NATIONAL GRID SA

Title: Index Number:

WI-NG-6460-002-016
SAS Redundancy Testing Page Number:
2 of 19

3.0 WORK INSTRUCTIONS

3.1 Definitions
a. SAS Overview: The SAS HMI View page where all SAS Equipment
(Servers, gateways, GPS, Ethernet switches & IEDs) can be supervised
and observed
b. System View: The SAS HMI view page where all Substation SLD can be
monitored, controlled, measured and supervised.

3.2 Required Documentations and Testing Tools:

a. SAS Prerequisites Check List CL-NG-6460-002-001
b. SAS Redundancy Test Formats DS-NG-6460-002-016
c. SAS Cubicle Drawing
d. SAS Architecture
e. SAS Hardware Specifications

3.3 CSD Engineer /Technician

a. Witnessing all related test conducted by the testing engineer.
b. Verifying the test results with respect to the acceptance criteria wherever
applicable
c. Dually signing the test formats prepared by the testing engineer
d. Archiving the completed test results as per the approved archiving system.

3.4 Contractor Testing Engineer

The contractor testing engineer shall Follow the instructions below for
conducting the SAS Redundancy Testing:

3.4.1 Servers Redundancy

3.4.1.1 Interruption of the Ethernet link between the SAS SERVERS

 Go on OWS. Launch HMI (no login necessary). Go system View.

 Check both servers are connected to SAS. Check the SAS
Overview both servers SRV_M & SRV_B are operational.
 On normal operation SAS is connected to SRV_M. Check on the
concerned SAS panel the name of connected server is “SRV_M”.
 Go on SAS Panel, Unplug the LAN-A only, System should not be

Archiving System Website: http://AMAS TP-NG-6250-001-007

 NATIONAL GRID SA

Title: Index Number:

WI-NG-6460-002-016
SAS Redundancy Testing Page Number:
3 of 19

effected but only alarm will be received in SAS HMI.

 Plug-In LAN-A and Check the Status of LAN-A (Alarm at HMI is
inactive and SAS Overview).
 Repeat the procedure for LAN-B and confirmed the status and
alarm at HMI.
 Go on SAS cubicle. Unplug LAN (A & B) link of the SRV_M. After
few second the HMI should have an alarm for SRV_M Fail.
 Go on HMI. Go to SAS overview. Check the SRV_M representation
is RED.
 Verify that SRV_M switched-over to SRV_B. Confirm Server name
in concerned SAS Panel is “SRV_B”.
 Check you can navigate on all the pages. On SAS Overview check
all the equipment is still active.
 At this stage you can validate Redundancy is activated.
 Plug again LAN Ethernet of SRV_M on SAS panel. After a while,
the alarm should be inactive.
 On the SAS Overview, check the status of Server is switched back
to SRV_M.
 Go on HMI. Go to SAS view. Check the SRV_M representation is
GREEN.
 Disconnect the LAN Ethernet of SRV_B. Only an alarm has to be
displayed on the HMI.
 Go on HMI. Go to SAS Overview. Check the SRV_B representation
is RED.
 Check you can navigate on all the pages. On system view check all
the equipment is still active.
 At this stage you can validate Redundancy is activated.
 Plug again LAN Ethernet of SRV_B on SAS panel. After a while,
the alarm should be inactive.
 Go on HMI. Go to SAS overview. Check the SRV_B representation
is GREEN.

3.4.1.2 Interruption by forcing switch-OFF (Shutdown) condition

 Go on OWS. Launch HMI (no login necessary). Go system View.
 Check both servers are connected to SAS. The representation is

Archiving System Website: http://AMAS TP-NG-6250-001-007

 NATIONAL GRID SA

Title: Index Number:

WI-NG-6460-002-016
SAS Redundancy Testing Page Number:
4 of 19

GREEN. Go the SAS Overview on HMI. check that state of both

servers SRV_M & SRV_B are operational.
 On normal operation SAS is connected to SRV_M. Check on the
SAS panel the name of connected server is “SRV_M”.
 Go on SAS cubicle. Switch OFF the SRV_M. After few second the
HMI should have an alarm for SRV_M disconnection.
 Go on HMI. Go to SAS Overview. Check the SRV_M
representation is RED.
 Check that SAS has switched connection to SRV_B on the top
panel. Check on the SAS panel the name of connected server is
“SRV_B”.
 Check you can navigate on all the pages. On system view check all
the equipment is still active.
 At this stage you can validate Redundancy is activated.
 Switch ON the SRV_M in SAS panel. After few minutes, the alarm
should be inactive.
 On the top panel, check the SAS is connected back to SRV_M.
 Go on HMI. Go to System view. Check the SRV_M representation
is GREEN.
 Switch OFF the SRV_B. After few second the HMI should have an
alarm for SRV_B disconnection.
 Go on HMI. Go to Alarm page. Check the SRV_B disconnection
alarm is active.
 Go on HMI. Go to System view. Check the SRV_B representation
is RED.
 Check you can navigate on all the pages. On system view check all
the equipment is still active.
 At this stage you can validate Redundancy is activated.
 Switch ON the SRV_B in SAS panel. After few minutes, the alarm
should be inactive.
 Go on HMI. Go to System view. Check the SRV_B representation
is GREEN.
 Repeat the same procedure for SRV_B.

Archiving System Website: http://AMAS TP-NG-6250-001-007

 NATIONAL GRID SA

Title: Index Number:

WI-NG-6460-002-016
SAS Redundancy Testing Page Number:
5 of 19

3.4.1.3 Interruption by stopping server application

 Go on OWS. Launch HMI (no login necessary). Go system View.
 Check both servers are connected to SAS. The representation is
GREEN. Go the SAS Overview on HMI. check that state of both
servers SRV_M & SRV_B are operational.
 On normal operation SAS is connected to SRV_M. Go on SAS
Server panels stopped the server application of SRV_M. After few
second the HMI should have an alarm for SRV_M disconnection.
 Go on HMI. Go to SAS overview. Check the SRV_M representation
is RED.
 Verify that SRV_M switched-over to SRV_B. Confirm Server name
in concerned SAS Panel is “SRV_B”.
 Check you can navigate on all the pages. On SAS Overview check
all the equipment is still active.
 At this stage you can validate Redundancy is activated.
 Start the server application o SRV_M and alarm in HMI should be
inactive.
 On the SAS Overview, check the status of Server is switched back
to SRV_M.
 Go on HMI. Go to SAS view. Check the SRV_M representation is
GREEN.

3.4.2 Engineering Work Station Redundancy Test

a. Go to EWS SAS Panels.

b. Verify the connection as per SAS Approved Architecture.
c. Verify the both connection to EWS is healthy in SAS Overview.
d. Disconnect the Network work connection and observe the system is
healthy.
e. Go to the SAS HMI Overview and verify that network connection-1 is
fail and received alarm at HMI.
f. Reconnect the N/W connection-1 and observe system is healthy.
g. Confirm in SAS overview the healthiness of connection and inactive
alarm at HMI.
h. Repeat the procedure for Network connection-2 and inspect the
system.
Archiving System Website: http://AMAS TP-NG-6250-001-007
 NATIONAL GRID SA

Title: Index Number:

WI-NG-6460-002-016
SAS Redundancy Testing Page Number:
6 of 19

i. Disconnect the Network connection-1 & 2.

j. The EWS is now will not be healthy, confirm in SAS Overview and
EWS fail alarm should be received in HMI.
k. Reconnect the network connection-1 & 2 and inspect the
healthiness of the system

3.4.3 Gateways Redundancy

3.4.3.1 Interruption by forcing switch-OFF (Shutdown) condition

of SCADA Gateways
 Go on OWS. Launch HMI (no login necessary). Go system
View.
 Check both Gateways are connected to SAS. The
representation is GREEN. Go the SAS Overview on HMI.
check that state of both Gateways Main & Redundant are
operational.
 On normal operation SCADA/CRCC is connected to Main
Gateway. Check on the SAS panel the name of connected
gateway.
 Go on SAS cubicle. Switch OFF/Shutdown the Gateway Main.
After few second the HMI should have an alarm for GTW_M
disconnection.
 Go on HMI. Go to SAS Overview. Check the GTW_M
representation is RED.
 Check that SAS has switched connection to GTW_B on the
SAS panel. Check on the SAS panel the name of connected
server is “GTW_B”.
 Check you can navigate on all the pages. On system view
check all the equipment is still active.
 At this stage you can validate Redundancy is activated.
 Switch ON the GTW_M in SAS panel. After few minutes, the
alarm should be inactive.
 On the SAS panel, check the SAS is connected back to
GTW_M.
 Go on HMI. Go to System view. Check the GTW_M
representation is GREEN.

Archiving System Website: http://AMAS TP-NG-6250-001-007

 NATIONAL GRID SA

Title: Index Number:

WI-NG-6460-002-016
SAS Redundancy Testing Page Number:
7 of 19

 Switch OFF the GTW_B. After few second the HMI should
have an alarm for GTW_B disconnection.
 Go on HMI. Go to Alarm page. Check the GTW_B
disconnection alarm is active.
 Go on HMI. Go to System view. Check the GTW_B
representation is RED.
 Check you can navigate on all the pages. On system view
check all the equipment is still active.
 At this stage you can validate Redundancy is activated.
 Switch ON the GTW_B in SAS panel. After few minutes, the
alarm should be inactive.
 Go on HMI. Go to System view. Check the GTW_B
representation is GREEN.

3.4.3.2 The same procedure can be repeated in case when

Gateway application is stopped or LAN disconnection.

3.4.4 SAS HMI Redundancy

3.4.4.1 Interruption of the Ethernet link between the SASHMI

 Select one signal for evaluation.
 Go to OWS_MAIN. Open HMI.
 Go to OWS_BACK UP. Open HMI.
 Check the value and the visual representation of this signal is
identical on both HMI.
 Go to OWS_BACK UP. Remove the LAN Ethernet connection
of the HMI.
 Change the status of the selected signal. Check whether this
update is observed in the OWS_MAIN HMI.
 Go to OWS_BACK UP. Connect the LAN Ethernet connection
of the HMI.
 Once HMI is loaded. Check the value is the visual
representation of this signal is identical on both HMI.
 Select one signal for evaluation.
 Go to OWS_MAIN. Open HMI.

Archiving System Website: http://AMAS TP-NG-6250-001-007

 NATIONAL GRID SA

Title: Index Number:

WI-NG-6460-002-016
SAS Redundancy Testing Page Number:
8 of 19

 Go to OWS_BACK UP. Open HMI.

 Check the value and the visual representation of this signal is
identical on both HMI.
 Go to OWS_MAIN. Remove the LAN Ethernet connection of
the HMI.
 Change the status of the selected signal. Check whether this
update is observed in the OWS_BACKUP HMI.
 Go to OWS_MAIN. Connect the LAN Ethernet connection of
the HMI.
 Once HMI is loaded. Check the value is the visual
representation of this signal is identical on both HMI

3.4.4.2 Interruption by forcing switch-OFF (Shutdown) condition

 Select one signal for evaluation.
 Go to OWS_MAIN. Open HMI.
 Go to OWS_BACK UP. Open HMI.
 Check the value and the visual representation of this signal is
identical on both HMI.
 Go to OWS_BACK UP. Switch OFF the HMI.
 Change the status of the selected signal. Check whether this
update is observed in the OWS_MAIN HMI.
 Go to OWS_BACK UP. Switch ON the HMI.
 Once HMI is loaded. Check the value is the visual
representation of this signal is identical on both HMI.
 Select one signal for evaluation.
 Go to OWS_MAIN. Open HMI.
 Go to OWS_BACK UP. Open HMI.
 Check the value and the visual representation of this signal is
identical on both HMI.
 Go to OWS_MAIN. Switch OFF the HMI.
 Change the status of the selected signal. Check whether this
update is observed in the OWS_BACKUP HMI.
 Go to OWS_MAIN. Switch ON the HMI.
 Once HMI is loaded. Check the value is the visual
representation of this signal is identical on both HMI.

Archiving System Website: http://AMAS TP-NG-6250-001-007

 NATIONAL GRID SA

Title: Index Number:

WI-NG-6460-002-016
SAS Redundancy Testing Page Number:
9 of 19

3.4.4.3 Interruption by stopping server application

 Select one signal for evaluation.
 Go to OWS_MAIN. Open HMI.
 Go to OWS_BACK UP. Open HMI.
 Check the value and the visual representation of this signal is
identical on both HMI.
 Go to OWS_BACK UP. Stop the SASHMI application.
 Change the status of the selected signal. Check whether this
update is observed in the OWS_MAIN HMI.
 Go to OWS_BACK UP. Start the SASHMI application.
 Once HMI is loaded. Check the value is the visual
representation of this signal is identical on both HMI.
 Select one signal for evaluation.
 Go to OWS_MAIN. Open HMI.
 Go to OWS_BACK UP. Open HMI.
 Check the value and the visual representation of this signal is
identical on both HMI.
 Go to OWS_MAIN. Stop the SASHMI application.
 Change the status of the selected signal. Check whether this
update is observed in the OWS_BACKUP HMI.
 Go to OWS_MAIN. Start the SASHMI application.
 Once HMI is loaded. Check the value is the visual
representation of this signal is identical on both HMI

3.4.5 GPS Redundancy

GPS redundancy test may be verified during Time Synchronization test

3.4.6 Redundancy of Computers Hard Disk

During normal operation condition both the hard drives will be

synchronized with each other. All the LED on the HARD drive will be
green. There will be no alarm raise in the System for any hard disk
failure.

3.4.6.1 Simulate failure of hard disk 1

Archiving System Website: http://AMAS TP-NG-6250-001-007
 NATIONAL GRID SA

Title: Index Number:

WI-NG-6460-002-016
SAS Redundancy Testing Page Number:
10 of 19

 Both hard disks are plugged in the computer.

 Plug out the hard disk 1.
 The hard disk 2 takes over the whole operation, without any
interruption on the system.
 The SAS reports the failure of hard disk 1.

3.4.6.2 Restoring hard disk 1

 Restore hard disk 1 to computer.
 Wait until mirroring of hard disk 1 is ready.
 The SAS reports the normal operation of hard disk 1.
 Both hard disks are plugged in.

3.4.6.3 Simulate failure of hard disk 2

 Both hard disks are plugged in the computer.
 Plug out the hard disk 2.
 The hard disk 1 takes over the whole operation, without any
interruption on the system.
 The SAS reports the failure of hard disk 2.

3.4.6.4 Restoring hard disk 2

 Restore hard disk 1 to computer.
 Wait until mirroring of hard disk 1 is ready.
 The SAS reports the normal operation of hard disk 1.

3.4.7 Communication Redundancy

3.4.7.1 Ring Redundancy of the Communication Switched

The basic condition of the ring communication of the switches

as follows:

Archiving System Website: http://AMAS TP-NG-6250-001-007

 NATIONAL GRID SA

Title: Index Number:

WI-NG-6460-002-016
SAS Redundancy Testing Page Number:
11 of 19

 Select the Ethernet node/switch. Note the switch and port

number.
 Unplug one communication link from a port which is forming a
ring.
 Go on HMI. Go on Switch part.
 Check the communication with the switch is alarmed.
 Go on System view. Check a cross is displayed on the link
between both switch
 Change the state of, one of the signals coming from the IED
which is connected to the switch which is intended to be
tested. Check this value is updated in HMI. (In this condition
the value should be updated in HMI). Also check with “PING
Test” from Windows Command Prompt whether the
communication is still active or not.
 Plug the Link which was removed. Unplug the any other
random link forming a ring. Note the switch and port number
 Go on HMI. Go on Switch part.
Archiving System Website: http://AMAS TP-NG-6250-001-007
 NATIONAL GRID SA

Title: Index Number:

WI-NG-6460-002-016
SAS Redundancy Testing Page Number:
12 of 19

 Check the communication with the switch is alarmed (other

switch).
 Go on System view. Check a cross is displayed on the link
between both switch
 Change the state of, one of the signals coming from the IED
which is connected to the switch which is intended to be
tested. Check this value is updated in HMI. (In this condition
the value should be updated in HMI). Also check with “PING
Test” from Windows Command Prompt whether the
communication is still active or not.
 Process state and measurements values are always shown as
valid, in station HMI and on NCC simulator.
 The cable interruptions are indicated by the ring supervision in
station HMI and on NCC simulator.
 None of the generated events is lost in station HMI and on
NCC simulator.

3.4.7.2 SAS Architecture Verification:

 Each IED has two active channels connected to two different
Ethernet switch in LAN-A & B for PRP Protocol. The test has to
verify available connection(PRP and Non-PRP) when any
Ethernet Switch is OFF, Only those FO fail & faulty alarms
should be appeared on HMI which are connected to same ES,
if LAN-A ES is OFF then channel-1 of IED connected to ES is
to be FAIL only not channel # 2.
 Check the tightness of all FO & Ethernet cable connection and
check all ferrules of FO in all SAS panels and IEDs level as per
approved SAS Architecture.
 The Procedure is to be repeated for each Ethernet switch for
LAN-A & B and all architecture connection shall be verified in
form of alarms at HMI and SAS Overview

Archiving System Website: http://AMAS TP-NG-6250-001-007

 NATIONAL GRID SA

Title: Index Number:

WI-NG-6460-002-016
SAS Redundancy Testing Page Number:
13 of 19

Figure: SLD of Transmission substation and practical examples of PRP

and Non-PRP/HSR

 Go to SAS Communication Panel and select the Ethernet

Switch.
 Verify the FO cable and connection as per approved
architecture.
 Check stable DC-1 and DC-2 available to the concerned
Ethernet Switch.
 Switch OFF the DC-1,Observe the Network, there should not
be any impact on system except DC fail alarm will be received
at HMI-1 & 2.
 Switch-On the DC-1 and Alarm at HMI will be cleared.
 Repeat the same procedure for DC-2.
 Switch OFF the DC-1 and DC-2,the Concerned Ethernet
switch faulty alarm and all FO connected to this ES shall be fail
which shall be confirmed in HMI alarm List and SAS Overview
to be appeared.
Archiving System Website: http://AMAS TP-NG-6250-001-007
 NATIONAL GRID SA

Title: Index Number:

WI-NG-6460-002-016
SAS Redundancy Testing Page Number:
14 of 19

 If the Ethernet Switch is related to LAN-A then only Channel-1 /

Link-1 should be fail not channel-2.
 Verify all the alarms at HMI and compare the Approved
architecture connection is same as appeared alarm in HMI.
 Repeat the same procedure for each Ethernet switch forming
LAN-A and LAN-B and verify all the connection as per
approved architecture.

3.4.7.3 Parallel redundant port Redundancy of IED’s

The basic condition of the PRP supporting IED’s is as follows:

 For selected IED.

 Unplug one PRP link-A.
 Go on HMI. Go on Switch part.
 Check the communication with the IED is alarmed.
Archiving System Website: http://AMAS TP-NG-6250-001-007
 NATIONAL GRID SA

Title: Index Number:

WI-NG-6460-002-016
SAS Redundancy Testing Page Number:
15 of 19

 Go on SAS Overview. Check a cross is displayed on the link

between switch and IED Link-A.
 Change the state of, one of the signals coming from the IED.
Check this value is updated in HMI.(In this condition the value
should be updated in HMI). Also check with “PING Test” from
Windows Command Prompt whether the communication is still
active or not.
 Plug in the PRP Link-A.
 Go on SAS Overview. Check a cross is displayed on the link
between switch and IED link-A is disappeared.
 Unplug the PRP Link-B.
 Go on HMI. Go on Switch part.
 Check the communication with the IED is alarmed.
 Go on SAS Overview. Check a cross is displayed on the link
between switch and IED Link-B.
 Change the state of, one of the signals coming from the IED.
Check this value is updated in HMI.(In this condition the value
should be updated in HMI). Also check with “PING Test” from
Windows Command Prompt whether the communication is still
active or not.
 Plug the PRP Link-B.
 Go on SAS Overview. Check a cross is displayed on the link
between switch and IED link-B is disappeared.
 Process state and measurements values coming from the
tested IED are always shown as valid, in station HMI and on
NCC simulator.
 The communication port failure is indicated by the port
supervision in station HMI and on NCC simulator.
 None of the generated events is lost in station HMI and on
NCC simulator.

3.4.8 Power Supply Redundancy

3.4.8.1 Redundancy of Inverters Testing (if applicable)

3.4.8.1.1 Inverter supply used for complete SAS System

Archiving System Website: http://AMAS TP-NG-6250-001-007
 NATIONAL GRID SA

Title: Index Number:

WI-NG-6460-002-016
SAS Redundancy Testing Page Number:
16 of 19

 There should be two inverters supplying the SAS panel with

the AC supply; Main Inverter and Back Up Inverter.
 There should be two inverters installed in the panel.
 First start the system with both the inverters in “ON” condition.
 Now Stop the MAIN Inverter by switching the DC supply
feeding to the Main Inverter.
 Check whether the SAS system is still functional or not. The
load now should be shifted on Back-Up inverter.
 Start the Main inverted DC supply.
 Check whether the SAS system is still functional or not. The
load now shall be shifted on Main Inverter

3.4.8.1.2 Inverter Supply used only for SAS Monitors,

Printers and KVM

 Check both Main and Back-up Invertor are ON and in service

condition.
 Check the redundancy of main and back-up Invertor by
switching-Off the DC source.
 Observe the switch-over time as per manufacturer
recommended and inspect the system.
 Make both Invertor in normal position.
 There should be three supply given to invertor(DC-1,DC-2 and
AC supply),in case of failure any supply, the system should not
be effected.by given below procedure verify the supply
redundancy of invertor.
 Check the Invertor Operating Mode.
 Check the Invertor Main Operation Mode.
 Check the Bypassed Operation Mode.

Archiving System Website: http://AMAS TP-NG-6250-001-007

 NATIONAL GRID SA

Title: Index Number:

WI-NG-6460-002-016
SAS Redundancy Testing Page Number:
17 of 19

Input AC Input DC-1 Input DC-2 Output AC Checked

Supply Supply Supply Supply
HEALTHY OFF OFF Available and
Healthy
OFF HEALTHY OFF Available and
Healthy
OFF OFF HEALTHY Available and
Healthy
OFF OFF OFF Not Available
HEALTHY HEALTHY HEALTHY Available and
Healthy

3.4.8.2 Redundancy of Power Supply for All SAS Devices

3.4.8.2.1 In case of no inverter used in SAS panel

 Be sure that 125 VDC connected to SAS PANEL.

 Check station server, SCADA gateway, HMI has 2 hot power
supply module.
 Go to station server and try switch off power supply module-1.
 Check station server still healthy and running without any
disturbance or not.
 Go to station server and try switch off power supply module-2.
 Check station server still healthy and running without any
disturbance or not.
 The same procedure you will repeat for SCADA gateway &
HMI.

3.4.8.2.2 Redundant supply for Ethernet switches

 The Ethernet switches shall have a capability to be functional

with both AC and DC power supply.
 Select one Ethernet Switch and Note it.
 Remove the AC power supply.
 Go on HMI. Check an alarm is display. AC power supply
Failed. During this condition the switch should be in operational
Archiving System Website: http://AMAS TP-NG-6250-001-007
 NATIONAL GRID SA

Title: Index Number:

WI-NG-6460-002-016
SAS Redundancy Testing Page Number:
18 of 19

condition.
 Plug in the AC power supply.
 Remove the DC power supply.
 Go on HMI. Check the alarm. “AC power supply Failed” is not
active
 Check an alarm is display. DC power supply Failed. During this
condition the switch should be in operational condition.
 Plug in the DC power supply.
 Go on HMI. Check the alarm. “DC power supply Failed” is not
active

Archiving System Website: http://AMAS TP-NG-6250-001-007

 NATIONAL GRID SA

Title: Index Number:

WI-NG-6460-002-016
SAS Redundancy Testing Page Number:
19 of 19

4.0 REFERENCES

Index Number Title

PR-NG-6460-002 Project Commissioning
CL-NG-6460-002-001 SAS Prerequisites Check List C
DS-NG-6460-002-016 SAS Redundancy Test Formats
CL-NG-6460-002-002 Check List of SAS–Substation Automation System

5.0 REVISION HISTORY

Version Date Brief Description of Change / Annual Review
00 2015-02-26 Initial issue of National Grid Work Instruction

This document shall comply in accordance with the existing Company’s Rules and Regulations.
Any modifications therein found not conformance with the document shall be declared invalid.
For clarification and verification on this document, contact the following:

Engr. Khalid Ali Habiballah

Technical Support and Coordination Division
Commissioning Services Department
Technical Services Business Unit
Extension No. 77476 Email: 93337@ngrid.sa

Archiving System Website: http://AMAS TP-NG-6250-001-007

 Commissioning Services Department

Company Name: Contract No :

Project Title: SAS Redundancy Test Formats
Indix DS-NG-6460-002-016 Date: Page:1

1.0 Equipment General Data and Information

Substation
SAS Panel Name
DeviceType Serial No

2.0 Redundancy Testing & Diagnostic Functions

2.1 Server Redundancy

In order to check the redundancy of servers, the tests below will be

performed. All tests require observing (as applicable):

 HMI SAS Overview

 HMI Alarm List / Event List
 Online Software

In case of Substation Server failure the connected HMI Servers must switch
to the healthy Server.

Expecte Latenc Not

d Switch y/Switc Check Approved Approve Remarks
over h over ed
d
Time Time
General Test
Each computer is equipped with a
dual Ethernet card. The loss of one
connection will not disturb
functionality of the computer
 Disconnect only LAN-A
Connection of computer and …….s
check that the computer
functionality is not effected
 Vice versa test When LAN-B
is removed.
 Disconnect the LAN-A &
LAN-B and Observe Switch-
over

Tested By Contractor Representative Witnessed By Commissioning Services Dept. Representative

_____________________ __________________________ ______________________ __________________________

Name in block letters Signature Name in block letters Signature

__________________ __________________
Date Date
 Commissioning Services Department
Company Name: Contract No : SAS Redundancy Test Formats
Project Title:
Indix DS-NG-6460-002-016 Date: Page:2

Main Server(SRV_M) Faulty

Shutdown Server and generate new
inputs (events and alarms) on BCU
 Check switchover of
connected HMI to
Redundant Server
 Check updating of ………. Data
information s should
event/alarm/analogue not be
disturbed
appearance on HMI 1 & 2
 Check Fault indication of
SRV_M on HMI.
 Repeat Procedure in case
when Server Main application
stopped.
Redundant Server(SRV_B) Faulty
(Main Server healthy again)
Shutdown Redundant Server from
LAN and generate new inputs
(events and alarms) on BCU
 Check switchover of
connected HMI to Main
Server
……….
 Check updating of
s
information
event/alarm/analogue
appearance on HMI 1 & 2
 Check Fault indication of
Redundant Server on HMI.
 Repeat Procedure in case
when Redundant Server
application stopped.

Tested By Contractor Representative Witnessed By Commissioning Services Dept. Representative

_____________________ __________________________ ______________________ __________________________

Name in block letters Signature Name in block letters Signature

__________________ __________________
Date Date
 Commissioning Services Department
Company Name: Contract No : SAS Redundancy Test Formats
Project Title:
Indix DS-NG-6460-002-016 Date: Page:3

2.2 Engineering work station Communication Redundancy

Failure Mode Not

Checked Approved Remarks
Approved
 Disconnect network connection 1, and
observe that EWS is still healthy.
 Reconnect network connection 1 to
observe that EWS is healthy.
 Disconnect network connection 2, and
observe that EWS is still healthy.
 Reconnect network connection 2 to
observe that EWS is healthy.
 Disconnect network connection 1 and
2 to observe that EWS is not healthy.
 Reconnect network connection 1 and
2 to observe that EWS is healthy.

2.3 SCADA communication ,Gateway and computers hard disc

Redundancy

Station- Station-
Function Remarks
GATEWAY-1 GATEWAY -2
Redundancy of SCADA communication
links
 IEC-101 Link-1
 IEC-101 Link-2
1.
 IEC-101 Link-3
 IEC-101 Link-4
 IEC-104 Link-5
 IEC-104 Link-6
Redundancy of GATEWAY
 Switching to Gateway-2 when
communication of Gateway-1 fails
2. with SAS.
 Switching to Gateway-1 when
communication of Gateway-2 fails
with SAS.
3. Coherency of Gateway data

Tested By Contractor Representative Witnessed By Commissioning Services Dept. Representative

_____________________ __________________________ ______________________ __________________________

Name in block letters Signature Name in block letters Signature

__________________ __________________
Date Date
 Commissioning Services Department
Company Name: Contract No : SAS Redundancy Test Formats
Project Title:
Indix DS-NG-6460-002-016 Date: Page:4

2.4 Operator Workstation / (HMI) Redundancy

In case of a HMI Server failure the connected Operator workstation, the

second workstation must provide constant service.

Not
Test Case Checked Approved
Approved Remarks
Operator Workstation 1 Faulty
Shutdown HMI 1 from LAN and generate
new inputs (events and alarms) on one
typical BCU. Initiate control of any
switching device.
 Check functionality of connected
operator workstation 2(HMI-2)
 Check updating of information
event/alarm/analogue appearance
on HMI 2
 Check execution of command
 Check appearance on dot printer
 Check fault indication of HMI 1
 Repeat the Procedure in case
when HMI-1 Application is
stopped.
 Repeat the procedure in case
when LAN is removed.

Tested By Contractor Representative Witnessed By Commissioning Services Dept. Representative

_____________________ __________________________ ______________________ __________________________

Name in block letters Signature Name in block letters Signature

__________________ __________________
Date Date
 Commissioning Services Department
Company Name: Contract No : SAS Redundancy Test Formats
Project Title:
Indix DS-NG-6460-002-016 Date: Page:5

Operation Workstation 2 Faulty

(HMI 1 healthy again)
Shutdown HMI-2 and generate new
inputs (events and alarms) on one typical
BCU. Initiate control of any switching
device.
 Check functionality of connected
operator workstation 1
 Check updating of information
event/alarm/analogue appearance
on HMI 1
 Check execution of command
 Check appearance on dot printer
 Check fault indication of HMI 2
 Repeat the Procedure in case
when HMI2 Application is stopped.
 Repeat the procedure in case
when LAN is removed.
HMI 1 and HMI 2 healthy again
Check database synchronizing

Tested By Contractor Representative Witnessed By Commissioning Services Dept. Representative

_____________________ __________________________ ______________________ __________________________

Name in block letters Signature Name in block letters Signature

__________________ __________________
Date Date
 Commissioning Services Department
Company Name: Contract No : SAS Redundancy Test Formats
Project Title:
Indix DS-NG-6460-002-016 Date: Page:6

2.5 GPS Time Synchronization (SNTP) & Redundancy

To change the Process/Station level devices time, we shall disconnect or

switch off the device from the network, and change the time manually.

Failure Mode Not

Checked Approved Remarks
Approved
 Switch-off GPS1 &2,Change PC
Time settings for all PCs on
network by a small amount, and
inspect GPS time correction.
 Change times for the below
devices by a small amount,
Switch-On GPS-1and inspect if
GPS Time server 1 provides the
correct time stamp:
o HMI 1
o HMI 2
o Server Main
o Server Backup
o GW 1
o GW 2
o EWS
o Typical connected
Process level Devices
(IED).

 Inspect a healthy system.

Tested By Contractor Representative Witnessed By Commissioning Services Dept. Representative

_____________________ __________________________ ______________________ __________________________

Name in block letters Signature Name in block letters Signature

__________________ __________________
Date Date
 Commissioning Services Department
Company Name: Contract No : SAS Redundancy Test Formats
Project Title:
Indix DS-NG-6460-002-016 Date: Page:7

 GPS-1 & 2 Switched-off.

 Change times for the below
devices by a small amount,
Switch-On GPS-2 and inspect if
GPS Time server 2 provides the
correct time stamp:
o HMI 1
o HMI 2
o Server Main
o Server Backup
o GW 1
o GW 2
o Eng PC Typical
connected Process level
Devices (IED).

 Switch-on GPS-1 & 2 and

inspect system is healthy
 Disconnect GPS Time server 1
antenna, and inspect system
time stamping health / quality.
 Reconnect for healthy system.
 Disconnect GPS Time server 2
antennas, and inspect system
time stamping health / quality.
 Reconnect for healthy system.

Tested By Contractor Representative Witnessed By Commissioning Services Dept. Representative

_____________________ __________________________ ______________________ __________________________

Name in block letters Signature Name in block letters Signature

__________________ __________________
Date Date
 Commissioning Services Department
Company Name: Contract No : SAS Redundancy Test Formats
Project Title:
Indix DS-NG-6460-002-016 Date: Page:8

2.6 SAS Equipment Hard disks Redundancy

Function (Hard disk Redundancy (in case of HDD))

Checked Remarks

Normal operation condition

Simulate failure of hard disk 1
Server-1 Restoring hard disk 1
Simulate failure of hard disk 2
Restoring hard disk 2
Normal operation condition
Simulate failure of hard disk 1
Server-1 Restoring hard disk 1
Simulate failure of hard disk 2
Restoring hard disk 2
Normal operation condition
Simulate failure of hard disk 1
Gateway-1 Restoring hard disk 1
Simulate failure of hard disk 2
Restoring hard disk 2
Normal operation condition
Simulate failure of hard disk 1
Gateway-2 Restoring hard disk 1
Simulate failure of hard disk 2
Restoring hard disk 2
Normal operation condition
Simulate failure of hard disk 1
Operator Workstation-1
Restoring hard disk 1
(If applicable) Simulate failure of hard disk 2
Restoring hard disk 2
Normal operation condition
Simulate failure of hard disk 1
Operator Workstation-2
Restoring hard disk 1
(If applicable) Simulate failure of hard disk 2
Restoring hard disk 2

2.7 Communication Redundancy/Ring Topology

Tested By Contractor Representative Witnessed By Commissioning Services Dept. Representative

_____________________ __________________________ ______________________ __________________________

Name in block letters Signature Name in block letters Signature

__________________ __________________
Date Date
 Commissioning Services Department
Company Name: Contract No : SAS Redundancy Test Formats
Project Title:
Indix DS-NG-6460-002-016 Date: Page:9

Not Remar
Sr. Check
Test Chec N.A ks
No ed
ked
 Check the redundancy of the Ethernet
1. switches located on the rear of IED by
failing communication link/Channel. The
redundant Ethernet switch shall carryout the
communication without any
interruption(Zero Switch-Over).

2.8 Power Supply Redundancy Test

Input AC Input DC-1 Input DC-2 Output AC Checked

Supply Supply Supply Supply
HEALTHY OFF OFF Available and
Healthy
OFF HEALTHY OFF Available and
Healthy
OFF OFF HEALTHY Available and
Healthy
OFF OFF OFF Not Available
HEALTHY HEALTHY HEALTHY Available and
Healthy

2.9 Inverter Redundancy Test

When Main Inverter may switch over to

back-up inverter in case when supply Expected Switch Not
is interrupted Time over Time Approved Approved Remarks
Main Inverter switchover to Back-up
Inverter by switching off main supply.
Back-Up Inverter switchover to Main
Inverter by switching off main supply.

Note: The Expected Time should be as per manufacturer recommended

Tested By Contractor Representative Witnessed By Commissioning Services Dept. Representative

_____________________ __________________________ ______________________ __________________________

Name in block letters Signature Name in block letters Signature

__________________ __________________
Date Date