SEL-3530 RTAC Hands-On Session

Engineering Access Exercise

SEL-2725
Five-Port Ethernet Switch

Cat 5 Cable

SEL-3530
Port 1
Port 2

SEL-C273A

SEL-351S
Figure 1 Connection Diagram

Access Point and Access Point Router

An access point is a connection into the SEL-3530 Real-Time Automation Controller (RTAC) via an
Ethernet port or a physical serial connection. The access point router application makes the connection
from the access point to a downstream device. This feature in the RTAC provides remote engineering
access. In this exercise, you will learn how to use the RTAC as a proxy to facilitate engineering access to
SEL relays in a secure manner with access points and access point routers.

Exercise
Step 1.

Start the ACSELERATOR RTAC SEL-5033 Software. Click the Access Points folder in the
project connection tree.

Step 2.

Add an access point to the RTAC by clicking Insert > Other > Access Point.

Figure 2 Add an Access Point

Engineering Access Exercise

Page 1

20140827

Step 3.

Change the Device Name to EA_Transparent and select Ethernet Incoming (Listens for
Connections) as your Connection Type. Click Insert.

Figure 3 Transparent Engineering Access Connection Type

Step 4.

Select Telnet as the Network Connection Type and 8001 as the Local Port Number for
your transparent engineering access to the relay.

Figure 4 TCP Port Settings for Transparent Engineering Access

Engineering Access Exercise

Page 2

20140827

Step 5.

Click the Access Point Routers folder in the project connection tree. Add an access point
router by clicking the Access Point Routers icon on the Insert tab.

Figure 5 Add an Access Point Router

Step 6.

Change the Name to EA_Transparent and the Source Access Point to

EA_Transparent_AP_AP, and check the Feeder_1_SEL_TAP checkbox. Click Insert.

Figure 6 Adding an Access Point RouterTransparent

Note that the Source Access Point is the connection into the RTAC, while the Destination
Access Point is the end device you are connecting to. Devices that end with TAP are for
transparent (interleave) connections. Devices that end with AP are for direct transparent
connections (i.e., supervisory control and data acquisition [SCADA] polling is stopped while
the access point router is in use).

Engineering Access Exercise

Page 3

20140827

Step 7.

Click the POU Pin Settings tab. Change the Default Value for Auto_Connect to TRUE.
This will automatically connect the source access point to the destination access point once the
RTAC detects an incoming connection.

Figure 7 EA_Transparent POU Pin Settings

Step 8.

Create a direct transparent engineering access connection to the SEL-351S Protection System.
Add an access point to the RTAC by clicking Insert > Other > Access Point.

Engineering Access Exercise

Page 4

20140827

Step 9.

Change the Device Name to EA_Direct and select Ethernet Incoming (Listens for
Connections) as your Connection Type. Click Insert.

Figure 8 Direct Transparent Engineering Access Connection Type

Step 10.

Select SSH as the Network Connection Type and 9001 as the Local Port Number for your
direct transparent engineering access to the relay.

Figure 9 TCP Port Settings for Direct Transparent Engineering Access

Engineering Access Exercise

Page 5

20140827

Step 11.

Click the Access Point Routers folder in the project connection tree. Add an access point
router by clicking the Access Point Routers icon on the Insert tab.

Step 12.

Change the Name to EA_Direct and the Source Access Point to EA_Direct_AP_AP, and
check the Feeder_1_SEL_AP checkbox. Click Insert.

Figure 10 Adding an Access Point RouterDirect Transparent

Step 13.

Click the POU Pin Settings tab. Change the Default Value for Auto_Connect to TRUE.

Step 14.

Press <Ctrl+S> to save the settings in your RTAC project, and click Go Online.

Engineering Access Exercise

Page 6

20140827

Step 15.

Use any terminal software package to connect to your RTAC using its Internet Protocol (IP)
address and the engineering access Transmission Control Protocol (TCP) ports you
configured. Example Tera Term settings are shown below for both connections. Note that
192.168.1.XX in the following figures should be replaced with the IP address of your RTAC.

Figure 11 Transparent Engineering Access in Tera Term

Figure 12 Direct Transparent Engineering Access in Tera Term

Note that if ACSELERATOR QuickSet SEL-5030 Software is unable to connect, you will need
to make a settings change to Auto-Detect Connection. Click Tools > Options. Click the
Communications tab and check Enable Advanced Communication Settings. Uncheck
Auto-Detect Connection. Click OK to save the settings, and then retry your connection.

Engineering Access Exercise

Page 7

20140827

Figure 13 Advanced Communications Settings

Step 16.

Once the terminal window opens, press <Enter> and wait for the equal prompt. Enter the ID
command to verify connectivity to the SEL-351S.

Engineering Access Exercise

Page 8

20140827

Step 17.

Under the Controller tab, click the Feeder_1_SEL tab. Click the + symbol to expand
Feeder_1_SEL_POU. Verify that when you access the relay using the transparent
engineering access point connection, the Transparent_Connection tag is set to TRUE and
the Message_Sent_Count and Message_Received_Count tags are incrementing. Verify that
when you access the relay using your direct transparent engineering access point connection,
the Direct_Transparent_Connection and Offline tags are set to TRUE.

Figure 14 Feeder_1_SEL Controller Tab

Optional Device Manager Setup

Step 1.

Start QuickSet. Click the Device Manager icon on the QuickSet screen to open the
ACSELERATOR Database login screen.

Figure 15 Device Manager Icon

Engineering Access Exercise

Page 9

20140827

Step 2.

Enter the proper credentials in the User Name and Password fields.
Note that if this is the first time ACSELERATOR Database is being used, the default user is
admin with no default password (leave the field blank).

Figure 16 Log in to ACSELERATOR Database

Step 3.

Right-click in the Connection Explorer window and select Add > Device.

Figure 17 Add Device in Connection Explorer

Engineering Access Exercise

Page 10

20140827

Step 4.

Scroll down to select SEL-351S-7 in the Select Device Type window and click OK.

Figure 18 Add SEL-351S-7 Device

Step 5.

Double-click the SEL-351S-7 device in the Connection Explorer window and click Edit.
Change the Device Name to Feeder_1_EA_Transparent.

Figure 19

Engineering Access Exercise

Feeder_1_EA_Transparent Device Tab

Page 11

20140827

Step 6.

Click the Connection tab and change the Connection Type to Network. Enter the IP address
of the RTAC in the Host IP Address field. Ensure that the Port Number is set to 8001 and
that the File Transfer Option is set to Telnet. Click Apply.

Figure 20 Feeder_1_EA_Transparent Connection Tab

Step 7.

Create a direct transparent engineering access connection in Connection Explorer. Right-click

in the Connection Explorer window and select Add > Device.

Step 8.

Scroll down to select SEL-351S-7 in the Select Device Type field and click OK.

Step 9.

Double-click the SEL-351S-7 device in Connection Explorer and click Edit. Change the
Device Name to Feeder_1_EA_Direct.

Figure 21 Feeder_1_EA_Direct Device Tab

Engineering Access Exercise

Page 12

20140827

Step 10.

Click the Connection tab and change the Connection Type to Network. Enter the IP address
of the RTAC in the Host IP Address field. Ensure that the Port Number is set to 9001, the
File Transfer Option is set to SSH, and the Credential Source is Prompt. Click Apply.

Figure 22 Feeder_1_EA_Direct Connection Tab

Step 11.

Now you will use the direct and transparent engineering access connections. Right-click on
Feeder_1_EA_Transparent and click Connect.

Figure 23 Connect to Device

Engineering Access Exercise

Page 13

20140827

Step 12.

Click the Terminal icon to open a terminal window.

Figure 24 Click Terminal Icon

Once the terminal window opens, press <Enter> and wait for the equal prompt. Enter the ID
command to verify connectivity to the SEL-351S.

Figure 25 QuickSet Terminal

Step 13.

Right-click Feeder_1_EA_Transparent and click Disconnect.

Step 14.

Right-click Feeder_1_EA_Direct and click Connect.

Step 15.

Enter your username and password in their respective fields to log in to the RTAC.

Figure 26 Credentials Window

Engineering Access Exercise

Page 14

20140827

Step 16.

Click Trust to allow the SSH connection.

Figure 27 SSH Authentication

Step 17.

Click the Terminal icon to open a terminal window.

Step 18.

Once the terminal window opens, press <Enter> and wait for the equal prompt. Enter the ID
command to verify connectivity to the SEL-351S.

Engineering Access Exercise

Page 15

20140827