5-20
T60 Transformer Protection System
GE Multilin
5.2 PRODUCT SETUP
5 SETTINGS
5
Supervisory
PATH: SETTINGS
PRODUCT SETUP
SECURITY
SUPERVISORY
The Supervisory menu settings are available for Supervisor role only or if the Supervisor role is disabled then for the
Administrator role only.
DEVICE AUTHENTICATION:
This setting is enabled by default, meaning "Yes" is selected. When enabled, Device Authen-
tication with roles is enabled. When this setting is disabled, the UR only authenticates to the AAA server (Radius). How-
ever, the Administrator and Supervisor (when enabled) remain active even after device authentication is disabled and their
only permission is to re-enable device authentication. To re-enable device authentication, the Supervisor unlocks the
device for setting changes, then the Administrator re-enables device authentication.
BYPASS ACCESS:
The bypass security feature provides an easier access, with no authentication and encryption for those
special situations when this is considered safe. Only the Supervisor, or the Administrator when the Supervisor role is dis-
abled, can enable this feature.
The bypass options are as follows:
•
Local — Bypasses authentication for push buttons, keypad, RS232, and RS485
•
Remote — Bypasses authentication for Ethernet
•
Local and Remote — Bypasses authentication for push buttons, keypad, RS232, RS485, and Ethernet
When CyberSentry is enabled, Modbus communications over Ethernet is encrypted, which is not always tolerated by
SCADA systems. The UR has the Bypass Access feature for such situations, which allows unencrypted Modbus over
Ethernet. Setting it to "Remote" ensures no authentication is required over Ethernet and Modbus communication is unen-
crypted. Only a Supervisor or Administrator (if Supervisor role is disabled) can enable this feature. Note that other protocols
(DNP, 101, 103, 104, EGD) are not encrypted, and they are good communications options for SCADA systems when
CyberSentry is enabled.
LOCK RELAY:
This setting uses a Boolean value (Enable/Disable) to indicate if the device accepts setting changes and
whether the device can receive a firmware upgrade. This setting can be changed only by the Supervisor role, if it is enabled
or by the Administrator if the Supervisor role is disabled. The Supervisor role enables this setting for the relay to start
accepting setting changes or command changes or firmware upgrade. After all the setting changes are applied or com-
mands executed, the Supervisor disables to lock setting changes.
SUPERVISORY
DEVICE
AUTHENTICATION:Yes
Range: Yes, No
MESSAGE
BYPASS ACCESS:
Disabled
Range: Local, Remote, Local and Remote, Disabled
MESSAGE
LOCK RELAY:
Disabled
Range: Enabled, Disabled
MESSAGE
FACTORY SERVICE:
MODE: Disabled
Range: Enabled, Disabled
MESSAGE
SELF TESTS
See below
MESSAGE
SUPERVISOR ROLE:
Disabled
Range: Enabled, Disabled
MESSAGE
SERIAL INACTIVITY
TIMEOUT: 1 min
Range: 1 to 9999 minutes
MODE
FRONT PANEL OR SERIAL (RS232, RS485)
ETHERNET
Normal mode
Authentication — Role Based Access Control (RBAC)
and passwords in clear
Authentication — RBAC and passwords encrypted
SSH tunneling
Bypass access mode
No passwords for allowed RBAC levels
No passwords for allowed RBAC levels
No SSH tunneling
Содержание T60
Страница 6: ...vi T60 Transformer Protection System GE Multilin TABLE OF CONTENTS ...
Страница 14: ...xiv T60 Transformer Protection System GE Multilin TABLE OF CONTENTS ...
Страница 34: ...1 20 T60 Transformer Protection System GE Multilin 1 5 USING THE RELAY 1 GETTING STARTED 1 ...
Страница 118: ...3 48 T60 Transformer Protection System GE Multilin 3 3 DIRECT INPUT OUTPUT COMMUNICATIONS 3 HARDWARE 3 ...
Страница 146: ...4 28 T60 Transformer Protection System GE Multilin 4 3 FACEPLATE INTERFACE 4 HUMAN INTERFACES 4 ...
Страница 490: ...5 344 T60 Transformer Protection System GE Multilin 5 10 TESTING 5 SETTINGS 5 ...
Страница 522: ...6 32 T60 Transformer Protection System GE Multilin 6 5 PRODUCT INFORMATION 6 ACTUAL VALUES 6 ...
Страница 536: ...7 14 T60 Transformer Protection System GE Multilin 7 1 COMMANDS 7 COMMANDS AND TARGETS 7 ...
Страница 538: ...8 2 T60 Transformer Protection System GE Multilin 8 1 DIRECTIONAL PRINCIPLE 8 THEORY OF OPERATION 8 ...
Страница 568: ...10 12 T60 Transformer Protection System GE Multilin 10 6 DISPOSAL 10 MAINTENANCE 10 ...
Страница 596: ...A 28 T60 Transformer Protection System GE Multilin A 1 PARAMETER LISTS APPENDIX A A ...
Страница 716: ...B 120 T60 Transformer Protection System GE Multilin B 4 MEMORY MAPPING APPENDIX B B ...
Страница 762: ...E 10 T60 Transformer Protection System GE Multilin E 1 IEC 60870 5 104 PROTOCOL APPENDIX E E ...
Страница 774: ...F 12 T60 Transformer Protection System GE Multilin F 2 DNP POINT LISTS APPENDIX F F ...
Страница 785: ...GE Multilin T60 Transformer Protection System H 9 APPENDIX H H 2 ABBREVIATIONS H Z Impedance Zone ...