Key Benefits

The flexible and robust Reason S20 Ethernet switches provide customers with a variety of benefits, including:

• Network Management Software (NMS) integration with MDS PulseNET (v4.5.0)
• Layer 2 and 3 Managed Ethernet Switch
• Fully flexible Ethernet switch for industrial applications, including PRP redundant networks
• Ready for IEC 61850 networks (tests performed by KEMA)
• Store-and-forward packet switching
• Media Access Control (MAC) bridges and Spanning Tree Protocol as standardized by the IEEE 802.1D
• IP Routing functionalities: Static, Routing Information Protocol (RIP) and Open Shortest Path First (OSPF)
• Virtual Router Redundancy Protocol (VRRP) to eliminate a single point of failure in static routed environments
• UltraRSTP (Rapid Spanning Tree Protocol - IEEE 802.1W) with fault recovery time less than 5 ms per hop, meeting IEC 61850-90-4 specifications
• Bridge Protocol Data Unit (BPDU) guard and filtering to prevent external interference in Spanning Tree networks
• Cyber Security enhancements, been ready for NERC CIP requirements
• Support for IPv4 and IPv6 protocols (Multicast, Unicast and Broadcast operation)
• Internal clock synchronization using NTP protocol
• Operation as NTP server using IEEE 1588v2 as source of time
• Alarm contacts for detection of critical events
• Standard USB 2.0 configuration port

The Reason S20 delivers advanced cyber security features that help operators to comply with NERC CIP guidelines and regulations. These features are standard with firmware 06A02 and greater.

AAA Server Support (Radius/TACACS+)

Enables integration with centrally managed authentication and accounting of all user activities and uses modern industry best practices and standards that meet and exceed NERC CIP requirements for authentication and password management.

Role Based Access Control (RBAC)

Efficiently administrate users and their privileges within S20 devices. Multiple users account with independent passwords and privilege levels (roles) may be created, and with an advanced function leveling it is possible to define the access level required for each predefined function. Attempts to log-in (either successful or failed) are stored in a persistent flash memory syslog. After three failed log-in attempts, the user account gets locked out and must wait 1 minute to retry new three attempts.

Password Complexity, Encryption and Expiration

Factory default password is different for each manufactured device and after the first login, users must change the password with at least 8 characters including lower/uppercase alphabetic, numeric and special non alphabetic characters (e.g. #, $, @, &). Passwords are encrypted using SHA256 and by default, it may expire after 6 months (user-configurable).

Firmware digitally signed and secure communications

To perform a secure firmware update, S20 uses the checksum algorithm to check firmware integrity and a digital signature to ensure its authenticity. In addition, only the encrypted Secure File Transfer Protocol (SFTP) is enabled to transfer the firmware file. By default, only secure protocols such as SSH (CLI) and HTTPS (graphic web interface) are activated to establish remote access to S20, and if desired they may be deactivated as well as unused Ethernet ports, leaving only the local USB Serial communication through SSH available.

Design

The flexible design of Reason S20 allows the user to customize each group of 4 ports interfaces to either electrical (RJ45 fixed/SFP) or optical (SFP), Fast Ethernet or Gigabit. In addition, S20 may have a redundant power supply which does not need to be identical to the main one. The power supply options are the full range high voltage 125-250 VDC / 110-240 VAC (50/60 Hz) or the low voltage 24/48 VDC.

Field proven design backed by extensive type testing to ensure the robustness of the S20’s fanless design for harsh substation environments. The EMC and Environmental tests are in accordance with IEC 60255-26, IEC 61850-3 Ed. 2, IEEE 1613 and its extension IEEE 1613.1. Safety requirements are in accordance with IEC 60255-27 and UL 60950-1.

IEC 61850 Networks

The Reason S20 is compliant with IEC 61850 for applications in substations, proven by an extensive type testing to demonstrate the EMC and environment robustness and a functional and performance test report issued by KEMA. The test scope included . The test scope included VLAN function, QoS function for GOOSE messages, network recovery performance (RSTP) and booting time. The Reason S20 UltraRSTP achieves a fault recovery time of less than 5ms per hop, reducing packets loss while maintaining interoperability with others standard RSTP devices. For zero recovery time, S20 is ready for PRP networks schemes.

SFP Transceivers

If you have free SFP slots, or require replacing SFP transceivers, GE Vernova offers the following:

DTT signals connected to the relay can be tested by a dedicated test panel (B86429) which allows complete end-to-end testing without disconnecting the protection relays.

B86464 DATA - NX64 Unit

• Synchronous data transmission at rates from 64 kb/s to 768 kb/s in increments of 64 kb/s
• V.35 Interface or 10/100Mbps Ethernet
• Visual indication of data port activity
• Supports clock polarity inversion
• Software configurable as DCE or DTE
• Internal or External transmit clock timing
• Circuit Addressing
• Supports local loopback, line loopback, local+line loopback
• Built-in PRBS generator and analyzer
• IN and OUT control lines (all local)

VistaNET™ EMS for GE Vernova Multiplexers

• A Windows PC/Server-based NMS that provides 24/7 monitoring, configuration and administration of your Teleprotection Terminal Multiplexers (TTMX)
• Interfaces to GE Vernova’s advanced NMS solution via SNMPv1, 2c and 3 offering security and confidentiality
• Connectivity to the TTMX network can be serial or Ethernet

NMX Unit

NMX units enables Ethernet-based connectivity for Network Management traffic between VistaNET and the TTMX hardware. The NMX unit can be optionally additionally secured through a TLS-based encryption module.

Ethernet connectivity for NMS

Redundancy

Optional redundant NMX unit at an alternate location is possible. VistaNET monitors and controls the network through both the nodes and chooses primary / back-up dynamically.

GE Vernova’s MDS I/O Solutions offers Push-In Technology to simplify field wiring of the I/O signals, including an RJ45 interface or an optional fiber interface for digital protocols. The portfolio includes ready to install, configurable options to meet different requirements.  Easily install the wall mountable solution into an existing rack or indoor location. In the case of hard to reach places, an enclosure mounted solution may be installed into an existing enclosure or into a new customized MDS-designed enclosure.

MDS I/O Solutions presents a clear migration for legacy MDS NETio installations. MDS I/O Solutions takes NETio Expansion Modules Types 1-7 and converges them into one solution. These signals can be sent over wireless or fiber communications to the IOX-N module at a local host, PLC or DCS controller. On the edge, the I/O module (IOX-R) offers Modbus TCP to be used for your digital and analog I/O connections.

Upgrade your aging NETio systems with MDS IOX Family of Products.

Advanced Network Management for Hardened Optical Multiplexers and PACKET solutions providing:

• A real-time synchronized architecture to meet five 9s.
• High performance engine supports hundreds of users, thousands of network elements, and numerous protocols, all concurrently!