Eaton VaultGard communications device Operating instructions

Contents

Description Page

1: Introduction ............................2

2: Features, Functions, Benefits, and

Specifications ...........................5

3: VaultGard Functional Overview .............6

4: Alarms ...............................12

5: Logs .................................13

6: VaultGard Set-up and Configuration ........17

7: Device Configuration ....................46

8: Field Bus Configuration ..................68

9: System Setup Using the Serial Port ........74

10: Documentation .......................77

September 2016

Supersedes March 2014

Instruction Booklet IL02400002E

VaultGardE

Instruction Booklet

2

Instruction Booklet IL02400002E

September 2016

EATON www.eaton.com

VaultGard

Instruction Booklet

Section 1: Introduction

1.1 General Information

The VaultGardE from Eaton is the next generation communications

product for Network Protectors, providing monitoring and remote

control for vault systems. Certain to be your number one preventive

maintenance tool, the VaultGard will discover network issues before

they cause costly system-wide problems.

Incorporating the latest in Eaton’s innovative technology, the

VaultGard can connect up to 32 devices through existing shielded

twisted pair (STP) cable, and is rated for the harsh environmental

stresses typically found in underground vaults.

With easy to navigate, on-board web pages accessible through

Wi-Fi, cellular, or Ethernet connectivity, the VaultGard can efficiently

interact with a variety of network relays. Additionally, data can link to

existing Supervisory Control and Data Acquisition (SCADA) systems

via DNP 3.0 protocol.

The integrated graphics display provides expanded capabilities and

enhanced functionality that tracks such vital network protector per-

formance metrics as:

• Device (address including status and MPCV relay reason codes);

• Breaker position and alarms;

• Phase currents;

• Network, transformer, and phasing voltages;

• Operations counter;

• Power metrics: Real (kW), Reactive (VAR), and Power factor;

• Positive sequence angle and positive sequence voltage;

• Sensor input: captures wireless current sensor and temperature

data; and

• Real time MPCV vector graphic display.

Figure 1. Typical Phasor Plot.

The VaultGard also offers alarms, logging of captured relay data, and

setpoint control. The User can view this MPCV data through a series

of phasor plots that illustrate real-time load data along with setpoint

trip and close boundary characteristics.

These plots automatically adjust to reflect the current relay state

and curves, and can be used to detect errors, send alerts, and show

where problems exist within the network. This functionality is pre-

installed and no additional software is required.

3

Instruction Booklet IL02400002E

September 2016

EATON www.eaton.com

VaultGard

Instruction Booklet

1.2 Hardware

The VaultGard is housed in a secure enclosure with numerous input

and output ports to support many applications. Some of these fea-

tures include:

• Support for up to 32 devices on STP cable;

• DNP 3.0 SCADA interface via RS-485 serial DNP;

• DNP UDP/IP & TCP/IP uplinks;

• RS-485 DNP 3.0 sub-network for third party DNP communicating

devices;

• Wireless functionality to capture sensor data;

• Port for remote connectivity to the unit: Wi-Fi (WAP), cellular, LAN

• Configurable threshold-based alarming with e-mail notification;

• Real-time clock for historical logging of captured and time

stamped data; and

• Monitoring of the remote digital inputs and outputs as well as

third party devices on accepted protocols.

Figure 2. Secure LAN.

1.3 VaultGard Outputs

The VaultGard’s RJ-45 output port provides a User friendly interface

for both local and long-range remote access, and control of network

protector relays. Options for the wireless functionality include:

• Wi-Fi: This wireless technology uses the IEEE standard of

802.11b/g for the wireless local area network. For security, the

wireless signal uses WPA encryption as well as a unique user-

name and password. One can access the relays locally with a

laptop with a standard wireless card. The ability to wirelessly

connect to the network relays through the at a distance of nearly

330 ft from the vault provides safety and cost advantages over

labor-intensive vault entry.

• Cellular: A cellular modem can be used to broadcast a signal to a

local cellular tower. This signal can be transmitted over long dis-

tances to a main office or used to send e-mail and phone alerts.

• Secure LAN:·An Ethernet cable can be connected directly to

VaultGard’s Ethernet port to transmit data over a Local Area

Connection providing the high data-transfer rates, smaller geo-

graphic area, and lack of a need for leased telecommunication

lines.

• Fiber Optic Transceiver - a fiber optic transceiver can interface

with two types of cables, single mode and multimode. Single

mode permits signal transmission at extremely high band-

width and allows very long transmission distances (>1000 ft).

Multimode describes distances of transmission and transmission

bandwidths are less than with single mode fiber due to disper-

sion. Some fiber optic transceivers can be used for both single

mode and multimode cables.

• More than one option with an Ethernet switch to unify the entire

system; simultaneous, full-duplex, high-speed communication on

all ports, no network performance bottlenecks.

1.4 Power XpertT Software Compatibility

Power XpertT is an optional application that provides a centralized

program linking all units in a network. The Layout Manager software

within Power Xpert shows:

• Two-dimensional layouts of facilities;

• Alarm and status indicators for specified channels;

• Gauges/dials displaying values from specified channels and sys-

tem behavior;

• One-line diagrams showing the status of specified channels; and

• Importation of GIS image(s) or existing topography for street/vault

maps.

4

Instruction Booklet IL02400002E

September 2016

EATON www.eaton.com

VaultGard

Instruction Booklet

1.5 Additional Functionality

The VaultGard can also capture data from other external sensors that

transmit their signals via wireless protocol. The VaultGard acts as a

central hub for collecting vault data, controlling relays remotely, and

communicating vital network data to the User.

Figure 3. The VaultGardE and Remote Vaults are Connected Through the Daisy Chaining of Relays.

5

Instruction Booklet IL02400002E

September 2016

EATON www.eaton.com

VaultGard

Instruction Booklet

Section 2. Features, Functions, Beneﬁts, and

Speciﬁcations

2.1 Features

• Next generation communications product for Network Protectors;

• Connect up to 32 MPCV devices on 1 unit;

• Easy to navigate, on-board web pages (no software needed);

• Comprehensive data monitoring (voltage, current, power metrics,

etc.);

• Compatible with the optional Power Xpert software application to

integrate entire network of VaultGard Units; and

• Compatible with wireless current sensors for vital cable loading

data.

Figure 4. Screenshot of the VaultGard Interface.

2.2 Functions

• Monitoring and remote control for a vault system;

• Wi-Fi, cellular, or ethernet connectivity to on-board web pages

through a web browser (ex. Internet Explorer);

• DNP 3.0 protocol compatibility;

• Configuration for master/slave topologies for integration with a

local SCADA system;

• Alarms, logging (live and historical)/trending/graphing of captured

data, and setpoint control;

• E-mail alert notification;

• Captures wireless current sensor data; and

• Monitoring and control of accepted digital I/O devices.

2.3 Benefits

• No software is required.

• Central hub for collecting vault data, controlling relays remotely,

and communicating vital network data to the User.

• Acts as a preventive maintenance tool to discover issues before

they cause costly, system-wide problems.

2.4 Specifications

Serial Ports

• INCOM Shield Twisted Pair (support for up to 32 devices)

• Isolated RS-485 Port for DNP Field Bus

• Isolated RS-485 Port for DNP SCADA

• DNP 3.0 Level 3 without Freeze Functionality

Devices Supported

• MPCV Relay

• Arc Flash Reduction Maintenance System Indicating Diagnostics

Module (NPARMs-IDM)

• Digital Input Module (DIM) with 8 Digital Inputs

• Digital Relay Accessory Module (DRAM) with 4 Relay Outputs

• Wireless Collector with Support for up to 24 Wireless Sensors

DNP Field Bus Devices Supported

• Transformer Analog Input Module

Ethernet

• 10/100 Mb/s

Environmental

• Operating Temperature: 40 to +70°C (-40 to +158°F)

• Storage Temperature: -40 to +85°C (-40 to +185°F)

Power Supply

• Power Consumption: 4 W max.

• 12 Vdc: 130 mA nominal, 300 mA max.

Physical

• Height: 2.17 in. (55.12 mm)

• Width: 4.67 in. (118.62 mm)

• Length: 6.73 in. (170.94 mm)

6

Instruction Booklet IL02400002E

September 2016

EATON www.eaton.com

VaultGard

Instruction Booklet

Section 3: VaultGard Functional Overview

3.1 Data View

The Data View section allows the User to access six different views:

• System View;

• Feeders;

• Protectors;

• Vaults;

• Spot Network View; and

• System Status View.

Each of the views displays information about the devices (i.e., MPCV

relays, Transformer Analog Input Monitors, DIM, DRAM, NP ARMs,

Wireless Sensors, etc.) connected to VaultGard.

3.1.1 System View

The System View is the first page that appears when logging into

the VaultGard. It displays the data for all of devices being scanned

by the VaultGard. By clicking the button, the User

can view the devices by their names or INCOM addresses.

Figure 5. System View.

Clicking on the relay name or address transitions to the relay phasor

view page. The phasor view includes a graphical view of the relay’s

real time data overlaid on the settings. Refer to section 7.1 for more

details.

The System View page also displays summary tables for analog and

digital input devices and sensors.

7

Instruction Booklet IL02400002E

September 2016

EATON www.eaton.com

VaultGard

Instruction Booklet

3.1.2 Feeder View

The Feeder View provides a tabular display of the protectors config-

ured for each feeder. Select the feeder to view from the drop down

list.

Figure 6. Feeder View.

8

Instruction Booklet IL02400002E

September 2016

EATON www.eaton.com

VaultGard

Instruction Booklet

3.1.3 Protector View

The Protector View displays a table showing summary data for all

the protectors being scanned by VaultGard. This feature will need

to be set up before any information or data can be displayed on the

page. Refer to Section 7.3 for the initial set up.

Figure 7. Protector View.

Clicking on the Protector name brings the User to a page that dis-

plays a graphical drawing of the transformer and protector. This

page displays the following information and controls:

• Transformer and network voltages;

• Status of the MPCV relay;

• Power metrics: Real (kW), Reactive (kVAR), and Power Factor;

• Transformer analog sensor input (pressure, level, and temp.);

• Activate ARMS device and Rem-Rack (Rack-IN); and

• PRI cable and switch.

Figure 8. Protector Graphical View.

9

Instruction Booklet IL02400002E

September 2016

EATON www.eaton.com

VaultGard

Instruction Booklet

The User can also click on to display the real-

time MPCV relay phasor plot. For more information refer to

Section 7.3.

3.1.4 Vault View

The Vault View provides a tabular display of the protectors and I/O

points assigned to each vault. Select the vault to view from the

drop down list.

Figure 9. Vault View.

10

Instruction Booklet IL02400002E

September 2016

EATON www.eaton.com

VaultGard

Instruction Booklet

3.1.5 Spot Network View

The Spot Network View displays data for all protectors within the

specified spot network. The page displays phase currents, trans-

former voltages, power factor, operation counter, and status of the

protector. The User can add up to eight protectors per spot network.

This feature will need to be set up before any information or data

can be displayed on the page. Relays that still need to be added

to a spot network will fall under “Unassociated Devices”. Refer to

Section 7.4 for the initial setup.

Figure 10. Spot Network View.

Clicking on the spot network name brings the User to a page that

displays the virtual drawings of protectors in the spot. The green

and red semi-circles represent an open and closed protector, respec-

tively. Just below the drawings is a summary of the protector’s

state and operational counter.

11

Instruction Booklet IL02400002E

September 2016

EATON www.eaton.com

VaultGard

Instruction Booklet

3.1.6 System Status View

This view gives a status summary of the VaultGard operating sys-

tem. Information such as total operating time, memory usage, and

process status is displayed on this screen. For example, if commu-

nication was lost with all INCOM devices, the User can refer to this

page and verify that the connection with INCOM is operational.

Figure 11. System Status.

12

Instruction Booklet IL02400002E

September 2016

EATON www.eaton.com

VaultGard

Instruction Booklet

Section 4: Alarms

An alarm occurs when a parameter value reaches an alarm limit.

An e-mail will be sent to the predefined addresses for devices that

have been configured for alarms and e-mail. Alarms are supported

for MPCV relays, sensors, and protectors. Refer to section 7.1.4 for

detailed instructions to configure a device for alarming.

4.1 Alarm Status

Clicking on Alarm Status will display a page with a list of the alarms

that have occurred, the condition of each alarm, and all devices that

are currently alarmed.

VaultGard displays alarms communicated from individual devices or

generated in VaultGard based on a data value excursion beyond the

limits set in the Alarm Configuration.

Figure 12. Alarm Status.

Alarms can be individually acknowledged and closed using the but-

tons in the table, or all alarms can be closed using the <Close All

Alarms> button.

The alarm display in the top banner can be configured to flash when

a new alarm notification is present. Click the <Enable Alarm Flash>

button when the critical and cautionary alarm counts are 0 to enable

alarm flashing.

The <Refresh Alarms> button is provided to update the Alarm Status

web page, because the Alarm page does not auto-refresh. This is to

limit network communication traffic for slow networks (i.e. cellular).

The Alarm Status can be saved to a file using the <Save List to

CSV> button.

13

Instruction Booklet IL02400002E

September 2016

EATON www.eaton.com

VaultGard

Instruction Booklet

Section 5: Logs

The VaultGard contains four different logging views:

• Graphical;

• Data;

• Event; and

• Command.

Before the VaultGard can begin logging values, each device will need

to be set up for logging. Refer to Section 7.1.4 for further details.

5.1 Graphical Log

Clicking on Graphical Log brings the User to the Trends Graphic page

where the User can set up Graphical Logging of devices connected

to the VaultGard. This pages allows the User to view trend lines for

data such as phase currents or network voltages.

Figure 13. Interval Graphs.

Set up begins by entering a start and end date. The date intervals

can be set for days, weeks, months, or years. The amount of data

stored can vary depending on how many values the User wants to

log.

Just below the date settings are the time settings. The User needs

to set the start and ending times for the graphical log. The time

interval can vary, but there is a minimum of 15 minutes to a maxi-

mum of 24 hours.

To complete the set up, the User will need to add a device and

assign the value(s) to trend. Next to , choose a device from

the drop down menu and then choose a value from the drop down

menu next to “Plot Selection”. Click on to begin trending.

Repeat the steps to add another value and/or add another device.

14

Instruction Booklet IL02400002E

September 2016

EATON www.eaton.com

VaultGard

Instruction Booklet

5.2 Data Log

This page allows the User to view data logs for all devices config-

ured for logging.

Figure 14. Data Log.

Set up begins by setting the date and time. Refer to Section 6.3 for

instructions.

The user will need to set the maximum number of rows and page

links per page. Both are set to 20 by default. To change the value,

enter the desired values for each field and click <View Log Data>.

The data log should populate with all devices configured for log-

ging. To save the log click <Download to CSV>. Clicking on <Clear

Archived Logs> will erase all saved logs.

15

Instruction Booklet IL02400002E

September 2016

EATON www.eaton.com

VaultGard

Instruction Booklet

5.3 Event Log

This page opens up a separate ExcelT spreadsheet that is stored

locally on the VaultGard flash memory.

Figure 15. Event Log.

This spreadsheet will report all events that have occurred since the

event log was last cleared.

16

Instruction Booklet IL02400002E

September 2016

EATON www.eaton.com

VaultGard

Instruction Booklet

5.4 Command Log

This page displays active, terminated, and denied commands that

have been executed since the VaultGard was powered up.

The Command Log records a history of the configuration and control

commands executed on VaultGard. Each entry records the issuer

(user), command, time, and status of the command. This log can be

saved to a CSV file.

Figure 16. Command Log.

The user can view the type of command initiated, who initiated the

command, the result, start and end times of the command, the

state, and the parameters.

The VaultGard boot history may be viewed by navigating to the

Bootup History tab of the Logs → Command Log

Figure 17. Bootup History Tab.

17

Instruction Booklet IL02400002E

September 2016

EATON www.eaton.com

VaultGard

Instruction Booklet

Section 6: VaultGard Set-Up and

Conﬁguration

6.1 Access Control

The Customer can configure the VaultGard to allow different levels of

security for different users. When the Customer first logs into the

VaultGard, they are referred to as the “Superuser”. The “Superuser”

has the ability to edit/delete user names, update the VaultGard firm-

ware, and reset the VaultGard to factory settings. Another level of

security is the “Administrator”. The “Administrator” can view and

control the relays/devices on the VaultGard, but cannot update the

firmware, reset to factory defaults, or create/delete usernames and

passwords. The last level of security is the “User”. The “User” can

only view the data on the VaultGard. All other functions are disabled

at this level.

To begin configuration, follow the instructions below.

6.1.1 Configuration Names and Passwords

The VaultGard provides three different levels of security for login

password access (Admin, User, and Superuser).

• The “User” can view all data, but cannot perform device configu-

ration, alarming, and logging.

• The “Admin” can change setpoints, perform device configuration,

control, alarming, and logging.

• Only the “Superuser” can upload firmware or reset to factory

configuration, which are both done on the Firmware web page. In

addition, the “Superuser” is the only person who can set up User

and Administrator names and passwords on the VaultGard Access

Control web page.

VaultGard Configuration → Access Control --> Users

Figure 18. User Names and Passwords.

The Superuser can add additional Administrators or Users. Under

“Add User”, enter a user name and password in the required fields

then click , <OK>. When all new usernames and passwords

have been entered click <Commit User Settings> to save entries.

The “Superuser” has the ability to delete and change passwords for

all Users under “Change Passwords”. Click <Delete> to erase the

user.

6.1.2 Access Control Security

An optional console password may be enabled to provide additional

security for control and device configuration. This password only

needs to be entered once and remains in effect until the web brows-

er session is closed.

SSH is not required for normal VaultGard operation and is purely for

diagnostics.

The superuser can enable it to enable Eaton field engineers to trou-

bleshoot low level issues.

1. Begin by entering a password under “Configure Control

Password”.

2. Click on to save the entry and then <OK>.

18

Instruction Booklet IL02400002E

September 2016

EATON www.eaton.com

VaultGard

Instruction Booklet

VaultGard Configuration → Access Control, Security tab.

Figure 19. Access Control Security.

The Local/Remote I/O Switch is provided to disable VaultGard control

functions when the selected I/O switch is in the local position. The

switch can be mounted at the entrance to the vault and switched to

local upon entry to prevent remote control and protect workers in

the vault.

An optional control password is provided for users who require pass-

word protection for the VaultGard serial port connection.

6.1.3 Web Server Configuration

The VaultGard web server uses the standard Internet socket port

VaultGard Configuration → Access Control, Web Server tab

Figure 20. Web Server Access Control.

numbers for Hypertext Transfer Protocol (HTTP) and HTTPS

(Hypertext Transfer Protocol over SSL). These port numbers may be

changed by entering the new port number and clicking the <Change

Ports> button. Check the “HTTPS only” check box to disable HTTP

access and allow only secure HTTPS encrypted communication.

For bandwidth constrained connections (ie cellular, radio links), the

user may establish limits on the VaultGard web server bandwidth.

Note that this only affects traffic going from VaultGard to the cli-

ent. The client is responsible for throttling the incoming traffic to

VaultGard.

19

Instruction Booklet IL02400002E

September 2016

EATON www.eaton.com

VaultGard

Instruction Booklet

6.2 Network

The Network page contains all the network settings.

6.2.1 Network Summary

The Network Summary page reports the current network configu-

ration. The user can view the network configuration and packet

statistics, and change the Ethernet connection to Maintenance or

Deployment Configuration on the Summary page.

VaultGard Configuration → Network, Summary tab.

Figure 21. Network Summary.

6.2.2 Ethernet Configuration

By default, the IP address and Subnet Mask are already assigned

to VaultGard. However, these settings can be changed on the

Network Ethernet page. Locate the Network link under “VaultGard

Configuration” on the left menu bar of the web interface and select

the Ethernet tab. This is where the User sets the Network address-

es (i.e. Static IP, Subnet Mask, Default Gateway) and enables/dis-

ables DHCP.

20

Instruction Booklet IL02400002E

September 2016

EATON www.eaton.com

VaultGard

Instruction Booklet

VaultGard Configuration → Network, Ethernet Tab

Figure 22. Ethernet Configuration.

VaultGard provides separate Ethernet settings for Maintenance and

Deployment configurations. If a single configuration is adequate just

use the Maintenance configuration. It can be changed via the local

VaultGard serial port or by navigating to the Ethernet Network web

page.

The Deployment configuration is provided for installations where

a one IP address is required for the network configuration

(Deployment) and a separate IP address is used for local Ethernet

connection (Maintenance). The Deployment configuration can only

be configured using the Ethernet Network web page. Only the

Deployment configuration can be used with IPSec.

If the network connection requires a gratuitous ARP, the ARP packet

count on startup can be entered for either configuration.

The MTU (maximum transmission unit) can also be set here. The

default MTU value is 1500. The superuser may reduce the MTU to

eliminate fragmentation issues over link technologies support small-

er packet sizes or when using IPSec.

The TCP Congestion Control Algorithm optimizes VaultGard’s

upstream bandwidth usage by automatically scaling sending speeds

to link conditions and bandwidth maximums. The choice of an algo-

rithm depends on the properties of the link to VaultGard, bandwidth

considerations, as well as the algorithms of other devices on the

network. A full description of these algorithms is outside the scope

of this manual, but the following are some general guidelines. These

guidelines are not to be taken as absolute advice; please contact

your network administrator for further support.

• Cubic: Good default for pure ethernet or fiber connections.

• Illinois: May work better on fiber connections.

• Reno: Attempts to avoid congestion, may improve performance

on radio or other lossy networks.

• Vegas: Detects congestion by measuring packet delay times. May

improve performance on lossy networks.

• Veno: Better performance in networks prone to bit errors.

• Westwood: Use on lossy or crowded fiber connections.

• YeAH: Another RTT sensing algorithm that strives for efficiency.

The Connectivity Log records when VaultGard’s ethernet connection

is unplugged or plugged, or loses carrier to its Ethernet link partner.

This is useful for troubleshooting disconnect issues or for checking

when the Ethernet plug is disconnected for maintenance.

To change the static IP address enter the new IP Address, Subnet

Mask, and Default Gateway and click the <Use Static Config>

button. Alternately, click the <Use DHCP> button to enable the

Dynamic Host Configuration Protocol (DHCP).

6.2.3 DNS Configuration

Locate the Network link under “VaultGard Configuration” on the left

menu bar of the web interface and select the DNS tab. Primary and

Secondary Domain Name System (DNS) Server IP addresses may

be entered and saved by clicking the <Set Static DNS> button.

A DNS server converts a human readable name into an Internet

Protocol (IP) address, and is not required if all network references

use IP addresses. However, a DNS server IP address is needed if

you enter an SMTP server name for e-mail notifications.

Page is loading ...

Eaton VaultGard communications device Operating instructions

Eaton VaultGard communications device Operating instructions

Related papers

Other documents