E560 Dnp3 Host

RTU560
Remote Terminal Unit

Host Communication Interface DNP3
Device Profile
Contents:
This manual describes the RTU560 Host Communication

Interface with DNP3 protocol for serial line- and IP-based
communication.
Revision
ABB AG
Document identity:
1KGT 150 489 V016 1
Revision:
Date: 2001-11-16
Revision:
Date: 2002-01-08
Revision:
Date: 2002-03-01
Function Read Date and Time added
Revision:
Date: 2002-06-12
Additional information about ITI included
Revision:
Date: 2003-06-30
Qualifier 27 supported for Object 12, Variation 1
Revision:
Date: 2003-10-14
New System Events introduced
Bit position of DPI corrected
Revision:
Date: 2004-06-04
Dial up function added
Revision:
Date: 2005-03-22
New System Events
Conversion of value for SCO changed
Conversion of value for RCO changed
Note: Conversion also changed in FW Release 6.3 Build 3
Revision:
Date: 2005-04-19
- New Return Codes for COT
- Counter Change Events not supported
- New configuration parameter (see chapter 4)
- New parameter added for time accuracy (see chapter 10)
Revision:
Date: 2006-03-30
- New Qualifier Codes for Object 20 and 21
Revision:
10
Date: 2006-06-21
- New function: Collision Avoidance
- Subset Level 3 supported
Revision:
11
Date: 2007-01-17
- Interoperability List extended for Control Operations
Revision:
12
Date: 2008-01-15
- Device Profile: Send/Execute Control Operation corrected
- Actual List of communication units
- System Events updated
1KGT 150 489 V016 1
iii
Revision
RTU560 Host Communication Interface with DNP3.0
Revision: 13
Date: 2008-06-05
- Chapter IP based communication expanded by slave
parameter description
- Chapter 7.6 ITI Integrated Totals Information expanded by
data object 22.
- Table 4-1 SEV and data object 22 added
- Interoperability list expanded by data object 22
Revision: 14
Date: 2009-05-12
- File transfer description and data objects added
Revision: 15
Date: 2009-10-29
- Chapter 7.8.1 Analog Limit Excursion added
- Dial- up Parameters corrected
- System Events added
Revision: 16
Date: 2011-05-19
- DPI Object Type 3 and 4 added
- MFI and FSO objects added
-Interoperability List Updated
- Chapter 12 Line Redundancy added
We reserve all rights in this document and in the information contained therein.
Reproduction, use or disclosure to third parties without permission express authority is strictly forbidden.
Copyright 2011 ABB AG
iv
1KGT 150 489 V016 1
ABB Utility Automation GmbH

E560_DNP3_Host.DOC
Contents
HOST COMMUNICATION INTERFACE DNP3 .......................................... I
DEVICE PROFILE....................................................................................... I
REVISION ................................................................................................. III
CONTENTS ............................................................................................... V
ABBREVIATIONS .................................................................................... VII
INTRODUCTION ....................................................................................... IX
Preface ix
References ............................................................................................................. ix
Conventions............................................................................................................. x
PHYSICAL LAYER .......................................................................... 1-1

1.1
1.2
1.3
LINK LAYER .................................................................................... 2-1

2.1
2.2
2.3
General ................................................................................................... 2-1

Transmission mode ................................................................................. 2-2
Dial up function ....................................................................................... 2-2
2.3.1
Dial up events................................................................................ 2-2
2.3.2
Dial up Configuration ..................................................................... 2-3
TRANSPORT LAYER ...................................................................... 3-1
APPLICATION LAYER .................................................................... 4-1
ADDRESSING .................................................................................. 5-1
FUNCTION CODES ......................................................................... 6-1

6.1
6.2
6.3
ABB AG
Serial line-based communication ............................................................. 1-1

Collision Avoidance ................................................................................. 1-1
IP-based communication ......................................................................... 1-2
Cold Restart ............................................................................................ 6-1

Warm Restart .......................................................................................... 6-1
Enable Unsolicited Message .................................................................... 6-1
1KGT 150 489 V016 1
Contents
RTU560 Host Communication Interface DNP3
6.4
6.5
Disable Unsolicited Message ................................................................... 6-2

Assign Class ............................................................................................ 6-2
DATA TYPES MONITORING DIRECTION ...................................... 7-1

7.1
7.2
7.3
7.4
7.5
7.6
7.7
7.8
SPI Single Point Information................................................................. 7-1

DPI Double Point Information ............................................................... 7-2
EPI Protection Event Information.......................................................... 7-2
STI Step Position Information ............................................................... 7-4
BSI Bit String Information ..................................................................... 7-5
ITI Integrated Totals Information ........................................................... 7-6
DMI Digital Measured Information......................................................... 7-7
AMI Analog Measured Information........................................................ 7-8
7.8.1
Analog Limit Excursion .................................................................. 7-8
7.9
MFI Measured Float Information ........................................................... 7-9
DATA TYPES CONTROL DIRECTION ........................................... 8-1

8.1
8.2
8.3
8.4
8.5
8.6
8.7
SCO Single Command Output .............................................................. 8-1

DCO Double Command Output ............................................................ 8-2
RCO Regulation Command Output ....................................................... 8-3
ASO Analog Setpoint Output ................................................................ 8-4
DSO Digital Setpoint Output ................................................................. 8-5
BSO Bit String Output........................................................................... 8-7
FSO Floating point Setpoint Output ...................................................... 8-8
FILE TRANSFER ............................................................................. 9-1

9.1
9.2
Download ................................................................................................ 9-2

Upload ..................................................................................................... 9-2
10 TIME SYNCHRONIZATION ........................................................... 10-1

10.1
10.2
10.3
10.4
General ..................................................................................................10-1
Maximum response time ........................................................................10-1
Serial line-based communication ............................................................10-2
IP-based communication ........................................................................10-2
11 CLASS DATA POLLING................................................................ 11-1

12 LINE REDUNDANCY ..................................................................... 12-1
13 SYSTEM EVENTS ......................................................................... 13-1
14 INTEROPERABILITY LIST ............................................................ 14-1
vi
1KGT 150 489 V016 1
ABB AG
Abbreviations
ABB AG
CMU
Communication and Data Processing Unit
AMI
Analog Measured value Input
ASO
Analog Set point command Output
BCU
Bus Connection Unit
BSI
Bit String Input (8, 16 bit)
BSO
Bit String Output (1, 2, 8, 16 bit)
COS
Change-of-State Queue
CS
Control System
CSC
Command Supervision Channel
CS-Command
Clock Synch Command
CRC
Cyclic Redundancy Check
CTO
Common Time Object
DCO
Double Command Output
DMI
Digital Measured value Input (8, 16 bit)
DPI
Double Point Input
DSO
Digital Set point command Output (8, 16 bit)
EPI
Event of Protection equipment Input (1bit)
GCD
General Configuration Data
HCI
Host Communication Interface
IED
Intelligent Electronic Device
IIN
Internal Indication
IOC
I/O Controller (Controller on I/O Board)
IOD
Input Output Data
IOM
I/O Bus Master (Function of SLC)
1KGT 150 489 V016 1
vii
Abbreviations
viii
ITI
Integrated Totals Input
MFI
Analog Measured value Floating Input
MPU
Main Processing Unit
NCC
Network Control Center
PB
Peripheral Bus
PBP
Peripheral Bus Processor
PDP
Process Data Processing
PLC
Programmable Logic Control
PPP
Point to Point Protocol
PSU
Power Supply Unit
RCO
Regulation step Command Output
RTC
Real Time Clock
SBO
Select Before Operate
SCADA
Supervision, Control and Data Acquisition
SCI
Sub-Device Communication Interface
SCO
Single Command Output
SEV
System Events
SLC
Serial Line Controller
SOC
Strobe Output Channel
SOE
Sequence-of-Event Queue
SPI
Single Point Input
STI
Step position Input (8 bit)
TSI
Time Synch Input
TSO
Time Synch Output
1KGT 150 489 V016 1
ABB AG
Introduction
Preface
This document describes the functions of the host interface in RTU560 according to
DNP3 for serial line- and IP-based communication.
References
[1]
DNP V3.00
Transport Functions
Version 0.01 May 30, 1997
DNP Users Group
[2] DNP V3.00

Data Link Layer Protocol Description
Version 0.02, May 30, 1997
DNP Users Group
[3] DNP V3.00
Application Layer Protocol Description
Version 0.03, May 28, 1997
DNP Users Group
[4] DNP V3.00
Data Object Library
Version 0.02, July 8, 1997
DNP Users Group
[5] DNP V3.00
Intelligent Electronic Device (IED) Certification Procedure Subset Level 1
Version 1.01, December 15, 1999
DNP Users Group
[6] DNP V3.00
Intelligent Electronic Device (IED) Certification Procedure, Subset Level 2
Version 2.4,
November 9, 2004
DNP Users Group
[7] DNP V3.00
Technical Bulletin 9804-007
Clarification of Collision Avoidance Procedures
April 22, 1998
DNP Users Group
ABB AG
1KGT 150 489 V016 1
ix
Introductions
Conventions
In this document function codes of data types according to DNP3 are marked with angel
brackets:
<Function code>
Italic fonts with the heading Parameter are references to configuration parameters in
RTUtil560. The parameter is followed by definitions in round brackets where to find this
parameter in RTUtil560. Example:
Parameter: Master ID (RTU560 Line parameter)
In this document references to elements of the standard will be printed bold and in
brackets.
The tables in the next chapters include lists of the functions, options and message types
supported according to the protocol structure given in DNP3 (enhanced 3+1 layer model)
for
the physical layer
the link layer
the transport layer
the application layer
This layer model is valid for the protocol DNP3.
Concerning DNP3 objects, function codes and qualifiers, RTU560 fulfills the
requirements of a DNP3 Level 3 implementation. For detailed information see DNP3
Device Profile for RTU560 and Implementation Table for RTU560 within the following
chapters.
1KGT 150 489 V016 1
ABB AG
Physical Layer
1.1 Serial line-based communication

Different transmission speeds in control and in monitoring direction is not supported.
Possible communication interfaces according to Table 1-1:
Interface
CP1
CP2
CPA
CPB
Device
560SLI02
560CMU04
RS232C
RS422
RS232C
RS422
RS232C
RS485
560CMU02
RS232C
RS232C
RS485
560CMU05
RS232C
RS485
RS232C
RS485
RS232C
RS485
RS232C
RS485
RS232C
RS485
RS232C
RS485
560ETH03
560CMU80
Table 1-1:
RS232C
RS232C
RS232C
RS485
RS485
Communication interfaces DNP3
Option / Parameters
Baud rate
Parity
Dial-up connection
Redundant communication lines
Range of Values / Explanations

50, 75, 100, 110, 200, 300, 600, 1200,
1500, 2400, 4800, 9600, 19200, 38400
Odd, Even, No
See chapter 2.3
- Not supported -
Default
9600
No
1.2 Collision Avoidance

The serial line interface (in RS232C mode) with DNP3 protocol is able to avoid collisions
between unsolicited messages, sent by several devices sharing a half-duplex, multi-drop
link, using the DCD (Data Carrier Detect) signal [7].
Parameter: Link with collision avoidance
(RTU560 Line parameter)
If the link is busy (DCD), the device waits a backoff_time, before it tries again
indefinitely.
backoff_time = fixed delay + random (maximum of random delay)
Parameter: Fixed delay
Parameter: Maximum of random delay
ABB AG
1KGT 150 489 V016 1

1-1
Introductions
1.3
RTU560 Host Communication Interface with DNP3-1999
IP-based communication
The transmission speeds in control and in monitor direction depends on the connected
Ethernet (10 MBit/s for 560ETH03 and 560CMU80 R0002, 10/100 MBit/s for
560CMU01/02/04/05).
Possible communication interfaces are:
Host interface on 560ETH03, 560CMU80 R0002 or 560CMU01/02/04/05
The following parameter concerning the master has to be specified. These parameter are
available in the line parameter sheet.
Option / Parameters
IP-Address
Port number
IP protocol

IP address of the host;
0.0.0.0, if every host should be able to
connect the RTU
Port number which will be used for the
connection
The IP protocol used (TCP/IP or UDP/IP)
Default
0.0.0.0
20000
TCP/IP
IP protocol TCP/IP: Using this mode the master should try to connect the RTU560 using
its IP address and the port number configured. After start the
RTU560 will be prepared to accept a connection from a master with
the IP address and port number specified in the parameter of upper
table. If a connection is established the connection will be
maintained until an error occurs. If the RTU560 recognizes an error
it will close the active connection and wait for a new one.
IP protocol UDP/IP: Using this mode both parts send its DNP telegrams by using the
UDP transport protocol of the network. Each part sends its
telegrams to the IP address and the port number of the opposite
side without building a connection.
1-2
1KGT 150 489 V016 1
ABB AG
Link Layer
2.1 General
A master/slave address model is used for all RTU560 host interfaces. The basic
procedures for data transfer, protection against loss and duplication and flow control are
described in [2].
These master and slave address is configurable in the line folder of RTUtil560 separately
for every line.
Option / Parameters
Master Station Address
Slave Station Address

0 ... 65519
(65520 65535 is normally reserved)
0 ... 65519
0xFFFF is used as broadcast address
(0xFFFD and 0xFFFE are not supported)
Default
-
Communication primitives like framing of messages, parity checks or retransmissions

are handled by the telecontrol protocol. These tasks are executed in the link layer that
connects RTUs and control systems or other RTUs
The selectable parameters have to be calculated regarding the real communication
technology.
Option / Parameters
Max. frame length (net
value exc. start characters
and CRCs)
Communication retry
Data Link Layer
Requires Data Link
Confirmation from opposite
station
Confirmation Timeout
Cycle time test supervision
Table 2-1:
ABB AG

255
Default
255
Enabled / Disabled
If enabled:
1 ... 255 times
Never, always, on large Application Layer
Segments
Disabled
3
1 65535 sec
Enabled / Disabled
If enabled: 30 65535
2 sec
Enabled
120 sec
On large
AL Segments
Line Parameters DNP3
1KGT 150 489 V016 1
2-1
Link Layer
2.2 Transmission mode

Controlling station and controlled station (RTU) act simultaneously as primary and
secondary stations.
Both, controlling station and controlled station use SEND/CONFIRM services for
message exchange, controlling station may also use the SEND/NO REPLY
service.
During link establishment both, controlling station and controlled station use the
REQUEST/RESPOND service.
Frame format is FT3. Master Station always sets the Direction Bit to 1, Slave
Station sets the Direction Bit to 0.
2.3 Dial up function

DNP is a calling protocol. Only the unsolicited mode enabled to transfer spontaneous
message after a communication link is established. But not all control systems allow this
mode. For dial up this definition is very important!
2.3.1
Dial up events
In the dial-up mode a communication link can be established via HAYES-compatible
modems between a RTU560 and a higher-level system. In this case the RTU560
receives telephone calls and then switches over to the data mode.
When a telephone connection has been established, but communication according to the
protocol does not take place the telephone connection will be terminated after elapse of
the time defined with the interface parameter maximum time till link is established.
Additionally, the RTU560 may ring up the higher-level system on its own as soon as
spontaneous changes of class1 or unsolicited data points (see address parameter) or
system events have occurred. It is always the task of the control system to terminate the
connection to the RTU560.
If there is no communication with the control system for a configurable time, the RTU560
terminates the telephone connection by itself. (Parameter: Inactivity hang up delay).
When the attempt to establish the telephone connection has failed, dialing will be
repeated several times (interface parameter: Maximum number of dial attempts). If the
higher-level system supports a modem pool functionality and several telephone numbers
have been configured the next telephone number will be called and establishing the
telephone connection be attempted.
2-2
1KGT 150 489 V016 1
ABB AG
RTU560 Host Communication Interface DNP3.0
Link Layer
Without unsolicited or class 1 data events

The host interface will never to invoke the control system spontaneously. Data are only
transferred after the host interface is called by the control system.
After restart the host interface calls the control system.
With unsolicited or class 1 data events

After restart the host interface calls the control system.
Only unsolicited or class 1 data message are base for the host interface to call the
control system spontaneously via deal up handler. After the telephone connection is
established the host interface must called by the control system. After the
communication link is established the host interfaces send the unsolicited message
spontaneously and the class1 data are inquired from the control system.
2.3.2
Dial up Configuration
The dial-up mode will be available only if parameter carrier signal keying is set to Dial up
(external modem without handshake; without RTS/CTS)) on the communication interface
used.
All interface settings such as parity, baud rate, number of data bits, etc. depend on the
protocol selected and are valid for both the configuration and the data mode.
The dial-up mode parameters are available in a separate dialog box in the corresponding
communication interface section.
ABB AG
1KGT 150 489 V016 1
2-3
Link Layer
Dial up parameter: Modem Parameter

Options / Parameter
Escape sequence
preceding silent period
Configuration string for
modem
Dial string for modem

Escape string for modem
Answer string for modem

Default
1 sec.
1 255 sec.
Minimal delay time between data mode
and Hayes command mode
ATE0X3S0=1
Configuration string for modem
initialization.
Note:
The configuration string depends on the
type of modem, and the used modem
function.
Hayes command to establish a modem
connection
Hayes command to switch from data
mode to command mode
Enable/Disable
If enabled:
ATDT
+++
Disable
<no defaults>
An incoming call is answered with this

string.
Hang up string for modem

Connect string of modem
OK string of modem
Disconnect string of
modem
Ring string of modem
Busy string of modem
PIN Configuration string
for GSM Modem
Note:
For standard HAYES modems the
value S0=0 shall be set in the
configuration string, if this feature is
enabled (see modem description).
String requesting the modem to
terminate the telephone connection.
String from modem, if a telephone
connection has been established.
String from modem to acknowledge a
command
String from modem, if a connection is
aborted
String from modem, signaling an
incoming call.
String from modem, signaling that the
remote terminal is busy.
Enable/Disable
If enabled:
ATH
CONNECT
OK
NO CARRIER
RING
BUSY
Disable
<no defaults>
String to log into a GSM modem

(Personal Identification Number)
2-4
1KGT 150 489 V016 1
ABB AG
Link Layer
Dial up properties: General

Options /
Parameter
Maximum time till
link is established

Range: 1 ... 255 seconds
Maximum number
of dial attempts
Time between dial

attempts
Time between two

series of dial
attempts
Inactivity hang up
delay
Inactivity hang up
delay after
commands
Maximum time interval until the connection to a

higher-level system has been established.
The modem connection will be terminated when the
time has elapsed.
Range: 1 ... 255 attempts
Default
60
seconds
Maximum number of times a telephone number is

called. If the higher-level system supports a modempool function the next telephone number will be
called.
60
seconds
When an attempt has failed the number will be
called again after elapse of this time.
7800
Range:60 15300 seconds
seconds
Waiting time between dial series with different
telephone numbers
Enable / disable
Disabled
15
If enabled:
seconds
The RTU560 will terminate the connection if no
spontaneous change has occurred within this period
of time.
Enable / disable
If enabled:
Disabled
30
seconds

The RTU560 will terminate the connection if no
spontaneous change has occurred within this period
of time after a command was sent
Maximum period for Enable / disable
one telephone
If enabled:
connection
Range: 10 15300 seconds
The RTU560 will terminate the connection after this
period of time
Cyclic calls from the Enable / disable
RTU560
If enabled:
Disabled
600
seconds
Disabled
- Start time of cyclic calls [hour, minutes]

- Time interval between two calls
[days, hours, minutes]
ABB AG
1KGT 150 489 V016 1
2-5
Link Layer
Dial up properties: Telephone Number(s)
2-6
Options / Parameter
Telephone number 1

String (length max. 27 characters)
Default
<no defaults>
..
Telephone number 16
String (length max. 27 characters)
<no defaults>
1KGT 150 489 V016 1
ABB AG
Transport Layer
The DNP3 Transport Layer is used to split Application Layer Fragments in segment
which fit into a Data Link Layer frame. There are no parameters to set for Transport
Layer. For additional information see [1].
ABB AG
1KGT 150 489 V016 1
3-1
Application Layer
Several basic parameters need to be defined for a connection. All these parameters are
also presented in the Device Profile at the end of this document.
Option / Parameters
Requires Application Layer
Confirmation from opposite
station
Application Layer Retries
Application Layer
Response Time out
Max length of a Application
Layer Fragment
Enable Unsolicited
Responses Class 1
Enable Unsolicited
Responses Class 2
Enable Unsolicited
Responses Class 3
Send Unsolicited Response
Unsolicited Response retry
Unsolicited Response
Confirmation Time out
Size of COS Buffer
Size of SOE Buffer
Protocol Profile

Never, always, when reporting event data
Default
Always
0 ... 255
0 ... 120 sec
2
10 sec
2048 ... 65535; Size of Application Layer

4096
Fragments containing the response to a request
Enable / Disable
Disable
Enable / Disable
Disable
Enable / Disable
Disable
Enable / Disable
0 ... 65535
0 65535 sec
Enable
5
10 sec
100 8000
100 8000
Default
1000
1000
Default
PEA
Double-bit binary support
no analog limit excursion

configurable
analog limit excursion
configurable for virtual AMIs
Enable / Disable
Disable
Overview on functions for data elements of the application layer defined in [3].
The column RTU560 Type shows the type of data with must be configured in RTUtil560.
Object Group/Variation combinations for DNP3 Subset Level 3 are implemented.
Here is the list of data types which are used in monitoring direction (which can be read):
ABB AG
1KGT 150 489 V016 1
4-1
Application Layer
Data
Object
1
Variation
0
1
2
0
1
2
3
0
1
2
0
1
2
3
20
21
22
30
32
0
1
2
3
4
5
6
7
8
0
1
2
9
10
0
1
2
5
6
0
1
2
3
4
5
0
1
2
4-2
Description
Binary input - all variations
Binary input
Binary input with status
Binary input change - all variations
Binary input change without time
Binary input change with time
Binary input relative change with time
Double bit Binary input - all variations
Double bit Binary input
Double bit Binary input with status
Double bit Binary input change - all
variations
Double bit Binary input change
without time
Double bit Binary input change with
time
Double bit Binary input relative
change with time
Binary counter all variations
32-bit binary counter
16-bit binary counter
32-bit delta counter
16-bit delta counter
32-bit binary counter without flag
16-bit binary counter without flag
32-bit delta counter without flag
16-bit delta counter without flag
Frozen counter - all variations
32-bit frozen counter
16-bit frozen counter
32-bit frozen counter without flag
16-bit frozen counter without flag
Counter event - all variations
32-bit with flag
16-bit with flag
32-bit with flag and time
16-bit with flag and time
Analog input - all variations
32-bit analog input
16-bit analog input
32-bit analog input without flag
16-bit analog input without flag
Analog Input Single-prec flt-pt with
flag
Analog change event - all variations
32-bit analog change event without
time
16-bit analog change event without
time
1KGT 150 489 V016 1
RTU560 Types
SPI, DPI, SEV
DPI
ITI
STI, AMI, DMI,

BSI,MFI
ABB AG
3
4
5
7
70
4
5
6
7
Application Layer
32-bit analog change event with time

16-bit analog change event with time
Analog Input Event Single-prec fltpt without time
Analog Input Event Single-prec fltpt with time
File command status
FDR, FTR
File transport
File transport status
File descriptor
Table 4-1: Table of data objects in monitoring direction
ABB AG
1KGT 150 489 V016 1
4-3
Application Layer
Here is the list of data types which are used in controlling direction (which can be read
and controlled):
Data Variation
Description
RTU560 Types
Object
12
1
Control relay output block
SCO, DCO, RCO
2
Pattern control block
3
Pattern mask
40
0
Analog output status - all variations
ASO, DSO, BSO,FSO
1
32-bit analog output status
2
16-bit analog output status
3
Analog Output Status Single-prec flt-pt
with flag
41
1
32 bit analog output block*)
2
16 bit analog output block
3
Analog Output Single-prec flt-pt
70
3
File command
FDR, FTR
4
File command status
5
File transport
6
File transport status
7
File descriptor
Table 4-2: Table of data objects in control direction
For every data point these parameters have to be defined:

Option / Parameters
Class assignment for Binary 0, 1,2, 3
Inputs, Counters, Analog
Inputs
Default Object
See below
Group/Variation
Report with Time Of
Yes/No
Occurrence
Default
See
chapter 7 + 8
See
chapter 7 + 8
No
For DNP3 analog input data point these parameters have to be defined:
Option / Parameters
Event reporting
*)

Actual/first
Default
actual
the highest 16 bit are unused
4-4
1KGT 150 489 V016 1
ABB AG
Addressing
The sizes of the addressing fields for the station address can not be configured. The
sizes of the master ID is always 16 bit and the size of the slave ID is also always 16 bit.
The length of the index address is variable and could change on every telegram. Valid
sizes are 8, 16 or maximum 32 bit. The length of the index address is defined by three
bits in the control field of each telegram.
Option / Parameters
Index address length

Max. 4 octets
Master ID length
- not configurable - dynamically changed in dependency of the size of the

index address
2 octets
Slave ID length
- not configurable 2 octets

- not configurable -
Table 5-1:
Address elements
DNP3 supports separate address spaces for different data types. The following data
types with its own address space are:
Binary Inputs
Binary Outputs
Counter
Analog Inputs
Analog Outputs
ABB AG
1KGT 150 489 V016 1
5-1
Function Codes
6.1 Cold Restart

Process command to reset the whole RTU560
Supported
Data Types
Value
Command
Authority
Additional
Function Code: 13
None
None
None
6.2 Warm Restart

Process command to restart the DNP3 Host Interface
Supported
Data Types
Value
Command
Authority
Additional
Function Code: 14
None
None
None
6.3 Enable Unsolicited Message

Command to enable reporting of events by UNSOLICITED RESPONSE.
Supported
Data Types
Value
Command
Authority
Additional
ABB AG
Function Code: 20
None
None
None
1KGT 150 489 V016 1
6-1
Function Codes
6.4 Disable Unsolicited Message

Command to disable reporting of events by UNSOLICITED RESPONSE.
Supported
Data Types
Value
Command
Authority
Additional
Function Code: 21
None
None
None
6.5 Assign Class

Command to assign data points to a specific class.
Supported
Data Types
Value
Command
Authority
Additional
6-2
Function Code: 22
None
None
None
1KGT 150 489 V016 1
ABB AG
Data Types Monitoring Direction
7.1 SPI Single Point Information

Binary process information indicated by one bit:
Supported
Data Types
Filter
Default Variation
Additional
Data Object (Variations)

1 (0, 1, 2)
2 (0, 1, 2, 3)
If Filter is set the SPI is not transmitted to this NCC
Parameter: Filter (SPI- Protocol Address and Parameters)
Data Object 1: 1
Data Object 2: 2
None
Conversion of value
RTU560 internal communication
off
on
Protocol specific
0
1
Conversion of quality descriptors

BL
SB
NT
IV
ABB AG

Blocked
Substituted
Not Topical
Invalid
1KGT 150 489 V016 1
Protocol specific
- not used - not used - not used Status/Flag on-line
7-1
7.2 DPI Double Point Information

Binary process information.
Based on the application layer parameter , Double-bit binary support, the DPI information
will be transmitted to the NCC using the Object Type 1,2 or 3,4
If Double-bit binary is not supported, the DPI is indicated by two bits.DPIs are emulated
by use of two consecutive bits on DNP-protocol.
If Double-bit binary is supported, the DPI is indicated by data object 3 and 4.
Supported
Data Types
1 (0, 1, 2)
2 (0, 1, 2, 3)
3 (0, 1, 2)
4 (0, 1, 2, 3)
Filter
If Filter is set the DPI is not transmitted to this NCC
Parameter: Filter (DPI- Protocol Address and Parameters)
Default Variation Data Object 1: 1
Data Object 2: 2
Data Object 3: 1
Data Object 4: 2
Additional
None
Conversion of value
indeterminate
off
on
indeterminate
Protocol specific
00
10
01
11

BL
SB
NT
IV

Blocked
Substituted
Not Topical
Invalid
Protocol specific
7.3 EPI Protection Event Information

Binary process information indicated by two bits and relative time-tag (used by protection
relays).
7-2
1KGT 150 489 V016 1
ABB AG
The EPI is not supported in the DNP3 host interface.
ABB AG
1KGT 150 489 V016 1
7-3
7.4 STI Step Position Information

Binary process information indicated by 8 bit.
(In the DNP3 standard there are no step position information like STIs defined. STIs are
emulated by use of analog measurement.)
Supported
Data Types
30 (0, 1, 2, 3, 4)
32 (0, 1, 2, 3, 4)
Filter
If Filter is set the STI is not transmitted to this NCC
Parameter: Filter (STI- Protocol Address and Parameters)
Data Object 32: 4
Additional
Conversion of value
-63
+63
Protocol specific
-63
+63

OV
BL
SB
NT
IV
T
7-4

Overflow
Blocked
Substituted
Not Topical
Invalid
Transient Bit
1KGT 150 489 V016 1
Protocol specific
Flag Over-range
- not used -
ABB AG
7.5 BSI Bit String Information

Binary process information indicated by 8, 1 or 32 bit.
(In the DNP3 standard there are no bit strings like BSIs defined. BSIs are emulated by
use of analog measurement.)
Supported
Data Types
30 (0, 1, 2, 3, 4)
32 (0, 1, 2, 3, 4)
Filter
If Filter is set the BSI is not transmitted to this NCC
Parameter: Filter (BSI- Protocol Address and Parameters)
Data Object 32: 4
Additional
None
Conversion of value
Range min.
...
Range max.

0
...
BSI8: Bit mask of 8 bit;
range 0 ... 255
BSI16: Bit mask of 16 bit;
range 0 ... 65535
BSI32: Bit mask of 32 bit:
range 0 ... 4294967295
Protocol specific
0
255
65535
4294967295
(only variation 1.3)

OV
BL
SB
NT
IV
ABB AG

Overflow
Blocked
Substituted
Not Topical
Invalid
1KGT 150 489 V016 1
Protocol specific
Flag Over-range
7-5
7.6 ITI Integrated Totals Information

Binary process information indicated by 31 bit as a countered value.
Supported
Data Types
20 (0, 1, 2, 3, 4, 5, 6, 7, 8)
21 (0, 1, 2, 9, 10)
22 (0, 1, 2, 5, 6)
Filter
If Filter is set the ITI is not transmitted to this NCC
Parameter: Filter (ITI- Protocol Address and Parameters)
Data Object 21: 1
Additional
Freeze and Clear commands from other Host Interfaces will
interfere the DNP3 counter;
If Freeze (and Clear) is used for Counter interrogation,
Counters have to be configured as End of period wrap
around counter and must belong to a Counter Interrogation
Group not equal to Zero (PDP parameter).
If Counter Read Requests (FCode=1) are used, Counter have
to be configured with EPR/IR cycle, and they have to belong
to a Data point Class (Host parameter).
Freeze commands to counter, connected to a subordinated
device with DNP3 protocol, are not supported
Note: Due to internal sequences, it is necessary to perform a
Counter Freeze in order to get the actual counter value.
Conversion of value
Range min.
0
...
...
Range max.
65535
4294967295
Protocol specific
0
65535
for
20 (2, 4, 6, 8)
21 (2, 10)
4294967295 else

SEQ Sequence number
CY Carry
CA Adjusted
IV
Invalid
7-6
1KGT 150 489 V016 1
Protocol specific
ABB AG
7.7 DMI Digital Measured Information

Binary process information indicated by 8 or 16 bit used as a measured value from
digital inputs in normalized format.
(In the DNP3 standard there are no digital measurements like DMIs defined. DMIs are
emulated by use of analog measurements.)
Supported
Data Types
30 (0, 1, 2, 3, 4)
32 (0, 1, 2, 3, 4)
Filter
If Filter is set the DMI is not transmitted to this NCC
Parameter: Filter (DMI- Protocol Address and Parameters)
Data Object 32: 2
Additional
None
Conversion of value
Range min.
-100%
...
Range max.
...
+100%
Protocol specific
16-Bit: -32768
32-Bit: -2147483648
16-Bit: +32768
32-Bit: +2147483648

OV
BL
SB
NT
IV
ABB AG

Overflow
Blocked
Substituted
Not Topical
Invalid
1KGT 150 489 V016 1
Protocol specific
Flag Over-range
7-7
7.8 AMI Analog Measured Information

Analog process information used as a measured value from analog inputs in normalized
format.
Supported
Data Types
30 (0, 1, 2, 3, 4)
32 (0, 1, 2, 3, 4)
Filter
If Filter is set the AMI is not transmitted to this NCC
Parameter: Filter (AMI- Protocol Address and Parameters)
Default Variation
Data Object 30: 2
Data Object 32: 2
Type Variant
Standard
(only for virtual AMI) PEA Limit Excursion
(see chapter 7.8.1)
Additional
None
Conversion of value
Range min. -100%
...
...
Range max. +100%
Protocol specific
16-Bit: -32768
32-Bit: -2147483648
16-Bit: +32768
32-Bit: +2147483648

OV
BL
SB
NT
IV
7.8.1

Overflow
Blocked
Substituted
Not Topical
Invalid
Protocol specific
Flag Over-range
Analog Limit Excursion

For virtual AMIs defined in a PLC task a parameter Type Variant is available which
allows the configuration of an AMI Limit Excursion sequence.
The PLC includes the function to calculate analog sags and swells. It will report that with
the help of 4 AMI values with the same index address immediately sequenced. These
values are sent to the host as four consecutive 16bit analog input change events with
time.
The first value indicates a start value and time of an analog excursion, the second value
the maximum or minimum of the analog excursion with time, the third value the average
value and time of the analog excursion, and the fourth value the analog value and time
at the end of the excursion.
7-8
1KGT 150 489 V016 1
ABB AG
All four points are reported by exception within the same DNP 3.0 message. To
differentiate these points from other possible 16-bit analog points with time, the reserved
bit (i.e., the most significant bit, bit 7) in the analog point status flag, as part of the
message, is set to one.
Messages with static data will always report the actual value, not the whole sequence.
This value is indicated by the reserved bit set to zero.
7.9 MFI Measured Float Information

Analog process information indicated as a measured value from analog inputs in float
format.
Supported
Data Types

30 (0, 1, 2, 3, 4,5)
32 (0, 1, 2, 3, 4,5,7)
If Filter is set the MFI is not transmitted to this NCC
Parameter: Filter (MFI- Protocol Address and Parameters)
Data Object 30: 1
Data Object 32: 1
Minimum float Value
Minimum float value in the telegram, to be converted to -100%
(internal communication)
Maximum float Value
Maximum float value in the telegram, to be converted to +100%
(internal communication)
Filter
Default Variation
Additional
Conversion of value
Range min. -100%
...
...
Range max. +100%
Protocol specific
16-Bit: -32768
32-Bit: -2147483648
Single precision float: -3,4 1038
16-Bit: +32768
32-Bit: +2147483648
Single precision float: +3,4 1038

OV
BL
SB
NT
IV
ABB AG

Overflow
Blocked
Substituted
Not Topical
Invalid
1KGT 150 489 V016 1
Protocol specific
Flag Over-range
7-9
Data Types Control Direction
8.1 SCO Single Command Output

Binary process command (one bit)
Supported
Data Types
12 (1, 2, 3)
Command
None
Authority
Additional
DNP3 parameters Count, On Time and Off Time are not

supported;
Only one command can be selected concurrently
Conversion of value
Off (0)
On (1)
Protocol specific
0 x 81 (off)
0 x 41 (on)

SE

Select
Execute
Protocol specific
Select
Execute / Direct Operate
Conversion of cause of transmission

T
Test
Cause
Activation
Positive Activation
Confirmation
Negative Activation
Confirmation
Deactivation
Deactivation Confirmation
Activation Termination
ABB AG
1KGT 150 489 V016 1
Status field
- not used - not used in command direction0 - OK
1 Select timer timed out
2 Execute without previous select
3 Command format incorrect
4 Control operation not supported
5 Controlled object already in use
6- -Hardware problems
7 Local/Remote in Local position
8 Max. number of controllable objects
9 Insufficient authorization
- not supported - not supported - not supported -
8-1
8.2 DCO Double Command Output

Binary process command (two bits)
Supported
Data Types
12 (1, 2, 3)
Command
None
Authority
Additional

supported;
Only one command can be selected concurrently
Conversion of value
Off (01)
On (10)
Protocol specific
0 x 81 (off)
0 x 41 (0n)

SE
Select
Execute
Protocol specific
Select

T
Test
Cause
Activation
Positive Activation
Confirmation
Negative Activation
Confirmation
Deactivation
8-2
1KGT 150 489 V016 1
Status field
- not used - not used in command direction0 OK
7 Local/Remote in Local position
ABB AG
8.3 RCO Regulation Command Output

Regulation process command (two bits)
Supported
Data Types
12 (1, 2, 3)
Command
None
Authority
Additional

supported;
Only one command can be selected concurrently;
Regulating step command are in principle retriggerable
commands
Conversion of value
Lower (01)
Higher (10)
Protocol specific
0 x 81 (off)
0 x 41 (on)

SE

Select
Execute
Protocol specific
Select

T
Test
Cause
Activation
Positive Activation
Confirmation
Negative Activation
Confirmation
Deactivation
ABB AG
1KGT 150 489 V016 1
Status field
8-3
8.4 ASO Analog Setpoint Output

Analog process command
Supported
Data Types
41 (1, 2)
Command
None
Authority
Additional
Select Command is ignored;

Analog set-point output is a persistent output
Conversion of value
Range min. -100%
...
Range max.
...
+100%
Protocol specific
16-Bit: -32768
32-Bit: -2147483648
16-Bit: +32768
32-Bit: +2147483648

SE

Select
Execute
Protocol specific
Select

T
Test
Cause
Activation
Positive Activation
Confirmation
Negative Activation
Confirmation
Deactivation
Status field
CAUTION: Only 16 bit signed numbers are supported by i/o interfaces; Some Subdevice
Communication Interfaces support 32 bit signed numbers.
8-4
1KGT 150 489 V016 1
ABB AG
8.5 DSO Digital Setpoint Output

Digital process command
Supported
Data Types
41 (1, 2)
Command
None
Authority
Additional

Digital set-point output is a persistent output
Conversion of value
Range min. -100%
...
...
Range max. +100%
Protocol specific
16-Bit: -32768
32-Bit: -2147483648
16-Bit: +32768
32-Bit: +2147483648

SE

Select
Execute
Protocol specific
Select

Status field
T
Test
- not used Cause
Activation
- not used in command directionPositive Activation Confirmation 0 - OK
Negative Activation
Confirmation
8 Max. number of controllable
objects
Deactivation
- not supported Deactivation Confirmation
- not supported Activation Termination
- not supported -
ABB AG
1KGT 150 489 V016 1
8-5
CAUTION: Only 16 bit signed numbers are supported by i/o interfaces; Some Subdevice
Communication Interfaces support 32 bit signed numbers.
8-6
1KGT 150 489 V016 1
ABB AG
8.6 BSO Bit String Output

Digital process command (1, 2, 8 or 16 bit signed number)
Supported
Data Types
41 (1, 2)
Command
None
Authority
Additional

Always persistent output; instead of command deactivation a
new command with the data value 0 has to be generated.
Only the two most significant octets of a 32 bit value are
supported for local output.
Conversion of value
Range min. 0
...
...
Range max. BSO01: Bit mask of 1bit;
range ... 1
BSO02: Bit mask of 2 bit:
range ... 3
BSO08: Bit mask of 8 bit;
range ... 255
BSO16: Bit mask of 16 bit;
range ... 65535
Protocol specific
0
1
3
255
65535

SE

Select
Execute
Protocol specific
Select

T
Test
Cause
Activation
Positive Activation Confirmation
Negative Activation Confirmation
Deactivation
ABB AG
1KGT 150 489 V016 1
Status field
8 Max. number of controllable
objects
- not supported -
8-7
- not supported - not supported
8.7 FSO Floating point Setpoint Output

Analog process command expressed as floating point values.
Supported
Data Types

40 (1, 2,3)
41 (1, 2, 3)
None
Command
Authority
Data Object 41: 1
Additional
Floating set-point output is a persistent output
Conversion of value
Range min. -100%
...
Range max.
...
+100%
Protocol specific
16-Bit: -32768
32-Bit: -2147483648
Single Precision floating point: -3,4 1038
16-Bit: +32768
32-Bit: +2147483648
Single Precision floating point:
+3,4 1038

SE

Select
Execute
Protocol specific
Select

T
Test
Cause
Activation
Positive Activation
Confirmation
Negative Activation
Confirmation
Deactivation
8-8
1KGT 150 489 V016 1
Status field
- not supported -
ABB AG
ABB AG
1KGT 150 489 V016 1
- not supported - not supported -
8-9
File transfer
The file transfer is used for file exchange between a control center and a RTU560 or a
subordinated device.
The following file types can be transferred via the DNP protocol and can be configured
by RTUtil560.
GCD-configuration file
IOD-configuration file
OAD-configuration file
PTX-configuration file
PRO-configuration file
Disturbance recorder
UNDEF-file
Supported file types

Basic configuration file generated by RTUtil560
I/O configuration file generated by RTUtil560
Online update configuration information generated
by RTUtil560
Print text file generated by RTUtil560
PLC file generated by MULTIPROG wt
Disturbance recorder file of various devices (see
SCI description)
not specified in greater detail
Files which belongs to a subordinated devices are routed through the RTU560
The DNP protocol identifies its files only about a filename assignable by RTUtil560. This
can be any user defined ASCII string. The filename is the full path name and should be
correspond to the file name received from master.
Supported function codes

1
Read
2
Write
25
File open
26
File close
28
Get file info
30
Abort file transaction
129
Response to request
FC_readfnc_file
FC_writefnc_file
FC_open_file
FC_close_file
FC_get_file_info
FC_file_abort
FC_response_file
FC_delete_file
FC_file_authenticate
Supported
Variations
Command
Authority
ABB AG
Not supported function codes

27
File delete
29
File Authentication
VAR_FILE_COMMAND
VAR_FILE_COMMAND_STATUS
VAR_FILE_TRANSPORT
VAR_FILE_TRANSPORT_STATUS
VAR_FILE_DESCRIPTOR
None
1KGT 150 489 V016 1
3
4
5
6
7
9-1
File transfer

T
P/N
Cause
9.1
RTU560 host internal

Test
Positive/negative
confirmation
Spontaneous
Requested
File transfer
Protocol specific
Ignored
negative confirmation converted to
abort file transaction
Ignored
Ignored
Ignored
Download
The download of configuration files does not trigger any restarting mechanism in the
RTU560. For activating the new configuration file, the control centre has to issue a cold
restart command (FC_COLD_RESTART function code 13) after writing the files to the
RTU560.
The IOD- and GCD-configuration files are distributed to every CMU board in the system
concerned after download is completed. Configuration file distribution will only be done, if
the file belongs to the RTU560 itself. Otherwise the file transfer will only be routed to the
subordinated device it belongs to. In this case the file transfer handling is done by the
subordinated device (e.g. a RTU560).
PTX- and PRO-configuration files are only stored local if the download is completed. This
means, that archive or PLC functions using this configuration files have to be located on
the same CMU-board where the host communication interface is connected physically.
The distribution is completed if the close command (FC_close_file function code 26) is
confirmed on application layer level.
The close command is only confirmed positively when file transfer and file distribution
were successful. If a file transfer to a RTU560 is confirmed negatively the downloaded
file was not stored and the previous file is not deleted or overwritten.
9.2
Upload
All supported file types can also be uploaded from a RTU560 or subordinated devices.
9-2
1KGT 150 489 V016 1
ABB AG
10 Time Synchronization
10.1 General
The RTU560 supports different
synchronization can be done via
methods of
time synchronization.
The time
Radio Clock, sntp

Clock synchronization command from a control system
Clock synchronization command from a control system combined with an external
minute pulse
A combination of up to eight of these time sources
Parameter: Time Administration

External Minute Pulse
(RTU560-Parameter)
(RTU560-Parameter)
The DNP3 IIN Time request from Master value is set at start up of the RTU560 and as
soon as 90% of the Time synchronization lost timeout value (RTU560-Parameter) is
reached.
Time base drift over a 10-minute interval: < 1 m sec
(2 to 3 hours after first time synchronization)
Maximum internal time reference error when set from the protocol: 5 m sec
10.2 Maximum response time

The maximum response time depends on the telegram, but will not exceed 100 m sec
ABB AG
1KGT 150 489 V016 1
10-1
Time Synchronization
10.3 Serial line-based communication

The DNP3 function Delay Measurement (function code 23) is supported and returns the
time period the Delay Measurement function takes to be parsed and executed in the
RTU560.
Supported
Data Types
Values
Command
Authority
Additional

50 (1)
complete time and date information
None
None
Maximum Delay Measurement Error: 10 msec
10.4 IP-based communication

The DNP3 function Record Current Time (function code 24) is supported [Transporting
DNP V3.00 over Local and Wide Area Networks, DNP Users Group, Chap. 6]. The time
of reception of the last octet of the Record Current Time request is recorded and is
used to set the clock accordingly to the Write request with a Time And Date at Last
Recorded Time object (obj 50, var 3).
Supported
Data Types
Values
Command
Authority
Additional
10-2

50 (3)
complete time and date information
None
None
1KGT 150 489 V016 1
ABB AG
11 Class Data Polling

The class data polling includes single point information (with RTU560 System Events),
step positions, measured values, bit strings and integrated totals.
The assignment of a data point to a class is configurable in the tool RTUtil560 (Default
Object Variation).
Within a class data polling, the data types are sent with their default variation.
Remember that before you do a static data poll (Class 0) you should do an event data
poll (Class 1, 2 or 3). The event data is stored in the COS or SOE buffer. These buffers
are cleared by polling for event data. If you poll for static data you will get the current
value. If you poll for event data then you get the events stored in the buffers. If the
events are older then the event poll may returns an older value as the static poll.
Supported
Data Types
Values
Command
Authority
Additional
ABB AG

60 (1, 2, 3, 4)
0
None
None
1KGT 150 489 V016 1
11-1
12 Line Redundancy
RTU560 supports redundant lines for the DNP3 host communication interface. It is
possible to have:
Up to 4 redundant serial lines per DNP3 HCI.
Up to 2 redundant Ethernet lines per DNP3 HCI.
A combination of redundant serial lines and redundant Ethernet lines per DNP3
HCI: Up to 4 redundant serial lines and up to 2 redundant Ethernet lines.
General functions:
All redundant lines of a DNP3 HCI have the same addressing for data points and
commands and the same master/slave addresses.
Serial lines can be configured with different connection speeds.
There is no preferred line. All hosts can connect via the lines to the RTU at the
same time.
Class reports can be requested by any line. While a report on one line is active
class reports requested from other lines will be negatively acknowledged with the
flag ALREADY_EXEC.
Unsolicited responses are sent through one of the connected lines.
The configuration of redundant lines is part of the RTU560 configuration tool RTUtil560.
The redundant lines of a DNP3 HCI have to be connected to the same CMU board.
Configuration with RTUtil560:
For redundant serial lines link the line up to 4 serial ports of the same CMU
board.
For redundant Ethernet lines link the line to one Ethernet interface and enter two
IP addresses.
For a combination of redundant serial lines and redundant Ethernet lines link the
line up to 4 serial ports and one Ethernet interface and enter up to 2 IP
addresses.
ABB AG
1KGT 150 489 V016 1
12-1
13 System Events
The host interface manages internal status messages of the RTU560. These status
messages can be created from the host itself or other activities of the RTU560. The
system events of other activities are sent via internal communication and are processed
by the HCI. The system events of a RTU are sent as SPI messages through the DNP
protocol. Therefore an own information object address is needed.
ABB AG
1KGT 150 489 V016 1
13-1
RTU560 Host Communication Interface with DNP3
This information address is the address for the system event. System events are sent
spontaneous as SPI with or without timestamp:
Description of system event

At least one indication faulty
At least one analog value faulty
At least one digital value faulty
At least one pulse counter value faulty
At least one command is faulty
At least one setpoint command is faulty
At least one digital output is faulty
RTU is faulty
RTU is active
RTU is synchronized
External clock is inoperable
Local printer is offline
At least one indication oscillating
System battery low (RTU560E only)
AC power supply failed (RTU560E only)
At least one DCE faulty
Device connected
At least one PLC function not running
At least one PLC function cycle time exceeded
RTU is inoperable
RTU is out of service
Power supply failure in communication sub rack (CSR)
Command supervision circuit z disconnected or faulty, 1 z 32
SNTP client 1 is synchronized
SNTP client 2 is synchronized
Local control authority active
Host x is Online, 1 x 16
Host interface x: At least one change of information lost, 1 x 16
Host Interface x: At least one pulse counter lost, 1 x 16
CMU in rack 0, slot x is inoperable, 1 x 8
CMU in rack 1, slot x is inoperable, 1 x 8
CMU in rack 1, slot 10 is inoperable (23ET24S only)
Device reachable on redundant line x, 1 x 4
Device active on redundant line x, 1 x 4
Device preferred on redundant line x, 1 x 4
Network element x is operable, 1 x 32
CMU in rack 0, slot x is active, 1 x 8
CMU in rack 1, slot x is active, 1 x 8
CMU in rack 1, slot 10 is active (23ET24 only)
Process command collision with host X, 1 x 16
Process command collision with Integrated HMI
Process command collision with webserver
Process command collision with PLC
13-2
1KGT 150 489 V016 1
Address
#016
#017
#018
#019
#020
#021
#022
#023
#024
#025
#026
#027
#028
#029
#030
#044
#045
#046
#047
#048
#049
#059
#064 ... #095
#096
#097
#100
#101 ... #116
#117 #132
#133 #148
#149 #156
#157 #164
#166
#180 #183
#184 #187
#188 #191
#192 #223
#224 #231
#232 #239
#240
#242-#257
#258
#259
#260
ABB AG
14 Interoperability List
Following interoperability definitions are copied from DNP V3.0 Subset Definitions, the
original numbering and layout is maintained.
DNP V3.00
DEVICE PROFILE DOCUMENT
Vendor Name:
ABB AG
Power Technologies Division
Power Technology Systems
Device Name:
RTU560
Highest DNP Level

Supported:
Device Function:
Master
Slave
For Requests
Level 3
(No Counter Events)
For Responses
Level 3
(No Counter Events)
Notable objects, functions, and/or qualifiers supported in addition to the Highest DNP
Levels Supported (the complete list is described in the attached table):
See attached table.
Maximum Data Link Frame

Size (octets):
Transmitted
Received
ABB AG
292
(must be 292)
Maximum Application Fragment Size (octets):

Transmitted
4096
(if >2048, must be configurable)
Received
1KGT 150 489 V016 1
2048
(must be >= 249)
14-1
Interoperability List
Maximum Application Layer Re-tries:
Maximum Data Link Re-tries:
None
Configurable, range 0 to 255
(Fixed is not permitted)
None
Fixed at _______________________
Configurable, range __0_ to _15____
Requires Data Link Layer Confirmation:
Never
Always
Sometimes If 'Sometimes', when? __________________________________
Configurable
If 'Configurable', how?
Never, always, on large AL segments
Requires Application Layer Confirmation:

Never
Always (not recommended)
When reporting Event Data (Slave devices only)
When sending multi-fragment responses (Slave devices only)
Sometimes If 'Sometimes', when?_________________________________
Configurable
If 'Configurable', how?
Never, Always, When reporting event data
Timeouts while waiting for:

Data Link Confirm
Complete Appl. Fragment
Application Confirm
Complete Appl. Response
None
None
None
None
Fixed at _________
Fixed at _________
Fixed at _________
Fixed at _________
Variable
Variable
Variable
Variable
Configurable
Configurable
Configurable
Configurable
Others_____________________________________________________________________
14-2
1KGT 150 489 V016 1
ABB AG
Sends / Execute Control Operations

WRITE Binary Outputs
Never,
Always,
Sometimes,
Configurable
Select / Operate
Never,
Always,
Sometimes,
Configurable
Direct Operate
Never,
Always,
Sometimes,
Configurable
Direct Operate, no ACK
Never,
Always,
Sometimes,
Configurable
Count > 1
Never,
Always,
Sometimes,
Configurable
Pulse ON
Never,
Always,
Sometimes,
Configurable
Pulse OFF
Never,
Always,
Sometimes,
Configurable
Latch ON
Never,
Always,
Sometimes,
Configurable
Latch OFF
Never,
Always,
Sometimes,
Configurable
Note: Latch ON/OFF for Single Command Output (SCO) only
Queue
Never,
Always,
Sometimes,
Configurable
Clear Queue
Never,
Always,
Sometimes,
Configurable
Reports Binary Input Change Events

when no specific variation requested:
Reports time-tagged Binary Input Change Events

when no specific variation requested:
Never
Binary Input Change With Time
Binary Input Change With Relative Time
Configurable
Never
Only time-tagged
Only non-time-tagged
Configurable to send both, one or the
other
Sends Static Data in Unsolicited Responses:
Sends Unsolicited Responses:
Never
When Device Restarts
When Status Flags Change
Never
Configurable
Only certain objects
Sometimes
No other options are permitted.

ENABLE/DISABLE UNSOLICITED
Function codes supported
Default Counter Object/Variation:
Counters Roll Over at:

No Counters Reported
Configurable
16 Bits
32 Bits
Other Value _____________
Point-by-point list attached
No Counters Reported
Configurable
Default Object 20
Default Variation
1
Point-by-point list attached
Sends Multi-Fragment Responses:
ABB AG
Yes
No
1KGT 150 489 V016 1
14-3
The following implementation table includes all object variations, function codes and
qualifiers which must be supported for DNP3-L3.
OBJECT
REQUEST
RESPONSE
(slave must parse)
14-4
Obj
Va
r
Description
1
1
2
1
2
0
10
10
10
12
1
2
0
12
12
Binary Input - All

Variations
Binary Input
Binary Input with Status
Binary Input Change - All
Variations
Binary Input Change
without Time
Binary Input Change with
Time
Binary Input Change with
Relative Time
Double-bit Binary Input All Variations
Double-bit Binary Input
Packed format
With flags
Event - All Variations
Event Without time
Event With absolute
time
Event With relative time
Binary Output - All
Variations
Binary Output
Binary Output Status
Control Block - All
Variations
Control Relay Output
Block
Pattern Control Block
12
Pattern Mask
(master must parse)
Func.
Codes
(dec)
1, 22
Qual.
Codes (hex)
1
1
1, 22
00,01,06
00,01,06
06,07,08
129, 130
129, 130
00, 01
00, 01
06,07,08
129, 130
17, 28
06,07,08
129, 130
17, 28
06,07,08
129, 130
17, 28
1,22
06,07,08
129,130
17, 28
06,07,08
129,130
17, 28
06,07,08
129,130
17, 28
1,22
06,07,08
129,130
17, 28
06,07,08
129,130
17, 28
06,07,08
129,130
17, 28
06,07,08
129,130
17, 28
00,01,06
00,01,06
129, 130
00, 01
3, 4, 5, 6
17, 27, 28
129
5, 6
17, 28
129
5, 6
00, 01
129
echo of
request
echo of
request
echo of
request
1KGT 150 489 V016 1
Func.
Codes
Qual.
Codes
(hex)
00,01,06
ABB AG
OBJECT
Obj
Var
20
20
20
20
20
20
20
20
20
21
21
21
21
21
21
3
4
5
21
21
21
21
21
10
21
11
21
12
ABB AG
REQUEST
RESPONSE
(slave must parse) (master must parse)
Description
Func.
Qual.
Func.
Qual.
Codes
Codes
Codes
Codes
(dec)
(hex)
(hex)
Binary Counter - All Variations
1, 7, 8,
00,01,
9, 10,
06
22
32-Bit Binary Counter
1
00,01,
129,
00, 01
06
130
16-Bit Binary Counter
1
00,01,
129,
00, 01
06
130
32-Bit Delta Counter
1
00,01,
129,
00, 01
06
130
16-Bit Delta Counter
1
00,01,
129,
00, 01
06
130
32-Bit Binary Counter without Flag 1
00,01,
129,
00, 01
06
130
16-Bit Binary Counter without Flag 1
00,01,
129,
00, 01
06
130
32-Bit Delta Counter without Flag
1
00,01,
129,
00 ,01
06
130
16-Bit Delta Counter without Flag
1
00,01,
129,
00 ,01
06
130
Frozen Counter - All Variations
1, 22
00,01,
06
32-Bit Frozen Counter
1
00,01,
129,
00, 01
06
130
16-Bit Frozen Counter
1
00,01,
129,
00, 01
06
130
32-Bit Frozen Delta Counter
32-Bit Frozen Counter with Time
of Freeze
16-Bit Frozen Counter with Time
of Freeze
32-Bit Frozen Delta Counter with
Time of Freeze
16-Bit Frozen Delta Counter with
Time of Freeze
32-Bit Frozen Counter without
1
00,01,
129,
00, 01
Flag
06
130
16-Bit Frozen Counter without
1
00,01,
129,
00, 01
Flag
06
130
without Flag
without Flag
1KGT 150 489 V016 1
14-5
OBJECT
Obj
Var
22
22
22
22
22
22
22
22
22
23
23
23
23
23
23
23
23
23
30
Counter Change Event - All

Variations
32-Bit Counter Change Event
without Time
16-Bit Counter Change Event
without Time
32-Bit Delta Counter Change
Event without Time
Event without Time
32-Bit Counter Change Event with
Time
16-Bit Counter Change Event with
Time
Event with Time
Event with Time
Frozen Counter Event - All
Variations
32-Bit Frozen Counter Event
without Time
16-Bit Frozen Counter Event
without Time
Event without Time
Event without Time
32-Bit Frozen Counter Event with
Time
16-Bit Frozen Counter Event with
Time
Event with Time
Event with Time
Analog Input - All Variations
30
32-Bit Analog Input
30
16-Bit Analog Input
30
32-Bit Analog Input without Flag
30
16-Bit Analog Input without Flag
30
Analog Input Single-prec flt-pt
14-6
Description
REQUEST
RESPONSE
(slave must parse) (master must parse)
Func.
Qual.
Func.
Qual.
Codes
Codes
Codes
Codes
(dec)
(hex)
(hex)
1
06, 07,
08
1
06, 07,
129,
17, 28
08
130
1
06, 07,
129,
17, 28
08
130
1
1
1, 22
1KGT 150 489 V016 1
06, 07,
08
06, 07,
08
129,
130
129,
130
17, 28
00,01,
06
00,01,
06
00,01,
06
00,01,
06
00,01,
06
00,01,
129,
130
129,
130
129,
130
129,
130
129,
00, 01
17, 28
00, 01
00, 01
00, 01
00, 01
ABB AG
with flag
ABB AG
06
1KGT 150 489 V016 1
130
14-7
OBJECT
REQUEST
(slave must parse)
RESPONSE
(master must
parse)
Obj
Va
r
31
31
31
31
1
2
3
31
31
31
32
32
32
32
32
32
32
33
33
33
33
33
40
40
Frozen Analog Input - All

Variations
32-Bit Frozen Analog Input
32-Bit Frozen Analog Input with
Time of Freeze
16-Bit Frozen Analog Input with
Time of Freeze
without Flag
without Flag
Analog Change Event - All
Variations
32-Bit Analog Change Event
without Time
16-Bit Analog Change Event
without Time
32-Bit Analog Change Event with
Time
16-Bit Analog Change Event with
Time
Analog Input Event Single-prec
flt-pt without time
Analog Input Event Single-prec
flt-pt with time
Frozen Analog Event - All
Variations
32-Bit Frozen Analog Event
without Time
16-Bit Frozen Analog Event
without Time
32-Bit Frozen Analog Event with
Time
16-Bit Frozen Analog Event with
Time
Analog Output Status - All
Variations
32-Bit Analog Output Status
40
16-Bit Analog Output Status
40
41
Analog Output Status Singleprec flt-pt with flag

Analog Output Block - All
Variations
14-8
Description
Func.
Codes
(dec)
1, 22
1
1
1
1
1
1
1
1
1KGT 150 489 V016 1
Qual.
Codes
(hex)
06,07,
08
06,07,
08
06,07,
08
06,07,
08
06,07,
08
06,07,
08
06,07,
08
00,01,
06
00,01,
06
00,01,
06
00,01,
06
Func.
Codes
Qual.
Codes
(hex)
129,130
17,28
129,130
17,28
129, 130
17, 28
129, 130
17, 28
129, 130
17, 28
129, 130
17, 28
129, 130
00, 01
129, 130
00, 01
129, 130
00, 01
ABB AG
41
32-Bit Analog Output Block
OBJECT
3, 4, 5, 6
17, 28
129
REQUEST
echo of
request
RESPONSE
(slave must parse)
(master must
Func.
Codes
(dec)
3, 4, 5, 6
Qual.
Codes
(hex)
17, 28
Func.
Codes
129
3, 4, 5, 6
17, 28
129
parse)
Obj
Va
r
41
16-Bit Analog Output Block
41
Analog Output Single-prec fltpt
ABB AG
Description
1KGT 150 489 V016 1
Qual.
Codes
(hex)
echo of
request
echo of
request
14-9
OBJECT
parse)
Obj
Var
REQUEST
(slave must parse)
Description
Func.
Codes
(dec)
Qual.
Codes
(hex)
RESPONSE
(master must
Func.
Codes
Qual.
Codes
(hex)
129, 130
07,
quantity
=1
07,
quantity
=1
50
50
0
1
Time and Date - All Variations

Time and Date
50
50
2
3
Time and Date with Interval

Time and Date at last recorded
time
51
51
Time and Date CTO - All

Variations
Time and Date CTO
51
Unsynchronized Time and Date

CTO
52
52
0
1
Time Delay - All Variations

Time Delay Coarse
129
52
Time Delay Fine
129
60
60
60
60
0
1
2
2
Class 0 Data
Class 1 Data
Class 1 Data
60
60
3
3
Class 2 Data
Class 2 Data
60
60
4
4
Class 3 Data
Class 3 Data
70
70
3
4
File Command
File Command Status
70
70
70
5
6
7
File Transport
File Transport Status
File Descriptor
14-10
1, 2
07
where
quantity
=1
07
where
quantity
=1
129, 130
1
1
20, 21,
22
1
20, 21,
22
1
20, 21,
22
25
26, 30,
1
1, 2
28
1KGT 150 489 V016 1
07,
quantity
=1
07,
quantity
=1
06
06,07,08
06
06,07,08
06
06,07,08
06
11
11
11
11
129
11
129
129
129
11
11
ABB AG
OBJECT
REQUEST
slave must parse)
RESPONSE
(master must
parse)
Obj
Va
r
Description
80
Internal Indications
Func.
Codes
(dec)
2
81
82
83
83
90
100
100
100
101
101
1
1
1
2
1
1
2
3
1
2
101
Storage Object
Device Profile
Private Registration Object
Private Registration Object Descriptor
Application Identifier
Short Floating Point
Long Floating Point
Extended Floating Point
Small Packed Binary-Coded Decimal
Medium Packed Binary-Coded
Decimal
Large Packed Binary-Coded Decimal
No Object
No Object
13
23
Qual.
Codes
(hex)
00
index=7
Func.
Codes
Qual.
Codes
(hex)
Note:
We reserve the right to make technical changes or modify the contents
of this document without prior notice. With regard to purchase orders,
the agreed particulars shall prevail. ABB AG does not accept any
responsibility whatsoever for potential errors or possible lack of
information in this document.
We reserve all rights in this document and in the subject matter and
illustrations contained therein. Any reproduction, disclosure to third
parties or utilization of its contents - in whole or in parts - is forbidden
without prior written consent of ABB AG.
Copyright 2011 ABB
All rights reserved
ABB AG
1KGT 150 489 V016 1
14-11

E560 Dnp3 Host

Uploaded by

Copyright:

Available Formats

E560 Dnp3 Host

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

E560 Dnp3 Host

Uploaded by

Copyright:

Available Formats

RTU560

Remote Terminal Unit

This manual describes the RTU560 Host Communication

1KGT 150 489 V016 1

1KGT 150 489 V016 1

RTU560 Host Communication Interface with DNP3.0

1KGT 150 489 V016 1

ABB Utility Automation GmbH

PHYSICAL LAYER .......................................................................... 1-1

LINK LAYER .................................................................................... 2-1

General ................................................................................................... 2-1

TRANSPORT LAYER ...................................................................... 3-1

APPLICATION LAYER .................................................................... 4-1

ADDRESSING .................................................................................. 5-1

FUNCTION CODES ......................................................................... 6-1

Serial line-based communication ............................................................. 1-1

Cold Restart ............................................................................................ 6-1

1KGT 150 489 V016 1

RTU560 Host Communication Interface DNP3

Disable Unsolicited Message ................................................................... 6-2

DATA TYPES MONITORING DIRECTION ...................................... 7-1

SPI Single Point Information................................................................. 7-1

DATA TYPES CONTROL DIRECTION ........................................... 8-1

SCO Single Command Output .............................................................. 8-1

FILE TRANSFER ............................................................................. 9-1

Download ................................................................................................ 9-2

10 TIME SYNCHRONIZATION ........................................................... 10-1

11 CLASS DATA POLLING................................................................ 11-1

1KGT 150 489 V016 1

Communication and Data Processing Unit

Analog Measured value Input

Analog Set point command Output

Bus Connection Unit

Bit String Input (8, 16 bit)

Bit String Output (1, 2, 8, 16 bit)

Command Supervision Channel

Clock Synch Command

Cyclic Redundancy Check

Common Time Object

Double Command Output

Digital Measured value Input (8, 16 bit)

Double Point Input

Digital Set point command Output (8, 16 bit)

Event of Protection equipment Input (1bit)

General Configuration Data

Host Communication Interface

Intelligent Electronic Device

I/O Controller (Controller on I/O Board)

Input Output Data

I/O Bus Master (Function of SLC)

1KGT 150 489 V016 1

RTU560 Host Communication Interface DNP3

Integrated Totals Input

Analog Measured value Floating Input

Main Processing Unit

Network Control Center

Peripheral Bus Processor

Process Data Processing

Programmable Logic Control