Shulou(Shulou.com)06/01 Report--

ISU-208N

Field application and debugging scheme of encryption module of distribution terminal

On-site debugging manual V2.0

This paper takes the ISU-208 distribution terminal encryption module device developed by Guangzhou Zhihao Electric Technology Co., Ltd. as an example to illustrate the scheme scenario and opening methods and steps of field application in the national network, which is widely used.

Catalogue

1 Product Overview 3

2 Field wiring 4

3 configuration module parameter 4

3.1 system parameter configuration 4

3.2 Serial port parameter configuration 5

3.3 Network parameters configuration 5

4 generation of certificate request file for encryption module 6

5 official certificates of master station and gateway in encryption module are imported 6

1 Product Overview

ISU-208N is a series of terminal communication hard encryption unit products independently developed by Zhihao Electric for the upgrading of distribution automation terminal information security. It is mainly used in the communication reinforcement and upgrading of distribution terminals, using the design concept of embedded security chip and 4G Netcom communication module to meet the communication security upgrade requirements of distribution station terminal (DTU) and distribution feeder terminal (FTU). It supports the functions of data standardization parsing and encapsulation, communication service control and management, two-way identity authentication, data encryption protection, terminal certificate management and so on, which can realize the data between the terminal and the master station. the distribution terminal communication encryption module which meets the national network distribution automation system standard communication protocol (101amp 104) and information security protection requirements. Support 2G/3G/4G full-band wireless communication of Mobile, China Unicom and Telecom.

The effects of the shape and structure are shown in figure 1 as follows:

Fig. 1 effect diagram of module structure

2 on-site wiring

Input DC24V working power to the module, according to the actual communication situation, if serial communication, serial port 1 is connected to GPRS wireless module with wire, and serial port 2 is connected to terminal with wire. If it is Ethernet communication, the module NET1 is connected with the communication equipment of the master station with the network cable, and the module NET2 is connected with the Ethernet communication port of the distribution terminal. (pay attention to the cross connection when connecting the serial port) the schematic diagram of the interface wiring is shown in figure 1:

Fig. 2 wiring diagram

3 configure module parameters

Use the serial port to USB tooling line to connect the maintenance port of the encryption module with the computer, run the maintenance tool of the encryption module, select the "serial port" connection mode and click "Communication connection" to establish a connection, first click "Parameter upload" to read the factory default parameters of the module to the interface, or click "Parameter default configuration" to read the default parameters to the interface to download to the module.

3.1 system parameter configuration

Configure the device name, device model, company name, ID and open the module encryption function switch according to the actual situation, at the same time, you can click "system timing" to calibrate the current module system time, click "read device time" to view the current system time, and click "download parameters" to download the parameters to the module. At the same time, you can click "parameters upload" to view the current parameter configuration of the module. The interface is as follows:

Figure 2 system parameter configuration interface

3.2 Serial port parameter configuration

According to the configuration of serial port parameters of GPRS wireless module and distribution terminal respectively, configure the relevant parameters of module serial port 1 and serial port 2, mainly including speed, check, stop bit and other parameters. After the configuration, click the parameter download to download the parameters to the module, and you can click "Parameter upload" to view the current parameter configuration of the module. The interface is as follows:

Figure 3 Serial port parameter configuration interface

3.3 Network parameter configuration

According to the actual situation, the network port 1 IP address, gateway and mask are the same as the terminal, and the working mode is server, port 2404. If the distribution terminal has bound master station IP, the source IP working mode of network port 2 should be configured as "source address transparent network port 1 peer IP" mode. At the same time, the network port 2 IP address is the same as the gateway address of the terminal, and its own gateway can not be configured, and the server IP is set to terminal IP. Working mode is client, port 2404. If the distribution terminal is not bound to the master station IP, the working mode of the network port 2 source IP is configured as "the source address adopts the network port 2 self-IP" mode, and the network port 2 IP address is set to keep any IP of the network segment with the terminal. According to the configuration of the terminal gateway, the server IP is set to the terminal IP, the working mode is the client, port 2404. After configuring the relevant parameters, click "parameters download" to go down to the module. Then restart the module after power outage, and click "Parameter upload" to view the current parameter configuration of the module.

Figure 4 Network parameter configuration interface

4 generation of certificate request file for encryption module

For specific operation methods, see the Operation Manual of Distribution Terminal Certificate Management tool (official version).

5 formal certificate import of master station and gateway in encryption module

For specific operation methods, see the Operation Manual of Distribution Terminal Certificate Management tool (official version).

6. Communication status view

After the module communication connection is successful and normal communication, if the STATUS\ SIM light on the module under the Ethernet communication connection is always on and the related NET1 and NET2 communication lights are flashing, if the COM1 and COM2 communication lights on the module under the serial communication connection are flashing, at the same time, you can also check the debugging information and connection through the maintenance software.

Technical Department of Guangzhou Zhihao Electric Technology Co., Ltd.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.