Micom P40 Agile P94V: Technical Manual

MiCOM P40 Agile P94V
Technical Manual
Feeder Management IED
Hardware Version: A
Software Version: 55
Publication Reference: P94V-TM-EN-5
© ALSTOM 2015. All rights reserved. Information contained in this document is indicative only. No representation or warranty is
given or should be relied on that it is complete or correct or will apply to any particular project. This will depend on the technical
and commercial circumstances. It is provided without liability and is subject to change without notice. Reproduction, use or
disclosure to third parties, without express written authority, is strictly prohibited.
Contents
Chapter 1 Introduction 1
1 Chapter Overview 3
2 Foreword 4
2.1 Target Audience 4
2.2 Typographical Conventions 4
2.3 Nomenclature 5
2.4 Compliance 5
3 Product Scope 6
3.1 Ordering Options 6
4 Features and Functions 7
4.1 Protection Functions 7
4.2 Control Functions 7
4.3 Measurement Functions 8
4.4 Communication Functions 8
5 Logic Diagrams 9
6 Functional Overview 11
Chapter 2 Safety Information 13

2 Health and Safety 16
3 Symbols 17
4 Installation, Commissioning and Servicing 18
4.1 Lifting Hazards 18
4.2 Electrical Hazards 18
4.3 UL/CSA/CUL Requirements 19
4.4 Fusing Requirements 19
4.5 Equipment Connections 20
4.6 Protection Class 1 Equipment Requirements 21
4.7 Pre-energisation Checklist 21
4.8 Peripheral Circuitry 22
4.9 Upgrading/Servicing 22
5 Decommissioning and Disposal 23
6 Standards Compliance 24
6.1 EMC Compliance: 2004/108/EC 24
6.2 Product Safety: 2006/95/EC 24
6.3 R&TTE Compliance 24
6.4 UL/CUL Compliance 24
6.5 ATEX Compliance 24
Chapter 3 Hardware Design 27

2 Hardware Architecture 30
2.1 Memory and Real Time Clock 30
3 Mechanical Implementation 32
3.1 Housing Variants 32
3.2 20TE Rear Panel 33
3.3 30TE Rear Panel 33
4 Terminal Connections 36
4.1 I/O Options 36
4.2 P94V Hardware Configuration 1 36
4.2.1 Terminal Block Left 36
Contents P94V
4.2.2 Terminal Block Right 37

4.4.3 Terminal Block Centre 40
5 Front Panel 50
5.1 20TE Front Panel 50
5.2 30TE Front Panel 51
5.3 Keypad 51
5.4 Liquid Crystal Display 52
5.5 USB Port 52
5.6 Fixed Function LEDs 53
5.7 Function Keys 53
5.8 Programable LEDs 53
Chapter 4 Configuration 55
2 Settings Application Software 58
3 Using the HMI Panel 59
3.1 Navigating the HMI Panel 60
3.2 Getting Started 60
3.3 Default Display 61
3.4 Default Display Navigation 62
3.5 Password Entry 63
3.6 Processing Alarms and Records 64
3.7 Menu Structure 64
3.8 Changing the Settings 65
3.9 Direct Access (The Hotkey menu) 66
3.9.1 Setting Group Selection 66
3.9.2 Control Inputs 67
3.9.3 Circuit Breaker Control 67
3.10 Function Keys 68
4 Date and Time Configuration 69
4.1 Time Zone Compensation 69
4.2 Daylight Saving Time Compensation 69
5 Settings Group Selection 70
ii P94V-TM-EN-5
P94V Contents
Chapter 5 Voltage Protection Functions 71

2 Undervoltage Protection 74
2.1 Undervoltage Protection Implementation 74
2.2 Undervoltage Protection Logic 75
2.3 Application Notes 76
2.3.1 Undervoltage Setting Guidelines 76
3 Overvoltage Protection 77
3.1 Overvoltage Protection Implementation 77
3.2 Overvoltage Protection Logic 78
3.3.1 Overvoltage Setting Guidelines 79
4 Rate of Change of Voltage Protection 80
4.1 Rate of Change of Voltage Protection Implementation 80
4.2 Rate of Change of Voltage Logic 81
5 Residual Overvoltage Protection 82
5.1 Residual Overvoltage Protection Implementation 82
5.2 Residual Overvoltage Logic 83
5.3.1 Calculation for Solidly Earthed Systems 83
5.3.2 Calculation for Impedance Earthed Systems 84
5.3.3 Setting Guidelines 85
6 Negative Sequence Overvoltage Protection 86
6.1 Negative Sequence Overvoltage Implementation 86
6.2 Negative Sequence Overvoltage Logic 86
7 Moving Average Voltage Functions 88
7.1 Moving Average Undervoltage Logic 89
7.2 Moving Average Overvoltage Logic 90
7.3 Moving Average Zero Sequence Voltage Logic 90
7.4 Moving Average Positive Sequence Voltage Logic 90
7.5 Moving Average Negative Sequence Voltage Logic 91
Chapter 6 Frequency Protection Functions 93

2 Frequency Protection Overview 96
2.1 Frequency Protection Implementation 96
3 Underfrequency Protection 97
3.1 Underfrequency Protection Implementation 97
3.2 Underfrequency Protection Logic 97
4 Overfrequency Protection 99
4.1 Overfrequency Protection Implementation 99
4.2 Overfrequency Protection Logic 99
5 Independent R.O.C.O.F Protection 101
5.1 Indepenent R.O.C.O.F Protection Implementation 101
5.2 Independent R.O.C.O.F Protection Logic 102
6 Frequency-supervised R.O.C.O.F Protection 104
6.1 Frequency-supervised R.O.C.O.F Implementation 104
P94V-TM-EN-5 iii
Contents P94V
6.2 Frequency-supervised R.O.C.O.F Logic 105

6.3.1 Frequency-Supervised R.O.C.O.F Example 105
7 Average Rate of Change of Frequency Protection 107
7.1 Average R.O.C.O.F Protection Implementation 107
7.2 Average R.O.C.O.F Logic 108
8 Load Shedding and Restoration 110
8.1 Load Restoration Implementation 110
8.2 Holding Band 110
8.3 Load Restoration Logic 113
Chapter 7 Autoreclose 115

2 Introduction to 3-phase Autoreclose 118
3 Implementation 119
4 Autoreclose Function Inputs 120
4.1 CB Healthy 120
4.2 Block AR 120
4.3 Reset Lockout 120
4.4 AR Auto Mode 120
4.5 AR LiveLine Mode 120
4.6 Telecontrol Mode 120
4.7 Live/Dead Ccts OK (Live/Dead Circuits OK) 120
4.8 AR Sys Checks (AR System Checks) 121
4.9 Ext AR Prot Trip (External AR Protection Trip) 121
4.10 Ext AR Prot Start (External AR Protection Start) 121
4.11 Ext AR SEF Start (External AR SEF Start) 121
4.12 Ext AR SEF Trip (External AR SEFTrip) 121
4.13 DAR Complete (Delayed Autoreclose Complete) 121
4.14 CB in Service (Circuit Breaker in Service) 121
4.15 AR Restart 121
4.16 DT OK To Start (Dead Time OK to Start) 122
4.17 DeadTime Enabled 122
4.18 AR Init TripTest (Initiate Trip Test) 122
4.19 AR Skip Shot 1 122
4.20 Inh Reclaim Time (Inhibit Reclaim Time) 122
5 Autoreclose Function Outputs 123
5.1 AR In Progress 123
5.2 DAR In Progress 123
5.3 Sequence Counter Status DDB signals 123
5.4 Successful Close 123
5.5 AR In Service 123
5.6 AR Blk Main Prot (Block Main Protection) 123
5.7 AR Blk SEF Prot (Block SEF Protection) 123
5.8 Reclose Checks 124
5.9 DeadTime In Prog 124
5.10 DT Complete (Dead Time Complete) 124
5.11 AR Sync Check (AR Synchronisation Check) 124
5.12 AR SysChecks OK (AR System Checks OK) 124
5.13 Auto Close 124
5.14 Protection Lockt (Protection Lockout) 124
iv P94V-TM-EN-5
P94V Contents
5.15 Reset Lckout Alm (Reset Lockout Alarm) 124

5.16 Reclaim In Prog 124
5.17 Reclaim Complete 124
6 Autoreclose Function Alarms 125
6.1 AR No Sys Check 125
6.2 AR CB Unhealthy 125
6.3 AR Lockout 125
7 Autoreclose Operation 126
7.1 Operating Modes 126
7.1.1 Four-Position Selector Switch Implementation 127
7.1.2 Operating Mode Selection Logic 128
7.2 Autoreclose Initiation 128
7.2.1 Start Signal Logic 129
7.2.2 Trip Signal Logic 129
7.2.3 Blocking Signal Logic 129
7.2.4 Shots Exceeded Logic 130
7.2.5 AR Initiation Logic 130
7.3 Blocking Instantaneous Protection for Selected Trips 130
7.4 Blocking Instantaneous Protection for Lockouts 133
7.5 Dead Time Control 134
7.5.1 AR CB Close Control 135
7.6 AR System Checks 136
7.7 Reclaim Timer Initiation 137
7.8 Autoreclose Inhibit 138
7.9 Autoreclose Lockout 139
7.10 Sequence Co-ordination 141
7.11 System Checks for First Reclose 142
8 Setting Guidelines 143
8.1 Number of Shots 143
8.2 Dead Timer Setting 143
8.2.1 Stability and Synchronism Requirements 143
8.2.2 Operational Convenience 143
8.2.3 Load Requirements 144
8.2.4 Circuit Breaker 144
8.2.5 Fault De-ionisation Time 144
8.2.6 Protection Reset Time 144
8.3 Reclaim Timer Setting 145
Chapter 8 Monitoring and Control 147

2 Event Records 150
2.1 Event Types 150
2.1.1 Opto-input Events 151
2.1.2 Contact Events 151
2.1.3 Alarm Events 151
2.1.4 Fault Record Events 152
2.1.5 Maintenance Events 152
2.1.6 Protection Events 153
2.1.7 Security Events 153
2.1.8 Platform Events 153
3 Disturbance Recorder 154
4 Measurements 155
4.1 Measured Quantities 155
4.1.1 Measured and Calculated Voltages 155
4.1.2 Frequency Measurements 155
4.1.3 Other Measurements 155
4.2 Measurement Setup 155
P94V-TM-EN-5 v
Contents P94V
4.3 Opto-input Time Stamping 155

5 CB Condition Monitoring 156
5.1.1 Setting the thresholds for the Number of Operations 156
5.1.2 Setting the thresholds for the Operating Time 156
5.1.3 Setting the Thresholds for Excesssive Fault Frequency 156
6 CB State Monitoring 157
6.1 CB State Monitoring Logic 158
7 Circuit Breaker Control 159
7.1 CB Control using the IED Menu 159
7.2 CB Control using the Hotkeys 160
7.3 CB Control using the Function Keys 161
7.4 CB Control using the Opto-inputs 161
7.5 Remote CB Control 161
7.6 Synchronisation Check 162
7.7 CB Healthy Check 162
7.8 CB Control Logic 163
8 System Checks 164
8.1 System Checks Implementation 164
8.1.1 VT Connections 164
8.1.2 Voltage Monitoring 165
8.1.3 Check Synchronisation 165
8.1.4 Check Syncronisation Vector Diagram 165
8.1.5 System Split 166
8.2 System Check Logic 167
8.3 System Check PSL 168
8.4.1 Slip Control 168
8.4.2 Use of Check Sync 2 and System Split 169
8.4.3 Predictive Closure of Circuit Breaker 169
8.4.4 Voltage and Phase Angle Correction 169
Chapter 9 Supervision 171

2 DC Supply Monitor 174
2.1 DC Supply Monitor Implementation 174
2.2 DC Supply Monitor Logic 175
3 Trip Circuit Supervision 176
3.1 Trip Circuit Supervision Scheme 1 176
3.1.1 Resistor Values 176
3.1.2 PSL for TCS Scheme 1 177
Chapter 10 Digital I/O and PSL Configuration 183

2 Configuring Digital Inputs and Outputs 186
3 Scheme Logic 187
3.1 PSL Editor 188
vi P94V-TM-EN-5
P94V Contents
3.2 PSL Schemes 188

3.3 PSL Scheme Version Control 189
4 Configuring the Opto-Inputs 190
5 Assigning the Output Relays 191
6 Fixed Function LEDs 192
6.1 Trip LED Logic 192
7 Configuring Programmable LEDs 193
8 Function Keys 195
9 Control Inputs 196
Chapter 11 Communications 197

2 Communication Interfaces 200
3 Serial Communication 201
3.1 Universal Serial Bus 201
3.2 EIA(RS)485 Bus 201
3.2.1 EIA(RS)485 Biasing Requirements 202
3.3 K-Bus 202
4 Standard Ethernet Communication 204
5 Data Protocols 205
5.1 Courier 205
5.1.1 Physical Connection and Link Layer 205
5.1.2 Courier Database 206
5.1.3 Settings Categories 206
5.1.4 Setting Changes 206
5.1.5 Event Extraction 206
5.1.6 Disturbance Record Extraction 208
5.1.7 Programmable Scheme Logic Settings 208
5.1.8 Time Synchronisation 208
5.1.9 Courier Configuration 209
5.2 IEC 60870-5-103 210
5.2.2 Initialisation 211
5.2.4 Spontaneous Events 211
5.2.5 General Interrogation (GI) 211
5.2.6 Cyclic Measurements 211
5.2.7 Commands 211
5.2.8 Test Mode 212
5.2.9 Disturbance Records 212
5.2.10 Command/Monitor Blocking 212
5.2.11 IEC 60870-5-103 Configuration 212
5.3 DNP 3.0 213
5.3.2 Object 1 Binary Inputs 214
5.3.3 Object 10 Binary Outputs 214
5.3.4 Object 20 Binary Counters 215
5.3.5 Object 30 Analogue Input 215
5.3.6 Object 40 Analogue Output 216
5.3.7 Object 50 Time Synchronisation 216
5.3.8 DNP3 Device Profile 216
5.3.9 DNP3 Configuration 224
5.3.10 DNP3 Unsolicited Reporting 225
5.4 MODBUS 226
5.4.2 MODBUS Functions 226
5.4.3 Response Codes 227
P94V-TM-EN-5 vii
Contents P94V
5.4.4 Register Mapping 227

5.4.5 Event Extraction 227
5.4.6 Disturbance Record Extraction 229
5.4.7 Setting Changes 236
5.4.8 Password Protection 236
5.4.9 Protection and Disturbance Recorder Settings 236
5.4.11 Power and Energy Measurement Data Formats 238
5.4.12 MODBUS Configuration 239
5.5 IEC 61850 240
5.5.1 Benefits of IEC 61850 241
5.5.2 IEC 61850 Interoperability 241
5.5.3 The IEC 61850 Data Model 241
5.5.4 IEC 61850 in MiCOM IEDs 242
5.5.5 IEC 61850 Data Model Implementation 243
5.5.6 IEC 61850 Communication Services Implementation 243
5.5.7 IEC 61850 Peer-to-peer (GOOSE) communications 243
5.5.8 Mapping GOOSE Messages to Virtual Inputs 243
5.5.9 Ethernet Functionality 244
5.5.10 IEC 61850 Configuration 244
6 Read Only Mode 246
6.1 IEC 60870-5-103 Protocol Blocking 246
6.2 Courier Protocol Blocking 246
6.3 IEC 61850 Protocol Blocking 247
6.4 Read-Only Settings 247
6.5 Read-Only DDB Signals 247
7 Time Synchronisation 248
7.1 Demodulated IRIG-B 248
7.1.1 Demodulated IRIG-B Implementation 249
7.2 SNTP 249
7.3 Time Synchronsiation using the Communication Protocols 249
Chapter 12 Cyber-Security 251

1 Overview 253
2 The Need for Cyber-Security 254
3 Standards 255
3.1 NERC Compliance 255
3.1.1 CIP 002 256
3.1.2 CIP 003 256
3.1.3 CIP 004 256
3.1.4 CIP 005 256
3.1.5 CIP 006 256
3.1.6 CIP 007 257
3.1.7 CIP 008 257
3.1.8 CIP 009 257
3.2 IEEE 1686-2007 257
4 Cyber-Security Implementation 259
4.1 NERC-Compliant Display 259
4.2 Four-level Access 260
4.2.1 Blank Passwords 261
4.2.2 Password Rules 262
4.2.3 Access Level DDBs 262
4.3 Enhanced Password Security 262
4.3.1 Password Strengthening 262
4.3.2 Password Validation 263
4.3.3 Password Blocking 263
4.4 Password Recovery 264
viii P94V-TM-EN-5
P94V Contents
4.4.1 Password Recovery 264

4.4.2 Password Encryption 265
4.5 Disabling Physical Ports 265
4.6 Disabling Logical Ports 265
4.7 Security Events Management 266
4.8 Logging Out 268
Chapter 13 Installation 269

2 Handling the Goods 272
2.1 Receipt of the Goods 272
2.2 Unpacking the Goods 272
2.3 Storing the Goods 272
2.4 Dismantling the Goods 272
3 Mounting the Device 273
3.1 Flush Panel Mounting 273
3.1.1 Rack Mounting 274
3.2 K-Series Retrofit 276
3.2.1 Conventions 279
3.3 Software Only 279
4 Cables and Connectors 280
4.1 Terminal Blocks 280
4.2 Power Supply Connections 280
4.3 Earth Connnection 281
4.4 Current Transformers 281
4.5 Voltage Transformer Connections 281
4.6 Watchdog Connections 282
4.7 EIA(RS)485 and K-Bus Connections 282
4.8 IRIG-B Connection 282
4.9 Opto-input Connections 283
4.10 Output Relay Connections 283
4.11 Ethernet Metallic Connections 283
4.12 Ethernet Fibre Connections 283
4.13 USB Connection 284
5 Case Dimensions 285
Chapter 14 Commissioning Instructions 287

2 General Guidelines 290
3 Commissioning Test Menu 291
3.1 Opto I/P Status Cell (Opto-input Status) 291
3.2 Relay O/P Status Cell (Relay Output Status) 291
3.3 Test Port Status Cell 291
3.4 Monitor Bit 1 to 8 Cells 291
3.5 Test Mode Cell 291
3.6 Test Pattern Cell 292
3.7 Contact Test Cell 292
3.8 Test LEDs Cell 292
3.9 Red and Green LED Status Cells 292
4 Commissioning Equipment 293
4.1 Minimum Equipment Required 293
4.2 Optional Equipment Required 293
5 Product Checks 294
5.1 Product Checks with the IED De-energised 294
5.1.1 Visual Inspection 294
P94V-TM-EN-5 ix
Contents P94V
5.1.2 Insulation 295

5.1.3 External Wiring 295
5.1.4 Watchdog Contacts 295
5.1.5 Power Supply 295
5.2 Product Checks with the IED Energised 296
5.2.1 Watchdog Contacts 296
5.2.2 Test LCD 296
5.2.3 Date and Time 296
5.2.4 Test LEDs 297
5.2.5 Test Alarm and Out-of-Service LEDs 297
5.2.6 Test Trip LED 297
5.2.7 Test User-programmable LEDs 297
5.2.8 Test Opto-inputs 297
5.2.9 Test Output Relays 297
5.2.10 Test Serial Communication Port RP1 298
5.2.11 Test Serial Communication Port RP2 299
5.2.12 Test Ethernet Communication 299
5.2.13 Test Voltage Inputs 299
6 Setting Checks 301
6.1 Apply Application-specific Settings 301
6.1.1 Transferring Settings from a Settings File 301
6.1.2 Entering settings using the HMI 301
7 Protection Timing Checks 303
7.1 Undervoltage Check 303
7.2 Connecting the Test Circuit 303
7.3 Performing the Test 303
7.4 Check the Operating Time 303
8 Onload Checks 305
8.1 Confirm Voltage Connections 305
9 Final Checks 306
Chapter 15 Maintenance and Troubleshooting 307

2 Maintenance 310
2.1 Maintenance Checks 310
2.1.1 Alarms 310
2.1.2 Opto-isolators 310
2.1.3 Output Relays 310
2.1.4 Measurement Accuracy 310
2.2 Replacing the Unit 311
2.3 Cleaning 311
3 Troubleshooting 312
3.1 Self-Diagnostic Software 312
3.2 Power-up Errors 312
3.3 Error Message or Code on Power-up 312
3.4 Out of Service LED on at Power-up 313
3.5 Error Code during Operation 313
3.6 Mal-operation during testing 313
3.6.1 Failure of Output Contacts 313
3.6.2 Failure of Opto-inputs 314
3.6.3 Incorrect Analogue Signals 314
3.7 PSL Editor Troubleshooting 314
3.7.1 Diagram Reconstruction 314
3.7.2 PSL Version Check 315
3.8 Repair and Modification Procedure 315
Chapter 16 Technical Specifications 317
x P94V-TM-EN-5
P94V Contents

2 Interfaces 320
2.1 Front USB Port 320
2.2 Rear Serial Port 1 320
2.3 IRIG-B Port 320
2.4 Rear Ethernet Port Copper 320
2.5 Rear Ethernet Port - Fibre 321
2.5.1 100 Base FX Receiver Characteristics 321
2.5.2 100 Base FX Transmitter Characteristics 321
3 Performance of Voltage Protection Functions 322
3.1 Undervoltage Protection 322
3.2 Overvoltage Protection 322
3.3 Residual Overvoltage Protection 322
3.4 Negative Sequence Voltage Protection 322
3.5 Rate of Change of Voltage Protection 323
4 Performance of Frequency Protection Functions 324
4.1 Overfrequency Protection 324
4.2 Underfrequency Protection 324
4.3 Supervised Rate of Change of Frequency Protection 324
4.4 Independent Rate of Change of Frequency Protection 325
4.5 Average Rate of Change of Frequency Protection 325
4.6 Load Restoration 326
5 Performance of Monitoring and Control Functions 327
5.1 PSL Timers 327
5.2 DC Supply Monitor 327
6 Measurements and Recording 328
6.1 General 328
6.2 Disturbance Records 328
6.3 Event, Fault and Maintenance Records 328
7 Standards Compliance 329
7.1 EMC Compliance: 2004/108/EC 329
7.2 Product Safety: 2006/95/EC 329
7.3 R&TTE Compliance 329
7.4 UL/CUL Compliance 329
8 Mechanical Specifications 330
8.1 Physical Parameters 330
8.2 Enclosure Protection 330
8.3 Mechanical Robustness 330
8.4 Transit Packaging Performance 330
9 Ratings 331
9.1 AC Measuring Inputs 331
9.2 Voltage Transformer Inputs 331
10 Power Supply 332
10.1 Auxiliary Power Supply Voltage 332
10.2 Nominal Burden 332
10.3 Auxiliary Power Supply Interruption 332
11 Input / Output Connections 333
11.1 Isolated Digital Inputs 333
11.1.1 Nominal Pickup and Reset Thresholds 333
11.2 Standard Output Contacts 333
11.3 Watchdog Contacts 334
11.4 Shorting Link 334
12 Environmental Conditions 335
12.1 Ambient Temperature Range 335
12.2 Temperature Endurance Test 335
12.3 Ambient Humidity Range 335
P94V-TM-EN-5 xi
Contents P94V
12.4 Corrosive Environments 335

13 Type Tests 336
13.1 Insulation 336
13.2 Creepage Distances and Clearances 336
13.3 High Voltage (Dielectric) Withstand 336
13.4 Impulse Voltage Withstand Test 336
14 Electromagnetic Compatibility 338
14.1 1 MHz Burst High Frequency Disturbance Test 338
14.2 Damped Oscillatory Test 338
14.3 Immunity to Electrostatic Discharge 338
14.4 Electrical Fast Transient or Burst Requirements 338
14.5 Surge Withstand Capability 338
14.6 Surge Immunity Test 339
14.7 Immunity to Radiated Electromagnetic Energy 339
14.8 Radiated Immunity from Digital Communications 339
14.9 Radiated Immunity from Digital Radio Telephones 339
14.10 Immunity to Conducted Disturbances Induced by Radio Frequency Fields 339
14.11 Magnetic Field Immunity 340
14.12 Conducted Emissions 340
14.13 Radiated Emissions 340
14.14 Power Frequency 340
Chapter 17 Wiring Diagrams 341

2 I/O Option A with NVD Input 344
3 I/O Option A with Check Synchronisation 345
4 I/O Option A with NVD Input and Ethernet 346
5 I/O Option A with Check Synchronisation and Ethernet 347
6 I/O Option B with NVD Input and 2 x RS485 Serial Inputs 348
7 I/O Option B with Check Synchronisation Input and 2 x RS485 Serial Inputs 349
8 I/O Option B with NVD Input and TCS 350
9 I/O Option C with Check Synchronisation Input and TCS 351
10 I/O Option D with NVD Input 352
11 I/O Option D with Check Synchronisation Input 353
12 I/O Option E with NVD Input 354
13 I/O Option F with NVD Input 355
14 I/O Option E with Check Synchronisation Input 356
15 I/O Option F with Check Synchronisation Input 357
Appendix A Ordering Options 359
Appendix B Settings and Signals 361
xii P94V-TM-EN-5
Table of Figures
Figure 1: Key to logic diagrams 10
Figure 2: Functional Overview 11
Figure 3: Hardware design overview 30
Figure 4: Exploded view of IED 32
Figure 5: 20TE rear panel 33
Figure 6: 30TE Three-MIDOS block rear panel 34
Figure 7: 30TE Two-MIDOS block + communications rear panel 34
Figure 8: 30TE Two-MIDOS block + blanking plate 35
Figure 9: P94V in 20TE case with I/O option A 36
Figure 10: P94V in 30TE case with I/O option A + Ethernet communications 38
Figure 11: P94V in 30TE case with I/O option B 39
Figure 12: P94V in 30TE case with I/O option C 41
Figure 13: P94V in 30TE case with I/O option D 43
Figure 14: P94V in 20TE case with I/O option E 45
Figure 15: P94V in 30TE case with I/O option E + Ethernet communications 46
Figure 16: P94V in 30TE case with I/O option F 48
Figure 17: Front panel (20TE) 50
Figure 18: Front panel (30TE) 51
Figure 19: Navigating the HMI 60
Figure 20: Default display navigation 62
Figure 21: Undervoltage - single and three phase tripping mode (single stage) 75
Figure 22: Overvoltage - single and three phase tripping mode (single stage) 78
Figure 23: Rate of Change of Voltage protection logic 81
Figure 24: Residual Overvoltage logic 83
Figure 25: Residual voltage for a solidly earthed system 84
Figure 26: Residual voltage for an impedance earthed system 85
Figure 27: Negative Sequence Overvoltage logic 86
Figure 28: Moving Average undervoltage logic 89
Figure 29: Moving Average overvoltage logic 90
Figure 30: Moving Average zero sequence voltage logic 90
Figure 31: Moving Average positive sequence voltage logic 90
Figure 32: Moving Average negative sequence voltage logic 91
Figure 33: Underfrequency logic (single stage) 97
Figure 34: Overfrequency logic (single stage) 99
Figure 35: Power system segregation based upon frequency measurements 100
Figure 36: Independent rate of change of frequency logic (single stage) 102
Figure 37: Frequency-supervised rate of change of frequency logic (single stage) 105
Figure 38: Frequency supervised rate of change of frequency protection 106
Table of Figures P94V
Figure 39: Average rate of change of frequency characteristic 107

Figure 40: Average rate of change of frequency logic (single stage) 108
Figure 41: Load restoration with short deviation into holding band 111
Figure 42: Load restoration with long deviation into holding band 112
Figure 43: Load Restoration logic 113
Figure 44: Four-position selector switch implementation 127
Figure 45: Autoreclose mode select logic 128
Figure 46: Start signal logic 129
Figure 47: Trip signal logic 129
Figure 48: Blocking signal logic 129
Figure 49: Shots Exceeded logic 130
Figure 50: AR initiation logic 130
Figure 51: Blocking instantaneous protection for selected trips 132
Figure 52: Blocking instantaneous protection for lockouts 134
Figure 53: Dead Time Control logic 135
Figure 54: AR CB Close Control logic 136
Figure 55: AR System Check logic 137
Figure 56: Reclaim Time logic 138
Figure 57: AR Initiation inhibit 139
Figure 58: Overall Lockout logic 140
Figure 59: Lockout for protection trip when AR is not available 141
Figure 60: Fault recorder stop conditions 152
Figure 61: CB State Monitoring logic 158
Figure 62: Hotkey menu navigation 160
Figure 63: Default function key PSL 161
Figure 64: Remote Control of Circuit Breaker 162
Figure 65: CB Control logic 163
Figure 66: Check Synchronisation vector diagram 166
Figure 67: System Check logic 167
Figure 68: System Check PSL 168
Figure 69: DC Supply Monitor zones 174
Figure 70: DC Supply Monitor logic 175
Figure 71: TCS Scheme 1 176
Figure 72: PSL for TCS Scheme 1 177
xiv P94V-TM-EN-5
P94V Table of Figures
Figure 79: Scheme Logic Interfaces 188

Figure 80: Trip LED logic 192
Figure 81: RS485 biasing circuit 202
Figure 82: Remote communication using K-Bus 203
Figure 83: Control input behaviour 215
Figure 84: Manual selection of a disturbance record 231
Figure 85: Automatic selection of disturbance record - method 1 232
Figure 86: Automatic selection of disturbance record - method 2 233
Figure 87: Configuration file extraction 234
Figure 88: Data file extraction 235
Figure 89: Data model layers in IEC61850 242
Figure 90: GPS Satellite timing signal 248
Figure 91: Default display navigation 260
Figure 92: Rack mounting of products 275
Figure 93: Inserting cradle into case 277
Figure 94: Spring-loaded CT shorting contacts 278
Figure 95: MiDOS terminal block 280
Figure 96: Earth link for cable screen 282
Figure 97: 20TE case dimensions 285
Figure 98: 30TE case dimensions 286
Figure 99: RP1 physical connection 298
Figure 100: Remote communication using K-bus 299
Figure 101: P94V Voltage and Frequency IED with NVD Input (Model B) 344
Figure 102: P94V Voltage and Frequency IED with Check Synchronisation input (Model P) 345
Figure 103: P94V Voltage and Frequency IED with 8 inputs, 8 outputs, NVD Input and 346
Ethernet (Model B)
Figure 104: P94V Voltage and Frequency IED with 8 inputs, 8 outputs, Check 347
Synchronisation input and Ethernet (Model P)
Figure 105: P94V Voltage and Frequency IED with 11 inputs, 12 outputs, NVD Input and 2 348
RS485 serial ports (Model B)
Figure 106: P94V Voltage and Frequency IED with 11 inputs, 12 outputs, Check 349
Synchronisation input and 2 RS485 serial ports (Model P)
Figure 107: P94V Voltage and Frequency IED with 11 inputs, 12 outputs and NVD Input, for 350
Trip Circuit Supervision (Model B)
Figure 108: P94V Voltage and Frequency IED with 11 inputs, 12 outputs and Check 351
Synchronisation Input, for Trip Circuit Supervision (Model P)
Figure 109: P94V Voltage and Frequency IED with 13 inputs, 12 outputs and NVD Input 352
(Model B)
Synchronisation Input (Model P)
(Model B)
(Model B)
P94V-TM-EN-5 xv
Table of Figures P94V
Figure 114: P94VP Voltage and Frequency IED with 6 inputs, 8 outputs and Check 357
xvi P94V-TM-EN-5
INTRODUCTION
CHAPTER 1
Chapter 1 - Introduction P94V
2 P94V-TM-EN-5
P94V Chapter 1 - Introduction
1 CHAPTER OVERVIEW
This chapter provides some general information about the technical manual and an introduction to the
device(s) described in this technical manual.
This chapter contains the following sections:

Chapter Overview 3
Foreword 4
Product Scope 6
Features and Functions 7
Logic Diagrams 9
Functional Overview 11
P94V-TM-EN-5 3
2 FOREWORD
This technical manual provides a functional and technical description of Alstom Grid's P94V, as well as a
comprehensive set of instructions for using the device. The level at which this manual is written assumes
that you are already familiar with protection engineering and have experience in this discipline. The
description of principles and theory is limited to that which is necessary to understand the product. For
further details on general protection engineering theory, we refer you to Alstom's publication NPAG, which is
available online or from our contact centre.
We have attempted to make this manual as accurate, comprehensive and user-friendly as possible. However
we cannot guarantee that it is free from errors. Nor can we state that it cannot be improved. We would
therefore be very pleased to hear from you if you discover any errors, or have any suggestions for
improvement. Our policy is to provide the information necessary to help you safely specify, engineer, install,
commission, maintain, and eventually dispose of this product. We consider that this manual provides the
necessary information, but if you consider that more details are needed, please contact us.
All feedback should be sent to our contact centre via the following URL:
http://www.alstom.com/grid/contactcentre/
2.1 TARGET AUDIENCE

This manual is aimed towards all professionals charged with installing, commissioning, maintaining,
troubleshooting, or operating any of the products within the specified product range. This includes installation
and commissioning personnel as well as engineers who will be responsible for operating the product.
The level at which this manual is written assumes that installation and commissioning engineers have
knowledge of handling electronic equipment. Also, system and protection engineers have a thorough
knowledge of protection systems and associated equipment.
2.2 TYPOGRAPHICAL CONVENTIONS

The following typographical conventions are used throughout this manual.
● The names for special keys appear in capital letters.
For example: ENTER
● When describing software applications, menu items, buttons, labels etc as they appear on the screen
are written in bold type.
For example: Select Save from the file menu.
● Filenames and paths use the courier font
For example: Example\File.text
● Special terminology is written with leading capitals
For example: Sensitive Earth Fault
● If reference is made to the IED's internal settings and signals database, the menu group heading
(column) text is written in upper case italics
For example: The SYSTEM DATA column
● If reference is made to the IED's internal settings and signals database, the setting cells and DDB
signals are written in bold italics
For example: The Language cell in the SYSTEM DATA column
● If reference is made to the IED's internal settings and signals database, the value of a cell's content is
written in the Courier font
For example: The Language cell in the SYSTEM DATA column contains the value English
4 P94V-TM-EN-5
2.3 NOMENCLATURE
Due to the technical nature of this manual, many special terms, abbreviations and acronyms are used
throughout the manual. Some of these terms are well-known industry-specific terms while others may be
special product-specific terms used by Alstom Grid. The first instance of any acronym or term used in a
particular chapter is explained. In addition, a separate glossary is available on the Alstom Grid website, or
from the Alstom Grid contact centre.
We would like to highlight the following changes of nomenclature however:
● The word 'relay' is no longer used to describe the device itself. Instead, the device is referred to as the
'IED' (Intelligent Electronic Device), the 'device', or the 'product'. The word 'relay' is used purely to
describe the electromechanical components within the device, i.e. the output relays.
● British English is used throughout this manual.
● The British term 'Earth' is used in favour of the American term 'Ground'.
2.4 COMPLIANCE
The device has undergone a range of extensive testing and certification processes to ensure and prove
compatibility with all target markets. A detailed description of these criteria can be found in the Technical
Specifications chapter.
P94V-TM-EN-5 5
3 PRODUCT SCOPE
The P94V Voltage and Frequency IED has been designed for the protection of a wide range of overhead
lines and underground cables for distribution voltage level. The P94V provides integral overvoltage/
undervoltage and overfrequency/underfrequency detection.
In addition to the protection features, the devices include a comprehensive range of non-protection features
to aid with power system diagnosis and fault analysis.
The P94V can be used in various applications, depending on the chosen firmware. There are two different
models according to which firmware is installed: P94VB, P94VP
● The P94VB is the base device for general application
● The P94VP is for check synchronising applications
● The P94VR provides all the features of the P94VP but also provides Autoreclose functionality
All models are available with a range of Input/Output options, which are described in the hardware design
chapter and summarised in the ordering options.
A major advantage of the P40 Agile platform is its backward compatibility with the K-series products. The
P40 Agile products have been designed such that the case, back panel terminal layout and pin-outs are
identical to their K-series predecessors and can be retrofitted without the usual overhead associated with
replacing and rewiring devices. This allows easy upgrade of the protection system with minimum impact and
minimum shutdown time of the feeder.
3.1 ORDERING OPTIONS

All current models and variants for this product are defined in an interactive spreadsheet called the
CORTEC. This is available on the company website.
Alternatively, you can obtain it via the Contact Centre at the following URL:
http://www.alstom.com/grid/contactcentre/
A copy of the CORTEC is also supplied as a static table in the Appendices of this document. However, it
should only be used for guidance as it provides a snapshot of the interactive data taken at the time of
publication.
6 P94V-TM-EN-5
4 FEATURES AND FUNCTIONS
4.1 PROTECTION FUNCTIONS

The P94V models offer the following protection functions:
ANSI IEC 61850 Protection Function P94VB P94VP P94VR
25 Check synchronising No Yes Yes
27 VtpPhsPTUV Undervoltage 3 stages 3 stages 3 stages
47 Negative sequence overvoltage Yes Yes Yes
59 VtpPhsPTOV Overvoltage 3 stages 3 stages 3 stages
59N VtpResPTOV Residual Overvoltage 3 stages 3 stages 3 stages
81O FrqPTOF Overfrequency Yes Yes Yes
81U FrqPTUF Underfrequency Yes Yes Yes
81df/dt Rate of change of frequency (df/dt) Yes Yes Yes
81RF DfpPFRC Frequency supervised rate of change of frequency No Yes Yes
81RAV DfpPFRC Frequency supervised average rate of change of frequency No Yes Yes
81R Load Restoration No Yes Yes
81V DfpPFRC Undervoltage blocking of frequency protection Yes Yes Yes
Rate of change of voltage (dv/dt) No Yes Yes
79 RREC Autoreclose (3 phases) No No Yes
Programmable curves Yes Yes Yes
CB Monitoring Yes Yes Yes
86 Latching output contacts (Lockout) Yes Yes Yes
4.2 CONTROL FUNCTIONS
Feature IEC 61850 ANSI

Power-up diagnostics and continuous self-monitoring
Fully customizable menu texts
Function keys FnkGGIO
Alternative setting groups (4)
Programmable LEDs LedGGIO
Programmable hotkeys
Watchdog contacts
Read-only mode
NERC compliant cyber-security
Programmable allocation of digital inputs and outputs
Control inputs PloGGIO1
Graphical programmable scheme logic (PSL)
Circuit breaker control, status & condition monitoring XCBR 52
Trip circuit and coil supervision
CT supervision (only for products with VT inputs)
VT supervision (only for products with VT inputs)
Fault locator (only for products with VT inputs) RFLO
P94V-TM-EN-5 7
4.3 MEASUREMENT FUNCTIONS

The device offers the following measurement functions:
Measurement Function Details
Measurements ● Measured currents and calculated sequence
(Exact range of measurements depend on the device model) and RMS currents
● Measured voltages and calculated sequence
and RMS voltages
● Power and energy quantities
● Peak, fixed and rolling demand values
● Frequency measurements
● Others measurements
Disturbance records (waveform capture, oscillography)
Channels / duration each or total / samples per cycle 9 / 10, 5 / 24
Fault Records 10
Maintenance Records 10
Event Records / Event logging 2048
Time Stamping of Opto-inputs Yes
4.4 COMMUNICATION FUNCTIONS

The device offers the following communication functions:
Communication Function Details
Local HMI Yes
Multi-language HMI (English, French, German, Italian, Yes
Portuguese, Spanish, Russian)
Front port USB
1st rear port RS485 or IRIG-B
2nd rear port (optional) RS485 or IRIG-B or Ethernet
Seriall Protocols available IEC 60870-5-103, MODBUS, Courier, DNP3
Ethernet Protocols available IEC 61850, DNP3 over Ethernet
Virtual inputs 32
Cyber-security Yes
Enhanced Studio (S1 Agile) Yes
8 P94V-TM-EN-5
5 LOGIC DIAGRAMS
This technical manual contains many logic diagrams, which should help to explain the functionality of the
device. Although this manual has been designed to be as specific as possible to the chosen product, it may
contain diagrams, which have elements applicable to other products. If this is the case, a qualifying note will
accompany the relevant part.
The logic diagrams follow a convention for the elements used, using defined colours and shapes. A key to
this convention is provided below. We recommend viewing the logic diagrams in colour rather than in black
and white. The electronic version of the technical manual is in colour, but the printed version may not be. If
you need coloured diagrams, they can be provided on request by calling the contact centre and quoting the
diagram number.
P94V-TM-EN-5 9
Key:
Energising Quantity AND gate &
Internal Signal OR gate 1
DDB Signal XOR gate XOR
Internal function NOT gate
Setting cell Logic 0 0
Setting value Timer
Hardcoded setting
Pulse / Latch
Measurement Cell S
SR Latch Q
R
Internal Calculation
S
SR Latch Q
Derived setting Reset Dominant RD
HMI key Latched on positive edge
Connection / Node Inverted logic input

1
Switch Soft switch 2
Switch Multiplier X
Bandpass filter
Comparator for detecting
undervalues
Comparator for detecting

V00063 overvalues
Figure 1: Key to logic diagrams
10 P94V-TM-EN-5
6 FUNCTIONAL OVERVIEW
81O
81RF
86 dV/dT 25 27 47 51V 59 67 81U 81RAV
59N 67N 81R
81df/dt
81V
CB Digital I /O Communication Measurements Disturb. records

Control Opto- Relay Local
IRIG-B RS485 Fault records Event records
inputs outputs USB
V00003
Figure 2: Functional Overview
P94V-TM-EN-5 11
12 P94V-TM-EN-5
SAFETY INFORMATION
CHAPTER 2
Chapter 2 - Safety Information P94V
14 P94V-TM-EN-5
P94V Chapter 2 - Safety Information
1 CHAPTER OVERVIEW
This chapter provides information about the safe handling of the equipment. The equipment must be properly
installed and handled in order to maintain it in a safe condition and to keep personnel safe at all times. You
must be familiar with information contained in this chapter before unpacking, installing, commissioning, or
servicing the equipment.

Chapter Overview 15
Health and Safety 16
Symbols 17
Installation, Commissioning and Servicing 18
Decommissioning and Disposal 23
Standards Compliance 24
P94V-TM-EN-5 15
2 HEALTH AND SAFETY

Personnel associated with the equipment must be familiar with the contents of this Safety Information.
When electrical equipment is in operation, dangerous voltages are present in certain parts of the equipment.
Improper use of the equipment and failure to observe warning notices will endanger personnel.
Only qualified personnel may work on or operate the equipment. Qualified personnel are individuals who are:
● familiar with the installation, commissioning, and operation of the equipment and the system to which it
is being connected.
● familiar with accepted safety engineering practises and are authorised to energise and de-energise
equipment in the correct manner.
● trained in the care and use of safety apparatus in accordance with safety engineering practises
● trained in emergency procedures (first aid).
The documentation provides instructions for installing, commissioning and operating the equipment. It
cannot, however cover all conceivable circumstances. In the event of questions or problems, do not take any
action without proper authorisation. Please contact your local sales office and request the necessary
information.
16 P94V-TM-EN-5
3 SYMBOLS
Throughout this manual you will come across the following symbols. You will also see these symbols on
parts of the equipment.
Caution:
Refer to equipment documentation. Failure to do so could result in damage to
the equipment
Warning:
Risk of electric shock
Earth terminal. Note: This symbol may also be used for a protective conductor (earth) terminal if that
terminal is part of a terminal block or sub-assembly.
Protective conductor (earth) terminal
Instructions on disposal requirements
Note:
The term 'Earth' used in this manual is the direct equivalent of the North American term 'Ground'.
P94V-TM-EN-5 17
4 INSTALLATION, COMMISSIONING AND SERVICING
4.1 LIFTING HAZARDS

Many injuries are caused by:
● Lifting heavy objects
● Lifting things incorrectly
● Pushing or pulling heavy objects
● Using the same muscles repetitively
Plan carefully, identify any possible hazards and determine how best to move the product. Look at other
ways of moving the load to avoid manual handling. Use the correct lifting techniques and Personal Protective
Equipment (PPE) to reduce the risk of injury.
4.2 ELECTRICAL HAZARDS
Caution:
All personnel involved in installing, commissioning, or servicing this equipment
must be familiar with the correct working procedures.
Caution:
Consult the equipment documentation before installing, commissioning, or
servicing the equipment.
Caution:
Always use the equipment as specified. Failure to do so will jeopardise the
protection provided by the equipment.
Warning:
Removal of equipment panels or covers may expose hazardous live parts. Do
not touch until the electrical power is removed. Take care when there is
unlocked access to the rear of the equipment.
Warning:
Isolate the equipment before working on the terminal strips.
Warning:
Use a suitable protective barrier for areas with restricted space, where there is a
risk of electric shock due to exposed terminals.
Caution:
Disconnect power before disassembling. Disassembly of the equipment may
expose sensitive electronic circuitry. Take suitable precautions against
electrostatic voltage discharge (ESD) to avoid damage to the equipment.
18 P94V-TM-EN-5
Caution:
NEVER look into optical fibres or optical output connections. Always use optical
power meters to determine operation or signal level.
Caution:
Testing may leave capacitors charged to dangerous voltage levels. Discharge
capacitors by rediucing test voltages to zero before disconnecting test leads.
Caution:
Operate the equipment within the specified electrical and environmental limits.
Caution:
Before cleaning the equipment, ensure that no connections are energised. Use a
lint free cloth dampened with clean water.
Note:
Contact fingers of test plugs are normally protected by petroleum jelly, which should not be removed.
4.3 UL/CSA/CUL REQUIREMENTS

The information in this section is applicable only to equipment carrying UL/CSA/CUL markings.
Caution:
Equipment intended for rack or panel mounting is for use on a flat surface of a
Type 1 enclosure, as defined by Underwriters Laboratories (UL).
Caution:
To maintain compliance with UL and CSA/CUL, install the equipment using UL/
CSA-recognised parts for: cables, protective fuses, fuse holders and circuit
breakers, insulation crimp terminals, and replacement internal batteries.
4.4 FUSING REQUIREMENTS
Caution:
Where UL/CSA listing of the equipment is required for external fuse protection, a
UL or CSA Listed fuse must be used for the auxiliary supply. The listed
protective fuse type is: Class J time delay fuse, with a maximum current rating
of 15 A and a minimum DC rating of 250 V dc (for example type AJT15).
P94V-TM-EN-5 19
Caution:
Where UL/CSA listing of the equipment is not required, a high rupture capacity
(HRC) fuse type with a maximum current rating of 16 Amps and a minimum dc
rating of 250 V dc may be used for the auxiliary supply (for example Red Spot
type NIT or TIA).
For P50 models, use a 1A maximum T-type fuse.
For P60 models, use a 4A maximum T-type fuse.
Caution:
Digital input circuits should be protected by a high rupture capacity NIT or TIA
fuse with maximum rating of 16 A. for safety reasons, current transformer
circuits must never be fused. Other circuits should be appropriately fused to
protect the wire used.
Caution:
CTs must NOT be fused since open circuiting them may produce lethal
hazardous voltages
4.5 EQUIPMENT CONNECTIONS
Warning:
Terminals exposed during installation, commissioning and maintenance may
present a hazardous voltage unless the equipment is electrically isolated.
Caution:
Tighten M4 clamping screws of heavy duty terminal block connectors to a
nominal torque of 1.3 Nm.
Tighten captive screws of terminal blocks to 0.5 Nm minimum and 0.6 Nm
maximum.
Caution:
Always use insulated crimp terminations for voltage and current connections.
Caution:
Always use the correct crimp terminal and tool according to the wire size.
Caution:
Watchdog (self-monitoring) contacts are provided to indicate the health of the
device on some products. We strongly recommend that you hard wire these
contacts into the substation's automation system, for alarm purposes.
20 P94V-TM-EN-5
4.6 PROTECTION CLASS 1 EQUIPMENT REQUIREMENTS
Caution:
Earth the equipment with the supplied PCT (Protective Conductor Terminal).
Caution:
Do not remove the PCT.
Caution:
The PCT is sometimes used to terminate cable screens. Always check the PCT’s
integrity after adding or removing such earth connections.
Caution:
Use a locknut or similar mechanism to ensure the integrity of stud-connected
PCTs.
Caution:
The recommended minimum PCT wire size is 2.5 mm² for countries whose
mains supply is 230 V (e.g. Europe) and 3.3 mm² for countries whose mains
supply is 110 V (e.g. North America). This may be superseded by local or
country wiring regulations.
For P60 products, the recommended minimum PCT wire size is 6 mm². See
product documentation for details.
Caution:
The PCT connection must have low-inductance and be as short as possible.
Caution:
All connections to the equipment must have a defined potential. Connections
that are pre-wired, but not used, should be earthed, or connected to a common
grouped potential.
4.7 PRE-ENERGISATION CHECKLIST
Caution:
Check voltage rating/polarity (rating label/equipment documentation).
Caution:
Check CT circuit rating (rating label) and integrity of connections.
Caution:
Check protective fuse or miniature circuit breaker (MCB) rating.
P94V-TM-EN-5 21
Caution:
Check integrity of the PCT connection.
Caution:
Check voltage and current rating of external wiring, ensuring it is appropriate for
the application.
4.8 PERIPHERAL CIRCUITRY
Warning:
Do not open the secondary circuit of a live CT since the high voltage produced
may be lethal to personnel and could damage insulation. Short the secondary of
the line CT before opening any connections to it.
Note:
For most Alstom equipment with ring-terminal connections, the threaded terminal block for current transformer
termination is automatically shorted if the module is removed. Therefore external shorting of the CTs may not be
required. Check the equipment documentation and wiring diagrams first to see if this applies.
Caution:
Where external components such as resistors or voltage dependent resistors
(VDRs) are used, these may present a risk of electric shock or burns if touched.
Warning:
Take extreme care when using external test blocks and test plugs such as the
MMLG, MMLB and P990, as hazardous voltages may be exposed. Ensure that CT
shorting links are in place before removing test plugs, to avoid potentially lethal
voltages.
4.9 UPGRADING/SERVICING
Warning:
Do not insert or withdraw modules, PCBs or expansion boards from the
equipment while energised, as this may result in damage to the equipment.
Hazardous live voltages would also be exposed, endangering personnel.
Caution:
Internal modules and assemblies can be heavy and may have sharp edges. Take
care when inserting or removing modules into or out of the IED.
22 P94V-TM-EN-5
5 DECOMMISSIONING AND DISPOSAL
Caution:
Before decommissioning, completely isolate the equipment power supplies
(both poles of any dc supply). The auxiliary supply input may have capacitors in
parallel, which may still be charged. To avoid electric shock, discharge the
capacitors using the external terminals before decommissioning.
Caution:
Avoid incineration or disposal to water courses. Dispose of the equipment in a
safe, responsible and environmentally friendly manner, and if applicable, in
accordance with country-specific regulations.
P94V-TM-EN-5 23
6 STANDARDS COMPLIANCE
Compliance with the European Commission Directive on EMC and LVD is demonstrated by self certification
against international standards.
6.1 EMC COMPLIANCE: 2004/108/EC

Compliance with EN60255-26:2009 was used to establish conformity.
6.2 PRODUCT SAFETY: 2006/95/EC

Protective Class
IEC 60255-27: 2005 Class 1 (unless otherwise specified in equipment documentation). This equipment
requires a protective conductor (earth) to ensure user safety.
Installation category
IEC 60255-27: 2005 Overvoltage Category 3. Equipment in this category is qualification tested at 5kV peak,
1.2/50 mS, 500 Ohms, 0.5 J, between all supply circuits and earth and also between independent circuits.
Environment
IEC 60255-27: 2005, IEC 60255-26:2009. The equipment is intended for indoor use only. If it is required for
use in an outdoor environment, it must be mounted in a cabinet with the appropriate degree of ingress
protection.
6.3 R&TTE COMPLIANCE

Radio and Telecommunications Terminal Equipment (R&TTE) directive 99/5/EC.
Conformity is demonstrated by compliance to both the EMC directive and the Low Voltage directive, to zero
volts.
6.4 UL/CUL COMPLIANCE

If marked with this logo, the product is compliant with the requirements of the Canadian and USA
Underwriters Laboratories.
The relevant UL file number and ID is shown on the equipment.
6.5 ATEX COMPLIANCE

If marked with the logo, the equipment is compliant with article 192 of European directive 94/9/EC. It is
approved for operation outside an ATEX hazardous area. It is however approved for connection to Increased
Safety, "Ex e", motors with rated ATEX protection, equipment category 2, to ensure their safe operation in
gas zones 1 and 2 hazardous areas.
24 P94V-TM-EN-5
Equipment with this marking is not itself suitable for operation within a potentially explosive
atmosphere.
Compliance demonstrated by Notified Body Type Examination Certificate.
ATEX Potentially Explosive Atmospheres directive 94/9/EC for equipment.
P94V-TM-EN-5 25
26 P94V-TM-EN-5
HARDWARE DESIGN
CHAPTER 3
Chapter 3 - Hardware Design P94V
28 P94V-TM-EN-5
P94V Chapter 3 - Hardware Design
1 CHAPTER OVERVIEW
This chapter provides information about the product's hardware design.
Chapter Overview 29
Hardware Architecture 30
Mechanical Implementation 32
Terminal Connections 36
Front Panel 50
P94V-TM-EN-5 29
2 HARDWARE ARCHITECTURE
The main components comprising devices based on the P40Agile platform are as follows:
● The housing, consisting of a front panel and connections at the rear
● The Main processor module consisting of the main CPU (Central Processing Unit), memory and an
interface to the front panel HMI (Human Machine Interface)
● An I/O board consisting of output relay contacts and digital opto-inputs
● Communication modules
● Power supply
All modules are connected by a parallel data and address bus, which allows the processor module to send
and receive information to and from the other modules as required. There is also a separate serial data bus
for conveying sampled data from the input module to the CPU. These parallel and serial databuses are
shown as a single interconnection module in the following figure, which shows typical modules and the flow
of data between them.
Keypad
Output relay module Output relay contacts
Processor module
Front panel HMI
LCD
Opto-input module Digital inputs
LEDs
I/O
Front port
CTs Power system currents *
Memory
Interconnection
Flash memory for all

settings and records
VTs Power system voltages *
Super capacitor-backed Analogue Inputs
DRAM
for real-time clock
RS485 module RS485 communication
Watchdog
Time synchronisation
contacts Watchdog module IRIG-B module
(Optional)
+ LED
Ethernet communication
Ethernet module
Auxiliary (Optional)
PSU module
Supply Communications
* No VTs on current- only models. No CTs on voltage-only models
V00200
Figure 3: Hardware design overview
2.1 MEMORY AND REAL TIME CLOCK

The IED contains flash memory for storing the following operational information:
● Fault, Maintenance and Disturbance Records
● Events
● Alarms
● Measurement values
● Latched trips
● Latched contacts
30 P94V-TM-EN-5
Flash memory is non-volatile and therefore no backup battery is required.

A dedicated Supercapacitor keeps the on board real time clock operational for up to four days after power
down.
P94V-TM-EN-5 31
3 MECHANICAL IMPLEMENTATION
All products based on the P40Agile platform have common hardware architecture. The hardware comprises
two main parts; the cradle and the housing.
The cradle consists of the front panel which is attached to a carrier board into which all of the hardware
boards and modules are connected. The products have been designed such that all the boards and modules
comprising the product are fixed into the cradle and are not intended to be removed or inserted after the
product has left the factory.
The housing comprises the housing metalwork and connectors at the rear into which the boards in the cradle
plug into.
Figure 4: Exploded view of IED
3.1 HOUSING VARIANTS

The P40 Agile range of products are implemented in one of two case sizes. Case dimensions for industrial
products usually follow modular measurement units based on rack sizes. These are: U for height and TE for
width, where:
● 1U = 1.75 inches = 44.45 mm
● 1TE = 0.2 inches = 5.08 mm
The products are available in panel-mount or standalone versions. All products are nominally 4U high. This
equates to 177.8 mm or 7 inches.
The cases are pre-finished steel with a conductive covering of aluminium and zinc. This provides good
grounding at all joints, providing a low resistance path to earth that is essential for performance in the
presence of external noise.
The case width depends on the product type and its hardware options. There are two different case widths
for the described range of products: 20TE and 30TE. The products in the P40Agile range can be used as a
32 P94V-TM-EN-5
K-series refit and the cases, cradle, and pin-outs are completely inter-compatible. The case dimensions and
compatibility criteria are as follows:
Case width (TE) Case width (mm) Equivalent K series Products
20TE 102.4 mm (4 inches) KCGG140/142 P14N
30TE 154.2 mm (6 inches) KCEG140/142 P14N (with extra I/O), P14D
3.2 20TE REAR PANEL

The 20TE rear panel consists of two MIDOS heavy duty terminal blocks.
Figure 5: 20TE rear panel
3.3 30TE REAR PANEL

The 30TE rear panel consists of either:
● Three MIDOS heavy duty terminal blocks
● Two MIDOS heavy duty terminal blocks and a communication board
● Two MIDOS heavy duty terminal blocks and a blanking panel
P94V-TM-EN-5 33
Figure 6: 30TE Three-MIDOS block rear panel
Figure 7: 30TE Two-MIDOS block + communications rear panel
34 P94V-TM-EN-5
Figure 8: 30TE Two-MIDOS block + blanking plate
P94V-TM-EN-5 35
4 TERMINAL CONNECTIONS
4.1 I/O OPTIONS
Component I/O option A I/O option B I/O option C I/O option D I/O option E I/O option F
8 11 11 13 6
3
Digital inputs (1 group of 3 and (2 groups of 3 and (1 group of 3, 1 group (1 group of 3 and (1 group of 3 and
(1 group of 3)
1 group of 5) 1 group of 5) of 5 and 3 individual) 2 groups of 5) 3 individual)
8 12 12 12 4 8
Output relays
(NO) (NO) (11 NO, 1 NC) (NO) (NO) (5 NO, 1 NC)
Note:
I/O options C and F are suitable for Trip Circuit Supervision (TCS) applications.
4.2 P94V HARDWARE CONFIGURATION 1
1 29 30
3 4 31 RL5 RL1 32
5 WatchDog 6 33 34
7 8 35 RL6 RL2 36
9 10 37 38
11 12 39 RL7 RL3 40
13 14 41 42
PSU
15 16 43 RL8 RL4 44
17 Vcs 18 45 46
19 Va Vb 20 L4 L1
47 48
21 Vc 22 L5 L2
49 50
23 24 L6 L3
51 52
25 26 L7
53 54
27 28 L8
55 56
SCN
E00212
Figure 9: P94V in 20TE case with I/O option A
4.2.1 TERMINAL BLOCK LEFT
Terminal Description
1 Earth
2 Not used
3+5 Watchdog, normally closed
4+6 Watchdog, normally open
7 to 12 Not used
13 + 14 Power Supply Unit
36 P94V-TM-EN-5
15 + 16 Voltage Transformer Vcs
17+18 Voltage Transformer Va and Vb
19 + 20 Voltage Transformer Vc
21 to 28 Not used
4.2.2 TERMINAL BLOCK RIGHT
30 + 32 Relay 1, normally open
46 + 52 Opto-input L1 (group 1)
54 + 56 EIA(RS)485 or Demodulated IRIG-B
P94V-TM-EN-5 37
1 29 30
3 4 31 RL5 RL1 32
5 WatchDog 6 33 34
7 8 Ethernet 35 RL6 RL2 36
9 10 Communications 37 38
Board
11 12 39 RL7 RL3 40
13 14 41 42
PSU Single Channel
15 16 43 RL8 RL4 44
17 Vcs 18 45 46
Va Vb 10/100Base-TX L4 L1
19 20 47 48
21 Vc 22
or L5 L2
49 50
23 24 100Base-FX L6 L3
51 52
25 26 L7
53 54
27 28 L8
55 56
SCN
E00216
Figure 10: P94V in 30TE case with I/O option A + Ethernet communications
1 Earth
2 Not used
7 to 12 Not used
21 to 28 Not used
38 P94V-TM-EN-5
1 57 58 29 30
3 4 59 RL9 60 31 RL5 RL1 32
5 WatchDog 6 61 62 33 34
7 8 63 RL10 64 35 RL6 RL2 36
9 10 65 66 37 38
11 12 67 RL11 68 39 RL7 RL3 40
13 14 69 70 41 42
PSU
15 16 71 RL12 72 43 RL8 RL4 44
17 Vcs 18 73 74 45 46
19 Va Vb 20 L9 L4 L1
75 76 47 48
21 Vc 22 L10 L5 L2
77 78 49 50
23 24 L11 L6 L3
79 80 51 52
25 26 L7
81 82 53 54
27 28 L8
83 84 55 56
SCN SCN
E00214
Figure 11: P94V in 30TE case with I/O option B
1 Earth
2 Not used
7 to 12 Not used
P94V-TM-EN-5 39
21 to 28 Not used
4.4.3 TERMINAL BLOCK CENTRE
The rest Not used
40 P94V-TM-EN-5
1 57 58 29 30
3 4 59 RL9 60 31 RL5 RL1 32
5 WatchDog 6 61 62 33 34
7 8 63 RL10 64 35 RL6 RL2 36
9 10 65 66 37 38
11 12 67 RL11 68 39 RL7 RL3 40
13 14 69 70 41 42
PSU
15 16 71 RL12 72 43 RL8 RL4 44
17 Vcs 18 73 74 45 46
19 Va Vb 20 L9 L4 L1
75 76 47 48
21 Vc 22 L5 L2
77 78 49 50
23 24 L10 L6 L3
79 80 51 52
25 26 L7
81 82 53 54
27 28 L11 L8
83 84 55 56
SCN
E00215
Figure 12: P94V in 30TE case with I/O option C
1 Earth
2 Not used
7 to 12 Not used
21 to 28 Not used
P94V-TM-EN-5 41
70 + 72 Relay 12, normally closed
74 + 76 Opto-input L9
The rest Not used
42 P94V-TM-EN-5
1 57 58 29 30
3 4 59 RL9 60 31 RL5 RL1 32
5 WatchDog 6 61 62 33 34
7 8 63 RL10 64 35 RL6 RL2 36
9 10 65 66 37 38
11 12 67 RL11 68 39 RL7 RL3 40
13 14 69 70 41 42
PSU
15 16 71 RL12 72 43 RL8 RL4 44
17 Vcs 18 73 74 45 46
19 Va Vb 20 L9 L4 L1
75 76 47 48
21 Vc 22 L10 L5 L2
77 78 49 50
23 24 L11 L6 L3
79 80 51 52
25 26 L12 L7
81 82 53 54
27 28 L13 L8
83 84 55 56
SCN
E00213
Figure 13: P94V in 30TE case with I/O option D
1 Earth
2 Not used
7 to 12 Not used
21 to 28 Not used
P94V-TM-EN-5 43
The rest Not used
44 P94V-TM-EN-5
1 29 30
3 4 31 RL1 32
5 WatchDog 6 33 34
7 8 35 RL2 36
9 10 37 38
11 12 39 RL3 40
13 14 41 42
PSU
15 16 43 RL4 44
17 Vcs 18 45 46
19 Va Vb 20 L1
47 48
21 Vc 22 L2
49 50
23 24 L3
51 52
25 26 53 54
27 28 55 56
SCN
E00268
Figure 14: P94V in 20TE case with I/O option E
1 Earth
2 Not used
7 to 12 Not used
21 to 28 Not used
29 + 31 Not used
33 + 35 Not used
37 + 39 Not used
P94V-TM-EN-5 45
41 + 43 Not used
45 + 55 Not used
47 + 55 Not used
49 + 55 Not used
51 + 55 Not used
53 + 55 Not used
1 29 30
3 4 31 RL1 32
5 WatchDog 6 33 34
7 8 Ethernet 35 RL2 36
9 10 Communications
37 38
Board
11 12 39 RL3 40
13 14 41 42
PSU Single Channel
15 16 43 RL4 44
17 Vcs 18 45 46
Va Vb 10/100Base-TX L1
19 20 47 48
21 Vc 22
or L2
49 50
23 24 100Base-FX L3
51 52
25 26 53 54
27 28 55 56
SCN
E00274
Figure 15: P94V in 30TE case with I/O option E + Ethernet communications
1 Earth
2 Not used
7 to 12 Not used
46 P94V-TM-EN-5
21 to 28 Not used
29 + 31 Not used
33 + 35 Not used
37 + 39 Not used
41 + 43 Not used
45 + 55 Not used
47 + 55 Not used
49 + 55 Not used
51 + 55 Not used
53 + 55 Not used
P94V-TM-EN-5 47
1 57 58 29 30
3 4 59 RL5 60 31 RL1 32
5 WatchDog 6 61 62 33 34
7 8 63 RL6 64 35 RL2 36
9 10 65 66 37 38
11 12 67 RL7 68 39 RL3 40
13 14 69 70 41 42
PSU
15 16 71 RL8 72 43 RL4 44
17 Vcs 18 73 74 45 46
19 Va Vb 20 L4 L1
75 76 47 48
21 Vc 22 L2
77 78 49 50
23 24 L5 L3
79 80 51 52
25 26 81 82 53 54
27 28 L6
83 84 55 56
SCN
EN00269
Figure 16: P94V in 30TE case with I/O option F
1 Earth
2 Not used
7 to 12 Not used
21 to 28 Not used
29 + 31 Not used
33 + 35 Not used
48 P94V-TM-EN-5
37 + 39 Not used
41 + 43 Not used
45 + 55 Not used
47 + 55 Not used
49 + 55 Not used
51 + 55 Not used
53 + 55 Not used
70 + 72 Relay 8, normally closed
The rest Not used
P94V-TM-EN-5 49
5 FRONT PANEL
5.1 20TE FRONT PANEL
Figure 17: Front panel (20TE)

The figures show the front panels for the 20TE variant.
It consists of:
● LCD display
● Keypad
● USB port
● 4 x fixed function tri-colour LEDs
● 4 x programmable tri-colour LEDs
50 P94V-TM-EN-5
5.2 30TE FRONT PANEL
Figure 18: Front panel (30TE)

The figures show the front panels for the 30TE variant.
It consists of:
● LCD display
● Keypad
● USB port
● 4 x fixed function tri-colour LEDs
● 8 x programmable tri-colour LEDs
● 3 x function keys
● 3 x tri-colour LEDs for the function keys
5.3 KEYPAD
The keypad consists of the following keys:
4 arrow keys to navigate the menus (organised around the Enter

key)
An enter key for executing the chosen option
P94V-TM-EN-5 51
A clear key for clearing the last command
A read key for viewing larger blocks of text (arrow keys now used
for scrolling)
2 hot keys for scrolling through the default display and for control
of setting groups. These are situated directly below the LCD
display.
5.4 LIQUID CRYSTAL DISPLAY

The LCD is a high resolution monochrome display with 16 characters by 3 lines and controllable back light.
5.5 USB PORT

The USB port is situated on the front panel in the bottom left hand corner, and is used to communicate with a
locally connected PC. It has two main purposes:
● To transfer settings information to/from the PC from/to the device.
● For downloading firmware updates and menu text editing.
The port is intended for temporary connection during testing, installation and commissioning. It is not
intended to be used for permanent SCADA communications. This port supports the Courier communication
protocol only. Courier is a proprietary communication protocol to allow communication with a range of
protection equipment, and between the device and the Windows-based support software package.
You can connect the unit to a PC with a USB cable up to 5 m in length.
The inactivity timer for the front port is set to 15 minutes. This controls how long the unit maintains its level of
password access on the front port. If no messages are received on the front port for 15 minutes, any
password access level that has been enabled is cancelled.
Note:
The front USB port does not support automatic extraction of event and disturbance records, although this data can be
accessed manually.
Caution:
When not in use, always close the cover of the USB port to prevent
contamination.
52 P94V-TM-EN-5
5.6 FIXED FUNCTION LEDS

Four fixed-function LEDs on the left-hand side of the front panel indicate the following conditions.
● Trip (Red) switches ON when the IED issues a trip signal. It is reset when the associated fault record
is cleared from the front display. Also the trip LED can be configured as self-resetting.
● Alarm (Yellow) flashes when the IED registers an alarm. This may be triggered by a fault, event or
maintenance record. The LED flashes until the alarms have been accepted (read), then changes to
constantly ON. When the alarms are cleared, the LED switches OFF.
● Out of service (Yellow) is ON when the IED's functions are unavailable.
● Healthy (Green) is ON when the IED is in correct working order, and should be ON at all times. It goes
OFF if the unit’s self-tests show there is an error in the hardware or software. The state of the healthy
LED is reflected by the watchdog contacts at the back of the unit.
5.7 FUNCTION KEYS

The programmable function keys are available for custom use for some models.
Factory default settings associate specific functions to these keys, but by using programmable scheme logic,
you can change the default functions of these keys to fit specific needs. Adjacent to these function keys are
programmable LEDs, which are usually set to be associated with their respective function keys.
5.8 PROGRAMABLE LEDS

The device has a number of programmable LEDs. All of the programmable LEDs on the unit are tri-colour
and can be set to RED, YELLOW or GREEN.
In the 20TE case, four programmable LEDs are available. In 30TE, eight are available.
P94V-TM-EN-5 53
54 P94V-TM-EN-5
CONFIGURATION
CHAPTER 4
Chapter 4 - Configuration P94V
56 P94V-TM-EN-5
P94V Chapter 4 - Configuration
1 CHAPTER OVERVIEW
Each product has different configuration parameters according to the functions it has been designed to
perform. There is, however, a common methodology used across the entire product series to set these
parameters.
Some of the communications setup can only be carried out using the HMI, and cannot be carried out using
settings applications software. This chapter includes concise instructions of how to configure the device,
particularly with respect to the communications setup, as well as a description of the common methodology
used to configure the device in general.

Chapter Overview 57
Settings Application Software 58
Using the HMI Panel 59
Date and Time Configuration 69
Settings Group Selection 70
P94V-TM-EN-5 57
2 SETTINGS APPLICATION SOFTWARE

To configure this device you will need to use the Settings Application Software. The settings application
software used in this range of IEDs is called MiCOM S1 Agile. It is a collection of software tools, which is
used for setting up and managing the IEDs.
Although you can change many settings using the front panel HMI, some of the features cannot be
configured without the Settings Application Software; for example the programmable scheme logic, or
IEC61850 communications.
If you do not already have a copy of the Settings Application Software, you can obtain it from Alstom Grid
contact centre.
To configure your product, you will need a data model that matches your product. When you launch the
Settings Application Software, you will be presented with a panel that allows you to invoke the “Data Model
Manager”. This will close the other aspects of the software in order to allow an efficient import of the chosen
data model. If you don’t have, or can’t find, the data model relating to your product, please call the Alstom
Grid contact centre.
When you have loaded all the data models you need, you should restart the Settings Application Software
and start to create a model of your system using the “System Explorer” panel.
The software is designed to be intuitive, but help is available in an online help system and also the Settings
Application Software user guide P40-M&CR-SAS-UG-EN-n, where 'Language' is a 2 letter code designating
the language version of the user guide and 'n' is the latest version of the settings application software.
58 P94V-TM-EN-5
3 USING THE HMI PANEL

Using the HMI, you can:
● Display and modify settings
● View the digital I/O signal status
● Display measurements
● Display fault records
● Reset fault and alarm indications
The keypad provides full access to the device functionality using a range of menu options. The information is
displayed on the LCD.
Keys Description Function
To change the menu level or change between settings in

Up and down cursor keys
a particular column, or changing values within a cell
To change default display, change between column

Left and right cursor keys
headings, or changing values within a cell
ENTER key For changing and executing settings
For executing commands and settings for which

Hotkeys
shortcuts have been defined
Cancel key To return to column header from any menu cell
Read key To read alarm messages
Function keys (not all models) For executing user programmable functions
P94V-TM-EN-5 59
Note:
As the LCD display has a resolution of 16 characters by 3 lines, some of the information is in a condensed mnemonic
form.
3.1 NAVIGATING THE HMI PANEL

The cursor keys are used to navigate the menus. These keys have an auto-repeat function if held down
continuously. This can be used to speed up both setting value changes and menu navigation. The longer the
key is held pressed, the faster the rate of change or movement.
The navigation map below shows how to navigate the menu items.
Default display Default display

option option
Alarm message
Default display options

C
Column 00 Subsequent column headings Last Column

System data
Vertical cursor keys move

Horizontal cursor
between setting rows
keys move
Row 01
Language C between values
within a cell
Row 01
The Cancel key

returns to
column header
Subsequent rows Subsequent rows
V00400
Figure 19: Navigating the HMI
3.2 GETTING STARTED

When you first start the IED, it will go through its power up procedure. After a few seconds it will settle down
into one of the top level menus. There are two menus at this level:
● The Alarms menu for when there are alarms present
● The default display menu for when there are no alarms present.
60 P94V-TM-EN-5
If there are alarms present, the yellow Alarms LED will be flashing and the menu display will read as follows:
Alarms / Faults
Present
HOTKEY
Even though the device itself should be in full working order when you first start it, an alarm could still be
present, for example, if there is no network connection for a device fitted with a network card. If this is the
case, you can read the alarm by pressing the 'Read' key.
ALARMS
NIC Link Fail
If the device is fitted with an Ethernet card, you will first need to connect the device to an active Ethernet
network to clear the alarm and get the default display.
If there are other alarms present, these must also be cleared before you can get into the default display
menu options.
3.3 DEFAULT DISPLAY

The HMI contains a range of possible options that you can choose to be the default display. The options
available are:
NERC Compliant banner

If the device is a cyber-security model, it will provide a NERC-compliant default display. If the device does
not contain the cyber-security option, this display option is not available.
ACCESS ONLY FOR

AUTHORISED USERS
HOTKEY
Date and time

For example:
11:09:15
23 Nov 2011
HOTKEY
Description (user-defined)
For example:
Description
MiCOM P14NB
HOTKEY
P94V-TM-EN-5 61
Plant reference (user-defined)

For example:
Plant Reference
MiCOM
HOTKEY
Access Level
For example:
Access Level
3
HOTKEY
In addition to the above, there are also displays for the system voltages, currents, power and frequency etc.,
depending on the device model.
3.4 DEFAULT DISPLAY NAVIGATION

The following diagram is an example of the default display navigation. In this example, we have used a
cyber-secure model. This is an example only and may not apply in its entirety to all models. The actual
display options available depend on the exact model.
Use the horizontal cursor keys to step through from one display to the next.
NERC compliant
banner
NERC Compliance NERC Compliance

Warning Warning
System Current
Access Level
Measurements
System Voltage
System Frequency
Measurements
System Power
Plant Reference
Measurements
Description Date & Time
V00403
Figure 20: Default display navigation
62 P94V-TM-EN-5
If the device is cyber-secure but is not yet configured for NERC compliance (see Cyber-security chapter), a
warning will appear when moving from the "NERC compliant" banner. The warning message is as follows:
DISPLAY NOT NERC

COMPLIANT. OK?
You will have to confirm with the Enter button before you can go any further.
Note:
Whenever the IED has an uncleared alarm the default display is replaced by the text Alarms/ Faults present. You
cannot override this default display. However, you can enter the menu structure from the default display, even if the
display shows the Alarms/Faults present message.
3.5 PASSWORD ENTRY

Configuring the default display (in addition to modification of other settings) requires level 3 access. You will
be prompted for a password before you can make any changes, as follows. The default level 3 password is
AAAA.
Enter Password
1. A flashing cursor shows which character field of the password can be changed. Press the up or down
cursor keys to change each character (tip: pressing the up arrow once will return an upper case "A" as
required by the default level 3 password).
2. Use the left and right cursor keys to move between the character fields of the password.
3. Press the Enter keyto confirm the password. If you enter an incorrect password, an invalid password
message is displayed then the display reverts to Enter password. On entering a valid password a
message appears indicating that the password is correct and which level of access has been
unlocked. If this level is sufficient to edit the selected setting, the display returns to the setting page to
allow the edit to continue. If the correct level of password has not been entered, the password prompt
page appears again.
4. To escape from this prompt press the Clear key. Alternatively, enter the password using the Password
setting in the SYSTEM DATA column. If the keypad is inactive for 15 minutes, the password protection
of the front panel user interface reverts to the default access level.
To manually reset the password protection to the default level, select Password, then press the CLEAR key
instead of entering a password.
Note:
In the SECURITY CONFIG column, you can set the maximum number of attemps, the time window in which the
failed attempts are counted and the time duration for which the user is blocked.
P94V-TM-EN-5 63
3.6 PROCESSING ALARMS AND RECORDS

If there are any alarm messages, they will appear on the default display and the yellow alarm LED flashes.
The alarm messages can either be self-resetting or latched. If they are latched, they must be cleared
manually.
1. To view the alarm messages, press the Read key. When all alarms have been viewed but not cleared,
the alarm LED changes from flashing to constantly on, and the latest fault record appears (if there is
one).
2. Scroll through the pages of the latest fault record, using the cursor keys. When all pages of the fault
record have been viewed, the following prompt appears.
Press Clear To
Reset Alarms
3. To clear all alarm messages, press the Clear key. To return to the display showing alarms or faults
present, and leave the alarms uncleared, press the Read key.
4. Depending on the password configuration settings, you may need to enter a password before the
alarm messages can be cleared.
5. When all alarms are cleared, the yellow alarm LED switches off. If the red LED was on, this will also
be switched off.
Note:
To speed up the procedure, you can enter the alarm viewer using the Read key and subsequently pressing the Clear
key. This goes straight to the fault record display. Press the Clear key again to move straight to the alarm reset
prompt, then press the Clear key again to clear all alarms.
3.7 MENU STRUCTURE

Settings, commands, records and measurements are stored in a local database inside the IED. When using
the Human Machine Interface (HMI) it is convenient to visualise the menu navigation system as a table.
Each item in the menu is known as a cell, which is accessed by reference to a column and row address.
Each column and row is assigned a 2-digit hexadecimal numbers, resulting in a unique 4-digit cell address
for every cell in the database. The main menu groups are allocated columns and the items within the groups
are allocated rows, meaning a particular item within a particular group is a cell.
Each column contains all related items, for example all of the disturbance recorder settings and records are
in the same column.
There are three types of cell:
● Settings: this is for parameters that can be set to different values
● Commands: this is for commands to be executed
● Data: this is for measurements and records to be viewed, which are not settable
Note:
Sometimes the term "Setting" is used generically to describe all of the three types.
The table below, provides an example of the menu structure:

SYSTEM DATA (Col 00) VIEW RECORDS (Col 01) MEASUREMENTS 1 (Col 02) …
Language (Row 01) "Select Event [0...n]" (Row 01) IA Magnitude (Row 01) …
64 P94V-TM-EN-5
SYSTEM DATA (Col 00) VIEW RECORDS (Col 01) MEASUREMENTS 1 (Col 02) …
Password (Row 02) Menu Cell Ref (Row 02) IA Phase Angle (Row 02) …
Sys Fn Links (Row 03) Time & Date (Row 03) IB Magnitude (Row 03) …
… … … …
It is convenient to specify all the settings in a single column, detailing the complete Courier address for each
setting. The above table may therefore be represented as follows:
Setting Column Row Description
SYSTEM DATA 00 00 First Column definition
Language (Row 01) 00 01 First setting within first column
Password (Row 02) 00 02 Second setting within first column
Sys Fn Links (Row 03) 00 03 Third setting within first column
… … …
VIEW RECORDS 01 00 Second Column definition
Select Event [0...n] 01 01 First setting within second column
Menu Cell Ref 01 02 Second setting within second column
Time & Date 01 03 Third setting within second column
… … …
MEASUREMENTS 1 02 00 Third Column definition
IA Magnitude 02 01 First setting within third column
IA Phase Angle 02 02 Second setting within third column
IB Magnitude 02 03 Third setting within third column
… … …
The first three column headers are common throughout much of the product ranges. However the rows
within each of these column headers may differ according to the product type. Many of the column headers
are the same for all products within the series. However, there is no guarantee that the addresses will be the
same for a particular column header. Therefore you should always refer to the product settings
documentation and not make any assumptions.
3.8 CHANGING THE SETTINGS

1. Starting at the default display, press the Down cursor key to show the first column heading.
2. Use the horizontal cursor keys to select the required column heading.
3. Use the vertical cursor keys to view the setting data in the column.
4. To return to the column header, either press the Up cursor key for a second or so, or press the Clear
key once. It is only possible to move across columns at the column heading level.
5. To return to the default display, press the Up cursor key or the Clear key from any of the column
headings. If you use the auto-repeat function of the Up cursor key, you cannot go straight to the
default display from one of the column cells because the auto-repeat stops at the column heading.
6. To change the value of a setting, go to the relevant cell in the menu, then press the Enter key to
change the cell value. A flashing cursor on the LCD shows that the value can be changed. You may be
prompted for a password first.
7. To change the setting value, press the Up and Down cursor keys. If the setting to be changed is a
binary value or a text string, select the required bit or character to be changed using the horizontal
cursor keys.
8. Press the Enter key to confirm the new setting value or the Clear key to discard it. The new setting is
automatically discarded if it is not confirmed within 15 seconds.
P94V-TM-EN-5 65
9. For protection group settings and disturbance recorder settings, the changes must be confirmed
before they are used. When all required changes have been entered, return to the column heading
level and press the Down cursor key. Before returning to the default display, the following prompt
appears.
Update settings?
ENTER or CLEAR
10. Press the Enter key to accept the new settings or press the Clear key to discard the new settings.
Note:
For the protection group and disturbance recorder settings, if the menu time-out occurs before the changes have
been confirmed, the setting values are discarded. Control and support settings, howeverr, are updated immediately
after they are entered, without the Update settings? prompt.
3.9 DIRECT ACCESS (THE HOTKEY MENU)

For settings and commands that need to be executed quickly or on a regular basis, the IED provides a pair
of keys directly below the LCD display. These so called Hotkeys can be used to execute specified settings
and commands directly.
The functions available for direct access using these keys are:
● Setting group selection
● Control inputs
● Circuit Breaker (CB) control functions
The availability of these functions is controlled by the Direct Access cell in the CONFIGURATION column.
There are four options: Disabled, Enabled, CB Ctrl only and Hotkey only.
For the Setting Group selection and Control inputs, this cell must be set to either Enabled or Hotkey
only. For CB Control functions, the cell must be set to Enabled or CB Ctrl only.
3.9.1 SETTING GROUP SELECTION

By default, only Setting group 1 is enabled. Other setting groups will only be available if they are first
enabled. To be able to select a different setting group, you must first enable them in the CONFIGURATION
column.
To access the hotkey menu from the default display, you press the key directly below the HOTKEY text on
the LCD. The following screen will appear.
¬User32 STG GP®

HOTKEY MENU
EXIT
Use the right cursor keys to enter the SETTING GROUP menu.
¬Menu User01®
SETTING GROUP 1
Nxt Grp Select
66 P94V-TM-EN-5
Select the setting group with Nxt Grp and confirm by pressing Select. If neither of the cursor keys is pressed
within 20 seconds of entering a hotkey sub menu, the device reverts to the default display.
3.9.2 CONTROL INPUTS

The control inputs are user-assignable functions. You can use the CTRL I/P CONFIG column to configure
the control inputs for the hotkey menu. In order to do this, use the first setting Hotkey Enabled cell to enable
or disable any of the 32 control inputs. You can then set each control input to latched or pulsed and set its
command to On/Off, Set/Reset, In/Out, or Enabled/Disabled.
By default, the hotkey is enabled for all 32 control inputs and they are set to Set/Reset and are Latched.
To access the hotkey menu from the default display, you press the key directly below the HOTKEY text on
the LCD. The following screen will appear.
¬User32 STG GP®

HOTKEY MENU
EXIT
Press the right cursor key twice to get to the first control input, or the left cursor key to get to the last control
input.
¬STP GP User02®
Control Input 1
EXIT SET
Now you can execute the chosen function (Set/Reset in this case).
If neither of the cursor keys is pressed within 20 seconds of entering a hotkey sub menu, the device reverts
to the default display.
3.9.3 CIRCUIT BREAKER CONTROL

You can open and close the controlled circuit breaker with the hotkey to the right, if enabled as described
above. By default, hotkey access to the circuit breakers is disabled.
If hotkeyaccess to the circuit breakers has been enabled, the bottom right hand part of the display will read
"Open or Close" depending on whether the circuit breaker is closed or open respectively:
For example:
Plant Reference
MiCOM
HOTKEY CLOSE
To close the circuit breaker (in this case), press the key directly below CLOSE. You will be given an option to
cancel or confirm.
Execute
CB CLOSE
Cancel Confirm
More detailed information on this can be found in the Monitoring and Control chapter.
P94V-TM-EN-5 67
3.10 FUNCTION KEYS

Most products have a number of function keys for programming control functionality using the programmable
scheme logic (PSL).
Each function key has an associated programmable tri-colour LED that can be programmed to give the
desired indication on function key activation.
These function keys can be used to trigger any function that they are connected to as part of the PSL. The
function key commands are in the FUNCTION KEYS column.
The first cell down in the FUNCTION KEYS column is the Fn Key Status cell. This contains a binary string,
which represents the function key commands. Their status can be read from this binary string.
FUNCTION KEYS
Fn Key Status
0000000000
The next cell down (Fn Key 1) allows you to activate or disable the first function key (1). The Lock setting
allows a function key to be locked. This allows function keys that are set to Toggled mode and their DDB
signal active ‘high’, to be locked in their active state, preventing any further key presses from deactivating the
associated function. Locking a function key that is set to the Normal mode causes the associated DDB
signals to be permanently off. This safety feature prevents any inadvertent function key presses from
activating or deactivating critical functions.
FUNCTION KEYS
Fn Key 1
Unlocked
The next cell down (Fn Key 1 Mode) allows you to set the function key to Normal or Toggled. In the
Toggle mode the function key DDB signal output stays in the set state until a reset command is given, by
activating the function key on the next key press. In the Normal mode, the function key DDB signal stays
energised for as long as the function key is pressed then resets automatically. If required, a minimum pulse
width can be programmed by adding a minimum pulse timer to the function key DDB output signal.
FUNCTION KEYS
Fn Key 1 Mode
Toggled
The next cell down (Fn Key 1 Label) allows you to change the label assigned to the function. The default
label is Function key 1 in this case. To change the label you need to press the enter key and then
change the text on the bottom line, character by character. This text is displayed when a function key is
accessed in the function key menu, or it can be displayed in the PSL.
FUNCTION KEYS
Fn Key 1 Label
Function Key 1
Subsequent cells allow you to carry out the same procedure as above for the other function keys.
The status of the function keys is stored in non-volatile memory. If the auxiliary supply is interrupted, the
status of all the function keys is restored. The IED only recognises a single function key press at a time and
a minimum key press duration of approximately 200 ms is required before the key press is recognised. This
feature avoids accidental double presses.
68 P94V-TM-EN-5
4 DATE AND TIME CONFIGURATION

The date and time setting will normally be updated automatically by the chosen UTC (Universal Time Co-
ordination) time synchronisation mechanism when the device is in service. You can also set the date and
time manually using the Date/Time cell in the DATE AND TIME column.
4.1 TIME ZONE COMPENSATION

The UTC time standard uses Greenwich Mean Time as its standard. Without compensation, the date and
time would be displayed on the device irrespective of its location.
You may wish to display the local time corresponding to its geographical location. You can do this with the
settings LocalTime Enable and LocalTime Offset.
The LocalTime Enable has three setting options; Disabled, Fixed, and Flexible.
With Disabled, no local time zone is maintained. Time synchronisation from any interface will be used to
directly set the master clock. All times displayed on all interfaces will be based on the master clock with no
adjustment.
With Fixed, a local time zone adjustment is defined using the LocalTime Offset setting and all non-
IEC 61850 interfaces, which uses the Simple Network Time Protocol (SNTP), are compensated to display
the local time.
With Flexible, a local time zone adjustment is defined using the LocalTime Offset setting. The non-local
and non-IEC 61850 interfaces can be set to either the UTC zone or the local time zone. The local interfaces
are always set to the local time zone and the Ethernet interface is always set to the UTC zone.
The interfaces where you can select between UTC and Local Time are the serial interfaces RP1, RP2, DNP
over Ethernet (if applicable) and Tunnelled Courier (if applicable). This is achieved by means of the following
settings, each of which can be set to UTC or Local.:
● RP1 Time Zone
● RP2 Time Zone
● DNPOE Time Zone
● Tunnel Time Zone
The LocalTime Offset setting allows you to enter the local time zone compensation from -12 to + 12 hours
at 15 minute intervals.
4.2 DAYLIGHT SAVING TIME COMPENSATION

It is possible to compensate for Daylight Saving time using the following settings
● DST Enable
● DST Offset
● DST Start
● DST Start Day
● DST Start Month
● DST Start Mins
● DST End
● DST End Day
● DST End Month
● DST End Mins
These settings are described in the DATE AND TIME settings table in the configuration chapter.
P94V-TM-EN-5 69
5 SETTINGS GROUP SELECTION

You can select the setting group using opto inputs, a menu selection, the hotkey menu or from some models,
function keys. You choose which method using the Setting Group setting in the CONFIGURATION column.
There are two possibilities; Select via Menu, or Select via PSL. If Select via Menu is chosen, you set the
settings group using the Active Settings setting, or with the hotkeys. If Select via PSL is chosen, you set the
settings group with DDB signals according to the following table:
SG Select 1X SG Select X1 Selected Setting Group
0 0 1
0 1 2
1 0 3
1 1 4
Each setting group has its own PSL. Once a PSL configuration has been designed it can be allocated to any
one of the 4 setting groups. When downloading or extracting a PSL configuration, you will be prompted to
enter the required setting group to which it will allocated.
70 P94V-TM-EN-5
VOLTAGE PROTECTION FUNCTIONS
CHAPTER 5
Chapter 5 - Voltage Protection Functions P94V
72 P94V-TM-EN-5
P94V Chapter 5 - Voltage Protection Functions
1 CHAPTER OVERVIEW
The device provides a wide range of voltage protection functions. This chapter describes the operation of
these functions including the principles, logic diagrams and applications.
Chapter Overview 73
Undervoltage Protection 74
Overvoltage Protection 77
Rate of Change of Voltage Protection 80
Residual Overvoltage Protection 82
Negative Sequence Overvoltage Protection 86
Moving Average Voltage Functions 88
P94V-TM-EN-5 73
2 UNDERVOLTAGE PROTECTION
Undervoltage conditions may occur on a power system for a variety of reasons, some of which are outlined
below:
● Undervoltage conditions can be related to increased loads, whereby the supply voltage will decrease
in magnitude. This situation would normally be rectified by voltage regulating equipment such as AVRs
(Auto Voltage Regulators) or On Load Tap Changers. However, failure of this equipment to bring the
system voltage back within permitted limits leaves the system with an undervoltage condition, which
must be cleared.
● If the regulating equipment is unsuccessful in restoring healthy system voltage, then tripping by means
of an undervoltage element is required.
● Faults occurring on the power system result in a reduction in voltage of the faulty phases. The
proportion by which the voltage decreases is dependent on the type of fault, method of system
earthing and its location. Consequently, co-ordination with other voltage and current-based protection
devices is essential in order to achieve correct discrimination.
● Complete loss of busbar voltage. This may occur due to fault conditions present on the incomer or
busbar itself, resulting in total isolation of the incoming power supply. For this condition, it may be
necessary to isolate each of the outgoing circuits, such that when supply voltage is restored, the load
is not connected. Therefore, the automatic tripping of a feeder on detection of complete loss of voltage
may be required. This can be achieved by a three-phase undervoltage element.
● Where outgoing feeders from a busbar are supplying induction motor loads, excessive dips in the
supply may cause the connected motors to stall, and should be tripped for voltage reductions that last
longer than a pre-determined time.
2.1 UNDERVOLTAGE PROTECTION IMPLEMENTATION

Undervoltage Protection is implemented in the VOLT PROTECTION column of the relevant settings group.
The Undervoltage parameters are contained within the sub-heading UNDERVOLTAGE.
The product provides three stages of Undervoltage protection with independent time delay characteristics.
Stages 1 and 3 provide a choice of operate characteristics, where you can select between:
● An IDMT characteristic
● A range of user-defined curves
● DT (Definite Time)
You set this using the V<1 Function and V<3 Function cells depending on the stage.
The IDMT characteristic is defined by the following formula:
t = K/( M-1)
where:
● K = Time multiplier setting
● t = Operating time in seconds
● M = Measured voltage / IED setting voltage (V< Voltage Set)
The undervoltage stages can be configured either as phase-to-neutral or phase-to-phase voltages in the
V< Measure't mode cell.
There is no Timer Hold facility for Undervoltage.
Stage 2 can have definite time characteristics only. This is set in the V<2 status cell.
74 P94V-TM-EN-5
Three stages are included in order to provide multiple output types, such as alarm and trip stages.
Alternatively, different time settings may be required depending upon the severity of the voltage dip. For
example, motor loads will be able to cope with a small voltage dip for a longer time than a major one.
Outputs are available for single or three-phase conditions via the V<Operate Mode cell for each stage.
2.2 UNDERVOLTAGE PROTECTION LOGIC

V< Measur't Mode
VA V<1 Start A/AB

VAB
V<1 Voltage Set &
& V <1 Trip A/AB
V<1 Time Delay
V< Measur't Mode
VB V<1 Start B/BC

VBC
V<1 Voltage Set &
& V<1 Trip B/BC
V<1 Time Delay
V< Measur't Mode
VC V<1 Start C/CA

VCA
V<1 Voltage Set &
& V<1 Trip C/CA
V<1 Time Delay

1
&
All Poles Dead
1 V<1 Start
V<1 Poledead Inh &
& &
Enabled
VTS Fast Block 1

&
V<1 Timer Block 1 V<1 Trip
&
V< Operate Mode &
Any Phase
Three Phase
Notes:
· This diagram does not show all stages . Other stages follow similar principles .
V00803 · VTS Fast Block only applies for directional models
Figure 21: Undervoltage - single and three phase tripping mode (single stage)
The Undervoltage protection function detects when the voltage magnitude for a certain stage falls short of a
set threshold. If this happens a Start signal, signifying the "Start of protection", is produced. This Start signal
can be blocked by the VTS Fast Block signal and an All Poles Dead signal. This Start signal is applied to
the timer module to produce the Trip signal, which can be blocked by the undervoltage timer block signal
(V<(n) Timer Block). For each stage, there are three Phase undervoltage detection modules, one for each
phase. The three Start signals from each of these phases are OR'd together to create a 3-phase Start signal
(V<(n) Start), which can be be activated when any of the three phases start (Any Phase), or when all three
phases start (Three Phase), depending on the chosen V< Operate Mode setting.
The outputs of the timer modules are the trip signals which are used to drive the tripping output relay. These
tripping signals are also OR'd together to create a 3-phase Trip signal, which are also controlled by the V<
Operate Mode setting.
If any one of the above signals is low, or goes low before the timer has counted out, the timer module is
inhibited (effectively reset) until the blocking signal goes high.
P94V-TM-EN-5 75
In some cases, we do not want the undervoltage element to trip; for example, when the protected feeder is
de-energised, or the circuit breaker is opened, an undervoltage condition would obviously be detected, but
we would not want to start protection. To cater for this, an All Poles Dead signal blocks the Start signal for
each phase. This is controlled by the V<Poledead Inh cell, which is included for each of the stages. If the
cell is enabled, the relevant stage will be blocked by the integrated pole dead logic. This logic produces an
output when it detects either an open circuit breaker via auxiliary contacts feeding the opto-inputs or it
detects a combination of both undercurrent and undervoltage on any one phase.
2.3 APPLICATION NOTES
2.3.1 UNDERVOLTAGE SETTING GUIDELINES

In most applications, undervoltage protection is not required to operate during system earth fault conditions.
If this is the case you should select phase-to-phase voltage measurement, as this quantity is less affected by
single-phase voltage dips due to earth faults.
The voltage threshold setting for the undervoltage protection should be set at some value below the voltage
excursions that may be expected under normal system operating conditions. This threshold is dependent on
the system in question but typical healthy system voltage excursions may be in the order of 10% of nominal
value.
The same applies to the time setting. The required time delay is dependent on the time for which the system
is able to withstand a reduced voltage.
If motor loads are connected, then a typical time setting may be in the order of 0.5 seconds.
76 P94V-TM-EN-5
3 OVERVOLTAGE PROTECTION
Overvoltage conditions are generally related to loss of load conditions, whereby the supply voltage increases
in magnitude. This situation would normally be rectified by voltage regulating equipment such as AVRs (Auto
Voltage Regulators) or On Load Tap Changers. However, failure of this equipment to bring the system
voltage back within permitted limits leaves the system with an overvoltage condition which must be cleared.
Note:
During earth fault conditions on a power system there may be an increase in the healthy phase voltages. Ideally, the
system should be designed to withstand such overvoltages for a defined period of time.
3.1 OVERVOLTAGE PROTECTION IMPLEMENTATION

Overvoltage Protection is implemented in the VOLT PROTECTION column of the relevant settings group.
The Overvoltage parameters are contained within the sub-heading OVERVOLTAGE.
The product provides three stages of overvoltage protection with independent time delay characteristics.
You set this using the V>1 Function and V>3 Function cells depending on the stage.
t = K/( M - 1)
where:
● K = Time multiplier setting
● M = Measured voltage setting voltage (V> Voltage Set)
The overvoltage stages can be configured either as phase-to-neutral or phase-to-phase voltages in the
V> Measure't mode cell.
There is no Timer Hold facility for Overvoltage.
Stage 2 can have definite time characteristics only. This is set in the V>2 status cell.
Three stages are included in order to provide multiple output types, such as alarm and trip stages.
Alternatively, different time settings may be required depending upon the severity of the voltage increase.
Outputs are available for single or three-phase conditions via the V>Operate Mode cell for each stage.
P94V-TM-EN-5 77
3.2 OVERVOLTAGE PROTECTION LOGIC

V> Measur't Mode
VA V>1 Start A/AB

VAB
V>1 Voltage Set &
& V >1 Trip A/AB
V>1 Time Delay
V< Measur't Mode
VB V>1 Start B/BC

VBC
V>1 Voltage Set &
& V>1 Trip B/BC
V>1 Time Delay
V> Measur't Mode
VC V>1 Start C/CA

VCA
V>1 Voltage Set &
& V>1 Trip C/CA
V>1 Time Delay

1
&
1 V>1 Start
&
&
VTS Fast Block 1

&
V>1 Timer Block 1 V>1 Trip
&
V> Operate mode &
Any Phase
Three Phase
Notes:
· This diagram does not show all stages . Other stages follow similar principles.
· VTS Fast Block only applies for directional models .
V 00804
Figure 22: Overvoltage - single and three phase tripping mode (single stage)
The Overvoltage protection function detects when the voltage magnitude for a certain stage exceeds a set
threshold. If this happens a Start signal, signifying the "Start of protection", is produced. This Start signal can
be blocked by the VTS Fast Block signal. This start signal is applied to the timer module to produce the Trip
signal, which can be blocked by the overvoltage timer block signal (V>(n) Timer Block). For each stage,
there are three Phase overvoltage detection modules, one for each phase. The three Start signals from each
of these phases are OR'd together to create a 3-phase Start signal (V>(n) Start), which can then be
activated when any of the three phases start (Any Phase), or when all three phases start (Three Phase),
depending on the chosen V> Operate Mode setting.
The outputs of the timer modules are the trip signals which are used to drive the tripping output relay. These
tripping signals are also OR'd together to create a 3-phase Trip signal, which are also controlled by the V>
Operate Mode setting.
If any one of the above signals is low, or goes low before the timer has counted out, the timer module is
inhibited (effectively reset) until the blocking signal goes high.
78 P94V-TM-EN-5
3.3.1 OVERVOLTAGE SETTING GUIDELINES

The provision of multiple stages and their respective operating characteristics allows for a number of
possible applications:
● Definite Time can be used for both stages to provide the required alarm and trip stages.
● Use of the IDMT characteristic allows grading of the time delay according to the severity of the
overvoltage. As the voltage settings for both of the stages are independent, the second stage could
then be set lower than the first to provide a time-delayed alarm stage.
● If only one stage of overvoltage protection is required, or if the element is required to provide an alarm
only, the remaining stage may be disabled.
This type of protection must be co-ordinated with any other overvoltage devices at other locations on the
system.
P94V-TM-EN-5 79
4 RATE OF CHANGE OF VOLTAGE PROTECTION

Where there are very large loads, imbalances may occur, which could result in rapid decline in system
voltage. The situation could be so bad that shedding one or two stages of load would be unlikely to stop this
rapid voltage decline. In such a situation, standard undervoltage protection will normally have to be
supplemented with protection that responds to the rate of change of voltage. An element is therefore
required, which identifies the high rate of decline of voltage and adapts the load shedding scheme
accordingly.
Such protection can identify voltage variations occurring close to nominal voltage thereby providing early
warning of a developing voltage problem. The element can also be used as an alarm to warn operators of
unusually high system voltage variations.
Rate of Change of Voltage protection is also known as dv/dt protection.
4.1 RATE OF CHANGE OF VOLTAGE PROTECTION IMPLEMENTATION

The dv/dt protection functions can be found in the the VOLT PROTECTION column under the sub-heading
DV/DT PROTECTION. The dv/dt protection consists of four independent stages, which can be configured as
either phase-to-phase or phase-to-neutral using the dv/dt Meas mode cell.
80 P94V-TM-EN-5
4.2 RATE OF CHANGE OF VOLTAGE LOGIC
dvdt Meas Mode

VA dvdt1 TimeDelay
dV/ dt Averaging dvdt 1 Start A/AB
VAB
&
dvdt1 AvgCycles 1 DT dvdt1 Trip A/AB
Reset -1
Freq Not Found
dvdt1 Threshold × &
dvdt Meas Mode

VB dvdt1 TimeDelay
dV/ dt Averaging dvdt1 Start B/BC
VBC
&
dvdt1 AvgCycles 1 DT dvdt 1 Trip B/BC
Reset -1
Freq Not Found
dvdt1 Threshold × &
dvdt Meas Mode

VC dvdt1 TimeDelay
dV/ dt Averaging dvdt1 Start C/CA
VCA
&
dvdt1 AvgCycles 1 DT dvdt 1 Trip C/CA
Reset -1
Freq Not Found 1
& &
dvdt1 Threshold ×
1 dv/dt Start
dv/dt(n) Function &
1 &
Positive
Both 1
1 &
Negative
Disabled 1 dv/ dt Trip
1 &
dv/dt(n) Blocking &
V< Operate mode
Any Phase
Three Phase V00806
Figure 23: Rate of Change of Voltage protection logic

The dv/dt logic works by differentiating the RMS value of each phase voltage input, which can be with
respect to neutral, or respect to another phase depending on the selected measurement mode. This
differentiated value is then averaged over a number of cycles, determined by the setting dv/dt(n)AvgCycles
and comparing this with a threshold (dv/dt(n)Threshold) in both the positive and negative directions. A start
signal is produced depending on the selected direction (positive, negative or both), set by the setting dv/
dt(n)Function, which can also disable the function on a per stage basis. Each stage can also be blocked by
the DDB signal dvV/dt(n)Blocking. The trip signal is produced by passing the Start signal through a DT
timer.
The function also produces three-phase Start and Trip signals, which can be set to Any Phase (where any
of the phases can trigger the start) or Three Phase (where all three phases are required to trigger the
start). The averaging buffer is reset either when the stage is disabled or no frequency is found (Freq Not
Found DDB signal).
P94V-TM-EN-5 81
5 RESIDUAL OVERVOLTAGE PROTECTION

On a healthy three-phase power system, the sum of the three-phase to earth voltages is nominally zero, as it
is the vector sum of three balanced vectors displaced from each other by 120°. However, when an earth fault
occurs on the primary system, this balance is upset and a residual voltage is produced. This condition
causes a rise in the neutral voltage with respect to earth. Consequently this type of protection is also
commonly referred to as 'Neutral Voltage Displacement' or NVD for short.
This residual voltage may be derived (from the phase voltages) or measured (from a measurement class
open delta VT). Derived values will normally only be used where the model does not support measured
functionality (a dedicated measurement class VT). If a measurement class VT is used to produce a
measured Residual Voltage, it cannot be used for other features such as Check Synchronisation.
This offers an alternative means of earth fault detection, which does not require any measurement of current.
This may be particularly advantageous in high impedance earthed or insulated systems, where the provision
of core balanced current transformers on each feeder may be either impractical, or uneconomic, or for
providing earth fault protection for devices with no current transformers.
5.1 RESIDUAL OVERVOLTAGE PROTECTION IMPLEMENTATION

Residual Overvoltage Protection is implemented in the RESIDUAL O/V NVD column of the relevant settings
group.
Some applications require more than one stage. For example an insulated system may require an alarm
stage and a trip stage. It is common in such a case for the system to be designed to withstand the
associated healthy phase overvoltages for a number of hours following an earth fault. In such applications,
an alarm is generated soon after the condition is detected, which serves to indicate the presence of an earth
fault on the system. This gives time for system operators to locate and isolate the fault. The second stage of
the protection can issue a trip signal if the fault condition persists.
The product provides three stages of Residual Overvoltage protection with independent time delay
characteristics.

t = K/( M - 1)
where:
● K= Time multiplier setting
● M = Derived residual voltage setting voltage (VN> Voltage Set)
You set this using the VN>1 Function and VN>3 Function cells depending on the stage.
Stages 1 and 3 also provide a Timer Hold facility as described in Timer Hold facility
Stage 2 can have definite time characteristics only. This is set in the VN>2 status cell
The device derives the residual voltage internally from the three-phase voltage inputs supplied from either a
5-limb VT or three single-phase VTs. These types of VT design provide a path for the residual flux and
consequently permit the device to derive the required residual voltage. In addition, the primary star point of
the VT must be earthed. Three-limb VTs have no path for residual flux and are therefore unsuitable for this
type of protection.
82 P94V-TM-EN-5
5.2 RESIDUAL OVERVOLTAGE LOGIC
VN>1 Start
VN
VN>1 Voltage Set &

& IDMT/DT VN>1 Trip
VTS Fast Block
VN>1 Timer Blk

V00802
Figure 24: Residual Overvoltage logic

The Residual Overvoltage module (VN>) is a level detector that detects when the voltage magnitude
exceeds a set threshold, for each stage. When this happens, the comparator output produces a Start signal
(VN>(n) Start), which signifies the "Start of protection". This can be blocked by a VTS Fast block signal.
This Start signal is applied to the timer module. The output of the timer module is the VN> (n) Trip signal
which is used to drive the tripping output relay.
5.3.1 CALCULATION FOR SOLIDLY EARTHED SYSTEMS

Consider a Phase-A to Earth fault on a simple radial system.
P94V-TM-EN-5 83
IED
E00800
Figure 25: Residual voltage for a solidly earthed system

As can be seen from the above diagram, the residual voltage measured on a solidly earthed system is solely
dependent on the ratio of source impedance behind the protection to the line impedance in front of the
protection, up to the point of fault. For a remote fault far away, the ZS/ZL: ratio will be small, resulting in a
correspondingly small residual voltage. Therefore, the protection only operates for faults up to a certain
distance along the system. The maximum distance depends on the device setting.
5.3.2 CALCULATION FOR IMPEDANCE EARTHED SYSTEMS

Consider a Phase-A to Earth fault on a simple radial system.
84 P94V-TM-EN-5
IED
E00801
Figure 26: Residual voltage for an impedance earthed system

An impedance earthed system will always generate a relatively large degree of residual voltage, as the zero
sequence source impedance now includes the earthing impedance. It follows then that the residual voltage
generated by an earth fault on an insulated system will be the highest possible value (3 x phase-neutral
voltage), as the zero sequence source impedance is infinite.
5.3.3 SETTING GUIDELINES

The voltage setting applied to the elements is dependent on the magnitude of residual voltage that is
expected to occur during the earth fault condition. This in turn is dependent on the method of system
earthing employed.
Also, you must ensure that the protection setting is set above any standing level of residual voltage that is
present on the system.
P94V-TM-EN-5 85
6 NEGATIVE SEQUENCE OVERVOLTAGE PROTECTION

Where an incoming feeder is supplying rotating plant equipment such as an induction motor, correct phasing
and balance of the supply is essential. Incorrect phase rotation will result in connected motors rotating in the
wrong direction. For directionally sensitive applications, such as elevators and conveyor belts, it is
unacceptable to allow this to happen.
Imbalances on the incoming supply cause negative phase sequence voltage components. In the event of
incorrect phase rotation, the supply voltage would effectively consist of 100% negative phase sequence
voltage only.
6.1 NEGATIVE SEQUENCE OVERVOLTAGE IMPLEMENTATION

Negative Sequence Overvoltage Protection is implemented in the NEG SEQUENCE O/V column of the
relevant settings group.
The device includes one Negative Phase Sequence Overvoltage element with a single stage. Only Definite
time is possible.
This element monitors the input voltage rotation and magnitude (normally from a bus connected voltage
transformer) and may be interlocked with the motor contactor or circuit breaker to prevent the motor from
being energised whilst incorrect phase rotation exists.
The element is enabled using the V2> status cell.
6.2 NEGATIVE SEQUENCE OVERVOLTAGE LOGIC
V 2> Start
V2
Start
V2> Voltage Set & & DT V2> Trip
Counter
VTS Fast Block
V2> Accelerate
V00805
Figure 27: Negative Sequence Overvoltage logic

The Negative Voltage Sequence Overvoltage module (V2>) is a level detector that detects when the voltage
magnitude exceeds a set threshold. When this happens, the comparator output Overvoltage Module
produces a Start signal (V2> Start), which signifies the "Start of protection". This can be blocked by a VTS
Fast block signal. This Start signal is applied to the DT timer module. The output of the DT timer module is
the V2> Trip signal which is used to drive the tripping output relay.
The V2> Accelerate signal accelerates the operating time of the function, by reducing the number of cyles
needed to start the function from 4 cycles to 2 cycles. At 50 hz, this means the protection start is reduced
from 80 ms to 40 ms.

The primary concern is usually the detection of incorrect phase rotation (rather than small imbalances),
therefore a sensitive setting is not required. The setting must be higher than any standing NPS voltage,
which may be present due to imbalances in the measuring VT, device tolerances etc.
A setting of approximately 15% of rated voltage may be typical.
86 P94V-TM-EN-5
Note:
Standing levels of NPS voltage (V2) are displayed in the V2 Magnitude cell of the MEASUREMENTS 1 column.
The operation time of the element depends on the application, but a typical setting would be in the region of
5 seconds.
P94V-TM-EN-5 87
7 MOVING AVERAGE VOLTAGE FUNCTIONS

Moving average voltage functions are available for:
● Undervoltage (Vavg<)
● Overvoltage (Vavg>)
● Zero Sequence Voltage (V0avg>)
● Positive Sequence Voltage (V1Avg>)
● Negative Sequence Voltage (V2Avg>)
The voltage is sampled at 5 Hz (one sample every 200 ms for a 50 Hz system). The refresh period is 3
seconds, meaning 15 samples are collected every refresh period. The average voltage for the previous 10
minutes is calculated, displayed as measurements and used as energising quantities for the protection
functions. The folllowing quantities are provided:
VA Mov Average: A-phase RMS average voltage
VB Mov Average: B-phase RMS average voltage
VC Mov Average: C-phase RMS average voltage
V0 Mov Average: Zero Sequence average voltage magnitude
V1 Mov Average: Positive Sequence average voltage magnitude
V2 Mov Average: Negative Sequence average voltage magnitude
88 P94V-TM-EN-5
7.1 MOVING AVERAGE UNDERVOLTAGE LOGIC

Vavg <1 Status Vavg<1 Start A
VA Mov Average & Vavg <1 Trip A
Vavg<1 Volt Set
Vavg<1 Strt Time
Vavg<1 Trip Time
Vavg <1 Status Vavg<1 Start B
VB Mov Average & Vavg <1 Trip B
Vavg<1 Volt Set
Vavg<1 Strt Time
Vavg<1 Trip Time
Vavg <1 Status Vavg<1 Start C
VC Mov Average & Vavg <1 Trip C
Vavg<1 Volt Set

1
Vavg<1 Strt Time &
Vavg<1 Trip Time 1 Vavg<1 Start
&
&
1
&
1 Vavg<1 Trip
&
Vavg<Oper Mode &
Any Phase
Three Phase V00807
Figure 28: Moving Average undervoltage logic
P94V-TM-EN-5 89
7.2 MOVING AVERAGE OVERVOLTAGE LOGIC

Vavg >1 Status Vavg>1 Start A
VA Mov Average & Vavg >1 Trip A
Vavg>1 Volt Set
Vavg>1 Strt Time
Vavg>1 Trip Time
Vavg >1 Status Vavg>1 Start B
VB Mov Average & Vavg >1 Trip B
Vavg>1 Volt Set
Vavg>1 Strt Time
Vavg>1 Trip Time
Vavg >1 Status Vavg>1 Start C
VC Mov Average & Vavg >1 Trip C
Vavg>1 Volt Set

1
Vavg>1 Strt Time &
Vavg>1 Trip Time 1 Vavg>1 Start
&
&
1
&
1 Vavg>1 Trip
&
Vavg>Oper Mode &
Any Phase
Three Phase V00808
Figure 29: Moving Average overvoltage logic
7.3 MOVING AVERAGE ZERO SEQUENCE VOLTAGE LOGIC

V0avg >1 Status V 0avg>1 Start
V0 Mov Average & V0avg>1 Trip
V 0avg>1 Volt Set
V0avg>1 Delay
V00809
Figure 30: Moving Average zero sequence voltage logic
7.4 MOVING AVERAGE POSITIVE SEQUENCE VOLTAGE LOGIC

V 1avg>1 Volt Set
V1avg>1 Delay
V00810
Figure 31: Moving Average positive sequence voltage logic
90 P94V-TM-EN-5
7.5 MOVING AVERAGE NEGATIVE SEQUENCE VOLTAGE LOGIC

V 2avg>1 Volt Set
V2avg>1 Stt Time
V2avg>1 Trp Time V00811
Figure 32: Moving Average negative sequence voltage logic
P94V-TM-EN-5 91
92 P94V-TM-EN-5
FREQUENCY PROTECTION
FUNCTIONS
CHAPTER 6
Chapter 6 - Frequency Protection Functions P94V
94 P94V-TM-EN-5
P94V Chapter 6 - Frequency Protection Functions
1 CHAPTER OVERVIEW
The device provides a range of frequency protection functions. This chapter describes the operation of these
functions including the principles, logic diagrams and applications.
Chapter Overview 95
Frequency Protection Overview 96
Underfrequency Protection 97
Overfrequency Protection 99
Independent R.O.C.O.F Protection 101
Frequency-supervised R.O.C.O.F Protection 104
Average Rate of Change of Frequency Protection 107
Load Shedding and Restoration 110
P94V-TM-EN-5 95
2 FREQUENCY PROTECTION OVERVIEW

Power generation and utilisation needs to be well balanced in any industrial, distribution or transmission
network. These electrical networks are dynamic entities, with continually varying loads and supplies, which
are continually affecting the system frequency. Increased loading reduces the system frequency and
generation needs to be increased to maintain the frequency of the supply. Conversely decreased loading
increases the system frequency and generation needs to be reduced. Sudden fluctuations in load can cause
rapid changes in frequency, which need to be dealt with quickly.
Unless corrective measures are taken at the appropriate time, frequency decay can go beyond the point of
no return and cause widespread network collapse, which has dire consequences.
Protection devices capable of detecting low frequency conditions are generally used to disconnect
unimportant loads in order to re-establish the generation-to-load balance. However, with such devices, the
action is initiated only after the event and this form of corrective action may not be effective enough to cope
with sudden load increases that cause large frequency decays in very short times. In such cases a device
that can anticipate the severity of frequency decay and act to disconnect loads before the frequency reaches
dangerously low levels, are very effective in containing damage. This is called instantaneous rate of change
of frequency protection (ROCOF).
During severe disturbances, the frequency of the system oscillates as various generators try to synchronise
to a common frequency. The measurement of instantaneous rate of change of frequency can be misleading
during such a disturbance. The frequency decay needs to be monitored over a longer period of time to make
the correct decision for load shedding. This is called average rate of change of frequency protection.
Normally, generators are rated for a particular band of frequency. Operation outside this band can cause
mechanical damage to the turbine blades. Protection against such contingencies is required when frequency
does not improve even after load shedding steps have been taken. This type of protection can be used for
operator alarms or turbine trips in case of severe frequency decay.
2.1 FREQUENCY PROTECTION IMPLEMENTATION

Frequency Protection is implemented in the FREQ PROTECTION column of the relevant settings group.
The device includes 9 stages for the following frequency protection methods:
● Underfrequency Protection: abbreviated to f+t<
● Overfrequency Protection: abbreviated to f+t>
● Independent Rate of Change of Frequency Protection: abbreviated to Independent R.O.C.O.F, or df/dt
+t
● Frequency-supervised Rate of Change of Frequency Protection: abbreviated to Frequency-supervised
R.O.C.O.F, or f+df/dt
● Average Rate of Change of Frequency Protection: abbreviated to Average R.O.C.O.F, or f+Df/Dt (note
the uppercase 'D')
● Load Shedding and Restoration
Each stage can be disabled or enabled with the Stage (n) setting. The frequency protection can also be
blocked by an undervoltage condition if required.
96 P94V-TM-EN-5
3 UNDERFREQUENCY PROTECTION
A reduced system frequency implies that the net load is in excess of the available generation. Such a
condition can arise, when an interconnected system splits, and the load left connected to one of the
subsystems is in excess of the capacity of the generators in that particular subsystem. Industrial plants that
are dependent on utilities to supply part of their loads will experience underfrequency conditions when the
incoming lines are lost.
Many types of industrial loads have limited tolerances on the operating frequency and running speeds (e.g.
synchronous motors). Sustained underfrequency has implications on the stability of the system, whereby any
subsequent disturbance may damage equipment and even lead to blackouts. It is therefore essential to
provide protection for underfrequency conditions.
3.1 UNDERFREQUENCY PROTECTION IMPLEMENTATION

The following settings are relevant for underfrequency:
● Stg (n) f+t Status: determines whether the stage is underfrequency, overfrequency, or disabled
● Stg (n) f+t Freq: defines the frequency pickup setting
● Stg (n) f+t Time: sets the time delay
3.2 UNDERFREQUENCY PROTECTION LOGIC

Stg (n) f+t Sta
Freq Averaging
DT
Stg (n) f+t Freq & Stg (n) f+t Trp
Stage (n)
Enabled
Stg (n) f+t Status

Under
Adv Freq Inh

1
Freq Not Found
V<B Status
Enabled
1
UV Block
V00850
Figure 33: Underfrequency logic (single stage)

If the frequency is below the setting and not blocked the DT timer is started. If the frequency cannot be
determined, the function is blocked.

In order to minimise the effects of underfrequency, a multi-stage load shedding scheme may be used with
the plant loads prioritised and grouped. During an underfrequency condition, the load groups are
disconnected sequentially, with the highest priority group being the last one to be disconnected.
P94V-TM-EN-5 97
The effectiveness of each load shedding stage depends on the proportion of power deficiency it represents.
If the load shedding stage is too small compared with the prevailing generation deficiency, then there may be
no improvement in the frequency. This should be taken into account when forming the load groups.
Time delays should be sufficient to override any transient dips in frequency, as well as to provide time for the
frequency controls in the system to respond. These should not be excessive as this could jeopardize system
stability. Time delay settings of 5 - 20 s are typical.
An example of a four-stage load shedding scheme for 50 Hz systems is shown below:
Stage Element Frequency Setting (Hz) Time Setting (Sec)
1 Stage 1(f+t) 49.0 20 s
2 Stage 2(f+t) 48.6 20 s
3 Stage 3(f+t) 48.2 10 s
4 Stage 4(f+t) 47.8 10 s
The relatively long time delays are intended to provide sufficient time for the system controls to respond. This
will work well in a situation where the decline of system frequency is slow. For situations where rapid decline
of frequency is expected, this load shedding scheme should be supplemented by rate of change of
frequency protection elements.
98 P94V-TM-EN-5
4 OVERFREQUENCY PROTECTION
An increased system frequency arises when the mechanical power input to a generator exceeds the
electrical power output. This could happen, for instance, when there is a sudden loss of load due to tripping
of an outgoing feeder from the plant to a load centre. Under such conditions, the governor would normally
respond quickly to obtain a balance between the mechanical input and electrical output, thereby restoring
normal frequency. Overfrequency protection is required as a backup to cater for cases where the reaction of
the control equipment is too slow.
4.1 OVERFREQUENCY PROTECTION IMPLEMENTATION

The following settings are relevant for overfrequency:
● Stg (n) f+t Status: determines whether the stage is underfrequency, overfrequency, or disabled
● Stg (n) f+t Freq: defines the frequency pickup setting
● Stg (n) f+t Time: sets the time delay
4.2 OVERFREQUENCY PROTECTION LOGIC

Stg (n) f+t Sta
Freq Averaging
DT
Stg (n) f+t Freq & Stg (n) f+t Trp
Stage (n)
Enabled
Stg (n) f+t Status

Over
Adv Freq Inh

1
Freq Not Found
V<B Status
Enabled
1
UV Block
V00851
Figure 34: Overfrequency logic (single stage)

If the frequency is above the setting and not blocked, the DT timer is started and after this has timed out, the
trip is produced. If the frequency cannot be determined, the function is blocked.

Following changes on the network caused by faults or other operational requirements, it is possible that
various subsystems will be formed within the power network. It is likely that these subsystems will suffer from
a generation/load imbalance. The "islands" where generation exceeds the existing load will be subject to
overfrequency conditions. Severe over frequency conditions may be unacceptable to many industrial loads,
since running speeds of motors will be affected. The overfrequency element can be suitably set to sense this
contingency.
P94V-TM-EN-5 99
An example of two-stage overfrequency protection is shown below using stages 5 and 6 of the f+t elements.
However, settings for a real system will depend on the maximum frequency that equipment can tolerate for a
given period of time.
Stage Element Frequency Setting (Hz) Time Setting (Sec.)
1 Stage 5(f+t) 50.5 30
2 Stage 6(f+t) 51.0 20
The relatively long time delays are intended to provide time for the system controls to respond and will work
well in a situation where the increase of system frequency is slow.
For situations where rapid increase of frequency is expected, the protection scheme above could be
supplemented by rate of change of frequency protection elements.
In the system shown below, the generation in the MV bus is sized according to the loads on that bus,
whereas the generators linked to the HV bus produce energy for export to utility. If the links to the grid are
lost, the generation will cause the system frequency to rise. This rate of rise could be used to isolate the MV
bus from the HV system.
To utility
IPP generation
HV bus
Load
MV bus
Local generation
Load
E00857
Figure 35: Power system segregation based upon frequency measurements
100 P94V-TM-EN-5
5 INDEPENDENT R.O.C.O.F PROTECTION

Where there are very large loads, imbalances may occur that result in rapid decline in system frequency. The
situation could be so bad that shedding one or two stages of load is unlikely to stop this rapid frequency
decline. In such a situation, standard underfrequency protection will normally have to be supplemented with
protection that responds to the rate of change of frequency. An element is therefore required which identifies
the high rate of decline of frequency, and adapts the load shedding scheme accordingly.
Such protection can identify frequency variations occurring close to nominal frequency thereby providing
early warning of a developing frequency problem. The element can also be used as an alarm to warn
operators of unusually high system frequency variations.
5.1 INDEPENENT R.O.C.O.F PROTECTION IMPLEMENTATION

The device provides nine independent stages of protection. Each stage can respond to either rising or falling
frequency conditions. This depends on whether the frequency threshold is set above or below the system
nominal frequency. For example, if the frequency threshold is set above nominal frequency, the rate of
change of frequency setting is considered as positive and the element will operate for rising frequency
conditions. If the frequency threshold is set below nominal frequency, the setting is considered as negative
and the element will operate for falling frequency conditions.
The following settings are relevant for df/dt+t protection:
● df/dt+t (n) Status: determines whether the stage is for falling or rising frequency conditions
● df/dt+t (n) Set: defines the rate of change of frequency pickup setting
● df/dt+t (n) Time: sets the time delay
P94V-TM-EN-5 101
5.2 INDEPENDENT R.O.C.O.F PROTECTION LOGIC
Frequency
V
determination
df/dt Stg1 df /dt+t Sta
& 1 Stg1 df /dt+t Trp
df /dt Avg.Cycles
-1
df/dt +t (n) Set X &

df/dt+t (n) Time
Stage (n)
Enabled
df/dt+t (n) Status 1

Positive
Both
1
Negative
Disabled
V<B Status
Enabled
1 1
UV Block
Stg(n) Block
Adv Freq Inh
Freq Not Found 1
Freq High
Freq Low
V00852
Figure 36: Independent rate of change of frequency logic (single stage)

Considerable care should be taken when setting this element because it is not supervised by a frequency
setting. Setting of the time delay or increasing the number of df/dt averaging cycles will improve stability but
this is traded against reduced tripping times.
It is likely that this element would be used in conjunction with other frequency based protection elements to
provide a scheme that accounts for severe frequency fluctuations. An example scheme is shown below:
Frequency "f+t [81U/81O]" Frequency Supervised Rate of Change of Frequency "f
Elements +df/dt [81RF]" Elements
Frequency Time Setting Frequency Setting Rate of Change of Frequency Setting
Stage
Setting (Hz) (Sec.) (Hz) (Hz/Sec.)
1 49 20 49.2 1.0
2 48.6 20 48.8 1.0
3 48.2 10 48.4 1.0
4 47.8 10 48.0 1.0
5 - - - -
102 P94V-TM-EN-5
Rate of Change of Frequency

Stage
"df/dt+t [81R]" Elements
Rate of Change of Frequency Setting (Hz/Sec.) Time Setting (Sec.)
1 - -
2 - -
3 -3.0 0.5
4 -3.0 0.5
5 -3.0 0.1
In this scheme, tripping of the last two stages is accelerated by using the independent rate of change of
frequency element. If the frequency starts falling at a high rate (> 3 Hz/s in this example), then stages 3 & 4
are shed at around 48.5 Hz, with the objective of improving system stability. Stage 5 serves as an alarm and
gives operators advance warning that the situation is critical.
P94V-TM-EN-5 103
6 FREQUENCY-SUPERVISED R.O.C.O.F PROTECTION

Frequency-supervised Rate of Change of Frequency protection works in a similar way to Independent Rate
of change of Frequency Protection. The only difference is that with frequency supervision, the actual
frequency itself is monitored and the protection operates when both the rate of change of frequency AND the
frequency itself go outside the set limits.
Frequency-supervised Rate of Change of Frequency protection is also known as f+df/dt protection.
6.1 FREQUENCY-SUPERVISED R.O.C.O.F IMPLEMENTATION

The device provides nine independent stages of protection. Each stage can respond to either rising or falling
frequency conditions. This depends on whether the frequency threshold is set above or below the system
nominal frequency. For example, if the frequency threshold is set above nominal frequency, the rate of
change of frequency setting is considered as positive and the element will operate for rising frequency
conditions. If the frequency threshold is set below nominal frequency, the setting is considered as negative
and the element will operate for falling frequency conditions.
The following settings are relevant for f+ df/dt protection:
● f+df/dt 1 Status: determines whether the stage is for falling or rising frequency conditions
● f+df/dt 1 freq: defines the frequency pickup setting
● f+df/dt 1 df/dt: defines the rate of change of frequency pickup setting
The device will also indicate when an incorrect setting has been applied if the frequency threshold is set to
the nominal system frequency. There is no intentional time delay associated with this element, but time
delays could be applied using the PSL if required.
104 P94V-TM-EN-5
6.2 FREQUENCY-SUPERVISED R.O.C.O.F LOGIC
Frequency
V determination
df/dt
& 1 Stg1 df /dt+t Trp
df/dt Avg. Cycles

-1
f + df/dt (n) df/dt X &
Frequency Frequency
V determination averaging
Freq Avg. Cycles

-1
f+ df/dt (n) freq X
Stage (n)
Enabled
f + df/dt (n) Status 1

Positive
Both
1
Negative
Disabled
V<B Status
Enabled
1 1
UV Block
Stg(n)Block
Adv Freq Inh
Freq Not Found 1
Freq High
Freq Low
V00853
Figure 37: Frequency-supervised rate of change of frequency logic (single stage)
6.3.1 FREQUENCY-SUPERVISED R.O.C.O.F EXAMPLE

In the load shedding scheme below, we assume that for falling frequency conditions, the system can be
stabilised at frequency f2 by shedding a stage of load. For slow rates of decay, this can be achieved using
the underfrequency protection element set at frequency f1 with a suitable time delay. However, if the
generation deficit is substantial, the frequency will rapidly decrease and it is possible that the time delay
imposed by the underfrequency protection will not allow for frequency stabilisation. In this case, the chance
of system recovery will be enhanced by disconnecting the load stage based on a measurement of rate of
change of frequency and bypassing the time delay.
P94V-TM-EN-5 105
E00858
Figure 38: Frequency supervised rate of change of frequency protection

We recommend that the frequency supervised rate of change of frequency protection (f+df/dt) element be
used in conjunction with the time delayed frequency protection (f+t) elements.
A four stage high speed load shedding scheme may be configured as indicated below, noting that in each
stage, both the "f+t" and the "f+df/dt" elements are enabled.
Frequency Supervised Rate of Change of Frequency "f+df/dt
Frequency "f+t [81U/81O]" Elements
[81RF]" Elements
Frequency Setting Time Setting Frequency Setting Rate of Change of Frequency Setting
Stage
(Hz) (Sec.) (Hz) (Hz/sec.)
1 49 20 49 1.0
2 48.6 20 48.6 1.0
3 48.2 10 48.2 1.0
4 47.8 10 47.8 1.0
It may be possible to further improve the speed of load shedding by changing the frequency setting on the f
+df/dt element. In the settings outlined below, the frequency settings for this element have been set slightly
higher than the frequency settings for the f+t element. This difference will allow for the measuring time, and
will result in the tripping of the two elements at approximately the same frequency value. Therefore, the slow
frequency decline and fast frequency decline scenarios are independently monitored and optimised without
sacrificing system security.
Frequency Supervised Rate of Change of Frequency "f
Frequency "f+t [81U/81O]" Elements
+df/dt [81RF]" Elements
Frequency Setting Time Setting Frequency Setting Rate of Change of Frequency Setting
Stage
(Hz) (Sec.) (Hz) (Hz/sec.)
1 49 20 49.2 1.0
2 48.6 20 48.8 1.0
3 48.2 10 48.4 1.0
4 47.8 10 48.0 1.0
106 P94V-TM-EN-5
7 AVERAGE RATE OF CHANGE OF FREQUENCY PROTECTION

Owing to the complex dynamics of power systems, variations in frequency during times of generation-to-load
imbalance are highly non-linear. Oscillations will occur as the system seeks to address the imbalance,
resulting in frequency oscillations typically in the order of 0.1 Hz to 1 Hz, in addition to the basic change in
frequency.
The independent and frequency-supervised rate of change of frequency elements use an instantaneous
measurement of the rate of change of frequency, based on a 3-cycle, filtered, rolling average technique. Due
to the oscillatory nature of frequency excursions, this instantaneous value can sometimes be misleading,
either causing unexpected operation or excessive instability. For this reason, the device also provides an
element for monitoring the longer term frequency trend, thereby reducing the effects of non-linearity in the
system.
Average Rate of Change of Frequency protection is also known as f+Df/Dt protection (note the upper-case
"D").
7.1 AVERAGE R.O.C.O.F PROTECTION IMPLEMENTATION

The device provides nine independent stages of average rate of change of frequency protection. Each stage
can respond to either rising or falling frequency conditions. This depends on whether the frequency threshold
is set above or below the system nominal frequency. For example, if the frequency threshold is set above
nominal frequency, the rate of change of frequency setting is considered as positive and the element will
operate for rising frequency conditions. If the frequency threshold is set below nominal frequency, the setting
is considered as negative and the element will operate for falling frequency conditions.
When the measured frequency crosses the supervising frequency threshold, a timer is initiated. At the end of
this time period, the frequency difference is evaluated and if this exceeds the setting, a trip output is given.
E00856
Figure 39: Average rate of change of frequency characteristic
P94V-TM-EN-5 107
After time ∆t, the element is blocked from further operation until the frequency recovers to a value above the
supervising frequency threshold. If the element has operated, the trip DDB signal will be ON until the
frequency recovers to a value above the supervising frequency threshold.
The average rate of change of frequency is then measured based on the frequency difference, ∆f over the
settable time period, ∆t.
The following settings are relevant for Df/Dt protection:
● f+Df/Dt (n) Status: determines whether the stage is for falling or rising frequency conditions
● f+Df/Dt (n) Freq: defines the frequency pickup setting
● f+Df/Dt (n) Dfreq: defines the change in frequency that must be measured in a set time period
● f+Df/Dt (n) Dtime: sets the time period over which the frequency is monitiored
7.2 AVERAGE R.O.C.O.F LOGIC
Frequency Frequency
V determination Averaging
Stg1 df /dt+t Sta
Frequency
& 1 comparision
Stg1 df /dt+t Trp
Freq Avg. Cycles

-1
Df/Dt+f (n) freq X &

F+ Df/Dt Dtime (n) F+ Df/Dt Dfreq (n)
Stage (n)
Enabled
f + Df/Dt (n) Status 1

Positive
Both
1
Negative
Disabled
V<B Status
Enabled
1 1
UV Block
Stg(n)Block
Adv Freq Inh
Freq Not Found 1
Freq High
Freq Low
V00859
Figure 40: Average rate of change of frequency logic (single stage)

The average rate of change of frequency element can be set to measure the rate of change over a short
period as low as 20 ms (1 cycle @ 50 Hz) or a relatively long period up to 2 s (100 cycles @ 50 Hz). With a
time setting, Dt, towards the lower end of this range, the element becomes similar to the frequency
108 P94V-TM-EN-5
supervised rate of change function, "f+df/dt". With high Dt settings, the element acts as a frequency trend
monitor.
Although the element has a wide range of setting possibilities we recommend that the Dt setting is set
greater than 100 ms to ensure the accuracy of the element.
A possible four stage load shedding scheme using the average rate of change frequency element is shown
in the following table:
Frequency Average Rate of Change of Frequency "f+Df/Dt [81RAV]"
"f+t [81U/81O]" Elements Elements
(f+Df/Dt) f
(f+t) f Frequency (f+t) t (f+Df/Dt) Df Frequency (f+Df/Dt) Dt Time
Stage Frequency Setting
Setting (Hz) Time Setting (Sec.) Diff Setting, (Hz) Period, (Sec.)
(Hz)
1 49 20 49 0.5 0.5
2 48.6 20 48.6 0.5 0.5
3 48.2 10 48.2 0.5 0.5
4 47.8 10 47.8 0.5 0.5
In the above scheme, the faster load shed decisions are made by monitoring the frequency change over
500 ms. Therefore tripping takes place more slowly than in schemes employing frequency-supervised df/dt,
but the difference is not very much at this setting. If the delay jeopardises system stability, then the scheme
can be improved by increasing the independent "f" setting. Depending on how much this value is increased,
the frequency at which the "f+Df/Dt" element will trip also increases and so reduces the time delay under
more severe frequency fluctuations. For example, with the settings shown below, the first stage of load
shedding would be tripped approximately 300 msecs after 49.0 Hz is reached and at a frequency of
approximately 48.7 Hz.
Frequency Average Rate of Change of Frequency
"f+t [81U/81O]" Elements "f+Df/Dt [81RAV]" Elements
(f+Df/Dt) f (f+Df/Dt) Df
(f+t) f Frequency (f+t) t (f+Df/Dt) Dt Time
Stage Frequency Setting Frequency Diff
Setting (Hz) Time Setting (Sec) Period, (Sec.)
(Hz) Setting (Hz)
1 49 20 49.2 0.5 0.5 s
2 48.6 20 48.8 0.5 0.5 s
3 48.2 10 48.4 0.5 0.5 s
4 47.8 10 48.0 0.5 0.5 s
P94V-TM-EN-5 109
8 LOAD SHEDDING AND RESTORATION

The goal of load shedding is to stabilise a falling system frequency. As the system stabilises and the
generation capability improves, the system frequency will recover to near normal levels and after some time
delay it is possible to consider the restoration of load onto the healthy system. However, load restoration
needs to be performed carefully and systematically so that system stability is not jeopardized again.
In the case of industrial plants with captive generation, load restoration should be linked to the available
generation since connecting additional load when the generation is still inadequate, will only result in
declining frequency and more load shedding. If the in-plant generation is insufficient to meet the load
requirements, then load restoration should be interlocked with recovery of the utility supply.
Whilst load shedding leads to an improvement in the system frequency, the disconnected loads need to be
reconnected after the system is stable again. Loads should only be restored if the frequency remains stable
for some period of time (minor frequency excursions can be ignored during this time period). The number of
load restoration steps is normally less than the load shedding steps to reduce repeated disturbances while
restoring load.
8.1 LOAD RESTORATION IMPLEMENTATION

The device uses the measurement of system frequency as the main criteria for load restoration. For each
stage of load restoration, it is necessary that the same stage of load shedding has occurred previously and
that no elements within that stage are configured for overfrequency or rising frequency conditions. If load
shedding has not previously occurred, the load restoration for that stage is inactive.
The device provides nine independent stages of Load Restoration. It is implemented in the FREQ
PROTECTION column of the relevant settings group. The following settings are relevant for Load
Restoration:
● Restore(n) Status: determines whether the stage is disabled or enabled
● Restore(n) Freq: defines the frequency pickup setting
● Restore(n) Time: Timer period for which the measured frequency must be higher than the stage
restoration.
● Holding Timer: Sets the holding timer value
8.2 HOLDING BAND

Load restoration for a given stage begins when the system frequency rises above the Restore(n) Freq
setting for that stage and the stage restoration timer Restore(n) Time is initiated. If the system frequency
remains above the frequency setting for the set time delay, load restoration of that stage will be triggered.
Unfortunately, frequency recovery profiles are highly non-linear and it would be reasonably common for the
system frequency to fall transiently below the restoration frequency threshold. If the restoration timer
immediately reset whenever a frequency dip occurred, it is likely that load restoration would never be
successful. For this reason, the protection has a "holding band". This holding band is a region defined by the
restoration frequency and the highest frequency setting used in the load shedding elements for that stage.
The difference between these two settings must always be greater than 0.02 Hz, otherwise a Wrong Setting
alarm will be generated. Whenever the system frequency dips into the holding band, operation of the stage
restoration timer is suspended until the frequency rises above the restoration frequency setting, at which
point timing will continue. If the system frequency dip is sufficiently large to cause any frequency element to
start or trip in this stage, i.e. if the frequency falls below the lower limit of the holding band, the restoration
timer will immediately be reset. This is demonstrated below.
110 P94V-TM-EN-5
System Frequency
Restoration
Frequency
Holding Band
Shedding
Frequency
Trip
Underfrequency
Element Off
Complete
Holding
Timer Off
Time less than
Complete Holding Timer Setting
Restoration
Timer Off
On
Stage 1 Restore Start
Off
On
Stage 1 Restore Enable
Off
Underfrequency Trip System Frequency Partial System Frequency Restoration Time
Underfrequency Completes Stage
Stage (n) Load Decay Restoration Timer Recovery Continues
Element Pick -up Suspended (n) Load
Shedding Restoration Timer
System Frequency Resumes Timing
Restoration
Recovery Starts
Restoration Time Starts
Time
V00854
Figure 41: Load restoration with short deviation into holding band
If the system frequency remains in the holding band for too long it is likely that other system frequency
problems are occurring and it would be prudent to reset the restoration timer for that stage. For this reason,
as soon as the system frequency is measured to be within the holding band, the "Holding Timer" is initiated.
If the system frequency doesn’t leave the holding band before the holding timer setting has been exceeded,
the load restoration time delay for that stage is immediately reset.
Note:
The holding timer has a common setting for all stages of load restoration.
An example of the case when the time in the holding band is excessive is shown below.
P94V-TM-EN-5 111
System Frequency
Restoration
Frequency
Holding Band
Shedding
Frequency
Underfrequency Trip
Element Off
Holding Complete
Timer
Off
Restoration Time greater than
Holding Timer Setting
Timer Complete
Off
Stage 1 Restore Start On

Off Holding
Timer
On
Stage 1 Restore Enable
Off
Underfrequency Underfrequency System Frequency System Frequency Restoration Time
Element Pick-up Trip Stage (n) Partial Decay Recovery Continues
Load Shedding Restoration Timer Completes Stage
System Frequency Restoration Timer (n) Load
Suspended
Recovery Starts Resumes Timing Restoration
Restoration Time Starts
V00855
Figure 42: Load restoration with long deviation into holding band
112 P94V-TM-EN-5
8.3 LOAD RESTORATION LOGIC
Stg(n) f+t Trp
Stg(n) df/dt+t Trp

1 Load Restoration Cumulative
Stg(n) f+df/dt Trp & Function Timer
Stg(n) Restore Sta
Stg(n) f+Df/Dt Trp

& Stg(n) Restore Cls
Restore (n) Status
Restore(n) Time
Enabled
Disabled
V<B Status
Enabled
1 1
UV Block
Stg(n)Block
Adv Freq Inh
Freq Not Found 1
Freq High
Freq Low
Frequency Frequency
V determination Averaging
Freq Avg. Cycles

Holding function
Restore freq
Highest Freq setting
Holding Timer (n)
V00860
Figure 43: Load Restoration logic

A four stage, single frequency load restoration scheme is shown below. The frequency setting has been
chosen such that there is sufficient separation between the highest load shed frequency and the restoration
frequency to prevent any possible hunting. A restoration frequency setting closer to nominal frequency may
be chosen if an operating frequency of 49.3 Hz is unacceptable.
Stage Restoration Frequency Setting (Hz) Restoration Time Delay (secs) Holding Time Delay (secs)
1 49.3 Hz 240 sec 20 sec
2 49.3 Hz 180 sec 20 sec
3 49.3 Hz 120 sec 20 sec
4 49.3 Hz 60 sec 20 sec
In this scheme, the time delays ensure that the most critical loads are reconnected (assuming that the higher
stages refer to more important loads). By restoring the load sequentially, system stability should normally be
P94V-TM-EN-5 113
maintained. These time settings are system dependent; higher or lower settings may be required depending
on the particular application.
It is possible to set up restoration schemes involving multiple frequencies. This allows faster restoration of
loads, but there is the possibility of continuous system operation at frequencies far removed from the
nominal. A typical scheme using two frequencies is illustrated below:
Restore Freq. Restoration Frequency Restore DelayRestoration Time Delay
Stage Holding Time Delay (S)
Setting (Hz) (S)
1 49.5 Hz 120 sec 20 sec
2 49.5 Hz 60 sec 20 sec
3 49.0 Hz 120 sec 20 sec
4 49.0 Hz 60 sec 20 sec
Staggered time settings may be used in this scheme as well, but the time separation among the restoration
of stages will be a function of the frequency recovery pattern. Time coordinated restoration can only be
guaranteed for those stages with a common restoration frequency setting.
114 P94V-TM-EN-5
AUTORECLOSE
CHAPTER 7
Chapter 7 - Autoreclose P94V
116 P94V-TM-EN-5
P94V Chapter 7 - Autoreclose
1 CHAPTER OVERVIEW
Selected models of this product provide sophisticated Autoreclose (AR) functionality. The purpose of this
chapter is to describe the operation of this functionality including the principles, logic diagrams and
applications.
Chapter Overview 117
Introduction to 3-phase Autoreclose 118
Implementation 119
Autoreclose Function Inputs 120
Autoreclose Function Outputs 123
Autoreclose Function Alarms 125
Autoreclose Operation 126
Setting Guidelines 143
P94V-TM-EN-5 117
2 INTRODUCTION TO 3-PHASE AUTORECLOSE

It is known that approximately 80 - 90% of faults are transient in nature. This means that most faults do not
last long and are self-clearing. A common example of a transient fault is an insulator flashover, which may be
caused for example by lightning, clashing conductors or wind-blown debris.
A transient fault, such as an insulator flashover, is a self-clearing ‘non-damage’ fault. The flashover will
cause one or more circuit breakers to trip, but it may also have the effect of clearing the fault. If the fault
clears itself, the fault does not recur when the line is re-energised.
The remaining 10 – 20% of faults are either semi-permanent or permanent. A small tree branch falling on the
line could cause a semi-permanent fault. Here the cause of the fault would not be removed by the immediate
tripping of the circuit, but could be burnt away during a time-delayed trip. Permanent faults could be broken
conductors, transformer faults, cable faults or machine faults, which must be located and repaired before the
supply can be restored.
In the majority of fault incidents, if the faulty line is immediately tripped out, and time is allowed for the fault
arc to deionise, reclosure of the circuit breakers will result in the line being successfully re-energised.
Autoreclose schemes are used to automatically reclose a circuit breaker a set time after it has been opened
due to operation of a protection element.
On HV/MV distribution networks, autoreclosing is applied mainly to radial feeders, where system stability
problems do not generally arise. The main advantages of using Autoreclose are:
● Minimal interruption in supply to the consumer
● Reduction of operating costs - fewer man hours in repairing fault damage and the possibility of running
unattended substations
● With Autoreclose, instantaneous protection can be used which means shorter fault durations. This in
turn means less fault damage and fewer permanent faults
Autoreclosing provides an important benefit on circuits using time-graded protection, in that it allows the use
of instantaneous protection to provide a high speed first trip. With fast tripping, the duration of the power arc
resulting from an overhead line fault is reduced to a minimum. This lessens the chance of damage to the
line, which might otherwise cause a transient fault to develop into a permanent fault. Using instantaneous
protection also prevents blowing of fuses in teed feeders, as well as reducing circuit breaker maintenance by
eliminating pre-arc heating.
When instantaneous protection is used with autoreclosing, the scheme is normally arranged to block the
instantaneous protection after the first trip. Therefore, if the fault persists after re-closure, the time-graded
protection will provide discriminative tripping resulting in the isolation of the faulted section. However, for
certain applications, where the majority of the faults are likely to be transient, it is common practise to allow
more than one instantaneous trip before the instantaneous protection is blocked.
Some schemes allow a number of re-closures and time-graded trips after the first instantaneous trip, which
may result in the burning out and clearance of semi-permanent faults. Such a scheme may also be used to
allow fuses to operate in teed feeders where the fault current is low.
When considering feeders that are partly overhead line and partly underground cable, any decision to install
auto-reclosing should be subject to analysis of the data (knowledge of the frequency of transient faults). This
is because this type of arrangement probably has a greater proportion of semi-permanent and permanent
faults than for purely overhead feeders. In this case, the advantages of autoreclosing are small. It can even
be disadvantageous because re-closing on to a faulty cable is likely to exacerbate the damage.
118 P94V-TM-EN-5
3 IMPLEMENTATION
Autoreclose functionality is a software option, which is selected when ordering the device, so this description
only applies to models with this option.
The P94V does not have any CT inputs, therefore Autoreclose cannot be initiated by an internal current
protection function. It can only be initiated by an external signal originating from another device such as a
P14N, P14D, or P14x. In this case, the relevant opto-input would be mapped to the DDB signal Ext AR Prot
Strt and Ext AR Prot Trip.
The Autoreclose function for P40Agile products with current protection (P14D and P14N) can be started by
their internal SEF protection function which produces an internal SEF Protection Start signal and an internal
SEF Protection Trip signal. These in turn are used to drive internal AR SEF logic. There is one external DDB
signal associated with the SEF logic, which is the Block SEF Protection DDB signal (AR Blk SEF).
The P94V does not provide SEF protection, therefore cannot provide internal SEF protection Start and Trip
signals. However, it is highly desirable to a) keep the Autoreclose internal logic identical to the other products
in the range, and b) continue providing the AR Blk SEF DDB signal in case it needs to be used externally.
This allows the device to be used as an independent Autoreclose device, which can interact with all Alstom
products without any reduction of functionality.
For these reasons, the P94V provides two additional DDB signals - Ext AR SEF Start and Ext AR SEF Trip.
These external signals can start and trip the internal AR SEF logic, which can consequently produce an AR
Blk SEF DDB signal. This signal is therefore available for sending to an external device or feeding back to
the initiating device, if so desired.
The Autoreclose-specific settings are contained in the AUTORECLOSE column. In addition to the settings
contained in this column, the Autoreclose function may also need some settings in other columns such as
CB CONTROL and SYSTEM CHECKS, as well as in the blocking cells of relevant protection columns.
The Autoreclose function can be set to perform a single-shot, two-shot, three-shot or four-shot cycle. You
select this by the Number of Shots cell in the AUTORECLOSE column. You can also initiate a separate
Autoreclose cycle for the SEF protection, with a different number of shots, selected by the Number SEF
Shots cell. Dead times for all shots can be adjusted independently.
The dead time starts in one of two cases; when the circuit breaker has tripped, or when the protection has
reset. You select which method with the Start Dead t On setting.
At the end of the relevant dead time, a CB close 3ph signal is given, providing it is safe for the circuit
breaker to close. This is determined by checking that certain system conditions are met as specified by the
System Checks functionality.
It is safe to close the circuit breaker providing that:
● only one side of the circuit breaker is live (either dead line / live bus, or live line / dead bus), or
● if both bus and line sides of the circuit breaker are live, the system voltages are synchronised.
In addition, the energy source powering the circuit breaker (for example the closing spring) must be fully
charged. This is indicated from the CB Healthy DDB input.
When the CB has closed, the reclaim time starts. If the circuit breaker does not trip again, the Autoreclose
function resets at the end of the set reclaim time. If the protection operates during the reclaim time the device
either advances to the next shot in the Autoreclose cycle, or if all reclose attempts have been made, goes to
lockout.
CB Status signals must also be available, so the default setting for CB Status Input in the CB CONTROL
column, should be modified according to the application. The default PSL requires 52A, 52B and CB Healthy
logic inputs, so a setting of both 52A and 52B would be required for the CB Status Input if used with the
default PSL.
P94V-TM-EN-5 119
4 AUTORECLOSE FUNCTION INPUTS

The Autoreclose function has several logic inputs, which can be mapped to any of the opto-inputs or to one
or more of the DDB output signals generated by the PSL. The functions of these inputs are described below.
4.1 CB HEALTHY
It is necessary to establish if there is sufficient energy in the circuit breaker (spring charged, gas pressure
healthy, etc.) before the CB can be closed. This CB Healthy input is used to ensure this before initiating a
CB closed 3ph command. If on completion of the dead time, the CB Healthy input is low, and remains low
for a period given by the CB Healthy Time timer, lockout will result and the circuit breaker will remain open.
The majority of circuit breakers are only capable of providing a single trip-close-trip cycle, in which case the
CB Healthy signal would stay low after one Autoreclose shot, resulting in lockout.
This check can be disabled by not allocating an opto-input for the CB Healthy signal, whereby the signal
defaults to a High state.
4.2 BLOCK AR
The Block AR input blocks the Autoreclose function and causes a lockout. It can be used when protection
operation without Autoreclose is required. A typical example is on a transformer feeder, where Autoreclose
may be initiated by the feeder protection but blocked by the transformer protection.
4.3 RESET LOCKOUT

The Reset Lockout input can be used to reset the Autoreclose function following lockout. It also resets any
Autoreclose alarms, provided that the signals that initiated the lockout have been removed.
4.4 AR AUTO MODE

The AR Auto Mode input is used to select the Auto operating mode. In this mode, the Autoreclose function
is in service.
4.5 AR LIVELINE MODE

The AR Live Line Mode input is used to select the Live Line operating mode when Autoreclose is out of
service and all blocking of instantaneous protection by Autoreclose is disabled. This operating mode takes
precedence over all other operating modes for safety reasons, as it indicates that utility personnel are
working near live equipment.
4.6 TELECONTROL MODE

The Telecontrol input is used to select the Telecontrol operating mode so that the Auto and Non-auto modes
of operation can be selected remotely.
4.7 LIVE/DEAD CCTS OK (LIVE/DEAD CIRCUITS OK)

The Live/Dead Ccts OK signal is a signal indicating the status of the Live Line / Dead Bus or Live Bus /
Dead Line system conditions (High = OK, Low = Not OK). The logic required can be derived in the PSL from
the Live Line, Dead Line, Live Bus and Dead Bus signals in the System Check logic (if applicable), or it can
come from an external source depending on the application.
120 P94V-TM-EN-5
4.8 AR SYS CHECKS (AR SYSTEM CHECKS)

The AR Sys Checks signal can be mapped from the system checks output SysChksInactive, to enable
auto-reclosing without any system checks, providing the System Checks setting in the CONFIGURATION
column is disabled. This mapping is not essential, because the No System Checks setting in the
AUTORECLOSE column can be enabled to achieve the same effect.
This DDB can also be mapped to an opto-input, to allow the IED to receive a signal from an external system
monitoring device, indicating that the system conditions are suitable for CB closing. This should not normally
be necessary, since the IED has comprehensive built in system check functionality.
4.9 EXT AR PROT TRIP (EXTERNAL AR PROTECTION TRIP)

The Ext AR Prot Trip signal allows Autoreclose initiation by a Trip from a separate protection device.
4.10 EXT AR PROT START (EXTERNAL AR PROTECTION START)

The Ext AR Prot Strt signal allows Autoreclose initiation by a Start from a separate protection device.
4.11 EXT AR SEF START (EXTERNAL AR SEF START)

The Ext AR SEF Strt signal allows Autoreclose initiation by a SEF Start from a separate protection device.
4.12 EXT AR SEF TRIP (EXTERNAL AR SEFTRIP)

The Ext AR SEF Trip signal allows Autoreclose initiation by a SEF Trip from a separate protection device.
4.13 DAR COMPLETE (DELAYED AUTORECLOSE COMPLETE)

Some utilities require Delayed Autoreclose (DAR) functionality.
The DAR Complete signal can, if required, be mapped in PSL to provide a short pulse when a CB Close
command is given at the end of the dead time. If DAR Complete is activated during an Autoreclose cycle,
the output signal DAR in Progress resets, even though the reclaim time may still be running, and AR in
Progress remains set until the end of the reclaim time.
For most applications, DAR complete can be ignored (not mapped in PSL). In such cases, DAR in
Progress operates and resets in parallel with AR in Progress.
4.14 CB IN SERVICE (CIRCUIT BREAKER IN SERVICE)

The CB In Service signal must remain asserted when protection operates if autoreclose is to be initiated.
For most applications, it can be mapped to CB Closed 3ph. More complex PSL mapping can be
programmed if required, for example where it is necessary to confirm not only that the CB is closed but also
that the line and/or bus VT is actually live up to the instant of protection operation.
4.15 AR RESTART
In some applications, it is sometimes necessary to initiate an Autoreclose cycle by means of connecting an
external signal to an opto-input. This would be when the normal interlock conditions are not all satisfied, i.e.
when the CB is open and the associated feeder is dead. If the AR Restart input is mapped to an opto-input,
activation of that opto-input will initiate an Autoreclose cycle irrespective of the status of the CB in Service
input, provided the other interlock conditions, are still satisfied.
P94V-TM-EN-5 121
4.16 DT OK TO START (DEAD TIME OK TO START)

This is an optional extra interlock in the dead time initiation logic. In addition to the CB being open and the
protection reset, DT OK To Start has to be set high to allow the dead time function to be primed after an AR
cycle has started. Once the dead time function is primed, this signal has no further affect – the dead time
function stays primed even if the signal subsequently goes low. A typical PSL mapping for this input is from
the Dead Line signal from the System Check logic. This would enable dead time priming only when the
feeder has gone dead after CB tripping. If this extra dead time priming interlock is not required, DT OK To
Start can be left unmapped, and it will default to a high state.
4.17 DEADTIME ENABLED

This is an optional interlock in the dead time logic. This signal has to be high to allow the dead time to run. If
this signal goes low, the dead time stops and resets, but stays primed, and will restart from zero when it goes
high again. A typical PSL mapping is from the CB Healthy input or from selected signals from the System
Check logic. It could also be mapped to an opto-input to provide a 'hold off' function for the follower CB in a
'master/follower' application with 2 CBs. If this optional interlock is not required, DeadTime Enabled can be
left unmapped, and it will default to a high state.
4.18 AR INIT TRIPTEST (INITIATE TRIP TEST)

If AR Init TripTest is mapped to an opto-input, and that input is activated momentarily, the IED generates a
CB trip output via AR Trip Test. The default PSL then maps this to output to the trip output relay and initiates
an Autoreclose cycle.
4.19 AR SKIP SHOT 1

If AR Skip Shot 1 is mapped to an opto-input, and that input is activated momentarily, the IED logic will
cause the Autoreclose sequence counter to increment by 1. This will decrease the available number of
reclose shots and will lockout the re-closer.
4.20 INH RECLAIM TIME (INHIBIT RECLAIM TIME)

If Inh Reclaim Time is mapped to an opto-input, and that input is active at the start of the reclaim time, the
IED logic will cause the reclaim timers to be blocked.
122 P94V-TM-EN-5
5 AUTORECLOSE FUNCTION OUTPUTS

The Autoreclose function has several logic outputs, which can be assigned to output relay contacts, monitor
bits in the COMMISSIONING TESTS column, or the PSL. The functions of these outputs are described
below.
5.1 AR IN PROGRESS
This signal is present during the complete re-close cycle from the start of protection to the end of the reclaim
time or lockout.
5.2 DAR IN PROGRESS

This operates together with the AR In Progress signal at the start of Autoreclose. If DAR Complete does
not operate, DAR in Progress remains operated until AR In Progress resets at the end of the cycle. If DAR
Complete goes high during the Autoreclose cycle, DAR in Progress resets.
5.3 SEQUENCE COUNTER STATUS DDB SIGNALS

During each Autoreclose cycle a sequence Counter increments by 1 after each fault trip and resets to zero at
the end of the cycle.
● AR SeqCounter 0 is set when the counter is at zero
● AR SeqCounter 1 is set when the counter is at 1
5.4 SUCCESSFUL CLOSE

The Successful Close output indicates that an Autoreclose cycle has been successfully completed. A
successful Autoreclose signal is given after the protection has tripped the CB and it has reclosed
successfully. The successful Autoreclose output is reset at the next CB trip or from one of the reset lockout
methods.
5.5 AR IN SERVICE
The AR In Service output indicates whether the Autoreclose is in or out of service. Autoreclose is In Service
when the device is in Auto mode and Out of Service when in the Non-Auto and Live Line modes.
5.6 AR BLK MAIN PROT (BLOCK MAIN PROTECTION)

The AR Blk Main Prot signal blocks the DT-only stages (instantaneous stages) of the main current
protection elements. These are I>3, I>4, I>6, IN1>3, IN1>4, IN2>3, and IN2>4. You block the instantaneous
stages for each trip of the Autoreclose cycle using the Overcurrent and Earth Fault 1 and 2 settings, I>
Blocking, IN1> Blocking, IN2> Blocking and the Trip 1/2/3/4/5 Main settings.
5.7 AR BLK SEF PROT (BLOCK SEF PROTECTION)

The AR Blk SEF Prot signal blocks the DT-only stages (instantaneous stages) of the SEF protection
elements. These are ISEF>3, and ISEF>4. You block the instantaneous SEF stages for each trip of the
Autoreclose cycle using the SEF PROTECTION setting ISEF> Blocking, and the Trip 1/2/3/4/5 SEF
settings.
P94V-TM-EN-5 123
5.8 RECLOSE CHECKS

The Reclose Checks output indicates that the AR System Checks are in progress.
5.9 DEADTIME IN PROG

The DeadTime in Prog output indicates that the dead time is in progress. This signal is set when Reclose
Checks is set AND input Dead TimeEnabled is high. This may be useful during commissioning to check the
operation of the Autoreclose cycle.
5.10 DT COMPLETE (DEAD TIME COMPLETE)

DT Complete (Dead time complete) operates at the end of the set dead time, and remains operated until
either the scheme resets at the end of the reclaim time or a further protection operation or Autoreclose
initiation occurs. It can be applied purely as an indication, or included in PSL mapping to logic input DAR
Complete.
5.11 AR SYNC CHECK (AR SYNCHRONISATION CHECK)

AR Sync Check indicates that the Autoreclose Synchronism checks are satisfactory. This is when either of
the synchronisation check modules (CS1 or CS2), confirms an In-Synchronism condition.
5.12 AR SYSCHECKS OK (AR SYSTEM CHECKS OK)

AR SysChecks OK indicates that the Autoreclose System checks are satisfactory. This is when any
selected system check condition (synchronism check, live bus/dead line etc.) is confirmed.
This DDB signal ihas the number 463 and is an output from the Autoreclose function (i.e. a PSL input). It
should not be confused with DDB signal 403, which is an input to the Autoreclose function (i.e. a PSL
output).
5.13 AUTO CLOSE

The Auto Close output indicates that the Autoreclose logic has issued a Close signal to the CB. This
output feeds a signal to the control close pulse timer and remains on until the CB has closed. This signal
may be useful during commissioning to check the operation of the Autoreclose cycle.
5.14 PROTECTION LOCKT (PROTECTION LOCKOUT)

Protection Lockt (Protection Lockout) operates if AR lockout is triggered by protection operation either
during the inhibit period following a manual CB close or when the device is in Non-auto or Live Line mode.
5.15 RESET LCKOUT ALM (RESET LOCKOUT ALARM)

Reset Lckout Alm operates when the device is in Non-auto mode, if the Reset Lockout setting is set to
Select Non Auto.
5.16 RECLAIM IN PROG

Reclaim in Prog output indicates that a reclaim timer is in progress and will drop-off once the reclaim timer
resets.
5.17 RECLAIM COMPLETE

Reclaim Complete operates at the end of the set reclaim time and is a fast reset. To maintain the output
indication a dwell timer has to be implemented in PSL.
124 P94V-TM-EN-5
6 AUTORECLOSE FUNCTION ALARMS

The following DDB signals will produce an alarm. These are described below.
6.1 AR NO SYS CHECK

The AR No Sys Check alarm indicates that the system voltages are not suitable for autoreclosing at the end
of the system check time (setting Sys Check Time), leading to a lockout condition. This alarm is latched and
must be reset manually.
6.2 AR CB UNHEALTHY
The AR CB Unhealthy alarm indicates that the CB Healthy input was not energised at the end of the CB
Healthy Time, leading to a lockout condition. This alarm is latched and must be reset manually.
6.3 AR LOCKOUT
The AR Lockout alarm indicates that the device is in a lockout status and that further re-close attempts will
not be made. This alarm can configured to reset automatically (self-reset) or manually as determined by the
setting Reset Lockout by in the CB CONTROL column.
P94V-TM-EN-5 125
7 AUTORECLOSE OPERATION
The Autoreclose function is a complex function consisting of several modules interacting with one another.
This is described in terms of separate logic diagrams, which link together by means of Internal signals
(depicted by the pink-coloured boxes. To help you with the analysis of the various Autoreclose modules, the
following table describes how these internal signals link up in the various logic diagrams. Each internal signal
is allocated with an ID, and the diagrams on which they appear are also identified.
Internal Appearing in
Input to AR function Appearing in diagrams Output from AR function
signal ID diagrams
1 Autoreclose Disabled V00505, V00507 Autoreclose Disabled V00501
2 Live Line Mode V00505, V00507, V00514 Live Line Mode V00501
3 Non Auto Mode V00505, V00507, V00514 Non Auto Mode V00501
4 Auto Mode (int) V00505, V00507, V00512 Auto Mode (int) V00501
5 Main Protection Start V00504, V00505, V00507, V00511, V00512 Main Protection Start V00502
6 SEF Protection Start V00504, V00505, V00511, V00512 SEF Protection Start V00502
7 Main Protection Trip V00505, V00513, V00514 Main Protection Trip V00503
8 SEF Protection Trip V00505, V00507, V00513, V00514 SEF Protection Trip V00503
9 Block Autoreclose V00513 Block Autoreclose V00515
10 SC Count >= Main Shots V00504 SC Count >= Main Shots V00505
11 SC Count >= SEF Shots V00504 SC Count >= SEF Shots V00505
12 Main High Shots V00505, V00513 Main High Shots V00504
13 SEF High Shots V00505, V00513 SEF High Shots V00504
14 Autoreclose Inhibit V00505, V00507, V00514 Autoreclose Inhibit V00512
15 Autoreclose Start V00508, V00509, V00511, V00513 Autoreclose Start V00505
16 Autoreclose Initiate V00508, V00513 Autoreclose Initiate V00505
17 SC Count > 4 V00506 SC Count > 4 V00505
18 Block Main Prot Trips V00507 Block Main Prot Trips V00506
19 Block SEF Prot Trips V00507 Block SEF Prot Trips V00506
20 Hold Reclaim Output V00511 Hold Reclaim Output V00509
7.1 OPERATING MODES

The Autoreclose function has three operating modes:
● Auto Mode: Autoreclose is in service
● Non-auto Mode: Autoreclose is out of service AND the chosen protection functions are blocked if
setting AR Deselected = Block Inst Prot.
● Live Line Mode: Autoreclose is out of service, but protection functions are NOT blocked, even if setting
AR Deselected = Block Inst Prot.
Note:
Live Line Mode provides extra security for live line working on the protected feeder.
The Autoreclose function must first be enabled in the CONFIGURATION column. You can then select the
operating mode according to application requirements. The basic method of mode selection is determined by
the setting AR Mode Select in the AUTORECLOSE column, as summarised in the following table:
126 P94V-TM-EN-5
AR Mode Select Setting Description

Auto or Non-auto mode selection is determined by the command cell Autoreclose Mode in the CB CONTROL
Command Mode
column.
Auto or Non-auto mode selection is determined by an opto-input mapped to AR Auto Mode
Opto Set Mode If the AR Auto Mode input is high, Auto operating mode is selected. If the AR Auto Mode input is low, Non-
Auto operating mode is selected.
Auto or Non-auto mode selection is controlled by the Telecontrol Mode input. If the Telecontrol Mode input is
User Set Mode high, the setting Autoreclose Mode in the CB CONTROL column is used to select Auto or Non Auto operating
mode. If the Telecontrol Mode input is low, it behaves as for the Opto Set Mode setting.
Auto or Non-auto mode selection is determined by the falling edge of Telecontrol. If the Telecontrol input is
high, the operating mode is toggled between Auto and Non Auto Mode on the falling edge as it goes low. The
Pulse Set Mode
Auto Mode pulses are produced by the SCADA system.
If the Telecontrol input is low, it behaves as for the Opto Set Mode setting.
The Live Line Mode is controlled by AR Live Line Mode. If this is high, the scheme is forced into Live Line
Mode irrespective of the other signals.
7.1.1 FOUR-POSITION SELECTOR SWITCH IMPLEMENTATION

It is quite common for some utilities to apply a four position selector switch to control the mode of operation.
This application can be implemented using the DDB signals AR Live Line Mode, AR Auto Mode and
Telecontrol Mode. This is demonstrated in the following diagram.
MODE SETTINGS
4 POSITION SELECTOR SWITCH AUTO COMMAND MODE
OPTO SET MODE
USER SET MODE
NON AUTO PULSE SET MODE

OPERATING MODES
TELECONTROL NON AUTO

TELECONTROL
LOGIC INPUT
AUTO
AUTO AUTO
LOGIC INPUT
LIVE LINE LIVE LINE

LIVE LINE
LOGIC INPUT
IED
E00500
Figure 44: Four-position selector switch implementation

The required logic truth table for this arrangement is as follows:
Switch position AR Auto Mode Telecontrol Mode AR Live Line Mode
Non-auto 0 0 0
Telecontrol 0 or SCADA pulse 1 0
Auto 1 0 0
Live Line 0 0 1
P94V-TM-EN-5 127
7.1.2 OPERATING MODE SELECTION LOGIC
Auto-Reclose
Disable Autoreclose disabled 1
Enable
& Live Line Mode (int) 2
AR LiveLine Mode
AR Mode Select
Opto Set Mode
&
&
User Set Mode Non Auto Mode 3
&
&
Pulse Set Mode
& &
&
Command Mode
& 1 &
1
S
Autoreclose Mode Q Auto Mode (int) 4
&
Auto R
No Operation 1
&
Non Auto
&
&
& Enable
Output pulse on
rising edge of ‘Tele’
& Enable
Output pulse on &

AR Auto Mode falling edge of ‘Auto’
&
Telecontrol Mode
V00501
Figure 45: Autoreclose mode select logic

The mode selection logic includes a 100 ms delay for Auto Mode, Telecontrol and Live Line logic inputs, to
ensure a predictable change of operating modes. This is of particular importance for the case when the four
position switch does not have 'make-before-break' contacts. The logic also ensures that when the switch is
moved from Auto or Non-Auto position to Telecontrol, the scheme remains in the previously selected mode
(Auto or Non-Auto) until a different mode is selected by remote control.
For applications where live line operating mode and remote selection of Auto/Non-auto modes are not
required, a simple two position switch can be arranged to activate Auto Mode input. In this case, the Live
Line and Telecontrol inputs would be unused.
7.2 AUTORECLOSE INITIATION

In the P94V, the Autoreclose function can only be initiated by an external device. To do this, the following
DDB signals should be mapped to opto-inputs:
● Ext AR Prot Trip
● Ext AR Prot Strt
In addition, the setting Ext Prot should be set to Initiate Main AR.
128 P94V-TM-EN-5
Although a protection start and a protection trip can initiate an AR cycle, several checks still have to be
performed before the initialisation signal is given. Some of the checks are listed below:
● Auto Mode has been selected
● Live line mode is disabled
● The number of main protection and SEF shots have not been reached
● Sequence co-ordination is enabled (for protection start to initiate AR. This is not necessary if a
protection trip is doing the initiating)
● The CB Ops Lockout DDB signal is not set
● The CB in Service DDB signal is high
7.2.1 START SIGNAL LOGIC
Ext AR Prot Strt
& Main Protection Start

Ext Prot
Initiate Main AR
V00518
Figure 46: Start signal logic
7.2.2 TRIP SIGNAL LOGIC
AR Init TripTest
1 AR Trip Test
Test Autoreclose
3 pole Test
Ext AR Prot Trip
& Main Protection Trip

Ext Prot
Initiate Main AR
V00519
Figure 47: Trip signal logic
7.2.3 BLOCKING SIGNAL LOGIC
DDB: 032
Input L 1
DDB: 239
1 Block AR
DDB: 274
VN>1 Trip
Note:
This is not a default mapping . You must define this mapping in PSL .
V00520
Figure 48: Blocking signal logic
P94V-TM-EN-5 129
7.2.4 SHOTS EXCEEDED LOGIC
5 Main Protection Start

& S
10 SC Count >= Main Shots Q Main High Shots 12
R
6 SEF Protection Start

& S
11 SC Count >= SEF Shots Q SEF High Shots 13
R
V00504
Figure 49: Shots Exceeded logic
7.2.5 AR INITIATION LOGIC
Auto Mode (int)

&
Lockout Alarm
Main Protection Trip

1
Main Protection Start
&
Main High Shots
SEF Protection Trip

1
SEF Protection Start
&
SEF High Shots
Sequence Co-ord
Enabled
Disabled
Autoreclose Start
& S
1
Q DAR in Progress
R
CB in Service Autoreclose Initiate
S
Autoreclose Inhibit Q AR in Progress
R
AR Restart Increment on falling AR SeqCounter 0
edge
DAR Complete AR SeqCounter 1
1
AR SeqCounter 2
Lockout Alarm
AR SeqCounter 3
SC Counter
Reclaim Complete AR SeqCounter 4
Non Auto Mode 1 Reset SC Count > 4
Number of Shots SC Count >= Main Shots
Autoreclose Disabled
Number of SEF Shots SC Count >= SEF Shots
Live Line Mode
V00505
Figure 50: AR initiation logic
7.3 BLOCKING INSTANTANEOUS PROTECTION FOR SELECTED TRIPS

Instantaneous protection may be blocked or not blocked for each trip in an Autoreclose cycle. This is
selected using the Trip (n) Main and Trip (n) SEF settings, where n is the number of the trip in the
130 P94V-TM-EN-5
autoreclose cycle. These allow the instantaneous elements of phase, earth fault and SEF protection to be
selectively blocked for a CB trip sequence. For example, if Trip 1 Main is set to No Block and Trip 2 Main
is set to Block Inst Prot, the instantaneous elements of the phase and earth fault protection will be
available for the first trip but blocked afterwards for the second trip during the Autoreclose cycle. The logic for
this is shown below.
P94V-TM-EN-5 131
AR SeqCounter 0
Trip 1 Main &

Block Inst Prot
No Block
AR SeqCounter 1
Trip 2 Main &

Block Inst Prot
No Block
AR SeqCounter 2
Trip 3 Main
& 1 Block Main Prot Trips
Block Inst Prot
No Block
AR SeqCounter 3
Trip 4 Main &

Block Inst Prot
No Block
AR SeqCounter 4
1
SC Count > 4
&
Trip 5 Main
Block Inst Prot
No Block
AR SeqCounter 0
Trip 1 SEF &

Block Inst Prot
No Block
AR SeqCounter 1
Trip 2 SEF &

Block Inst Prot
No Block
AR SeqCounter 2
Trip 3 SEF & 1 Block SEF Prot Trips

Block Inst Prot
No Block
AR SeqCounter 3
Trip 4 SEF
&
Block Inst Prot
No Block
AR SeqCounter 4
1
SC Count > 4
&
Trip 5 Main
Block Inst Prot
No Block
V00506
Figure 51: Blocking instantaneous protection for selected trips
132 P94V-TM-EN-5
7.4 BLOCKING INSTANTANEOUS PROTECTION FOR LOCKOUTS

Instantaneous protection can also be blocked for certain lockout conditions:
It is blocked when the CB maintenance lockout counter or excessive fault frequency lockout has reached its
penultimate value.
For example, if the setting No. CB Ops Lock in the CB MONITOR SETUP column is set to 100 and the No.
CB Ops Maint = '99', the instantaneous protection can be blocked to ensure that the last CB trip before
lockout will be due to discriminative protection operation. This is controlled using the EFF Maint Lock setting
(Excessive Fault Frequency maintenance lockout). If this is set to Block Inst Prot, the instantaneous
protection will be blocked for the last CB Trip before lockout occurs.
Instantaneous protection can also be blocked when the IED is locked out, using the AR Lockout setting. It
can also be blocked after a manual close using the Manual Close setting. When the IED is in the Non-auto
mode it can be blocked by using the AR Deselected setting. The logic for these features is shown below.
P94V-TM-EN-5 133
Autoreclose disabled
Lockout Alarm
Pre-Lockout
&
EFF Maint Lock
Block Inst Prot
No Block
Block Main Prot Trips
& & &
Main Protection Start S

Q 1 & AR Blk Main Prot
1 R
Live Line Mode (int)
Block SEF Prot Trips
& & &
SEF Protection Start S

Q 1 & AR Blk SEF Prot
1 R
Live Line Mode (int)
Lockout Alarm
AR Lockout &
Block Inst Prot 1
No Block
Non Auto Mode
AR Deselected
&
Block Inst Prot
No Block
AR In Prog
CB Closed 3 ph &
1
Auto Mode (int) &
20ms
Autoreclose inhibit
Manual Close
Block Inst Prot
No Block
V00507
Figure 52: Blocking instantaneous protection for lockouts
7.5 DEAD TIME CONTROL

When the setting CS AR Immediate is enabled, immediate re-closure of the circuit breaker is allowed
providing that both sides of the circuit breaker are live and in synchronism at any time after the dead time
has started. This allows for quicker load restoration, as it is not necessary to wait for the full dead time to
expire.
If CS AR Immediate is disabled, or neither Line nor Bus are live, the dead timer will continue to run, if the
Dead Time Enabled signal is high. The Dead Time Enabled function could be mapped to an opto-input to
134 P94V-TM-EN-5
indicate that the circuit breaker is healthy. Mapping the Dead Time Enabled function in PSL increases the
flexibility by allowing it to be triggered by other conditions such as Live Line/Dead Bus. If Dead Time
Enabled is not mapped in PSL, it defaults to high, so the dead time can run.
The dead time control logic is shown below.
AR with ChkSyn
Scheme 2 (Voltage models only)
Enable
&
Disable
1 &
AR Sync Check
1
DeadTime Enabled
AR SeqCounter 1 &
AR SeqCounter 2 & 1 DT Complete
& DeadTime in Prog

AR SeqCounter 3 &
AR SeqCounter 4 &
CB Open 3ph
1
DT OK To Start & S
Q Reclose Checks
R
Autoreclose Start &

1 1
Autoreclose Initiate
AR In Progress
Sequence Co-ord
Enable
&
Disable
Start Dead t On
&
Protection Reset
CB Trips
V00508
Figure 53: Dead Time Control logic
7.5.1 AR CB CLOSE CONTROL

Once the dead time is completed or a synchronism check is confirmed, the Auto Close signal is given,
provided both the CB Healthy and the System Checks are satisfied. The Auto Close signal triggers a CB
Close command via the CB Control functionality.
The AR CB Close Control Logic is as follows:
P94V-TM-EN-5 135
Reset Total AR
Yes Total Shot Counter
No (Increment on +ve edge)
CB Cls Fail
& Auto Close
CB Open 3ph
& Hold Reclaim Output
& S
Q
R
& S
DT Complete Q
R
Autoreclose Start &
Lockout Alarm
& S
Q
R
CB Closed 3ph
& AR CB Unhealthy
CB Healthy
&
& AR No Sys Check
AR SysChecks OK
V00509
Figure 54: AR CB Close Control logic
7.6 AR SYSTEM CHECKS

The permission to initiate an Autoreclose depends on the following AR system check settings. These are
found in the AUTORECLOSE column under the AR SYSTEM CHECKS sub-heading and are not to be
confused with the main system check settings in the SYSTEM CHECKS column.
The AR SYSTEM CHECKS are as follows:
● Live/Dead Ccts: When enabled this setting will give an AR Check OK signal when the LiveDead
Ccts OK signal is high. This logic input DDB would normally be mapped in PSL to appropriate
combinations of Line Live, Line Dead, Bus Live and Bus Dead DDB signals.
● No System Checks: When enabled this setting completely disables system checks thus allowing
Autoreclose initiation under any system conditions.
● SysChk on Shot 1: Can be used to disable system checks on the first AR shot.
● AR with ChkSyn: Only allows Autoreclose when the system satisfies the Check Sync Stage 1 (CS1)
settings in the main SYSTEM CHECKS menu.
● AR with SysSyn: Only allows Autoreclose when the system satisfies the Check Sync Stage 2 (CS2)
settings in the main SYSTEM CHECKS menu.
The AR System Check logic is as follows:
136 P94V-TM-EN-5
AR SysChecks
1 AR SysChecks OK
SysChk on Shot 1
Enabled
&
AR SeqCounter 1
No system Checks
Enabled
1 AR SysChecks OK
Live/ Dead Ccts

Enabled
&
LiveDead Ccts OK
AR with ChkSyn
Enabled
&
1 AR Sync Check
Check Sync 1 OK
AR with SysSyn
Enabled
&
Check Sync 2 OK
Reclose Checks
V00510
Figure 55: AR System Check logic
7.7 RECLAIM TIMER INITIATION

The tReclaim Extend setting allows you to control whether the timer is suspended from the protection start
contacts or not. When a setting of No Operation is used, the reclaim timer operates from the instant the
CB is closed and will continue until the timer expires. The Reclaim Time must therefore be set in excess of
the time-delayed protection operating time, to ensure that the protection can operate before the Autoreclose
function is reset.
For certain applications it is advantageous to set tReclaim Extend to On Prot Start. This facility allows
the operation of the reclaim timer to be suspended after CB re-closure by a signal from the main protection
start or SEF protection start signals. This feature ensures that the reclaim time cannot time out and reset the
Autoreclose before the time delayed protection has operated.
Since the reclaim timer will be suspended, it is unnecessary to use a timer setting in excess of the protection
operating time, therefore a short reclaim time can be used. Short reclaim time settings can help to prevent
unnecessary lockout for a succession of transient faults in a short period, for example during a thunderstorm.
P94V-TM-EN-5 137
Lockout Reset
Yes
HMI Clear 1
Reset Lockout
Reset
Lockout alarm
& Lockout
CB Closed 3 ph
Reset Lockout by
CB Close
User Interface
Reset Lckout Alm
CB Open 3 ph
& S
Autoclose Q
1 & S
R
Q Successful close
CB Closed 3 ph R
&
AR In Progress
Reclaim In Prog
tReclaim Extend
On Prot Start &
& & Reclaim Complete
No Operation 1

1
DT Complete
1
Autoreclose Start &
Sequence Co -ord
Enabled
Hold Reclaim Output
AR SeqCounter 1
& nc Successful
Reset 1st shot Counter
AR SeqCounter 2
& nc Successful
Reset 2nd shot Counter
AR SeqCounter 3
& nc Successful
Reset 3rd shot Counter
AR SeqCounter 4
& nc Successful
Reset 4th shot Counter
CB Open 3 ph
& nc Persistant
AR Lockout
Reset Faults Counter
Reset Total AR
Yes
V00511
Figure 56: Reclaim Time logic
7.8 AUTORECLOSE INHIBIT

To ensure that autoreclosing is not initiated for a manual CB closure on to a pre-existing fault (switch on to
fault), the AR on Man Close setting can be set to Inhibited. With this setting, Autoreclose initiation is
inhibited for a period equal to setting AR Inhibit Time following a manual CB closure. The logic for AR Inhibit
is as follows:
138 P94V-TM-EN-5
CB Closed 3 ph Pulse to start inhibit timer

&
1
AR In Progress & Autoreclose inhibit
AR on Man Close
Inhibited
Enabled
&
1
Auto Mode (int)
V00512
Figure 57: AR Initiation inhibit

If a protection operation occurs during the inhibit period, Autoreclose is not initiated. A further option is
provided by setting Man Close on Flt. If this is set to Lockout, Autoreclose is locked out (AR Lockout) for
a fault during the inhibit period following manual CB closure. If Man Close on Flt is set to No Lockout, the
CB trips without reclosure, but Autoreclose is not locked out.
You may need to block selected fast non-discriminating protection in order to obtain fully discriminative
tripping during the AR initiation inhibit period following CB manual close. You can do this by setting Manual
Close to Block Inst Prot. A No Block setting will enable all protection elements immediately on CB
closure.
If setting AR on Man Close is set to Enabled, Autoreclose can be initiated immediately on CB closure, and
settings AR Inhibit Time, Man Close on Flt and Manual Close are irrelevant.
7.9 AUTORECLOSE LOCKOUT

If protection operates during the reclaim time following the final reclose attempt, the IED is driven to lockout
and the Autoreclose function is disabled until the lockout condition is reset. This produces the alarm, AR
Lockout. The Block AR input blocks Autoreclose and causes a lockout if Autoreclose is in progress.
Autoreclose lockout can also be caused by the CB failing to close due to an unhealthy circuit breaker (CB
springs not charged or low gas pressure) or if there is no synchronisation between the system voltages.
These two conditions are indicated by the alarms CB Unhealthy and AR No Check Sync. This is shown in
the AR Lockout logic diagram as follows:
P94V-TM-EN-5 139
Reclaim Complete
&
CB Open 3ph
DT complete &
Autoreclose Start
AR in Progress
& S
Block Autoreclose Q
R
AR CB Unhealthy
1
CB Status Alarm
CB Cls Fail
S
HMI Clear Q AR Lockout
1 R
Lockout Reset
Yes
Reset
Lockout
Reset lockout
Lockout Alarm
&
CB Closed 3ph
Reset Lockout by
User Interface
CB Close
Reset Lckout Alm
Main Protection Trip
Autoreclose Initiate &

Main High Shots
SEF Protection Trip
Autoreclose Initiate &

1
SEF High Shots
Man No Checksync
Protection Lockt
V00513
Figure 58: Overall Lockout logic

AR lockout may also be due to a protection operation when the IED is in the Live Line or Non-auto modes
when the setting Trip AR Inactive is set to Lockout. Autoreclose lockout can also be caused by a
protection operation after manual closing during the AR Inhibit Time when the Manual Close on Flt setting
is set to Lockout. This is shown as follows:
140 P94V-TM-EN-5
Ext. Trip 3ph
Main Protection Trip 1

&
SEF Protection Trip 1 Protection Lockt
Autoreclose inhibit
Man Close on Flt

Lockout
No Lockout
Live Line Mode
Non Auto mode 1 &

Lockout Alarm
Trip AR Inactive
Lockout
No Lockout
V00514
Figure 59: Lockout for protection trip when AR is not available
Note:
Lockout can also be caused by the CB condition monitoring functions in the CB MONITOR SETUP column.
The Reset Lockout input can be used to reset the Autoreclose function following lockout and reset any
Autoreclose alarms, provided that the signals that initiated the lockout have been removed. Lockout can also
be reset from the clear key or the command Lockout Reset from the CB CONTROL column.
There are two different Reset Lockout by settings. One in the CB CONTROL column and one in the
AUTORECLOSE column.
The Reset Lockout by setting in the CB CONTROL column is used to enable or disable reset of lockout
automatically from a manual close after the manual close time Man Close Rst Dly.
The Reset Lockout by setting in the AUTORECLOSE column is used to enable/disable the resetting of
lockout when the IED is in the Non-auto operating mode. The reset lockout methods are summarised in the
following table:
Reset Lockout Method When Available?
User Interface via the Clear key.
Always
Note: This will also reset all other protection flags
User interface via CB CONTROL command Lockout Reset Always
Opto-input Reset lockout Always
Following a successful manual close if CB CONTROL setting Reset Lockout by is
Only when set
set to CB Close
By selecting Non-Auto mode, provided AUTORECLOSE setting Reset Lockout by
Only when set
is set to Select NonAuto
7.10 SEQUENCE CO-ORDINATION

The Sequence Co-ord setting in the AUTORECLOSE menu allows sequence co-ordination with other
protection devices, such as downstream pole-mounted reclosers.
The main protection start or SEF protection start signals indicate when fault current is present, advance the
sequence count by one and start the dead time, whether the CB is open or closed. When the dead time is
complete and the protection start inputs are low, the reclaim timer is initiated.
P94V-TM-EN-5 141
You should program both the upstream and downstream Autoreclose IEDs with the same number of shots to
lockout and number of instantaneous trips before instantaneous protection is blocked. This will ensure that
for a persistent downstream fault, both Autoreclose IEDs will be on the same sequence count and will block
instantaneous protection at the same time. When sequence co-ordination is disabled, the circuit breaker has
to be tripped to start the dead time, and the sequence count is advanced by one.
When using sequence co-ordination for some applications such as downstream pole-mounted reclosers, it
may be desirable to re-enable instantaneous protection when the recloser has locked out. When the
downstream recloser has locked out there is no need for discrimination. This allows you to have
instantaneous, then IDMT, then instantaneous trips again during an Autoreclose cycle. Instantaneous
protection may be blocked or not blocked for each trip in an Autoreclose cycle using the Trip (n) Main and
Trip (n) SEF settings, where n is the number of the trip in the autoreclose cycle.
7.11 SYSTEM CHECKS FOR FIRST RECLOSE

The Sys Chk on Shot 1 setting in the SYSTEM CHECKS sub menu of the AUTORECLOSE column is used
to enable or disable system checks for the first reclose attempt in an Autoreclose cycle. This may be
preferred when high speed Autoreclose is applied, to avoid the extra time for a synchronism check.
Subsequent reclose attempts in a multi-shot cycle will, however, still require a synchronism check.
142 P94V-TM-EN-5
8 SETTING GUIDELINES
8.1 NUMBER OF SHOTS

There are no clear cut rules for defining the number of shots for a particular application. Generally medium
voltage systems use only two or three shot Autoreclose schemes. However, in certain countries, for specific
applications, a four-shot scheme is used. A four-shot scheme has the advantage that the final dead time can
be set sufficiently long to allow any thunderstorms to pass before reclosing for the final time. This
arrangement prevents unnecessary lockout for consecutive transient faults.
Typically, the first trip, and sometimes the second, will result from instantaneous protection. Since most faults
are transient, the subsequent trips will be time delayed, all with increasing dead times to clear semi-
permanent faults.
An important consideration is the ability of the circuit breaker to perform several trip-close operations in quick
succession and the affect of these operations on the circuit maintenance period.
On EHV transmission circuits with high fault levels, only one re-closure is normally applied, because of the
damage that could be caused by multiple re-closures.
8.2 DEAD TIMER SETTING

The choice of dead time is dependent on the system. The main factors that can influence the choice of dead
time are:
● Stability and synchronism requirements
● Operational convenience
● Load
● The type of circuit breaker
● Fault deionising time
● The protection reset time
8.2.1 STABILITY AND SYNCHRONISM REQUIREMENTS

It may be that the power transfer level on a specific feeder is such that the systems at either end of the
feeder could quickly fall out of synchronism if the feeder is opened. If this is the case, it is usually necessary
to reclose the feeder as quickly as possible to prevent loss of synchronism. This is called high speed
autoreclosing (HSAR). In this situation, the dead time setting should be adjusted to the minimum time
necessary. This time setting should comply with the minimum dead time limitations imposed by the circuit
breaker and associated protection, which should be enough to allow complete deionisation of the fault path
and restoration of the full voltage withstand level. Typical HSAR dead time values are between 0.3 and 0.5
seconds.
On a closely interconnected transmission system, where alternative power transfer paths usually hold the
overall system in synchronism even when a specific feeder opens, or on a radial supply system where there
are no stability implications, it is often preferred to leave a feeder open for a few seconds after fault
clearance. This allows the system to stabilise, and reduces the shock to the system on re-closure. This is
called slow or delayed auto-reclosing (DAR). The dead time setting for DAR is usually selected for
operational convenience.
8.2.2 OPERATIONAL CONVENIENCE

When HSAR is not required, the dead time chosen for the first re-closure following a fault trip is not critical. It
should be long enough to allow any resulting transients resulting to decay, but not so long as to cause major
inconvenience to consumers who are affected by the loss of the feeder. The setting chosen often depends
on service experience with the specific feeder.
P94V-TM-EN-5 143
Typical first shot dead time settings on 11 kV distribution systems are 5 to 10 seconds. In situations where
two parallel circuits from one substation are carried on the same towers, it is often arranged for the dead
times on the two circuits to be staggered, e.g. one at 5 seconds and the other at 10 seconds, so that the two
circuit breakers do not reclose simultaneously following a fault affecting both circuits.
For multi-shot Autoreclose cycles, the second shot and subsequent shot dead times are usually longer than
the first shot, to allow time for semi-permanent faults to burn clear, and for the CB to recharge. Typical
second and third shot dead time settings are 30 seconds and 60 seconds respectively.
8.2.3 LOAD REQUIREMENTS

Some types of electrical load might have specific requirements for minimum and/or maximum dead time, to
prevent damage and minimise disruption. For example, synchronous motors are only capable of tolerating
extremely short supply interruptions without losing synchronism. In practise it is desirable to disconnect the
motor from the supply in the event of a fault; the dead time would normally be sufficient to allow a controlled
shutdown. Induction motors, on the other hand, can withstand supply interruptions up to typically 0.5
seconds and re-accelerate successfully.
8.2.4 CIRCUIT BREAKER

For HSAR, the minimum dead time of the power system will depend on the minimum time delays imposed by
the circuit breaker during a tripping and reclose operation.
After tripping, time must be allowed for the mechanism to reset before applying a closing pulse, otherwise
the circuit breaker might fail to close correctly. This resetting time will vary depending on the circuit breaker,
but is typically 0.1 seconds.
Once the mechanism has reset, a CB Close signal can be applied. The time interval between energising the
closing mechanism and making the contacts is called the closing time. A solenoid closing mechanism may
take up to 0.3 seconds. A spring-operated breaker, on the other hand, can close in less than 0.1 seconds.
Where HSAR is required, for the majority of medium voltage applications, the circuit breaker mechanism
reset time itself dictates the minimum dead time. This would be the mechanism reset time plus the CB
closing time. A solenoid mechanism is not suitable for high speed Autoreclose as the closing time is
generally too long.
For most circuit breakers, after one reclosure, it is necessary to recharge the closing mechanism energy
source before a further reclosure can take place. Therefore the dead time for second and subsequent shots
in a multi-shot sequence must be set longer than the spring or gas pressure recharge time.
8.2.5 FAULT DE-IONISATION TIME

For HSAR, the fault deionising time may be the most important factor when considering the dead time. This
is the time required for ionised air to disperse around the fault position so that the insulation level of the air is
restored. You cannot accurately predict this, but you can obtain an approximation from the following formula:
Deionising time = (10.5 + ((system voltage in kV)/34.5))/frequency
Examples:
At 66 kV 50 Hz, the deionising time is approximately 0.25 s
At 132 kV 60 Hz, the deionising time is approximately 0.29 s
8.2.6 PROTECTION RESET TIME

It is essential that any time-graded protection fully resets during the dead time, so that correct time
discrimination will be maintained after reclosing on to a fault. For HSAR, instantaneous reset of protection is
required. However at distribution level, where the protection is predominantly made up of overcurrent and
earth fault devices, the protection reset time may not be instantaneous. In the event that the circuit breaker
recloses on to a fault and the protection has not fully reset, discrimination may be lost with the downstream
144 P94V-TM-EN-5
protection. To avoid this condition the dead time must be set in excess of the slowest reset time of either the
local device or any downstream protection.
Typical 11/33 kV dead time settings are as follows:
1st dead time = 5 - 10 seconds
2nd dead time = 30 seconds
3rd dead time = 60 - 180 seconds
4th dead time = 1 - 30 minutes
8.3 RECLAIM TIMER SETTING

A number of factors influence the choice of the reclaim timer:
● Supply continuity: Large reclaim times can result in unnecessary lockout for transient faults.
● Fault incidence/Past experience: Small reclaim times may be required where there is a high incidence
of lightning strikes to prevent unnecessary lockout for transient faults.
● Spring charging time: For HSAR the reclaim time may be set longer than the spring charging time to
ensure there is sufficient energy in the circuit breaker to perform a trip-close-trip cycle. For delayed
Autoreclose there is no need as the dead time can be extended by an extra CB healthy check window
time if there is insufficient energy in the CB. If there is insufficient energy after the check window time
the IED will lockout.
● Switchgear maintenance: Excessive operation resulting from short reclaim times can mean shorter
maintenance periods. A minimum reclaim time of more than 5 seconds may be needed to allow the
circuit breaker time to recover after a trip and close before it can perform another trip-close-trip cycle.
This time will depend on the circuit breaker's duty rating.
The reclaim time must be long enough to allow any time-delayed protection initiating Autoreclose to operate.
Failure to do so would result in premature resetting of the Autoreclose scheme and re-enabling of
instantaneous protection. If this condition arose, a permanent fault would effectively look like a number of
transient faults, resulting in continuous autoreclosing, unless additional measures are taken such as
excessive fault frequency lockout protection.
Sensitive earth fault protection is applied to detect high resistance earth faults and usually has a long time
delay, typically 10 - 15 seconds. This longer time may have to be taken into consideration, if autoreclosing
from SEF protection. High resistance earth faults are rarely transient and may be a danger to the public. It is
therefore common practise to block Autoreclose by operation of sensitive earth fault protection and lockout
the circuit breaker.
A typical 11/33 kV reclaim time is 5 - 10 seconds. This prevents unnecessary lockout during thunderstorms.
However, reclaim times of up to 60 - 180 seconds may be used elsewhere in the world.
P94V-TM-EN-5 145
146 P94V-TM-EN-5
MONITORING AND CONTROL
CHAPTER 8
Chapter 8 - Monitoring and Control P94V
148 P94V-TM-EN-5
P94V Chapter 8 - Monitoring and Control
1 CHAPTER OVERVIEW
As well as providing a range of protection functions, the product includes comprehensive monitoring and
control functionality.
Event Records 150
Disturbance Recorder 154
Measurements 155
CB Condition Monitoring 156
CB State Monitoring 157
Circuit Breaker Control 159
System Checks 164
P94V-TM-EN-5 149
2 EVENT RECORDS
Alstom Grid devices record events in an event log. This allows you to establish the sequence of events that
led up to a particular situation. For example, a change in a digital input signal or protection element output
signal would cause an event record to be created and stored in the event log. This could be used to analyse
how a particular power system condition was caused. These events are stored in the IED's non-volatile
memory. Each event is time tagged.
The event records can be displayed on an IED's front panel but it is easier to view them through the settings
application software. This can extract the events log from the device and store it as a single .evt file for
analysis on a PC.
The event records are detailed in the VIEW RECORDS column. The first event (0) is always the latest event.
After selecting the required event, you can scroll through the menus to obtain further details.
If viewing the event with the settings application software, simply open the extracted event file. All the events
are displayed chronologically. Each event is summarised with a time stamp (obtained from the Time & Date
cell) and a short description relating to the event (obtained from the Event Text cell. You can expand the
details of the event by clicking on the + icon to the left of the time stamp.
The following table shows the correlation between the fields in the setting application software's event viewer
and the cells in the menu database.
Field in Event Viewer Equivalent cell in menu DB Cell reference User settable?
Left hand column header VIEW RECORDS ® Time & Date 01 03 No
Right hand column header VIEW RECORDS ® Event Text 01 04 No
Description SYSTEM DATA ® Description 00 04 Yes
Plant reference SYSTEM DATA ® Plant Reference 00 05 Yes
Model number SYSTEM DATA ® Model Number 00 06 No
Address Displays the Courier address relating to the event N/A No
Event type VIEW RECORDS ® Menu Cell Ref 01 02 No
Event Value VIEW RECORDS ® Event Value 01 05 No
Evt Unique Id VIEW RECORDS ® Evt Unique ID 01 FE No
The device is capable of storing up to 2048 event records.

In addition to the event log, there are two additional logs which contain duplicates of the last 10 maintenance
records and the last 10 fault records. The purpose of this is to provide convenient access to the most recent
fault and maintenance events.
2.1 EVENT TYPES

There are several different types of event:
● Opto-input events (Change of state of opto-input)
● Contact events (Change of state of output relay contact)
● Alarm events
● Fault record events
● Standard events
● Security events
150 P94V-TM-EN-5
Standard events are further sub-categorised internally to include different pieces of information. These are:
● Protection events (starts and trips)
● Maintenance record events
● Platform events
Note:
The first event in the list (event 0) is the most recent event to have occurred.
2.1.1 OPTO-INPUT EVENTS

If one or more of the opto-inputs has changed state since the last time the protection algorithm ran (which
runs at several times per cycle), a new event is created, which logs the logic states of all opto-inputs. You
can tell which opto-input has changed state by comparing the new event with the previous one.
The description of this event type, as shown in the Event Text cell is always Logic Inputs # where # is
the batch number of the opto-inputs. This is '1', for the first batch of opto-inputs and '2' for the second batch
of opto-inputs (if applicable).
The event value shown in the Event Value cell for this type of event is a binary string. This shows the logical
states of the opto-inputs, where the Least Significant Bit (LSB), on the right corresponds to the first opto-
input Input L1.
The same information is also shown in the Opto I/P Status cell in the SYSTEM DATA column. This
information is updated continuously, whereas the information in the event log is a snapshot at the time when
the event was created.
2.1.2 CONTACT EVENTS

If one or more of the output relays (also known as output contacts) has changed state since the last time the
protection algorithm ran (which runs at several times per cycle), a new event is created, which logs the logic
states of all output relays. You can tell which output relay has changed state by comparing the new event
with the previous one.
The description of this event type, as shown in the Event Text cell is always Output Contacts # where #
is the batch number of the output relay contacts. This is '1', for the first batch of output contacts and '2' for the
second batch of output contacts (if applicable).
The event value shown in the Event Value cell for this type of event is a binary string. This shows the logical
states of the output relays, where the LSB (on the right) corresponds to the first output contact Output R1.
The same information is also shown in the Relay O/P Status cell in the SYSTEM DATA column. This
2.1.3 ALARM EVENTS

The IED monitors itself on power up and continually thereafter. If it notices any problems, it will register an
alarm event.
The description of this event type, as shown in the Event Text cell is cell dependent on the type of alarm and
will be one of those shown in the following tables, followed by OFF or ON.
The event value shown in the Event Value cell for this type of event is a 32 bit binary string. There are one
or more banks 32 bit registers, depending on the device model. These contain all the alarm types and their
logic states (ON or OFF).
P94V-TM-EN-5 151
The same information is also shown in the Alarm Status (n) cells in the SYSTEM DATA column. This
2.1.4 FAULT RECORD EVENTS

An event record is created for every fault the IED detects. This is also known as a fault record.
The event type description shown in the Event Text cell for this type of event is always Fault Recorded.
The IED contains a separate register containing the latest fault records. This provides a convenient way of
viewing the latest fault records and saves searching through the event log. You access these fault records
using the Select Fault setting, where fault number 0 is the latest fault.
A fault record is triggered by the Fault REC TRIG signal DDB, which is assigned in the PSL. The fault
recorder records the values of all parameters associated with the fault for the duration of the fault. These
parameters are stored in separate Courier cells, which become visible depending on the type of fault.
The fault recorder stops recording only when:
The Start signal is reset AND the undercurrent is ON OR the Trip signal is reset, as shown below:
Start signal resets

& Fault recorder stops recording
Undercurrent is ON
1
Trip signal resets
Fault recorder trigger
V01234
Figure 60: Fault recorder stop conditions

The event is logged as soon as the fault recorder stops. The time stamp assigned to the fault corresponds to
the start of the fault. The timestamp assigned to the fault record event corresponds to the time when the fault
recorder stops.
Note:
We recommend that you do not set the triggering contact to latching. This is because if you use a latching contact,
the fault record would not be generated until the contact has been fully reset.
2.1.5 MAINTENANCE EVENTS

Internal failures detected by the self-test procedures are logged as maintenance records. Maintenance
records are special types of standard events.
The event type description shown in the Event Text cell for this type of event is always Maint Recorded.
The Event Value cell also provides a unique binary code.
The IED contains a separate register containing the latest maintenance records. This provides a convenient
way of viewing the latest maintenance records and saves searching through the event log. You access these
fault records using the Select Maint setting.
The maintenance record has a number of extra menu cells relating to the maintenance event. These
parameters are Maint Text, Maint Type and Maint Data. They contain details about the maintenance event
selected with the Select Maint cell.
152 P94V-TM-EN-5
2.1.6 PROTECTION EVENTS

The IED logs protection starts and trips as individual events. Protection events are special types of standard
events.
The event type description shown in the Event Text cell for this type of event is dependent on the protection
event that occurred. Each time a protection event occurs, a DDB signal changes state. It is the name of this
DDB signal followed by 'ON' or 'OFF' that appears in the Event Text cell.
The Event Value cell for this type of event is a 32 bit binary string representing the state of the relevant DDB
signals. These binary strings can also be viewed in the COMMISSION TESTS column in the relevant DDB
batch cells.
Not all DDB signals can generate an event. Those that can are listed in the RECORD CONTROL column. In
this column, you can set which DDBs generate events.
2.1.7 SECURITY EVENTS

An event record is generated each time a setting that requires an access level is executed.
The event type description shown in the Event Text cell displays the type of change.
2.1.8 PLATFORM EVENTS

Platform events are special types of standard events.
The event type description shown in the Event Text cell displays the type of change.
P94V-TM-EN-5 153
3 DISTURBANCE RECORDER
The disturbance recorder feature allows you to record selected current and voltage inputs to the protection
elements, together with selected digital signals. The digital signals may be inputs, outputs, or internal DDB
signals. The disturbance records can be extracted using the disturbance record viewer in the settings
application software. The disturbance record file can also be stored in the COMTRADE format. This allows
the use of other packages to view the recorded data.
The integral disturbance recorder has an area of memory specifically set aside for storing disturbance
records. The number of records that can be stored is dependent on the recording duration. The minimum
duration is 0.1 s and the maximum duration is 10.5 s.
When the available memory is exhausted, the oldest records are overwritten by the newest ones.
Each disturbance record consists of a number of analogue data channels and digital data channels. The
relevant CT and VT ratios for the analogue channels are also extracted to enable scaling to primary
quantities.
The fault recording times are set by a combination of the Duration and Trigger Position cells. The Duration
cell sets the overall recording time and the Trigger Position cell sets the trigger point as a percentage of the
duration. For example, the default settings show that the overall recording time is set to 1.5 s with the trigger
point being at 33.3% of this, giving 0.5 s pre-fault and 1 s post fault recording times.
With the Trigger Mode set to Single, if further triggers occurs whilst a recording is taking place, the
recorder will ignore the trigger. However, with the Trigger Mode set to Extended, the post trigger timer will
be reset to zero, extending the recording time.
You can select any of the IED's analogue inputs as analogue channels to be recorded. You can also map
any of the opto-inputs output contacts to the digital channels. In addition, you may also map a number of
DDB signals such as Starts and LEDs to digital channels.
You may choose any of the digital channels to trigger the disturbance recorder on either a low to high or a
high to low transition, via the Input Trigger cell. The default settings are such that any dedicated trip output
contacts will trigger the recorder.
It is not possible to view the disturbance records locally via the front panel LCD. You must extract these
using suitable setting application software such as MiCOM S1 Agile.
154 P94V-TM-EN-5
4 MEASUREMENTS
4.1 MEASURED QUANTITIES

The device measures directly and calculates a number of system quantities, which are updated every
second. You can view these values in the relevant MEASUREMENT columns or with the Measurement
Viewer in the settings application software. Depending on the model, the device may measure and display
some or more of the following quantities:
● Measured and calculated analogue current and voltage values
● Power and energy quantities
● Peak, fixed and rolling demand values
● Frequency measurements
● Thermal measurements
4.1.1 MEASURED AND CALCULATED VOLTAGES

The device measures phase-to-phase and phase-to-neutral voltage values. The values are produced by
sampling the analogue input quantities, converting them to digital quantities to present the magnitude and
phase values. Sequence quantities are produced by processing the measured values. These are also
displayed as magnitude and phase angle values.
These measurements are contained in the MEASUREMENTS 1 column.
4.1.2 FREQUENCY MEASUREMENTS

The device produces a range of frequency statistics and measurements relating to the Frequency Protection
function. These include Check synchronisation and Slip frequency measurements found in the
MEASUREMENTS 1 column, Rate of Change of Frequency measurements found in the MEASUREMENTS
3 column, and Frequency Protection statistics found in the FREQ STAT column.
The device produces the slip frequency measurement by measuring the rate of change of phase angle
between the bus and line voltages, over a one-cycle period. The slip frequency measurement assumes the
bus voltage to be the reference phasor.
4.1.3 OTHER MEASUREMENTS

Depending on the model, the device produces a range of other measurements such as thermal
measurements.
These measurements are contained in the MEASUREMENTS 3 column.
4.2 MEASUREMENT SETUP

You can define the way measurements are set up and displayed using the MEASURE'T SETUP column and
the measurements are shown in the relevant MEASUREMENTS tables.
4.3 OPTO-INPUT TIME STAMPING

Each opto-input sample is time stamped within a tolerance of +/- 1 ms with respect to the Real Time Clock.
These time stamps are used for the opto event logs and for the disturbance recording. The device needs to
be synchronised accurately to an external clock source such as an IRIG-B signal or a master clock signal
provided in the relevant data protocol.
For both the filtered and unfiltered opto-inputs, the time stamp of an opto-input change event is the sampling
time at which the change of state occurred. If multiple opto-inputs change state at the same sampling
interval, these state changes are reported as a single event.
P94V-TM-EN-5 155
5 CB CONDITION MONITORING
The device records various statistics related to each circuit breaker trip operation, allowing an accurate
assessment of the circuit breaker condition to be determined. The circuit breaker condition monitoring
counters are incremented every time the device issues a trip command.
These statistics are available in the CB CONDITION column. The menu cells are counter values only, and
cannot be set directly. The counters may be reset, however, during maintenance. This is achieved with the
setting Reset CB Data.
Note:
When in Commissioning test mode the CB condition monitoring counters are not updated.
5.1.1 SETTING THE THRESHOLDS FOR THE NUMBER OF OPERATIONS

Every circuit breaker operation results in some degree of wear for its components. Therefore routine
maintenance, such as oiling of mechanisms, may be based on the number of operations. Suitable setting of
the maintenance threshold will allow an alarm to be raised, indicating when preventative maintenance is due.
Should maintenance not be carried out, the device can be set to lockout the autoreclose function on reaching
a second operations threshold (No. CB ops Lock). This prevents further reclosure when the circuit breaker
has not been maintained to the standard demanded by the switchgear manufacturer’s maintenance
instructions.
Some circuit breakers, such as oil circuit breakers (OCBs) can only perform a certain number of fault
interruptions before requiring maintenance attention. This is because each fault interruption causes
carbonising of the oil, degrading its dielectric properties. The maintenance alarm threshold (setting No. CB
Ops. Maint) may be set to indicate the requirement for oil dielectric testing, or for more comprehensive
maintenance. Again, the lockout threshold No. CB Ops Lock may be set to disable autoreclosure when
repeated further fault interruptions could not be guaranteed. This minimises the risk of oil fires or explosion.
5.1.2 SETTING THE THRESHOLDS FOR THE OPERATING TIME

Slow CB operation indicates the need for mechanism maintenance. Alarm and lockout thresholds (CB Time
Maint and CB Time Lockout) are provided to enforce this. They can be set in the range of 5 to 500 ms. This
time relates to the interrupting time of the circuit breaker.
5.1.3 SETTING THE THRESHOLDS FOR EXCESSSIVE FAULT FREQUENCY

Persistent faults will generally cause autoreclose lockout, with subsequent maintenance attention.
Intermittent faults such as clashing vegetation may repeat outside of any reclaim time, and the common
cause might never be investigated. For this reason it is possible to set a frequent operations counter, which
allows the number of operations Fault Freq Count over a set time period Fault Freq Time to be monitored.
A separate alarm and lockout threshold can be set.
156 P94V-TM-EN-5
6 CB STATE MONITORING
CB State monitoring is used to verify the open or closed state of a circuit breaker. Most circuit breakers have
auxiliary contacts through which they transmit their status (open or closed) to control equipment such as
IEDs. These auxiliary contacts are known as:
● 52A for contacts that follow the state of the CB
● 52B for contacts that are in opposition to the state of the CB
This device can be set to monitor both of these types of circuit breaker state indication. If the state is
unknown for some reason, an alarm can be raised.
Some CBs provide both sets of contacts. If this is the case, these contacts will normally be in opposite
states. Should both sets of contacts be open, this would indicate one of the following conditions:
● Auxiliary contacts/wiring defective
● Circuit Breaker (CB) is defective
● CB is in isolated position
Should both sets of contacts be closed, only one of the following two conditions would apply:
● Auxiliary contacts/wiring defective
● Circuit Breaker (CB) is defective
If any of the above conditions exist, an alarm will be issued after a 5 s time delay. An output contact can be
assigned to this function via the programmable scheme logic (PSL). The time delay is set to avoid unwanted
operation during normal switching duties.
In the CB CONTROL column there is a setting called CB Status Input. This cell can be set at one of the
following four options:
● None
● 52A
● 52B
● Both 52A and 52B
Where None is selected no CB status is available. Where only 52A is used on its own then the device will
assume a 52B signal opposite to the 52A signal. Circuit breaker status information will be available in this
case but no discrepancy alarm will be available. The above is also true where only a 52B is used. If both 52A
and 52B are used then status information will be available and in addition a discrepancy alarm will be
possible, according to the following table:
Auxiliary Contact Position CB State Detected Action
52A 52B
Open Closed Breaker open Circuit breaker healthy
Closed Open Breaker closed Circuit breaker healthy
Closed Closed CB failure Alarm raised if the condition persists for greater than 5 s
Open Open State unknown Alarm raised if the condition persists for greater than 5 s
P94V-TM-EN-5 157
6.1 CB STATE MONITORING LOGIC
CB Status Input
None
52A
52B
Both 52A and 52B
&
CB Aux 3ph(52-A)
& 1 CB Closed 3 ph
& 1
Plant Status
CB1 Closed
X1
CB1 Open
& 1
& 1 CB Open 3 ph
&
& CB Status Alarm

X1
CB Aux 3ph(52-B)
V01200
Figure 61: CB State Monitoring logic
158 P94V-TM-EN-5
7 CIRCUIT BREAKER CONTROL

Although some circuit breakers do not provide auxiliary contacts, most provide auxiliary contacts to reflect
the state of the circuit breaker. These are:
● CBs with 52A contacts (where the auxiliary contact follows the state of the CB)
● CBs with 52B contacts (where the auxiliary contact is in the opposite state from the state of the CB)
● CBs with both 52A and 52B contacts
Circuit Breaker control is only possible if the circuit breaker in question provides auxiliary contacts. The CB
Status Input cell in the CB CONTROL column must be set to the type of circuit breaker. If no CB auxiliary
contacts are available then this cell should be set to None, and no CB control will be possible.
For local control, the CB control by cell should be set accordingly.
The output contact can be set to operate following a time delay defined by the setting Man Close Delay.
One reason for this delay is to give personnel time to safely move away from the circuit breaker following a
CB close command.
The control close cycle can be cancelled at any time before the output contact operates by any appropriate
trip signal, or by activating the Reset Close Dly DDB signal.
The length of the trip and close control pulses can be set via the Trip Pulse Time and Close Pulse Time
settings respectively. These should be set long enough to ensure the breaker has completed its open or
close cycle before the pulse has elapsed.
If an attempt to close the breaker is being made, and a protection trip signal is generated, the protection trip
command overrides the close command.
The Reset Lockout by setting is used to enable or disable the resetting of lockout automatically from a
manual close after the time set by Man Close RstDly.
If the CB fails to respond to the control command (indicated by no change in the state of CB Status inputs)
an alarm is generated after the relevant trip or close pulses have expired. These alarms can be viewed on
the LCD display, remotely, or can be assigned to output contacts using the programmable scheme logic
(PSL).
Note:
The CB Healthy Time and Sys Check time set under this menu section are applicable to manual circuit breaker
operations only. These settings are duplicated in the AUTORECLOSE menu for autoreclose applications.
The Lockout Reset and Reset Lockout by settings are applicable to CB Lockouts associated with manual
circuit breaker closure, CB Condition monitoring (Number of circuit breaker operations, for example) and
autoreclose lockouts.
The device includes the following options for control of a single circuit breaker:
● The IED menu (local control)
● The Hotkeys (local control)
● The function keys (local control)
● The opto-inputs (local control)
● SCADA communication (remote control)
7.1 CB CONTROL USING THE IED MENU

You can control manual trips and closes with the CB Trip/Close command in the SYSTEM DATA column.
This can be set to No Operation, Trip, or Close accordingly.
P94V-TM-EN-5 159
For this to work you have to set the CB control by cell to option 1 Local, option 3 Local + Remote,
option 5 Opto+Local, or option 7 Opto+Local+Remote in the CB CONTROL column.
7.2 CB CONTROL USING THE HOTKEYS

The hotkeys allow you to manually trip and close the CB without the need to enter the SYSTEM DATA
column. For this to work you have to set the CB control by cell to option 1 Local, option 3 Local+Remote,
option 5 Opto+Local, or option 7 Opto+Local+Remote in the CB CONTROL column.
CB control using the hotkey is achieved by pressing the right-hand button directly below LCD screen. This
button is only enabled if:
● The CB Control by setting is set to one of the options where local control is possible (option 1,3,5, or
7)
● The CB Status Input is set to '52A', '52B', or 'Both 52A and 52B'
If the CB is currently closed, the command text on the bottom right of the LCD screen will read Trip.
Conversely, if the CB is currently open, the command text will read Close.
If you execute a Trip, a screen with the CB status will be displayed once the command has been
completed. If you execute a Close, a screen with a timing bar will appear while the command is being
executed. This screen also gives you the option to cancel or restart the close procedure. The time delay is
determined by the Man Close Delay setting in the CB CONTROL menu. When the command has been
executed, a screen confirming the present status of the circuit breaker is displayed. You are then prompted
to select the next appropriate command or exit.
If no keys are pressed for a period of 5 seconds while waiting for the command confirmation, the device will
revert to showing the CB Status. If no key presses are made for a period of 25 seconds while displaying the
CB status screen, the device will revert to the default screen.
To avoid accidental operation of the trip and close functionality, the hotkey CB control commands are
disabled for 10 seconds after exiting the hotkey menu.
The hotkey functionality is summarised graphically below:
Default Display
HOTKEY CB CTRL
Hotkey Menu
CB closed CB open
<CB STATUS> EXECUTE <CB STATUS> EXECUTE EXECUTE CLOSE

CLOSED CB TRIP OPEN CB CLOSE 30 secs
TRIP EXIT CONFIRM CANCEL EXIT CLOSE CANCEL CONFIRM CANCEL RESTART
E01209
Figure 62: Hotkey menu navigation
160 P94V-TM-EN-5
7.3 CB CONTROL USING THE FUNCTION KEYS

For most models, you can also use the function keys to allow direct control of the circuit breaker. This has
the advantage over hotkeys, that the LEDs associated with the function keys can indicate the status of the
CB. The default PSL is set up such that Function key 2 initiates a trip and Function key 3 initiates a close.
For this to work you have to set the CB control by cell to option 5 Opto+Local, or option 7 Opto+Local
+Remote in the CB CONTROL column.
As shown below, function keys 2 and 3 have already been assigned to CB control in the default PSL.
Function Key 2 Init Trip CB
Non- FnKey LED2 Red

Latching FnKey LED2 Grn
Function Key 3 Init Close CB
1 Non- FnKey LED3 Red

Close in Prog
Latching FnKey LED3 Grn
V01245
Figure 63: Default function key PSL

The programmable function key LEDs have been mapped such that they will indicate yellow whilst the keys
are activated.
Note:
Not all models provide function keys.
7.4 CB CONTROL USING THE OPTO-INPUTS

Certain applications may require the use of push buttons or other external signals to control the various CB
control operations. It is possible to connect such push buttons and signals to opto-inputs and map these to
the relevant DDB signals.
For this to work, you have to set the CB control by cell to option 4 opto, option 5 Opto+Local, option 6
Opto+Remote, or option 7 Opto+Local+Remote in the CB CONTROL column.
7.5 REMOTE CB CONTROL

Remote CB control can be achieved by setting the CB Trip/Close cell in the SYSTEM DATA column to trip
or close by using a command over a communication link.
For this to work, you have to set the CB control by cell to option 2 Remote, option 3 Local+Remote, option
6 Opto+remote, or option 7 Opto+Local+Remote in the CB CONTROL column.
We recommend that you allocate separate relay output contacts for remote CB control and protection
tripping. This allows you to select the control outputs using a simple local/remote selector switch as shown
below. Where this feature is not required the same output contact(s) can be used for both protection and
remote tripping.
P94V-TM-EN-5 161
Protection Trip
Trip
Remote
Control
Trip Close
Remote
Control
Close
Local
Remote
Trip Close
E01207
Figure 64: Remote Control of Circuit Breaker
7.6 SYNCHRONISATION CHECK

Where the check synchronism function is set, this can be enabled to supervise manual circuit breaker Close
commands. A circuit breaker Close command will only be issued if the Check Synchronisation criteria are
satisfied. A time delay can be set with the setting Sys Check time. If the Check Synchronisation criteria are
not satisfied within the time period following a Close command the device will lockout and alarm.
7.7 CB HEALTHY CHECK

A CB Healthy check is available if required. This facility accepts an input to one of the opto-inputs to indicate
that the breaker is capable of closing (e.g. that it is fully charged). A time delay can be set with the setting
CB Healthy Time. If the CB does not indicate a healthy condition within the time period following a Close
command, the device will lockout and alarm.
162 P94V-TM-EN-5
7.8 CB CONTROL LOGIC

CB Control
Disabled Opto
Local Opto + Local
1 Enable opto -initiated CB trip and close
Remote Opto + Remote
Local + Remote Opto + Remote + Local
HMI Trip Control Trip

1
& & S
Init Trip CB Q
R & Man CB Trip Fail
&
Init close CB 1 Close in Prog
HMI Close Delayed control close time

& S
Control Close
Q
Close pulse
AR In Progress R &
1 S
Auto Close Q
Pulsed output latched in HMI
R
& CB Cls Fail
AR models only
Reset Close Dly 1
Trip Command In 1
1
Ext. Trip 3ph
Control Trip
CB Open 3ph
1
CB Closed 3ph
CB healthy window
& Man CB Unhealthy

CB Healthy
C/S window
Voltage models only
& Man No Checksync
Man Check Synch
V01208
Figure 65: CB Control logic
P94V-TM-EN-5 163
8 SYSTEM CHECKS
In some situations it is possible for both "bus" and "line" sides of a circuit breaker to be live when a circuit
breaker is open - for example at the ends of a feeder that has a power source at each end. Therefore, it is
normally necessary to check that the network conditions on both sides are suitable, before closing the circuit
breaker. This applies to both manual circuit breaker closing and autoreclosing. If a circuit breaker is closed
when the line and bus voltages are both live, with a large phase angle, frequency or magnitude difference
between them, the system could be subjected to an unacceptable shock, resulting in loss of stability, and
possible damage to connected machines.
The System Checks functionality involves monitoring the voltages on both sides of a circuit breaker, and if
both sides are live, performing a synchronisation check to determine whether any differences in voltage
magnitude, phase angle or frequency are within permitted limits.
The pre-closing system conditions for a given circuit breaker depend on the system configuration, and for
autoreclosing, on the selected autoreclose program. For example, on a feeder with delayed autoreclosing,
the circuit breakers at the two line ends are normally arranged to close at different times. The first line end to
close usually has a live bus and a dead line immediately before reclosing. The second line end circuit
breaker now sees a live bus and a live line.
If there is a parallel connection between the ends of the tripped feeder the frequencies will be the same, but
any increased impedance could cause the phase angle between the two voltages to increase. Therefore just
before closing the second circuit breaker, it may be necessary to perform a synchronisation check, to ensure
that the phase angle between the two voltages has not increased to a level that would cause unacceptable
shock to the system when the circuit breaker closes.
If there are no parallel interconnections between the ends of the tripped feeder, the two systems could lose
synchronism altogether and the frequency at one end could "slip" relative to the other end. In this situation,
the second line end would require a synchronism check comprising both phase angle and slip frequency
checks.
If the second line-end busbar has no power source other than the feeder that has tripped; the circuit breaker
will see a live line and dead bus assuming the first circuit breaker has re-closed. When the second line end
circuit breaker closes the bus will charge from the live line (dead bus charge).
8.1 SYSTEM CHECKS IMPLEMENTATION

The System Checks function provides Live/Dead Voltage Monitoring, two stages of Check Synchronisation
and System Split indication.
The System Checks function is enabled or disabled by the System Checks setting in the CONFIGURATION
column. If System Checks is disabled, the SYSTEM CHECKS menu becomes invisible, and a SysChks
Inactive DDB signal is set.
8.1.1 VT CONNECTIONS
The device provides inputs for a three-phase "Main VT" and at least one single-phase VT for check
synchronisation. Depending on the primary system arrangement, the Main VT may be located on either the
line-side of the busbar-side of the circuit breaker, with the Check Sync VT on the other. Normally, the Main
VT is located on the line-side (as per the default setting), but this is not always the case. For this reason, a
setting is provided where you can define this. This is the Main VT Location setting, which is found in the CT
AND VT RATIOS column.
The Check Sync VT may be connected to one of the phase-to-phase voltages or phase-to-neutral voltages.
This needs to be defined using the CS Input setting in the CT AND VT RATIOS column. Options are, A-B, B-
C, C-A, A-N, B-N, or C-N.
164 P94V-TM-EN-5
8.1.2 VOLTAGE MONITORING

The settings in the VOLTAGE MONITORS sub-heading in the SYSTEM CHECKS column allow you to define
the threshold at which a voltage is considered live, and a threshold at which the voltage is considered dead.
These thresholds apply to both line and bus sides. If the measured voltage falls below the Dead Voltage
setting, a DDB signal is generated (Dead Bus, or Dead Line, depending on which side is being measured).
If the measured voltage exceeds the Live Voltage setting, a DDB signal is generated (Live Bus, or Live
Line, depending on which side is being measured).
8.1.3 CHECK SYNCHRONISATION

The device provides two stages of Check Synchronisation. The first stage (CS1) is intended for use in
synchronous systems. This means, where the frequencies and phase angles of both sides are compared
and if the difference is within set limits, the circuit breaker is allowed to close. The second stage (CS2) is
similar to stage, but has an additional adaptive setting. The second stage CS2 is intended for use in
asynchronous systems, i.e. where the two sides are out of synchronism and one frequency is slipping
continuously with respect to another. If the closing time of the circuit breaker is known, the CB Close
command can be issued at a definite point in the cycle such that the CB closes at the point when both sides
are in phase.
In situations where it is possible for the voltages on either side of a circuit breaker to be either synchronous
or asynchronous, both CS1 and CS2 can be enabled to provide a CB Close signal if either set of permitted
closing conditions is satisfied.
Each stage can also be set to inhibit circuit breaker closing if selected blocking conditions such as
overvoltage, undervoltage or excessive voltage magnitude difference are detected. CS2 requires the phase
angle difference to be decreasing in magnitude before permitting the circuit breaker to close. CS2 has an
optional “Adaptive” closing feature, which issues the permissive close signal when the predicted phase angle
difference immediately prior to the instant of circuit breaker main contacts closing (i.e. after CB Close time) is
as close as practicable to zero.
Slip frequency is the rate of change of phase between each side of the circuit breaker, which is measured by
the difference between the voltage signals on either side of the circuit breaker.
Having two system synchronism check stages available allows the circuit breaker closing to be enabled
under different system conditions (for example, low slip / moderate phase angle, or moderate slip / small
phase angle).
The settings specific to Check Synchronisation are found under the sub-heading CHECK SYNC in the
SYSTEM CHECKS column. The only difference between the CS1 settings and the CS2 settings is that CS2
Slip Control setting has an option for predictive closure of CB (Freq + CB Comp).
8.1.4 CHECK SYNCRONISATION VECTOR DIAGRAM

The following vector diagram represents the conditions for the System Check functionality. The Dead Volts
setting is represented as a circle around the origin whose radius is equal to the maximum voltage magnitude,
whereby the voltage can be considered dead. The nominal line voltage magnitude is represented by a circle
around the origin whose radius is equal to the nominal line voltage magnitude. The minimum voltage
magnitude at which the system can be considered as Live, is the magnitude difference between the bus and
line voltages.
P94V-TM-EN-5 165
E01204
Figure 66: Check Synchronisation vector diagram
8.1.5 SYSTEM SPLIT

If the line side and bus side are of the same frequency (i.e. in synchronism) but have a large phase angle
between them (180° +/- the set limits), the system is said to be 'Split'. If this is the case, the device will detect
this and issue an alarm signal indicating this.
The settings specific to System Split functionality are found under the sub-heading SYSTEM SPLIT in the
SYSTEM CHECKS column.
166 P94V-TM-EN-5
8.2 SYSTEM CHECK LOGIC

System Checks
Disabled SysChks Inactive
Enabled
CS1 Criteria OK
VAN &
VBN CS2 Criteria OK
&
VCN
Select SS Criteria OK
VAB &
VBC CS1 Slip Freq >

& CS1 Slipfreq>
VCA CS1 Slip Freq <
& CS1 Slipfreq<
VBus
CS2 Slip Freq >
& CS2 Slipfreq>
CS2 Slip Freq <
& CS2 Slipfreq<
CS Vline >
& CS Vline>
CS Vbus>
& CS Vbus>
CS Vline <
Check Synchronisati on Function
& CS Vline<
CS Vbus<
& CS Vbus<
CS Vline> Vbus
& CS Vline>Vbus
CS Vline< Vbus
& CS Vline<Vbus
CS1 Fline > Fbus
& CS1 Fline >Fbus
CS1 Fline < Fbus
& CS1 Fline <Fbus
CS1 Angle not OK+
& CS1 Ang Not OK+
CS1 Angle not OK-
& CS1 Ang Not OK-
CS2 Fline > Fbus
& CS2 Fline >Fbus
CS2 Fline < Fbus
& CS2 Fline <Fbus
CS2 Angle not OK+
& CS2 Ang Not OK+
CS2 Angle not OK-
& CS2 Ang Not OK-
Angle rotating anticlockwise
& CS Ang Rot ACW
Angle rotating clockwise
VTS Fast Block & CS Ang Rot CW
1
F out of Range
CS1 Status
Enabled & Check Sync1 OK
CS1 Enabled
CS2 Status
Enabled & Check Sync2 OK
CS2 Enabled
SS Status
Enabled & System Split
SysSplit Enabled
V01205
Figure 67: System Check logic
P94V-TM-EN-5 167
8.3 SYSTEM CHECK PSL
SysChks Inactive
Check Sync 1 OK
Check Sync 2 OK
Live Line Man Check Synch

&
Dead Bus 1 AR Sys Checks
&
Dead Line
&
Live Bus
V02028
Figure 68: System Check PSL
8.4.1 SLIP CONTROL

Slip control can be achieved by timer, by frequency or by both. The settings CS1 Slip Control and CS2 Slip
Control are used to determine which type of slip control is to be used. As the device supports direct
measurement of frequency, you would normally use frequency.
If you are using Slip Control by Timer, the combination of Phase Angle and Timer settings determines an
effective maximum slip frequency, calculated as:
2A/360T – for CS1
A/360T – for CS2
where:
● A = Phase Angle setting in degrees
● T = Slip Timer setting in seconds
Examples
For CS1, where the Phase Angle setting is 30° and the Timer setting is 3.3 s, the “slipping” vector has to
remain within +/- 30° of the reference vector for at least 3.3 seconds. Therefore a synchronisation check
output will not be given if the slip is greater than 2 x 30° in 3.3 seconds.
Therefore, the maximum slip frequency = 2x30/360x3.3 = 0.0505 hz.
For CS2, where the Phase Angle setting is 10° and the Timer setting is 0.1 sec., the slipping vector has to
remain within 10° of the reference vector, with the angle decreasing, for 0.1 sec. When the angle passes
through zero and starts to increase, the synchronisation check output is blocked. Therefore an output will not
be given if the slip is greater than 10° in 0.1 second.
Therefore, the maximum slip frequency = 10/360x0.1 = 0.278 Hz.
Slip control by Timer is not practical for “large slip/small phase angle” applications, because the timer
settings required are very small, sometimes less than 0.1 seconds. For these situations, slip control by
frequency is better.
168 P94V-TM-EN-5
If Slip Control by Frequency + Timer is selected, for an output to be given, the slip frequency must be less
than BOTH the set Slip Freq. value and the value determined by the Phase Angle and Timer settings.
8.4.2 USE OF CHECK SYNC 2 AND SYSTEM SPLIT

Check Sync 2 (CS2) and System Split functions are included for situations where the maximum permitted
slip frequency and phase angle for synchronism checks can change due to adverse system conditions. A
typical application is on a closely interconnected system, where synchronism is normally retained when a
feeder is tripped. But under some circumstances, with parallel interconnections out of service, the feeder
ends can drift out of synchronism when the feeder is tripped. Depending on the system and machine
characteristics, the conditions for safe circuit breaker closing could be, for example:
Condition 1: For synchronized systems, with zero or very small slip:
● Slip <50 mHz; phase angle <30°
Condition 2: For unsynchronized systems, with significant slip:

● Slip < 250 mHz; phase angle <10° and decreasing
By enabling both CS1 and CS2, the device can be configured to allow CB closure if either of the two
conditions is detected.
For manual circuit breaker closing with synchronism check, some utilities might prefer to arrange the logic to
check initially for condition 1 only. However, if a System Split is detected before the condition 1 parameters
are satisfied, the device will switch to checking for condition 2 parameters instead, based on the assumption
that a significant degree of slip must be present when system split conditions are detected. This can be
arranged by suitable PSL logic, using the System Check DDB signals.
8.4.3 PREDICTIVE CLOSURE OF CIRCUIT BREAKER

The setting CS2 Slip Control setting contains an option (freq + CB comp) for compensating the time taken
to close the CB. When set to provide CB Close Time compensation, a predictive approach is used to close
the circuit breaker ensuring that closing occurs at close to 0º therefore minimising the impact to the power
system. The actual closing angle is subject to the constraints of the existing product architecture, i.e. the
protection task runs twice per power system cycle, based on frequency tracking over the frequency range of
40 Hz to 70 Hz.
8.4.4 VOLTAGE AND PHASE ANGLE CORRECTION

For the Check Synchronisation function, the device needs to convert measured secondary voltages into
primary voltages. In some applications, VTs either side of the circuit breaker may have different VT Ratios. In
such cases, a magnitude correction factor is required.
There are some applications where the main VT is on the HV side of a transformer and the Check Sync VT
is on the LV side, or vice-versa. If the vector group of the transformer is not "0", the voltages are not in
phase, so phase correction is also necessary.
The correction factors are as follows and are located in the TRANS. RATIOS column:
● C/S V kSM, where kSM is the voltage correction factor.
● C/S Phase kSA, where kSA is the angle correction factor.
Assuming C/S input setting is A-N, then:
The line and bus voltage magnitudes are matched if Va sec = Vcs sec x C/S V kSA
The line and bus voltage angles are matched if Va sec = Vcs sec + C/S Phase kSA
The following application scenarios show where the voltage and angular correction factors are applied to
match different VT ratios:
P94V-TM-EN-5 169
Physical Ratios (ph-N Values) Setting Ratios CS Correction Factors

Main VT Ratio (ph-
Scenario Main VT Ratio CS VT Ratio CS VT Ratio
ph) Always kSM kSA
Pri (kV) Sec (V) Pri (kV) Sec (V) Pri (kV) Sec (V) Pri (kV) Sec (V)
1 220/√3 110/√3 132/√3 100/√3 220 110 132 100 1.1 30º
2 220/√3 110/√3 220/√3 110 220 110 127 110 0.577 0º
3 220/√3 110/√3 220/√3 110/3 220 110 381 110 1.732 0º
170 P94V-TM-EN-5
SUPERVISION
CHAPTER 9
Chapter 9 - Supervision P94V
172 P94V-TM-EN-5
P94V Chapter 9 - Supervision
1 CHAPTER OVERVIEW
This chapter describes the supervison functions.
DC Supply Monitor 174
Trip Circuit Supervision 176
P94V-TM-EN-5 173
2 DC SUPPLY MONITOR
This product can be powered using either a DC or AC supply. As a DC supply is normally used, a DC Supply
Monitoring feature is included to indicate the DC supply status. The nominal DC Station supply is 48 V DC,
which is provided by a bank of batteries. It is sometimes possible for this nominal supply to fall below or rise
above acceptable operational limits. If the voltage is too high, it may indicate overcharging. If the voltage is
too low, it may indicate a failing battery.
In such cases it is very useful to have DC supply monitoring functionality. The P40 Agile products provide
such functionality by measuring the auxiliary DC supply fed into the device and processing this information
using settings to define certain limits. In addition, the DC Auxiliary Supply value can be displayed on the front
panel LCD to a resolution of 0.1 V DC. The measuring range is from 19 V DC to 300 V DC.
2.1 DC SUPPLY MONITOR IMPLEMENTATION

The P40Agile products provide three DC supply monitoring zones; zone 1, zone 2, and zone 3. This allows
you to have multiple monitoring criteria. Each zone must be configured to correspond to either an
overvoltage condition or an undervoltage condition. A single zone cannot be configured to provide an alarm
for both undervoltage and overvoltage conditions. Typically, you would configure zones 1 and 2 for
undervoltage conditions, whereby the lowest limit is set very low, and zone 3 for an overvoltage condition
whereby the upper limit is very high.
This is best illustrated diagrammatically:
Vdc3 upper limit

Zone 3 (overvoltage)
Vdc3 lower limit

Vdc nominal
Vdc1 upper limit
Zone 1 (undervoltage)
Vdc1 lower limit

Vdc2 upper limit
Zone 2 (undervoltage)
Vdc2 lower limit

V01221
Figure 69: DC Supply Monitor zones

It is possible to have overlapping zones whereby zone 2 upper limit is lower than zone 1 lower limit in the
above example.
The DC Supply Monitoring function is implemented using settings in the DC SUP. MONITOR column. There
are three sets of settings; one for each of the zones. The settings allow you to:
● Enable or disable the function for each zone
● Set a lower voltage limit for each zone
● Set an upper voltage limit for each zone
● Set a time delay for each zone
174 P94V-TM-EN-5
2.2 DC SUPPLY MONITOR LOGIC
Vdc Vdc 1 Start
Vdc1 Lower Limit

& Vdc 1 Trip
Vdc
Vdc1 Upper Limit
Vdc1 Status
Enabled
InhibitDC SupMon
V01220
Figure 70: DC Supply Monitor logic

The diagram shows the DC Supply Monitoring logic for stage 1 only. Stages 2 and 3 are identical in principle.
The logic function will work when the setting the Vdc1 status cell to enabled and the DC Supply Monitoring
inhibit signal (InhibitDC SupMon) is low.
If the auxiliary supply voltage (Vdc) exceeds the lower limit AND falls below the upper limit, the voltage is in
the unhealthy zone and a Start signal is generated.
The Vdc(n) Trip signals from all stages are OR'd together to produce an alarm signal DC Supply Fail.
P94V-TM-EN-5 175
3 TRIP CIRCUIT SUPERVISION

In most protection schemes, the trip circuit extends beyond the IED enclosure and passes through
components such as links, relay contacts, auxiliary switches and other terminal boards. Such complex
arrangements may require dedicated schemes for their supervision.
There are two distinctly separate parts to the trip circuit; the trip path, and the trip coil. The trip path is the
path between the IED enclosure and the CB cubicle. This path contains ancillary components such as
cables, fuses and connectors. A break in this path is possible, so it is desirable to supervise this trip path and
to raise an alarm if a break should appear in this path.
The trip coil itself is also part of the overall trip circuit, and it is also possible for the trip coil to develop an
open-circuit fault.
This product supports a number of trip circuit supervision (TCS) schemes.
3.1 TRIP CIRCUIT SUPERVISION SCHEME 1

This scheme provides supervision of the trip coil with the CB open or closed, however, it does not provide
supervision of the trip path whilst the breaker is open. The CB status can be monitored when a self-reset trip
contact is used. However, this scheme is incompatible with latched trip contacts, as a latched contact will
short out the opto-input for a time exceeding the recommended Delayed Drop-off (DDO) timer setting of
400 ms, and therefore does not support CB status monitoring. If you require CB status monitoring, further
opto-inputs must be used.
Note:
A 52a CB auxiliary contact follows the CB position. A 52b auxiliary contact is the opposite.
+ve
Trip Output Relay 52A Trip coil

Trip path
Blocking diode
52B
R1 Opto-input Circuit Breaker

V01214 -ve
Figure 71: TCS Scheme 1

When the CB is closed, supervision current passes through the opto-input, blocking diode and trip coil. When
the CB is open, supervision current flows through the opto-input and into the trip coil via the 52b auxiliary
contact. This means that Trip Coil supervision is provided when the CB is either closed or open, however Trip
Path supervision is only provided when the CB is closed. No supervision of the trip path is provided whilst
the CB is open (pre-closing supervision). Any fault in the trip path will only be detected on CB closing, after a
400 ms delay.
3.1.1 RESISTOR VALUES

The supervision current is a lot less than the current required by the trip coil to trip a CB. The opto-input limits
this supervision current to less than 10 mA. If the opto-input were to be short-circuited however, it could be
possible for the supervision current to reach a level that could trip the CB. For this reason, a resistor R1 is
often used to limit the current in the event of a short-circuited opto-input. This limits the current to less than
60 mA. The table below shows the appropriate resistor value and voltage setting for this scheme.
176 P94V-TM-EN-5
Trip Circuit Voltage Resistor R1

24/27 620 Ohms at 2 Watts
48/54 1.2 kOhms at 5 Watts
Warning:
If your IED has Opto Mode settings (Opto 9 Mode, Opto 10 Mode, Opto 11
Mode) in the OPTO CONFIG column, these settings MUST be set to TCS.
3.1.2 PSL FOR TCS SCHEME 1
0 0
Opto Input dropoff straight *Output Relay
400 0
50
& pickup Latching LED
0
User Alarm
*NC stands for Normally Closed . V01217
Figure 72: PSL for TCS Scheme 1

The opto-input can be used to drive a Normally Closed Output Relay, which in turn can be used to drive
alarm equipment. The signal can also be inverted to drive a latching programmable LED and a user alarm
DDB signal.
The DDO timer operates as soon as the opto-input is energised, but will take 400 ms to drop off/reset in the
event of a trip circuit failure. The 400 ms delay prevents a false alarm due to voltage dips caused by faults in
other circuits or during normal tripping operation when the opto-input is shorted by a self-reset trip contact.
When the timer is operated the NC (normally closed) output relay opens and the LED and user alarms are
reset.
The 50 ms delay on pick-up timer prevents false LED and user alarm indications during the power up time,
following a voltage supply interruption.

This scheme provides supervision of the trip coil with the breaker open or closed but does not provide pre-
closing supervision of the trip path. However, using two opto-inputs allows the IED to correctly monitor the
circuit breaker status since they are connected in series with the CB auxiliary contacts. This is achieved by
assigning one opto-input to the 52a contact and another opto-input to the 52b contact. Provided the CB
Status setting in the CB CONTROL column is set to Both 52A and 52B, the IED will correctly monitor the
status of the breaker. This scheme is also fully compatible with latched contacts as the supervision current
will be maintained through the 52b contact when the trip contact is closed.
P94V-TM-EN-5 177
+ve
Trip Output Relay Trip coil

Trip path 52A
52B
R1 Opto-input 1
Circuit Breaker
-ve
R2 Opto-input 2
V01215

When the breaker is closed, supervision current passes through opto input 1 and the trip coil. When the
breaker is open current flows through opto input 2 and the trip coil. No supervision of the trip path is provided
whilst the breaker is open. Any fault in the trip path will only be detected on CB closing, after a 400 ms delay.

As with scheme 1, optional resistors R1 and R2 can be added to prevent tripping of the CB if either opto-
input is shorted. The table below shows the appropriate resistor value and voltage setting for this scheme.
Trip Circuit Voltage Resistor R1 and R2
Warning:
Opto Input 1 CB Aux 3ph(52-A)

0 0
1 dropoff straight *Output Relay
400 0
Opto Input 2 CB Aux 3ph(52-B)
50
0
User Alarm
*NC stands for Normally Closed. V01218

In TCS scheme 2, both opto-inputs must be low before a trip circuit fail alarm is given.
178 P94V-TM-EN-5

TCS Scheme 3 is designed to provide supervision of the trip coil with the breaker open or closed. It provides
pre-closing supervision of the trip path. Since only one opto-input is used, this scheme is not compatible with
latched trip contacts. If you require CB status monitoring, further opto-inputs must be used.
+ve
R3
Output Relay Trip coil
Trip path 52A
R2
52B
Opto-input R1 Circuit Breaker

-ve
V01216

When the CB is closed, supervision current passes through the opto-input, resistor R2 and the trip coil.
When the CB is open, current flows through the opto-input, resistors R1 and R2 (in parallel), resistor R3 and
the trip coil. The supervision current is maintained through the trip path with the breaker in either state,
therefore providing pre-closing supervision.

As with TCS schemes 1 and 2, resistors R1 and R2 are used to prevent false tripping, if the opto-input is
accidentally shorted. However, unlike the other two schemes, this scheme is dependent on the position and
value of these resistors. Removing them would result in incomplete trip circuit monitoring. The table below
shows the resistor values and voltage settings required for satisfactory operation.
Trip Circuit Voltage Resistor R1 and R2 Resistor R3
24/27 620 Ohms at 2 Watts 330 Ohms at 5 Watts
30/34 820 Ohms at 2 Watts 430 Ohms at 5 Watts
48/54 1.2 kOhms at 5 Watts 620 Ohms at 10 Watts
110/125 2.7 kOhms at 10 Watts 1.5 k Ohms at 15 Watts
220/250 5.2 kOhms at 15 Watts 2.7 k Ohms at 25 Watts
Warning:
P94V-TM-EN-5 179
0 0
Opto Input dropoff straight *Output Relay
400 0
50
0
User Alarm
*NC stands for Normally Closed . V01217

Scheme 4 is identical to that offered by MVAX31 (a Trip Circuit Supervision relay) and consequently is fully
compliant with ENA Specification H7. To achieve this compliance, there are three settings in the OPTO
CONFIG column. These settings (Opto 9 Mode, Opto 10 Mode and Opto 11 Mode) must be set to TCS
before the scheme can be used. Typically only two of these three opto-inputs would be used.
In the diagram below, Opto-input 1 and Opto-input 2 would correlate to one of the above-mentioned opto-
inputs.
+ve
Trip Output Relay Trip coil

Trip path 52A
52B
R1 Opto-input 1
Circuit Breaker
-ve
R2 Opto-input 2
V01222

Under normal non-fault conditions, a current of 2 mA flows through one of the following paths:
a) Post Close Supervision: When the CB is in a closed state, the current flows through R1, Opto-input 1,
Contact 52A and the trip coil.
b) Pre-close Supervision: When the CB is in an open state, the current flows through R1, Opto-input 1,
Contact 52B, Opto-input 2 and the trip coil.
c) Momentary Tripping with Self-reset Contact: When a self-reset trip contact is in a closed state, the current
flows through the trip contact, contact 52A and the trip coil.
d) Tripping with Latched Contact: When a latched trip contact is used and when it is in a closed state, the
current flows through the trip contact, Contact 52A, the trip coil, then changing to the path trip contact, R2,
Contact 52B, Opto-input 2 and the trip coil.
A current of 2 mA through the Trip Coil is insufficient to cause operation of the Trip Contact, but large enough
to energise the opto-inputs. Under this condition both of the opto-inputs will output logic 1, so the output relay
(TCS health) will be closed and the User Alarm will be off. If a break occurs in the trip circuit, the current
180 P94V-TM-EN-5
ceases to flow, resulting in both opto-inputs outputting logic 0. This will open the output relay and energise
the user alarm.

The TCS opto-inputs sink a constant current of 2 mA.The values of external resistors R1 and R2 are chosen
to limit the current to a maximum of 60 mA in the event that an opto-input becomes shorted. The values of
these resistors depend on the trip circuit voltage. To achieve compliance with ENA Specification H7, we have
carried out extensive testing and we recommended the following resistors values.
Trip Circuit Voltage Resistor R1 and R2 (ohms)
For the momentary tripping condition, none of the opto-inputs are energised. To tide over this normal CB
operation, a drop-off time delay of about 400 ms is added in the PSL.
Warning:
Opto-input 1
0 0
1 dropoff straight NC Output Relay
400 0
Opto-input 2
50
0
User Alarm
V01223
P94V-TM-EN-5 181
182 P94V-TM-EN-5
DIGITAL I/O AND PSL
CONFIGURATION
CHAPTER 10
Chapter 10 - Digital I/O and PSL Configuration P94V
184 P94V-TM-EN-5
P94V Chapter 10 - Digital I/O and PSL Configuration
1 CHAPTER OVERVIEW
This chapter introduces the PSL (Programmable Scheme Logic) Editor, and describes the configuration of
the digital inputs and outputs. It provides an outline of scheme logic concepts and the PSL Editor. This is
followed by details about allocation of the digital inputs and outputs, which require the use of the PSL Editor.
A separate "Settings Application Software" document is available that gives a comprehensive description of
the PSL, but enough information is provided in this chapter to allow you to allocate the principal digital inputs
and outputs.
Configuring Digital Inputs and Outputs 186
Scheme Logic 187
Configuring the Opto-Inputs 190
Assigning the Output Relays 191
Fixed Function LEDs 192
Configuring Programmable LEDs 193
Function Keys 195
Control Inputs 196
P94V-TM-EN-5 185
2 CONFIGURING DIGITAL INPUTS AND OUTPUTS

Configuration of the digital inputs and outputs in this product is very flexible. You can use a combination of
settings and programmable logic to customise them to your application. You can access some of the settings
using the keypad on the front panel, but you will need a computer running the settings application software to
fully interrogate and configure the properties of the digital inputs and outputs.
The settings application software includes an application called the PSL Editor (Programmable Scheme
Logic Editor). The PSL Editor lets you allocate inputs and outputs according to your specific application. It
also allows you to apply attributes to some of the signals such as a drop-off delay for an output contact.
In this product, digital inputs and outputs that are configurable are:
● Optically isolated digital inputs (opto-inputs). These can be used to monitor the status of associated
plant.
● Output relays. These can be used for purposes such as initiating the tripping of circuit breakers,
providing alarm signals, etc..
● Programmable LEDs. The number and colour of the programmable LEDs varies according to the
particular product being applied.
● Function keys and associated LED indications. These are not provided on all products, but where they
are, each function key has an associated tri-colour LED.
● IEC 61850 GOOSE inputs and outputs. These are only provided on products that have been specified
for connection to an IEC61850 system, and the details of the GOOSE are presented in the
documentation on IEC61850.
186 P94V-TM-EN-5
3 SCHEME LOGIC
The product is supplied with pre-loaded Fixed Scheme Logic (FSL) and Programmable Scheme Logic (PSL).
The Scheme Logic is a functional module within the IED, through which all mapping of inputs to outputs is
handled. The scheme logic can be split into two parts; the Fixed Scheme Logic (FSL) and the Programmable
Scheme Logic (PSL). It is built around a concept called the digital data bus (DDB). The DDB encompasses
all of the digital signals (DDBs) which are used in the FSL and PSL. The DDBs included digital inputs,
outputs, and internal signals.
The FSL is logic that has been hard-coded in the product. It is fundamental to correct interaction between
various protection and/or control elements. It is fixed and cannot be changed.
The PSL gives you a facility to develop custom schemes to suit your application if the factory-programmed
default PSL schemes do not meet your needs. Default PSL schemes are programmed before the product
leaves the factory. These default PSL schemes have been designed to suit typical applications and if these
schemes suit your requirements, you do not need to take any action. However, if you want to change the
input-output mappings, or to implement custom scheme logic, you can change these, or create new PSL
schemes using the PSL editor.
The PSL consists of components such as logic gates and timers, which combine and condition DDB signals.
The logic gates can be programmed to perform a range of different logic functions and. The number of inputs
to a logic gate are not limited. The timers can be used either to create a programmable delay or to condition
the logic outputs. Output contacts and programmable LEDs have dedicated conditioners.
The PSL logic is event driven. Only the part of the PSL logic that is affected by the particular input change
that has occurred is processed. This minimises the amount of processing time used by the PSL ensuring
industry leading performance.
The following diagram shows how the scheme logic interacts with the rest of the IED.
P94V-TM-EN-5 187
Energising quantities Protection functions Fixed LEDs
SL outputs
SL inputs
Opto-inputs Programmable LEDs
PSL and FSL
Function keys Output relays
Goose outputs
Control inputs
Goose inputs
Control input Ethernet

module processing module
V02011
Figure 79: Scheme Logic Interfaces
3.1 PSL EDITOR

The Programmable Scheme Logic (PSL) is a module of programmable logic gates and timers in the IED,
which can be used to create customised logic to qualify how the product manages its response to system
conditions. The IED's digital inputs are combined with internally generated digital signals using logic gates,
timers, and conditioners. The resultant signals are then mapped to digital outputs signals including output
relays and LEDs.
The PSL Editor is a tool in the settings application software that allows you to create and edit scheme logic
diagrams. You can use the default scheme logic which has been designed to suit most applications, but if it
does not suit your application you can change it. If you create a different scheme logic with the software, you
need to upload it to the device to apply it.
3.2 PSL SCHEMES

Your product is shipped with default scheme files. These can be used without modification for most
applications, or you can choose to use them as a starting point to design your own scheme. You can also
create a new scheme from scratch. To create a new scheme, or to modify an existing scheme, you will need
to launch the settings application software. You then need to open an existing PSL file, or create a new one,
for the particular product that you are using, and then open a PSL file. If you want to create a new PSL file,
you should select File then New then Blank scheme... This action opens a default file appropriate for the
device in question, but deletes the diagram components from the default file to leave an empty diagram with
configuration information loaded. To open an existing file, or a default file, simply double-click on it.
188 P94V-TM-EN-5
3.3 PSL SCHEME VERSION CONTROL

To help you keep track of the PSL loaded into products, a version control feature is included. The user
interface contains a PSL DATA column, which can be used to track PSL modifications. A total of 12 cells are
contained in the PSL DATA column; 3 for each setting group.
Grp(n) PSL Ref: When downloading a PSL scheme to an IED, you will be prompted to enter the relevant
group number and a reference identifier. The first 32 characters of the reference identifier are displayed in
this cell. The horizontal cursor keys can scroll through the 32 characters as the LCD display only displays 16
characters.
Example:
Grp(n) PSL Ref
Date/time: This cell displays the date and time when the PSL scheme was downloaded to the IED.
Example:
18 Nov 2002
08:59:32.047
Grp(n) PSL ID: This cell displays a unique ID number for the downloaded PSL scheme.
Example:
Grp(n) PSL ID
ID - 2062813232
P94V-TM-EN-5 189
4 CONFIGURING THE OPTO-INPUTS

The number of optically isolated status inputs (opto-inputs) depends on the specific model supplied. The use
of the inputs will depend on the application, and their allocation is defined in the programmable scheme logic
(PSL). In addition to the PSL assignment, you also need to specify the expected input voltage. Generally, all
opto-inputs will share the same input voltage range, but if different voltage ranges are being used, this device
can accommodate them.
In the OPTO CONFIG column there is a global nominal voltage setting. If all opto-inputs are going to be
energised from the same voltage range, you select the appropriate value with this setting. If you select
Custom in the setting, then the cells Opto Input 1, Opto Input 2, etc. become visible. You use these cells
to set the voltage ranges for each individual opto-input.
If you are using the recommended settings application software (MiCOM S1 Agile), the product's DC supply
monitoring function detects the DC supply voltage and provides some automation for setting for the global
nominal voltage. This feature is found by right clicking on Device, then selecting Supervise Device ® Auto-
setup of Opto Voltage. This automatic detection only works for DC inputs.
Within the OPTO CONFIG column there are also settings to control the filtering applied to the inputs, as well
as the pick-up/drop-off characteristic.
The filter control setting provides a bit string with a bit associated with all opto-inputs. Setting the bit to ‘1’
means that a half-cycle filter is applied to the inputs. This helps to prevent incorrect operation in the event of
power system frequency interference on the wiring. Setting the field to ‘0’ removes the filter and provides for
faster operation. You should note that removing the filter reduces the AC immunity. that means it is less
effective at filtering out-of-band interference.
The Characteristic setting is a single setting that applies to all the opto-inputs. It is used to set the pick-up/
drop-off ratios of the input signals.
By default the drop-off is 60% of the maximum DC input value and the pick-up threshold is 80% of the
minimum DC input value. You can change this to other available thresholds if required. Other available
thresholds are 50% - 70% and 58% - 75%.
190 P94V-TM-EN-5
5 ASSIGNING THE OUTPUT RELAYS

Relay contact action is controlled using the PSL. DDB signals are mapped in the PSL and drive the output
relays. The driving of an output relay is controlled by means of a relay output conditioner. Several choices
are available for how output relay contacts are conditioned. For example, you can choose whether operation
of an output relay contact is latched, has delay on pick-up, or has a delay on drop-off. You make this choice
in the Contact Properties window associated with the output relay conditioner.
To map an output relay in the PSL you should use the Contact Conditioner button in the toolbar to import it.
You then condition it according to your needs. The output of the conditioner respects the attributes you have
assigned.
The toolbar button for a Contact Conditioner looks like this:
The PSL contribution that it delivers looks like this:
Note:
Contact Conditioners are only available if they have not all been used. In some default PSL schemes, all Contact
Conditioners might have been used. If that is the case, and you want to use them for something else, you will need to
re-assign them.
On the toolbar there is another button associated with the relay outputs. The button looks like this:
This is the "Contact Signal" button. It allows you to put replica instances of a conditioned output relay into the
PSL, preventing you having to make cross-page connections which might detract from the clarity of the
scheme.
P94V-TM-EN-5 191
6 FIXED FUNCTION LEDS

Four fixed-function LEDs on the left-hand side of the front panel indicate the following conditions.
● Trip (Red) switches ON when the IED issues a trip signal. It is reset when the associated fault record
is cleared from the front display. Also the trip LED can be configured as self-resetting.
● Alarm (Yellow) flashes when the IED registers an alarm. This may be triggered by a fault, event or
maintenance record. The LED flashes until the alarms have been accepted (read), then changes to
constantly ON. When the alarms are cleared, the LED switches OFF.
● Out of service (Yellow) is ON when the IED's functions are unavailable.
● Healthy (Green) is ON when the IED is in correct working order, and should be ON at all times. It goes
OFF if the unit’s self-tests show there is an error in the hardware or software. The state of the healthy
LED is reflected by the watchdog contacts at the back of the unit.
6.1 TRIP LED LOGIC

When a trip occurs, the trip LED is illuminated. It is possible to reset this with a number of ways:
● Directly with a reset command (by pressing the Clear Key)
● With a reset logic input
● With self-resetting logic
You enable the automatic self-resetting with the Sys Fn Links cell in the SYSTEM DATA column. A '0'
disables self resetting and a '1' enables self resetting.
The reset occurs when the circuit is reclosed and the Any Pole Dead signal has been reset for three
seconds providing the Any Start signal is inactive. The reset is prevented if the Any Start signal is active
after the breaker closes.
The Trip LED logic is as follows:
Any Trip
Trip LED Trigger
Reset
1
Reset Relays/LED
Sys Fn Links
Trip LED S/Reset
&
Any Pole Dead
Any Start
V01211
Figure 80: Trip LED logic
192 P94V-TM-EN-5
7 CONFIGURING PROGRAMMABLE LEDS

There are three types of programmable LED signals which vary according to the model being used. These
are:
● Single-colour programmable LED. These are red when illuminated.
● Tri-colour programmable LED. These can be illuminated red, green, or amber.
● Tri-colour programmable LED associated with a Function Key. These can be illuminated red, green, or
amber.
DDB signals are mapped in the PSL and used to illuminate the LEDs. For single-coloured programmable
LEDs there is one DDB signal per LED. For tri-coloured LEDs there are two DDB signals associated with the
LED. Asserting LED # Grn will illuminate the LED green. Asserting LED # Red will illuminate the LED red.
Asserting both DDB signals will illuminate the LED amber.
The illumination of an LED is controlled by means of a conditioner. Using the conditioner, you can decide
whether the LEDs reflect the real-time state of the DDB signals, or whether illumination is latched pending
user intervention.
To map an LED in the PSL you should use the LED Conditioner button in the toolbar to import it. You then
condition it according to your needs. The output(s) of the conditioner respect the attribute you have
assigned.
The toolbar button for a tri-colour LED looks like this:
The PSL contribution that it delivers looks like this:
The toolbar button for a single-colour LED looks like this:
The PSL contribution that it delivers looks like this.
Note:
LED Conditioners are only available if they have not all been used up, and in some default PSL schemes they might
be. If that is the case and you want to use them for something else, you will need to re-assign them.
On the toolbar there is another button associated with the LEDs. For a tri-coloured LED the button looks like
this:
For a single-colour LED it looks like this:
P94V-TM-EN-5 193
It is the "LED Signal" button. It allows you to put replica instances of a conditioned LED into the PSL,
preventing you having to make cross-page connections which might detract from the clarity of the scheme.
194 P94V-TM-EN-5
8 FUNCTION KEYS
For most models, a number of programmable function keys are available. This allows you to assign function
keys to control functionality via the programmable scheme logic (PSL). Each function key is associated with
a programmable tri-colour LED, which you can program to give the desired indication on activation of the
function key.
These function keys can be used to trigger any function that they are connected to as part of the PSL. The
function key commands are found in the FUNCTION KEYS column.
Each function key is associated with a DDB signal as shown in the DDB table. You can map these DDB
signals to any function available in the PSL.
The Fn Key Status cell displays the status (energised or de-energised) of the function keys by means of a
binary string, where each bit represents a function key starting with bit 0 for function key 1.
Each function key has three settings associated with it, as shown:
● Fn Key (n), which enables or disables the function key
● Fn Key (n) Mode, which allows you to configure the key as toggled or normal
● Fn Key (n) label, which allows you to define the function key text that is displayed
The Fn Key (n) cell is used to enable (unlock) or disable (unlock) the function key signals in PSL. The Lock
setting has been provided to prevent further activation on subsequent key presses. This allows function keys
that are set to Toggled mode and their DDB signal active ‘high’, to be locked in their active state therefore
preventing any further key presses from deactivating the associated function. Locking a function key that is
set to the “Normal” mode causes the associated DDB signals to be permanently off. This safety feature
prevents any inadvertent function key presses from activating or deactivating critical functions.
When the Fn Key (n) Mode cell is set to Toggle, the function key DDB signal output will remain in the set
state until a reset command is given. In the Normal mode, the function key DDB signal will remain energised
for as long as the function key is pressed and will then reset automatically. In this mode, a minimum pulse
duration can be programmed by adding a minimum pulse timer to the function key DDB output signal.
The Fn Key Label cell makes it possible to change the text associated with each individual function key. This
text will be displayed when a function key is accessed in the function key menu, or it can be displayed in the
PSL.
The status of all function keys are recorded in non-volatile memory. In case of auxiliary supply interruption
their status will be maintained.
P94V-TM-EN-5 195
9 CONTROL INPUTS
The control inputs are software switches, which can be set or reset locally or remotely. These inputs can be
used to trigger any PSL function to which they are connected. There are three setting columns associated
with the control inputs: CONTROL INPUTS, CTRL I/P CONFIG and CTRL I/P LABELS. These are listed in
the Settings and Records appendix at the end of this manual.
196 P94V-TM-EN-5
COMMUNICATIONS
CHAPTER 11
Chapter 11 - Communications P94V
198 P94V-TM-EN-5
P94V Chapter 11 - Communications
1 CHAPTER OVERVIEW
This product supports Substation Automation System (SAS), and Supervisory Control and Data Acquisition
(SCADA) communication. The support embraces the evolution of communications technologies that have
taken place since microprocessor technologies were introduced into protection, control, and monitoring
devices which are now ubiquitously known as Intelligent Electronic Devices for the substation (IEDs).
As standard, all products support rugged serial communications for SCADA and SAS applications. By option,
any product can support Ethernet communications for more advanced SCADA and SAS applications.

Communication Interfaces 200
Serial Communication 201
Standard Ethernet Communication 204
Data Protocols 205
Read Only Mode 246
Time Synchronisation 248
P94V-TM-EN-5 199
2 COMMUNICATION INTERFACES
The MiCOM P40 Agile products have a number of standard and optional communication interfaces. The
standard and optional hardware and protocols are summarised below:
Port Availability Physical Layer Use Data Protocols
Local settings
Front Standard USB Courier
Firmware download
SCADA
Rear serial port 1 Standard RS485 / K-Bus Remote settings Courier, MODBUS, IEC 60870-5-103, DNP3.0
IRIG-B
SCADA
Rear serial port 2
Optional RS485 Remote settings Courier
(order option)
IRIG-B
Rear Ethernet SCADA Courier, DNP3.0 over Ethernet, IEC 61850
Optional Ethernet/copper
port Remote settings (order option)
Rear Ethernet SCADA Courier or DNP3.0 over Ethernet
Optional Ethernet/fibre
port Remote settings (order option)
Note:
Optional communication boards are always fitted into slot C and only slot C.
It is only possible to fit one optional communications board, therefore Serial and Ethernet communications are
mutually exclusive.
200 P94V-TM-EN-5
3 SERIAL COMMUNICATION
The physical layer standards that are used for serial communications for SCADA purposes are:
● Universal Serial Bus (USB)
● EIA(RS)485 (often abbreviated to RS485)
● K-Bus (a proprietary customization of RS485)
USB is a relatively new standard, which replaces EIA(RS232) for local communication with the IED (for
transferring settings and downloading firmware updates)
RS485 is similar to RS232 but for longer distances and it allows daisy-chaining and multi-dropping of IEDs.
K-Bus is a proprietary protocol quite similar to RS485, but it cannot be mixed on the same link as RS485.
Unlike RS485, K-Bus signals applied across two terminals are not polarised.
It is important to note that these are not data protocols. They only describe the physical characteristics
required for two devices to communicate with each other.
For a description of the K-Bus standard see K-Bus (on page202) and Alstom Grid's K-Bus interface guide
reference R6509.
A full description of the RS485 is available in the published standard.
3.1 UNIVERSAL SERIAL BUS

The USB port is used for connecting computers locally for the purposes of transferring settings,
measurements and records to/from the computer to the IED and to download firmware updates from a local
computer to the IED.
3.2 EIA(RS)485 BUS

The RS485 two-wire connection provides a half-duplex, fully isolated serial connection to the IED. The
connection is polarized but there is no agreed definition of which terminal is which. If the master is unable to
communicate with the product, and the communication parameters match, then it is possible that the two-
wire connection is reversed.
The RS485 bus must be terminated at each end with 120 Ω 0.5 W terminating resistors between the signal
wires.
The RS485 standard requires that each device be directly connected to the actual bus. Stubs and tees are
forbidden. Loop bus and Star topologies are not part of the RS485 standard and are also forbidden.
Two-core screened twisted pair cable should be used. The final cable specification is dependent on the
application, although a multi-strand 0.5 mm2 per core is normally adequate. The total cable length must not
exceed 1000 m. It is important to avoid circulating currents, which can cause noise and interference,
especially when the cable runs between buildings. For this reason, the screen should be continuous and
connected to ground at one end only, normally at the master connection point.
The RS485 signal is a differential signal and there is no signal ground connection. If a signal ground
connection is present in the bus cable then it must be ignored. At no stage should this be connected to the
cable's screen or to the product’s chassis. This is for both safety and noise reasons.
It may be necessary to bias the signal wires to prevent jabber. Jabber occurs when the signal level has an
indeterminate state because the bus is not being actively driven. This can occur when all the slaves are in
receive mode and the master is slow to turn from receive mode to transmit mode. This may be because the
master is waiting in receive mode, in a high impedance state, until it has something to transmit. Jabber
causes the receiving device(s) to miss the first bits of the first character in the packet, which results in the
slave rejecting the message and consequently not responding. Symptoms of this are; poor response times
P94V-TM-EN-5 201
(due to retries), increasing message error counts, erratic communications, and in the worst case, complete
failure to communicate.
3.2.1 EIA(RS)485 BIASING REQUIREMENTS

Biasing requires that the signal lines be weakly pulled to a defined voltage level of about 1 V. There should
only be one bias point on the bus, which is best situated at the master connection point. The DC source used
for the bias must be clean to prevent noise being injected.
Note:
Some devices may be able to provide the bus bias, in which case external components would not be required.
6 – 9 V DC
180 Ω bias
Master 120 Ω
180 Ω bias
0V 120 Ω
Slave Slave Slave
V01000
Figure 81: RS485 biasing circuit
Warning:
It is extremely important that the 120 Ω termination resistors are fitted.
Otherwise the bias voltage may be excessive and may damage the devices
connected to the bus.
3.3 K-BUS
K-Bus is a robust signalling method based on RS485 voltage levels. K-Bus incorporates message framing,
based on a 64 kbps synchronous HDLC protocol with FM0 modulation to increase speed and security.
The rear interface is used to provide a permanent connection for K-Bus, which allows multi-drop connection.
A K-Bus spur consists of up to 32 IEDs connected together in a multi-drop arrangement using twisted pair
wiring. The K-Bus twisted pair connection is non-polarised.
It is not possible to use a standard EIA(RS)232 to EIA(RS)485 converter to convert IEC 60870-5 FT1.2
frames to K-Bus. A protocol converter, namely the KITZ101, KITZ102 or KITZ201, must be used for this
purpose. Please consult Alstom Grid for information regarding the specification and supply of KITZ devices.
The following figure demonstrates a typical K-Bus connection.
202 P94V-TM-EN-5
IED IED IED
RS232 K-Bus
Computer RS232-USB converter KITZ protocol converter

V01001
Figure 82: Remote communication using K-Bus
Note:
An RS232-USB converter is only needed if the local computer does not provide an RS232 port.
Further information about K-Bus is available in the publication R6509: K-Bus Interface Guide, which is
available on request.
P94V-TM-EN-5 203
4 STANDARD ETHERNET COMMUNICATION

The Ethernet interface is required for either IEC 61850 or DNP3 over Ethernet (protocol must be selected at
time of order). With either of these protocols, the Ethernet interface also offers communication with MiCOM
S1 Studio for remote configuration and record extraction.
Fibre optic connection is recommended for use in permanent connections in a substation environment, as it
offers advantages in terms of noise rejection. The fibre optic port provides 100 Mbps communication and
uses type LC connectors.
The device can also be connected to either a 10Base-T or a 100Base-TX Ethernet hub or switch using the
RJ45 port. The port automatically senses which type of hub is connected. Due to noise and interference
reasons, this connection type is only recommended for short-term connections over a short distance.
The pins on the RJ45connector are as follows:
Pin Signal name Signal definition
1 TXP Transmit (positive)
2 TXN Transmit (negative)
3 RXP Receive (positive)
4 - Not used
5 - Not used
6 RXN Receive (negative)
7 - Not used
8 - Not used
204 P94V-TM-EN-5
5 DATA PROTOCOLS
The products supports a wide range of protocols to make them applicable to many industries and
applications. The exact data protocols supported by a particular product depend on its chosen application,
but the following table gives a list of the data protocols that are typically available.
SCADA data protocols

Data Protocol Layer 1 protocol Description
Courier K-Bus, RS485, Ethernet, USB Standard for SCADA communications developed by Alstom Grid.
MODBUS RS485 Standard for SCADA communications developed by Modicon.
IEC 60870-5-103 RS485 IEC standard for SCADA communications
Standard for SCADA communications developed by Harris. Used mainly in
DNP 3.0 RS485, Ethernet
North America.
IEC 61850 Ethernet IEC standard for substation automation. Facilitates interoperability.
The relationship of these protocols to the lower level physical layer protocols are as follows:
IEC 60870-5-103
MODBUS IEC 61850
Data Protocols
DNP3.0 DNP3.0
Courier Courier Courier Courier
Data Link Layer EIA(RS)485 Ethernet USB K-Bus
Physical Layer Copper or Optical Fibre
5.1 COURIER
This section should provide sufficient detail to enable understanding of the Courier protocol at a level
required by most users. For situations where the level of information contained in this manual is insufficient,
further publications (R6511 and R6512) containing in-depth details about the protocol and its use, are
available on request.
Courier is an Alstom Grid proprietary communication protocol. Courier uses a standard set of commands to
access a database of settings and data in the IED. This allows a master to communicate with a number of
slave devices. The application-specific elements are contained in the database rather than in the commands
used to interrogate it, meaning that the master station does not need to be preconfigured. Courier also
provides a sequence of event (SOE) and disturbance record extraction mechanism.
5.1.1 PHYSICAL CONNECTION AND LINK LAYER

In the P40 Agile products, Courier can be used with three physical layer protocols: K-Bus, EIA(RS)485 and
USB.
Three connection options are available for Courier:
● The front USB port - for connection to Settings application software on, for example, a laptop
● Rear serial port 1 - for permanent SCADA connection via RS485 or K-Bus
● The optional rear serial port 2 - for permanent SCADA connection via RS485 or K-Bus
The IED address and baud rate can be selected using the front panel menu or by a suitable application such
as MiCOM S1 Agile.
P94V-TM-EN-5 205
5.1.2 COURIER DATABASE

The Courier database is two-dimensional and resembles a table. Each cell in the database is referenced by
a row and column address. Both the column and the row can take a range from 0 to 255 (0000 to FFFF
Hexadecimal. Addresses in the database are specified as hexadecimal values, for example, 0A02 is column
0A row 02. Associated settings or data are part of the same column. Row zero of the column has a text
string to identify the contents of the column and to act as a column heading.
The product-specific menu databases contain the complete database definition.
5.1.3 SETTINGS CATEGORIES

There are two main categories of settings in protection IEDs:
● Control and support settings
● Protection settings
With the exception of the Disturbance Recorder settings, changes made to the control and support settings
are implemented immediately and stored in non-volatile memory. Changes made to the Protection settings
and the Disturbance Recorder settings are stored in ‘scratchpad’ memory and are not immediately
implemented. These need to be committed by writing to the Save Changes cell in the CONFIGURATION
column.
5.1.4 SETTING CHANGES

Courier provides two mechanisms for making setting changes. Either method can be used for editing any of
the settings in the database.
Method 1
This uses a combination of three commands to perform a settings change:
First, enter Setting mode: This checks that the cell is settable and returns the limits.
1. Preload Setting: This places a new value into the cell. This value is echoed to ensure that setting
corruption has not taken place. The validity of the setting is not checked by this action.
2. Execute Setting: This confirms the setting change. If the change is valid, a positive response is
returned. If the setting change fails, an error response is returned.
3. Abort Setting: This command can be used to abandon the setting change.
This is the most secure method. It is ideally suited to on-line editors because the setting limits are extracted
before the setting change is made. However, this method can be slow if many settings are being changed
because three commands are required for each change.
Method 2
The Set Value command can be used to change a setting directly. The response to this command is either a
positive confirm or an error code to indicate the nature of a failure. This command can be used to implement
a setting more rapidly than the previous method, however the limits are not extracted. This method is
therefore most suitable for off-line setting editors such as MiCOM S1 Agile, or for issuing preconfigured
control commands.
5.1.5 EVENT EXTRACTION

You can extract events either automatically (rear serial port only) or manually (either serial port). For
automatic extraction, all events are extracted in sequential order using the Courier event mechanism. This
includes fault and maintenance data if appropriate. The manual approach allows you to select events, faults,
or maintenance data as desired.
206 P94V-TM-EN-5
5.1.5.1 AUTOMATIC EVENT RECORD EXTRACTION

This method is intended for continuous extraction of event and fault information as it is produced. It is only
supported through the rear Courier port.
When new event information is created, the Event bit is set in the Status byte. This indicates to the Master
device that event information is available. The oldest, non-extracted event can be extracted from the IED
using the Send Event command. The IED responds with the event data.
Once an event has been extracted, the Accept Event command can be used to confirm that the event has
been successfully extracted. When all events have been extracted, the Event bit is reset. If there are more
events still to be extracted, the next event can be accessed using the Send Event command as before.
5.1.5.2 MANUAL EVENT RECORD EXTRACTION

The VIEW RECORDS column (location 01) is used for manual viewing of event, fault, and maintenance
records. The contents of this column depend on the nature of the record selected. You can select events by
event number and directly select a fault or maintenance record by number.
Event Record Selection ('Select Event' cell: 0101)

This cell can be set the number of stored events. For simple event records (Type 0), cells 0102 to 0105
contain the event details. A single cell is used to represent each of the event fields. If the event selected is a
fault or maintenance record (Type 3), the remainder of the column contains the additional information.
Fault Record Selection ('Select Fault' cell: 0105)

This cell can be used to select a fault record directly, using a value between 0 and 4 to select one of up to
five stored fault records. (0 is the most recent fault and 4 is the oldest). The column then contains the details
of the fault record selected.
Maintenance Record Selection ('Select Maint' cell: 01F0)

This cell can be used to select a maintenance record using a value between 0 and 4. This cell operates in a
similar way to the fault record selection.
If this column is used to extract event information, the number associated with a particular record changes
when a new event or fault occurs.
Event Types
The IED generates events under certain circumstances such as:
● Change of state of output contact
● Change of state of opto-input
● Protection element operation
● Alarm condition
● Setting change
● Password entered/timed-out
Event Record Format

The IED returns the following fields when the Send Event command is invoked:
● Cell reference
● Time stamp
● Cell text
● Cell value
P94V-TM-EN-5 207
The Menu Database contains tables of possible events, and shows how the contents of the above fields are
interpreted. Fault and Maintenance records return a Courier Type 3 event, which contains the above fields
plus two additional fields:
● Event extraction column
● Event number
These events contain additional information, which is extracted from the IED using the RECORDER
EXTRACTION column B4. Row 01 of the RECORDER EXTRACTION column contains a Select Record
setting that allows the fault or maintenance record to be selected. This setting should be set to the event
number value returned in the record. The extended data can be extracted from the IED by uploading the text
and data from the column.
5.1.6 DISTURBANCE RECORD EXTRACTION

The stored disturbance records are accessible through the Courier interface. The records are extracted
using the RECORDER EXTRACTION column (B4).
The Select Record cell can be used to select the record to be extracted. Record 0 is the oldest non-
extracted record. Older records which have been already been extracted are assigned positive values, while
younger records are assigned negative values. To help automatic extraction through the rear port, the IED
sets the Disturbance bit of the Status byte, whenever there are non-extracted disturbance records.
Once a record has been selected, using the above cell, the time and date of the record can be read from the
Trigger Time cell (B402). The disturbance record can be extracted using the block transfer mechanism from
cell B40B and saved in the COMTRADE format. The settings application software software automatically
does this.
5.1.7 PROGRAMMABLE SCHEME LOGIC SETTINGS

The programmable scheme logic (PSL) settings can be uploaded from and downloaded to the IED using the
block transfer mechanism.
The following cells are used to perform the extraction:
● Domain cell (B204): Used to select either PSL settings (upload or download) or PSL configuration
data (upload only)
● Sub-Domain cell (B208): Used to select the Protection Setting Group to be uploaded or downloaded.
● Version cell (B20C): Used on a download to check the compatibility of the file to be downloaded.
● Transfer Mode cell (B21C): Used to set up the transfer process.
● Data Transfer cell (B120): Used to perform upload or download.
The PSL settings can be uploaded and downloaded to and from the IED using this mechanism. The settings
application software must be used to edit the settings. It also performs checks on the validity of the settings
before they are transferred to the IED.
5.1.8 TIME SYNCHRONISATION

The time and date can be set using the time synchronization feature of the Courier protocol. The device will
correct for the transmission delay. The time synchronization message may be sent as either a global
command or to any individual IED address. If the time synchronization message is sent to an individual
address, then the device will respond with a confirm message. If sent as a global command, the (same)
command must be sent twice. A time synchronization Courier event will be generated/produced whether the
time-synchronization message is sent as a global command or to any individual IED address.
If the clock is being synchronized using the IRIG-B input then it will not be possible to set the device time
using the Courier interface. An attempt to set the time using the interface will cause the device to create an
event with the current date and time taken from the IRIG-B synchronized internal clock.
208 P94V-TM-EN-5
5.1.9 COURIER CONFIGURATION

To configure the device:
1. Select the CONFIGURATION column and check that the Comms settings cell is set to Visible.
2. Select the COMMUNICATIONS column.
3. Move to the first cell down (RP1 protocol). This is a non-settable cell, which shows the chosen
communication protocol – in this case Courier.
COMMUNICATIONS
RP1 Protocol
Courier
4. Move down to the next cell (RP1 Address). This cell controls the address of the RP1 port on thje
device. Up to 32 IEDs can be connected to one spur. It is therefore necessary for each IED to have a
unique address so that messages from the master control station are accepted by one IED only.
Courier uses an integer number between 1 and 254 for the Relay Address. It is set to 255 by default,
which has to be changed. It is important that no two IEDs share the same address.
COMMUNICATIONS
RP1 Address
100
5. Move down to the next cell (RP1 InactivTimer). This cell controls the inactivity timer. The inactivity
timer controls how long the IED waits without receiving any messages on the rear port before revoking
any password access that was enabled and discarding any changes. For the rear port this can be set
between 1 and 30 minutes.
COMMUNICATIONS
RP1 Inactivtimer
10.00 mins.
6. If the optional fibre optic connectors are fitted, the RP1 PhysicalLink cell is visible. This cell controls
the physical media used for the communication (Copper or Fibre optic).
COMMUNICATIONS
RP1 PhysicalLink
Copper
7. Move down to the next cell (RP1 Card Status). This cell is not settable. It displays the status of the
chosen physical layer protocol for RP1.
COMMUNICATIONS
RP1 Card Status
K-Bus OK
8. Move down to the next cell (RP1 Port Config). This cell controls the type of serial connection. Select
between K-Bus or RS485.
P94V-TM-EN-5 209
COMMUNICATIONS
RP1 Port Config
K-Bus
9. If using EIA(RS)485, the next cell (RP1 Comms Mode) selects the communication mode. The choice
is either IEC 60870 FT1.2 for normal operation with 11-bit modems, or 10-bit no parity. If using K-Bus
this cell will not appear.
COMMUNICATIONS
RP1 Comms Mode
IEC 60870 FT1.2
10. If using EIA(RS)485, the next cell down controls the baud rate. Three baud rates are supported; 9600,
19200 and 38400. If using K-Bus this cell will not appear as the baud rate is fixed at 64 kbps.
COMMUNICATIONS
RP1 Baud rate
19200
5.2 IEC 60870-5-103

The specification IEC 60870-5-103 (Telecontrol Equipment and Systems Part 5 Section 103: Transmission
Protocols), defines the use of standards IEC 60870-5-1 to IEC 60870-5-5, which were designed for
communication with protection equipment
This section describes how the IEC 60870-5-103 standard is applied to the Px40 platform. It is not a
description of the standard itself. The level at which this section is written assumes that the reader is already
familiar with the IEC 60870-5-103 standard.
This section should provide sufficient detail to enable understanding of the standard at a level required by
most users.
The IEC 60870-5-103 interface is a master/slave interface with the device as the slave device. The device
conforms to compatibility level 2, as defined in the IEC 60870-5-103.standard.
The following IEC 60870-5-103 facilities are supported by this interface:
● Initialization (reset)
● Time synchronization
● Event record extraction
● General interrogation
● Cyclic measurements
● General commands
● Disturbance record extraction
● Private codes

There is just one option for IEC 60870-5-103:
● Rear serial port 1- for permanent SCADA connection via RS485
as MiCOM S1 Agile.
210 P94V-TM-EN-5
5.2.2 INITIALISATION
Whenever the device has been powered up, or if the communication parameters have been changed a reset
command is required to initialize the communications. The device will respond to either of the two reset
commands; Reset CU or Reset FCB (Communication Unit or Frame Count Bit). The difference between the
two commands is that the Reset CU command will clear any unsent messages in the transmit buffer,
whereas the Reset FCB command does not delete any messages.
The device will respond to the reset command with an identification message ASDU 5. The Cause of
Transmission (COT) of this response will be either Reset CU or Reset FCB depending on the nature of the
reset command. The content of ASDU 5 is described in the IEC 60870-5-103 section of the Menu Database,
available from Alstom Grid separately if required.
In addition to the above identification message, it will also produce a power up event.

The time and date can be set using the time synchronization feature of the IEC 60870-5-103 protocol. The
device will correct for the transmission delay as specified in IEC 60870-5-103. If the time synchronization
message is sent as a send/confirm message then the device will respond with a confirm message. A time
synchronization Class 1 event will be generated/produced whether the time-synchronization message is sent
as a send confirm or a broadcast (send/no reply) message.
using the IEC 60870-5-103 interface. An attempt to set the time via the interface will cause the device to
create an event with the current date and time taken from the IRIG-B synchronized internal clock.
5.2.4 SPONTANEOUS EVENTS

Events are categorized using the following information:
● Function type
● Information Number
The IEC 60870-5-103 profile in the Menu Database contains a complete listing of all events produced by the
device.
5.2.5 GENERAL INTERROGATION (GI)

The GI request can be used to read the status of the device, the function numbers, and information numbers
that will be returned during the GI cycle. These are shown in the IEC 60870-5-103 profile in the Menu
Database.
5.2.6 CYCLIC MEASUREMENTS

The device will produce measured values using ASDU 9 on a cyclical basis, this can be read from the device
using a Class 2 poll (note ADSU 3 is not used). The rate at which the device produces new measured values
can be controlled using the measurement period setting. This setting can be edited from the front panel
menu or using MiCOM S1 Agile. It is active immediately following a change.
The device transmits its measurands at 2.4 times the rated value of the analogue value.
5.2.7 COMMANDS
A list of the supported commands is contained in the Menu Database. The device will respond to other
commands with an ASDU 1, with a cause of transmission (COT) indicating ‘negative acknowledgement’.
P94V-TM-EN-5 211
5.2.8 TEST MODE

It is possible to disable the device output contacts to allow secondary injection testing to be performed using
either the front panel menu or the front serial port. The IEC 60870-5-103 standard interprets this as ‘test
mode’. An event will be produced to indicate both entry to and exit from test mode. Spontaneous events and
cyclic measured data transmitted whilst the device is in test mode will have a COT of ‘test mode’.
5.2.9 DISTURBANCE RECORDS

The disturbance records are stored in uncompressed format and can be extracted using the standard
mechanisms described in IEC 60870-5-103.
Note:
IEC 60870-5-103 only supports up to 8 records.
5.2.10 COMMAND/MONITOR BLOCKING

The device supports a facility to block messages in the monitor direction (data from the device) and also in
the command direction (data to the device). Messages can be blocked in the monitor and command
directions using one of the two following methods
● The menu command RP1 CS103Blcking in the COMMUNICATIONS column
● The DDB signals Monitor Blocked and Command Blocked
5.2.11 IEC 60870-5-103 CONFIGURATION

communication protocol – in this case IEC 60870-5-103.
COMMUNICATIONS
RP1 Protocol
IEC 60870-5-103
4. Move down to the next cell (RP1 Address). This cell controls the IEC 60870-5-103 address of the
IED. Up to 32 IEDs can be connected to one spur. It is therefore necessary for each IED to have a
unique address so that messages from the master control station are accepted by one IED only.
IEC 60870-5-103 uses an integer number between 0 and 254 for the address. It is important that no
two IEDs have the same IEC 60870 5 103 address. The IEC 60870-5-103 address is then used by the
master station to communicate with the IED.
COMMUNICATIONS
RP1 address
162
5. Move down to the next cell (RP1 Baud Rate). This cell controls the baud rate to be used. Two baud
rates are supported by the IED, 9600 bits/s and 19200 bits/s. Make sure that the baud rate
selected on the IED is the same as that set on the master station.
212 P94V-TM-EN-5
COMMUNICATIONS
RP1 Baud rate
9600 bits/s
6. Move down to the next cell (RP1 Meas Period). The next cell down controls the period between
IEC 60870-5-103 measurements. The IEC 60870-5-103 protocol allows the IED to supply
measurements at regular intervals. The interval between measurements is controlled by this cell, and
can be set between 1 and 60 seconds.
COMMUNICATIONS
RP1 Meas Period
30.00 s
COMMUNICATIONS
RP1 PhysicalLink
Copper
8. The next cell down (RP1 CS103Blcking) can be used for monitor or command blocking.
COMMUNICATIONS
RP1 CS103Blcking
Disabled
9. There are three settings associated with this cell; these are:
Setting: Description:
Disabled No blocking selected.
When the monitor blocking DDB Signal is active high, either by energising an opto input or control input,
Monitor Blocking reading of the status information and disturbance records is not permitted. When in this mode the device
returns a "Termination of general interrogation" message to the master station.
When the command blocking DDB signal is active high, either by energising an opto input or control input, all
Command Blocking remote commands will be ignored (i.e. CB Trip/Close, change setting group etc.). When in this mode the
device returns a "negative acknowledgement of command" message to the master station.
5.3 DNP 3.0

This section describes how the DNP 3.0 standard is applied in the product. It is not a description of the
standard itself. The level at which this section is written assumes that the reader is already familiar with the
DNP 3.0 standard.
The descriptions given here are intended to accompany the device profile document that is included in the
Menu Database document. The DNP 3.0 protocol is not described here, please refer to the documentation
available from the user group. The device profile document specifies the full details of the DNP 3.0
implementation. This is the standard format DNP 3.0 document that specifies which objects; variations and
qualifiers are supported. The device profile document also specifies what data is available from the device
using DNP 3.0. The IED operates as a DNP 3.0 slave and supports subset level 2, as described in the
DNP 3.0 standard, plus some of the features from level 3.
P94V-TM-EN-5 213
The DNP 3.0 protocol is defined and administered by the DNP Users Group. For further information on
DNP 3.0 and the protocol specifications, please see the DNP website (www.dnp.org).

DNP 3.0 can be used with two physical layer protocols: EIA(RS)485, or Ethernet.
Several connection options are available for DNP 3.0
● Rear serial port 1 - for permanent SCADA connection via RS485
● The rear Ethernet RJ45 port on the optional Ethernet board - for permanent SCADA Ethernet
connection
● The rear Ethernet fibre port on the optional Ethernet board - for permanent SCADA Ethernet
connection
as MiCOM Agile.
When using a serial interface, the data format is: 1 start bit, 8 data bits, 1 stop bit and optional configurable
parity bit.
5.3.2 OBJECT 1 BINARY INPUTS

Object 1, binary inputs, contains information describing the state of signals in the IED, which mostly form part
of the digital data bus (DDB). In general these include the state of the output contacts and opto-inputs, alarm
signals, and protection start and trip signals. The ‘DDB number’ column in the device profile document
provides the DDB numbers for the DNP 3.0 point data. These can be used to cross-reference to the DDB
definition list. See the relevant Menu Database document. The binary input points can also be read as
change events using Object 2 and Object 60 for class 1-3 event data.
5.3.3 OBJECT 10 BINARY OUTPUTS

Object 10, binary outputs, contains commands that can be operated using DNP 3.0. Therefore the points
accept commands of type pulse on (null, trip, close) and latch on/off as detailed in the device profile in the
relevant Menu Database document, and execute the command once for either command. The other fields
are ignored (queue, clear, trip/close, in time and off time).
There is an additional image of the Control Inputs. Described as Alias Control Inputs, they reflect the state of
the Control Input, but with a dynamic nature.
● If the Control Input DDB signal is already SET and a new DNP SET command is sent to the Control
Input, the Control Input DDB signal goes momentarily to RESET and then back to SET.
● If the Control Input DDB signal is already RESET and a new DNP RESET command is sent to the
Control Input, the Control Input DDB signal goes momentarily to SET and then back to RESET.
214 P94V-TM-EN-5
DNP Latch DNP Latch DNP Latch DNP Latch

ON ON OFF OFF
Control Input
(Latched)
Aliased Control
Input
(Latched)
Control Input
(Pulsed )
Aliased Control
Input
(Pulsed )
The pulse width is equal to the duration of one protection iteration
V01002
Figure 83: Control input behaviour

Many of the IED’s functions are configurable so some of the Object 10 commands described in the following
sections may not be available. A read from Object 10 reports the point as off-line and an operate command
to Object 12 generates an error response.
Examples of Object 10 points that maybe reported as off-line are:
● Activate setting groups: Ensure setting groups are enabled
● CB trip/close: Ensure remote CB control is enabled
● Reset NPS thermal: Ensure NPS thermal protection is enabled
● Reset thermal O/L: Ensure thermal overload protection is enabled
● Reset RTD flags: Ensure RTD Inputs is enabled
● Control inputs: Ensure control inputs are enabled
5.3.4 OBJECT 20 BINARY COUNTERS

Object 20, binary counters, contains cumulative counters and measurements. The binary counters can be
read as their present ‘running’ value from Object 20, or as a ‘frozen’ value from Object 21. The running
counters of object 20 accept the read, freeze and clear functions. The freeze function takes the current value
of the object 20 running counter and stores it in the corresponding Object 21 frozen counter. The freeze and
clear function resets the Object 20 running counter to zero after freezing its value.
Binary counter and frozen counter change event values are available for reporting from Object 22 and Object
23 respectively. Counter change events (Object 22) only report the most recent change, so the maximum
number of events supported is the same as the total number of counters. Frozen counter change events
(Object 23) are generated whenever a freeze operation is performed and a change has occurred since the
previous freeze command. The frozen counter event queues store the points for up to two freeze operations.
5.3.5 OBJECT 30 ANALOGUE INPUT

Object 30, analogue inputs, contains information from the IED’s measurements columns in the menu. All
object 30 points can be reported as 16 or 32-bit integer values with flag, 16 or 32-bit integer values without
flag, as well as short floating point values.
P94V-TM-EN-5 215
Analogue values can be reported to the master station as primary, secondary or normalized values (which
takes into account the IED’s CT and VT ratios), and this is settable in the COMMUNICATIONS column in the
IED. Corresponding deadband settings can be displayed in terms of a primary, secondary or normalized
value. Deadband point values can be reported and written using Object 34 variations.
The deadband is the setting used to determine whether a change event should be generated for each point.
The change events can be read using Object 32 or Object 60. These events are generated for any point
which has a value changed by more than the deadband setting since the last time the data value was
reported.
Any analogue measurement that is unavailable when it is read is reported as offline. For example, the
frequency would be offline if the current and voltage frequency is outside the tracking range of the IED. All
Object 30 points are reported as secondary values in DNP 3.0 (with respect to CT and VT ratios).
5.3.6 OBJECT 40 ANALOGUE OUTPUT

The conversion to fixed-point format requires the use of a scaling factor, which is configurable for the various
types of data within the IED such as current, voltage, and phase angle. All Object 40 points report the integer
scaling values and Object 41 is available to configure integer scaling quantities.
5.3.7 OBJECT 50 TIME SYNCHRONISATION

Function codes 1 (read) and 2 (write) are supported for Object 50 (time and date) variation 1. The DNP Need
Time function (the duration of time waited before requesting another time sync from the master) is supported,
and is configurable in the range 1 - 30 minutes.
using the Courier interface. An attempt to set the time using the interface will cause the device to create an
event with the current date and time taken from the IRIG-B synchronized internal clock.
5.3.8 DNP3 DEVICE PROFILE

This section describes the specific implementation of DNP version 3.0 within Alstom Grid MiCOM P40 Agile
IEDs for both compact and modular ranges.
The devices use the DNP 3.0 Slave Source Code Library version 3 from Triangle MicroWorks Inc.
This document, in conjunction with the DNP 3.0 Basic 4 Document Set, and the DNP Subset Definitions
Document, provides complete information on how to communicate with the devices using the DNP 3.0
protocol.
This implementation of DNP 3.0 is fully compliant with DNP 3.0 Subset Definition Level 2. It also contains
many Subset Level 3 and above features.
5.3.8.1 DNP3 DEVICE PROFILE TABLE

The following table provides the device profile in a similar format to that defined in the DNP 3.0 Subset
Definitions Document. While it is referred to in the DNP 3.0 Subset Definitions as a “Document”, it is just one
component of a total interoperability guide. This table, in combination with the subsequent Implementation
and Points List tables should provide a complete interoperability/configuration guide for the device.
The following table provides the device profile in a similar format to that defined in the DNP 3.0 Subset
Definitions Document. While it is referred to in the DNP 3.0 Subset Definitions as a "Document", it is just one
component of a total interoperability guide. This table, in combination with the subsequent Implementation
and Points List tables should provide a complete interoperability/configuration guide for the device.
DNP 3.0
Device Profile Document
Vendor Name: ALSTOM GRID
216 P94V-TM-EN-5
DNP 3.0
Device Name: MiCOM P40Agile Protection Relays – compact and modular range
Models Covered: All models
Highest DNP Level Supported*: For Requests: Level 2
*This is the highest DNP level FULLY supported. Parts of level 3 are For Responses: Level 2
also supported
Device Function: Slave
Notable objects, functions, and/or qualifiers supported in addition to the highest DNP levels supported (the complete list is described in the DNP
3.0 Implementation Table):
For static (non-change event) object requests, request qualifier codes 00 and 01 (start-stop), 07 and 08 (limited quantity), and 17 and 28 (index)
are supported in addition to the request qualifier code 06 (no range (all points))
Static object requests sent with qualifiers 00, 01, 06, 07, or 08 will be responded with qualifiers 00 or 01
Static object requests sent with qualifiers 17 or 28 will be responded with qualifiers 17 or 28
For change-event object requests, qualifiers 17 or 28 are always responded
16-bit and 32-bit analogue change events with time may be requested
The read function code for Object 50 (time and date) variation 1 is supported
Analogue Input Deadbands, Object 34, variations 1 through 3, are supported
Floating Point Analogue Output Status and Output Block Objects 40 and 41 are supported
Sequential file transfer, Object 70, variations 2 through 7, are supported
Device Attribute Object 0 is supported
Maximum Data Link Frame Size (octets): Transmitted: 292
Received: 292
Maximum Application Fragment Size (octets) Transmitted: Configurable (100 to 2048). Default 2048
Received: 249
Maximum Data Link Retries: Fixed at 2
Maximum Application Layer Retries: None
Requires Data Link Layer Confirmation: Configurable to Never or Always
Requires Application Layer Confirmation: When reporting event data (Slave devices only)
When sending multi-fragment responses (Slave devices only)
Timeouts while waiting for:
Data Link Confirm: Configurable
Complete Application Fragment: None
Application Confirm: Configurable
Complete Application Response: None
Others:
Data Link Confirm Timeout: Configurable from 0 (Disabled) to 120s, default 10s.
Application Confirm Timeout: Configurable from 1 to 120s, default 2s.
Select/Operate Arm Timeout: Configurable from 1 to 10s, default 10s.
Need Time Interval (Set IIN1-4): Configurable from 1 to 30, default 10min.
Application File Timeout 60 s
Analog Change Event Scan Period: Fixed at 0.5s
Counter Change Event Scan Period Fixed at 0.5s
Frozen Counter Change Event Scan Period Fixed at 1s
Maximum Delay Measurement Error: 2.5 ms
Time Base Drift Over a 10-minute Interval: 7 ms
Sends/Executes Control Operations:
Write Binary Outputs: Never
P94V-TM-EN-5 217
DNP 3.0
Select/Operate: Always
Direct Operate: Always
Direct Operate - No Ack: Always
Count > 1 Never
Pulse On Always
Pulse Off Sometimes
Latch On Always
Latch Off Always
Queue Never
Clear Queue Never
Note: Paired Control points will accept Pulse On/Trip and Pulse On/Close, but only single point will accept the Pulse Off control command.
Reports Binary Input Change Events when no specific variation Configurable to send one or the other
requested:
Reports time-tagged Binary Input Change Events when no specific Binary input change with time
variation requested:
Sends Unsolicited Responses: Never
Sends Static Data in Unsolicited Responses: Never
No other options are permitted
Default Counter Object/Variation: Configurable, Point-by-point list attached
Default object: 20
Default variation: 1
Counters Roll Over at: 32 bits
Sends multi-fragment responses: Yes
Sequential File Transfer Support:
Append File Mode No
Custom Status Code Strings No
Permissions Field Yes
File Events Assigned to Class No
File Events Send Immediately Yes
Multiple Blocks in a Fragment No
Max Number of Files Open 1
5.3.8.2 DNP3 IMPLEMENTATION TABLE

The implementation table provides a list of objects, variations and control codes supported by the device:
Request Response
Object
(Library will parse) (Library will respond with)
Object Variation Function Codes (dec) Qualifier Codes Function Codes Qualifier Codes (hex)
Description (dec)
Number Number (hex)
1 0 Binary Input (Variation 0 is used to 1 (read) 00, 01 (start-stop)
request default variation) 22 (assign class) 06 (no range, or all)
07, 08 (limited qty)
17, 27, 28 (index)
1 1 Binary Input 1 (read) 00, 01 (start-stop) 129 response 00, 01 (start-stop)
(default - see 06 (no range, or all) 17, 28 (index - see note 2)
note 1) 07, 08 (limited qty)
17, 27, 28 (index)
218 P94V-TM-EN-5
Request Response
Object
Description (dec)
Number Number (hex)
1 2 Binary Input with Flag 1 (read) 00, 01 (start-stop) 129 response 00, 01 (start-stop)
06 (no range, or all) 17, 28 (index - see note 2)
17, 28 (index)
2 0 Binary Input Change - Any 1 (read) 06 (no range, or all)
Variation 07, 08 (limited qty)
2 1 Binary Input Change without Time 1 (read) 06 (no range, or all) 129 response 17, 28 (index)
2 2 Binary Input Change with Time 1 (read) 06 (no range, or all) 129 response 17, 28 (index)
10 0 Binary Output Status - Any 1 (read) 00, 01 (start-stop)
Variation 06 (no range, or all)
17, 27, 28 (index)
10 2 Binary Output Status 1 (read) 00, 01 (start-stop) 129 response 00, 01 (start-stop)
17, 28 (index)
12 1 Control Relay Output Block 3 (select) 17, 28 (index) 129 response echo of request
4 (operate)
5 (direct op)
6 (dir. op, noack)
20 0 Binary Counter - Any Variation 1 (read) 00, 01 (start-stop)
22 (assign class) 06 (no range, or all)
17, 27, 28 (index)
7 (freeze) 00, 01 (start-stop)
8 (freeze noack) 06 (no range, or all)
9 (freeze clear) 07, 08 (limited qty)
10 (frz. cl. Noack)
20 1 32-Bit Binary Counter with Flag 1 (read) 00, 01 (start-stop) 129 response 00, 01 (start-stop)
17, 27, 28 (index)
20 2 16-Bit Binary Counter with Flag 1 (read) 00, 01 (start-stop) 129 response 00, 01 (start-stop)
17, 27, 28 (index)
20 5 32-Bit Binary Counter without Flag 1 (read) 00, 01 (start-stop) 129 response 00, 01 (start-stop)
17, 27, 28 (index)
20 6 16-Bit Binary Counter without Flag 1 (read) 00, 01 (start-stop) 129 response 00, 01 (start-stop)
17, 27, 28 (index)
21 0 Frozen Counter - Any Variation 1 (read) 00, 01 (start-stop)
06 (no range, or all)
17, 27, 28 (index)
21 1 32-Bit Frozen Counter with Flag 1 (read) 00, 01 (start-stop) 129 response 00, 01 (start-stop)
17, 27, 28 (index)
21 2 16-Bit Frozen Counter with Flag 1 (read) 00, 01 (start-stop) 129 response 00, 01 (start-stop)
17, 27, 28 (index)
21 5 32-Bit Frozen Counter with Time of 1 (read) 00, 01 (start-stop) 129 response 00, 01 (start-stop)
Freeze 06 (no range, or all) 17, 28 (index - see note 1)
17, 27, 28 (index)
21 6 16-Bit Frozen Counter with Time of 1 (read) 00, 01 (start-stop) 129 response 00, 01 (start-stop)
Freeze 06 (no range, or all) 17, 28 17, 28 (index - see note 1)
17, 27, 28 (index)
P94V-TM-EN-5 219
Request Response
Object
Description (dec)
Number Number (hex)
21 9 32-Bit Frozen Counter without Flag 1 (read) 00, 01 (start-stop) 129 response 00, 01 (start-stop)
17, 27, 28 (index)
21 10 16-Bit Frozen Counter without Flag 1 (read) 00, 01 (start-stop) 129 response 00, 01 (start-stop)
17, 27, 28 (index)
`22 0 Counter Change Event - Any 1 (read) 06 (no range, or all)
22 1 32-Bit Counter Change Event 1 (read) 06 (no range, or all) 129 response 17, 28 (index)
(default - see without Time 07, 08 (limited qty)
note 1)
22 2 16-Bit Counter Change Event 1 (read) 06 (no range, or all) 129 response 17, 28 (index)
without Time 07, 08 (limited qty)
22 5 32-Bit Counter Change Event with 1 (read) 06 (no range, or all) 129 response 17, 28 (index)
Time 07, 08 (limited qty)
22 6 16-Bit Counter Change Event with 1 (read) 06 (no range, or all) 129 response 17, 28 (index)
23 0 Frozen Counter Event (Variation 0 1 (read) 06 (no range, or all)
is used to request default variation) 07, 08 (limited qty)
23 1 32-Bit Frozen Counter Event 1 (read) 06 (no range, or all) 129 response 17, 28 (index)
(default - see 07, 08 (limited qty)
note 1)
23 2 16-Bit Frozen Counter Event 1 (read) 06 (no range, or all) 129 response 17, 28 (index)
23 5 32-Bit Frozen Counter Event with 1 (read) 06 (no range, or all) 129 response 17, 28 (index)
23 6 16-Bit Frozen Counter Event with 1 (read) 06 (no range, or all) 129 response 17, 28 (index)
30 0 Analog Input - Any Variation 1 (read) 00, 01 (start-stop)
17, 27, 28 (index)
30 1 32-Bit Analog Input 1 (read) 00, 01 (start-stop) 129 response 00, 01 (start-stop)
17, 27, 28 (index)
30 2 16-Bit Analog Input 1 (read) 00, 01 (start-stop) 129 response 00, 01 (start-stop)
17, 27, 28 (index)
30 3 32-Bit Analog Input without Flag 1 (read) 00, 01 (start-stop) 129 response 00, 01 (start-stop)
17, 27, 28 (index)
30 4 16-Bit Analog Input without Flag 1 (read) 00, 01 (start-stop) 129 response 00, 01 (start-stop)
17, 27, 28 (index)
30 5 Short floating point 1 (read) 00, 01 (start-stop) 129 response 00, 01 (start-stop)
17, 27, 28 (index)
32 0 Analog Change Event - Any 1 (read) 06 (no range, or all)
32 1 32-Bit Analog Change Event 1 (read) 06 (no range, or all) 129 response 17, 28 (index)
(default - see without Time 07, 08 (limited qty)
note 1)
32 2 16-Bit Analog Change Event 1 (read) 06 (no range, or all) 129 response 17, 28 (index)
without Time 07, 08 (limited qty)
32 3 32-Bit Analog Change Event with 1 (read) 06 (no range, or all) 129 response 17, 28 (index)
32 4 16-Bit Analog Change Event with 1 (read) 06 (no range, or all) 129 response 17, 28 (index)
220 P94V-TM-EN-5
Request Response
Object
Description (dec)
Number Number (hex)
32 5 Short floating point Analog Change 1 (read) 06 (no range, or all) 129 response 17, 28 (index)
Event without Time 07, 08 (limited qty)
32 7 Short floating point Analog Change 1 (read) 06 (no range, or all) 129 response 17, 28 (index)
Event with Time 07, 08 (limited qty)
34 0 Analog Input Deadband (Variation 0 1 (read) 00, 01 (start-stop)
is used to request default variation) 06 (no range, or all)
17, 27, 28 (index)
34 1 16 Bit Analog Input Deadband 1 (read) 00, 01 (start-stop) 129 response 00, 01 (start-stop)
17, 27, 28 (index)
2 (write) 00, 01 (start-stop)
17, 27, 28 (index)
34 2 32 Bit Analog Input Deadband 1 (read) 00, 01 (start-stop) 129 response 00, 01 (start-stop)
17, 27, 28 (index)
17, 27, 28 (index)
34 3 Short Floating Point Analog Input 1 (read) 00, 01 (start-stop) 129 response 00, 01 (start-stop)
Deadband 06 (no range, or all) 17, 28 (index - see note 2)
17, 27, 28 (index)
17, 27, 28 (index)
40 0 Analog Output Status (Variation 0 is 1 (read) 00, 01 (start-stop)
used to request default variation) 06 (no range, or all)
17, 27, 28 (index)
40 1 32-Bit Analog Output Status 1 (read) 00, 01 (start-stop) 129 response 00, 01 (start-stop)
17, 27, 28 (index)
40 2 16-Bit Analog Output Status 1 (read) 00, 01 (start-stop) 129 response 00, 01 (start-stop)
17, 27, 28 (index)
40 3 Short Floating Point Analog Output 1 (read) 00, 01 (start-stop) 129 response 00, 01 (start-stop)
Status 06 (no range, or all) 17, 28 (index - see note 2)
17, 27, 28 (index)
41 1 32-Bit Analog Output Block 3 (select) 17, 28 (index) 129 response echo of request
4 (operate) 27 (index)
5 (direct op)
6 (dir. op, noack)
41 2 16-Bit Analog Output Block 3 (select) 17, 28 (index) 129 response echo of request
4 (operate) 27 (index)
5 (direct op)
6 (dir. op, noack)
41 3 Short Floating Point Analog Output 3 (select) 17, 27, 28 (index) 129 response echo of request
Block 4 (operate)
5 (direct op)
6 (dir. op, noack)
1 1 (read) 07 (limited qty = 1) 129 response 07 (limited qty = 1)
50 (default - see Time and Date
note 1)
2 (write) 07 (limited qty = 1)
60 0 Not defined
60 1 Class 0 Data 1 (read) 06 (no range, or all)
P94V-TM-EN-5 221
Request Response
Object
Description (dec)
Number Number (hex)
70 0 File Event - Any Variation 1 (read) 06 (no range, or all)
70 2 File Authentication 29 (authenticate) 5b (free-format) 129 response 5B (free-format)
70 3 File Command 25 (open) 5b (free-format)
27 (delete)
70 4 File Command Status 26 (close) 5b (free-format) 129 response 5B (free-format)
30 (abort)
70 5 File Transfer 1 (read) 5b (free-format) 129 response 5B (free-format)
70 6 File Transfer Status 129 response 5B (free-format)
70 7 File Descriptor 28 (get file info) 5b (free-format) 129 response 5B (free-format)
80 1 Internal Indications 1 (read) 00, 01 (start-stop) 129 response 00, 01 (start-stop)
No Object (function code only) 13 (cold restart)
No Object (function code only) 14 (warm restart)
No Object (function code only) 23 (delay meas.)
Note:
A Default variation refers to the variation responded to when variation 0 is requested and/or in class 0, 1, 2, or 3
scans.
Note:
For static (non-change-event) objects, qualifiers 17 or 28 are only responded to when a request is sent with qualifiers
17 or 28, respectively. Otherwise, static object requests sent with qualifiers 00, 01, 06, 07, or 08, will be responded to
with qualifiers 00 or 01. For change-event objects, qualifiers 17 or 28 are always responded to.
5.3.8.3 DNP3 INTERNAL INDICATIONS

The following table lists the DNP3.0 Internal Indications (IIN) and identifies those that are supported by the
device.
The IIN form an information element used to convey the internal states and diagnostic results of a device.
This information can be used by a receiving station to perform error recovery or other suitable functions. The
IIN is a two-octet field that follows the function code in all responses from the device. When a request cannot
be processed due to formatting errors or the requested data is not available, the IIN is always returned with
the appropriate bits set.
Bit Indication Description Supported
Octet 1
222 P94V-TM-EN-5
Bit Indication Description Supported

Set when a request is received with the destination address of the all stations
address (6553510). It is cleared after the next response (even if a response to a
0 All stations message received global request is required). Yes
This IIN is used to let the master station know that a "broadcast" message was
received by the relay.
Set when data that has been configured as Class 1 data is ready to be sent to
the master.
1 Class 1 data available Yes
The master station should request this class data from the relay when this bit is
set in a response.
the master.
set in a response.
the master.
set in a response.
The relay requires time synchronization from the master station (using the Time
and Date object).
4 Time-synchronization required Yes
This IIN is cleared once the time has been synchronized. It can also be cleared
by explicitly writing a 0 into this bit of the Internal Indication object.
Set when some or all of the relays digital output points (Object 10/12) are in the
Local state. That is, the relays control outputs are NOT accessible through the
5 Local DNP protocol. No
This IIN is clear when the relay is in the Remote state. That is, the relays control
outputs are fully accessible through the DNP protocol.
Set when an abnormal condition exists in the relay. This IIN is only used when
6 Device in trouble the state cannot be described by a combination of one or more of the other IIN No
bits.
Set when the device software application restarts. This IIN is cleared when the
7 Device restart Yes
master station explicitly writes a 0 into this bit of the Internal Indications object.
Octet 2
0 Function code not implemented The received function code is not implemented within the relay. Yes
The relay does not have the specified objects or there are no objects assigned to
the requested class.
1 Requested object(s) unknown Yes
This IIN should be used for debugging purposes and usually indicates a
mismatch in device profiles or configuration problems.
Parameters in the qualifier, range or data fields are not valid or out of range. This
2 Out of range is a 'catch-all' for application request formatting errors. It should only be used for Yes
debugging purposes. This IIN usually indicates configuration problems.
Event buffer(s), or other application buffers, have overflowed. The master station
should attempt to recover as much data as possible and indicate to the user that
3 Buffer overflow Yes
there may be lost data. The appropriate error recovery procedures should be
initiated by the user.
The received request was understood but the requested operation is already
4 Already executing
executing.
Set to indicate that the current configuration in the relay is corrupt. The master
5 Bad configuration Yes
station may download another configuration to the relay.
6 Reserved Always returned as zero.
7 Reserved Always returned as zero.
P94V-TM-EN-5 223
5.3.8.4 DNP3 RESPONSE STATUS CODES

When the device processes Control Relay Output Block (Object 12) requests, it returns a set of status codes;
one for each point contained within the original request. The complete list of codes appears in the following
table:
Code
Identifier Name Description
Number
0 Success The received request has been accepted, initiated, or queued.
The request has not been accepted because the ‘operate’ message was received after the arm
1 Timeout timer (Select Before Operate) timed out.
The arm timer was started when the select operation for the same point was received.
The request has not been accepted because no previous matching ‘select’ request exists. (An
2 No select ‘operate’ message was sent to activate an output that was not previously armed with a matching
‘select’ message).
The request has not been accepted because there were formatting errors in the control request
3 Format error
(‘select’, ‘operate’, or ‘direct operate’).
4 Not supported The request has not been accepted because a control operation is not supported for this point.
The request has not been accepted because the control queue is full or the point is already
5 Already active
active.
6 Hardware error The request has not been accepted because of control hardware problems.
7 Local The request has not been accepted because local access is in progress.
8 Too many operations The request has not been accepted because too many operations have been requested.
9 Not authorized The request has not been accepted because of insufficient authorization.
127 Undefined The request not been accepted because of some other undefined reason.
Note:
Code numbers 10 through to 126 are reserved for future use.
5.3.9 DNP3 CONFIGURATION

communication protocol – in this case DNP3.0.
COMMUNICATIONS
RP1 Protocol
DNP3.0
4. Move down to the next cell (RP1 Address). This cell controls the DNP3.0 address of the IED. Up to 32
IEDs can be connected to one spur, therefore it is necessary for each IED to have a unique address
so that messages from the master control station are accepted by only one IED. DNP3.0 uses a
decimal number between 1 and 65519 for the Relay Address. It is important that no two IEDs have the
same address.
224 P94V-TM-EN-5
COMMUNICATIONS
RP1 Address
1
5. Move down to the next cell (RP1 Baud Rate). This cell controls the baud rate to be used. Six baud
rates are supported by the IED 1200 bps, 2400 bps, 4800 bps, 9600 bps, 19200 bps and 38400 bps.
Make sure that the baud rate selected on the IED is the same as that set on the master station.
COMMUNICATIONS
RP1 Baud rate
9600 bits/s
6. Move down to the next cell (RP1 Parity). This cell controls the parity format used in the data frames.
The parity can be set to be one of None, Odd or Even. Make sure that the parity format selected on
the IED is the same as that set on the master station.
COMMUNICATIONS
RP1 Parity
None
COMMUNICATIONS
RP1 PhysicalLink
Copper
8. Move down to the next cell (RP1 Time Sync). This cell affects the time synchronisation request from
the master by the IED. It can be set to enabled or disabled. If enabled it allows the DNP3.0
master to synchronise the time on the IED.
COMMUNICATIONS
RP1 Time Sync
Enabled
5.3.9.1 DNP3 CONFIGURATOR

A PC support package for DNP3.0 is available as part of the supplied settings application software (MiCOM
S1 Agile) to allow configuration of the device's DNP3.0 response. The configuration data is uploaded from
the device to the PC in a block of compressed format data and downloaded in a similar manner after
modification. The new DNP3.0 configuration takes effect after the download is complete. To restore the
default configuration at any time, from the CONFIGURATION column, select the Restore Defaults cell then
select All Settings.
In MiCOM S1 Agile, the DNP3.0 data is shown in three main folders, one folder each for the point
configuration, integer scaling and default variation (data format). The point configuration also includes
screens for binary inputs, binary outputs, counters and analogue input configuration.
5.3.10 DNP3 UNSOLICITED REPORTING

In previous versions, DNP3 only supports data transmission based on poll requests from the master station.
From version 55 onwards, a new mode of transmission called Unsolicited Reporting is supported. This is a
P94V-TM-EN-5 225
mode of operation where the outstation spontaneously transmits a response without having received a
specific request for data. This mode is useful when the system has many outstations and the master requires
notification as soon as possible after a change occurs. Rather than waiting for a master station polling cycle,
the outstation transmits the change immediately. It is thus event driven rather than poll driven.
This feature requires a new group of settings, which are found under the DNP SETTINGS column (Courier
cell range 1B). These can be found in the settings tables available as an interactive PDF at the back of the
manual.
5.4 MODBUS
This section describes how the MODBUS standard is applied to the Px40 platform. It is not a description of
the standard itself. The level at which this section is written assumes that the reader is already familiar with
the MODBUS standard.
The MODBUS protocol is a master/slave protocol, defined and administered by the MODBUS Organization
For further information on MODBUS and the protocol specifications, please seethe Modbus web site
(www.modbus.org).

Only one option is available for connecting MODBUS
● Rear serial port 1 - for permanent SCADA connection via EIA(RS)485
The MODBUS interface uses ‘RTU’ mode communication rather than ‘ASCII’ mode as this provides more
efficient use of the communication bandwidth. This mode of communication is defined by the MODBUS
standard.
as MiCOM Agile.
When using a serial interface, the data format is: 1 start bit, 8 data bits, 1 parity bit with 1 stop bit, or 2 stop
bits (a total of 11 bits per character).
5.4.2 MODBUS FUNCTIONS

The following MODBUS function codes are supported:
● 01: Read Coil Status
● 02: Read Input Status
● 03: Read Holding Registers
● 04: Read Input Registers
● 06: Preset Single Register
● 08: Diagnostics
● 11: Fetch Communication Event Counter
● 12: Fetch Communication Event Log
● 16: Preset Multiple Registers 127 max
These are interpreted by the MiCOM IED in the following way:

● 01: Read status of output contacts (0xxxx addresses)
● 02: Read status of opto inputs (1xxxx addresses)
● 03: Read setting values (4xxxx addresses)
● 04: Read measured values (3xxxx addresses
● 06: Write single setting value (4xxxx addresses)
● 16: Write multiple setting values (4xxxx addresses)
226 P94V-TM-EN-5
5.4.3 RESPONSE CODES
MCode MODBUS Description MiCOM Interpretation

01 Illegal Function Code The function code transmitted is not supported by the slave.
The start data address in the request is not an allowable value. If any of the addresses in
the range cannot be accessed due to password protection then all changes within the
02 Illegal Data Address request are discarded and this error response will be returned.
Note: If the start address is correct but the range includes non–implemented addresses this
response is not produced.
A value referenced in the data field transmitted by the master is not within range. Other
03 Illegal Value
values transmitted within the same packet will be executed if inside range.
The write command cannot be implemented due to the database being locked by another
06 Slave Device Busy interface. This response is also produced if the software is busy executing a previous
request.
5.4.4 REGISTER MAPPING

The device supports the following memory page references:
● Memory Page: Interpretation
● 0xxxx: Read and write access of the output relays
● 1xxxx: Read only access of the opto inputs
● 3xxxx: Read only access of data
● 4xxxx: Read and write access of settings
where xxxx represents the addresses available in the page (0 to 9999).

A complete map of the MODBUS addresses supported by the device is contained in the relevant menu
database, which is available on request.
Note:
The "extended memory file" (6xxxx) is not supported.
Note:
MODBUS convention is to document register addresses as ordinal values whereas the actual protocol addresses are
literal values. The MiCOM relays begin their register addresses at zero. Therefore, the first register in a memory page
is register address zero. The second register is register address 1 and so on.
Note:
The page number notation is not part of the address.
5.4.5 EVENT EXTRACTION

The device supports two methods of event extraction providing either automatic or manual extraction of the
stored event, fault, and maintenance records.
5.4.5.1 AUTOMATIC EVENT RECORD EXTRACTION

The automatic extraction facilities allow all types of record to be extracted as they occur. Event records are
extracted in sequential order including any fault or maintenance data that may be associated with the event.
The MODBUS master can determine whether the device has any events stored that have not yet been
extracted. This is performed by reading the status register 30001 (G26 data type). If the event bit of this
P94V-TM-EN-5 227
register is set then the device has non-extracted events available. To select the next event for sequential
extraction, the master station writes a value of 1 to the record selection register 40400 (G18 data type). The
event data together with any fault/maintenance data can be read from the registers specified below. Once
the data has been read, the event record can be marked as having been read by writing a value of '2' to
register 40400.
5.4.5.2 MANUAL EVENT RECORD EXTRACTION

There are three registers available to manually select stored records and three read-only registers allowing
the number of stored records to be determined.
● 40100: Select Event
● 40101: Select Fault
● 40102: Select Maintenance Record
For each of the above registers a value of 0 represents the most recent stored record. The following
registers can be read to indicate the numbers of the various types of record stored.
● 30100: Number of stored records
● 30101: Number of stored fault records
● 30102: Number of stored maintenance records
Each fault or maintenance record logged causes an event record to be created. If this event record is
selected, the additional registers allowing the fault or maintenance record details will also become populated.
5.4.5.3 RECORD DATA

The location and format of the registers used to access the record data is the same whether they have been
selected using either automatic or manual extraction.
MODBUS
Event Description Length Comments
Address
Time and Date 30103 4 See G12 data type description
Event Type 30107 1 See G13 data type description
Nature of value depends on event type. This will contain the status as a binary flag
Event Value 30108 2
for contact, opto-input, alarm, and protection events.
This indicates the MODBUS register address where the change occurred.
Alarm 30011
Relays 30723
Optos 30725
MODBUS Address 30110 1
Protection events – like the relay and opto addresses this will map onto the
MODBUS address of the appropriate DDB status register depending on which bit of
the DDB the change occurred. These will range from 30727 to 30785.
For platform events, fault events and maintenance events the default is 0.
This register will contain the DDB ordinal for protection events or the bit number for
Event Index 30111 1 alarm events. The direction of the change will be indicated by the most significant
bit; 1 for 0 – 1 change and 0 for 1 – 0 change.
0 means that there is no additional data.
1 means fault record data can be read from 30113 to 30199 (number of registers
Additional Data Present 30112 1
depends on the product).
2 means maintenance record data can be read from 30036 to 30039.
If a fault record or maintenance record is directly selected using the manual mechanism then the data can be
read from the register ranges specified above. The event record data in registers 30103 to 30111 will not be
available.
228 P94V-TM-EN-5
It is possible using register 40401(G6 data type) to independently clear the stored relay event/fault and
maintenance records. This register also provides an option to reset the device indications, which has the
same effect on the relay as pressing the clear key within the alarm viewer using the HMI panel menu.
5.4.6 DISTURBANCE RECORD EXTRACTION

The IED provides facilities for both manual and automatic extraction of disturbance records.
Records extracted over MODBUS from Px40 devices are presented in COMTRADE format. This involves
extracting an ASCII text configuration file and then extracting a binary data file.
Each file is extracted by reading a series of data pages from the IED The data page is made up of 127
registers, giving a maximum transfer of 254 bytes per page.
The following set of registers is presented to the master station to support the extraction of uncompressed
disturbance records:
MODBUS registers
MODBUS Register Name Description
Provides the status of the relay as bit flags:
b0: Out of service
b1: Minor self test failure
b2: Event
b3: Time synchronization
3x00001 Status register b4: Disturbance
b5: Fault
b6: Trip
b7: Alarm
b8 to b15: Unused
A ‘1’ on b4 indicates the presence of a disturbance
Indicates the total number of disturbance records currently stored in the
3x00800 No of stored disturbances
relay, both extracted and non-extracted.
Indicates the unique identifier value for the oldest disturbance record stored
Unique identifier of the oldest in the relay. This is an integer value used in conjunction with the ‘Number of
3x00801
disturbance record stored disturbances’ value to calculate a value for manually selecting
records.
This register is used to manually select disturbance records. The values
written to this cell are an offset of the unique identifier value for the oldest
Manual disturbance record
4x00250 record. The offset value, which ranges from 0 to the Number of stored
selection register
disturbances - 1, is added to the identifier of the oldest record to generate
the identifier of the required record.
This register is used during the extraction process and has a number of
commands. These are:
b0: Select next event
Record selection command b1: Accept event
4x00400
register b2: Select next disturbance record
b3: Accept disturbance record
b4: Select next page of disturbance data
b5: Select data file
3x00930 - 3x00933 Record time stamp These registers return the timestamp of the disturbance record.
This register informs the master station of the number of registers in the
3x00802 No of registers in data page
data page that are populated.
These 127 registers are used to transfer data from the relay to the master
3x00803 - 3x00929 Data page registers
station. They are 16-bit unsigned integers.
P94V-TM-EN-5 229
MODBUS Register Name Description

The disturbance record status register is used during the extraction process
3x00934 Disturbance record status register to indicate to the master station when data is ready for extraction. See next
table.
This is used to select the required data file format. This is reserved for
4x00251 Data file format selection
future use.
Note:
Register addresses are provided in reference code + address format. E.g. 4x00001 is reference code 4x, address 1
(which is specified as function code 03, address 0x0000 in the MODBUS specification).
The disturbance record status register will report one of the following values:
Disturbance record states

State Description
This will be the state reported when no record is selected; such as after power on or after a record has been
Idle
marked as extracted.
Busy The relay is currently processing data.
Page ready The data page has been populated and the master station can now safely read the data.
Configuration complete All of the configuration data has been read without error.
Record complete All of the disturbance data has been extracted.
An error occurred during the extraction process where the disturbance being extracted was overwritten by a
Disturbance overwritten
new record.
An attempt was made by the master station to automatically select the next oldest non-extracted disturbance
No non-extracted disturbances
when all records have been extracted.
Not a valid disturbance An attempt was made by the master station to manually select a record that did not exist in the relay.
Command out of sequence The master station issued a command to the relay that was not expected during the extraction process.
5.4.6.1 MANUAL EXTRACTION PROCEDURE

The procedure used to extract a disturbance manually is shown below. The manual method of extraction
does not allow for the acceptance of disturbance records.
230 P94V-TM-EN-5
Start
Get number of
disturbances from
register 3x00800
No Are there Yes

disturbances?
Get oldest disturbance ID

from register 3x00801
Select required disturbance

by writing the ID value of
the required record to
register 4x00250
Get disturbance time stamp

Extract disturbance data from registers 3x00930 –
3x00933
End
V01003
Figure 84: Manual selection of a disturbance record
5.4.6.2 AUTOMATIC EXTRACTION PROCEDURE

There are two methods that can be used for automatically extracting disturbances:
Method 1
Method 1 is simpler and is better at extracting single disturbance records (when the disturbance recorder is
polled regularly).
P94V-TM-EN-5 231
Start
Read status word from

register 3x0001
Is disturbance bit No
(bit 4) set?
Yes
Error
Select next oldest non-

extracted record by writing
0x04 to register 4x00400
Send command to accept

Extract disturbance data record by writing 0x08 to
register 4x00400
V01004
Figure 85: Automatic selection of disturbance record - method 1
Method 2
Method 2 is more complex to implement but is more efficient at extracting large quantities of disturbance
records. This may be useful when the disturbance recorder is polled only occasionally and therefore may
have many stored records.
232 P94V-TM-EN-5
Start
FirstTime = True
Read status word from

register 3x0001
FirstTime = True
Is disturbance bit
(bit 4) set? No
Yes
Select next oldest non- Yes Is FirstTime =

extracted record by writing
True?
0x04 to register 4x00400
No
FirstTime = False
Send command to accept

Error and select next record by
FirstTime = True Extract disturbance record
writing 0x0C to register
4x00400
V01005
Figure 86: Automatic selection of disturbance record - method 2
5.4.6.3 EXTRACTING THE DISTURBANCE DATA

The extraction of the disturbance record is a two-stage process that involves extracting the configuration file
first and then the data file. first the configuration file must be extracted, followed by the data file:
P94V-TM-EN-5 233
Extracting the Comtrade configuration file
Start
(Record selected)
To parent
procedure
Read DR status value Busy
Check DR status
for error
conditions or Error
Busy status
Configuration complete What is the value Other

of DR status?
Page ready
Read number of
registers in data page
from address 3x00802
Read data page

registers starting at
3x00803
Store data to ASCII file Send ‘Get next page of

Configuration complete
in the order the data data’ to register
(begin extracting data were received 4x00400
file)
V01006
Figure 87: Configuration file extraction
234 P94V-TM-EN-5
Extracting the comtrade data file
Start
(Configuration
complete)
Send ‘Select Data File’

to register 4x00400
To parent
procedure
Read DR status value Busy
Check DR status
for error
conditions or Error
Busy status
Record complete What is the value Other

of DR status?
Page ready
Read number of
registers in data page
from address 3x00802
Read data page

registers starting at
3x00803
Record complete (mark Store data to binary file Send ‘Get next page of
record as extracted; in the order the data data’ to register
automatic extraction only) were received 4x00400
V01007
Figure 88: Data file extraction

During the extraction of the COMTRADE files, an error may occur, which will be reported on the DR Status
register 3x00934. In this case, you must take action to re-start the record extraction or to abort according to
the table below.
Value State Description
This will be the state reported when no record is selected; such as after power on or after a record has
0 Idle
been marked as extracted.
1 Busy The relay is currently processing data.
2 Page ready The data page has been populated and the master station can now safely read the data.
3 Configuration complete All of the configuration data has been read without error.
4 Record complete All of the disturbance data has been extracted.
An error occurred during the extraction process where the disturbance being extracted was overwritten by
5 Disturbance overwritten
a new record.
P94V-TM-EN-5 235
Value State Description

No unextracted An attempt was made by the master station to automatically select the next oldest unextracted disturbance
6
disturbances when all records have been extracted.
7 Not a valid disturbance An attempt was made by the master station to manually select a record that did not exist in the relay.
Command out of
8 The master station issued a command to the relay that was not expected during the extraction process.
sequence
5.4.7 SETTING CHANGES

All the IED settings are 4xxxx page addresses. The following points should be noted when changing
settings:
● Settings implemented using multiple registers must be written to using a multi-register write operation.
● The first address for a multi-register write must be a valid address. If there are unmapped addresses
within the range being written to, the data associated with these addresses will be discarded.
● If a write operation is performed with values that are out of range, the illegal data response will be
produced. Valid setting values within the same write operation will be executed.
● If a write operation is performed, which attempts to change registers requiring a higher level of
password access than is currently enabled then all setting changes in the write operation will be
discarded.
5.4.8 PASSWORD PROTECTION

The following registers are available to control password protection:
Function MODBUS Registers
Password entry 4x00001 to 4x00002 and 4x20000 to 4x20003
Setting to change password level 1 (4 character) 4x00023 to 4x00024
Setting to change password level 1 (8 character) 4x20008 to 4x20011
Setting to change password level 2 4x20016 to 4x20019
Setting to change password level 3 4x20024 to 4x20027
Can be read to indicate current access level 3x00010
5.4.9 PROTECTION AND DISTURBANCE RECORDER SETTINGS

Setting changes to either of these areas are stored in a scratchpad area and will not be used by the IED
unless confirmed. Register 40405 can be used either to confirm or abort the setting changes within the
scratchpad area.
The IED supports four groups of protection settings. The MODBUS addresses for each of the four groups
are repeated within the following address ranges.
● Group 1: 4x1000 - 4x2999
● Group 2: 4x3000 - 4x4999
● Group 3: 4x5000 - 4x6999
● Group 4: 4x7000 - 4x8999
In addition to the basic editing of the protection setting groups, the following functions are provided:
● Default values can be restored to a setting group or to all of the relay settings by writing to register
4x0402.
● It is possible to copy the contents of one setting group to another by writing the source group to
register 40406 and the target group to 4x0407.
236 P94V-TM-EN-5
The setting changes performed by either of the two operations defined above are made to the scratchpad
area. These changes must be confirmed by writing to register 4x0405.
The active protection setting groups can be selected by writing to register 40404. An illegal data response
will be returned if an attempt is made to set the active group to one that has been disabled.

The date-time data type G12 allows real date and time information to be conveyed to a resolution of 1 ms.
The structure of the data type is compliant with the IEC 60870-5-4 Binary Time 2a format.
The seven bytes of the date/time frame are packed into four 16-bit registers and are transmitted in sequence
starting from byte 1. This is followed by a null byte, making eight bytes in total.
Register data is usually transmitted starting with the highest-order byte. Therefore byte 1 will be in the high-
order byte position followed by byte 2 in the low-order position for the first register. The last register will
contain just byte 7 in the high order position and the low order byte will have a value of zero.
G12 date & time data type structure

Bit Position
Byte 7 6 5 4 3 2 1 0
1 m7 m6 m5 m4 m3 m2 m1 m0
2 m15 m14 m13 m12 m11 m10 m9 m8
3 IV R I5 I4 I3 I2 I1 I0
4 SU R R H4 H3 H2 H1 H0
5 W2 W1 W0 D4 D3 D2 D1 D0
6 R R R R M3 M2 M1 M0
7 R Y6 Y5 Y4 Y3 Y2 Y1 Y0
Key to table:
● m = milliseconds: 0 to 59,999
● I = minutes: 0 to 59
● H = hours: 0 to 23
● W = day of the week: 1 to 7 starting from Monday
● D = day of the month: 1 to 31
● M = month of the year: 1 to 12 starting from January
● Y = year of the century: 0 to 99
● R = reserved: 0
● SU = summertime: 0 = GMT, 1 = summertime
● IV = invalid: 0 = invalid value, 1 = valid value
Since the range of the data type is only 100 years, the century must be deduced. The century is calculated
as the one that will produce the nearest time value to the current date. For example: 30-12-99 is 30-12-1999
when received in 1999 & 2000, but is 30-12-2099 when received in 2050. This technique allows 2 digit years
to be accurately converted to 4 digits in a ±50 year window around the current date.
The invalid bit has two applications:
● It can indicate that the date-time information is considered inaccurate, but is the best information
available.
● It can indicate that the date-time information is not available.
P94V-TM-EN-5 237
The summertime bit is used to indicate that summertime (day light saving) is being used and, more
importantly, to resolve the alias and time discontinuity which occurs when summertime starts and ends. This
is important for the correct time correlation of time stamped records.
The day of the week field is optional and if not calculated will be set to zero.
The concept of time zone is not catered for by this data type and hence by the relay. It is up to the end user
to determine the time zone. Normal practice is to use UTC (universal co-ordinated time).
5.4.11 POWER AND ENERGY MEASUREMENT DATA FORMATS

The power and energy measurements are available in two data formats:
Data Type G29: an integer format using 3 registers
Data Type G125: a 32 bit floating point format using 2 registers
The G29 registers are listed in the first part of the MEASUREMENTS 2 column of the Courier database. The
G125 equivalents appear at the end of the MEASUREMENTS 2 column.
Data type G29

Data type G29 consists of three registers:
The first register is the per unit (or normalised) power or energy measurement. It is a signed 16 bit quantity.
This register is of Data Type G28.
The second and third registers contain a multiplier to convert the per unit value to a real value. These are
unsigned 32-bit quantities. These two registers together are of Data Type G27.
Thee overall power or energy value conveyed by the G29 data type is therefore G29 = G28 x G27.
The IED calculates the G28 per unit power or energy value as:
G28 = (measured secondary quantity/CT secondary)(110V/(VT secondary).
Since data type G28 is a signed 16-bit integer, its dynamic range is constrained to +/- 32768. You should
take this limitation into consideration for the energy measurements, as the G29 value will saturate a long
time before the equivalent G125 does.
The associated G27 multiplier is calculated as:
G27 = (CT primary)(VT primary/110V) when primary value measurements are selected
and
G27 = (CT secondary)(VT secondary/110V) when secondary value measurements are selected.
Due to the required truncations from floating point values to integer values in the calculations of the G29
component parts and its limited dynamic range, we only recommend using G29 values when the MODBUS
master cannot deal with the G125 IEEE754 floating point equivalents.
Note:
The G29 values must be read in whole multiples of three registers. It is not possible to read the G28 and G27 parts
with separate read commands.
Example of Data Type G29

Assuming the CT/VT configurations are as follows:
● Main VT Primary 6.6 kV
● Main VT Secondary 110 V
● Phase CT Primary 3150 A
● Phase CT Secondary 1 A
238 P94V-TM-EN-5
The Three-phase Active Power displayed on the measurement panel on the front display of the IED would
be 21.94 MW
The registers related to the Three-phase Active Power are: 3x00327, 3x00328, 3x00329
Register Address Data read from these registers Format of the data
3x00327 116 G28
3x00328 2 G27
3x00329 57928 G27
The Equivalent G27 value = [216 * Value in the address 3x00328 + Value in the address 3x00329] = 216*2
+ 57928 = 189000
The Equivalent value of power G29 = G28 * Equivalent G27 =116 * 189000 =21.92 MW
Note:
The above calculated value (21.92 MW) is same as the power value measured on the front panel display.
Data type G125

Data type G125 is a short float IEEE754 floating point format, which occupies 32 bits in two consecutive
registers. The high order byte of the format is in the first (low order) register and the low order byte in the
second register.
The value of the G125 measurement is as accurate as the IED's ability to resolve the measurement after it
has applied the secondary or primary scaling factors. It does not suffer from the truncation errors or dynamic
range limitations associated with the G29 data format.
5.4.12 MODBUS CONFIGURATION

3. Move to the first cell down (RP1 protocol). This is a non settable cell, which shows the chosen
communication protocol – in this case Modbus.
COMMUNICATIONS
RP1 Protocol
Modbus
4. Move down to the next cell (RP1 Address). This cell controls the Modbus address of the IED. Up to
32 IEDs can be connected to one spur, therefore it is necessary for each IED to have a unique
address so that messages from the master control station are accepted by only one IED. Modbus
uses a decimal number between 1 and 247 for the Relay Address. It is important that no two IEDs
have the same address.
P94V-TM-EN-5 239
COMMUNICATIONS
RP1 Address
1
5. Move down to the next cell (RP1 InactivTimer). This cell controls the inactivity timer. The inactivity
timer controls how long the IED waits without receiving any messages on the rear port before it reverts
to its default state, including revoking any password access that was enabled. For the rear port this
can be set between 1 and 30 minutes.
COMMUNICATIONS
RP1 Inactivtimer
10.00 mins
6. Move down to the next cell (RP1 Baud Rate). This cell controls the baud rate to be used. Six baud
rates are supported by the IED 1200 bits/s, 2400 bits/s, 4800 bits/s, 9600 bits/s, 19200 bits/s and
38400 bits/s. Make sure that the baud rate selected on the IED is the same as that set on the master
station.
COMMUNICATIONS
RP1 Baud rate
9600 bits/s
7. Move down to the next cell (RP1 Parity). This cell controls the parity format used in the data frames.
The parity can be set to be one of None, Odd or Even. Make sure that the parity format selected on
the IED is the same as that set on the master station.
COMMUNICATIONS
RP1 Parity
None
8. Move down to the next cell (Modbus IEC Time). This cell controls the order in which the bytes of
information are transmitted. There is a choice of Standard or Reverse. When Standard is selected
the time format complies with IEC 60870-5-4 requirements such that byte 1 of the information is
transmitted first, followed by bytes 2 through to 7. If Reverse is selected the transmission of
information is reversed.
COMMUNICATIONS
Modbus IEC Time
Standard
5.5 IEC 61850

This section describes how the IEC 61850 standard is applied to Alstom Grid products. It is not a description
of the standard itself. The level at which this section is written assumes that the reader is already familiar
with the IEC 61850 standard.
IEC 61850 is the international standard for Ethernet-based communication in substations. It enables
integration of all protection, control, measurement and monitoring functions within a substation, and
additionally provides the means for interlocking and inter-tripping. It combines the convenience of Ethernet
with the security that is so essential in substations today.
240 P94V-TM-EN-5
There are two editions of IEC 61850; IEC 61850 edition 1 and IEC 61850 edition 2. The edition which this
product supports depends on your exact model. An additional section for edition 2 models is documented
later in this chapter if applicable.
5.5.1 BENEFITS OF IEC 61850

The standard provides:
● Standardised models for IEDs and other equipment within the substation
● Standardised communication services (the methods used to access and exchange data)
● Standardised formats for configuration files
● Peer-to-peer communication
The standard adheres to the requirements laid out by the ISO OSI model and therefore provides complete
vendor interoperability and flexibility on the transmission types and protocols used. This includes mapping of
data onto Ethernet, which is becoming more and more widely used in substations, in favour of RS485. Using
Ethernet in the substation offers many advantages, most significantly including:
● Ethernet allows high-speed data rates (currently 100 Mbps, rather than tens of kbps or less used by
most serial protocols)
● Ethernet provides the possibility to have multiple clients
● Ethernet is an open standard in every-day use
● There is a wide range of Ethernet-compatible products that may be used to supplement the LAN
installation (hubs, bridges, switches)
5.5.2 IEC 61850 INTEROPERABILITY

A major benefit of IEC 61850 is interoperability. IEC 61850 standardizes the data model of substation IEDs,
which allows interoperability between products from multiple vendors.
An IEC 61850-compliant device may be interoperable, but this does not mean it is interchangeable. You
cannot simply replace a product from one vendor with that of another without reconfiguration. However the
terminology is pre-defined and anyone with prior knowledge of IEC 61850 should be able to integrate a new
device very quickly without having to map all of the new data. IEC 61850 brings improved substation
communications and interoperability to the end user, at a lower cost.
5.5.3 THE IEC 61850 DATA MODEL

The data model of any IEC 61850 IED can be viewed as a hierarchy of information, whose nomenclature
and categorization is defined and standardized in the IEC 61850 specification.
P94V-TM-EN-5 241
Data Attributes
stVal q t PhA PhB PhC
Data Objects
Pos A
Logical Nodes : 1 to n
LN1: XCBR LN2: MMXU
Logical Device : IEDs 1 to n
Physical Device (network address)
V01008
Figure 89: Data model layers in IEC 61850

The levels of this hierarchy can be described as follows:
Data Frame format

Layer Description
Identifies the actual IED within a system. Typically the device’s name or IP address can be used (for
Physical Device
example Feeder_1 or 10.0.0.2.
Identifies groups of related Logical Nodes within the Physical Device. For the MiCOM IEDs, 5 Logical
Logical Device
Devices exist: Control, Measurements, Protection, Records, System.
Identifies the major functional areas within the IEC 61850 data model. Either 3 or 6 characters are used
as a prefix to define the functional group (wrapper) while the actual functionality is identified by a 4
Wrapper/Logical Node Instance character Logical Node name suffixed by an instance number.
For example, XCBR1 (circuit breaker), MMXU1 (measurements), FrqPTOF2 (overfrequency protection,
stage 2).
This next layer is used to identify the type of data you will be presented with. For example, Pos (position)
Data Object
of Logical Node type XCBR.
This is the actual data (measurement value, status, description, etc.). For example, stVal (status value)
Data Attribute
indicating actual position of circuit breaker for Data Object type Pos of Logical Node type XCBR.
5.5.4 IEC 61850 IN MICOM IEDS

IEC 61850 is implemented by use of a separate Ethernet card. This Ethernet card manages the majority of
the IEC 61850 implementation and data transfer to avoid any impact on the performance of the protection
functions.
To communicate with an IEC 61850 IED on Ethernet, it is necessary only to know its IP address. This can
then be configured into either:
● An IEC 61850 client (or master), for example a bay computer (MiCOM C264)
● An HMI
● An MMS browser, with which the full data model can be retrieved from the IED, without any prior
knowledge of the IED
242 P94V-TM-EN-5
The IEC 61850 compatible interface standard provides capability for the following:
● Read access to measurements
● Refresh of all measurements at the rate of once per second.
● Generation of non-buffered reports on change of status or measurement
● SNTP time synchronization over an Ethernet link. (This is used to synchronize the IED's internal real
time clock.
● GOOSE peer-to-peer communication
● Disturbance record extraction by file transfer. The record is extracted as an ASCII format COMTRADE
file
● Controls (Direct and Select Before Operate)
Note:
Setting changes are not supported in the current IEC 61850 implementation. Currently these setting changes are
carried out using the settings application software.
5.5.5 IEC 61850 DATA MODEL IMPLEMENTATION

The data model naming adopted in the IEDs has been standardised for consistency. Therefore the Logical
Nodes are allocated to one of the five Logical Devices, as appropriate.
The data model is described in the Model Implementation Conformance Statement (MICS) document, which
is available as a separate document.
5.5.6 IEC 61850 COMMUNICATION SERVICES IMPLEMENTATION

The IEC 61850 communication services which are implemented in the IEDs are described in the Protocol
Implementation Conformance Statement (PICS) document, which is available as a separate document.
5.5.7 IEC 61850 PEER-TO-PEER (GOOSE) COMMUNICATIONS

The implementation of IEC 61850 Generic Object Oriented Substation Event (GOOSE) enables faster
communication between IEDs offering the possibility for a fast and reliable system-wide distribution of input
and output data values. The GOOSE model uses multicast services to deliver event information. Multicast
messaging means that messages are sent to selected devices on the network. The receiving devices can
specifically accept frames from certain devices and discard frames from the other devices. It is also known
as a publisher-subscriber system. When a device detects a change in one of its monitored status points it
publishes a new message. Any device that is interested in the information subscribes to the data it contains.
5.5.8 MAPPING GOOSE MESSAGES TO VIRTUAL INPUTS

Each GOOSE signal contained in a subscribed GOOSE message can be mapped to any of the virtual inputs
within the PSL. The virtual inputs allow the mapping to internal logic functions for protection control, directly
to output contacts or LEDs for monitoring.
An IED can subscribe to all GOOSE messages but only the following data types can be decoded and
mapped to a virtual input:
● BOOLEAN
● BSTR2
● INT16
● INT32
● INT8
P94V-TM-EN-5 243
● UINT16
● UINT32
● UINT8
5.5.8.1 IEC 61850 GOOSE CONFIGURATION

All GOOSE configuration is performed using the IEC 61850 Configurator tool available in the MiCOM S1
Agile software application.
All GOOSE publishing configuration can be found under the GOOSE Publishing tab in the configuration
editor window. All GOOSE subscription configuration parameters are under the External Binding tab in the
configuration editor window.
Settings to enable GOOSE signalling and to apply Test Mode are available using the HMI.
5.5.9 ETHERNET FUNCTIONALITY

IEC 61850 Associations are unique and made between the client and server. If Ethernet connectivity is lost
for any reason, the associations are lost, and will need to be re-established by the client. The IED has a
TCP_KEEPALIVE function to monitor each association, and terminate any which are no longer active.
The IED allows the re-establishment of associations without disruption of its operation, even after its power
has been removed. As the IED acts as a server in this process, the client must request the association.
Uncommitted settings are cancelled when power is lost, and reports requested by connected clients are
reset. The client must re-enable these when it next creates the new association to the IED.
5.5.9.1 ETHERNET DISCONNECTION

IEC 61850 Associations are unique and made between the client and server. If Ethernet connectivity is lost
for any reason, the associations are lost, and will need to be re-established by the client. The IED has a
TCP_KEEPALIVE function to monitor each association, and terminate any which are no longer active.
5.5.9.2 LOSS OF POWER

The IED allows the re-establishment of associations without disruption of its operation, even after its power
has been removed. As the IED acts as a server in this process, the client must request the association.
Uncommitted settings are cancelled when power is lost, and reports requested by connected clients are
reset. The client must re-enable these when it next creates the new association to the IED.
5.5.10 IEC 61850 CONFIGURATION

You cannot configure the device for IEC 61850 edition 1 using the HMI panel on the product. For this you
must use the IEC 61850 Configurator, which is part of the settings application software. If the device is
compatible with edition 2, however, you can configure it with the HMI. To configure IEC61850 edition 2 using
the HMI, you must first enable the IP From HMI setting, after which you can set the media (copper or fibre),
IP address, subnet mask and gateway address.
IEC 61850 allows IEDs to be directly configured from a configuration file. The IED’s system configuration
capabilities are determined from an IED Capability Description file (ICD), supplied with the product. By using
ICD files from the products to be installed, you can design, configure and test (using simulation tools), a
substation’s entire protection scheme before the products are installed into the substation.
To help with this process, the settings application software provides an IEC 61850 Configurator tool, which
allows the pre-configured IEC 61850 configuration file to be imported and transferred to the IED. As well as
this, you can manually create configuration files for all products, based on their original IED capability
description (ICD file).
244 P94V-TM-EN-5
Other features include:

● The extraction of configuration data for viewing and editing.
● A sophisticated error checking sequence to validate the configuration data before sending to the IED.
Note:
Some configuration data is available in the IEC61850 CONFIG. column, allowing read-only access to basic
configuration data.
5.5.10.1 IEC 61850 CONFIGURATION BANKS

There are two configuration banks:
● Active Configuration Bank
● Inactive Configuration Bank
Any new configuration sent to the IED is automatically stored in the inactive configuration bank, therefore not
immediately affecting the current configuration.
Following an upgrade, the IEC 61850 Configurator tool can be used to transmit a command, which
authorises activation of the new configuration contained in the inactive configuration bank. This is done by
switching the active and inactive configuration banks. The capability of switching the configuration banks is
also available using the IEC61850 CONFIG. column of the HMI.
The SCL Name and Revision attributes of both configuration banks are available in the IEC61850 CONFIG.
column of the HMI.
5.5.10.2 IEC 61850 NETWORK CONNECTIVITY

Configuration of the IP parameters and SNTP (Simple Network Time Protocol) time synchronisation
parameters is performed by the IEC 61850 Configurator tool. If these parameters are not available using an
SCL (Substation Configuration Language) file, they must be configured manually.
Every IP address on the Local Area Network must be unique. Duplicate IP addresses result in conflict and
must be avoided. Most IEDs check for a conflict on every IP configuration change and at power up and they
raise an alarm if an IP conflict is detected.
The IED can be configured to accept data from other networks using the Gateway setting. If multiple
networks are used, the IP addresses must be unique across networks.
P94V-TM-EN-5 245
6 READ ONLY MODE

With IEC 61850 and Ethernet/Internet communication capabilities, security has become an important issue.
For this reason, all relevant Alstom Grid IEDs have been adapted to comply with the latest cyber-security
standards.
In addition to this, a facility is provided which allows you to enable or disable the communication interfaces.
This feature is available for products using Courier, IEC 60870-5-103, or IEC 61850.
6.1 IEC 60870-5-103 PROTOCOL BLOCKING

If Read-Only Mode is enabled for RP1 or RP2 with IEC 60870-5-103, the following commands are blocked at
the interface:
● Write parameters (=change setting) (private ASDUs)
● General Commands (ASDU20), namely:
○ INF16 auto-recloser on/off
○ INF19 LED reset
○ Private INFs (for example: CB open/close, Control Inputs)
The following commands are still allowed:
● Poll Class 1 (Read spontaneous events)
● Poll Class 2 (Read measurands)
● GI sequence (ASDU7 'Start GI', Poll Class 1)
● Transmission of Disturbance Records sequence (ASDU24, ASDU25, Poll Class 1)
● Time Synchronisation (ASDU6)
● General Commands (ASDU20), namely:
○ INF23 activate characteristic 1
Note:
For IEC 60870-5-103, Read Only Mode function is different from the existing Command block feature.
6.2 COURIER PROTOCOL BLOCKING

If Read-Only Mode is enabled for RP1 or RP2 with Courier, the following commands are blocked at the
interface:
● Write settings
● All controls, including:Reset Indication (Trip LED)
○ Operate Control Inputs
○ CB operations
○ Auto-reclose operations
○ Reset demands
○ Clear event/fault/maintenance/disturbance records
○ Test LEDs & contacts
246 P94V-TM-EN-5

● Read settings, statuses, measurands
● Read records (event, fault, disturbance)
● Time Synchronisation
● Change active setting group
6.3 IEC 61850 PROTOCOL BLOCKING

If Read-Only Mode is enabled for the Ethernet interfacing with IEC 61850, the following commands are
blocked at the interface:
● All controls, including:
○ Enable/disable protection
○ Operate Control Inputs
○ CB operations (Close/Trip, Lock)
○ Reset LEDs
● Read statuses, measurands
● Generate reports
● Extract disturbance records
● Time synchronisation
● Change active setting group
6.4 READ-ONLY SETTINGS

The following settings are available for enabling or disabling Read Only Mode.
● RP1 Read Only
● RP2 Read Only (only for products that have RP2)
● NIC Read Only (where Ethernet is available)
6.5 READ-ONLY DDB SIGNALS

The remote read only mode is also available in the PSL using three dedicated DDB signals:
● RP1 Read Only
● RP2 Read Only (only for products that have RP2)
● NIC Read Only (where Ethernet is available)
Using the PSL, these signals can be activated by opto-inputs, Control Inputs and function keys if required.
P94V-TM-EN-5 247
7 TIME SYNCHRONISATION
In modern protection schemes it is necessary to synchronise the IED's real time clock so that events from
different devices can be time stamped and placed in chronological order. This is achieved in various ways
depending on the chosen options and communication protocols.
● Using the IRIG-B input (if fitted)
● Using the SNTP time protocol (for Ethernet IEC 61850 versions + DNP3 OE)
● By using the time synchronisation functionality inherent in the data protocols
7.1 DEMODULATED IRIG-B

IRIG stands for Inter Range Instrumentation Group, which is a standards body responsible for standardising
different time code formats. There are several different formats starting with IRIG-A, followed by IRIG-B and
so on. The letter after the "IRIG" specifies the resolution of the time signal in pulses per second (PPS). IRIG-
B, the one which we use has a resolution of 100 PPS. IRIG-B is used when accurate time-stamping is
required.
The following diagram shows a typical GPS time-synchronised substation application. The satellite RF signal
is picked up by a satellite dish and passed on to receiver. The receiver receives the signal and converts it
into time signal suitable for the substation network. IEDs in the substation use this signal to govern their
internal clocks and event recorders.
GPS time signal GPS satellite
IRIG-B
Satellite dish Receiver IED IED IED
V01040
Figure 90: GPS Satellite timing signal

The IRIG-B time code signal is a sequence of one second time frames. Each frame is split up into ten 100
mS slots as follows:
● Time-slot 1: Seconds
● Time-slot 2: Minutes
● Time-slot 3: Hours
● Time-slot 4: Days
● Time-slot 5 and 6: Control functions
● Time-slots 7 to 10: Straight binary time of day
The first four time-slots define the time in BCD (Binary Coded Decimal). Time-slots 5 and 6 are used for
control functions, which control deletion commands and allow different data groupings within the
synchronisation strings. Time-slots 7-10 define the time in SBS (Straight Binary Second of day).
248 P94V-TM-EN-5
7.1.1 DEMODULATED IRIG-B IMPLEMENTATION

All models have the option of accepting a demodulated IRIG-B input. This is a hardware option and it uses
the same terminals as the RP1 (or RP2 if applicable) inputs. You cannot have IRIG-B and a serial port in the
same slot. This means 20Te models cannot have both IRIG-B time synchronisation and serial
communications capability. For 30TE models however, it is possible to have IRIG-B in one slot and a serial
port in another, provided this option is ordered.
To set the device to use IRIG-B, use the setting IRIG-B Sync cell in the DATE AND TIME column. This can
be set to None (for no IRIG-B), RP1 (for the option where IRIG-B uses terminals 54 and 56) and RP2 (for the
option where IRIG-B uses terminals 82 and 84)
The IRIG-B status can be viewed in the IRIG-B Status cell in the DATE AND TIME column.
7.2 SNTP
SNTP is used to synchronise the clocks of computer systems over packet-switched, variable-latency data
networks, such as IP. SNTP can be used as the time synchronisation method for models using IEC 61850
over Ethernet.
The device is synchronised by the main SNTP server. This is achieved by entering the IP address of the
SNTP server into the IED using the IEC 61850 Configurator software described in the settings application
software manual. A second server is also configured with a different IP address for backup purposes.
This function issues an alarm when there is a loss of time synchronisation on the SNTP server. This could be
because there is no response or no valid clock signal.
The HMI menu does not contain any configurable settings relating to SNTP, as the only way to configure it is
using the IEC 61850 Configurator. However it is possible to view some parameters in the
COMMUNICATIONS column under the sub-heading SNTP parameters. Here you can view the SNTP server
addresses and the SNTP poll rate in the cells SNTP Server 1, SNTP Server 2 and SNTP Poll rate
respectively.
The SNTP time synchronisation status is displayed in the SNTP Status cell in the DATE AND TIME column.
7.3 TIME SYNCHRONSIATION USING THE COMMUNICATION PROTOCOLS

All communication protocols have in-built time synchronisation mechanisms. If an external time
synchronisation mechanism such as IRIG-B, SNTP, or IEEE 1588 PTP is not used to synchronise the
devices, the time synchronisation mechanism within the relevant serial protocol is used. The real time is
usually defined in the master station and communicated to the relevant IEDs via one of the rear serial ports
using the chosen protocol. It is also possible to define the time locally using settings in the DATE AND TIME
column.
The time synchronisation for each protocol is described in the relevant protocol description section.
P94V-TM-EN-5 249
250 P94V-TM-EN-5
CYBER-SECURITY
CHAPTER 12
Chapter 12 - Cyber-Security P94V
252 P94V-TM-EN-5
P94V Chapter 12 - Cyber-Security
1 OVERVIEW
In the past, substation networks were traditionally isolated and the protocols and data formats used to
transfer information between devices were often proprietary.
For these reasons, the substation environment was very secure against cyber-attacks. The terms used for
this inherent type of security are:
● Security by isolation (if the substation network is not connected to the outside world, it cannot be
accessed from the outside world).
● Security by obscurity (if the formats and protocols are proprietary, it is very difficult to interpret them).
The increasing sophistication of protection schemes, coupled with the advancement of technology and the
desire for vendor interoperability, has resulted in standardisation of networks and data interchange within
substations. Today, devices within substations use standardised protocols for communication. Furthermore,
substations can be interconnected with open networks, such as the internet or corporate-wide networks,
which use standardised protocols for communication. This introduces a major security risk making the grid
vulnerable to cyber-attacks, which could in turn lead to major electrical outages.
Clearly, there is now a need to secure communication and equipment within substation environments. This
chapter describes the security measures that have been put in place for our range of Intelligent Electronic
Devices (IEDs).
Note:
Cyber-security compatible devices do not enforce NERC compliance, they merely facilitate it. It is the responsibility of
the user to ensure that compliance is adhered to as and when necessary.

Overview 253
The Need for Cyber-Security 254
Standards 255
Cyber-Security Implementation 259
P94V-TM-EN-5 253
2 THE NEED FOR CYBER-SECURITY

Cyber-security provides protection against unauthorised disclosure, transfer, modification, or destruction of
information or information systems, whether accidental or intentional. To achieve this, there are several
security requirements:
● Confidentiality (preventing unauthorised access to information)
● Integrity (preventing unauthorised modification)
● Availability / Authentication (preventing the denial of service and assuring authorised access to
information)
● Non-repudiation (preventing the denial of an action that took place)
● Traceability / Detection (monitoring and logging of activity to detect intrusion and analyse incidents)
The threats to cyber-security may be unintentional (e.g. natural disasters, human error), or intentional (e.g.
cyber-attacks by hackers).
Good cyber-security can be achieved with a range of measures, such as closing down vulnerability
loopholes, implementing adequate security processes and procedures and providing technology to help
achieve this.
Examples of vulnerabilities are:
● Indiscretions by personnel (users keep passwords on their computer)
● Bad practice (users do not change default passwords, or everyone uses the same password to access
all substation equipment)
● Bypassing of controls (users turn off security measures)
● Inadequate technology (substation is not firewalled)
Examples of availability issues are:

● Equipment overload, resulting in reduced or no performance
● Expiry of a certificate preventing access to equipment
To help tackle these issues, standards organisations have produced various standards. Compliance with
these standards significantly reduces the threats associated with lack of cyber-security.
254 P94V-TM-EN-5
3 STANDARDS
There are several standards, which apply to substation cyber-security. The standards currently applicable to
Alstom Grid IEDs are NERC and IEEE1686.
Standard Country Description
NERC CIP (North American Electric Reliability
USA Framework for the protection of the grid critical Cyber Assets
Corporation)
BDEW (German Association of Energy and Water
Germany Requirements for Secure Control and Telecommunication Systems
Industries)
ICS oriented then Relevant for EPU completing existing standard
ANSI ISA 99 USA
and identifying new topics such as patch management
IEEE 1686 International International Standard for substation IED cyber-security capabilities
IEC 62351 International Power system data and Comm. protocol
ISO/IEC 27002 International Framework for the protection of the grid critical Cyber Assets
NIST SP800-53 (National Institute of Standards and
USA Complete framework for SCADA SP800-82and ICS cyber-security
Technology)
CPNI Guidelines (Centre for the Protection of National Clear and valuable good practices for Process Control and SCADA
UK
Infrastructure) security
3.1 NERC COMPLIANCE

The North American Electric Reliability Corporation (NERC) created a set of standards for the protection of
critical infrastructure. These are known as the CIP standards (Critical Infrastructure Protection). These were
introduced to ensure the protection of 'Critical Cyber Assets', which control or have an influence on the
reliability of North America’s electricity generation and distribution systems.
These standards have been compulsory in the USA for several years now. Compliance auditing started in
June 2007, and utilities face extremely heavy fines for non-compliance.
NERC CIP standards

CIP standard Description
CIP-002-1 Critical Cyber Assets Define and document the Critical Assets and the Critical Cyber Assets
Define and document the Security Management Controls required to protect the Critical
CIP-003-1 Security Management Controls
Cyber Assets
Define and Document Personnel handling and training required protecting Critical Cyber
CIP-004-1 Personnel and Training
Assets
Define and document logical security perimeters where Critical Cyber Assets reside.
CIP-005-1 Electronic Security
Define and document measures to control access points and monitor electronic access
Define and document Physical Security Perimeters within which Critical Cyber Assets
CIP-006-1 Physical Security
reside
Define and document system test procedures, account and password management,
CIP-007-1 Systems Security Management security patch management, system vulnerability, system logging, change control and
configuration required for all Critical Cyber Assets
Define and document procedures necessary when Cyber-security Incidents relating to
CIP-008-1 Incident Reporting and Response Planning
Critical Cyber Assets are identified
CIP-009-1 Recovery Plans Define and document Recovery plans for Critical Cyber Assets
P94V-TM-EN-5 255
3.1.1 CIP 002

CIP 002 concerns itself with the identification of:
● Critical assets, such as overhead lines and transformers
● Critical cyber assets, such as IEDs that use routable protocols to communicate outside or inside the
Electronic Security Perimeter; or are accessible by dial-up
Power utility responsibilities: Alstom Grid's contribution:

We can help the power utilities to create this asset register automatically.
Create the list of the assets
We can provide audits to list the Cyber assets
3.1.2 CIP 003

CIP 003 requires the implementation of a cyber-security policy, with associated documentation, which
demonstrates the management’s commitment and ability to secure its Critical Cyber Assets.
The standard also requires change control practices whereby all entity or vendor-related changes to
hardware and software components are documented and maintained.

We can help the power utilities to have access control to its critical assets by providing
centralized Access control.
To create a Cyber-security Policy
We can help the customer with its change control by providing a section in the
documentation where it describes changes affecting the hardware and software.
3.1.3 CIP 004

CIP 004 requires that personnel with authorized cyber access or authorized physical access to Critical Cyber
Assets, (including contractors and service vendors), have an appropriate level of training.

To provide appropriate training of its personnel We can provide cyber-security training
3.1.4 CIP 005

CIP 005 requires the establishment of an Electronic Security Perimeter (ESP), which provides:
● The disabling of ports and services that are not required
● Permanent monitoring and access to logs (24x7x365)
● Vulnerability Assessments (yearly at a minimum)
● Documentation of Network Changes

To monitor access to the ESP
To disable all ports not used in the IED
To perform the vulnerability assessments
To monitor and record all access to the IED
To document network changes
3.1.5 CIP 006

CIP 006 states that Physical Security controls, providing perimeter monitoring and logging along with robust
access controls, must be implemented and documented. All cyber assets used for Physical Security are
considered critical and should be treated as such:
256 P94V-TM-EN-5

Provide physical security controls and perimeter
monitoring.
Alstom Grid cannot provide additional help with this aspect.
Ensure that people who have access to critical cyber
assets don’t have criminal records.
3.1.6 CIP 007

CIP 007 covers the following points:
● Test procedures
● Ports and services
● Security patch management
● Antivirus
● Account management
● Monitoring
● An annual vulnerability assessment should be performed

Test procedures, we can provide advice and help on testing.
Ports and services, our devices can disable unused ports and services
To provide an incident response team and have Security patch management, we can provide assistance
appropriate processes in place Antivirus, we can provide advise and assistance
Account management, we can provide advice and assistance
Monitoring, our equipment monitors and logs access
3.1.7 CIP 008

CIP 008 requires that an incident response plan be developed, including the definition of an incident
response team, their responsibilities and associated procedures.

To provide an incident response team and have
Alstom Grid cannot provide additional help with this aspect.
appropriate processes in place.
3.1.8 CIP 009

CIP 009 states that a disaster recovery plan should be created and tested with annual drills.

To implement a recovery plan To provide guidelines on recovery plans and backup/restore documentation
3.2 IEEE 1686-2007

IEEE 1686-2007 is an IEEE Standard for substation IEDs' cyber-security capabilities. It proposes practical
and achievable mechanisms to achieve secure operations.
The following features described in this standard apply:
● Passwords are 8 characters long and can contain upper-case, lower-case, numeric and special
characters.
● Passwords are never displayed or transmitted to a user.
P94V-TM-EN-5 257
● IED functions and features are assigned to different password levels. The assignment is fixed.
● The audit trail is recorded, listing events in the order in which they occur, held in a circular buffer.
● Records contain all defined fields from the standard and record all defined function event types where
the function is supported.
● No password defeat mechanism exists. Instead a secure recovery password scheme is implemented.
● Unused ports (physical and logical) may be disabled.
258 P94V-TM-EN-5
4 CYBER-SECURITY IMPLEMENTATION
The Alstom Grid IEDs have always been and will continue to be equipped with state-of-the-art security
measures. Due to the ever-evolving communication technology and new threats to security, this requirement
is not static. Hardware and software security measures are continuously being developed and implemented
to mitigate the associated threats and risks.
This section describes the current implementation of cyber-security. This is valid for the release of platform
software to which this manual pertains. This current cyber-security implementation is known as Cyber-
security Phase 1.
At the IED level, these cyber-security measures have been implemented:
● NERC-compliant default display
● Four-level access
● Enhanced password security
● Password recovery procedure
● Disabling of unused physical and logical ports
● Inactivity timer
● Security events management
External to the IEDs, the following cyber-security measures have been implemented:
● Antivirus
● Security patch management
4.1 NERC-COMPLIANT DISPLAY

For the device to be NERC-compliant, it must provide the option for a NERC-compliant default display. The
default display that is implemented in our cyber-security concept contains a warning that the IED can be
accessed by authorised users. You can change this if required with the User Banner setting in the
SECURITY CONFIG column.
ACCESS ONLY FOR

AUTHORISED USERS
HOTKEY
If you try to change the default display from the NERC-compliant one, a further warning is displayed:
DISPLAY NOT NERC

COMPLIANT OK?
The default display navigation map shows how NERC-compliance is achieved with the product's default
display concept.
P94V-TM-EN-5 259
NERC compliant
banner
NERC Compliance NERC Compliance

Warning Warning
System Current
Access Level
Measurements
System Voltage
System Frequency
Measurements
System Power
Plant Reference
Measurements
Description Date & Time
V00403
Figure 91: Default display navigation
4.2 FOUR-LEVEL ACCESS

The menu structure contains four levels of access, three of which are password protected.
Password levels
Level Meaning Read Operation Write Operation
SYSTEM DATA column:
Description
Plant Reference
Model Number
Serial Number
S/W Ref.
Access Level Password Entry
Read Some
0 Security Feature LCD Contrast (UI only)
Write Minimal
SECURITY CONFIG column:
User Banner
Attempts Remain
Blk Time Remain
Fallback PW level
Security Code (UI only)
260 P94V-TM-EN-5
Level Meaning Read Operation Write Operation

All items writeable at level 0.
Level 1 Password setting
Read All All data and settings are readable.
1 Extract Disturbance Record
Write Few Poll Measurements
Select Event, Main and Fault (upload)
Extract Events (e.g. via MiCOM S1 Studio)
Setting Cells that change visibility (Visible/Invisible).
Setting Values (Primary/Secondary) selector
Commands:
Read All All data and settings are readable.
2 Reset Indication
Write Some Poll Measurements
Reset Demand
Reset Statistics
Reset CB Data / counters
Level 2 Password setting
Change all Setting cells
Operations:
Extract and download Setting file.
Extract and download PSL
Extract and download MCL61850 (IEC61850 CONFIG)
Auto-extraction of Disturbance Recorder
Courier/Modbus Accept Event (auto event extraction, e.g. via
Read All All data and settings are readable. A2R)
3
Write All Poll Measurements Commands:
Change Active Group setting
Close / Open CB
Change Comms device address.
Set Date & Time
Switch MCL banks / Switch Conf. Bank in UI (IEC61850
CONFIG)
Enable / Disable Device ports (in SECURITY CONFIG column)
Level 3 password setting
4.2.1 BLANK PASSWORDS

A blank password is effectively a zero-length password. Through the front panel it is entered by confirming
the password entry without actually entering any password characters. Through a communications port the
Courier and Modbus protocols each have a means of writing a blank password to the IED. A blank password
disables the need for a password at the level that this password is applied.
Blank passwords have a slightly different validation procedure. If a blank password is entered through the
front panel, the following text is displayed, after which the procedure is the same as already described:
BLANK PASSWORD
ENTERED CONFIRM
Blank passwords cannot be configured if the lower level password is not blank.
Blank passwords affect the fall back level after inactivity timeout or logout.
The ‘fallback level’ is the password level adopted by the IED after an inactivity timeout, or after the user logs
out. This will be either the level of the highest-level password that is blank, or level 0 if no passwords are
blank.
P94V-TM-EN-5 261
4.2.2 PASSWORD RULES

● Default passwords are blank for Level 1 and are AAAA for Levels 2 and 3
● Passwords may be any length between 0 and 8 characters long
● Passwords may or may not be NERC compliant
● Passwords may contain any ASCII character in the range ASCII code 33 (21 Hex) to ASCII code 122
(7A Hex) inclusive
● Only one password is required for all the IED interfaces
4.2.3 ACCESS LEVEL DDBS

In addition to having the 'Access level' cell in the 'System data' column (address 00D0), the current level of
access for each interface is also available for use in the Programming Scheme Logic (PSL) by mapping to
these Digital Data Bus (DDB) signals:
● HMI Access Lvl 1
● FPort AccessLvl1
● RPrt1 AccessLvl1
Key:
HMI = Human Machine Interface
FPort = Front Port
RPrt = Rear Port
Lvl = Level
4.3 ENHANCED PASSWORD SECURITY

Cyber-security requires strong passwords and validation for NERC compliance.
4.3.1 PASSWORD STRENGTHENING

NERC compliant passwords have the following requirements:
● At least one upper-case alpha character
● At least one lower-case alpha character
● At least one numeric character
● At least one special character (%,$...)
● At least six characters long
262 P94V-TM-EN-5
4.3.2 PASSWORD VALIDATION

The IED checks for NERC compliance. If the password is entered through the front panel, this is briefly
displayed on the LCD.
If the entered password is NERC compliant, the following text is displayed.
NERC COMPLIANT
P/WORD WAS SAVED
If the password entered is not NERC-compliant, the user is required to actively confirm this, in which case
the non-compliance is logged.
If the entered password is not NERC compliant, the following text is displayed:
NERC COMPLIANCE
NOT MET CONFIRM?
On confirmation, the non-compliant password is stored and the following acknowledgement message is
displayed for 2 seconds.
NON-NERC P/WORD
SAVED OK
If the action is cancelled, the password is rejected and the following message is displayed for 2 seconds.
NON-NERC P/WORD
NOT SAVE
If the password is entered through a communications port using Courier or Modbus protocols, the device will
store the password, irrespective of whether it is NERC-compliant or not. It then uses appropriate response
codes to inform the client of the NERC-compliancy status. You can then choose to enter a new NERC-
compliant password or accept the non-NERC compliant password just entered.
4.3.3 PASSWORD BLOCKING

You are locked out temporarily, after a defined number of failed password entry attempts. Each invalid
password entry attempt decrements the 'Attempts Remain' data cell by 1. When the maximum number of
attempts has been reached, access is blocked. If the attempts timer expires, or the correct password is
entered before the 'attempt count' reaches the maximum number, then the 'attempts count' is reset to 0.
An attempt is only counted if the attempted password uses only characters in the valid range, but the
attempted password is not correct (does not match the corresponding password in the IED). Any attempt
where one or more characters of the attempted password are not in the valid range will not be counted.
Once the password entry is blocked, a 'blocking timer' is started. Attempts to access the interface while the
'blocking timer' is running results in an error message, irrespective of whether the correct password is
entered or not. Once the 'blocking timer' has expired, access to the interface is unblocked and the attempts
counter is reset to zero.
P94V-TM-EN-5 263
If you try to enter the password while the interface is blocked, the following message is displayed for 2
seconds.
NOT ACCEPTED
ENTRY IS BLOCKED
A similar response occurs if you try to enter the password through a communications port.
The parameters can then be configured using the Attempts Count, Attempts Timer and Blocking Timer
settings in the SYSTEM CONFIG column.
Password blocking configuration

Cell
Setting Units Default Setting Available Setting
col row
Attempts Limit 25 02 3 0 to 3 step 1
Attempts Timer 25 03 Minutes 2 1 to 3 step 1
Blocking Timer 25 04 Minutes 5 1 to 30 step 1
4.4 PASSWORD RECOVERY

If you mislay a device's password, they can be recovered. To obtain the recovery password you must contact
the Contact Centre and supply the Serial Number and its Security Code. The Contact Centre will use these
items to generate a Recovery Password.
The security code is a 16-character string of upper case characters. It is a read-only parameter. The device
generates its own security code randomly. A new code is generated under the following conditions:
● On power up
● Whenever settings are set back to default
● On expiry of validity timer (see below)
● When the recovery password is entered
As soon as the security code is displayed on the LCD, a validity timer is started. This validity timer is set to
72 hours and is not configurable. This provides enough time for the contact centre to manually generate and
send a recovery password. The Service Level Agreement (SLA) for recovery password generation is one
working day, so 72 hours is sufficient time, even allowing for closure of the contact centre over weekends
and bank holidays.
To prevent accidental reading of the IED security code, the cell will initially display a warning message:
PRESS ENTER TO
READ SEC. CODE
The security code is displayed on confirmation. The validity timer is then started. The security code can only
be read from the front panel.
4.4.1 PASSWORD RECOVERY

The recovery password is intended for recovery only. It is not a replacement password that can be used
continually. It can only be used once – for password recovery.
Entry of the recovery password causes the IED to reset all passwords back to default. This is all it is
designed to do. After the passwords have been set back to default, it is up to the user to enter new
264 P94V-TM-EN-5
passwords. Each password should be appropriate for its intended function, ensuring NERC compliance, if
required.
On this action, the following message is displayed:
PASSWORDS HAVE
BEEN SET TO
DEFAULT
The recovery password can be applied through any interface, local or remote. It will achieve the same result
irrespective of which interface it is applied through.
4.4.2 PASSWORD ENCRYPTION

The IED supports encryption for passwords entered remotely. The encryption key can be read from the IED
through a specific cell available only through communication interfaces, not the front panel. Each time the
key is read the IED generates a new key that is valid only for the next password encryption write. Once used,
the key is invalidated and a new key must be read for the next encrypted password write. The encryption
mechanism is otherwise transparent to the user.
4.5 DISABLING PHYSICAL PORTS

It is possible to disable unused physical ports. A level 3 password is needed to perform this action.
To prevent accidental disabling of a port, a warning message is displayed according to whichever port is
required to be disabled. For example if rear port 1 is to be disabled, the following message appears:
REAR PORT 1 TO BE
DISABLED.CONFIRM
The following ports can be disabled, depending on the model.

● Front port (Front Port setting)
● Rear port 1 (Rear Port 1 setting)
● Rear port 2 (Rear Port 2 setting)
● Ethernet port (Ethernet setting)
Note:
It is not possible to disable a port from which the disabling port command originates.
Note:
We do not generally advise disabling the physical Ethernet port.
4.6 DISABLING LOGICAL PORTS

It is possible to disable unused logical ports. A level 3 password is needed to perform this action.
Note:
The port disabling setting cells are not provided in the settings file. It is only possible to do this using the HMI front
panel.
P94V-TM-EN-5 265
The following protocols can be disabled:

● IEC 61850 (IEC61850 setting)
● DNP3 Over Ethernet (DNP3 OE setting)
● Courier Tunnelling (Courier Tunnel setting)
Note:
If any of these protocols are enabled or disabled, the Ethernet card will reboot.
4.7 SECURITY EVENTS MANAGEMENT

To implement NERC-compliant cyber-security, a range of Event records need to be generated. These log
security issues such as the entry of a non-NERC-compliant password, or the selection of a non-NERC-
compliant default display.
Security event values

Event Value Display
USER LOGGED IN
PASSWORD LEVEL UNLOCKED
ON {int} LEVEL {n}
USER LOGGED OUT
PASSWORD LEVEL RESET
ON {int} LEVEL {n}
P/WORD SET BLANK
PASSWORD SET BLANK
BY {int} LEVEL {p}
P/WORD NOT-NERC
PASSWORD SET NON-COMPLIANT
BY {int} LEVEL {p}
PASSWORD CHANGED
PASSWORD MODIFIED
BY {int} LEVEL {p}
PASSWORD BLOCKED
PASSWORD ENTRY BLOCKED
ON {int}
P/WORD UNBLOCKED
PASSWORD ENTRY UNBLOCKED
ON {int}
INV P/W ENTERED
INVALID PASSWORD ENTERED
ON <int}
P/WORD EXPIRED
PASSWORD EXPIRED
ON {int}
P/W ENT WHEN BLK
PASSWORD ENTERED WHILE BLOCKED
ON {int}
RCVY P/W ENTERED
RECOVERY PASSWORD ENTERED
ON {int}
IED SEC CODE RD
IED SECURITY CODE READ
ON {int}
IED SEC CODE EXP
IED SECURITY CODE TIMER EXPIRED
-
PORT DISABLED
PORT DISABLED
BY {int} PORT {prt}
PORT ENABLED
PORT ENABLED
BY {int} PORT {prt}
DEF. DISPLAY NOT NERC COMPLIANT DEF DSP NOT-NERC
PSL STNG D/LOAD
PSL SETTINGS DOWNLOADED
BY {int} GROUP {grp}
266 P94V-TM-EN-5
Event Value Display

DNP STNG D/LOAD
DNP SETTINGS DOWNLOADED
BY {int}
TRACE DAT D/LOAD
TRACE DATA DOWNLOADED
BY {int}
IED CONFG D/LOAD
IEC61850 CONFIG DOWNLOADED
BY {int}
USER CRV D/LOAD
USER CURVES DOWNLOADED
BY {int} GROUP {crv}
PSL CONFG D/LOAD
PSL CONFIG DOWNLOADED
SETTINGS D/LOAD
SETTINGS DOWNLOADED
PSL STNG UPLOAD
PSL SETTINGS UPLOADED
DNP STNG UPLOAD
DNP SETTINGS UPLOADED
BY {int}
TRACE DAT UPLOAD
TRACE DATA UPLOADED
BY {int}
IED CONFG UPLOAD
IEC61850 CONFIG UPLOADED
BY {int}
USER CRV UPLOAD
USER CURVES UPLOADED
BY {int} GROUP {crv}
PSL CONFG UPLOAD
PSL CONFIG UPLOADED
SETTINGS UPLOAD
SETTINGS UPLOADED
EVENTS EXTRACTED
EVENTS HAVE BEEN EXTRACTED
BY {int} {nov} EVNTS
ACTIVE GRP CHNGE
ACTIVE GROUP CHANGED
C & S CHANGED
CS SETTINGS CHANGED
BY {int}
DR CHANGED
DR SETTINGS CHANGED
BY {int}
SETTINGS CHANGED
SETTING GROUP CHANGED
POWER ON
POWER ON
-
S/W DOWNLOADED
SOFTWARE_DOWNLOADED
-
where:
● int is the interface definition (UI, FP, RP1, RP2, TNL, TCP)
● prt is the port ID (FP, RP1, RP2, TNL, DNP3, IEC, ETHR)
● grp is the group number (1, 2, 3, 4)
● crv is the Curve group number (1, 2, 3, 4)
P94V-TM-EN-5 267
● n is the new access level (0, 1, 2, 3)

● p is the password level (1, 2, 3)
● nov is the number of events (1 – nnn)
Each new event has an incremented unique number, therefore missing events appear as ‘gap’ in the
sequence. The unique identifier forms part of the event record that is read or uploaded from the IED.
Note:
It is no longer possible to clear Event, Fault, Maintenance, and Disturbance Records.
4.8 LOGGING OUT

If you have been configuring the IED, you should 'log out'. Do this by going up to the top of the menu tree.
When you are at the Column Heading level and you press the Up button, you may be prompted to log out
with the following display:
DO YOU WANT TO
LOG OUT?
You will only be asked this question if your password level is higher than the fallback level.
If you confirm, the following message is displayed for 2 seconds:
LOGGED OUT
Access Level #
Where # is the current fallback level.

If you decide not to log out, the following message is displayed for 2 seconds.
LOGOUT CANCELLED
Access Level #
where # is the current access level.
268 P94V-TM-EN-5
INSTALLATION
CHAPTER 13
Chapter 13 - Installation P94V
270 P94V-TM-EN-5
P94V Chapter 13 - Installation
1 CHAPTER OVERVIEW
This chapter provides information about installing the product.
Handling the Goods 272
Mounting the Device 273
Cables and Connectors 280
Case Dimensions 285
P94V-TM-EN-5 271
2 HANDLING THE GOODS

Our products are of robust construction but require careful treatment before installation on site. This section
discusses the requirements for receiving and unpacking the goods, as well as associated considerations
regarding product care and personal safety.
Caution:
Before lifting or moving the equipment you should be familiar with the Safety
Information chapter of this manual.
2.1 RECEIPT OF THE GOODS

On receipt, ensure the correct product has been delivered. Unpack the product immediately to ensure there
has been no external damage in transit. If the product has been damaged, make a claim to the transport
contractor and notify us promptly.
For products not intended for immediate installation, repack them in their original delivery packaging.
2.2 UNPACKING THE GOODS

When unpacking and installing the product, take care not to damage any of the parts and make sure that
additional components are not accidentally left in the packing or lost. Do not discard any CDROMs or
technical documentation. These should accompany the unit to its destination substation and put in a
dedicated place.
The site should be well lit to aid inspection, clean, dry and reasonably free from dust and excessive vibration.
This particularly applies where installation is being carried out at the same time as construction work.
2.3 STORING THE GOODS

If the unit is not installed immediately, store it in a place free from dust and moisture in its original packaging.
Keep any de-humidifier bags included in the packing. The de-humidifier crystals lose their efficiency if the
bag is exposed to ambient conditions. Restore the crystals before replacing it in the carton. Ideally
regeneration should be carried out in a ventilating, circulating oven at about 115°C. Bags should be placed
on flat racks and spaced to allow circulation around them. The time taken for regeneration will depend on the
size of the bag. If a ventilating, circulating oven is not available, when using an ordinary oven, open the door
on a regular basis to let out the steam given off by the regenerating silica gel.
On subsequent unpacking, make sure that any dust on the carton does not fall inside. Avoid storing in
locations of high humidity. In locations of high humidity the packaging may become impregnated with
moisture and the de-humidifier crystals will lose their efficiency.
The device can be stored between –25º to +70ºC for unlimited periods or between -40°C to + 85°C for up to
96 hours (see technical specifications).
2.4 DISMANTLING THE GOODS

If you need to dismantle the device, always observe standard ESD (Electrostatic Discharge) precautions.
The minimum precautions to be followed are as follows:
● Use an antistatic wrist band earthed to a suitable earthing point.
● Avoid touching the electronic components and PCBs.
272 P94V-TM-EN-5
3 MOUNTING THE DEVICE

The products are available in the following forms
● For flush panel and rack mounting
● For retrofitting K-series models
● Software only (for upgrades)
3.1 FLUSH PANEL MOUNTING

Panel-mounted devices are flush mounted into panels using M4 SEMS Taptite self-tapping screws with
captive 3 mm thick washers (also known as a SEMS unit).
Caution:
Do not use conventional self-tapping screws, because they have larger heads
and could damage the faceplate.
Alternatively, you can use tapped holes if the panel has a minimum thickness of 2.5 mm.
For applications where the product needs to be semi-projection or projection mounted, a range of collars are
available.
If several products are mounted in a single cut-out in the panel, mechanically group them horizontally or
vertically into rigid assemblies before mounting in the panel.
Caution:
Do not fasten products with pop rivets because this makes them difficult to
remove if repair becomes necessary.
If the product is mounted on a BS EN60529 IP52 compliant panel, fit a metallic sealing strip between
adjoining products (part no GN2044 001) and fit a sealing ring around the complete assembly, according to
the following table.
Width Sealing ring for single tier Sealing ring for double tier
10TE GJ9018 002 GJ9018 018
15TE GJ9018 003 GJ9018 019
20TE GJ9018 004 GJ9018 020
25TE GJ9018 005 GJ9018 021
P94V-TM-EN-5 273
Width Sealing ring for single tier Sealing ring for double tier
30TE GJ9018 006 GJ9018 022
35TE GJ9018 007 GJ9018 023
40TE GJ9018 008 GJ9018 024
45TE GJ9018 009 GJ9018 025
50TE GJ9018 010 GJ9018 026
55TE GJ9018 011 GJ9018 027
60TE GJ9018 012 GJ9018 028
65TE GJ9018 013 GJ9018 029
70TE GJ9018 014 GJ9018 030
75TE GJ9018 015 GJ9018 031
80TE GJ9018 016 GJ9018 032
3.1.1 RACK MOUNTING

Panel-mounted variants can also be rack mounted using single-tier rack frames (our part number FX0021
101), as shown in the figure below. These frames are designed with dimensions in accordance with
IEC 60297 and are supplied pre-assembled ready to use. On a standard 483 mm (19 inch) rack this enables
combinations of case widths up to a total equivalent of size 80TE to be mounted side by side.
The two horizontal rails of the rack frame have holes drilled at approximately 26 mm intervals. Attach the
products by their mounting flanges using M4 Taptite self-tapping screws with captive 3 mm thick washers
(also known as a SEMS unit).
274 P94V-TM-EN-5
Caution:
Risk of damage to the front cover molding. Do not use conventional self-tapping
screws, including those supplied for mounting MiDOS products because they
have slightly larger heads.
Once the tier is complete, the frames are fastened into the racks using mounting angles at each end of the
tier.
Figure 92: Rack mounting of products

Products can be mechanically grouped into single tier (4U) or multi-tier arrangements using the rack frame.
This enables schemes using products from different product ranges to be pre-wired together before
mounting.
Use blanking plates to fill any empty spaces. The spaces may be used for installing future products or
because the total size is less than 80TE on any tier. Blanking plates can also be used to mount ancillary
components. The part numbers are as follows:
Case size summation Blanking plate part number
5TE GJ2028 101
10TE GJ2028 102
15TE GJ2028 103
P94V-TM-EN-5 275
Case size summation Blanking plate part number
20TE GJ2028 104
25TE GJ2028 105
30TE GJ2028 106
35TE GJ2028 107
40TE GJ2028 108
3.2 K-SERIES RETROFIT

A major advantage of the P40 Agile platform is its backward compatibility with the K-series products. The
P40 Agile products have been designed such that the case, back panel terminal layout and pin-outs are
identical to their K-series predecessors and can be retrofitted without the usual overhead associated with
replacing and rewiring devices. This allows easy upgrade of the protection system with minimum impact and
minimum shutdown time of the feeder.
The equivalencies of the models are as follows:
Case width (TE) Case width (mm) Equivalent K series Products
20TE 102.4 mm (4 inches) KCGG140/142 P14N
30TE 154.2 mm (6 inches) KCEG140/142 P14D
The old K-series products can be removed by sliding the cradle out of the case. The new P40 Agile cradle
can then be inserted into the old case as shown below:
276 P94V-TM-EN-5
Figure 93: Inserting cradle into case

Both K-series products and P40 Agile products are equipped with CT shorting links. Depending on the
model, your device may or may not be equipped with CTs. If there are CTs present, spring-loaded shorting
contacts (see below) ensure that the terminals into which the CTs connect are shorted before the CT
contacts are broken, when withdrawing the cradle from the case. This ensures that no voltage is developed
between the two terminals on breaking the CT connections.
If no CTs are present, the CT terminals are permanently shorted internally.
P94V-TM-EN-5 277
E01407
Figure 94: Spring-loaded CT shorting contacts

Before withdrawing the cradle it is important to:
● Check the existing case for any damage
● Check the wiring is in good condition, especially the earth wiring
● Check the continuity of the earth connection to the cublicle earthing bar.
If there is any doubt as to the integrity of any of these aspects, contact your local representative.
Caution:
After removing the K-series product from its case, refit it into the case that came
with your device, for storage or reuse in another location.
The difference between a standard device and a K-series retrofit device is that the retrofit device has internal
links between terminals 7 and 13, and terminals 8 and 14 respectively. This is so that equipment driven by
the K-series field voltage conected to terminals 7 and 8, will continue to be driven indirectly via terminals 13
and 14 when replaced by P40 Agile products.
A K-series device provides a 48 V DC field voltage between terminals 7 and 8. This field voltage is intended
for driving auxiliary equipment such as opto-inputs. P40 Agile devices DO NOT provide this field voltage. For
this reason, P40 Agile retrofit devices have internal shorting links between terminals 7 and 13, and terminals
8 and 14 respectively. The intention of this is to provide the auxiliary supply voltage to terminals 7 and 8 in
lieue of the field voltage.
Caution:
The voltage on terminals 7 and 8 mirrors that of the auxiliary supply voltage. If
the auxiliary supply voltage on terminals 13 and 14 is not 48 V DC, then the
voltage on terminals 7 and 8 is also not 48 V DC.
278 P94V-TM-EN-5
Caution:
When retrofitting a K-series device, ensure the load on terminals 7 and 8 is
limited to a maximum of 5A. A jumplead with a 5A ceramic timelag fuse is fitted
internally.
3.2.1 CONVENTIONS
The P40 Agile products have different conventions from the K-series products when it comes to numbering
some hardware components. It is very important that you are aware of this. This is just a matter of
convention and does not affect the terminal compatibility.
The equivalencies are as follows:
Component P40 Agile products K-series products
Output relay RL1 RL0
Opto-input L1 L0
Opto-input L2 L1
Opto-input L3 L2
Opto-input L4 L3
Opto-input L5 L4
Opto-input L6 L5
Opto-input L7 L6
Opto-input L8 L7
3.3 SOFTWARE ONLY

It is possible to upgrade an existing device by purchasing software only (providing the device is already fitted
with the requisite hardware).
There are two options for software-only products:
● Your device is sent back to the Alstom factory for upgrade.
● The software is sent to you for upgrade. Please contact your local representative if you wish to
procure the services of a commissioning engineer to help you with your device upgrade.
Note:
Software-only products are licensed for use with devices with specific serial numbers.
Caution:
Do not attempt to upgrade an existing device if the software has not been
licensed for that speciific device.
P94V-TM-EN-5 279
4 CABLES AND CONNECTORS

This section describes the type of wiring and connections that should be used when installing the device. For
pin-out details please refer to the Hardware Design chapter or the wiring diagrams.
Caution:
Before carrying out any work on the equipment you should be familiar with the
Safety Section and the ratings on the equipment’s rating label.
4.1 TERMINAL BLOCKS

The device uses MiDOS terminal blocks as shown below.
Figure 95: MiDOS terminal block

The MiDOS terminal block consists of up to 28 x M4 screw terminals. The wires should be terminated with
rings using 90° ring terminals, with no more than two rings per terminal. The products are supplied with
sufficient M4 screws.
M4 90° crimp ring terminals are available in three different sizes depending on the wire size. Each type is
available in bags of 100.
Part number Wire size Insulation color
ZB9124 901 0.25 - 1.65 mm2 (22 – 16 AWG) Red
ZB9124 900 1.04 - 2.63 mm2 (16 – 14 AWG) Blue
4.2 POWER SUPPLY CONNECTIONS

These should be wired with 1.5 mm PVC insulated multi-stranded copper wire terminated with M4 ring
terminals.
280 P94V-TM-EN-5
The wire should have a minimum voltage rating of 300 V RMS.
Caution:
Protect the auxiliary power supply wiring with a maximum 16 A high rupture
capacity (HRC) type NIT or TIA fuse.
4.3 EARTH CONNNECTION

Every device must be connected to the cubicle earthing bar using the M4 earth terminal.
Use a wire size of at least 2.5 mm2 terminated with a ring terminal.
Due to the physical limitations of the ring terminal, the maximum wire size you can use is 6.0 mm2 using ring
terminals that are not pre-insulated. If using pre insulated ring terminals, the maximum wire size is reduced
to 2.63 mm2 per ring terminal. If you need a greater cross-sectional area, use two wires in parallel, each
terminated in a separate ring terminal.
Note:
To prevent any possibility of electrolytic action between brass or copper ground conductors and the rear panel of the
product, precautions should be taken to isolate them from one another. This could be achieved in several ways,
including placing a nickel-plated or insulating washer between the conductor and the product case, or using tinned
ring terminals.
4.4 CURRENT TRANSFORMERS

Current transformers would generally be wired with 2.5 mm2 PVC insulated multi-stranded copper wire
terminated with M4 ring terminals.
Due to the physical limitations of the ring terminal, the maximum wire size you can use is 6.0 mm2 using ring
terminals that are not pre-insulated. If using pre insulated ring terminals, the maximum wire size is reduced
to 2.63 mm2 per ring terminal. If you need a greater cross-sectional area, use two wires in parallel, each
terminated in a separate ring terminal.
Caution:
Current transformer circuits must never be fused.
Note:
If there are CTs present, spring-loaded shorting contacts ensure that the terminals into which the CTs connect are
shorted before the CT contacts are broken.
Note:
For 5A CT secondaries, we recommend using 2 x 2.5 mm2 PVC insulated multi-stranded copper wire.
4.5 VOLTAGE TRANSFORMER CONNECTIONS

Voltage transformers should be wired with 2.5 mm2 PVC insulated multi-stranded copper wire terminated
with M4 ring terminals.
P94V-TM-EN-5 281
4.6 WATCHDOG CONNECTIONS

These should be wired with 1 mm PVC insulated multi-stranded copper wire terminated with M4 ring
terminals.
4.7 EIA(RS)485 AND K-BUS CONNECTIONS

For connecting the EIA(RS485) / K-Bus ports, use 2-core screened cable with a maximum total length of
1000 m or 200 nF total cable capacitance.
A typical cable specification would be:
● Each core: 16/0.2 mm2 copper conductors, PVC insulated
● Nominal conductor area: 0.5 mm2 per core
● Screen: Overall braid, PVC sheathed
To guarantee the performance specifications, you must ensure continuity of the screen, when daisy chaining
the connections. The device is supplied with an earth link pack (part number ZA0005092) consisting of an
earth link and a self-tapping screw to facilitate this requirement.
The earth link is fastened to the Midos block just below terminal number 56 as shown:
E01402
Figure 96: Earth link for cable screen

There is no electrical connection of the cable screen to the device. The link is provided purely to link together
the two cable screens.
4.8 IRIG-B CONNECTION

The optional IRIG-B input uses the same terminals as the EIA(RS)485 port RP1. It is therefore apparent that
RS485 communications and IRIG-B input are mutually exclusive.
282 P94V-TM-EN-5
A typical cable specification would be:

● Each core: 16/0.2 mm2 copper conductors, PVC insulated
● Nominal conductor area: 0.5 mm2 per core
● Screen: Overall braid, PVC sheathed
4.9 OPTO-INPUT CONNECTIONS

These should be wired with 1 mm2 PVC insulated multi-stranded copper wire terminated with M4 ring
terminals.
Each opto-input has a selectable preset ½ cycle filter. This makes the input immune to noise induced on the
wiring. This can, however slow down the response. If you need to switch off the ½ cycle filter, either use
double pole switching on the input, or screened twisted cable on the input circuit.
Caution:
Protect the opto-inputs and their wiring with a maximum 16 A high rupture
capacity (HRC) type NIT or TIA fuse.
4.10 OUTPUT RELAY CONNECTIONS

These should be wired with 1 mm PVC insulated multi-stranded copper wire terminated with M4 ring
terminals.
4.11 ETHERNET METALLIC CONNECTIONS

If the device has a metallic Ethernet connection, it can be connected to either a 10Base-T or a 100Base-TX
Ethernet hub. Due to noise sensitivity, we recommend this type of connection only for short distance
connections, ideally where the products and hubs are in the same cubicle. For increased noise immunity,
CAT 6 (category 6) STP (shielded twisted pair) cable and connectors can be used.
The connector for the Ethernet port is a shielded RJ-45. The pin-out is as follows:
Pin Signal name Signal definition
1 TXP Transmit (positive)
2 TXN Transmit (negative)
3 RXP Receive (positive)
4 - Not used
5 - Not used
6 RXN Receive (negative)
7 - Not used
8 - Not used
4.12 ETHERNET FIBRE CONNECTIONS

We recommend the use of fibre-optic connections for permanent connections in a substation environment.
The 100 Mbps fibre optic port is based on the 100BaseFX standard and uses type LC connectors. They are
compatible with 50/125 µm or 62.5/125 µm multimode fibres at 1300 nm wavelength.
P94V-TM-EN-5 283
4.13 USB CONNECTION

The IED has a type B USB socket on the front panel. A standard USB printer cable (type A one end, type B
the other end) can be used to connect a local PC to the IED. This cable is the same as that used for
connecting a printer to a PC.
284 P94V-TM-EN-5
5 CASE DIMENSIONS
99.0mm
A = Clearance holes
10.5mm 78.0mm B = Mounting holes
A B B A
159.0mm 168.0mm
243.1mm
A B B A
23.5mm 52.0mm 8 holes 3.4mm
213.1mm
177.0mm
102.4mm
E01403
Figure 97: 20TE case dimensions
P94V-TM-EN-5 285
151.0mm
10.75 129.5mm A = Clearance hole
B = Mounting hole
A B B A
159.0mm 168.0mm
A B B A
242.7mm
8 holes 3.4mm
23.7mm 103.6mm
213.1mm
177.0mm
154.2mm
E01404
Figure 98: 30TE case dimensions
286 P94V-TM-EN-5
COMMISSIONING INSTRUCTIONS
CHAPTER 14
Chapter 14 - Commissioning Instructions P94V
288 P94V-TM-EN-5
P94V Chapter 14 - Commissioning Instructions
1 CHAPTER OVERVIEW
General Guidelines 290
Commissioning Test Menu 291
Commissioning Equipment 293
Product Checks 294
Setting Checks 301
Protection Timing Checks 303
Onload Checks 305
Final Checks 306
P94V-TM-EN-5 289
2 GENERAL GUIDELINES
Alstom Grid IEDs are self-checking devices and will raise an alarm in the unlikely event of a failure. This is
why the commissioning tests are less extensive than those for non-numeric electronic devices or electro-
mechanical relays.
To commission the devices, you (the commissioning engineer) do not need to test every function. You need
only verify that the hardware is functioning correctly and that the application-specific software settings have
been applied. You can check the settings by extracting them using the settings application software, or by
means of the front panel interface (HMI panel).
The menu language is user-selectable, so you can change it for commissioning purposes if required.
Note:
Remember to restore the language setting to the customer’s preferred language on completion.
Caution:
Before carrying out any work on the equipment you should be familiar with
the contents of the Safety Section or Safety Guide SFTY/4LM as well as the
ratings on the equipment’s rating label.
Warning:
With the exception of the CT shorting contacts check, do not disassemble the
device during commissioning.
290 P94V-TM-EN-5
3 COMMISSIONING TEST MENU

The IED provides several test facilities under the COMMISSION TESTS menu heading. There are menu
cells that allow you to monitor the status of the opto-inputs, output relay contacts, internal Digital Data Bus
(DDB) signals and user-programmable LEDs. This section describes these commissioning test facilities.
3.1 OPTO I/P STATUS CELL (OPTO-INPUT STATUS)

This cell can be used to monitor the status of the opto-inputs while they are sequentially energised with a
suitable DC voltage. The cell is a binary string that displays the status of the opto-inputs where '1' means
energised and '0' means de-energised. If you move the cursor along the binary numbers, the corresponding
label text is displayed for each logic input.
3.2 RELAY O/P STATUS CELL (RELAY OUTPUT STATUS)

This cell can be used to monitor the status of the relay outputs. The cell is a binary string that displays the
status of the relay outputs where '1' means energised and '0' means de-energised. If you move the cursor
along the binary numbers, the corresponding label text is displayed for each relay output.
The cell indicates the status of the output relays when the IED is in service. You can check for relay damage
by comparing the status of the output contacts with their associated bits.
Note:
When the Test Mode cell is set to Contacts Blocked, the relay output status indicates which contacts would
operate if the IED was in-service. It does not show the actual status of the output relays, as they are blocked.
3.3 TEST PORT STATUS CELL

This cell displays the status of the DDB signals that have been allocated in the Monitor Bit cells. If you move
the cursor along the binary numbers, the corresponding DDB signal text string is displayed for each monitor
bit.
By using this cell with suitable monitor bit settings, the state of the DDB signals can be displayed as various
operating conditions or sequences are applied to the IED. This allows you to test the Programmable Scheme
Logic (PSL).
3.4 MONITOR BIT 1 TO 8 CELLS

The eight Monitor Bit cells allows you to select eight DDB signals that can be observed in the Test Port
Status cell.
Each Monitor Bit cell can be assigned to a particular DDB signal. You set it by entering the required DDB
signal number from the list of available DDB signals.
3.5 TEST MODE CELL

This cell allows you to perform secondary injection testing. It also lets you test the output contacts directly by
applying menu-controlled test signals.
To go into test mode, select the Test Mode option in the Test Mode cell. This takes the IED out of service
causing an alarm condition to be recorded and the Out of Service LED to illuminate. This also freezes any
information stored in the CB CONDITION column. In IEC 60870-5-103 versions, it changes the Cause of
Transmission (COT) to Test Mode.
In Test Mode, the output contacts are still active. To disable the output contacts you must select the
Contacts Blocked option.
P94V-TM-EN-5 291
Once testing is complete, return the device back into service by setting the Test Mode Cell back to
Disabled.
Caution:
When the cell is in Test Mode, the Scheme Logic still drives the output relays,
which could result in tripping of circuit breakers. To avoid this, set the Test
Mode cell to Contacts Blocked.
Note:
Test mode and Contacts Blocked mode can also be selected by energising an opto-input mapped to the Test
Mode signal, and the Contact Block signal respectively.
3.6 TEST PATTERN CELL

The Test Pattern cell is used to select the output relay contacts to be tested when the Contact Test cell is
set to Apply Test. The cell has a binary string with one bit for each user-configurable output contact, which
can be set to '1' to operate the output and '0' to not operate it.
3.7 CONTACT TEST CELL

When the Apply Test command in this cell is issued, the contacts set for operation change state. Once the
test has been applied, the command text on the LCD will change to No Operation and the contacts will
remain in the Test state until reset by issuing the Remove Test command. The command text on the LCD
will show No Operation after the Remove Test command has been issued.
Note:
When the Test Mode cell is set to Contacts Blocked the Relay O/P Status cell does not show the current status
of the output relays and therefore cannot be used to confirm operation of the output relays. Therefore it will be
necessary to monitor the state of each contact in turn.
3.8 TEST LEDS CELL

When the Apply Test command in this cell is issued, the user-programmable LEDs illuminate for
approximately 2 seconds before switching off, and the command text on the LCD reverts to No Operation.
3.9 RED AND GREEN LED STATUS CELLS

These cells contain binary strings that indicate which of the user-programmable red and green LEDs are
illuminated when accessing from a remote location. A '1' indicates that a particular LED is illuminated.
Note:
When the status in both Red LED Status and Green LED Status cells is ‘1’, this indicates the LEDs illumination is
yellow.
292 P94V-TM-EN-5
4 COMMISSIONING EQUIPMENT
4.1 MINIMUM EQUIPMENT REQUIRED

As a minimum, the following equipment is required:
● Multifunctional current and voltage injection test set (where applicable)
● Multimeter with suitable AC current range, and DC voltage ranges of 0 - 440 V and 0 - 250 V
respectively
● Continuity tester
● A portable PC, installed with appropriate software
4.2 OPTIONAL EQUIPMENT REQUIRED

● Current clamp meter
● Multi-finger test plug:
○ P992 for test block type P991
○ MMLB for test block type MMLG blocks
● Electronic or brushless insulation tester with a DC output not exceeding 500 V
● KITZ K-Bus - EIA(RS)232 protocol converter for testing EIA(RS)485 K-Bus port, if applicable
● EIA(RS)485 to EIA(RS)232 converter for testing EIA(RS)485 Courier/MODBUS/IEC60870-5-103/
DNP3 port, if applicable
● A portable printer (for printing a setting record from the portable PC).
● Phase angle meter (where applicable)
● Phase rotation meter
● Fibre optic power meter (where applicable)
● Fibre optic test leads (where applicable)
P94V-TM-EN-5 293
5 PRODUCT CHECKS
These product checks are designed to ensure that the device has not been physically damaged prior to
commissioning, is functioning correctly and that all input quantity measurements are within the stated
tolerances.
If the application-specific settings have been applied to the IED prior to commissioning, you should make a
copy of the settings. This will allow you to restore them at a later date if necessary. This can be done by:
● Obtaining a setting file from the customer.
● Extracting the settings from the IED itself, using a portable PC with appropriate setting software.
If the customer has changed the password that prevents unauthorised changes to some of the settings,
either the revised password should be provided, or the original password restored before testing.
Note:
If the password has been lost, a recovery password can be obtained from Alstom Grid.
5.1 PRODUCT CHECKS WITH THE IED DE-ENERGISED
Warning:
The following group of tests should be carried out without the auxiliary supply
being applied to the IED and, if applicable, with the trip circuit isolated.
The current and voltage transformer connections must be isolated from the IED for these checks. If a P991
test block is provided, the required isolation can be achieved by inserting test plug type P992. This open
circuits all wiring routed through the test block.
Before inserting the test plug, you should check the scheme diagram to ensure that this will not cause
damage or a safety hazard (the test block may, for example, be associated with protection current
transformer circuits). The sockets in the test plug, which correspond to the current transformer secondary
windings, must be linked before the test plug is inserted into the test block.
Warning:
Never open-circuit the secondary circuit of a current transformer since the
high voltage produced may be lethal and could damage insulation.
If a test block is not provided, the voltage transformer supply to the IED should be isolated by means of the
panel links or connecting blocks. The line current transformers should be short-circuited and disconnected
from the IED terminals. Where means of isolating the auxiliary supply and trip circuit (for example isolation
links, fuses and MCB) are provided, these should be used. If this is not possible, the wiring to these circuits
must be disconnected and the exposed ends suitably terminated to prevent them from being a safety hazard.
5.1.1 VISUAL INSPECTION
Caution:
Check the rating information provided with the device. Check that the IED
being tested is correct for the line or circuit.
Carefully examine the IED to see that no physical damage has occurred since installation.
294 P94V-TM-EN-5
Ensure that the case earthing connections (bottom left-hand corner at the rear of the IED case) are used to
connect the IED to a local earth bar using an adequate conductor.
5.1.2 INSULATION
Insulation resistance tests are only necessary during commissioning if explicitly requested.
Isolate all wiring from the earth and test the insulation with an electronic or brushless insulation tester at a
DC voltage not exceeding 500 V. Terminals of the same circuits should be temporarily connected together.
The insulation resistance should be greater than 100 MW at 500 V.
On completion of the insulation resistance tests, ensure all external wiring is correctly reconnected to the
IED.
5.1.3 EXTERNAL WIRING
Caution:
Check that the external wiring is correct according to the relevant IED and
scheme diagrams. Ensure that phasing/phase rotation appears to be as
expected.
The auxiliary DC voltage supply uses terminals 13 (supply positive) and 14 (supply negative). Unlike the K-
series products, the P40Agile series does not provide a field voltage supply. For K-series retrofit applications
where pin-to-pin compatibility is required, the equivalent P40 Agile products emulate the field voltage supply
by having internal links between pins 7 and 13, and pins 8 and 14, respectively.
5.1.4 WATCHDOG CONTACTS

Using a continuity tester, check that the Watchdog contacts are in the following states:
Terminals De-energised contact
3-5 Closed
4-6 Open
5.1.5 POWER SUPPLY

The IED can accept a nominal DC voltage from 24 V DC to 250 V DC, or a nominal AC voltage from 110 V
AC to 240 V AC at 50 Hz or 60 Hz. Ensure that the power supply is within this operating range. The power
supply must be rated at 12 Watts or more.
Warning:
Do not energise the IED or interface unit using the battery charger with the
battery disconnected as this can irreparably damage the power supply
circuitry.
Caution:
Energise the IED only if the auxiliary supply is within the specified operating
ranges. If a test block is provided, it may be necessary to link across the front
of the test plug to connect the auxiliary supply to the IED.
P94V-TM-EN-5 295
5.2 PRODUCT CHECKS WITH THE IED ENERGISED
Warning:
The current and voltage transformer connections must remain isolated from
the IED for these checks. The trip circuit should also remain isolated to
prevent accidental operation of the associated circuit breaker.
The following group of tests verifies that the IED hardware and software is functioning correctly and should
be carried out with the supply applied to the IED.
5.2.1 WATCHDOG CONTACTS

Using a continuity tester, check that the Watchdog contacts are in the following states:
Terminals Energised contact
3-5 Open
4-6 Closed
5.2.2 TEST LCD

The Liquid Crystal Display (LCD) is designed to operate in a wide range of substation ambient temperatures.
For this purpose, the IEDs have an LCD Contrast setting. The contrast is factory pre-set, but it may be
necessary to adjust the contrast to give the best in-service display.
To change the contrast, you can increment or decrement the LCD Contrast cell in the CONFIGURATION
column.
Caution:
Before applying a contrast setting, make sure that it will not make the display
so light or dark such that menu text becomes unreadable. It is possible to
restore the visibility of a display by downloading a setting file, with the LCD
Contrast set within the typical range of 7 - 11.
5.2.3 DATE AND TIME

The date and time is stored in non-volatile memory. If the values are not already correct, set them to the
correct values. The method of setting will depend on whether accuracy is being maintained by the IRIG-B
port or by the IED's internal clock.
When using IRIG-B to maintain the clock, the IED must first be connected to the satellite clock equipment
(usually a P594), which should be energised and functioning.
1. Set the IRIG-B Sync cell in the DATE AND TIME column to Enabled.
2. Ensure the IED is receiving the IRIG-B signal by checking that cell IRIG-B Status reads Active.
3. Once the IRIG-B signal is active, adjust the time offset of the universal co coordinated time (satellite
clock time) on the satellite clock equipment so that local time is displayed.
4. Check that the time, date and month are correct in the Date/Time cell. The IRIG-B signal does not
contain the current year so it will need to be set manually in this cell.
5. Reconnect the IRIG-B signal.
296 P94V-TM-EN-5
If the time and date is not being maintained by an IRIG-B signal, ensure that the IRIG-B Sync cell in the
DATE AND TIME column is set to Disabled.
1. Set the date and time to the correct local time and date using Date/Time cell or using the serial
protocol.
5.2.4 TEST LEDS

On power-up, all LEDs should first flash yellow. Following this, the green "Healthy" LED should illuminate
indicating that the device is healthy.
The IED's non-volatile memory stores the states of the alarm, the trip, and the user-programmable LED
indicators (if configured to latch). These indicators may also illuminate when the auxiliary supply is applied.
If any of these LEDs are ON then they should be reset before proceeding with further testing. If the LEDs
successfully reset (the LED goes off), no testing is needed for that LED because it is obviously operational.
5.2.5 TEST ALARM AND OUT-OF-SERVICE LEDS

The alarm and out of service LEDs can be tested using the COMMISSION TESTS menu column.
1. Set the Test Mode cell to Contacts Blocked.
2. Check that the out of service LED illuminates continuously and the alarm LED flashes.
It is not necessary to return the Test Mode cell to Disabled at this stage because the test mode will be
required for later tests.
5.2.6 TEST TRIP LED

The trip LED can be tested by initiating a manual circuit breaker trip. However, the trip LED will operate
during the setting checks performed later. Therefore no further testing of the trip LED is required at this
stage.
5.2.7 TEST USER-PROGRAMMABLE LEDS

To test these LEDs, set the Test LEDs cell to Apply Test. Check that all user-programmable LEDs
illuminate.
5.2.8 TEST OPTO-INPUTS

This test checks that all the opto-inputs on the IED are functioning correctly.
The opto-inputs should be energised one at a time. For terminal numbers, please see the external
connection diagrams in the "Wiring Diagrams" chapter. Ensuring correct polarity, connect the supply voltage
to the appropriate terminals for the input being tested.
The status of each opto-input can be viewed using either the Opto I/P Status cell in the SYSTEM DATA
column, or the Opto I/P Status cell in the COMMISSION TESTS column.
A '1' indicates an energised input and a '0' indicates a de-energised input. When each opto-input is
energised, one of the characters on the bottom line of the display changes to indicate the new state of the
input.
5.2.9 TEST OUTPUT RELAYS

This test checks that all the output relays are functioning correctly.
1. Ensure that the IED is still in test mode by viewing the Test Mode cell in the COMMISSION TESTS
column. Ensure that it is set to Contacts Blocked.
2. The output relays should be energised one at a time. To select output relay 1 for testing, set the Test
Pattern cell as appropriate.
P94V-TM-EN-5 297
3. Connect a continuity tester across the terminals corresponding to output relay 1 as shown in the
external connection diagram.
4. To operate the output relay set the Contact Test cell to Apply Test.
5. Check the operation with the continuity tester.
6. Measure the resistance of the contacts in the closed state.
7. Reset the output relay by setting the Contact Test cell to Remove Test.
8. Repeat the test for the remaining output relays.
9. Return the IED to service by setting the Test Mode cell in the COMMISSION TESTS menu to
Disabled.
5.2.10 TEST SERIAL COMMUNICATION PORT RP1

You need only perform this test if the IED is to be accessed from a remote location with a serial connection.
The test will vary depending on the communications protocol used.
It is not the intention of this test to verify the operation of the complete communication link between the IED
and the remote location, just the IED's rear communication port and, if applicable, the protocol converter.
5.2.10.1 CHECK PHYSICAL CONNECTIVITY

The rear communication port RP1 is presented on terminals 54 and 56. Screened twisted pair cable is used
to make a connection to the port. The cable screen should be connected to the earth link just below pin 56:
E01402
Figure 99: RP1 physical connection

For K-Bus applications, pins 54 and 56 are not polarity sensitive and it does not matter which way round the
wires are connected. EIA(RS)485 is polarity sensitive, so you must ensure the wires are connected the
correct way round (pin 54 is positive, pin 56 is negative).
If K-Bus is being used, a Kitz protocol converter (KITZ101, KITZ102 OR KITZ201) will have been installed to
convert the K-Bus signals into RS232. Likewise, if RS485 is being used, an RS485-RS232 converter will
have been installed. In the case where a protocol converter is being used, a laptop PC running appropriate
software (such as MiCOM S1 Agile) can be connected to the incoming side of the protocol converter. An
example for K-bus to RS232 conversion is shown below. RS485 to RS232 would follow the same principle,
only using a RS485-RS232 converter. Most modern laptops have USB ports, so it is likely you will also
require a RS232 to USB converter too.
298 P94V-TM-EN-5
IED IED IED
RS232 K-Bus
Computer RS232-USB converter KITZ protocol converter

V01001
Figure 100: Remote communication using K-bus
5.2.10.2 CHECK LOGICAL CONNECTIVITY

The logical connectivity depends on the chosen data protocol, but the principles of testing remain the same
for all protocol variants:
1. Ensure that the communications baud rate and parity settings in the application software are set the
same as those on the protocol converter.
2. For Courier models, ensure that you have set the correct RP1 address
3. Check that communications can be established with this IED using the portable PC/Master Station.
5.2.11 TEST SERIAL COMMUNICATION PORT RP2

RP2 is only available on selected models. If applicable, this test is the same as for RP1 only the relevant
terminals are 82 and 84.
5.2.12 TEST ETHERNET COMMUNICATION

For products that employ Ethernet communications, we recommend that testing be limited to a visual check
that the correct ports are fitted and that there is no sign of physical damage.
If there is no board fitted or the board is faulty, a NIC link alarm will be raised (providing this option has been
set in the NIC Link Report cell in the COMMUNICATIONS column).
5.2.13 TEST VOLTAGE INPUTS

This test verifies that the voltage measurement inputs are configured correctly.
1. Apply rated voltage to each voltage transformer input in turn
2. Check its magnitude using a multimeter or test set readout. The corresponding reading can then be
checked in the MEASUREMENTS 1 column.
3. Record the value displayed. The measured voltage values will either be in primary or secondary Volts.
If the Local Values cell in the MEASURE’T SETUP column is set to Primary, the values displayed
should be equal to the applied voltage multiplied by the corresponding voltage transformer ratio (set in
the TRANS. RATIOS column) as shown below. If the Local Values cell is set to Secondary, the value
displayed should be equal to the applied voltage.
P94V-TM-EN-5 299
Note:
If a PC connected to the IED using the rear communications port is being used to display the measured current, the
process will be similar. However, the setting of the Remote Values cell in the MEASURE’T SETUP column will
determine whether the displayed values are in primary or secondary Amperes.
Corresponding VT ratio
Cell in MEASUREMENTS 1
(in TRANS. RATIOS column)
VAN magnitude
VBN magnitude Main VT Primary / Main VT Sec'y
VCN magnitude
C/S Voltage Mag C/S VT Primary / C/S VT Secondary
300 P94V-TM-EN-5
6 SETTING CHECKS
The setting checks ensure that all of the application-specific settings (both the IED’s function and
programmable scheme logic settings) have been correctly applied.
Note:
If applicable, the trip circuit should remain isolated during these checks to prevent accidental operation of the
associated circuit breaker.
6.1 APPLY APPLICATION-SPECIFIC SETTINGS

There are two different methods of applying the settings to the IED
● Transferring settings to the IED from a pre-prepared setting file using MiCOM S1 Agile
● Enter the settings manually using the IED’s front panel HMI
6.1.1 TRANSFERRING SETTINGS FROM A SETTINGS FILE

This is the preferred method for transferring function settings. It is much faster and there is a lower margin for
error.
1. Connect a PC running the Settings Application Software to the IED's front port, or a rear Ethernet port.
Alternatively connect to the rear Courier communications port, using a KITZ protocol converter if
necessary.
2. Power on the IED
3. Enter the IP address of the device if it is Ethernet enabled
4. Right-click the appropriate device name in the System Explorer pane and select Send
5. In the Send to dialog select the setting files and click Send
Note:
The device name may not already exist in the system shown in System Explorer. In this case, perform a Quick
Connect to the IED, then manually add the settings file to the device name in the system. Refer to the Settings
Application Software help for details of how to do this.
6.1.2 ENTERING SETTINGS USING THE HMI

1. Starting at the default display, press the Down cursor key to show the first column heading.
2. Use the horizontal cursor keys to select the required column heading.
3. Use the vertical cursor keys to view the setting data in the column.
4. To return to the column header, either press the Up cursor key for a second or so, or press the Cancel
key once. It is only possible to move across columns at the column heading level.
5. To return to the default display, press the Up cursor key or the Cancel key from any of the column
headings. If you use the auto-repeat function of the Up cursor key, you cannot go straight to the
default display from one of the column cells because the auto-repeat stops at the column heading.
6. To change the value of a setting, go to the relevant cell in the menu, then press the Enter key to
change the cell value. A flashing cursor on the LCD shows that the value can be changed. You may be
prompted for a password first.
7. To change the setting value, press the vertical cursor keys. If the setting to be changed is a binary
value or a text string, select the required bit or character to be changed using the left and right cursor
keys.
P94V-TM-EN-5 301
8. Press the Enter key to confirm the new setting value or the Clear key to discard it. The new setting is
automatically discarded if it is not confirmed within 15 seconds.
9. For protection group settings and disturbance recorder settings, the changes must be confirmed
before they are used. When all required changes have been entered, return to the column heading
level and press the down cursor key. Before returning to the default display, the following prompt
appears.
Update settings?
ENTER or CLEAR
10. Press the Enter key to accept the new settings or press the Clear key to discard the new settings.
Note:
If the menu time-out occurs before the setting changes have been confirmed, the setting values are also discarded.
Control and support settings are updated immediately after they are entered, without the Update settings prompt.
It is not possible to change the PSL using the IED’s front panel HMI.
Caution:
Where the installation needs application-specific PSL, the relevant .psl files,
must be transferred to the IED, for each and every setting group that will be
used. If you do not do this, the factory default PSL will still be resident. This
may have severe operational and safety consequences.
302 P94V-TM-EN-5
7 PROTECTION TIMING CHECKS

There is no need to check every protection function. Only one protection function needs to be checked as
the purpose is to verify the timing on the processor is functioning correctly.
7.1 UNDERVOLTAGE CHECK

If the undervoltage protection function is being used, one of the relevant V<(n) stages should be tested.
1. In the CONFIGURATION column, disable all protection elements other than the one being tested.
2. Make a note of which elements need to be re-enabled after testing.
3. Connect the test circuit
4. Perform the test
5. Check the Operating time
7.2 CONNECTING THE TEST CIRCUIT

1. Use the PSL to determine which output relay will operate when an undervoltage trip occurs.
2. Use the output relay assigned to Trip Output A.
3. Use the PSL to map the protection stage under test directly to an output relay.
Note:
If using the default PSL, use output relay 3 as this is already mapped to the DDB signal Trip Command Out.
7.3 PERFORMING THE TEST

1. Ensure that the setting V< Operate Mode in the VOLT PROTECTION column is set to ANY PHASE.
2. Ensure that the timer is reset.
3. Apply a voltage of half the setting shown in the V<1 Voltage Set cell under the UNDERVOLTAGE
heading column in the VOLT PROTECTION column.
4. Note the time displayed when the timer stops.
5. Check that the red trip LED has illuminated.
7.4 CHECK THE OPERATING TIME

Check that the operating time recorded satisfies the equation t = K/(1-M), where:
● K = Time Multiplier setting
● t = operating time
● M = derived residual voltage setting (VN< voltage set)
For all characteristics, allowance must be made for the accuracy of the test equipment being used.
Note:
For definite time and inverse characteristics there is an additional delay of up to 0.02 second and 0.08 second
respectively. You may need to add this the IED's acceptable range of operating times.
P94V-TM-EN-5 303
Caution:
On completion of the tests, you must restore all settings that were disabled
for testing purposes.
304 P94V-TM-EN-5
8 ONLOAD CHECKS
The objectives of the on-load checks are to:
● Confirm the external wiring to the voltage inputs is correct
● Check the phase rotation
● Check the magnitudes of the phase voltages and the check synchronisation voltage
These checks can only be carried out if there are no restrictions preventing the energisation of the plant, and
the other devices in the group have already been commissioned.
Remove all test leads and temporary shorting links, then replace any external wiring that has been removed
to allow testing.
Warning:
If any external wiring has been disconnected for the commissioning process,
replace it in accordance with the relevant external connection or scheme
diagram.
8.1 CONFIRM VOLTAGE CONNECTIONS

1. Using a multimeter, measure the voltage transformer secondary voltages to ensure they are correctly
rated.
2. Check that the system phase rotation is correct using a phase rotation meter.
3. Compare the values of the secondary phase voltages with the measured values, which can be found
in the MEASUREMENTS 1 menu column.
Cell in MEASUREMENTS 1 Column Corresponding VT ratio in ‘TRANS. RATIO column

VAB Magnitude
VBC Magnitude
VCA Magnitude Main VT Primary / Main VT Sec'y
VAN Magnitude
VBN Magnitude
VCN Magnitude
C/S Voltage Mag. CS VT Primary / CS VT Secondary
If the Local Values cell is set to Secondary, the values displayed should be equal to the applied secondary
voltage. The values should be within 1% of the applied secondary voltages. However, an additional
allowance must be made for the accuracy of the test equipment being used.
If the Local Values cell is set to Primary, the values displayed should be equal to the applied secondary
voltage multiplied the corresponding voltage transformer ratio set in the TRANS. RATIOS column. The
values should be within 1% of the expected values, plus an additional allowance for the accuracy of the test
equipment being used.
P94V-TM-EN-5 305
9 FINAL CHECKS
1. Remove all test leads and temporary shorting leads.
2. If you have had to disconnect any of the external wiring in order to perform the wiring verification tests,
replace all wiring, fuses and links in accordance with the relevant external connection or scheme
diagram.
3. The settings applied should be carefully checked against the required application-specific settings to
ensure that they are correct, and have not been mistakenly altered during testing.
4. Ensure that all protection elements required have been set to Enabled in the CONFIGURATION
column.
5. Ensure that the IED has been restored to service by checking that the Test Mode cell in the
COMMISSION TESTS column is set to ‘Disabled’.
6. If the IED is in a new installation or the circuit breaker has just been maintained, the circuit breaker
maintenance and current counters should be zero. These counters can be reset using the Reset All
Values cell. If the required access level is not active, the device will prompt for a password to be
entered so that the setting change can be made.
7. If the menu language has been changed to allow accurate testing it should be restored to the
customer’s preferred language.
8. If a P991/MMLG test block is installed, remove the P992/MMLB test plug and replace the cover so that
the protection is put into service.
9. Ensure that all event records, fault records, disturbance records, alarms and LEDs and
communications statistics have been reset.
Note:
Remember to restore the language setting to the customer’s preferred language on completion.
306 P94V-TM-EN-5
MAINTENANCE AND
TROUBLESHOOTING
CHAPTER 15
Chapter 15 - Maintenance and Troubleshooting P94V
308 P94V-TM-EN-5
P94V Chapter 15 - Maintenance and Troubleshooting
1 CHAPTER OVERVIEW
The Maintenance and Troubleshooting chapter provides details of how to maintain and troubleshoot products
based on the Px4x and P40Agile platforms. Always follow the warning signs in this chapter. Failure to do so
may result injury or defective equipment.
Caution:
contents of the Safety Section or the Safety Guide SFTY/4LM and the ratings on
the equipment’s rating label.
The troubleshooting part of the chapter allows an error condition on the IED to be identified so that
appropriate corrective action can be taken.
If the device develops a fault, it is usually possible to identify which module needs replacing. It is not possible
to perform an on-site repair to a faulty module.
If you return a faulty unit or module to the manufacturer or one of their approved service centres, you should
include a completed copy of the Repair or Modification Return Authorization (RMA) form.
Maintenance 310
Troubleshooting 312
P94V-TM-EN-5 309
2 MAINTENANCE
2.1 MAINTENANCE CHECKS

In view of the critical nature of the application, Alstom Grid products should be checked at regular intervals to
confirm they are operating correctly. Alstom Grid products are designed for a life in excess of 20 years.
The devices are self-supervising and so require less maintenance than earlier designs of protection devices.
Most problems will result in an alarm, indicating that remedial action should be taken. However, some
periodic tests should be carried out to ensure that they are functioning correctly and that the external wiring
is intact. It is the responsibility of the customer to define the interval between maintenance periods. If your
organisation has a Preventative Maintenance Policy, the recommended product checks should be included in
the regular program. Maintenance periods depend on many factors, such as:
● The operating environment
● The accessibility of the site
● The amount of available manpower
● The importance of the installation in the power system
● The consequences of failure
Although some functionality checks can be performed from a remote location, these are predominantly
restricted to checking that the unit is measuring the applied currents and voltages accurately, and checking
the circuit breaker maintenance counters. For this reason, maintenance checks should also be performed
locally at the substation.
Caution:
contents of the Safety Section or the Safety Guide SFTY/4LM and the ratings on
the equipment’s rating label.
2.1.1 ALARMS
First check the alarm status LED to see if any alarm conditions exist. If so, press the Read key repeatedly to
step through the alarms.
After dealing with any problems, clear the alarms. This will clear the relevant LEDs.
2.1.2 OPTO-ISOLATORS
Check the opto-inputs by repeating the commissioning test detailed in the Commissioning chapter.
2.1.3 OUTPUT RELAYS

Check the output relays by repeating the commissioning test detailed in the Commissioning chapter.
2.1.4 MEASUREMENT ACCURACY

If the power system is energised, the measured values can be compared with known system values to check
that they are in the expected range. If they are within a set range, this indicates that the A/D conversion and
the calculations are being performed correctly. Suitable test methods can be found in Commissioning
chapter.
Alternatively, the measured values can be checked against known values injected into the device using the
test block, (if fitted) or injected directly into the device's terminals. Suitable test methods can be found in the
Commissioning chapter. These tests will prove the calibration accuracy is being maintained.
310 P94V-TM-EN-5
2.2 REPLACING THE UNIT

If your product should develop a fault while in service, depending on the nature of the fault, the watchdog
contacts will change state and an alarm condition will be flagged. In the case of a fault, you should normally
replace the cradle which slides easily out of the case. This can be done without disturbing the scheme
wiring.
In the unlikely event that the problem lies with the wiring and/or terminals, then you must replace the
complete device, rewire and re-commission the device.
Caution:
If the repair is not performed by an approved service centre, the warranty will be
invalidated.
Caution:
Before carrying out any work on the equipment, you should be familiar with the
contents of the Safety Information section of this guide or the Safety Guide
SFTY/4LM, as well as the ratings on the equipment’s rating label. This should
ensure that no damage is caused by incorrect handling of the electronic
components.
Warning:
Before working at the rear of the unit, isolate all voltage and current supplying it.
Note:
The Alstom Grid products have integral current transformer shorting switches which will close, for safety reasons,
when the terminal block is removed.
To replace the cradle without disturbing the case and wiring:

1. Remove the faceplate.
2. Carefully withdraw the cradle from the front.
3. To reinstall the unit, follow the above instructions in reverse, ensuring that each terminal block is
relocated in the correct position and all connections are replaced. The terminal blocks are labelled
alphabetically with ‘A’ on the left hand side when viewed from the rear.
Once the unit has been reinstalled, it should be re-commissioned as set out in the Commissioning chapter.
2.3 CLEANING
Warning:
Before cleaning the device, ensure that all AC and DC supplies and transformer
connections are isolated, to prevent any chance of an electric shock while
cleaning.
Only clean the equipment with a lint-free cloth dampened with clean water. Do not use detergents, solvents
or abrasive cleaners as they may damage the product's surfaces and leave a conductive residue.
P94V-TM-EN-5 311
3 TROUBLESHOOTING
3.1 SELF-DIAGNOSTIC SOFTWARE

The device includes several self-monitoring functions to check the operation of its hardware and software
while in service. If there is a problem with the hardware or software, it should be able to detect and report the
problem, and attempt to resolve the problem by performing a reboot. In this case, the device would be out of
service for a short time, during which the ‘Healthy’ LED on the front of the device is switched OFF and the
watchdog contact at the rear is ON. If the restart fails to resolve the problem, the unit takes itself permanently
out of service; the ‘Healthy’ LED stays OFF and watchdog contact stays ON.
If a problem is detected by the self-monitoring functions, the device attempts to store a maintenance record
to allow the nature of the problem to be communicated to the user.
The self-monitoring is implemented in two stages: firstly a thorough diagnostic check which is performed on
boot-up, and secondly a continuous self-checking operation, which checks the operation of the critical
functions whilst it is in service.
3.2 POWER-UP ERRORS

If the IED does not appear to power up, use the following checks to determine whether the fault is in the
external wiring, auxiliary fuse, IED power supply module or IED front panel.
Test Check Action
Measure the voltage on terminals 13 and 14. Verify the If the auxiliary voltage is correct, go to test 2. Otherwise check the wiring and
1
voltage level and polarity against the rating label fuses in the auxiliary supply.
Check the LEDs and LCD backlight switch on at If the LEDs and LCD backlight switch on, or the Watchdog contacts close and
power-up. Also check the N/O (normally open) no error code is displayed, the error is probably on the main processor board.
2
watchdog contact on terminals 4 and 6 to see if they If the LEDs and LCD backlight do not switch on and the N/O Watchdog
close. contact does not close, the fault is probably in the IED power supply module.
3.3 ERROR MESSAGE OR CODE ON POWER-UP

The IED performs a self-test during power-up. If it detects an error, a message appears on the LCD and the
power-up sequence stops. If the error occurs when the IED application software is running, a maintenance
record is created and the device reboots.
Test Check Action
If the IED locks up and displays an error code permanently, go to test 2.

Is an error message or code permanently displayed during
1 If the IED prompts for user input, go to test 3.
power up?
If the IED reboots automatically, go to test 4.
Record whether the same error code is displayed when the IED is
2 Record displayed error and re-apply IED supply. rebooted, then contact the local service centre stating the error code and
product details.
The IED displays a message for corrupt settings and The power-up tests have detected corrupted IED settings. Restore the
3 prompts for the default values to be restored for the default settings to allow the power-up to complete, and then reapply the
affected settings. application-specific settings.
Programmable scheme logic error due to excessive execution time.
Restore the default settings by powering up with both horizontal cursor
keys pressed, then confirm restoration of defaults at the prompt using the
The IED resets when the power-up is complete. A record
4 Enter key. If the IED powers up successfully, check the programmable
error code is displayed.
logic for feedback paths.
Other error codes relate to software errors on the main processor board,
contact the local service centre.
312 P94V-TM-EN-5
3.4 OUT OF SERVICE LED ON AT POWER-UP
Test Check Action

Using the IED menu, confirm the Commission Test or Test If the setting is Enabled, disable the test mode and make sure the Out of
1
Mode setting is Enabled. If it is not Enabled, go to test 2. Service LED is OFF.
Check for the H/W Verify Fail maintenance record. This indicates a
discrepancy between the IED model number and the hardware. Examine
Select the VIEW RECORDS column then view the last
2 the Maint Data; cell. This indicates the causes of the failure using bit
maintenance record from the menu.
fields:
Bit Meaning
The application 'type' field in the Cortec does not match the
0
software ID
The 'subset' field in the model number does not match the
1
software ID
The 'platform' field in the model number does not match the
2
software ID
The 'product type' field in the model number does not match
3
the software ID
The 'protocol' field in the Cortec does not match the software
4
ID
The 'model' field in the Cortec does not match the software
5
ID
The first 'software version' field in the does not match the
6
software ID
The second 'software version' field in the Cortec does not
7
match the software ID
8 No VTs are fitted
9 No CTs are fitted
10 No Earth CT is fitted
11 No SEF CT is fitted
3.5 ERROR CODE DURING OPERATION

The IED performs continuous self-checking. If the IED detects an error it displays an error message, logs a
maintenance record and after a short delay resets itself. A permanent problem (for example due to a
hardware fault) is usually detected in the power-up sequence. In this case the IED displays an error code
and halts. If the problem was transient, the IED reboots correctly and continues operation. By examining the
maintenance record logged, the nature of the detected fault can be determined.
3.6 MAL-OPERATION DURING TESTING
3.6.1 FAILURE OF OUTPUT CONTACTS

An apparent failure of the relay output contacts can be caused by the configuration. Perform the following
tests to identify the real cause of the failure. The self-tests verify that the coils of the output relay contacts
have been energized. An error is displayed if there is a fault in the output relay board.
Test Check Action
If this LED is ON, the relay may be in test mode or the protection has
1 Is the Out of Service LED ON?
been disabled due to a hardware verify error.
Examine the Contact status in the Commissioning section If the relevant bits of the contact status are operated, go to test 4; if not,
2
of the menu. go to test 3.
P94V-TM-EN-5 313
Test Check Action

If the protection element does not operate, check the test is correctly
Examine the fault record or use the test port to check the applied.
3
protection element is operating correctly. If the protection element operates, check the programmable logic to make
sure the protection element is correctly mapped to the contacts.
Using the Commissioning or Test mode function, apply a If the output relay operates, the problem must be in the external wiring to
test pattern to the relevant relay output contacts. Consult the relay. If the output relay does not operate the output relay contacts
4 the correct external connection diagram and use a may have failed (the self-tests verify that the relay coil is being energized).
continuity tester at the rear of the relay to check the relay Ensure the closed resistance is not too high for the continuity tester to
output contacts operate. detect.
3.6.2 FAILURE OF OPTO-INPUTS

The opto-isolated inputs are mapped onto the IED's internal DDB signals using the programmable scheme
logic. If an input is not recognized by the scheme logic, use the Opto I/P Status cell in the COMMISSION
TESTS column to check whether the problem is in the opto-input itself, or the mapping of its signal to the
scheme logic functions.
If the device does not correctly read the opto-input state, test the applied signal. Verify the connections to the
opto-input using the wiring diagram and the nominal voltage settings in the OPTO CONFIG column. To do
this:
1. Select the nominal battery voltage for all opto-inputs by selecting one of the five standard ratings in the
Global Nominal V cell.
2. Select Custom to set each opto-input individually to a nominal voltage.
3. Using a voltmeter, check that the voltage on its input terminals is greater than the minimum pick-up
level (See the Technical Specifications chapter for opto pick-up levels).
If the signal is correctly applied, this indicates failure of an opto-input, in which case the complete cradle
should be replaced.
3.6.3 INCORRECT ANALOGUE SIGNALS

If the measured analogue quantities do not seem correct, use the measurement function to determine the
type of problem. The measurements can be configured in primary or secondary terms.
1. Compare the displayed measured values with the actual magnitudes at the terminals.
2. Check the correct terminals are used.
3. Check the CT and VT ratios set are correct.
4. Check the phase displacement to confirm the inputs are correctly connected.
3.7 PSL EDITOR TROUBLESHOOTING

A failure to open a connection could be due to one or more of the following:
● The IED address is not valid (this address is always 1 for the front port)
● Password in not valid
● Communication set-up (COM port, Baud rate, or Framing) is not correct
● Transaction values are not suitable for the IED or the type of connection
● The connection cable is not wired correctly or broken
● The option switches on any protocol converter used may be incorrectly set
3.7.1 DIAGRAM RECONSTRUCTION

Although a scheme can be extracted from an IED, a facility is provided to recover a scheme if the original file
is unobtainable.
314 P94V-TM-EN-5
A recovered scheme is logically correct but much of the original graphical information is lost. Many signals
are drawn in a vertical line down the left side of the canvas. Links are drawn orthogonally using the shortest
path from A to B. Any annotation added to the original diagram such as titles and notes are lost.
Sometimes a gate type does not appear as expected. For example, a single-input AND gate in the original
scheme appears as an OR gate when uploaded. Programmable gates with an inputs-to-trigger value of 1
also appear as OR gates
3.7.2 PSL VERSION CHECK

The PSL is saved with a version reference, time stamp and CRC check (Cyclic Redundancy Check). This
gives a visual check whether the default PSL is in place or whether a new application has been downloaded.
3.8 REPAIR AND MODIFICATION PROCEDURE

Please follow these steps to return an Automation product to us:
1. Get the Repair and Modification Return Authorization (RMA) form
An electronic version of the RMA form is available from the following web page:
http://www.alstom.com/grid/productrepair/
2. Fill in the RMA form
Fill in only the white part of the form.
Please ensure that all fields marked (M) are completed such as:
○ Equipment model
○ Model No. and Serial No.
○ Description of failure or modification required (please be specific)
○ Value for customs (in case the product requires export)
○ Delivery and invoice addresses
○ Contact details
3. Send the RMA form to your local contact
For a list of local service contacts worldwide,visit the following web page:
http://www.alstom.com/grid/productrepair/
4. The local service contact provides the shipping information
Your local service contact provides you with all the information needed to ship the product:
○ Pricing details
○ RMA number
○ Repair centre address
If required, an acceptance of the quote must be delivered before going to the next stage.
5. Send the product to the repair centre
○ Address the shipment to the repair centre specified by your local contact
○ Make sure all items are packaged in an anti-static bag and foam protection
○ Make sure a copy of the import invoice is attached with the returned unit
○ Make sure a copy of the RMA form is attached with the returned unit
○ E-mail or fax a copy of the import invoice and airway bill document to your local contact.
P94V-TM-EN-5 315
316 P94V-TM-EN-5
TECHNICAL SPECIFICATIONS
CHAPTER 16
Chapter 16 - Technical Specifications P94V
318 P94V-TM-EN-5
P94V Chapter 16 - Technical Specifications
1 CHAPTER OVERVIEW
This chapter describes the technical specifications of the product.
Interfaces 320
Performance of Voltage Protection Functions 322
Performance of Frequency Protection Functions 324
Performance of Monitoring and Control Functions 327
Measurements and Recording 328
Standards Compliance 329
Mechanical Specifications 330
Ratings 331
Power Supply 332
Input / Output Connections 333
Environmental Conditions 335
Type Tests 336
Electromagnetic Compatibility 338
P94V-TM-EN-5 319
2 INTERFACES
2.1 FRONT USB PORT
Front USB port

Use For local connection to laptop for configuration purposes and firmware downloads
Connector USB type B
Isolation Isolation to ELV level
Constraints Maximum cable length 5 m
2.2 REAR SERIAL PORT 1
Rear serial port 1 (RP1)

Use For SCADA communications (multi-drop)
Standard EIA(RS)485, K-bus
Connector General purpose block, M4 screws (2 wire)
Cable Screened twisted pair (STP)
Supported Protocols * Courier, IEC-60870-5-103, DNP3.0, MODBUS
Isolation Isolation to SELV level
* Not all models support all protocols - see ordering options
2.3 IRIG-B PORT
IRIG-B Interface (De-modulated)

Use External clock synchronization signal
Standard IRIG 200-98 format B00X
Terminal type MiDOS
Connector General purpose block, M4 screws (2 wire)
Cable type Screened twisted pair (STP)
Isolation Isolation to SELV level
Accuracy < +/- 1 s per day
2.4 REAR ETHERNET PORT COPPER
Rear Ethernet port using CAT 5/6/7 wiring

Main Use Substation Ethernet communications
Communication protocol 10BaseT/100BaseTX
Connector RJ45
Cable type Screened twisted pair (STP)
Isolation 1 kV
Supported Protocols IEC 61850, DNP3.0 OE
320 P94V-TM-EN-5
2.5 REAR ETHERNET PORT - FIBRE
Rear Ethernet port using fibre-optic cabling

Main Use IEC 61850 or DNP3 OE SCADA communications
Connector UNI SONET OC-3 LC (1 each for Tx and Rx)
Communication protocol 100 BaseFX
Fibre type Multimode 50/125 µm or 62.5/125 µm
Supported Protocols IEC 61850, DNP3.0 OE
Wavelength 1300 nm
2.5.1 100 BASE FX RECEIVER CHARACTERISTICS
Parameter Sym Min. Typ. Max. Unit

Input Optical Power Minimum at
PIN Min. (W) -33.5 –31 dBm avg.
Window Edge
Input Optical Power Minimum at
PIN Min. (C) -34.5 -31.8 Bm avg.
Eye Center
Input Optical Power Maximum PIN Max. -14 -11.8 dBm avg.
Conditions: TA = 0°C to 70°C
2.5.2 100 BASE FX TRANSMITTER CHARACTERISTICS
Parameter Sym Min. Typ. Max. Unit

Output Optical Power BOL 62.5/125
-19
µm PO -16.8 -14 dBm avg.
-20
NA = 0.275 Fibre EOL
Output Optical Power BOL 50/125 µm -22.5
PO -20.3 -14 dBm avg.
NA = 0.20 Fibre EOL -23.5
10 %
Optical Extinction Ratio
-10 dB
Output Optical Power at Logic "0"
PO -45 dBm avg.
State
Conditions: TA = 0°C to 70°C
P94V-TM-EN-5 321
3 PERFORMANCE OF VOLTAGE PROTECTION FUNCTIONS
3.1 UNDERVOLTAGE PROTECTION
Pick-up (IDMT and DT) Setting +/- 5%

Drop-off (IDMT and DT) 1.02 x Setting +/-5%
+/- 3.5% or 40 ms, whichever is greater (<10 V)
IDMT operate
+/- 5% or 40 ms, whichever is greater (>10 V)
Disnegagement <40 ms
DT operate +/- 2% or 50 ms, whichever is greater
DT reset Setting +/- 5%
Repeatability +/- 1%
3.2 OVERVOLTAGE PROTECTION
IDMT pick-up Setting +/- 2%

DT pick-up Setting +/- 1%
IDMT operate +/-5% or 50 ms
Disengagement < 40 ms
DT operate +/- 2% or 50 ms, whichever is greater
3.3 RESIDUAL OVERVOLTAGE PROTECTION
IDMT pick-up 1.05 x Setting +/- 5%

DT pick-up Setting +/- 5%
IDMT operate +/- 5% or 65 ms, whichever is greater
Disengagement < 35 ms
DT operate +/- 2% or 70 ms or whichever is greater
Repeatability <10%
3.4 NEGATIVE SEQUENCE VOLTAGE PROTECTION
Pick-up Setting +/- 5%

Drop-off 0.95 x Setting +/-5%
322 P94V-TM-EN-5
+/- 2% or 65 ms, whichever is greater (70 Hz - 45 Hz)

DT operate
+/- 5% or 70 ms, whichever is greater (<45 Hz)
3.5 RATE OF CHANGE OF VOLTAGE PROTECTION
Accuracy for 110 V VT

Tolerance 1% or 0.07, whichever is greater
Pick-up Setting +/- tolerance
Drop-off for positive direction (Setting – 0.07)+/- tolerance
Drop-off for negative direction (Setting + 0.07)+/- tolerance
Operating time at 50 Hz (Average cycle x 20) +60 ms
Reset time at 50 Hz 40 ms
P94V-TM-EN-5 323
4 PERFORMANCE OF FREQUENCY PROTECTION FUNCTIONS
4.1 OVERFREQUENCY PROTECTION
Accuracy
Pick-up Setting +/- 10 mHz
Drop-off Setting -20 mHz +/- 10 mHz
Operating timer +/- 2% or 50 ms, whichever is greater
Operating and Reset time

Operating time (Fs/Ff ratio less than 2) <125 ms
Operating time (Fs/Ff ratio between 2 and 30) <150 ms
Operating time (Fs/Ff ratio greater than 30) <200 ms
Reset time <200 ms
Reference conditions: Tested using step changed in frequency with Freq. Av Cycles setting = 0 and no
intentional time delay.
Fs = start frequency – frequency setting
Ff = frequency setting – end frequency
4.2 UNDERFREQUENCY PROTECTION
Accuracy
Pick-up Setting +/- 10 mHz
Drop-off Setting + 20 mHz +/- 10 mHz

Operating time (Fs/Ff ratio less than 2) <100 ms
Operating time (Fs/Ff ratio between 2 and 6) <160 ms
Operating time (Fs/Ff ratio greater than 6) <230 ms
Reset time <200 ms
Reference conditions: Tested using step changed in frequency with Freq. Av Cycles setting = 0 and no
Fs = start frequency – frequency setting
Ff = frequency setting – end frequency
4.3 SUPERVISED RATE OF CHANGE OF FREQUENCY PROTECTION
Accuracy
Pick-up (f) Setting +/- 10 mHz
Pick-up (df/dt) Setting +/- 3% or +/- 10 mHz/s, whichever is greater
324 P94V-TM-EN-5
Accuracy
Drop-off (f, underfrequency) (Setting + 20 mHz) +/- 10 mHz
Drop-off (f, overfrequency) (Setting - 20 mHz) +/- 10 mHz
Drop-off (df/dt, falling, for settings between 10 mHz/s and
(Setting + 5 mHz/s) +/- 10 mHz/s
100 mHz/s)
Drop-off (df/dt, falling, for settings greater than (Setting + 50 mHz/s) +/- 5% or +/- 55 mHz/s, whichever is
100 mHz/s) greater
Drop-off (df/dt, rising, for settings between 10 mHz/s and
(Setting - 5 mHz/s) +/- 10 mHz/s
100 mHz/s )
Drop-off (df/dt, rising, for settings greater than (Setting - 50 mHz/s) +/- 5% or +/- 55 mHz/s, whichever is
100 mHz/s) greater

Instantaneous operating time (Freq AvCycles setting = 0) <125 ms
Reset time time (df/dt AvCycles setting = 0) <400 ms
4.4 INDEPENDENT RATE OF CHANGE OF FREQUENCY PROTECTION
Accuracy
Pick-up (df/dt) Setting +/- 3% or +/- 10 mHz/s, whichever is greater
Drop-off (df/dt, falling, for settings between 10 mHz/s
(Setting + 5 mHz/s) +/- 10 mHz/s
and 100 mHz/s)
Drop-off (df/dt, falling, for settings greater than (Setting + 50 mHz/s) +/- 5% or +/- 55 mHz/s, whichever is
100 mHz/s) greater
Drop-off (df/dt, rising, for settings between 10 mHz/s
(Setting - 5 mHz/s) +/- 10 mHz/s
and 100 mHz/s)
Drop-off (df/dt, rising, for settings greater than (Setting - 50 mHz/s) +/- 5% or +/- 55 mHz/s, whichever is
100 mHz/s) greater

Operating time (for ramps 2 x seting or greater) <200 ms
Operating time (for ramps 1.3 x seting or greater) <300 ms
Reset time time (df/dt AvCycles setting = 0 for df/dt settings greater than
<250 ms
0.1 Hz/s and no intentional time delay)
Referecne Conditions: Tested with df/dt Average Cycles = 0 for df/dt settings greater than 0.1 Hz/s, and no
4.5 AVERAGE RATE OF CHANGE OF FREQUENCY PROTECTION
Accuracy
Pick-up (f) Setting +/- 10 mHz
Pick-up (Df/Dt) Setting +/- 100 mHz/s
Drop-off (falling) (Setting + 20 mHz) +/- 10 mHz
Drop-off (rising) (Setting - 20 mHz) +/- 10 mHz
P94V-TM-EN-5 325
Operating time
Operating time (Freq. Av Cycles setting = 0) <125 ms
Reference conditions: To maintain accuracy, the minimum time delay setting should be:
Dt> 0.375 x Df + 0.23 (f0r Df setting <1 Hz)
Dt> 0.156 x Df + 0.47 (for Df setting >= 1 Hz)
4.6 LOAD RESTORATION
Pick-up Setting +/- 2.5%

Drop-off 0.95% x Setting +/- 2.5%
Restoration timer +/- 2% or 50 ms, whichever is greater
Holding timer +/- 2% or 50 ms, whichever is greater
326 P94V-TM-EN-5
5 PERFORMANCE OF MONITORING AND CONTROL FUNCTIONS
5.1 PSL TIMERS
Output conditioner timer Setting +/- 2% or 50 ms, whichever is greater

Dwell conditioner timer Setting +/- 2% or 50 ms, whichever is greater
Pulse conditioner timer Setting +/- 2% or 50 ms, whichever is greater
5.2 DC SUPPLY MONITOR
Measuring Range 19 V-310 V ±5%

Tolerance ±1.5 V for 19-100 V
±2% for 100-200 V
±2.5% for 200-300 V
Pickup 100% of Setting ± Tolerance *
Dropoff Hysteresis 2%
102% of Setting ± Tolerance for the upper limit *
98% of Setting ± Tolerance for the lower limit *
Operate Time Setting ± (2% or 500 ms whichever is greater)
Disengagement Time < 250 ms
Note:
* Tested at 21°C
P94V-TM-EN-5 327
6 MEASUREMENTS AND RECORDING
6.1 GENERAL
General Measurement Accuracy

General measurement accuracy Typically +/- 1%, but +/- 0.5% between 0.2 - 2 In/Vn
Voltage magnitude 0.05 to 2 Vn +/- 1.0% of reading
0° to 360° +/- 0.5° (0.2 to 2 Vn)
Voltage phase
0° to 360° +/- 1° (0.05 to 2 Vn)
Frequency 40 to 70 Hz +/- 0.025 Hz
6.2 DISTURBANCE RECORDS
Disturbance Records Measurement Accuracy

Minimum record duration 0.1 s
Maximum record duration 10.5 s
Minimum number of records at 10.5 seconds 15
Magnitude and relative phases accuracy ±5% of applied quantities
Duration accuracy ±2%
Trigger position accuracy ±2% (minimum Trigger 100 ms)
6.3 EVENT, FAULT AND MAINTENANCE RECORDS
Event, Fault & Maintenance Records

Record location Flash memory
Viewing method Front panel display or MiCOM S1 Agile
Extraction method Extracted via the USB port
Number of Event records Up to 2048 time tagged event records
Number of Fault Records Up to 10
Number of Maintenance Records Up to 10
328 P94V-TM-EN-5
7 STANDARDS COMPLIANCE
Compliance with the European Commission Directive on EMC and LVD is demonstrated by self certification
against international standards.
7.1 EMC COMPLIANCE: 2004/108/EC

7.2 PRODUCT SAFETY: 2006/95/EC

Protective Class
IEC 60255-27: 2005 Class 1 (unless otherwise specified in equipment documentation). This equipment
requires a protective conductor (earth) to ensure user safety.
Installation category
IEC 60255-27: 2005 Overvoltage Category 3. Equipment in this category is qualification tested at 5kV peak,
1.2/50 mS, 500 Ohms, 0.5 J, between all supply circuits and earth and also between independent circuits.
Environment
IEC 60255-27: 2005, IEC 60255-26:2009. The equipment is intended for indoor use only. If it is required for
use in an outdoor environment, it must be mounted in a cabinet with the appropriate degree of ingress
protection.
7.3 R&TTE COMPLIANCE

Radio and Telecommunications Terminal Equipment (R&TTE) directive 99/5/EC.
Conformity is demonstrated by compliance to both the EMC directive and the Low Voltage directive, to zero
volts.
7.4 UL/CUL COMPLIANCE

If marked with this logo, the product is compliant with the requirements of the Canadian and USA
Underwriters Laboratories.
The relevant UL file number and ID is shown on the equipment.
P94V-TM-EN-5 329
8 MECHANICAL SPECIFICATIONS
8.1 PHYSICAL PARAMETERS
Physical Measurements
20TE
Case Types
30TE
Weight (20TE case) 2 kg – 3 kg (depending on chosen options)
Weight (30TE case) 3 kg – 4 kg (depending on chosen options)
Dimensions in mm (w x h x l) (20TE case) W: 102.4mm H: 177.0mm D: 243.1mm
Dimensions in mm (w x h x l) (30TE case) W: 154.2mm H: 177.0mm D: 243.1mm
Mounting Panel, rack, or retrofit
8.2 ENCLOSURE PROTECTION
Against dust and dripping water (front face) IP52 as per IEC 60529:2002
Protection against dust (whole case) IP50 as per IEC 60529:2002
Protection for sides of the case (safety) IP30 as per IEC 60529:2002
Protection for rear of the case (safety) IP10 as per IEC 60529:2002
8.3 MECHANICAL ROBUSTNESS
Vibration test per EN 60255-21-1:1996 Response: class 2, Endurance: class 2

Shock response: class 2, Shock withstand: class 1, Bump
Shock and bump immunity per EN 60255-21-2:1995
withstand: class 1
Seismic test per EN 60255-21-3: 1995 Class 2
8.4 TRANSIT PACKAGING PERFORMANCE
Primary packaging carton protection ISTA 1C

Vibration tests 3 orientations, 7 Hz, amplitude 5.3 mm, acceleration 1.05g
10 drops from 610 mm height on multiple carton faces, edges
Drop tests
and corners
330 P94V-TM-EN-5
9 RATINGS
9.1 AC MEASURING INPUTS
AC Measuring Inputs
Nominal frequency 50 Hz or 60 Hz (settable)
Operating range 40 Hz to 70 Hz (SW version 55: 40 Hz to 65 Hz)
Phase rotation ABC or CBA
9.2 VOLTAGE TRANSFORMER INPUTS
AC Voltage
Nominal voltage 100 V to 120 V
Nominal burden per phase < 0.1 VA at Vn
Thermal withstand Continuous: 2 x Vn, 10 s: 2.6 x Vn
P94V-TM-EN-5 331
10 POWER SUPPLY
10.1 AUXILIARY POWER SUPPLY VOLTAGE
24-250 V DC +/-20%
Nominal operating range
110-240 V AC -20% + 10%
Maximum operating range 19 to 300 V DC
Frequency range for AC supply 45 – 65 Hz
Ripple <15% for a DC supply (compliant with IEC 60255-11:2008)
10.2 NOMINAL BURDEN
Quiescent burden 20TE 5 W max.

30TE 6 W max.
30TE with 2nd rear
6.2 W max.
communications
30TE with Ethernet or TCS 7 W max.
Additions for energised relay outputs 0.26 W per output relay
Opto-input burden 24 V 0.065 W max.
48 V 0.125 W max.
110 V 0.36 W max.
220 V 0.9 W max.
10.3 AUXILIARY POWER SUPPLY INTERRUPTION
IEC 60255-11:2008 (dc)

Standard
IEC 61000-4-11:2004 (ac)
Quiescent / half load Full load
19.2 V – 110 V dc >110 Vdc 19.2 V – 110 V dc >110 Vdc
20TE 50 ms 100 ms 50 ms 100 ms
30TE 50 ms 100 ms 30 ms 50 ms
30TE with 2nd rear communications 30 ms 100 ms 20 ms 50 ms
30TE with Ethernet or TCS 50 ms 100 ms 20 ms 100 ms
Note:
Maximum loading = all inputs/outputs energised.
Note:
Quiescent or 1/2 loading = 1/2 of all inputs/outputs energised.
332 P94V-TM-EN-5
11 INPUT / OUTPUT CONNECTIONS
11.1 ISOLATED DIGITAL INPUTS
Opto-isolated digital inputs (opto-inputs)

Compliance ESI 48-4
Rated nominal voltage 24 to 250 V dc
Operating range 19 to 265 V dc
Withstand 300 V dc
Recognition time with half-cycle ac
< 2 ms
immunity filter removed
Recognition time with filter on < 12 ms
11.1.1 NOMINAL PICKUP AND RESET THRESHOLDS
Nominal battery
Logic levels: 60-80% DO/PU Logic Levels: 50-70% DO/PU Logic Levels: 58-75% DO/PU
voltage
24/27 V Logic 0 < 16.2V, Logic 1 > 19.2V Logic 0 <12V, Logic 1 > 16.8V Logic 0 <15.7V, Logic 1 > 18V
30/34 Logic 0 < 20.4V, Logic 1 > 24V Logic 0 < 15V, Logic 1 > 21V Logic 0 < 19.7V, Logic 1 > 22.5V
48/54 Logic 0 < 32.4V, Logic 1 > 38.4V Logic 0 < 24V, Logic 1 > 33.6V Logic 0 < 31.3V, Logic 1 > 36V
110/125 Logic 0 < 75V, Logic 1 > 88V Logic 0 < 55.V, Logic 1 > 77V Logic 0 < 72.5V, Logic 1 > 82.5V
220/250 Logic 0 < 150V, Logic 1 > 176V Logic 0 < 110V, Logic 1 > 154V Logic 0 < 145V, Logic 1 > 165V
Note:
Filter is required to make the opto-inputs immune to induced AC voltages.
11.2 STANDARD OUTPUT CONTACTS
Compliance In accordance with IEC 60255-1:2009

Use General purpose relay outputs for signalling, tripping and alarming
Rated voltage 300 V
Maximum continuous current 10 A
30 A for 3 s
Short duration withstand carry
250 A for 30 ms
Make and break, dc resistive 50 W
Make and break, dc inductive 62.5 W (L/R = 50 ms)
Make and break, ac resistive 2500 VA resistive (cos phi = unity)
Make and break, ac inductive 2500 VA inductive (cos phi = 0.7)
Make and carry, dc resistive 30 A for 3 s, 10000 operations (subject to the above limits)
Make, carry and break, dc resistive 4 A for 1.5 s, 10000 operations (subject to the above limits)
Make, carry and break, dc inductive 0.5 A for 1 s, 10000 operations (subject to the above limits)
Make, carry and break ac resistive 30 A for 200 ms, 2000 operations (subject to the above limits)
Make, carry and break ac inductive 10 A for 1.5 s, 10000 operations (subject to the above limits)
P94V-TM-EN-5 333
Loaded contact 1000 operations min.

Unloaded contact 10000 operations min.
Operate time < 5 ms
Reset time < 10 ms
11.3 WATCHDOG CONTACTS
Use Non-programmable contacts for relay healthy/relay fail indication

Breaking capacity, dc resistive 30 W
Breaking capacity, dc inductive 15 W (L/R = 40 ms)
Breaking capacity, ac inductive 375 VA inductive (cos phi = 0.7)
11.4 SHORTING LINK
Maximum operating voltage 300Vrms, 300Vdc

Maximum operating current 20A
334 P94V-TM-EN-5
12 ENVIRONMENTAL CONDITIONS
12.1 AMBIENT TEMPERATURE RANGE
Compliance IEC 60255-27: 2005

Test Method IEC 60068-2-1:2007 and IEC 60068-2-2 2007
Operating temperature range -25°C to +55°C (continuous)
Storage and transit temperature range -25°C to +70°C (continuous)
12.2 TEMPERATURE ENDURANCE TEST
Temperature Endurance Test

Test Method IEC 60068-2-1: 2007 and 60068-2-2: 2007
-40°C (96 hours)
Operating temperature range
+70°C (96 hours)
-40°C (96 hours)
Storage and transit temperature range
+85°C (96 hours)
12.3 AMBIENT HUMIDITY RANGE
Compliance IEC 60068-2-78: 2001 and IEC 60068-2-30: 2005

Durability 56 days at 93% relative humidity and +40°C
Damp heat cyclic six (12 + 12) hour cycles, 93% RH, +25 to +55°C
12.4 CORROSIVE ENVIRONMENTS
Compliance IEC 60068-2-42: 2003, IEC 60068-2-43: 2003

Industrial corrosive environment/poor environmental 21 days exposure to elevated concentrations (25ppm) of SO2
control, Sulphur Dioxide at 75% relative humidity and +25°C
Industrial corrosive environment/poor environmental 21 days exposure to elevated concentrations (10ppm) of H2S
control, Hydrogen Sulphide at 75% relative humidity and +25°C
Salt mist IEC 60068-2-52: 1996 KB severity 3
P94V-TM-EN-5 335
13 TYPE TESTS
13.1 INSULATION

Insulation resistance > 100 M ohm at 500 V DC (Using only electronic/brushless insulation tester)
13.2 CREEPAGE DISTANCES AND CLEARANCES

Pollution degree 3
Overvoltage category lll
Impulse test voltage (not RJ45) 5 kV
Impulse test voltage (RJ45) 1 kV
13.3 HIGH VOLTAGE (DIELECTRIC) WITHSTAND
IEC Compliance IEC 60255-27: 2005

Between independent opto-inputs or Vx and other circuits 2.82kV dc for 1 minute
Between all other independent circuits 2 kV ac rms for 1 minute
Between Vx or opto-inputs, and protective earth terminal 2.82kV dc for 1 minute
Between all other independent circuits and protective earth terminal 2 kV ac rms for 1 minute
Across open watchdog contacts 1 kV ac rms for 1 minute
Across open contacts of changeover output relays 1 kV ac rms for 1 minute
Between all RJ45 contacts and protective earth terminal 1 kV ac rms for 1 minute
Between all screw-type EIA(RS)485 contacts and protective earth terminal 1 kV ac rms for 1 minute
ANSI/IEEE Compliance ANSI/IEEE C37.90-2005
Across open contacts of normally open output relays 1.5 kV ac rms for 1 minute
Across open contacts of normally open changeover output relays 1 kV ac rms for 1 minute
Across open watchdog contacts 1 kV ac rms for 1 minute
13.4 IMPULSE VOLTAGE WITHSTAND TEST

Between all independent circuits Front time: 1.2 µs, Time to half-value: 50 µs, Peak value: 5 kV, 0.5 J
Between terminals of all independent circuits Front time: 1.2 µs, Time to half-value: 50 µs, Peak value: 5 kV, 0.5 J
Between all independent circuits and protective
Front time: 1.2 µs, Time to half-value: 50 µs, Peak value: 5 kV, 0.5 J
earth conductor terminal
336 P94V-TM-EN-5
Note:
Exceptions are communications ports and normally-open output contacts, where applicable.
P94V-TM-EN-5 337
14 ELECTROMAGNETIC COMPATIBILITY
14.1 1 MHZ BURST HIGH FREQUENCY DISTURBANCE TEST
Compliance IEC 60255-22-1: 2008, Class III, IEC 60255-26:2013

Common-mode test voltage (level 3) 2.5 kV
Differential test voltage (level 3) 1.0 kV
14.2 DAMPED OSCILLATORY TEST
EN61000-4-18: 2011: Level 3, 100 kHz and 1 MHz. Level 4: 3 MHz,

Compliance
10 MHz and 30 MHz, IEC 60255-26:2013
Differential mode test voltage 1.0 kV
14.3 IMMUNITY TO ELECTROSTATIC DISCHARGE
Compliance IEC 60255-22-2: 2009 Class 3 and Class 4, IEC 60255-26:2013

Class 4 Condition 15 kV discharge in air to user interface, display, and exposed metalwork
Class 3 Condition 8 kV discharge in air to all communication ports
14.4 ELECTRICAL FAST TRANSIENT OR BURST REQUIREMENTS
IEC 60255-22-4: 2008 and EN61000-4-4:2004. Test severity level lll and lV,
Compliance
IEC 60255-26:2013
Applied to communication inputs Amplitude: 2 kV, burst frequency 5 kHz and 100 KHz (level 4)
Applied to power supply and all other
Amplitude: 4 kV, burst frequency 5 kHz and 100 KHz (level 4)
inputs except for communication inputs
14.5 SURGE WITHSTAND CAPABILITY
Compliance IEEE/ANSI C37.90.1: 2002

4 kV fast transient and 2.5 kV oscillatory applied common mode and differential
Condition 1
mode to opto inputs, output relays, CTs, VTs, power supply
4 kV fast transient and 2.5 kV oscillatory applied common mode to
Condition 2
communications, IRIG-B
338 P94V-TM-EN-5
14.6 SURGE IMMUNITY TEST
Compliance IEC 61000-4-5: 2005 Level 4, IEC 60255-26:2013

Pulse duration Time to half-value: 1.2/50 µs
Between all groups and protective earth conductor terminal Amplitude 4 kV
Between terminals of each group (excluding communications
Amplitude 2 kV
ports, where applicable)
14.7 IMMUNITY TO RADIATED ELECTROMAGNETIC ENERGY
Compliance IEC 60255-22-3: 2007, Class III, IEC 60255-26:2013

Frequency band 80 MHz to 3.0 GHz
Spot tests at 80, 160, 380, 450, 900, 1850, 2150 MHz
Test field strength 10 V/m
Test using AM 1 kHz @ 80%
Compliance IEEE/ANSI C37.90.2: 2004
Frequency band 80 MHz to 1 GHz
Spot tests at 80, 160, 380, 450 MHz
Waveform 1 kHz @ 80% am and pulse modulated
Field strength 35 V/m
14.8 RADIATED IMMUNITY FROM DIGITAL COMMUNICATIONS
Compliance IEC 61000-4-3: 2006, Level 4, IEC 60255-26:2013

Frequency bands 800 to 960 MHz, 1.4 to 2.0 GHz
Test using AM 1 kHz / 80%
14.9 RADIATED IMMUNITY FROM DIGITAL RADIO TELEPHONES
Compliance IEC 61000-4-3: 2006, IEC 60255-26:2013

Frequency bands 900 MHz and 1.89 GHz
14.10 IMMUNITY TO CONDUCTED DISTURBANCES INDUCED BY RADIO

FREQUENCY FIELDS
Compliance IEC 61000-4-6: 2008, Level 3, IEC 60255-26:2013

Frequency bands 150 kHz to 80 MHz
P94V-TM-EN-5 339
Test disturbance voltage 10 V rms

Test using AM 1 kHz @ 80%
Spot tests 27 MHz and 68 MHz
14.11 MAGNETIC FIELD IMMUNITY
IEC 61000-4-8: 2009 Level 5

Compliance
IEC 61000-4-9/10: 2001 Level 5
IEC 61000-4-8 test 100 A/m applied continuously, 1000 A/m applied for 3 s
IEC 61000-4-9 test 1000 A/m applied in all planes
100 A/m applied in all planes at 100 kHz/1 MHz with a burst duration of 2
IEC 61000-4-10 test
seconds
14.12 CONDUCTED EMISSIONS
Compliance EN 55022: 2010, IEC 60255-26:2013

Power supply test 1 0.15 - 0.5 MHz, 79 dBµV (quasi peak) 66 dBµV (average)
Power supply test 2 0.5 – 30 MHz, 73 dBµV (quasi peak) 60 dBµV (average)
RJ45 test 1 (where applicable) 0.15 - 0.5 MHz, 97 dBµV (quasi peak) 84 dBµV (average)
RJ45 test 2 (where applicable) 0.5 – 30 MHz, 87 dBµV (quasi peak) 74 dBµV (average)
14.13 RADIATED EMISSIONS
Compliance EN 55022: 2010, IEC 60255-26:2013

Test 1 30 – 230 MHz, 40 dBµV/m at 10 m measurement distance
Test 2 230 – 1 GHz, 47 dBµV/m at 10 m measurement distance
Test 3 1 – 2 GHz, 76 dBµV/m at 10 m measurement distance
14.14 POWER FREQUENCY
Compliance IEC 60255-22-7:2003, IEC 60255-26:2013

Opto-inputs (Compliance is achieved using the opto- 300 V common-mode (Class A)
input filter) 150 V differential mode (Class A)
Note:
Compliance is achieved using the opto-input filter.
340 P94V-TM-EN-5
WIRING DIAGRAMS
CHAPTER 17
Chapter 17 - Wiring Diagrams P94V
342 P94V-TM-EN-5
P94V Chapter 17 - Wiring Diagrams
1 CHAPTER OVERVIEW
This chapter contains the wiring diagrams for all possible situations.
I/O Option A with NVD Input 344
I/O Option A with Check Synchronisation 345
I/O Option A with NVD Input and Ethernet 346
I/O Option A with Check Synchronisation and Ethernet 347
I/O Option B with NVD Input and 2 x RS485 Serial Inputs 348
I/O Option B with Check Synchronisation Input and 2 x RS485 Serial Inputs 349
I/O Option B with NVD Input and TCS 350
I/O Option C with Check Synchronisation Input and TCS 351
I/O Option D with NVD Input 352
I/O Option D with Check Synchronisation Input 353
I/O Option E with NVD Input 354
I/O Option F with NVD Input 355
I/O Option E with Check Synchronisation Input 356
I/O Option F with Check Synchronisation Input 357
P94V-TM-EN-5 343
2 I/O OPTION A WITH NVD INPUT
W02323
Figure 101: P94V Voltage and Frequency IED with NVD Input (Model B)
344 P94V-TM-EN-5
3 I/O OPTION A WITH CHECK SYNCHRONISATION
W02324
Figure 102: P94V Voltage and Frequency IED with Check Synchronisation input (Model P)
P94V-TM-EN-5 345
4 I/O OPTION A WITH NVD INPUT AND ETHERNET
W02327
Figure 103: P94V Voltage and Frequency IED with 8 inputs, 8 outputs, NVD Input and Ethernet (Model
B)
346 P94V-TM-EN-5
5 I/O OPTION A WITH CHECK SYNCHRONISATION AND

ETHERNET
W02328
Figure 104: P94V Voltage and Frequency IED with 8 inputs, 8 outputs, Check Synchronisation input
and Ethernet (Model P)
P94V-TM-EN-5 347
6 I/O OPTION B WITH NVD INPUT AND 2 X RS485 SERIAL

INPUTS
W02369
Figure 105: P94V Voltage and Frequency IED with 11 inputs, 12 outputs, NVD Input and 2 RS485
serial ports (Model B)
348 P94V-TM-EN-5
7 I/O OPTION B WITH CHECK SYNCHRONISATION INPUT AND 2

X RS485 SERIAL INPUTS
W02370
Figure 106: P94V Voltage and Frequency IED with 11 inputs, 12 outputs, Check Synchronisation input
and 2 RS485 serial ports (Model P)
P94V-TM-EN-5 349
8 I/O OPTION B WITH NVD INPUT AND TCS
W02371
Figure 107: P94V Voltage and Frequency IED with 11 inputs, 12 outputs and NVD Input, for Trip
Circuit Supervision (Model B)
350 P94V-TM-EN-5
9 I/O OPTION C WITH CHECK SYNCHRONISATION INPUT AND

TCS
W02372
Figure 108: P94V Voltage and Frequency IED with 11 inputs, 12 outputs and Check Synchronisation
Input, for Trip Circuit Supervision (Model P)
P94V-TM-EN-5 351
10 I/O OPTION D WITH NVD INPUT
W02373.eps
Figure 109: P94V Voltage and Frequency IED with 13 inputs, 12 outputs and NVD Input (Model B)
352 P94V-TM-EN-5
11 I/O OPTION D WITH CHECK SYNCHRONISATION INPUT
W02374.eps
Input (Model P)
P94V-TM-EN-5 353
354
12
A A
W02465
C
A B C
C B
PHASE ROTATION
N
SEE NOTES 2 & 3
Chapter 17 - Wiring Diagrams
VA
17 1
VB 18
VC 19
20
I/O OPTION E WITH NVD INPUT
46
48
NOTES: 1 50
3 4
5 6 52
7 8
(b) SHORT TERMINALS BREAK BEFORE (c). 9 10
(c) LONG TERMINAL.
(d) PIN TERMINAL (P.C.B. TYPE) 13 14
17 18
19 20
21 22
23 24
13 +
25 26
27 28 14 -
MODULE TERMINAL BLOCKS

VIEWED FROM REAR
(WITH INTEGRAL CASE
EARTH STRAP)
10P94V11-1B
P94V-TM-EN-5
P94V
13
A A
P94V
W02466
A B C
C B
PHASE ROTATION
P94V-TM-EN-5
N
VA 17
18
VB
19
VC 20
NOTES:
(a) C.T. SHORTING LINKS MAKE 1

I/O OPTION F WITH NVD INPUT
BEFORE (b) & (c) DISCONNECT.

(b) SHORT TERMINALS BREAK BEFORE (c).
(c) LONG TERMINAL.
(d) PIN TERMINAL (P.C.B. TYPE) 46
48
50
52
1 57 58
3 4 74
59 60
5 6 61 62
7 8 76
63 64
9 10 65 66 78
67 68
13 14 69 70 80
71 72 13 +
17 18 73 74 82
19 20 75 76 14 -
21 22 77 78 84
23 24 79 80
25 26 81 82
27 28 83 84
VIEWED FROM REAR 10P94V12-1B
(WITH INTEGRAL CASE
EARTH STRAP)
355
356
14
A
A
B
W02467
A B C
C B C B A
Input (Model P)
PHASE ROTATION
N
1
VA 17
18
VB
19
VC 20
46
NOTES:
48
1
(a) C.T. SHORTING LINKS MAKE 3 4
BEFORE (b) & (c) DISCONNECT. 5 6 50
(b) SHORT TERMINALS BREAK BEFORE (c). 7 8
(c) LONG TERMINAL. 9 10 52
(d) PIN TERMINAL (P.C.B. TYPE)
13 14
17 18
19 20
21 22
23 24
25 26
27 28 13 +
14 -
VIEWED FROM REAR
I/O OPTION E WITH CHECK SYNCHRONISATION INPUT
(WITH INTEGRAL CASE

EARTH STRAP)
10P94V13-1B
P94V-TM-EN-5
P94V
15
A
P94V
B
C B
C
W02468
PHASE ROTATION A B C
C B A
P94V-TM-EN-5
N
Input (Model P)
N
VA 17
18
VB
19
VC 20
NOTES:
(a) C.T. SHORTING LINKS MAKE 1

BEFORE (b) & (c) DISCONNECT.
(b) SHORT TERMINALS BREAK BEFORE (c). 46
(c) LONG TERMINAL. 48
(d) PIN TERMINAL (P.C.B. TYPE)
50
52
74
1 57 58 76
3 4 59 60
5 6 61 62 78
7 8 63 64
9 10 65 66 80
67 68 13 +
82
13 14 69 70
71 72 14 -
84
17 18 73 74
19 20 75 76
21 22 77 78
23 24 79 80
I/O OPTION F WITH CHECK SYNCHRONISATION INPUT
25 26 81 82
27 28 83 84

VIEWED FROM REAR
(WITH INTEGRAL CASE 10P94V14-1B
Figure 114: P94VP Voltage and Frequency IED with 6 inputs, 8 outputs and Check Synchronisation
EARTH STRAP)
357
358 P94V-TM-EN-5
ORDERING OPTIONS
APPENDIX A
Appendix A - Ordering Options P94V
360 P94V-TM-EN-5
P94V Appendix A - Ordering Options
Variants Order Number

1-4 5 6 7 8 9 10 11 12-13 14 15
Model Type
Voltage/Frequency Protection IED - Voltage P94V
Application
Base (with measured NVD) B
Check Synch (with derived NVD) P
Check Synch + Autoreclose (with derived NVD) R
Current/Voltage transformers
Voltage Only 1
SEF CT 2
Hardware Options
EIA RS485/IRIG-B (demodulated) 1
Two ports - EIA RS485/IRIG-B (demodulated) and Ethernet - Single channel Fibre/Copper 6
Two ports - EIA RS485/IRIG-B (demodulated) and EIA RS485 8
I/O Options
Standard (8 logic inputs + 8 relay outputs) A
Total (11 logic inputs + 12 relay outputs) B
Total (11 logic inputs + 12 relay outputs) suitable for trip circuit supervision C
Total (13 logic inputs + 12 relay outputs) D
Total (3 logic inputs + 4 relay outputs) E
Total (6 logic inputs + 8 relay outputs) suitable for trip circuit supervision F
Communication protocol
K-Bus 1
Modbus 2
IEC60870-5-103 (VDEW) 3
DNP3.0 4
IEC 61850 over Ethernet and Courier via rear K-Bus/RS485 6
IEC 61850 over Ethernet over Ethernet and with IEC60870-5-103 via rear EIA RS485 7
DNP3.0 over Ethernet and Courier via K-Bus/RS485 8
IEC 61850 over Ethernet and Modbus via rear K-Bus/RS485 9
IEC 61850 over Ethernet and DNP3.0 via rear K-Bus/RS485 A
Case
20TE Flush (no function keys, 4 programmable LEDs) B
30TE Flush (3 function keys with LEDs, 8 programmable LEDs) C
Software only 0
30TE Flush (Additional shorting link) 6
Language
Multilingual (English, French, German, Spanish) 0
Multilingual (English, Russian, Italian, Portuguese) 6
Chinese, English or French via HMI, with English or French only via Communications port C
Software Reference
Unless specified the latest version will be delivered **
Customisation / Regionalisation
Default 0
Customer specific A
Hardware design suffix

Initial release A
P94V-TM-EN-5 A1
Appendix A - Ordering Options P94V
A2 P94V-TM-EN-5
SETTINGS AND SIGNALS
APPENDIX B
Appendix B - Settings and Signals P94V
Tables, containing a full list of settings, measurement data and DDB signals for each product model, are
provided in a separate interactive PDF file attached as an embedded resource.
Tables are organized into a simple menu system allowing selection by language (where available), model
and table type, and may be viewed and/or printed using an up-to-date version of Adobe Reader.
Settings & Signals
362 P94V-TM-EN-5
Alstom Grid
© - ALSTOM 2015. All rights reserved.

Information contained in this document is
indicative only. No representation or warranty is
given or should be relied on that it is complete or
correct or will apply to any particular project. This
will depend on the technical and commercial
circumstances. It is provided without liability and
is subject to change without notice.
Reproduction, use or disclosure to third parties,
without express written authority, is strictly
prohibited.
Alstom Grid Worldwide Contact Centre
www.alstom.com/grid/contactcentre/
Tel: +44 (0) 1785 250 070
www.alstom.com

Micom P40 Agile P94V: Technical Manual

Uploaded by

Document Informationclick to expand document information

Copyright:

Available Formats

Micom P40 Agile P94V: Technical Manual

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Micom P40 Agile P94V: Technical Manual

Uploaded by

Copyright:

Available Formats

MiCOM P40 Agile P94V

Chapter 2 Safety Information 13

Chapter 3 Hardware Design 27

4.2.2 Terminal Block Right 37

Chapter 5 Voltage Protection Functions 71

Chapter 6 Frequency Protection Functions 93

6.2 Frequency-supervised R.O.C.O.F Logic 105

Chapter 7 Autoreclose 115

5.15 Reset Lckout Alm (Reset Lockout Alarm) 124

Chapter 8 Monitoring and Control 147

4.3 Opto-input Time Stamping 155

Chapter 9 Supervision 171

Chapter 10 Digital I/O and PSL Configuration 183

3.2 PSL Schemes 188

Chapter 11 Communications 197

5.4.4 Register Mapping 227

Chapter 12 Cyber-Security 251

4.4.1 Password Recovery 264

Chapter 13 Installation 269

Chapter 14 Commissioning Instructions 287

5.1.2 Insulation 295

Chapter 15 Maintenance and Troubleshooting 307

Chapter 16 Technical Specifications 317

1 Chapter Overview 319

12.4 Corrosive Environments 335

Chapter 17 Wiring Diagrams 341

Appendix A Ordering Options 359

Appendix B Settings and Signals 361

Figure 39: Average rate of change of frequency characteristic 107

Figure 79: Scheme Logic Interfaces 188

This chapter contains the following sections:

2.1 TARGET AUDIENCE

2.2 TYPOGRAPHICAL CONVENTIONS

3.1 ORDERING OPTIONS

4 FEATURES AND FUNCTIONS

4.1 PROTECTION FUNCTIONS

4.2 CONTROL FUNCTIONS

Feature IEC 61850 ANSI

4.3 MEASUREMENT FUNCTIONS

4.4 COMMUNICATION FUNCTIONS

Internal Signal OR gate 1

DDB Signal XOR gate XOR

Internal function NOT gate

Setting cell Logic 0 0

Setting value Timer

HMI key Latched on positive edge

Connection / Node Inverted logic input

Comparator for detecting

Figure 1: Key to logic diagrams

CB Digital I /O Communication Measurements Disturb. records

Figure 2: Functional Overview

This chapter contains the following sections:

2 HEALTH AND SAFETY

Protective conductor (earth) terminal

Instructions on disposal requirements

4 INSTALLATION, COMMISSIONING AND SERVICING

4.1 LIFTING HAZARDS