarm (HPFA) N/A in REF615R...
Page 20
Section 3 1MRS240173-IB B 0x registers DPU2000R REF615R Comments on REF615R register DPU 2000R description register IEC 61850 path Modbus points mapping addr. addr. Neutral Instantaneous Over-current Trip See Section 7.1.6 for (50N3 latch) example or explanation Phase Time Over-current Enabled See Section 7.1.6 for (51P latch) example or explanation...
Page 21
Section 3 1MRS240173-IB B 0x registers DPU2000R REF615R Comments on REF615R register DPU 2000R description register IEC 61850 path Modbus points mapping addr. addr. Frequency Restore (2nd Stage) (81R-2 latch) See Section 7.1.6 for example or explanation Cold Load Timer Alarm (CLTA) LD0.MVGAPC8.Q2.stVal Configured by PCM600 ACT.
Section 3 1MRS240173-IB B 0x registers TRIPA, TRIPB, TRIPC are mapped to different coil addresses in REF615R with those in DPU2000R. 3.1.2 Physical output block (Single-bit data) REF615R inherits the same layout of physical I/O channels from DPU2000R. Besides DPU2000R's normal speed I/O card, REF615R offers high speed I/O cards. As a result, REF615R extends Modbus points for physical output block (single-bit data) to the coil address of 288.
Section 3 1MRS240173-IB B 0x registers DPU2000R REF615R Comments on REF615R Modbus points register DPU 2000R description register IEC 61850 path mapping addr. addr. LD0.XUGGIO110.SPCSO1.stVal Normal speed BIO card OUT 1 Status LD0.XBUGGIO100.SPCSO1.stVal High speed BIO card Normal speed BIO card CLOSE (Reserved) Status High speed BIO card LD0.XUGGIO100.SPCSO1.stVal...
Section 3 1MRS240173-IB B 0x registers The IEC61850 paths for the status points are the same as in the output block with single bit data. In REF615R, MCD (Momentary Change Detect) bits are implemented in the same way and mapped in the same address location as the momentary bits in DPU2000R. Table 4: Mitigations of Modbus registers mapping for the physical output points in double-bit block DPU2000R...
Section 4 1MRS240173-IB B 1x Registers Section 4 1x Registers Function code 2 (Read input status) REF615R maps status information into two types of blocks as in DPU2000R. One is single-bit block, the other one is double-bit block. The single-bit block only provides status information, and the double-bit block provides both of the status and momentary change information.
Page 28
Section 4 1MRS240173-IB B 1x Registers DPU2000R REF615R Comments on REF615R register DPU 2000R description register IEC 61850 path Modbus points mapping addr. addr. 10002 Breaker Status (52a = 0 52b= 1 CB Open) 10002 CTRL.CBCSWI1.PosOpn.stVal Apparatus open position (52b) 10003 Enable Reclose Function Asserted (43a) 10003...
Page 29
Section 4 1MRS240173-IB B 1x Registers DPU2000R REF615R Comments on REF615R register DPU 2000R description register IEC 61850 path Modbus points mapping addr. addr. 10033 Reclose and Over current Counters Cleared N/A in REF615R (CRI) 10034 Automatic Reclose Inhibit Enabled (ARCI) 10034 LD0.DARREC1.InInhRec.stVal Interrupts and inhibits...
Section 4 1MRS240173-IB B 1x Registers DPU2000R REF615R Comments on REF615R register DPU 2000R description register IEC 61850 path Modbus points mapping addr. addr. 10070 Negative Sequence Time Over current Trip 10070 LD0.NSPTOC2.Mod.blockIn (46A) 10071 Switch Set Test Status (SWSET) N/A in REF615R 10072 Test Shift Register A Input Status (SHIFTA)
Section 4 1MRS240173-IB B 1x Registers 4.1.4 Physical input block (Double-bit data with momentary change detection) Like in DPU2000R, the physical input block in REF615R starts from 1x address of 11025 and ends with 1x address of 11056 using the normal speed BIO cards. Because REF615R supports high speed BIO cards which are not available in DPU2000R, the ending 1x address for this block extends to 11102.
Section 5 1MRS240173-IB B 4x Registers Section 5 4x Registers Function Code 3 (Read holding register) 5.1.1 User programmable register block (UDR) Table 9: Mitigations of Modbus user defined registers (UDR) DPU2000R REF615R Number of user defined registers Register's starting address 40001 40001 Register's ending address...
Section 5 1MRS240173-IB B 4x Registers UDR 40001 is chosen. (Bit address 0x010 means 40001:00, and 0x1F means 40001:15, and 0x20 means 40002:00 etc). Select the first bit address, and click on the “Go to right” button between the two panes, the signal will be remapped to the right pane as Figure 2 shows.
Section 5 1MRS240173-IB B 4x Registers 5.1.1.2.2 Ratio scaling The description of how to apply ratio scaling can be found from "REF615R Modbus Communication Protocol Manual" document ID 1MRS240047-IB 5.1.1.2.3 Multiplicative scaling The multiplicative scaling will multiply a scale factor on top of the original register's scale factor.
Section 5 1MRS240173-IB B 4x Registers c. If the primary PT rating is 20KV, to get the primary voltage reading in KV, fill in five into the "Min In" column. It is because the original signal's scale factor is already 100. Thus, 20 (1/5*100 = 20) will be UDR's value's effective scaling.
Section 5 1MRS240173-IB B 4x Registers REF615R provides another set of 6 system status registers (SSR1, SSR2, SSR3, SSR4, SSR5, SSR6). REF615R also provides device information registers. Please check "Feeder Protection and Control REF615R Modbus Point List Manual", document ID1MRS240052-IB, and "REF615R Modbus Communication Protocol Manual", document ID 1MRS240047-IB to find out more information.
Section 5 1MRS240173-IB B 4x Registers DPU2000R REF615R Comments on register DPU 2000R description Scale register Scale IEC 61850 path REF615R Modbus addr. addr. points mapping 40265-266 Voltage VAN 40265-266 LD0.VMMXU1.PhV.phsA.cVal.mag.f reading per unit value by default 40267 Voltage VAN Angle 40267 LD0.VMMXU1.PhV.phsA.cVal.ang.f 40268-269...
Page 41
Section 5 1MRS240173-IB B 4x Registers DPU2000R REF615R Comments on register DPU 2000R description Scale register Scale IEC 61850 path REF615R Modbus addr. addr. points mapping 40309-310 kVAR Hours B 40309-310 LD0.SPEMMTR1.DmdVArhB.actVal reactive energy (demand) 40374-375 LD0.SPEMMTR1.SupVArhB.actVal reactive energy (supply) 40311-312 kVAR Hours C 40311-312...
Section 5 1MRS240173-IB B 4x Registers 5.1.5 RMS Peak Demand Current/Real, Reactive Power Values and Time Stamps Block REF615R maps all the registers in this block in the same way as in DPU2000R except some scaling factor differences. Please see Section 5.1.3 on how to change the default scaling factors.
Section 5 1MRS240173-IB B 4x Registers DPU2000R REF615R Comments on REF615R register DPU2000R description Scale register Scale IEC61850 path Modbus points mapping addr. addr. 40772 Sum of fault current B Read addr. 42012 for reference. 40773 sum of fault current C Read addr.
Page 49
Section 5 1MRS240173-IB B 4x Registers DPU2000R REF615R DPU 2000R Comments on REF615R Modbus points register register IEC 61850 path description mapping addr. addr. 41156 Password 41156 In REF615R, it is mapped for the password character 3 & 4 2 for the control structure 1. 41157 Spare 41157...
Page 50
Section 5 1MRS240173-IB B 4x Registers DPU2000R REF615R DPU 2000R Comments on REF615R Modbus points register register IEC 61850 path description mapping addr. addr. 41159:1 Close Initiate N/A in REF615R (Based on 43a) “Open” command in 41159:0 Trip Initiate 41157:0 CTRL.CBCSWI1.Pos.Oper.ctlVal SBO-with-enhanced-security mode.
Section 5 1MRS240173-IB B 4x Registers DPU2000R REF615R DPU 2000R Comments on REF615R Modbus points register register IEC 61850 path description mapping addr. addr. 41201:6 OUT5 41207:8 LD0.XUGGIO100.SPCSO5.Oper.ctlVal Normal speed BIO card, need to set relay in test mode and remote mode 41212:8 LD0.XBUGGIO100.SPCSO5.Oper.ctlVal High speed BIO card, need to set relay in...
Section 5 1MRS240173-IB B 4x Registers Table 20: Mitigation of Modbus mapping for fault records block REF615R DPU2000R DPU 2000R Comments on REF615R Scale register Scale IEC 61850 path register addr. description Modbus points mapping addr. 41409 Data Control 41409 Data Control 1=First record;...
Section 5 1MRS240173-IB B 4x Registers Table 21: Mitigation of Modbus mapping for operation records DPU2000R REF615R register DPU 2000R description Scale register Scale Comments on REF615R Modbus points mapping addr. addr. 41536 Number of Events to Read per polling, read max.10 events at the same time, not available in DPU2000R 41537 Data Control 1=First record;...
Section 5 1MRS240173-IB B 4x Registers Figure 6: Snapshot of using CMT to enable Modbus event on coil address 587. Only configure points with double-bits for event configurations using PCM600 CMT. It is because Modbus server only generates events on addresses from double-bit block in order not to duplicate event records.
Page 56
Section 5 1MRS240173-IB B 4x Registers REF615R DPU2000R Modbus Point List Mitigation Manual...
Section 6 1MRS240173-IB B 6x Registers Section 6 6x Registers 6x registers are not available in REF615R. REF615R provides WebHMI and PCM600 CMT tools to make settings and logic changes. REF615R DPU2000R Modbus Point List Mitigation Manual...
Page 58
Section 6 1MRS240173-IB B 6x Registers REF615R DPU2000R Modbus Point List Mitigation Manual...
Section 7 1MRS240173-IB B Selected PCM ACT logic examples or explanations Section 7 Selected PCM ACT logic examples or explanations Logical output points: 7.1.1 1st Instantaneous Over-current Distance Alarm (50-1D): N/A in the current release. But the solution may be provided in the future release by either adding more Modbus mapping points to read function behavior status for each of every protection functions or by reading the status of the blocking signals which are configured from the PCM600 ACT logics to block the certain protection functions.
Section 7 1MRS240173-IB B Selected PCM ACT logic examples or explanations 7.1.6 The seal in points (latch) using SRGAPC give on example: Figure 7: Example of create seal in point for 46-1 trip Read LD0.SRGAPC1.Q1.stVal (for 46-1 trip latch status) *Use control command of LD0.SRGAPC1.Rs1.Oper.ctlVal to reset the 46-1 trip latch.
Section 7 1MRS240173-IB B Selected PCM ACT logic examples or explanations 7.2.3 Enable 50P-1 and 50N-1 (50-1): N/A in the current release. But the solution may be provided in the future release by either adding more Modbus mapping points to read function behavior status for each of every protection functions or by reading the status of the blocking signals which are configured from the PCM600 ACT logics to block the certain protection functions.
Page 62
Section 7 1MRS240173-IB B Selected PCM ACT logic examples or explanations REF615R DPU2000R Modbus Point List Mitigation Manual...
Section 8 1MRS240173-IB B Glossary Section 8 Glossary Application Configuration Tool from PCM600 Application function block library ANSI American National Standards Institute Autoreclosing Binary Input Output Circuit breaker Communication Management tool in PCM600 Current transformer CTRL Control logical device Digital fault recorder DNP3 A distributed network protocol originally developed by Westronic.
Page 64
Section 8 1MRS240173-IB B Glossary Modbus A serial communication protocol developed by the Modicon company in 1979. Originally used for communication in PLCs and RTU devices. Momentary position PCM600 Protection and Control Protection Relay Manager Programmable logic controller Parameter Setting tool in PCM600 REF615R Wire-alike replacement option for DPU2000R with the same form factor...
Page 66
Contact us ABB Inc. Distribution Automation 4300 Coral Ridge Drive Coral Springs, FL 33065, USA Phone:+1 (800) 523-2620 Phone:+1 954-752-6700 Fax:+1 954 345-5329 www.abb.com/substationautomation...