Professional Documents
Culture Documents
IEC 60870-5-101-104 Master Protocol Profile 2
IEC 60870-5-101-104 Master Protocol Profile 2
Profile Document
2 June, 2020
[Document Title] 1
Notice of copyright & proprietary rights
© 2015 SUBNET Solutions Inc.
This document contains the confidential information of, and is the sole property of, SUBNET Solutions Inc. and its licensors
and shall not be used, reproduced, copied, disclosed, published, distributed, sold, leased, lent, altered, transmitted in any
form or by any means, or otherwise exploited (collectively "used") for any purpose other than the limited purpose(s) for
which it is furnished except with the written permission of SUBNET Solutions Inc.
For greater certainty, any attached hardware schematics and technical descriptions, or software listings that disclose source
code, are for information purposes only and may not be used for any other purpose (for example, they may not be used to
create working hardware or software for anyone other than SUBNET Solutions Inc.).
While reasonable efforts were made to ensure that the information contained in this document was complete and accurate
at the time of printing, SUBNET Solutions Inc. assumes no liability for errors or omissions. Changes and corrections to the
information in this document may be incorporated in future releases. The information contained in this document is
provided without any express, statutory, or implied warranties and none of the authors, SUBNET Solutions Inc., or its
licensors, resellers or distributors will be liable for any damages or liability arising from or caused by any use or reliance
upon this documentation.
SUBNET Solutions Inc. is not responsible for any modifications, additions or deletions to the original published version of
this documentation unless such modifications, additions or deletions were performed by SUBNET Solutions Inc.
Trademark notices
Microsoft and Windows are either registered trademarks or trademarks of Microsoft Corporation in the U.S. and/or other
countries. All other third-party product and company names may be trademarks of their respective owners.
28 May 2015
Implementation
8 Deactivation deact No
14 measured value, short floating point number with time tag M_ME_TC_1 Yes
35 measured value, scaled value with time tag CP56Time2a M_ME_TE_1 Yes
36 measured value, short floating point number with time tag M_ME_TF_1 Yes
CP56Time2a
62 setpoint command, scaled value with time tag CP56Time2a C_SE_TB_1 Yes
63 setpoint command, short float value with time tag C_SE_TC_1 Yes
CP56Time2a
NOTE:
In the time tag structure CP56Time2a and CP24Time2a, only the Summer (SU) time bit is supported, other bits
are ignored. This applies to messages from both directions.
Driver startup
When the IEC 101/104 driver starts up, it sets the value of all digital points to FALSE and all analog points to 0. The quality of
all data points are set to OFFLINE, RESTART, which indicates that the driver is running but the device status is still offline
and also the value in the data point has not yet been initialized with data from the field device. When the device status
changes to online, the OFFLINE quality of all points are set to ONLINE, RESTART. After the device comes online, when a data
point has its value updated with field data, the RESTART quality disappears.
Configurable options
SubSTATION Server protocol drivers are designed to support a hierarchical configuration. The hierarchy for IEC 60870-5-
101/104 Master configurations is as follows:
Common properties
All SubSTATION Server objects support storing a user-specified name and description. Each object records the date and
time that the object was created, and the date and time of the last user modification to the object.
Number of System Specifies the number of system channel that the driver uses to 0 - 65535
Channels control the polling schedule. A value of 0 disables the polling
(IEC 104 only) control.
Poll Delay Specifies the time for the inter-poll delay. 0 to 2,147,483,647 ms
(IEC 104 only) Default: 1000 ms (0x7FFFFFFF)
Poll Timeout Specifies the time after which a poll times out. 0 to 2,147,483,647 ms
(IEC 104 only) Default: 1500 ms (0x7FFFFFFF)
Event Log Table A time-stamped log of all events generated by the protocol
driver.
Baud Rate Specifies the baud rate to use for serial communications. 110 19200
Baud rate support is limited by the capabilities of the serial 300 38400
communications hardware and drivers. 600 56000
1200 57600
2400 115200
4800 128000
9600 256000
14400
Byte Size Specifies the size of byte for serial communications. Not configurable
Parity Specifies if a parity bit is to be used during transmission, and if Not configurable
so, what type.
Default: Even
Stop Bits Specifies the number of stop bits used to terminate serial Not configurable
transmission of a byte.
RTS Preamble Specifies the number of milliseconds that the RTS is be kept 0 – 65535 recommended.
high prior to the transmission of serial data. Limit not enforced by
This parameter requires that the “RTS Line” be set to software.
“Switched with Amble”, otherwise it is ignored.
RTS Postamble Specifies the number of milliseconds that the RTS is be kept 0 – 65535 recommended.
high after the transmission of serial data. Limit not enforced by the
This parameter requires that the “RTS Line” be set to software.
“Switched with Amble”, otherwise it is ignored.
Mode Specifies the transmission mode. Both Balanced and Dropdown list:
Unbalanced transmission modes are supported. Balanced
Balanced transmission allows both the master and slave to Unbalanced
transmit messages at any time. The slave may issue
unsolicited messages to the master without first receiving
a Class poll.
Unbalanced transmission allows the slave to transmit a
message only when it has received a request from a
master.
NOTE:
Both Master and Slave applications must
have this parameter set to the same value.
Data Link: Specifies whether Data Link confirmations will be used during Yes
Enable communications. No
Confirmations
Data Link: Specifies the how long the protocol driver will wait for a Data
Timeout Link confirmation before timing out.
Data Link: Specifies how many times the protocol driver will retry a Data
Retries Link frame before considering a poll to be failed.
Data Link: Comm Specifies the amount of time (ms) the protocol driver will 0 to 2,147,483,647 ms
Recovery Delay spend in a Restart Delay state when a remote device stops (0x7FFFFFFF)
responding to polls.
Message Field Specifies the size of the Data Link Address field. Dropdown list:
Size: Data Link Unbalanced mode: Set this parameter to 1 or 2. 0 bytes
Address Balanced mode: Set this parameter to 0 or 1. 1 byte
If this parameter is set to 0, the Data Link Options – Address 2 bytes
field will be ignored.
Message Field Specifies the size of the Common Address field. Dropdown list:
Size: Common 1 byte
Address 2 bytes
Message Field Specifies the size of the Cause of Transmission field. Dropdown list:
Size: Cause of 1 byte
Transmission 2 bytes
NOTE:
Both Master and Slave applications must
have this parameter set to the same value.
Port Number Specifies the network port on the remote computer to be used 0 to 65,535
for communications.
Transport Specifies whether the protocol driver will use TCP/IP or UDP/IP Not configurable
to communicate with the master station.
Only TCP/IP is supported for IEC 60870-5-104.
Timeout: Specifies the time interval to wait for a connection to be 1 to 255 seconds
Connect established.
Timeout: Sent Specifies the time interval to wait for acknowledgement of 1 to 255 seconds
sent or test APDUs.
Timeout: No Data Specifies the time interval to wait for an acknowledgement in 1 to 255 seconds
the case of no data messages being sent.
Timeout: Test Specifies the time interval to wait to send test frames in the 1 to 255 seconds
event of a long idle state.
Common Address Specifies the single octet ASDU Common Address or double 1-255 or 1-65535
octet ASDU Common Address depending on the ASDU
Address Size of the device
Control Time to Specifies the maximum amount of time allowed between 0 to 65,535 ms
Live receiving a Select request and a subsequent Operate request,
as well as the maximum amount of time that a control request
can be queued.
Timestamp Type Selects UTC or local time for time stamps. Dropdown list:
Local Time
UTC Time
Polling See the Device Polling table below.
Class 1/2 Poll Specifies the frequency at which the protocol driver will issue 100 to 5000 ms
Interval Class 1 and Class 2 polls to the field device.
(101 only)
Poll Timeout Specifies the amount of time the protocol driver will wait for a 0 to 2,147,483,647 ms
(101 only) response to a poll before considering the poll unsuccessful. (0x7FFFFFFF)
Poll Retries Specifies the number of times that the protocol driver will 0 to 2,147,483,647
(101 only) retry issuing a poll before it considers a remote device offline (0x7FFFFFFF)
and enters a Restart Delay.
Device The following status points list transaction counts for various Not Configurable
Management types of device-specific events, described below. These counts
Table are reset every time the protocol driver is started.
Qualifier Specifies the qualifier for the poll, and it’s Dropdown list:
applied only to the group specified by the Read
Group Number. Freeze without Reset
(Mode C)
Freeze without Reset
(Mode D)
Freeze with Reset (Mode
C)
Freeze with Reset (Mode
D)
Reset (Mode C)
Reset (Mode D)
Time Period Specifies the period (ms) at which the 0 to 2,147,483,647 ms
Synchronization protocol driver will issue Time (0x7FFFFFFF)
Synchronization commands to the field
device.
A value of 0 disables polling.
Point properties
Measured Value Information Specifies the point address for this point. 1 – 255 or 1 – 65535
Scaled Address or 1 – 16777215
Depending on the point address size
of the device
Step Position Information Specifies the point address for this point. 1 – 255 or 1 – 65535
Address or 1 – 16777215
Depending on the point address size
of the device
Single Point Information Specifies the point address for this point. 1 – 255 or 1 – 65535
Digital Input Object Address or 1 – 16777215
Depending on the point address size
of the device
Double Point Information Specifies the point address for this point within a 1 – 255 or 1 – 65535
Digital Input Object Address given Interrogation Group. or 1 – 16777215
Depending on the point address size
of the device
Pseudo Digital Two pseudo digital inputs specify the value of the Bit 0: 0 or 1
Inputs double point. They map as follows: 00 is Bit 1: 0 or 1
Indeterminate/Intermediate, 01 is Off, 10 is On, 11 is
Indeterminate
Integrated Total Information Specifies the point address for this point. 1 – 255 or 1 – 65535
Object Address or 1 – 16777215
Depending on the point address size
of the device
Setpoint Information Specifies the point address for this point. 1 – 255 or 1 – 65535
Command Address or 1 – 16777215
Normalized Depending on the point address size
of the device
With Time Tag Specifies if the command is sent with time tag. Check box
(104 only)
Actions Table This table allows the addition, removal, and editing of Control Types:
controls that will be allowed for this point. Each Direct
control is configurable. Select & Execute
Setpoint Information Specifies the point address for this point. 1 – 255 or 1 – 65535
Command Address or 1 – 16777215
Scaled Depending on the point address size
of the device
With Time Tag Specifies if the command is sent with time tag. Check box
(104 only)
Setpoint Information Specifies the point address for this point. 1 – 255 or 1 – 65535
Command Short Address or 1 – 16777215
Float Depending on the point address size
of the device
With Time Tag Specifies if the command is sent with time tag. Check box
(104 only)
Actions Table This table allows the addition, removal, and editing of Control Types:
controls that will be allowed for this point. Each Direct
control is configurable. Select & Execute
Regulating Step With Time Tag Specifies if the command is sent with time tag. Check box
Command (104 only)
Actions Table This table allows the addition, removal, and editing of Control Types:
controls that will be allowed for this point. Each Direct
control is configurable. Select & Execute
Qualifier:
No Pulse Info
Short Pulse Duration
Long Pulse Duration
Persistent Output
Value:
Next Step Lower
Next Step Higher
Information Specifies the point address for this point. 1 – 255 or 1 – 65535
Address or 1 – 16777215
Depending on the point address size
of the device
Actions Table This table allows the addition, removal, and editing of Control Types:
controls that will be allowed for this point. Each Direct
control is configurable. Select & Execute
Qualifier:
No Pulse Info
Short Pulse Duration
Long Pulse Duration
Persistent Output
Value:
Off
On
Information Specifies the point address for this point. 1 – 255 or 1 – 65535
Address or 1 – 16777215
Depending on the point address size
of the device
Double With Time Tag Specifies if the command is sent with time tag. Check box
Command (104 only)
Actions Table This table allows the addition, removal, and editing of Control Types:
controls that will be allowed for this point. Each Direct
control is configurable. Select & Execute
Qualifier:
No Pulse Info
Short Pulse Duration
Long Pulse Duration
Persistent Output
Value:
Off
On
Information Specifies the point address for this point. 1 – 255 or 1 – 65535
Address or 1 – 16777215
Depending on the point address size
of the device
1013 Configuration No communication lines are configured Indicates that the service has no
Error configured connections.
1014 Runtime Control discarded because time-to-live Indicates that one control action is
warning expired or device offline. [DO discarded because configured time-to-live
Point=PointNumber, FuncType = timer expired or the target device is
FunctionType, ASDU Addr=DeviceAddress offline.
Link Addr=LinkAddress Line=LineName]
1027 Configuration Invalid Datalink Address. Valid range is Min to Indicates that the Datalink Address in
Error Max [Line = LineName, Device = DeviceName] DeviceName under LineName is out of
range.
1028 Configuration Invalid Common Address. Valid range is Min Indicates that the Common Address in
Error to Max [Line = LineName, Device = DeviceName under LineName is
DeviceName] configured out of range.
1029 Configuration Duplicate Device Address (Combination of Indicates that more than one device is
Error Common address and Datalink address) in configured with same device address
Device DeviceName under Line LineName under the same connection.
1030 Configuration Invalid Information Object Address. Valid Indicates that the Information Object
Error range is Min to Max [Point=PointName, Address for PointName in DeviceName
Device=DeviceName, Line=LineName] under LineName is configured out of
range.
1031 Configuration Duplicate Information Object Address Indicates that the Information Object
Error detected. [Point=PointName, Address for PointName in DeviceName
Device=DeviceName, Line=LineName] under LineName is a duplicate of another
point’s.
1040 Runtime Device Offline [Device=DeviceName, Indicates that one device is not
information Line=LineName] communicating.
2018 Runtime Control Command is sent. Informs user that a control message was
information [Point=PointNumber, Value = PointValue, successfully sent.
Device=DeviceName, Line=LineName]
2024 Runtime Control operation failed due to unknown Informs user that the control operation
information ASDU type. [Point=PointNumber, Value = was failed due to unknown ASDU type.
PointValue, Device=DeviceName,
Line=LineName]
2025 Runtime Control operation failed due to unknown Informs user that the control operation
information COT. [Point=PointNumber, Value = was failed due to unknown COT.
PointValue, Device=DeviceName,
Line=LineName]
2026 Runtime Control operation failed due to unknown Informs user that the control operation
information Common Address. [Point=PointNumber, was failed due to unknown Common
Value = PointValue, Device=DeviceName, Address.
Line=LineName]
2027 Runtime Control operation failed due to incorrect Informs user that the control operation
information information object address in controlled was failed due to incorrect information
station. [Point=PointNumber, Value = object address.
PointValue, Device=DeviceName,
Line=LineName]