A. OID mappings ............................................................................................................................. 228
B. Abbreviations .............................................................................................................................. 229
Index ................................................................................................................................................ 231
C. Revision History .......................................................................................................................... 233
Although every precaution has been taken in preparing this information, RACOM assumes no liability
for errors and omissions, or any damages resulting from the use of this information. This document or
the equipment may be modified without notice, in the interests of improving the product.
Trademark
All trademarks and product names are the property of their respective owners.
Important Notice
•Due to the nature of wireless communications, transmission and reception of data can never be
guaranteed. Data may be delayed, corrupted (i.e., have errors), or be totally lost. Significant delays
or losses of data are rare when wireless devices such as the RipEX are used in an appropriate
manner within a well‐constructed network. RipEX should not be used in situations where failure to
transmit or receive data could result in damage of any kind to the user or any other party, including
but not limited to personal injury, death, or loss of property. RACOM accepts no liability for damages
of any kind resulting from delays or errors in data transmitted or received using RipEX, or for the
failure of RipEX to transmit or receive such data.
•Under no circumstances is RACOM or any other company or person responsible for incidental,
accidental or related damage arising as a result of the use of this product. RACOM does not provide
the user with any form of guarantee containing assurance of the suitability and applicability for its
application.
•RACOM products are not developed, designed or tested for use in applications which may directly
affect health and/or life functions of humans or animals, nor to be a component of similarly important
systems, and RACOM does not provide any guarantee when company products are used in such
applications.
•
The equipment should be used in hazardous locations under conditions according to Section 10.5,
RipEX is a widely configurable compact radio modem, more precisely a radio IP router. All you have
to do to put it into operation is to connect it to an antenna and a power supply and configure it using a
PC (tablet, smart phone) and a web browser.
RipEX default IP is 192.168.169.169/24, so set a static IP 192.168.169.x/24 on your PC, power on the
RipEX and wait approximately 48 seconds for the RipEX OS to boot. Connect your PC to RipEXs' ETH
interface, start your browser and type https://192.168.169.169 in the address line.
Before attempting to do any configuration, make sure your RipEX is the only powered-up unit around.
Since all units coming from factory share the same default settings ex factory, you could be accessing
a different unit over the air without being aware of it.
USB/ETH adapter
When accessing over the optional “XA” USB/ETH adapter, your PC will get its IP settings from the builtin DHCP server and you have to type https://10.9.8.7 in your browser. You do not need to worry about
other RipEX'es, you will be connected to the local unit in all cases.
Wifi adapter
When accessing over the optional “W1” Wifi adapter, connect your PC (tablet, smart phone) to the
RipEX Wifi AP first. Its default SSID is “RipEX + Unit name + S/N”
Your PC will get its IP settings from the built-in DHCP server and you have to type http://10.9.8.7 in
your browser. Remaining steps are the same and you do not need to worry about other RipEX'es, since
you will be connected to the local unit in all cases.
Building a reliable radio network for a SCADA system may not be that simple, even when you use such
a versatile and easy-to-operate device as the RipEX radio modem. The following step-by-step checklist
can help you to keep this process fast and efficient.
1.Design your network to ensure RF signal levels meet system requirements.
2.Calculate and estimate the network throughput and response times when loaded by your application.
3.
Perform a bench-test with 3-5 sets of RipEX's and SCADA equipment (Chapter 5, Bench test).
4.
Design the addressing and routing scheme of the network (Chapter 2, RipEX in detail and RipEX
App notes, Address planing1)
5.Preconfigure all RipEX's (Section 5.4, “Basic setup”).
6.Install individual sites
1.Mount RipEX into cabinet (Section 6.1, “Mounting”).
RipEX is a best-in-class radio modem, not only in terms of data transfer speed. This Software Defined
Radio with Linux OS has been designed with attention to detail, performance and quality. All relevant
state-of-the-art concepts have been carefully implemented.
RipEX provides 24×7 reliable service for mission-critical applications like SCADA & Telemetry for Utilities, SmartGrid power networks or transaction networks connecting lottery terminals, POS or ATM’s.
Any unit can serve as the central master, repeater, remote terminal, or all of these simultaneously, with
a configuration interface easily accessible from a web browser.
Anybody with even basic knowledge of IP networking can set up a RipEX within a matter of minutes
and maintain the network quite easily.
- Simultaneously on radio channel. COM1-RS232, COM2-RS232 or RS485, software configurable.
Virtual COM ports over ETH controlled by Terminal servers. USB for independent service access
via USB/ETH adapter and for automatic FW and SW keys upgrade.
•Wifi management
- Any smart phone, tablet or notebook can be used as a RipEX portable display.
•135–174; 215–240; 300–360; 368–512; 928–960 MHz
- Licensed radio bands
- Software-selectable channel spacing 50, 25, 12.5 or 6.25 kHz
•10 watts
- Transmission output control, nine stages from 0.1 to 10 W. Hence QAM modulations (the highest
data speed) require a very linear RF power amplifier, max. 2 W is available for them.
•Energy saving
- Sleep mode – 0.1 W, controlled via a digital input.
- Save mode – 2 W, wakes up by receiving a packet from the Radio channel
- Unique implementation of industrial protocols enables a secure addressed transmission of all
packets in all directions
•Three protocols on Radio channel
- Fully Transparent (Bridge)
- Flexible (Router) - for meshing networks providing unlimited footprint coverage without base stations
- Base driven (Router) - optimized for TCP/IP applications like IEC104 making them reliable and
stable even with a high number of RTUs.
•Backup routes
- When tested path between two RipEX IP addresses (even behind repeater or LAN) fails, automatic
switch-over to backup gateway behind Radio or Ethernet interfaces
- Unlimited number of prioritized backup gateways
- Instructional video http://www.racom.eu/ripex-backup
•VPN
- IPsec is a network protocol suite that authenticates and encrypts the packets of data sent over a
network.
- GRE is a tunneling protocol that can encapsulate a wide variety of network layer protocols inside
virtual point-to-point links over an Internet Protocol network.
•Optimization
– 3× higher throughput
- Optimization method which joins short packets, compresses data, optimises both the traffic to the
link peer and the sharing of the radio channel capacity among the links.
•TCP proxy
- Eliminates a transfer of TCP overhead over Radio channel when TCP overhead run locally between
connected device and RipEX on LAN. I.e. only payload (user) data are transferred further as UDP
(over Radio channel)
- Higher RipEX network bandwidth, no more problems with TCP timeouts
- Instructional video http://www.racom.eu/ripex-tcp-proxy
•ARP proxy
- RipEX can simulate any IP address (it may reply to any ARP request)
- This feature is typically used when RTU addresses behind different RipEX units are within the
same IP subnet and RTUs do not provide routing capabilities (neither default GW)
- Instructional video http://www.racom.eu/ripex-arp-proxy
•VLAN & Subnets
- RipEX can simulate any IP address (it may reply to any ARP request)
- Unlimited number of virtual Ethernet interfaces (IP aliases) can be set
•Embedded diagnostic & NMS
- Real time and historical (20 periods, e.g. days) statistics and graphs for the unit and its neighbours.
- SNMP including generation of TRAP alarms when preset thresholds are exceeded
- on-line/off-line (recorded to a file in the RipEX) monitoring of all interfaces
•Security
- 256 AES encryption, the most secure encryption meets FIPS 140 2 requirements
- 2048 (1024, 512) bit SSL certificate (even your own one) for https web configuration
•SW feature keys
Software authorization keys allow you to add advanced features when needed: Router mode, 166/83
(The two highest Data rates for 25 and 50 kHz channel spacing), COM2, 10 W, Backup routes
- Free Master-key trial – (all coded features) for 30 days in every RipEX
•Reliability
- 3 years warranty, rugged die cast aluminium case, military or industrial components
- Every single unit tested in a climatic chamber as well as in real traffic
•RipEX - HS
- Redundant hot standby chassis
- Two hot-stand-by standard RipEX units inside
- Automatic switchover capability on detection of failure
- Suitable for Central sites, Repeaters or Important remote sites where no single point of failure is
required
•Internal calendar time
- Can be set manually or synchronized via NTP (Network Time Protocol)
- Any RipEX also runs as a NTP server automatically
- NTP synchronization via Ethernet or over the Radio channel from another RipEX or from the builtin GPS
- Powered from internal long life Lithium Manganese battery, so it is accurate even when RipEX is
powered off
•Flash memory
- All configuration parameters are saved in flash memory
•External Flash disc
- Automatic firmware upgrade, SW keys upload, configuration backup/restore, ssl certificate and
ssh keys upload and configuration, tech-support package download
Radio modem RipEX is best suited for transmission of a large number of short messages where a
guaranteed delivery is required, i.e. for mission critical applications.
RipEX has the following basic uses:
○ Polling
In poll-response networks a central master unit communicates with a number of remote radiomodems
one at a time. The master unit exchanges data with the currently connected remote radio, and when
finished, it establishes a new connection with the next remote radio according to the polling order.
○ Report-by-exception
In report-by-exception networks remote units can be contacted similarly to polling networks. In addition, any remote unit can spontaneously send data to the master unit (typically an alarm).
○ Mesh
In mesh type networks any radio modem in the network can access any other radio modem randomly
and spontaneously. Mesh network can also host polling or report-by-exception applications, even
in several instances.
To be able to satisfy different types of applications, RipEX offers multiple options for building a radio
network. There are 2 different Operation modes, Bridge and Router with 3 different protocols on Radio
channel:
•Transparent used in Bridge mode
•Flexible used in Router mode
•Base driven used in Router mode
2.2. Bridge mode
Bridge mode with fully transparent Radio protocol is suitable for all polling (request-response) applications
with star network topologies, however repeater(s) are possible.
A packet received through any interface is broadcast to the appropriate interfaces of all units within the
network. Packets received on COM are broadcast to both COM1 and COM2 at remote sites, allowing
you to connect 2 RTUs to any radio modem.
Any unit can be configured as a repeater. A repeater relays all packets it receives through the radio
channel. The network implements safety mechanisms which prevent cyclic loops in the radio channel
(e.g. when a repeater receives a packet from another repeater) or duplicate packets delivered to the
user interface (e.g. when RipEX receives a packet directly and then from a repeater).
Beside standard packet termination by an "Idle" period on the serial port (a pause between received
bytes) the bridge mode also offers "streaming". While in streaming mode, transmission on the radio
channel starts immediately, without waiting for the end of the received frame on COM => zero latency.
Limited broadcast 255.255.255.255 and Direct broadcast e.g. 192.168.255.255 as well as
Multicast (224.0.0.0 through 239.255.255.255) on Ethernet are supported and transferred
over the network.
You can see an instructional video explaining the Bridge mode functionality here: http://www.racom.eu/ripex-bridge-mode
2.2.1. Detailed Description
Bridge mode is suitable for Point-to-Multipoint networks, where Master-Slave applications with pollingtype communication protocol are used. RipEX in bridge mode is as easy to use as a simple transparent
device, while providing communication reliability and spectrum efficiency by employing a sophisticated
protocol in the radio channel.
In bridge mode, the radio channel protocol does not solve collisions. There is a CRC check of data integrity, however, i.e. once a message is delivered, it is 100% error free.
All the messages received from user interfaces (ETH&COM) are immediately transmitted to the radio
channel.
ETH - The whole network of RipEX radiomodems behaves as a standard Ethernet network bridge.
Each ETH interface automatically learns which devices (MAC addresses) are located in the local LAN
and which devices are accessible over the radio channel. Consequently, only the Ethernet frames addressed to remote devices are physically transmitted on the radio channel. This arrangement saves
the precious RF spectrum from extra load which would be otherwise generated by local traffic in the
LAN (the LAN to which the respective ETH interface is connected).
One has to be very careful when RipEX in Bridge mode is connected to LAN, because all LAN traffic
is then broadcast to the Radio channel.
COM1,COM2 - All frames received from COM1(2) are broadcast over the radio channel and transmitted
to all COM ports (COM1 as well as COM2) on all radio modems within the network, the other COM on
the source RipEX excluding.
There is a special parameter TX delay (Adv. Config., Device), which should be used when all substations
(RTU) reply to a broadcast query from the master station. In such case massive collisions would ensue
because all substations (RTU) would reply at nearly the same time. To prevent such collision, TX delay
should be set individually in each slave RipEX. The length of responding frame, the length of radio
protocol overhead, modulation rate have to be taken into account.
2.2.2. Functionality example
In the following, common acronyms from SCADA systems are used:
•FEP - Front End Processor, designates the communication interface equipment in the centre
•RTU - Remote Telemetry Unit, the terminal SCADA equipment at remote sites
The single digits in illustrations are “site names” and do not necessarily correspond with actual addresses
of both the RipEX's and SCADA equipment. Address configuration examples are given in the nextchapter.
Polling cycle starts:
FEP sends a request packet for RTU3 through COM1 to
the connected RipEX.
Step 2
FEP’s RipEX broadcasts this packet on Radio channel.
RipEX3 and RipEX1 receive this packet.
RipEX2 doesn’t receive this packet, because it is not within
radio coverage of FEP’s RipEX.
Step 3
RipEX3 and RipEX1 send the received packet to their
COM1 and COM2.
Packet is addressed to RTU3, so only RTU3 responds.
RipEX1 is set as a repeater, so it retransmits the packet
on Radio channel. Packet is received by all RipEXes.
Step 4
RipEX2 sends repeated packet to its COM1 and COM2.
RTU2 doesn’t react, because the packet is addressed to
RTU3.
RipEX3 and FEP’s RipEX do not send the repeated
packet to their COM ports, because it has already been
sent (RipEX3) or received (FEP’s RipEX) on their COM
(anti-duplication mechanism).
RTU3 sends the reply packet.
Step 5
RipEX3 broadcasts the reply packet from RTU3 on Radio
channel.
Packet is received by RipEX1 and FEP’s RipEX.
FEP’s RipEX sends the packet (the reply from RTU3) to
FEP through COM1.
RipEX1 sends this packet to RTU1. RTU1 doesn’t react,
because the packet is addressed to FEP.
RipEX1 repeats the packet on Radio channel.
All RipEXes receive the packet.
Step 7
RipEX2 sends repeated packet to its COM1 and COM2.
RTU2 doesn’t react, because the packet is addressed to
FEP.
RipEX3 and FEP’s RipEXes do not send the repeated
packet to their COM ports, because it has been handled
already.
FEP processes the reply from RTU3 and polling cycle
continues…
2.2.3. Configuration examples
You can see an example of IP addresses of the SCADA equipment and RipEX's ETH interfaces in the
picture below.
In Bridge mode, the IP address of the ETH interface of RipEX is not relevant for user data communication. However it is strongly recommended to assign a unique IP address to each RipEXs' ETH interface,
since it allows for easy local as well as remote service access. Moreover, leaving all RipEX's with the
same (= default) IP on the ETH interface may cause serious problems, when more RipEX's are connected to the same LAN, even if by accident (e.g. during maintenance).
Because using the bridge mode makes the network transparent, the use of repeaters has certain limitations. To keep matters simple we recommend using a single repeater. However, if certain rules are
observed, using multiple repeaters in the same network is possible.
The total number of repeaters in the network is configured for every unit individually under Bridge mode
parameters. This information is contained in every packet sent. All units that receive such packet will
resume transmission only after sufficient time has been allowed for the packet to be repeated. The
packets received from user ports remain buffered and are sent after the appropriate time passes. This
prevents collisions between remote radio modems. There can be no repeater collisions if only one repeater is used.
Where two or more repeaters are used, collisions resulting from simultaneous reception of a repeated
packet must be eliminated. Collisions happen because repeaters repeat packets immediately after reception, i.e. if two repeaters receive a packet from the centre, they both relay it at the same time. If
there is a radiomodem which is within the range of both repeaters, it receives both repeated packets
at the same time rendering them unreadable.
A packet is transmitted and repeated
in steps 1, 2, 3.
In improperly designed networks collisions happen
if a remote radio modem lies in the range of two
repeaters (see the image): the packet sent from
the centre (1) is received by both repeaters. It is
repeated by them both (2) causing a collision at
the remote. In other words – there should not be
more than one repeater where the centre and remotes' coverage areas overlap.
Solution 1.
Adjust signal coverage so that RPT2 is out of range
of the centre and RPT1 is out of the range of the
remote radio modem. This can be achieved for
example by reducing the output power or using a
unidirectional antenna.
Solution 2.
Use a single repeater. (Whenever network layout
allows that.)
- RipEX REM1 is within the range
of two repeaters (RPT1 and RPT2).
The repeaters receive a packet (1)
from the centre (CEN) and repeat
it at the same time (2) causing a
collision at REM1.
Well-designed network:
- A remote is only in the range of a
singlerepeater(REM1-RPT1,
REM2-RPT2).
There is always only one repeater
where the centre and remote coverage areas overlap.
2.3. Router mode
RipEX works as a standard IP router with 2 independent interfaces: Radio and ETH. Each interface
has its own MAC address, IP address and mask.
IP packets are processed according to routing table rules. You can also set the router’s default gateway
(applies to both interfaces) in the routing table.
The COM ports are treated as standard host devices, messages can be delivered to them as UDP
datagrams to selected port numbers. The destination IP address of a COM port is either the IP of ETH
or the IP of a radio interface. The source IP address of outgoing packets from COM ports is always the
IP of the ETH interface.
The additional Virtual COM ports and Terminal server can act as other IP router ports. This enables
Serial and TCP based RTUs to be combined in one network.
Two different Radio protocols are available in the Router mode: Flexible and Base driven.
•Flexible
Suitable for master or even multi master-slave polling and report by exception from remotes concurrently. No limits in network design – each radio can work as base station, a repeater, a remote, or
•Base driven
all of these simultaneously
This protocol is optimized for TCP/IP traffic and/or 'hidden' Remotes in report-by-exception networks,
when a Remote is not be heard by other Remotes and/or different Rx and Tx frequencies are used.
It is suitable for a star network topology with up to 255 Remotes under one Base station, where
each Remote can simultaneously work as a Repeater for one or more additional Remotes.
Router mode with Flexible protocol is suitable for Multipoint networks of all topologies with unlimited
number of repeaters on the way, and all types of network traffic where Multi-master applications and
any combination of simultaneous polling and/or report-by-exception protocols can be used
Each RipEX can access the Radio channel spontaneously using sophisticated algorithms to prevent
collisions when transmitting to the Radio channel. Radio channel access is a proprietary combination
of CSMA and TDMA; the Radio channel is deemed to be free when there is no noise, no interfering
signals and no frames being transmitted by other RipEX stations. In this situation, a random selection
of time slots follows and a frame is then transmitted on the Radio channel.
Frame acknowledgement, retransmissions and CRC check, guarantee data delivery and integrity even
under harsh interference conditions on the Radio channel.
2.3.2. Router - Flexible, Functionality example
In the following example, there are two independent SCADA devices connected to RipEX's two COM
ports. One is designated RTU (Remote Telemetry Unit) and is assumed to be polled from the centre
by the FEP (Front End Processor). The other is labelled PLC (Programmable Logic Controller) and is
assumed to communicate spontaneously with arbitrary chosen peer PLCs.
Step 1
FEP sends a request packet for RTU1 through COM2 to
its connected RipEX.
Simultaneously PLC2 sends a packet for PLC1 to RipEX2
through COM1.
Step 2
FEP’s RipEX transmits an addressed packet for RTU1 on
Radio channel.
RipEX1 receives this packet, checks data integrity and
transmits the acknowledgement.
At the same time packet is sent to RTU1 through COM2.
RipEX3 receives this packet too. It doesn’t react, because
this packet is directed to RipEX1 only.
Step 3
RipEX2 waits till previous transaction on Radio channel is
finished (anti-collision mechanism).
Then RipEX2 transmits on Radio channel the addressed
packet for PLC1.
RipEX1 receives this packet, checks data integrity and
transmits acknowledgement.
At the same time packet is sent to PLC1 through COM1.
Simultaneously the reply packet from RTU1 for FEP is received on COM2.
RipEX1 transmitts the reply packet from RTU1 for FEP on
Radio channel.
All RipEXes receive this packet. This packet is addressed
to FEP’s RipEX, so only FEP’s RipEX reacts. It checks
data integrity and transmits the acknowledgement to
RipEX1.
At the same time the packet is sent to FEP through COM2.
Step 5
FEP receives the response from RTU1 and polling cycle
continues…
However any PLC or RTU can spontaneously send a
packet to any destination anytime.
2.3.3. Router - Flexible, Configuration examples
As it was mentioned above, RipEX radiomodem works as a standard IP router with two independent
interfaces: radio and ETH. Each interface has got its own MAC address, IP address and mask.
The IP router operating principles stipulate that every unit can serve as a repeater.. Everything what
is needed is the proper configuration of routing tables.
Radio IP addresses of the RipEX’s required to communicate over the radio channel must share the
same IP network. We recommend planning your IP network so that every RipEX is connected to a
separate sub-network over the Ethernet port. This helps to keep the routing tables clear and simple.
Note
Even if the IP addresses of all RipEXes in a radio channel share a single IP network, they
may not be communicating directly as in a common IP network. Only the RipEXes that are
within the radio range of each other can communicate directly. When communication with
radio IP addresses is required, routing tables must include even the routes that are within
the same network (over repeaters), which is different from common IP networks. The example
configuration below does not show such routing rules for the sake of simplicity (they are not
needed in most cases).
Formal consistency between the last byte of the radio IP address and the penultimate byte of the Ethernet address is not necessary but simplifies orientation. The “Addressing” image shows a routing table
next to every RipEX. The routing table defines the next gateway for each IP destination. In radio
transmission, the radio IP of the next radio-connected RipEX serves as the gateway.
Example of a route from FEP (RipEX 50) to RTU 2:
•The destination address is 192.168.2.2
•The routing table of the RipEX 50 contains this record:
•Based on this record, all packets with addresses in the range from 192.168.2.1 to 192.168.2.254
•Because RipEX 50’s radio IP is 10.10.10.50/24, the router can tell that the IP 10.10.10.1 belongs
•The packet is received by RipEX 1 with the address 10.10.10.1 where it enters the router
•The routing table of RipEX 1 contains the record:
•The packet is received by RipEX 2
•The router compares the destination IP 192.168.2.2 with its own Ethernet address 192.168.2.1/24
Destination 192.168.2.0/24 Gateway 10.10.10.1
are routed to 10.10.10.1
to the radio channel and sends the packet to that address over the radio channel
Destination 192.168.2.0/24 Gateway 10.10.10.2
based on which the packet is routed to 10.10.10.2 over the radio channel
and determines that the packet’s destination is within its ETH network and sends the packet over
the Ethernet interface – eventually, the packet is received by RTU 2.
In large and complex networks with numerous repeaters, individual routing tables may become long
and difficult to comprehend. To keep the routing tables simple, the addressing scheme should follow
the layout of the radio network.
More specifically, every group of IP addresses of devices (both RipEX's and SCADA), which is accessed
via a repeater, should fall in a range which can be defined by a mask and no address defined by that
mask exists in different part of the network.
A typical network consisting of a single centre and number of remotes has got a tree-like layout, which
can be easily followed by the addressing scheme – see the example in the Figure Optimised addressing
below.
Fig. 2.3: Router - Flexible, Optimised addressing
The default gateway is also a very powerful routing tool, however be very careful whenever the default
route would go to the radio interface, i.e. to the radio channel. If a packet to non-existing IP destination
came to the router, it would be transmitted over the radio channel. Such packets increase the load of
the network at least, cause excessive collisions, may end-up looping etc. Consequently the default
route should always lead to the ETH interface, unless you are perfectly certain that a packet to nonexisting destination IP may never appear (remember you are dealing with complex software written
and configured by humans).
All traffic over the Radio channel is managed by the Base station. Radio channel access is granted by
a deterministic algorithm resulting in collision free operation regardless of the network load. Uniform
distribution of Radio channel capacity among all Remotes creates stable response times with minimum
jitter in the network.
All communication on Radio channel is controlled by the Base station; all frames inside the radio network
have to be routed through the Base station. Appropriate routing has to be set.
Base station can communicate with different Modulation data speeds and different FEC settings.
Any Remote can work as a Repeater for another Remote. Only one Repeater is possible between Base
station and Remote, however a number of Remotes can use the same Repeater.
There is no need to set any routes in Routing table(s) for Remote stations located behind Repeater.
Forwarding of frames from the Base station over the Repeater in either direction is serviced transparently
by the Base driven protocol.
When Remote to Remote communication is required, respective routes via the Base station must be
set in Routing tables in the Remotes.
Frame acknowledgement, retransmissions and CRC check, guarantee data delivery and integrity even
under harsh interference conditions on the Radio channel.
2.3.6. Router - Base driven, Functionality example
A star topology with one repeater is used in the following example of a SCADA network using a polling
and report by exception combination. The Repeater is also serving as a Remote radio. The packets’
acknowledgement on Radio channel is used for transmissions in both directions in the example
Step 1
Base RipEX regularly checks the
queue status of remote RipEX
radios for which ithas no
queueing information. The feedback enables the Base station to
manage time allocations for all
Remotes to transmit.
Step 2
FEP sends a request packet to
RTU1 via Base RipEX; Base
RipEXpackettransmitsin
shortest possible time. Remote
RipEX1 receives the packet and
hands it over to RTU1, simultaneously acknowledging packet receipt to the Base RipEX.
Fig. 2.4: Router - Base driven, Functionality example
sends the reply to Remote RipEX1. During the checking process the Base RipEX detects a prepared
packet in the queue of RipEX1 and subsequently allots a Radio channel for transmission of the packet.
Remote RipEX 1 transmits the packet. If the Base RipEX successfully receives the packet, it sends an
acknowledgement and then the Remote RipEX1 clears the packet from the queue. A part of the relation
includes a hand over of information about the number of packets waiting in the queue.
Step 4
RTU2 is connected to Remote RipEX2 behind Repeater RipEX1, which manages all communication
between the Base RipEX and Remote RipEX2.
2.3.7. Router - Base driven, Configuration example
As already mentioned, RipEX works as a standard IP router with two independent interfaces: Radio
and ETH. Each interface has its own MAC address, IP address and mask.
When Base driven protocol is used, Radio IP addresses for all RipEX units must share the same IP
subnet.
The Base driven protocol routing table for each Remote RipEX can be simplified to a default gateway
route rule directed to Base RipEX Radio IP. Only one record with respective IP address/mask combination for each remote station is needed in the Base RipEX routing table.
The repeaters are not considered in routing in Base driven protocol. Each Remote RipEX uses its own
Radio IP address as a gateway in the routing table of the Base RipEX.
See chapter Advanced Configuration/ Settings/ Radio/ Base driven for more.
Fig. 2.5: Router - Base driven, Addressing
Important
For those accustomed to using the Flexible Radio protocol:
Settings for radios connected over a repeater differ considerably in Base driven protocol.
NOTE: When only serial protocols are used (and Optimization is not active), there is no need to use
Routing tables. Instead of using Routing tables records, Address translation in COM protocol settings
is used. Serial protocol address to IP address translation rules apply where the Radio IP addresses
are used. Radio IP addresses will only be used for maintenance in such circumstances.
Fig. 2.6: Router - Base driven, Addressing - Serial
Even when the SCADA devices are connected via serial port, communication remains secured and
address-based in all directions (centre-RTU, RTU-centre, RTU-RTU).
In router mode, RipEX utilises a unique implementation of various SCADA protocols (Modbus, IEC101,
DNP3, PR2000, Comli, RP570, C24, DF1, Profibus). In this implementation SCADA protocol addresses
are mapped to RipEX addresses and individual packets are transmitted as acknowledged unicasts.
Polled remote units respond to the unit that contacted them (multi master network possible) using secure
packets. When needed, RTU-RTU parallel communication is also possible.
2.4.1. Detailed Description
Each SCADA protocol, such as Modbus, DNP3, IEC101, DF1, etc., has its own unique message format,
and more importantly, its unique way of addressing remote units. The basic task for protocol utility is
to check whether a received frame is in the correct protocol format and uncorrupted. Most of the SCADA
protocols use some type of error detection codes (Checksum, CRC, LRC, BCC, etc.) for data integrity
control, so RipEX calculates this code and check it with the received one.
RipEX radio network works in IP environment, so the basic task for the protocol interface utility is to
convert SCADA serial packets to UDP datagrams. Address translation settings are used to define the
destination IP address and UDP port. Then these UDP datagrams are sent to RipEX router, processed
and typically forwarded as unicasts over the radio channel to their destination. If the gateway defined
in the routing table belongs to the Ethernet LAN, UDP datagrams are rather forwarded to the Ethernet
interface. After reaching the gateway (typically a RipEX router), the datagram is again forwarded according to the routing table.
Above that, RipEX is can to handle even broadcast packets from serial SCADA protocols. When
broadcasts are enabled in the respective Protocol settings, the defined packets are treated as broadcast
(e.g. they are not acknowledged on Radio channel). On the Repeater station, it is possible to set
whether broadcast packets shall be repeated or not.
Note
Broadcast packets are supported only on serial interfaces. Neither broadcast nor mul-
1.
ticast are supported on Ethernet when in Router mode.
2.UDP datagrams can be acknowledged on the radio channel (ACK parameter of router
mode) but they are not acknowledged on the Ethernet channel.
When a UDP datagram reaches its final IP destination, it should be in a RipEX router again (either its
ETH or radio interface). It is processed further according its UDP port. Either it is delivered to COM1(2)
port daemon, where the datagram is decapsulated and the data received on serial interface of the
source unit is forwarded to COM1(2), or the UDP port is that of a Terminal server or any other special
protocol daemon on Ethernet like Modbus TCP etc. Then the datagram is processed by that daemon
accordingly to the respective settings.
RipEX uses a unique, sophisticated protocol on the radio channel. It guaranties data integrity even
under heavy interference or weak signal conditions due to the 32 bit CRC used, minimises the likelihood
of a collision and retransmits frames when collision happens, etc. These features allow for the most
efficient SCADA application arrangements to be used, e.g. multi-master polling and/or spontaneous
communication from remote units and/or parallel communication between remote units, etc.
The anti-collision protocol feature is available only in the router mode. The bridge mode is
suitable for simple Master-Slave arrangements with polling-type application protocol.
2.5. Combination of IP and serial communication
RipEX enables combination of IP and serial protocols within a single application.
Five independent terminal servers are available in RipEX. A terminal server is a virtual substitute for
devices used as serial-to-TCP(UDP) converters. It encapsulates serial protocol to TCP(UDP) and vice
versa eliminating the transfer of TCP overhead over the radio channel.
If the data structure of a packet is identical for IP and serial protocols, the terminal server can serve as
a converter between TCP(UDP)/IP and serial protocols (RS232, RS485).
RipEX also provides a built-in converter Modbus RTU – Modbus TCP, where data structure is not the
same, so one application may combine both protocols, Modbus RTU and Modbus TCP.
You can see an instructional video explaining the Terminal server functionality here: http://www.racom.eu/ripex-terminal
2.5.1. Detailed Description
Generally, a terminal server (also referred to as serial server) enables connection of devices with a
serial interface to a RipEX over the local area network (LAN). It is a virtual substitute for the devices
used as serial-to-TCP(UDP) converters.
Examples of the use:
A SCADA application in the centre should be connected to the radio network via serial interface, however,
for some reason that serial interface is not used. The operating system (e.g. Windows) can provide a
virtual serial interface to such application and converts the serial data to TCP (UDP) datagrams, which
are then received by the terminal server in RipEX. This type of connection between RipEX and application provides best results when:
•There is no hardware serial interface on the computer
•Serial cable between RipEX and computer would be too long. E.g. the RipEX is installed very close
to the antenna to reduce feed line loss.
•LAN already exists between the computer and the point of installation
Important
The TCP (UDP) session operates only locally between RipEX and the central computer,
hence it does not increase the load on the radio channel.
In special cases, the terminal server can reduce network load from TCP applications . A TCP session
can be terminated locally at the terminal server in RipEX, user data extracted from the TCP messages
and processed as if it came from a COM port. When the data reaches the destination RipEX, it can be
transferred to the RTU either via the serial interface or via TCP (UDP), using the terminal server again.
Please note, that RipEX Terminal server implementation also supports the dynamical IP port change
in every incoming application datagram. In such case the RipEX sends the reply to the port from which
the last response has been received. This feature allows to extend the number of simultaneously
opened TCP connections between the RipEX and the locally connected application up to 10 on each
Terminal server.
2.6. Diagnostics & network management
RipEX radiomodem offers a wide range of built-in diagnostics and network management tools.
2.6.1. Logs
There are ‘Neighbours’ and Statistic logs in RipEX. For both logs there is a history of 20 log files
available, so the total history of saved values is 20 days (assuming the default value of 1440 min. is
used as the Log save period).
Neighbours
The ‘Neighbours’ log provides information about neighbouring units (RipEX’s which can be accessed
directly over the radio channel, i.e. without a repeater). Every RipEX on the network regularly broadcasts
its status, the set of so called “Watched values”: the probability of packet loss when transmitting data
over the radio channel, current supply voltage, internal temperature, measured RF output power, the
Voltage Standing Wave Ratio on the antenna feed line and the total number of packets received from
/ transmitted to ETH, COM1, COM2 interfaces. In addition, the RipEX that records this data in its log
also keeps track of how many times it listened to its neighbouring unit as well as of the RSS and DQ
recorded. See Adv. Conf., Diagnostic for more.
Statistic
The ‘Statistic’ log provides information about the volume of data traffic on all interfaces: radio, ETH,
COM1, COM2. It offers detailed information about the number of transmitted packets, their size and
the throughput per second. Moreover, a detailed division into user and service packets is available for
the radio channel. See chapter Adv. Conf., Diagnostic for more.
2.6.2. Graphs
An independent database periodically stores the Watched values (see 'Neighbours' log above) from
up to five neighbouring RipEX's and from the local one, there including most important values from the
Statistic log. All these values can be displayed as graphs.
The graphs are available in summary and detailed versions. Detailed logging is triggered on when a
threshold value has been reached for the specific item to enable a more detailed investigation into the
units’ operation when an alarm event occurs. Each graph can display two different elements at once,
including their set thresholds. Each of the values may originate from a different RipEX unit.
See chapter Adv. Conf., Graphs for more.
2.6.3. SNMP
RipEX implements an SNMPv1/v2c and SNMPv3. The values provided by RipEX are shown in the
MIB table, its Severity level is 3. RipEX also allows generating SNMP traps when thresholds have been
reached for the monitored values: RSScom, DQcom, TXLost[%], Ucc, Temp, PWR, VSWR, ETH[Rx/Tx],
COM1[Rx/Tx], COM2[Rx/Tx], HW Alarm Input and/or for some internal warnings and errors.
See chapter RipEX App notes, SNMP for RACOM RipEX1for more.
MIB table can be found there too.
2.6.4. Ping
To diagnose the individual radio links RipEX is equipped with an enhanced Ping tool. In addition to the
standard info such as the number of sent and received packets or the round trip time, it provides the
overall load, the resulting throughput, BER, PER and specific data about the quality of the radio transmission, RSS and DQ for the weakest radio link on the route.
See chapter Adv. Conf., Ping for details.
2.6.5. Monitoring
Monitoring is an advanced on-line diagnostic tool, which enables a detailed analysis of communication
over any of the interfaces of a RipEX router. In addition to all the physical interfaces (RADIO, ETH,
COM1, COM2), some internal interfaces between software modules (e.g. Terminal servers, Modbus
TCP server etc.) can be monitored when such advanced diagnostics is needed.
Monitoring output can be viewed on-line or saved to a file in the RipEX (e.g. a remote RipEX) and
downloaded later.
Fig. 2.7: Interfaces
See chapter Adv. Conf., Monitoring for details.
2.7. Firmware update and upgrade
Occasionally RipEX firmware update or upgrade is released. An update improves functionality and/or
fix software bugs. Updates can be downloaded for free from www.racom.eu2.