SEL-3021-2

SEL-3021-2 Serial Encrypting Transceiver

Use serial encryption to protect serial data links against intrusion.

  • Choose Your Level of Security.
    The new Message Authentication Protocol (MAP) secures byte-oriented data packets, such as those found on Modbus® or DNP SCADA networks, with encryption and/or authentication algorithms. Authentication of the data packets ensures the data are from a trusted source and not modified en route. Encryption not only adds greater security, but it also provides privacy. This is especially important if the data find their way onto publicly accessible networks, such as spread spectrum radios or telephone infrastructures.

  • Add cipher protocol table

  • Phase in Security With Mixed-Mode Functionality.
    The new option also provides mixed-mode functionality for multiple cipher suites to operate on the same serial multidrop network. It even allows for legs of the serial network to operate with no security. In this way, security system architects can phase in security by adding SEL-3021-2 devices to the unsecured legs later.

  • Satisfy NERC/ERO CIP Network and Security Requirements by Logging Access Attempts.
    Logging allows 1,024 volatile SER logs and 512 nonvolatile history logs. Log access attempts, remote operators, operation data, length of sessions, and time/date stamps enhance the security of SCADA, metering, and protection systems.

  • Set and Analyze Your Security System Without Removing it From Service Through Secure, Nonintrusive Setup and Monitoring.
    With SEL-5809 Settings and Diagnostic Software, perform SEL-3021-2 configuration and status monitoring via a simple graphical user interface. There are two order options for this interface: USB or Wi-Fi (IEEE 802.11b). This operator interface is secured by cryptographic session authentication and AES encryption. The wireless option has the addition of WEP protection.

  • Secure Ethernet Communications for Legacy Serial Devices.
    Combine SEL-2890 Ethernet Transceivers with SEL-3021-2 Serial Encrypting Transceivers to communicate with an SEL-351 Directional Overcurrent and Reclosing Relay over the Ethernet. The SEL-2890 devices create a serial-to-Ethernet tunnel, while the SEL-3021-2 devices provide security through data encryption and authentication.

  SEL-3021-1 SEL-3021-2 SEL-3022
Application Secure serial SCADA and EMS links Secure remote or engineering access Convert wired to wireless access
Low Latency Yes No No
CIP Logging No Yes No
Encryption Yes Yes Yes
Authentication No Yes Yes
Mixed Mode No Yes No
FIPS 140-2 Yes No No

SEL-3021-2 Communication Over Ethernet

The SEL-3021-2 and SEL-2890 enhance the security of critical infrastructure systems with encryption, authentication, and logging for legacy serial devices.

Data Sheets

Guideform Specification

Instruction Manuals

If you are not logged in you may not be able to view all of the content available.

To login use the link in the MySEL section at the top of this page.

Application Guides

If you are not logged in you may not be able to view all of the content available.

To login use the link in the MySEL section at the top of this page.

Application Notes

Flyers

Access drawings via the Online Product Configuration link in the Ordering Information box at the top right of this page (below the product photo).

From the Product Configuration page, configure your product or enter your part number via the Universal Part Number Reverse Lookup. Then, download custom .dwg or .pdf files, specific to your product.

You may also go directly to the Product Configuration page to make a product selection.

UL_CSA_CE_Logos

Schweitzer Engineering Laboratories, Inc.

2350 NE Hopkins Court
Pullman, WA 99163 - USA
Phone: +1.509.332.1890
Fax: +1.509.332.7990
© 2009 SEL  | SEL Links  | SEL Expert  | SEL Latin America  | SEL Mexico  | SEL Brazil  | SEL China