Skip to main content

Set the interlock rules

The topological interlock rules come with defaults that suit most substations. Change them when the operation of the plant requires it: for example, set Device loses supply to Unlockable where every outage must be confirmed, or a rule to Locked where no override may ever be possible. For what each rule checks, see Topological interlocking.

Before you begin​

  • The project is open in the screen editor, with a page that has electrical symbols.
  • Changing the settings needs the right to edit the project.

Steps​

1. Open the interlocking settings​

Click an empty place on the canvas. In PROPERTIES, scroll to ELECTRICAL › COLORING and further down to Topological interlocking.

Topological interlocking settings with second-user approval, token lifetime, command selection timeout, Selection required (server) and the first rule levels.

2. Choose the rule levels​

Each rule has a list: Do not check, Unlockable or Locked.

Topological interlocking settings with Interlock override: second-user approval, the token lifetime, Command selection timeout, Selection required and the rule levels from Energizing onto earth to Device loses supply.
RuleDefault
Energizing onto earthUnlockable
Switching in an undefined areaUnlockable
Disconnector under loadUnlockable
Device loses supplyDo not check
Undefined area growsUnlockable
Joining different networksLocked
Joining different voltage levelsLocked
Possible joinUnlockable

Prefer Locked to Do not check when you want to forbid an operation: Do not check removes the protection entirely.

3. Set the override and selection settings​

Interlock override: second-user approval switched on.
SettingDefaultMeaning
Interlock override: second-user approvalonOverriding an interlock needs a second user's approval. Overriding a safety interlock should be a decision of two authenticated people.
Interlock override token lifetime (s)6010–300. After the passwords are entered, the command must be sent within this time, so that an old decision is not used after the field has changed.
Command selection timeout (s)103–120. A selected command that is not confirmed within this time is dropped. IEC 60870-5 select times are 10–30 s; a short time stops a forgotten selection from being confirmed later.
Selection required (server)onThe server sends a device command only if the device was selected in the control panel first; two operators cannot control the same device at the same time.

Topological alarms​

Below the rule levels, Topological alarms sets the priority of the alarms raised by the topology service, per alarm type. Each type has a list: Default, Off (only where allowed), Low, Medium, High and Critical. Default keeps the priority in the table; the tooltip of each row shows it. A fixed priority replaces it.

TypeDefault priorityOff allowed
Confirmed conflictBy rule level: Locked → critical, Unlockable → highNo
Possible conflictBy rule level: Locked → medium, Unlockable → lowYes
Fault zoneShort circuit critical, earth fault highNo
Island operationMediumYes
Measurement ↔ topology mismatchHighYes
Unsupplied loadBy consumer criticality: normal low, important high, critical critical; see Set the consumer criticalityYes

Confirmed conflicts and fault zones are safety alarms: they cannot be switched off, only their priority can be changed.

Result​

Save the project (Ctrl+S). The new levels apply to the next command, on the screens and on the server. Try them with the electrical simulation.