1-15 2000029EN 1 CC01 EN Wind-Farm-Communication

Classification: Internal Purpose
General Document
Wind Farm Communication
for Nordex Wind Farms using Nordex OS
Rev. 1 / 2020-12-15
Document no.: 2000029EN
Status: Released
Language: EN - English
Classification
(Confidentiality): Nordex Internal Purpose
2000029EN
Rev. 1 / 2020-12-15
This document, including any presentation of its contents in whole or in parts, is the
intellectual property of Nordex Energy GmbH. The information contained in this document is
intended exclusively for Nordex employees and employees of trusted partners and
subcontractors of Nordex Energy GmbH, Nordex SE and their affiliated companies as defined in
Section 15ff. of the German Stock Corporation Act (AktG) and must never (not even in
extracts) be disclosed to third parties.
All rights reserved.
Any disclosure, duplication, translation or other use of this document or parts thereof,
regardless if in printed, handwritten, electronic or other form, without the explicit approval of
Nordex Energy GmbH is prohibited.
 2020 Nordex Energy GmbH, Hamburg, Germany
Nordex Energy GmbH
Langenhorner Chaussee 600
22419 Hamburg
Germany
Tel.: +49 (0)40 300 30 -1000
Fax: +49 (0)40 300 30 -1101
info@nordex-online.com
http://www.nordex-online.com
2/26
2000029EN
Rev. 1 /2020-12-15
Validity
Product series / turbine type Product
Delta4000 All incl. N155
Delta All
Gamma All
3/26
2000029EN
Rev. 1 / 2020-12-15
Table of contents
1 General 6
1.1 Purpose 6
1.2 Application 6
1.3 Abbreviations 6
1.4 Referenced documents 8
2 Internet connection 9
2.1 Remote connectivity 9
2.2 Internet access 9
2.3 Broadband connection 10
2.4 VPN and Site2Site 11
2.5 Port forwarding 13
2.5.1 Required ports for wind farm network 13
2.5.2 Additional ports 14
2.5.3 Source IP addresses 15
2.6 Supply limits 15
3 Access types 16
3.1 WAN / internet 17
3.2 Customer VLAN 17
3.3 Customer firewall 18
3.4 GIF 18
3.5 TIF 18
4 Fiber optic network 19
4.1 Fiber structure 19
4.2 Single-mode outdoor cable 20
4.3 Patch panel in wind turbine 21
4.4 Patch panel in ECC 22
4.5 Fiber optic park layout 23
4.6 Supply limits 24
4.7 Customer documentation 25
4/26
2000029EN
Rev. 1 /2020-12-15
List of figures
Figure 1: Internet access 10
Figure 2: VPN connection to the site 11
Figure 3: Ethernet ports available in ECC 16
Figure 4: Diagram fiber E9/125 19
Figure 5: Patch panel in wind turbine 21
Figure 6: Patch panel in the ECC 22
Figure 7: Theory of a ring topology 23
Figure 8: Examples of fiber optic networks 24
List of tables
Table 1: Ports used for standard VPN connection 13
Table 2: Additional ports used 14
Table 3: Source IP addresses 15
Table 4: Optical values 20
Table 5: Geometrical values 20
5/26
2000029EN
Rev. 1 / 2020-12-15
1 General
The present document describes the setup and technical requirements for remote connectivity
to a wind farm, as well as internal park communication using Nordex OS.
The secure data transmission of a wind farm as well as the remote access require a reliable
and secure way to communicate. This is done via a broadband connection, which must be
capable of multi-user access. The remote connection is used by several users and used
permanently by the Nordex Control Center. It is also used for software updates. Therefore the
performance of SCADA and the connected services depends on bandwidth, which should not be
limited, but as high as possible.
In order to prevent unauthorized access to the wind farm and in order to ensure wind turbine
safety, its network has to be disconnected from host networks via firewall systems.
Additionally, access to the wind farm is only permitted for authorized users:
• Nordex users
• Suppliers and service providers on behalf of Nordex
• Customers
• Suppliers and service providers on behalf of the customer
• Utility managers / traders
1.1 Purpose
This document contains formal information regarding wind farm communication as well as
requirements the customer has to fulfill before commissioning the wind turbines.
1.2 Application
This document addresses internal and external sales personnel of Nordex, as well as customers
or suppliers and service providers on behalf of the customer.
1.3 Abbreviations
Abbreviation Designation Description
4G 4th generation of the mobile phone standard
APN Access point name Access point for mobile devices
Live data interface supporting interface types

CIF Customer interface
OPC XML DA, IEC 104, OPC UA
Condition monitoring System to detect health status of components via

CMS
system vibration measurement
Secure communication manager for internet

CRO Central router
connection
6/26
2000029EN
Rev. 1 /2020-12-15
Combined windfarm
CWE management and Power plant controller for Nordex wind parks
electrical system
Common standard for cable-based internet

DSL Digital subscriber line
connections
19” cabinet containing all SCADA components incl.

EDGE & control
ECC server, communication, power plant control and
cabinet
measurement components
Interface of CWE power plant controller to receive

GIF Grid interface
setpoints and send values from and to the utility
IP Internet protocol Standard for computer communication
Internet service
ISP Company who provide Internet access
provider
Also called 4G, standard for high speed mobile

LTE Long term evolution
device communication
IoT platform of Nordex, used as local SCADA

NxOS Nordex OS
software
ODBC is a standard application programming

Open database
ODBC interface (API) for accessing database
connectivity
management systems (DBMS)
RTU Remote terminal unit Utility device for sending and receiving values
Supervisory control Manufacture system to monitor and control the

SCADA
and data acquisition wind farm
Subscriber identity
A card placed in mobile devices allowing the device
SIM Card module for mobile
to connect to an ISP access point
connections
Intranet communication between Nordex and the

S2S Site2Site
customer via a safe and secure VPN tunnel
Part of CIF product, allows access to historical data

SQL OA SQL online access
via ODBC using SQL commands
A virtual point-to-point tunnel for network

VPN Virtual private network
communication inside an existing network
7/26
2000029EN
Rev. 1 / 2020-12-15
1.4 Referenced documents

No. Document no._Rev._Document name
[1] 2000559EN EDGE & Control Cabinet (ECC)
[2] 2000558EN CRO – Central Router
[3] 2000036EN Nordex OS – Customer VLAN
[4] 2003451EN NC SCADA-System – SQL-Database-Access
[5] 2000574EN Grid Operator Interface (GIF)
[6] 2000573EN Nordex Trading Interface (TIF)
8/26
2000029EN
Rev. 1 /2020-12-15
2 Internet connection
2.1 Remote connectivity

The following chapter describes possible communication channels including their requirements.
The provision of an internet connection is vital one the construction of wind turbines begins.
Especially for the commissioning of wind turbines, site-specific wind turbine parameters are
rolled out from Nordex central IoT platform through a encrypted VPN tunnel over the internet.
Additional grid code tests and software updates are also carried out in combination with
remote connection of experts. All these tasks require a reliable internet connection with as
much bandwidth as possible.
2.2 Internet access

The supply and operation of internet access are the responsibility of the customer. The internet
access has to be provided by a RJ45 connector. IF a LTE router, DSL Router or similar is
necessary, it is also in the customer’s scope of supply. The date on which internet access is
guaranteed has to be reported to the Nordex project manager by the customer.
For CRO configuration, Nordex requires the following information:
• Public IP address
• Local IP address (Nordex shall use for CRO)
• IP address of customer’s internet router (Standard Gateway)
• Network mask
• DNS server
The following requirements have to be fulfilled, described in following chapters:
• Public IPv4 address
• DHCP-on-upstream router must be deactivated
• Port forwarding to CRO
• Designed transfer network
• No data traffic or bandwidth limitation
9/26
2000029EN
Rev. 1 / 2020-12-15
Figure 1: Internet access
A. Internet connection D. ECC modules

A1. Nordex D1. CRO (Central router)
A2. Customer D2. Customer firewall
B. Wind farm network E. Internet access router
C. ECC D. Internet, optional Site2Site
2.3 Broadband connection

A synchronous or asynchronous broadband connection can be chosen, as long as the minimum
requirements are kept:
• Fixed Public IPv4 address
• Maximum latency (from Nordex Control Center to wind farm): 300ms
• Download from internet to wind farm: 4 Mbit/s
• Upload from wind farm to internet: 2 Mbit/s
Recommended is minimum 6 Mbit/s in both directions and 0.2 Mbit/s per turbine.
Due to the requirements above, the following examples are non-valid technologies:
PSTN, ISDN, GSM, GPRS, UMTS, VSAT/SAT, PLC
Please note:
The internet connection will be shared by different parties using different kinds of services.
Static communication and live data interfaces, like CIF OPC XML DA, are consuming
bandwidth. The bandwidth of the internet connection is the main factor of a high performance
SCADA operation.
10/26
2000029EN
Rev. 1 /2020-12-15
2.4 VPN and Site2Site

In general, Nordex is protecting the SCADA system and data transfer by using encrypted VPN
technology. This is also valid for the customer’s remote communication. OpenVPN is used for
incoming and outgoing VPN communication. Some port forwarding options, like HTTP - Port 80,
are not supported and must not be established by the customer, for cyber security reasons.
Nordex is using a static VPN connection to connect the wind farm to Nordex data center. Next
to this service technicians can also establish connections to site using OpenVPN client.
Like the Nordex service technicians, the customer also establishes a connection to the site
using OpenVPN client. The OpenVPN client software as well as user access configuration will be
provided by Nordex during SCADA installation.
As an alternative to direct communication to the site, Nordex also provides the service
“Site2Site”. Using “Site2Site” Nordex establishes the communication to the wind farm via the
customer's communication infrastructure, using IPsec Site2Site between Nordex and the
customer. It is the responsibility of the customer to guide incoming communication from
Nordex to the site.
Figure 2: VPN connection to the site
1 Internet connection 2 Standard: Direct VPN to the site

3 Alternative: IPsec Site2Site 5 Customer’s communication
infrastructure
4 Forwarded VPN tunnel to site
6 VPN to the wind turbine network
The picture above shows both possible solutions. The lower line shows the standard
communication. From the Nordex data center, a VPN tunnel is directly established to the wind
farm and park network. Further VPN tunnels are established inside that VPN tunnel to each
wind turbine, in order to reach each separated wind turbine network. This is done by using a
tunnel in tunnel architecture.
The first line shows the alternative Site2Site solution (available as a separate option). In this
setup, Nordex has a static IPsec VPN Site2Site connection to the customer’s communication
infrastructure (shown in red). Inside this VPN connection, Nordex establishes a VPN tunnel to
11/26
2000029EN
Rev. 1 / 2020-12-15
the parks network. From that point on, the communication is identical to the standard
communication, with additional VPN tunnel to each turbine.
This VPN tunnel must be permanently available. After an initial configuration, the
communication between Nordex data center and the Nordex router CRO, which is located
behind the customer firewall of the wind farm, will be tunneled by this VPN. The
communication route through the data centers or VPN connections is transparent for Nordex.
Also, redundant connections should not affect the Nordex communication route.
Access to the wind farm systems, Nordex OS, CIF and SQL OA as well as the data exchange
with the central customer systems, are routed in the wind farm via the firewall.
For a smooth connection, the following criteria must have be met and configured initially
between the operators of the Site2Site router:
• Contact information of the IT service provider on both customer and supplier side
• VPN settings
o Gateway, gateway type and encryption key
o Type of encryption etc.
• Test date and closing date
• Routing settings
• Dial-up point for VPN tunnel
• Backup dial-up points or redundancy paths
After the coordination of these items, the Nordex data center is able to establish a tunnel to
the customer network, which transmits all incoming data packages to the CRO wind farm
router and back to the VPN tunnel.
12/26
2000029EN
Rev. 1 /2020-12-15
2.5 Port forwarding

Since the Nordex CRO router is located behind a customer’s router or firewall, a connection
must be allowed to communicate via the listed ports as illustrated in the tables below. The
customer must ensure the accessibility of these ports from the public IP address. If further
modules will be installed, e.g. burglar alarm in the wind farm, more ports may be required.
2.5.1 Required ports for wind farm network

The ports described in this chapter are used for standard VPN connection and must not be
blocked by a customer firewall. These ports are also necessary in combination with an
alternative Site2Site connection and must be routed from Site2Site tunnel to the wind farm.
Direction in
the wind Description Port Protocol Target address
farm
Incoming SSH access router 10022 TCP Park network
Incoming VPN service access 15000 UDP / TCP Park network
217.5.230.28 ~
Outgoing SMTP e-mail 25 TCP
mail.nordexcontrol.com
217.5.230.28 ~
Outgoing SMTPS e-mail 465 TCP
mail.nordexcontrol.com
HTTPS access to support supportserver.nordex-

Outgoing 443 TCP
server online.com
212.116.14.1
Outgoing HTTPS access for Bachmann 443 TCP
212.116.14.2
192.53.103.108
europe.pool.ntp.org
africa.pool.ntp.org
north-
Outgoing NTP time server 123 UDP
america.pool.ntp.org
south-
america.pool.ntp.org
optional customer server
Outgoing DNS server 53 TCP 8.8.8.8
Outgoing DNS server 53 UDP 8.8.8.8
212.116.14.1 ~
Outgoing SSH for Bachmann CMS 22 TCP
cmsdialin1.bachmann.info
Outgoing Ping – ICMP –
Table 1: Ports used for standard VPN connection
13/26
2000029EN
Rev. 1 / 2020-12-15
2.5.2 Additional ports

This chapter describes additional ports used within the VPN connection to the wind farm. If an
alternative Site2Site connection is used, the below ports must also be allowed within the VPN
connection.
Direction
the in wind Description Port Protocol Target address
farm
Access to turbine sub

Incoming 8443 TCP Park network
control system
HTTPS access to Nordex OS

Incoming 443 TCP Park network
visualization
194.233.128.238
Outgoing NTP SWAS time server 123 UDP
194.64.233.7
194.163.252.4 ~
a.fwd-ns.de
Outgoing DNS domain name server 53 TCP / UDP
195..180.210.65 ~
b.fwd-ns.de
1490
Both NC communication channel TCP –
0
Both SQL online access 5432 TCP –
OPC UA
Both 4840 TCP –
(device to NordexOS)
Table 2: Additional ports used
14/26
2000029EN
Rev. 1 /2020-12-15
2.5.3 Source IP addresses

It is expected that there is no limitation from which source IP addresses the wind park is
contacted. In case incoming traffic hast to be filtered by IP addresses, a list must be agreed on in
each project . The Following IP addresses will always be used:
Name IP Domain
Nordex data center 10.90.60.130 staticovpn01.live.swas.nordex.nexinto.com
Nordex data center 195.179.65.72 –
Table 3: Source IP addresses
2.6 Supply limits

The Nordex scope of delivery ends with the Nordex CRO router. The CRO is able to establish a
connection to the internet among other features. The Nordex CRO forms the terminal point of
a fixed IP address and in its role as a firewall, it exclusively authorizes communication via
defined ports (as described in Chapter 2.5).
If optional 4G fallback solution is used, the Nordex scope of delivery also ends with the Nordex
CRO router. The CRO is equipped with a SMA socket. The customer is responsible for the
delivery and the installation as well as for the lightning protection of the antenna. The antenna
must be equipped with a SMA plug after the lightning protection.
The scope of delivery ends with the WAN port of the CRO.
15/26
2000029EN
Rev. 1 / 2020-12-15
3 Access types
This chapter describes different data access types or types to access certain SCADA functions.
Figure 3: Ethernet ports available in ECC
The EDGE & Control Cabinet (ECC) provides different Ethernet ports, depending on the
different functions or network separation of the Nordex OS SCADA EDGE system. The drawing
is a schematic description of how functions or features are related to Ethernet ports and which
ports require a direct internet connection. The drawing shows the standard setup, which
requires 3 separate connections to the router or firewall of the customer’s internet connection.
Some options may require further connections. For technical layout within the ECC and
connections between the modules, please refer to the ECC wiring plans.
WARNING
Customer VLAN and customer firewall are designed for local access. In order to
reach the services behind these Ethernet ports, the customer must configure
his router or firewall for remote connectivity to these ports in compliance with
cyber security regulations.
Bridges between the networks are not allowed.
16/26
2000029EN
Rev. 1 /2020-12-15
3.1 WAN / internet

At this Ethernet port, access to the internet must be provided according to chapter 2. Nordex
data center uses this Ethernet port to a establish a connection to the park network , as well as
turbine networks as described in 2.4. For further information, refer to the CRO documentation.
In case the customer uses the Nordex OpenVPN client, the customer also uses this port to
access the web interface of the Nordex OS SCADA system. Additional customer services are
only available at the customer firewall, refer to 3.2.
In addition to incoming connections accessing the web interface of the SCADA system, the
CRO also handles outgoing VPN connections. They are used as an optional possibility to
connect the wind farm to a trader (TIF, Trading Interface), who wants to monitor live data and
control the wind farm according to market requirements.
3.2 Customer VLAN

The customer VLAN is a separate network, provided in form of a VLAN as part of the park
network. Unlike to the other items of the park network, the customer VLAN has no IP
configuration or routing. IP setup, routing, firewalls and remote access have to be handled by
the customer. This setup provides flexibility to use the customer VLAN with all kind of devices,
like VoIP or CCTV systems. 3 Ethernet ports are provided in each nacelle, as well as 3 Ethernet
ports at each tower base and at each turbine. For central access, an additional Ethernet port is
provided in the ECC. In order to reach the customer VLAN, the customer needs to provide
internet access to the Customer VLAN. A possibility could be the Ethernet port in the ECC,
parallel to the WAN / Internet port. For more information, refer to Customer VLAN
documentation.
Remote accessibility must be handled by the customer in compliance with cyber security
regulations. It is not allowed to bridge the customer VLAN with the wind farm network. If data
exchange between the networks is required, project-specific interfaces and communication
through the customer firewall must be agreed on.
17/26
2000029EN
Rev. 1 / 2020-12-15
3.3 Customer firewall

The customer firewall is the central access system to all data services of the customer.
Remote access must be handled by the customer in compliance with cyber security
regulations.
At the customer firewall it is possible to access the web interface of the Nordex OS SCADA
system.
In addition to general SCADA access, it is also possible to access the customer interface (CIF).
Depending on the chosen protocol type, e.g. OPC XML DA, the customer can access live data.
For more information, refer to the CIF documentation.
In addition to general SCADA access and live data access, the customer can also access
historical data through SQL online access. The SQL access supports ODBC, using a PostgreSQL
driver. For more information, refer to the SQL online access documentation.
3.4 GIF
The grid interface (GIF) is the interface between the Nordex power plant control system CWE
and the signals from the utility. The GIF is directly connected to the CWE, without the Nordex
OS SCADA system in between. This ensures park operation independent of the Nordex OS
SCADA server. For more information, refer to GIF documentation.
3.5 TIF
The trader interface (TIF), is the interface between the Nordex power plant control system
CWE and a party also responsible for park operation, next to the utility, based on trading or
market requirements. The TIF is directly connected to the CWE, without the Nordex OS SCADA
system in between. This ensures park operation independent of the Nordex OS SCADA server.
For more information, refer to TIF documentation.
18/26
2000029EN
Rev. 1 /2020-12-15
4 Fiber optic network

This chapter specifies the fiberglass cables to be routed in conjunction with the installation of
the communication network with Nordex wind turbines. It describes the minimum
requirements to be used. Any other application of equal or higher quality may be applied.
For any installation or routing work carried out independently by the customer, these specified
values must at least be observed. Nordex cannot guarantee the safe operation of the networks
unless fiber optic installations meet this specification.
Nordex requires the following fiber optic cables type:
• E9/125
4.1 Fiber structure

• Central, filled buffered-fiber with 12 fibers
• Longitudinal water tightness according to EN 187000 method 605, swelling tape covers
central buffered-fiber cable
• Non-metal rodent protection made from spirally attached glass roving
• Outer sheath: PE
• Outer diameter: 9.2 mm for 1x12 fibers; 9.7 mm for 1x16 to 1x24 fibers
• Fabric load: 1.75 MJ/m for 1x12 fibers; 1.85 MJ/m for 1x16 to 1x24 fibers
• Tensile strength: 2500 N
• Crush resistance: 200 N/cm (long-term) 500 N/cm (short-term)
Figure 4: Diagram fiber E9/125
A. Scope of supply limit X. Diameter

B. Cladding Y. Refractive index
C. Primary Coating
19/26
2000029EN
Rev. 1 / 2020-12-15
4.2 Single-mode outdoor cable

The single-mode outdoor cable is an optic fiber outdoor cable with central buffered fiber cable,
longitudinal water tightness, non-metal rodent protection and graded-index fiber E9/125.
Optical values
Attenuation coefficient at 1310 nm dB/km ≤0.36
Attenuation coefficient at 1550 nm dB/km ≤0.22
Dispersion at 1285–1330 nm ps/(nm•km) ≤3.5
Dispersion at 1550 nm ps/(nm•km) ≤18
Mode-field diameter (1310 nm) µm 9.3 ±0.5
Cut-off wavelength µm 1150–1280
Refractive index at 850 nm – 1.469**
Refractive index at 1300 nm – 1.470**
Max. 10 km at 1550 nm
1 Gigabit Ethernet segment length
Max. 60 km at 1550 nm with LH
** layer-stranded
LH = Long Haul amplifier
Table 4: Optical values
Geometrical values
Cladding diameter µm 125 ±2.0
Core circularity tolerance % ≤5.0
Cladding circularity tolerance % ≤2.0
Core–cladding concentricity error µm ≤1.0
Primary cladding diameter (approx.) µm 250
Test load Kpsi (N/mm2) 100 (690)
Table 5: Geometrical values
20/26
2000029EN
Rev. 1 /2020-12-15
4.3 Patch panel in wind turbine

For the network connection, a fiber optic patch panel with a total of 24 terminals 9 µm/125 µm
(core / cladding diameter) is installed in the Bottombox (switch cabinet at the bottom of
tower).
12 of the 24 terminals are reserved for the fiber optic input cable (from the preceding node)
and the other 12 terminals for the FO output cable (to the next node). Consequently, the
incoming and outgoing fiber optic cables have to be limited to a maximum of 12 single-mode
fibers type. E9/125 µm.
Figure 5: Patch panel in wind turbine
Figure 5 shows a picture of a patch panel inside a wind turbine with the following
specifications:
• 12x LC/LC coupling
• 24x pigtails 9/125 µm
• 1x splice cassette, 4x splice holder
• Dimension: 300 x 300 x 120 mm
21/26
2000029EN
Rev. 1 / 2020-12-15
4.4 Patch panel in ECC

For the network connection, a fiber optic patch panel with a total of 48 terminals 9 µm/125 µm
(core / cladding diameter) is installed in the EDGE & Control Cabinet (ECC).
12 of the 48 terminals are reserved for the fiber optic input cable (from the preceding node)
and the other 12 terminals for the FO output cable (to the next node). The incoming and
outgoing fiber optic cables are limited to a maximum of 48 fibers type E9/125 µm, but the ECC
can optionally be extended with further patch panels.
Figure 6: Patch panel in the ECC
Figure 6 shows a picture of a patch panel inside the ECC with the following specification:
• 24x LC/LC coupling
• 24x pigtails 9/125 µm
• 4x splice cassette, 4x splice holder
• Dimension: 1 HE (19”)
22/26
2000029EN
Rev. 1 /2020-12-15
4.5 Fiber optic park layout

Nordex wind parks use ring network topology. As a result, 4 terminals have to be reserved at
each patch panel for a redundant ring communication.
When designing the redundant ring topology, the customer has to consider that only a
maximum of 10 network nodes (e.g., 9 WTs plus server) may be connected per ring.
Redundancy in "redundant ring topology", refers merely to the communication (send / receive)
via Gigabit Ethernet TCP/IP.
In theory, the network is established like a ring, meaning that the fiber optic cable starts starts
with the section between the server and the first turbine onf the ring and ends with the section
between the last turbine of the ring and the server. If one of the turbines of the ring goes
offline, the remaining network is still accessible.
Figure 7: Theory of a ring topology
Due to the fact that only one cable is connected to the turbines, it is necessary to create the
ring via patching. At each switch there are 2 ports, with 2 fibers each. In total 4 fibers are
used per turbine. For network planning it is necessary that 2 of the 4 fibers are patched
fromthe turbine to the next turbine. The figure below shows 2 examples.
23/26
2000029EN
Rev. 1 / 2020-12-15
Figure 8: Examples of fiber optic networks
For additional options, such as Condition Monitoring System (CMS) or shadow flicker module,
no additional requirements have to be considered regarding to communication, as both
systems also communicate via Fast Ethernet TCP/IP.
4.6 Supply limits

In the Nordex scope of supply there are patchboxes in each wind turbine as well as inside the
ECC. The Nordex scope of supply also provides fiber optic switches in each turbine as well as
inside the ECC to establish park communication using fiber optic cables. All additional active
and passive components required to build up the communication network in the wind park, the
complete network planning and the entire integration work are within the customer’s scope of
supply, unless agreed otherwise. The supply limit between customer and Nordex is determined
by the patch panel of the Nordex wind turbine (WT). All active and passive components
required for communication within the WT thus are within the scope of supply of Nordex.
24/26
2000029EN
Rev. 1 /2020-12-15
4.7 Customer documentation

To facilitate troubleshooting and any later expansions, complete documentation is required.
This documentation should at least include the following information:
• Routing diagram showing topology, distances, connections to the grid and cable types
• Functional circuit diagrams of the individual wind turbines with specifications of the
connections in the patch panel
The documentation has to be created by the planning or executing company.
25/26
2000029EN
Rev. 1 / 2020-12-15
Revision index
Rev. Date Author Reason for modification / chapter AST
1 2020-09-30 Eric Gräfe/ Additional IP address added in chapter 20768

TANNER AG 2.5.1 under point “HTTPS access for
Bachmann”
0 2020-03-31 Andreas First issue 20768

Nitsch
26/26

1-15 2000029EN 1 CC01 EN Wind-Farm-Communication

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

1-15 2000029EN 1 CC01 EN Wind-Farm-Communication

Uploaded by

Copyright:

Available Formats

Classification: Internal Purpose

Wind Farm Communication

for Nordex Wind Farms using Nordex OS

Document no.: 2000029EN

All rights reserved.

 2020 Nordex Energy GmbH, Hamburg, Germany

Nordex Energy GmbH

Langenhorner Chaussee 600

Tel.: +49 (0)40 300 30 -1000

Fax: +49 (0)40 300 30 -1101

• Suppliers and service providers on behalf of Nordex

• Suppliers and service providers on behalf of the customer

• Utility managers / traders

4G 4th generation of the mobile phone standard

APN Access point name Access point for mobile devices

Live data interface supporting interface types

Condition monitoring System to detect health status of components via

Secure communication manager for internet

Common standard for cable-based internet

19” cabinet containing all SCADA components incl.

Interface of CWE power plant controller to receive

IP Internet protocol Standard for computer communication

Also called 4G, standard for high speed mobile

IoT platform of Nordex, used as local SCADA

ODBC is a standard application programming

Supervisory control Manufacture system to monitor and control the

Intranet communication between Nordex and the

Part of CIF product, allows access to historical data

A virtual point-to-point tunnel for network

1.4 Referenced documents

[1] 2000559EN EDGE & Control Cabinet (ECC)

[2] 2000558EN CRO – Central Router

[3] 2000036EN Nordex OS – Customer VLAN

[4] 2003451EN NC SCADA-System – SQL-Database-Access

[5] 2000574EN Grid Operator Interface (GIF)

[6] 2000573EN Nordex Trading Interface (TIF)

2.1 Remote connectivity

2.2 Internet access

For CRO configuration, Nordex requires the following information:

• Local IP address (Nordex shall use for CRO)

• IP address of customer’s internet router (Standard Gateway)

The following requirements have to be fulfilled, described in following chapters:

• Public IPv4 address

• DHCP-on-upstream router must be deactivated

• Port forwarding to CRO

• Designed transfer network

• No data traffic or bandwidth limitation

Figure 1: Internet access

A. Internet connection D. ECC modules

2.3 Broadband connection

• Fixed Public IPv4 address

• Maximum latency (from Nordex Control Center to wind farm): 300ms

• Download from internet to wind farm: 4 Mbit/s

• Upload from wind farm to internet: 2 Mbit/s

2.4 VPN and Site2Site

Figure 2: VPN connection to the site

1 Internet connection 2 Standard: Direct VPN to the site

o Gateway, gateway type and encryption key

o Type of encryption etc.

• Test date and closing date

• Dial-up point for VPN tunnel

• Backup dial-up points or redundancy paths

2.5 Port forwarding