Contents
Description Page
1: Introduction ............................2
2: Features, Functions, Benefits, and
Specifications ...........................5
3: VaultGard Functional Overview .............6
4: Alarms ...............................12
5: Logs .................................13
6: VaultGard Set-up and Configuration ........17
7: Device Configuration ....................46
8: Field Bus Configuration ..................68
9: System Setup Using the Serial Port ........74
10: Documentation .......................77
September 2016
Supersedes March 2014
Instruction Booklet IL02400002E
VaultGardE
Instruction Booklet
2
Instruction Booklet IL02400002E
September 2016
EATON www.eaton.com
VaultGard
Instruction Booklet
Section 1: Introduction
1.1 General Information
The VaultGardE from Eaton is the next generation communications
product for Network Protectors, providing monitoring and remote
control for vault systems. Certain to be your number one preventive
maintenance tool, the VaultGard will discover network issues before
they cause costly system-wide problems.
Incorporating the latest in Eaton’s innovative technology, the
VaultGard can connect up to 32 devices through existing shielded
twisted pair (STP) cable, and is rated for the harsh environmental
stresses typically found in underground vaults.
With easy to navigate, on-board web pages accessible through
Wi-Fi, cellular, or Ethernet connectivity, the VaultGard can efficiently
interact with a variety of network relays. Additionally, data can link to
existing Supervisory Control and Data Acquisition (SCADA) systems
via DNP 3.0 protocol.
The integrated graphics display provides expanded capabilities and
enhanced functionality that tracks such vital network protector per-
formance metrics as:
• Device (address including status and MPCV relay reason codes);
• Breaker position and alarms;
• Phase currents;
• Network, transformer, and phasing voltages;
• Operations counter;
• Power metrics: Real (kW), Reactive (VAR), and Power factor;
• Positive sequence angle and positive sequence voltage;
• Sensor input: captures wireless current sensor and temperature
data; and
• Real time MPCV vector graphic display.
Figure 1. Typical Phasor Plot.
The VaultGard also offers alarms, logging of captured relay data, and
setpoint control. The User can view this MPCV data through a series
of phasor plots that illustrate real-time load data along with setpoint
trip and close boundary characteristics.
These plots automatically adjust to reflect the current relay state
and curves, and can be used to detect errors, send alerts, and show
where problems exist within the network. This functionality is pre-
installed and no additional software is required.
3
Instruction Booklet IL02400002E
September 2016
EATON www.eaton.com
VaultGard
Instruction Booklet
1.2 Hardware
The VaultGard is housed in a secure enclosure with numerous input
and output ports to support many applications. Some of these fea-
tures include:
• Support for up to 32 devices on STP cable;
• DNP 3.0 SCADA interface via RS-485 serial DNP;
• DNP UDP/IP & TCP/IP uplinks;
• RS-485 DNP 3.0 sub-network for third party DNP communicating
devices;
• Wireless functionality to capture sensor data;
• Port for remote connectivity to the unit: Wi-Fi (WAP), cellular, LAN
• Configurable threshold-based alarming with e-mail notification;
• Real-time clock for historical logging of captured and time
stamped data; and
• Monitoring of the remote digital inputs and outputs as well as
third party devices on accepted protocols.
Figure 2. Secure LAN.
1.3 VaultGard Outputs
The VaultGard’s RJ-45 output port provides a User friendly interface
for both local and long-range remote access, and control of network
protector relays. Options for the wireless functionality include:
• Wi-Fi: This wireless technology uses the IEEE standard of
802.11b/g for the wireless local area network. For security, the
wireless signal uses WPA encryption as well as a unique user-
name and password. One can access the relays locally with a
laptop with a standard wireless card. The ability to wirelessly
connect to the network relays through the at a distance of nearly
330 ft from the vault provides safety and cost advantages over
labor-intensive vault entry.
• Cellular: A cellular modem can be used to broadcast a signal to a
local cellular tower. This signal can be transmitted over long dis-
tances to a main office or used to send e-mail and phone alerts.
• Secure LAN:·An Ethernet cable can be connected directly to
VaultGard’s Ethernet port to transmit data over a Local Area
Connection providing the high data-transfer rates, smaller geo-
graphic area, and lack of a need for leased telecommunication
lines.
• Fiber Optic Transceiver - a fiber optic transceiver can interface
with two types of cables, single mode and multimode. Single
mode permits signal transmission at extremely high band-
width and allows very long transmission distances (>1000 ft).
Multimode describes distances of transmission and transmission
bandwidths are less than with single mode fiber due to disper-
sion. Some fiber optic transceivers can be used for both single
mode and multimode cables.
• More than one option with an Ethernet switch to unify the entire
system; simultaneous, full-duplex, high-speed communication on
all ports, no network performance bottlenecks.
1.4 Power XpertT Software Compatibility
Power XpertT is an optional application that provides a centralized
program linking all units in a network. The Layout Manager software
within Power Xpert shows:
• Two-dimensional layouts of facilities;
• Alarm and status indicators for specified channels;
• Gauges/dials displaying values from specified channels and sys-
tem behavior;
• One-line diagrams showing the status of specified channels; and
• Importation of GIS image(s) or existing topography for street/vault
maps.
4
Instruction Booklet IL02400002E
September 2016
EATON www.eaton.com
VaultGard
Instruction Booklet
1.5 Additional Functionality
The VaultGard can also capture data from other external sensors that
transmit their signals via wireless protocol. The VaultGard acts as a
central hub for collecting vault data, controlling relays remotely, and
communicating vital network data to the User.
Figure 3. The VaultGardE and Remote Vaults are Connected Through the Daisy Chaining of Relays.
5
Instruction Booklet IL02400002E
September 2016
EATON www.eaton.com
VaultGard
Instruction Booklet
Section 2. Features, Functions, Benefits, and
Specifications
2.1 Features
• Next generation communications product for Network Protectors;
• Connect up to 32 MPCV devices on 1 unit;
• Easy to navigate, on-board web pages (no software needed);
• Comprehensive data monitoring (voltage, current, power metrics,
etc.);
• Compatible with the optional Power Xpert software application to
integrate entire network of VaultGard Units; and
• Compatible with wireless current sensors for vital cable loading
data.
Figure 4. Screenshot of the VaultGard Interface.
2.2 Functions
• Monitoring and remote control for a vault system;
• Wi-Fi, cellular, or ethernet connectivity to on-board web pages
through a web browser (ex. Internet Explorer);
• DNP 3.0 protocol compatibility;
• Configuration for master/slave topologies for integration with a
local SCADA system;
• Alarms, logging (live and historical)/trending/graphing of captured
data, and setpoint control;
• E-mail alert notification;
• Captures wireless current sensor data; and
• Monitoring and control of accepted digital I/O devices.
2.3 Benefits
• No software is required.
• Central hub for collecting vault data, controlling relays remotely,
and communicating vital network data to the User.
• Acts as a preventive maintenance tool to discover issues before
they cause costly, system-wide problems.
2.4 Specifications
Serial Ports
• INCOM Shield Twisted Pair (support for up to 32 devices)
• Isolated RS-485 Port for DNP Field Bus
• Isolated RS-485 Port for DNP SCADA
• DNP 3.0 Level 3 without Freeze Functionality
Devices Supported
• MPCV Relay
• Arc Flash Reduction Maintenance System Indicating Diagnostics
Module (NPARMs-IDM)
• Digital Input Module (DIM) with 8 Digital Inputs
• Digital Relay Accessory Module (DRAM) with 4 Relay Outputs
• Wireless Collector with Support for up to 24 Wireless Sensors
DNP Field Bus Devices Supported
• Transformer Analog Input Module
Ethernet
• 10/100 Mb/s
Environmental
• Operating Temperature: 40 to +70°C (-40 to +158°F)
• Storage Temperature: -40 to +85°C (-40 to +185°F)
Power Supply
• Power Consumption: 4 W max.
• 12 Vdc: 130 mA nominal, 300 mA max.
Physical
• Height: 2.17 in. (55.12 mm)
• Width: 4.67 in. (118.62 mm)
• Length: 6.73 in. (170.94 mm)
6
Instruction Booklet IL02400002E
September 2016
EATON www.eaton.com
VaultGard
Instruction Booklet
Section 3: VaultGard Functional Overview
3.1 Data View
The Data View section allows the User to access six different views:
• System View;
• Feeders;
• Protectors;
• Vaults;
• Spot Network View; and
• System Status View.
Each of the views displays information about the devices (i.e., MPCV
relays, Transformer Analog Input Monitors, DIM, DRAM, NP ARMs,
Wireless Sensors, etc.) connected to VaultGard.
3.1.1 System View
The System View is the first page that appears when logging into
the VaultGard. It displays the data for all of devices being scanned
by the VaultGard. By clicking the button, the User
can view the devices by their names or INCOM addresses.
Figure 5. System View.
Clicking on the relay name or address transitions to the relay phasor
view page. The phasor view includes a graphical view of the relay’s
real time data overlaid on the settings. Refer to section 7.1 for more
details.
The System View page also displays summary tables for analog and
digital input devices and sensors.
7
Instruction Booklet IL02400002E
September 2016
EATON www.eaton.com
VaultGard
Instruction Booklet
3.1.2 Feeder View
The Feeder View provides a tabular display of the protectors config-
ured for each feeder. Select the feeder to view from the drop down
list.
Figure 6. Feeder View.
8
Instruction Booklet IL02400002E
September 2016
EATON www.eaton.com
VaultGard
Instruction Booklet
3.1.3 Protector View
The Protector View displays a table showing summary data for all
the protectors being scanned by VaultGard. This feature will need
to be set up before any information or data can be displayed on the
page. Refer to Section 7.3 for the initial set up.
Figure 7. Protector View.
Clicking on the Protector name brings the User to a page that dis-
plays a graphical drawing of the transformer and protector. This
page displays the following information and controls:
• Transformer and network voltages;
• Status of the MPCV relay;
• Power metrics: Real (kW), Reactive (kVAR), and Power Factor;
• Transformer analog sensor input (pressure, level, and temp.);
• Activate ARMS device and Rem-Rack (Rack-IN); and
• PRI cable and switch.
Figure 8. Protector Graphical View.
9
Instruction Booklet IL02400002E
September 2016
EATON www.eaton.com
VaultGard
Instruction Booklet
The User can also click on to display the real-
time MPCV relay phasor plot. For more information refer to
Section 7.3.
3.1.4 Vault View
The Vault View provides a tabular display of the protectors and I/O
points assigned to each vault. Select the vault to view from the
drop down list.
Figure 9. Vault View.
10
Instruction Booklet IL02400002E
September 2016
EATON www.eaton.com
VaultGard
Instruction Booklet
3.1.5 Spot Network View
The Spot Network View displays data for all protectors within the
specified spot network. The page displays phase currents, trans-
former voltages, power factor, operation counter, and status of the
protector. The User can add up to eight protectors per spot network.
This feature will need to be set up before any information or data
can be displayed on the page. Relays that still need to be added
to a spot network will fall under “Unassociated Devices”. Refer to
Section 7.4 for the initial setup.
Figure 10. Spot Network View.
Clicking on the spot network name brings the User to a page that
displays the virtual drawings of protectors in the spot. The green
and red semi-circles represent an open and closed protector, respec-
tively. Just below the drawings is a summary of the protector’s
state and operational counter.
11
Instruction Booklet IL02400002E
September 2016
EATON www.eaton.com
VaultGard
Instruction Booklet
3.1.6 System Status View
This view gives a status summary of the VaultGard operating sys-
tem. Information such as total operating time, memory usage, and
process status is displayed on this screen. For example, if commu-
nication was lost with all INCOM devices, the User can refer to this
page and verify that the connection with INCOM is operational.
Figure 11. System Status.
12
Instruction Booklet IL02400002E
September 2016
EATON www.eaton.com
VaultGard
Instruction Booklet
Section 4: Alarms
An alarm occurs when a parameter value reaches an alarm limit.
An e-mail will be sent to the predefined addresses for devices that
have been configured for alarms and e-mail. Alarms are supported
for MPCV relays, sensors, and protectors. Refer to section 7.1.4 for
detailed instructions to configure a device for alarming.
4.1 Alarm Status
Clicking on Alarm Status will display a page with a list of the alarms
that have occurred, the condition of each alarm, and all devices that
are currently alarmed.
VaultGard displays alarms communicated from individual devices or
generated in VaultGard based on a data value excursion beyond the
limits set in the Alarm Configuration.
Figure 12. Alarm Status.
Alarms can be individually acknowledged and closed using the but-
tons in the table, or all alarms can be closed using the <Close All
Alarms> button.
The alarm display in the top banner can be configured to flash when
a new alarm notification is present. Click the <Enable Alarm Flash>
button when the critical and cautionary alarm counts are 0 to enable
alarm flashing.
The <Refresh Alarms> button is provided to update the Alarm Status
web page, because the Alarm page does not auto-refresh. This is to
limit network communication traffic for slow networks (i.e. cellular).
The Alarm Status can be saved to a file using the <Save List to
CSV> button.
13
Instruction Booklet IL02400002E
September 2016
EATON www.eaton.com
VaultGard
Instruction Booklet
Section 5: Logs
The VaultGard contains four different logging views:
• Graphical;
• Data;
• Event; and
• Command.
Before the VaultGard can begin logging values, each device will need
to be set up for logging. Refer to Section 7.1.4 for further details.
5.1 Graphical Log
Clicking on Graphical Log brings the User to the Trends Graphic page
where the User can set up Graphical Logging of devices connected
to the VaultGard. This pages allows the User to view trend lines for
data such as phase currents or network voltages.
Figure 13. Interval Graphs.
Set up begins by entering a start and end date. The date intervals
can be set for days, weeks, months, or years. The amount of data
stored can vary depending on how many values the User wants to
log.
Just below the date settings are the time settings. The User needs
to set the start and ending times for the graphical log. The time
interval can vary, but there is a minimum of 15 minutes to a maxi-
mum of 24 hours.
To complete the set up, the User will need to add a device and
assign the value(s) to trend. Next to , choose a device from
the drop down menu and then choose a value from the drop down
menu next to “Plot Selection”. Click on to begin trending.
Repeat the steps to add another value and/or add another device.
14
Instruction Booklet IL02400002E
September 2016
EATON www.eaton.com
VaultGard
Instruction Booklet
5.2 Data Log
This page allows the User to view data logs for all devices config-
ured for logging.
Figure 14. Data Log.
Set up begins by setting the date and time. Refer to Section 6.3 for
instructions.
The user will need to set the maximum number of rows and page
links per page. Both are set to 20 by default. To change the value,
enter the desired values for each field and click <View Log Data>.
The data log should populate with all devices configured for log-
ging. To save the log click <Download to CSV>. Clicking on <Clear
Archived Logs> will erase all saved logs.
15
Instruction Booklet IL02400002E
September 2016
EATON www.eaton.com
VaultGard
Instruction Booklet
5.3 Event Log
This page opens up a separate ExcelT spreadsheet that is stored
locally on the VaultGard flash memory.
Figure 15. Event Log.
This spreadsheet will report all events that have occurred since the
event log was last cleared.
16
Instruction Booklet IL02400002E
September 2016
EATON www.eaton.com
VaultGard
Instruction Booklet
5.4 Command Log
This page displays active, terminated, and denied commands that
have been executed since the VaultGard was powered up.
The Command Log records a history of the configuration and control
commands executed on VaultGard. Each entry records the issuer
(user), command, time, and status of the command. This log can be
saved to a CSV file.
Figure 16. Command Log.
The user can view the type of command initiated, who initiated the
command, the result, start and end times of the command, the
state, and the parameters.
The VaultGard boot history may be viewed by navigating to the
Bootup History tab of the Logs → Command Log
Figure 17. Bootup History Tab.
17
Instruction Booklet IL02400002E
September 2016
EATON www.eaton.com
VaultGard
Instruction Booklet
Section 6: VaultGard Set-Up and
Configuration
6.1 Access Control
The Customer can configure the VaultGard to allow different levels of
security for different users. When the Customer first logs into the
VaultGard, they are referred to as the “Superuser”. The “Superuser”
has the ability to edit/delete user names, update the VaultGard firm-
ware, and reset the VaultGard to factory settings. Another level of
security is the “Administrator”. The “Administrator” can view and
control the relays/devices on the VaultGard, but cannot update the
firmware, reset to factory defaults, or create/delete usernames and
passwords. The last level of security is the “User”. The “User” can
only view the data on the VaultGard. All other functions are disabled
at this level.
To begin configuration, follow the instructions below.
6.1.1 Configuration Names and Passwords
The VaultGard provides three different levels of security for login
password access (Admin, User, and Superuser).
• The “User” can view all data, but cannot perform device configu-
ration, alarming, and logging.
• The “Admin” can change setpoints, perform device configuration,
control, alarming, and logging.
• Only the “Superuser” can upload firmware or reset to factory
configuration, which are both done on the Firmware web page. In
addition, the “Superuser” is the only person who can set up User
and Administrator names and passwords on the VaultGard Access
Control web page.
VaultGard Configuration → Access Control --> Users
Figure 18. User Names and Passwords.
The Superuser can add additional Administrators or Users. Under
“Add User”, enter a user name and password in the required fields
then click , <OK>. When all new usernames and passwords
have been entered click <Commit User Settings> to save entries.
The “Superuser” has the ability to delete and change passwords for
all Users under “Change Passwords”. Click <Delete> to erase the
user.
6.1.2 Access Control Security
An optional console password may be enabled to provide additional
security for control and device configuration. This password only
needs to be entered once and remains in effect until the web brows-
er session is closed.
SSH is not required for normal VaultGard operation and is purely for
diagnostics.
The superuser can enable it to enable Eaton field engineers to trou-
bleshoot low level issues.
1. Begin by entering a password under “Configure Control
Password”.
2. Click on to save the entry and then <OK>.
18
Instruction Booklet IL02400002E
September 2016
EATON www.eaton.com
VaultGard
Instruction Booklet
VaultGard Configuration → Access Control, Security tab.
Figure 19. Access Control Security.
The Local/Remote I/O Switch is provided to disable VaultGard control
functions when the selected I/O switch is in the local position. The
switch can be mounted at the entrance to the vault and switched to
local upon entry to prevent remote control and protect workers in
the vault.
An optional control password is provided for users who require pass-
word protection for the VaultGard serial port connection.
6.1.3 Web Server Configuration
The VaultGard web server uses the standard Internet socket port
VaultGard Configuration → Access Control, Web Server tab
Figure 20. Web Server Access Control.
numbers for Hypertext Transfer Protocol (HTTP) and HTTPS
(Hypertext Transfer Protocol over SSL). These port numbers may be
changed by entering the new port number and clicking the <Change
Ports> button. Check the “HTTPS only” check box to disable HTTP
access and allow only secure HTTPS encrypted communication.
For bandwidth constrained connections (ie cellular, radio links), the
user may establish limits on the VaultGard web server bandwidth.
Note that this only affects traffic going from VaultGard to the cli-
ent. The client is responsible for throttling the incoming traffic to
VaultGard.
19
Instruction Booklet IL02400002E
September 2016
EATON www.eaton.com
VaultGard
Instruction Booklet
6.2 Network
The Network page contains all the network settings.
6.2.1 Network Summary
The Network Summary page reports the current network configu-
ration. The user can view the network configuration and packet
statistics, and change the Ethernet connection to Maintenance or
Deployment Configuration on the Summary page.
VaultGard Configuration → Network, Summary tab.
Figure 21. Network Summary.
6.2.2 Ethernet Configuration
By default, the IP address and Subnet Mask are already assigned
to VaultGard. However, these settings can be changed on the
Network Ethernet page. Locate the Network link under “VaultGard
Configuration” on the left menu bar of the web interface and select
the Ethernet tab. This is where the User sets the Network address-
es (i.e. Static IP, Subnet Mask, Default Gateway) and enables/dis-
ables DHCP.
20
Instruction Booklet IL02400002E
September 2016
EATON www.eaton.com
VaultGard
Instruction Booklet
VaultGard Configuration → Network, Ethernet Tab
Figure 22. Ethernet Configuration.
VaultGard provides separate Ethernet settings for Maintenance and
Deployment configurations. If a single configuration is adequate just
use the Maintenance configuration. It can be changed via the local
VaultGard serial port or by navigating to the Ethernet Network web
page.
The Deployment configuration is provided for installations where
a one IP address is required for the network configuration
(Deployment) and a separate IP address is used for local Ethernet
connection (Maintenance). The Deployment configuration can only
be configured using the Ethernet Network web page. Only the
Deployment configuration can be used with IPSec.
If the network connection requires a gratuitous ARP, the ARP packet
count on startup can be entered for either configuration.
The MTU (maximum transmission unit) can also be set here. The
default MTU value is 1500. The superuser may reduce the MTU to
eliminate fragmentation issues over link technologies support small-
er packet sizes or when using IPSec.
The TCP Congestion Control Algorithm optimizes VaultGard’s
upstream bandwidth usage by automatically scaling sending speeds
to link conditions and bandwidth maximums. The choice of an algo-
rithm depends on the properties of the link to VaultGard, bandwidth
considerations, as well as the algorithms of other devices on the
network. A full description of these algorithms is outside the scope
of this manual, but the following are some general guidelines. These
guidelines are not to be taken as absolute advice; please contact
your network administrator for further support.
• Cubic: Good default for pure ethernet or fiber connections.
• Illinois: May work better on fiber connections.
• Reno: Attempts to avoid congestion, may improve performance
on radio or other lossy networks.
• Vegas: Detects congestion by measuring packet delay times. May
improve performance on lossy networks.
• Veno: Better performance in networks prone to bit errors.
• Westwood: Use on lossy or crowded fiber connections.
• YeAH: Another RTT sensing algorithm that strives for efficiency.
The Connectivity Log records when VaultGard’s ethernet connection
is unplugged or plugged, or loses carrier to its Ethernet link partner.
This is useful for troubleshooting disconnect issues or for checking
when the Ethernet plug is disconnected for maintenance.
To change the static IP address enter the new IP Address, Subnet
Mask, and Default Gateway and click the <Use Static Config>
button. Alternately, click the <Use DHCP> button to enable the
Dynamic Host Configuration Protocol (DHCP).
6.2.3 DNS Configuration
Locate the Network link under “VaultGard Configuration” on the left
menu bar of the web interface and select the DNS tab. Primary and
Secondary Domain Name System (DNS) Server IP addresses may
be entered and saved by clicking the <Set Static DNS> button.
A DNS server converts a human readable name into an Internet
Protocol (IP) address, and is not required if all network references
use IP addresses. However, a DNS server IP address is needed if
you enter an SMTP server name for e-mail notifications.
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
/
