ipRoute The IEC 60870-5-101/104 Router ipRoute is a communication gateway for data transmission between the IEC 60870-5-101 and IEC 60870-5-104 standards, which takes advantage of the extensive compatibility of both protocols at the application layer. Downlink to substation: • IEC 60870-5-104 client • IEC 60870-5-101 balanced master • IEC 60870-5-101 unbalanced master • IEC 60870-5-101 dialup master The individual protocols can be combined as desired. • Information Processing / Functions ipRoute is a router-based system. The ASDU (Application Service Data Unit) data packet exchange between the communication components is transparent. The IEC 60870-5101 link layer functions and the IEC 60870-5-104 transport layer functions are however directly executed by ipRoute, as shown in the figure above. Transparent ASDU transmission ASDU filtering Configuration of different address lengths Adaptation of IEC 60870-5-101/104 ASDU types Intelligent data flow control and bandwidth adjustment General interrogation Virtual RTU Time synchronization Redundancy • Network Features • • • • • • • • • FUNCTIONAL RANGE • Configuration Configuration and maintenance of the system is conducted through the integrated web interface, which provides central access to all settings and services. • Protocols ipRoute supports nearly all the link and transport layer functions defined by the IEC 60870-5-101 and IEC 60870-5104 protocols. In addition, substations can be linked via dialup connections. Uplink to control center: • IEC 60870-5-104 server • IEC 60870-5-101 balanced slave • IEC 60870-5-101 unbalanced slave Assigning multiple IP addresses to one physical Ethernet interface Network management using an integrated SNMP agent NTP based clock synchronization HTTPS/SSH/SFTP access DHCP DNS Bonding PRP VLAN • Cyber Security • • • • • • • • • • • Secure access to all administrative services (HTTPS, SSH, SFTP) Role-based access protection with login and password User administration for local users Central user administration via Active Directory (LDAP) and/or RADIUS Crypto Store for certificate management Creation of self-signed certificates and Certificate Signing Requests (CSRs) Import and export of certificates Configuration of VPN tunnels (OpenVPN and IPsec) Firewall Safeguarded real-time Linux operating system Safety a

To ensure successful integration of IEC 60870-5-101/104 systems, the following requirements must be met: • ASDU addresses (CA+IOA) used must be unambiguous and unique for all connections, multiple assignations are not allowed. ASDU types used for the control station or substations must be compatible. This can be ensured by matching interoperability lists. ipRoute supports the conversion of following ASDU types (the behavior is configurable): To meet even increased security requirements, ipRoute is fully capable of redundancy in combination with a second device. • • Line redundancy (hot-standby)...