RAD s Service Assured Networking Solutions for. Power Utilities

Transcription

1 RAD s Service Assured Networking Solutions for Power Utilities

2 Toolbox Firewall & Encryption High Reliability Ruggedized Smooth Migration Resiliency Performance Monitoring Cyber Security End-to-End Management Service Assured Networking for Power Utilities For more than 30 years, RAD has worked closely with its worldwide power utility customers to provide field-proven communication solutions that address the automation, Teleprotection and core operational network needs of their transmission and distribution (T&D) grids. RAD s Service Assured Networking offers the best solutions for highly reliable and cyber-secure operational networks, with a wealth of tools that lead the migration to packet switched networks and meet the key requirements of power utility communications networks.

3 Any Service Native/ Pseudowire Carrier- Grade Ethernet IP Teleprotection Timing Virtualization Any Deployment Mode Operational WAN Substation/Station LAN Mobility Any Infrastructure Fiber Copper Wireless Mission-Critical Reliability Fail-safe operations and resiliency over TDM, PSN and OTN cores High availability, seamless redundancy (HSR) and minimal end-to-end latency for differential and distance protection communications Robust operation in harsh environments (IEC , IEEE 1613) Smooth Migration Resolve SDH/SONET product obsolescence with future-proof support for legacy RTUs, voice and data, together with next-gen IEDs and packet communications IEC substation automation and SCADA connectivity Smart Grid backhaul Cyber Security Boost NERC-CIP compliance 3-tier defense provides ultimate electronic security perimeter (ESP) protection from internal and external cyber attacks Real-time video transmission for always-on site security

4 RAD Solutions for Power Utility Communications Control Room EMS/DMS RADview Video Customer Surveillance Server Billing Server Fiber Optic Legacy SDH/ SONET Fiber Optic SecFlow ETX// New PSTN/OTN 2G/3G/LTE Network Small Substation ETX/Megaple RTU IED Fiber Optic Fiber Optic SecFlow A

5 -4 Next-Generation Multiservice Access Nodes ETX-5 Ethernet Service Aggregation Platform Large HV/MV Substation SecFlow IED RTU SecFlow Teleprotection Fiber Optic Modular Ruggedized SCADA-Aware Ethernet Switch/Router Fiber Optic ETX// Airmux-5000 Point-to-Multipoint Ethernet Radio LV Transformer MV LBS Meter Concentrator Camera Complete Solutions for WDM/OTN Applications with Encryption Wireless Airmux Ruggedized SCADAAware Security Gateway SecFlow-4 egaplex/ Light Voice Airmux SecFlow RADview Network Management System

6 Substation Multiservice Operational Networks Substation Teleprotection RTU FO Control Room (DMS) Voice SCADA Center Data Center RADview Connection on Demand FO ETX// Core PSN/OTN 10 GbE ETX// IEDs ETH Substation Teleprotection ETX// Access Network 1 GbE/10 GbE Voice RTU IEDs ETH ETH Teleprotection RTU IEDs Substation Utilizes RAD s powerful all-in-one -4 platform: Multiservice aggregation 10G core/access network builder Cyber attack prevention Cyber-secure and reliable communications between the substation and energy management system or distribution management system OTN/DWDM: long distance (up to 180 km) multitunneling fiber optic communications to remote substations at rates up to 100G Supports all substation communications: legacy voice and data devices, VoIP and PABX, SCADA RTUs, IEDs, automation and Teleprotection Optional gradual migration to new networks with hybrid TDM/PSN design and traffic duplication for reduced latency and better resiliency Adding new applications (cyber security, router) using RAD s innovative x86 module Full range of service provisioning, performance monitoring, diagnostics, and troubleshooting with the RADview management system

7 3-Tier ESP Protection Electronic Security Perimeter Voice Video IED RTU IED TP Device Connection Control (DCC) 802.1x Network Access Control ETH RS-232 SCADA-Aware Security FW, IPS, Anomaly Detection, etc. Man in the Middle Prevention MACSec Encryption and Integrity Strategically located to securely manage all electronic access to the substation s ESP, and to protect the cyber assets within it from external and internal attacks: Device connection control (DCC) using IEEE 802.1x Network Access Control to ensure authenticated and authorized internal substation connections SCADA-aware security layer, including firewall, intrusion prevention, anomaly detection, and more IEEE 802.1AE (MACSec) and IPSec encryption and data integrity verification to prevent sourcespoofing, session hijacking, Man in the Middle and Distributed Denial of Service (DDoS) attacks Boost compliance level with NERC-CIP (North American Electric Reliability Corporation Critical Infrastructure Protection) requirements for bulk electric systems (BES) protection Layered security approach addresses all vulnerability points including integrity, confidentiality (encryption), authentication, authorization, and auditing Access control, user authentication and privilegelevel associations for local and remote access using Secure Shell (SSH), TACACS or RADIUS

8 Distance and Differential Protection Communications IEC 61850, C37.94, DC Commands In/Out IEC 61850, C37.94, DC Commands In/Out HV Substation -4 with Teleprotection HV Power Flow HV Substation -4 with Teleprotection Distance/Differential Protection IEDs Distance/Differential Protection IEDs 1/10 GbE, E1/T1, STM-1/STM-4, C37.94 PSN/TDM Network or Point-to-Point Dark Fiber 1/10 GbE, E1/T1, STM-1/STM-4, C37.94 RADview The -4 supports high speed, reliable signaling for both distance and differential protection IEDs over TDM or packet networks Hardware protection with HSR ensures zero msec delay up to the communications link Guaranteed sub-2 msec end-to-end signaling latency across the network Supports most distance and differential relay IEDs: 24V 250V dry contacts, serial, G.703 codirectional, C37.94, GOOSE, etc. -4 Teleprotection complies with IEC Tested interoperability with distance and differential relay IEDs from leading vendors such as Alstom, ABB, Siemens, SEL, Schneider, etc. Network management and configuration with RADview system

9 Ruggedized Substation LAN RADview Electronic Security Perimeter Teleprotection IP Phone Utility Primary WAN Secured Multiservice Gateway with Firewall IED Serial IEC Substation RTU HNI IED TCP IEC Server Utility Secondary WAN Voice Analog Server IED TCP DNP 3.0 HNI SecFlow-2 with Firewall SecFlow-2 SecFlow-2 IED Serial DNP 3.0 SCADA-Aware Security Gateway SecFlow-2 IED Serial DNP 3.0 IEDs IEC IED Serial Modbus Supports Ethernet-based substation communications for mission-critical automation traffic within the substation and to SCADA control centers Enables co-existence of RTUs and IEDs based on serial and Ethernet protocols Full redundancy over various topologies using fiber optic rings, 2G/3G cellular modems and external radio systems Enables secure, dedicated networks over fiber and/ or radio links using IPSec encryption and distributed security SCADA firewall suite Complies with IEC and IEEE 1613 environmental standards SCADA-aware security gateway detects and blocks anomalies and authenticates user access to IEDs and RTUs Built-in router enables seamless SCADA communications to both legacy and new RTUs by converting IEC to IEC , Modbus serial to Modbus IP, as well as supporting DNP 3.0 and IEC 61850

10 Distribution Automation and Smart Metering Backhaul AMI/AMR Concentrator AMI/AMR Control RADview SecFlow-1 with Firewall PLC/Logger Distribution Automation DSO Network rd 3 Party Network Power Quality Monitoring 3ø MV Load Break Switchgear Control Billing Server SecFlow-1 with Firewall PLC/Logger MV Load Break Switchgear Control Cellular Network 3G/LTE Power Utility Intranet Airmux Airmux Base Station Airmux SecFlow-1 PLC/ Logger AMI/AMR Concentrator A comprehensive solution addressing the communications needs of energy consumption metering, variable tariff dissemination and MV distribution grid automation Seamless communications over fiber optics, wireless links, 2G/3G/LTE cellular networks, and telecom service provider networks Point-to-multipoint wireless connectivity supports high capacity traffic over licensed and unlicensed sub-6 GHz bands Integrated IPSec with SCADA-aware firewall to mitigate cyber security threats and fraud Self-learning of various data flows; accurate delivery of distribution automation and billing traffic to their respective control servers Transparent delivery of TCP-based data protocols including IEC , IEC 61850, Modbus, DNP 3.0, etc. Supports communication for LBS (load break switchgears) control and power quality monitoring Complies with IEC and IEEE 1613 environmental standards for outdoor installations Network management and configuration with RADview system

11 Versatile Add-On Functions Substation Virtualized Functions Terminal Server SCADA Firewall Router Anomaly Detection Protocol Conversion Substation RTU Serial/TCP SONET/SDH PSN -4 with x86 Module Teleprotection IED Software-based functions running on an x86 field-pluggable server module integrated within RAD s -4 Reduces the number of physical network devices for better reliability, stronger cyber security and simpler operation Add functions as needed, including routing, SCADA-aware firewall, encryption, anomaly detection, terminal server, protocol conversion, data-frame encapsulation, and more Future-ready and flexible solution to meet new application needs All applications are tested and certified by RAD Small footprint and low power consumption, supporting reliable operations of multiple concurrent functions -4 Next-Generation Multiservice Access Nodes

12 The Power of RAD RAD is the preferred communications vendor for many energy utilities and system integrators around the world. Selected Customers PGE USA National Grid USA Hydro-Québec Canada Northeast Utilities USA New York Power Authority USA Empresa de Electricidade da Madeira Portugal Elia Belgium E.ON Germany Elektro Maribor EDF France Slovenia Enel Italy Terna Italy Endesa Spain Israel Electric Corp. Israel Ural Energosoyuz Russia Bhutan Power Corp. Bhutan RES Novosibirsk Russia Beijing Electronic Power Corp. China China Light & Power China Tata Power Company India KEPCO - Korea Electric Power Corp. Korea Taipower Taiwan Elektra Noreste Panama Ampla Brazil Eletronorte Brazil CELPE Brazil AES-SONEL Cameroon UETCL Uganda TANESCO Tanzania Maharashtra State Power Generation Co. India KenGen Kenya Kenya Power Kenya Provincial Electricity Authority Thailand PLN Indonesia Meralco Philipines COBEE Bolivia AES Eletropaulo Brazil NamPower Namibia TransGrid Australia Powercor Australia AES Gener Chile TrustPower New Zealand Specifications are subject to change without prior notification. The RAD name and logo are registered trademarks of RAD Data Communications Ltd. RAD product names are trademarks of RAD Data Communications Ltd RAD Data Communications. All rights reserved. Catalog number , Version 06/15