Port
Protocol
Default
state
Front
Rear
Service
Comment
2102
TCP
open
ON
ON
PCM Access (IED
configuration
protocol)
IED configuration
protocol
20 000
TCP
closed
OFF
ON
DNP3
DNP3.0 DNP
communication
20 000
UDP
closed
OFF
ON
DNP3
DNP3.0 DNP
communication
1) When the IED is configured as a SNTP client it will use the first ephemeral port available. The range
of ephemeral ports is 1024 to 5000.
The GMS600 supports two Ethernet communication protocols, which are IEC
61850 and DNP3.0. These communication protocols are enabled by configuration.
This means that the IP port is closed and unavailable if the configuration of the
GMS600 does not contain a communication line of the protocol. If a protocol is
configured, the corresponding IP port is open all the time.
See the 650 series technical manual and the corresponding protocol
documentation on how to configure a certain communication
protocol for the GMS600.
There are some restrictions and dependencies:
•
The IP port used for DHCP (default UDP port 67) between the IED and a
computer is fixed and cannot be changed.
•
The IP port used for IEC 61850 (default TCP port 102) is fixed and cannot be
changed.
•
The IP ports used for DNP3 are configurable. The communication protocol
DNP3 could operate on UDP (default port 20 000) or TCP (default port 20
000). It is defined in the configuration which type of Ethernet communication
is used. Only one type is possible at a time.
•
The IP port used for FTP (default TCP port 21) can be changed in the IED if
needed by a 3rd party FTP client.
•
The IP port used for HTTPS is fixed to 443 and cannot be changed.
If the FTP port is changed PCM600 cannot be used since it is not
possible to configure it to use other IP-ports than port 21 for FTP.
PCM600 uses IED configuration protocol (TCP port 2102) and FTP ports to
communicate with the IED. The port used by the IED configuration protocol is
fixed and cannot be changed. FTP port is used for uploading disturbance records
(DR).
For Field service tool, the IP port for a proprietary SPA protocol is used (TCP port
7001) and the port is fixed and cannot be changed.
Section 3
1MRK 511 454-UEN A
Secure system setup
8
GMS600 1.3
Cyber security deployment guideline
