MDS SD4TM Secure, Long Range IP/Ethernet Product Presentation August 2007 Product Presentation

GE MDS SD Series Digital Radio Transceiver Agenda Product Positioning Product Overview Enhanced Benefits Network Scenarios SD4 and IP/Ethernet Latest Firmware Features GE MDS SD Series Digital Radio Transceiver

Product Positioning

MDS SD4 – Market Demands Increased demand for Ethernet and TCP/IP technology to facilitate the operation and maintenance of SCADA systems Users of radio communications in Utility SCADA are concerned with an increasing “noise floor” and the potential for radio interference in the unlicensed bands (ISM Band WiLAN) Regulatory changes require radio communications with greater spectral efficiency and increased cyber security GE MDS has sold licensed band radios since the first model came out in 1985. We have the most expertise in design of this type of radios. In last 2-3 years there has been a growing concern with interference in the unlicensed band. And a concern with security in general, and specifically with wireless. The concerns with reliability and cost of installing and operating a communications system are also applicable, although they are not new. Tremendous pressure to do more with less personnel. Opportunity for more automation. 25% of the workforce expected to retire in the next 5 years, 50% to retire in 10 years. TCP/IP technology is an enabler of greater control with less effort and much simpler operation and maintenance of communication systems in general, and wireless systems in particular. Critical infrastructure organizations with Private Land Mobile Radio (PLMR) frequencies between 150 MHz and 512 MHz are mandated by the FCC to narrowband in order to improve overall spectrum efficiency. We've heard that many customers are taking this opportunity to analyze their entire communications network in order to build a next-generation system that will allow for their needs today and in the future.

MDS SD4 - Product Positioning Secure, Long-Range IP/Ethernet communications for SCADA applications Serial and Ethernet interfaces . . . Future-proof technology migration onto IP networks AES 128-bit encryption . . . For secure communications and regulatory compliance Backwards Compatible . . . Seamless integration into existing MDS 4710/4790 systems Store & Forward . . . Spectrum saving feature for repeater sites using Store & Forward function. Media Access Control . . . Enhanced collision avoidance technology using Media Access Control (MAC) feature.

Product Overview

MDS SD4 – Features & Benefits Application Flexibility Low-power consumption . . . Sleep mode reduces power usage by up to 50% Long range wireless . . . Twice the receive sensitivity for more range and less cost of infrastructure (-112 dBm @ 9600bps) Serial and Ethernet interfaces . . . Future-proof technology migration onto IP networks Backwards Compatible . . . Seamless integration into existing MDS 4710/4790 systems Software defined . . . Single hardware platform configurable for 6.25, 12.5 kHz or 25 kHz channels Industrially Hardened Rugged . . . Class 1, Div 2 for Hazardous Locations and IEEE 1613 for noise immunity Reliable & Scalable Licensed Band Operation . . . For exclusive-use, non-shared operation in 400 MHz band Secure AES 128-bit encryption . . . For secure communications

Flexible Communications Ethernet Port 10/100 BaseT Data and firmware load HTML Configuration COM1 Serial Port Dual Function Data or Management Local Configuration COM2 Serial Port RS232 or RS485 Serial-to-Serial IP-to-Serial Power Port 10-30 VDC Antenna Port 12.5 kHz channel spacing (ICASA) AES-128 Encryption Remote Management

SD4 Operating Modes Packet with MAC Enhanced mode for Media Access Control and Store & Forward functions. Required for AES-encryption & Multi-Host feature Over The Air (OTA) format is NOT compatible with 4710 Packet Default mode for SD4-ES and SD4-SS Modules Transparent OTA format is compatible with 4710 Best choice for new SD4 features in mixed 4710 networks Supports Data on COM1 and IP/Ethernet x710 Mode for integration into legacy 4710 networks only

SD4 Duplex Repeater Full Duplex Radio Module for Master / Repeater Installations Options for Redundancy on RF channel Comes fitted with factory tuned Duplexer IP-to-Serial – with integrated terminal server AES 128-bit encryption Menu System for ease of configuration Confidential - Internal Use Only

Enhanced Benefits

Built-in Web Configuration Page Uses web based SD Device Manager for easy configuration of all SD Series parameters including transmit and receive frequencies, channel size and modem speed SD Device Manager is also used to access important performance and maintenance information SD Series configuration and maintenance can also be performed using Telnet and HyperTerminal sessions

Spectrum Saving Store & Forward Saves radio spectrum by re-using frequencies to repeat signals Extend Communication paths using single radio Store and Forward Used in Packet with MAC mode for radio network management and collision avoidance Host Computer Remote Device SD4 Store&Forward Single Freq. Repeater

Comprehensive Network Management Manage your SD network using PulseNET NMS PulseNET is purpose-built for industrial communications and includes sophisticated and meaningful pre-built workflows along with intuitive graphical representations of the network Access historical network and equipment performance trending to optimize availability through predictive maintenance A comprehensive NMS system with drill-down capabilities from the network layer to the device level.

Network Scenarios

Simple IP/Serial Application

SD4 with Repeater + Local RTU/PLC SD4 at Remote Locations Serial + ETH & Encryption Connects to RTU/PLC GE MDS SD4 Remote GE MDS SD4 Remote PLC/RTU SD4 installed at Master Site Serial + ETH & Encryption Connects to Host Computer Connects to Host PLC Repeater Host Computer SD4 Duplex Repeater Serial + ETH for PLC Interface

Optimized Communications MDS SD4 and IP/Ethernet Optimized Communications

Frame/Packet/Message Structure Ethernet and IP protocols add information to data payloads to allow communications to occur in layers. Industrial Protocols like Modbus TCP/IP works the same way Eth ICMP data ping Eth IP UDP SNMP data Eth IP TCP FTP data Eth IP TCP MB hdr data Modbus TCP/IP 18 20 8 10 (Size in bytes)

SCADA to RTU Communications All SCADA protocols work with master-slave model Modbus TCP DNP3 over IP Any serial polled protocol encapsulated over IP PC Server SCADA Software RTU#1 RTU#1 Query RTU#1 Query TCP Server Virtual data transfer TCP Client TCP TCP IP IP Eth Eth Actual data transfer The RTU receives the Ethernet frame and extracts the data before processing it Modbus data is encapsulated within TCP/IP/Ethernet frames/packets Ethernet frame Eth IP TCP RTU#1 Query

Wireless Ethernet Bridges A bridge transmits frames at the Ethernet layer level Every wireless bridge works this way PC Server SCADA Software RTU#1 RTU#1 Query RTU#1 Query TCP Client Virtual data transfer TCP Server Eth IP TCP TCP IP Eth W Eth W Eth Ethernet frame Ethernet frame Eth IP TCP RTU#1 Query Eth IP TCP RTU#1 Query Wireless Ethernet frame (80+ bytes) W Eth IP TCP RTU#1 Query

MDS SD4 Optimized Communications SD4 eliminates TCP/IP overhead Works with: Modbus TCP/IP DNP3 over IP Any serial polled protocol encapsulated over IP PC Server SCADA Software RTU#1 Query RTU#1 SD4 SD4 TCP Client 192.168.1.201 TCP Server RTU#1 Query 192.168.1.101 TCP Server TCP Client TCP TCP Eth IP TCP TCP 192.168.1.100 IP IP IP 192.168.1.200 Eth Eth Eth Ethernet frame Wireless SD4 frame (20+ bytes) RTU#1 Query Ethernet frame Eth IP TCP RTU#1 Query Eth IP TCP RTU#1 Query TCP/IP/Ethernet headers are removed by the sending SD4 radio Only the data portion is transmitted over the air TCP/IP/Ethernet headers are regenerated by the receiving SD4 radio. The RTU receives exactly the same Modbus data as if it was connected directly to PC Server W Eth W Eth Wireless Ethernet frame (80+ bytes) W Eth IP TCP RTU#1 Query

SD4 and IP/Ethernet Data All IP connections terminate locally at the SD radio The transmitting SD extracts RTU data packet content and broadcasts it over-the-air The receiving SD regenerates the TCP/UDP data packet Makes efficient use of the channel, but has limitations SD radios don’t route or bridge Ethernet data, it encapsulates industrial protocols in IP payloads

Latest Firmware Features

SD4 New Features New in the latest firmware revision for the SD series radios (release 4.1.5) Extended Ethernet capability; supporting up to 3 simultaneous TCP/IP Client/Server connections to hosts and devices and “ping” over the air to remote devices. Extended Over The Air data speeds; now up to 19200bps on a simplex 12,5Khz channel. Double the previous rates. Added maintenance functions e.g. reprogram remotes over the air, modem type, frequencies etc. Simultaneous use of COM1, COM2 and ETH ports for data, acting like a full gateway for device connectivity. WEB interface for easy programming with setup wizards MAC network management with reduced overhead and guaranteed zero collisions over the air. Store & Forward functionality for spectrum saving repeaters. Terminal Server feature for Eth to Serial Conversion. Full support for exception based protocols e.g. DNP3 & IEC 60870-5-101/104.