CNL-14-202, Eagle 21 Test Plan and Test Results: Difference between revisions

From kanterella
Jump to navigation Jump to search
(Created page by program invented by StriderTol)
 
(Created page by program invented by StriderTol)
 
(4 intermediate revisions by the same user not shown)
Line 3: Line 3:
| issue date = 10/22/2014
| issue date = 10/22/2014
| title = Eagle 21 Test Plan and Test Results
| title = Eagle 21 Test Plan and Test Results
| author name = Shea J W
| author name = Shea J
| author affiliation = Tennessee Valley Authority
| author affiliation = Tennessee Valley Authority
| addressee name =  
| addressee name =  
Line 16: Line 16:


=Text=
=Text=
{{#Wiki_filter:Tennessee Valley Authority, 1 101 Market Street, Chattanooga, Tennessee 37402 cNL-1 4-202 October 22,2014 10 cFR 50.4 U. S. Nuclear Regulatory Commission ATTN. Document Control Desk Washington, D.C. 20555-0001 Watts Bar Nuclear Plant, Unit 2 NRC Docket No. 50-391  
{{#Wiki_filter:Tennessee Valley Authority, 1 101 Market Street, Chattanooga, Tennessee 37402 cNL-1 4-202 October 22,2014 10 cFR 50.4 U. S. Nuclear Regulatory Commission ATTN. Document Control Desk Washington, D.C. 20555-0001 Watts Bar Nuclear Plant, Unit 2 NRC Docket No. 50-391


==Subject:==
==Subject:==
WATTS BAR NUCLEAR PLANT UNIT 2 - EAGLE 21 TEST PLAN AND TEST RESULTS  
WATTS BAR NUCLEAR PLANT UNIT 2                       - EAGLE 21 TEST PLAN AND TEST RESULTS


==References:==
==References:==
: 1. Letter from TVA to NRC, "Watts Bar Nuclear Plant (WBN) Unit 2 -lnstrumentation and Controls Staff lnformation Requests," dated October 21, 2010 (ML1 03140661 )2. NUREG-0847, "Supplemental Safety Evaluation Report (SSER) 23 Related to the Operation of Watts Bar Nuclear Plant, Unit 2, Docket Number 50-391," Published July 2011 The purpose of this submittal is to address a Nuclear Regulatory Commission (NRC)request for a high level test summary that demonstrates the unidirectional communication for Eagle 21 Protection Set interface.
: 1. Letter from TVA to NRC, "Watts Bar Nuclear Plant (WBN) Unit 2         -
Enclosure 1 provides the system communication test plan. (A completed copy of the test package was provided to the WBN NRC Unit 2 resident inspector.)
lnstrumentation and Controls Staff lnformation Requests," dated October 21, 2010 (ML103140661 )
Enclosure 2 provides a summary of the test steps and results. Enclosure 3 provides the requested high level summary.This Eagle 21 test addresses Supplemental Safety Evaluation Report 23, Appendix HH, Open ltems 63 and 93 (Reference 2). The Tennessee Valley Authority considers these items closed based on the information contained in the three enclosures.
: 2. NUREG-0847, "Supplemental Safety Evaluation Report (SSER) 23 Related to the Operation of Watts Bar Nuclear Plant, Unit 2, Docket Number 50-391," Published July 2011 The purpose of this submittal is to address a Nuclear Regulatory Commission (NRC) request for a high level test summary that demonstrates the unidirectional communication for Eagle 21 Protection Set interface. Enclosure 1 provides the system communication test plan. (A completed copy of the test package was provided to the WBN NRC Unit 2 resident inspector.) Enclosure 2 provides a summary of the test steps and results. Enclosure 3 provides the requested high level summary.
This Eagle 21 test addresses Supplemental Safety Evaluation Report 23, Appendix HH, Open ltems 63 and 93 (Reference 2). The Tennessee Valley Authority considers these items closed based on the information contained in the three enclosures.
There are no new regulatory commitments contained in this letter. lf you have any questions, please contact Gordon Arent at (423) 365-2004.
There are no new regulatory commitments contained in this letter. lf you have any questions, please contact Gordon Arent at (423) 365-2004.
U.S. Nuclear Regulatory Commission cNL-14-202 Page 2 October 22,2014 I declare under penalty of perjury that the foregoing is true and correct.Executed on the 22nd. W. Shea Vice President, Nuclear Licensing  
 
U.S. Nuclear Regulatory Commission cNL-14-202 Page 2 October 22,2014 I declare under penalty of perjury that the foregoing is true and correct. Executed on the 22nd day of Oqtober, 2014.
Resy'ecflully,
  . W. Shea Vice President, Nuclear Licensing


==Enclosures:==
==Enclosures:==
: 1. Eagle 21 Test Plan - Watts Bar Unit 2 Eagle 21 Unidirectional Communications Test 2. Watts Bar Nuclear Plant Unit 2 - Eagle 21 Unidirectional Communications Test Summary - 13 August 2014 3. High Level Summary and Block Diagram cc: See page 3 day of Oqtober, 2014.Resy'ecflully, U.S. Nuclear Regulatory Commission cNL-1 4-202 Page 3 October 22,2014 cc (Enclosures):
: 1. Eagle 21 Test Plan - Watts Bar Unit 2 Eagle 21 Unidirectional Communications Test
U. S. Nuclear Regulatory Commission Region !l Marquis One Tower 245 Peachtree Center Ave., NE Suite 1200 Atlanta, Georgia 30303 -1257 NRC Resident Inspector Unit 1 Watts Bar Nuclear Plant 1260 Nuclear Plant Road Spring City, Tennessee 37381 NRC Resident lnspector Unit2 Watts Bar Nuclear Plant 1260 Nuclear Plant Road Spring City, Tennessee 37381 U.S. Nuclear Regulatory Commission cNL-1 4-202 Page 4 October 22,2014 bcc (Enclosures):
: 2. Watts Bar Nuclear Plant Unit 2 - Eagle 21 Unidirectional Communications Test Summary - 13 August 2014
Jessie Quichocho U.S. Nuclear Regulatory Commission MS OBGgA One White Flint North 1 1555 Rockville Pike Rockville, Maryland 20 852-2738 Fred Brown, Deputy Regional Administrator for Construction U. S. Nuclear Regulatory Commission Region ll Marquis One Tower 245 Peachtree Center Ave., NE Suite 1200 Atlanta, Georgia 30303 -1257 ENCLOSURE 1 Tennessee Val ley Authority Watts Bar Nuclear Plant, Unit 2 Docket No. 50-391 Eagle 21 Test Plan Watts Bar Unat 2 Eagle 21 Unidirectional Communications Test E1-1 WBN Unat2 WATTS BAR UNIT 2 EAGLE2l COMi'IUNIGATIONS TEST wo {15799048 Page I of 10 Date: Prepared By: Reviewed By:fri WATTS BAR UNIT 2 EAGLE 21 UNIDIRECTIONAL COMNilUNICATIONS TEST ,{ft Date , f {zs/tf oate: l4rl QA Reviewer:i E1-2 oate:z/a?/4 WBN Unat 2 WATTS BAR UNIT 2 EAGLE?I COMMUNICATIONS TEST wo 115799048 Page 2 of 10 Date: 1. PRECAUTIONS AND LIMITATIONS A. When circuit boards or board components are removed and reinstalled from the system, they become susceptible to damage caused by the build-up or discharge of static electricity.
: 3. High Level Summary   and Block Diagram cc: See page   3
To avoid damage to circuit boards, implement the following guidelines:
 
o When replacing a circuit board at the rack, wear a wrist strap that is grounded to the rack chassis ground.o When replacing a circuit board at the rack, wear a wrist strap that is grounded to the rack chassis ground.o lf circuit board components are to be replaced, wear a grounded wrist strap while removing components from board or removing new components from their storage cases.B. Cards in the card cage are numbered right to left from the Status Panel. The DLH#1 card is in slot 9 and the SEC card is in slot 2. Each have an empty slot to the right.C. Primary Engineering Point of Contact for this test is Steve Kirk, located in !0855 (423) 36s-1 169.2. SPECTAL TOOLS, MEASURTNG AND TEST EQUIPMENT (M&TE), PARTS AND SUPPLIES A. OBTAIN the following special tools and M&TE, OR DETERMINE they are available for use: o M&TE approved Laptop Computer with ColaSoft network packet generation software installed.
U.S. Nuclear Regulatory Commission cNL-1 4-202 Page 3 October 22,2014 cc (Enclosures):
o M&TE approved Laptop Computer with Wireshark network packet analysis software installed.
U. S. Nuclear Regulatory Commission Region !l Marquis One Tower 245 Peachtree Center Ave., NE Suite 1200 Atlanta, Georgia 30303 -1257 NRC Resident Inspector Unit 1 Watts Bar Nuclear Plant 1260 Nuclear Plant Road Spring City, Tennessee 37381 NRC Resident lnspector Unit2 Watts Bar Nuclear Plant 1260 Nuclear Plant Road Spring City, Tennessee 37381
o CenterCOM AT-MR820TR Ethernet 1OBase-T network switch or equivalent supplied by NPG CEG.. CenterCOM AT-210T AUl-to-10Base T Ethernet transceiver or equivalent supplied by NPG CEG.o Techtronix TDS3032B Digital dual trace oscilloscope or equivalent with 2 probes.. Category 5 RJ-45 Ethernet cables supplied by NPG CEG(3 required.)
 
o DIP-16 socket ribbon cable adapter supplied by NPG CEG(2 required.)
U.S. Nuclear Regulatory Commission cNL-1 4-202 Page 4 October 22,2014 bcc (Enclosures):
o #22 AWG solid conductor insulated wire or equivalent supplied by NPG CEG.o Anti-static mat with grounding wrist strap.E1-3 WBN Unat 2 WATTS BAR UNIT 2 EAGLE?I COMMUNICATIONS TEST wo 115799048 Page 3 of 10 Date: 3. REFERENCES A. Vendor Manual WBN-VTD-W1 20-5A37 B. Vendor Manual WBN-VTD-W120-5058 C. Plant Drawing 2-65717-3D21 648 D. Plant Drawings 2-65717-5D93433-1 , -2, -3 E. Plant Drawings 2-65717-3D21653-1, -2 F. Plant Drawings 2-65717-1 856E60-2, -8, -9, -11 4. APPROVALS AND NOTIFICATIONS NOTE Approvals and Notifications shall be performed in accordance with Work lnitiating Document (WlD)INFORM Unit Operator (UO) that power will be removed and re-applied to the target Eagle 21 rack during the performance of this test and alarms may be activated as a result.UO 5. PERFORMANCE CAUTION Anti-static station shall be used during remova!/installation of Eagle 21 circuit cards to prevent Electro-static discharge damage.NOTE Personnel involved in the performance of this test should be familiar with the Eagle 21 Protection Set hardware and the M&TE used during the test. They should also be familiar with the software tools that are used.NOTE The Eagle 21 rack power supply switches are located on the upper power supply drawer. lf power is not applied to the target Eagle 21 rack, then Steps 5.A.6, 5.A.8, 5.A.10 and 5.A.12 may be marked N/A.A.E1-4 WBN Untt2 WATTS BAR UNIT 2 EAGLE21 COMMUNICATIONS TEST wo 115799048 Page 4 of 10 Date: A. Removal/lnstallation of MC-09 DLH#1 Card and Removal/lnstallation of MC-02 SEC card 1. RECORD the Unit 2 Eagle 21 rack number that has been designated for the performance of this test.Rack#UNID Sys Eng 2. LOCATE and IDENTIFY the Eagle 21 rack specified in Step 5.A.1.Peer 3. DOGUMENT the As-Found condition of the following power supply switches located in the upper power supply drawers of the Eagle 21 rack.LCP Power Supply PRI Power Supply SEC Power Supply TSP Power Supply Peer 4. INFORM UO that power will be removed from the rack recorded above.5. LOCATE and IDENTIFY the LCP power supply switch.Peer 6. PLACE the LCP power supply switch to the OFF position.Peer 7. LOCATE and IDENTIFY the PRI power supply switch.B. PLACE the PR! power supply switch to the OFF position.E1-5 Peer WBN Unat 2 WATTS BAR UNIT 2 EAGLE21 COMMUNICATIONS TEST wo 115799048 Page 5 of 10 Date: Peer 9. LOCATE and IDENTIFY the LCP power supply switch.Peer 10. PLACE the SEC power supply switch to the OFF position.Peer 11. LOCATE and IDENTIFY the LCP power supply switch.Peer 12. PLACE the TSP power supply switch to the OFF position.Peer 13. REMOVE/RE-INSTALL MC-09 LCP DLH#1 and MC-02 SEC cards from microprocessor card cage slots 9 and 2 as follows: a. PLACE anti-static mat on a suitable work surface and ENSURE mat is connected to frame ground of the designated Eagle 21 rack.tr b. REMOVE the two cable hood retainer bars by pressing in on bar while pushing slide on one end of bar toward the center of bar until slide is free of slot in card cage chassis. tr c. LOOSEN screws in card retainer at top and bottom of card guides.tr d. MOVE card retainer out of the way.tr e. LOCATE and IDENTIFY cable hood for MC-09 DLH#1 card.tr f. REMOVE cable hood from MC-09 DLH#1 card.tr g. USE plastic card ejectors on DLH#1 card to pivot board out of card guides and PULL card out of card guides.tr h, PLACE card on anti-static mat.tr i. LOCATE and IDENTIFY cable hood for MC-02 SEC card.j. REMOVE cable hood from MC-02 SEC card.E1-6 WBN Unat 2 WATTS BAR UNIT 2 EAGLE2l COMMUNICATIONS TEST wo 115799048 Page 6 of 10 Date: k. USE plastic card ejectors on SEC card to pivot board out of card guides and PULL card out of card guides.tr l. PLACE card on anti-static mat.u m. INSTALL DIP-16 socket ribbon cable adapter in empty socket U12 on DLH#1 board with black dot aligned to pin 1.tr n. Carefully RE-INSTALL DLH#I board in slot 9 of microprocessor card cage while routing ribbon cable out the front of the rack.tr o. LOCATE and IDENTIFY lSBX 586 Ethernet Daughter board.tr p. REMOVE iSBX 586 Ethernet daughter board from SEC card.tr q. INSTALL DIP-16 socket ribbon cable adapter in empty socket U12 on SEC board with black dot aligned to pin 1.D r. INSERT #22 AWG solid conductor insulated wire into jumper locations E55 and E51 on SEC board. tr s. RE-INSTALL lSBX 586 Ethernet daughter board on SEC card.tr t. Carefully RE-INSTALL SEC board in slot 2 of microprocessor card cage while routing ribbon cable and wires out the front of the rack.tr u. RE-INSTALL cable hood on MC-09 DLH#1 card.tr v. RE-INSTALL cable hood on MC-02 SEC card.tr w. RE-INSTALL microprocessor cage card retainer.tr 14. INFORM UO that power will be restored to the rack recorded above.15. PLACE the LCP power supply switch to the ON position.Peer 16. PLACE the PRI power supply switch to the ON position.E1-7 Peer WBN Unat 2 WATTS BAR UNIT 2 EAGLE?I COMMUNICATIONS TEST wo 115799048 Page 7 of 10 Date: 17 . PLACE the SEC power supply switch to the ON position.Peer 18. PLACE the TSP power supply switch to the ON position.Peer B. Connection of Test Equipment and Verification of Expected Results.1. LOCATE and IDENTIFY SEC{o-FOC cable (5D93449c05) at fiber optic converter located in the designated Eagle 21 rack.2. DISCONNECT SEC-to-FOC cable (5D93449G05) from fiber optic converter located in the designated Eagle 21 rack.3. CONNECT SEC{o-FOC cable to the AUI-to1OBase T transceiver.
Jessie Quichocho U.S. Nuclear Regulatory Commission MS OBGgA One White Flint North 1 1555 Rockville Pike Rockville, Maryland 20 852-2738 Fred Brown, Deputy Regional Administrator for Construction U. S. Nuclear Regulatory Commission Region ll Marquis One Tower 245 Peachtree Center Ave., NE Suite 1200 Atlanta, Georgia 30303 -1257
 
ENCLOSURE       1 Tennessee Val ley Authority Watts Bar Nuclear Plant, Unit 2 Docket No. 50-391 Eagle 21 Test Plan Watts Bar Unat 2 Eagle 21 Unidirectional Communications Test E1-1
 
WBN             WATTS BAR UNIT 2 EAGLE2l         wo {15799048 Unat2            COMi'IUNIGATIONS TEST           Page I of 10 Date:
WATTS BAR UNIT 2 EAGLE 21 UNIDIRECTIONAL COMNilUNICATIONS TEST Prepared By:          ,{ft             Date , f {zs/tf Reviewed  By:fri                        oate:
l4rl QA Reviewer:i                           oate:z/a?/4 E1-2
 
WBN                       WATTS BAR UNIT 2 EAGLE?I                   wo    115799048 Unat 2                      COMMUNICATIONS TEST                     Page 2 of 10 Date:
: 1. PRECAUTIONS AND LIMITATIONS A. When circuit boards or board components are removed and reinstalled from the system, they become susceptible to damage caused by the build-up or discharge of static electricity. To avoid damage to circuit boards, implement the following guidelines:
o   When replacing a circuit board at the rack, wear a wrist strap that is grounded to the rack chassis ground.
o   When replacing a circuit board at the rack, wear a wrist strap that is grounded to the rack chassis ground.
o   lf circuit board components are to be replaced, wear a grounded wrist strap while removing components from board or removing new components from their storage cases.
B. Cards in the card cage are numbered right to left from the Status Panel. The DLH#1 card is in slot 9 and the SEC card is in slot 2. Each have an empty slot to the right.
C. Primary Engineering Point of Contact for this test is Steve Kirk, located in !0855 (423) 36s-1 169.
: 2. SPECTAL TOOLS, MEASURTNG AND TEST EQUIPMENT (M&TE), PARTS AND SUPPLIES A. OBTAIN the following special tools and M&TE, OR DETERMINE they are available for use:
o   M&TE approved Laptop Computer with ColaSoft network packet generation software installed.
o   M&TE approved Laptop Computer with Wireshark network packet analysis software installed.
o   CenterCOM AT-MR820TR Ethernet 1OBase-T network switch or equivalent supplied by NPG CEG.
          . CenterCOM AT-210T AUl-to-10Base T Ethernet transceiver or equivalent supplied by NPG CEG.
o   Techtronix TDS3032B Digital dual trace oscilloscope or equivalent with 2 probes.
          . Category 5 RJ-45 Ethernet cables supplied by NPG CEG(3 required.)
o   DIP-16 socket ribbon cable adapter supplied by NPG CEG(2 required.)
o   #22 AWG solid conductor insulated wire or equivalent supplied by NPG CEG.
o   Anti-static mat with grounding wrist strap.
E1-3
 
WBN                   WATTS BAR UNIT 2 EAGLE?I                     wo    115799048 Unat 2                    COMMUNICATIONS TEST                       Page 3 of 10 Date:
: 3. REFERENCES A. Vendor Manual WBN-VTD-W1 20-5A37 B. Vendor Manual WBN-VTD-W120-5058 C. Plant Drawing 2-65717-3D21 648 D. Plant Drawings 2-65717-5D93433-1 , -2, -3 E. Plant Drawings 2-65717-3D21653-1, -2 F. Plant Drawings 2-65717-1 856E60-2, -8, -9, -11
: 4. APPROVALS AND NOTIFICATIONS NOTE Approvals and Notifications shall be performed in accordance with Work lnitiating Document (WlD)
A. INFORM Unit Operator (UO) that power will be removed and re-applied to the target Eagle 21 rack during the performance of this test and alarms may be activated as a result.
UO
: 5. PERFORMANCE CAUTION Anti-static station shall be used during remova!/installation of Eagle     21 circuit cards to prevent Electro-static discharge damage.
NOTE Personnel involved in the performance of this test should be familiar with the Eagle 21 Protection Set hardware and the M&TE used during the test. They should also be familiar with the software tools that are used.
NOTE The Eagle 21 rack power supply switches are located on the upper power supply drawer. lf power is not applied to the target Eagle 21 rack, then Steps 5.A.6, 5.A.8, 5.A.10 and 5.A.12 may be marked N/A.
E1-4
 
WBN                 WATTS BAR UNIT 2 EAGLE21                     wo  115799048 Untt2                  COMMUNICATIONS TEST                       Page 4 of 10 Date:
A. Removal/lnstallation of MC-09 DLH#1 Card and Removal/lnstallation of MC-02 SEC card
: 1. RECORD the Unit 2 Eagle 21 rack number that has been designated for the performance of this test.
Rack#
UNID Sys Eng
: 2. LOCATE and IDENTIFY the Eagle 21 rack specified in Step 5.A.1.
Peer
: 3. DOGUMENT     the As-Found condition of the following power supply switches located in the upper power supply drawers of the Eagle 21 rack.
LCP Power Supply PRI Power Supply SEC Power Supply TSP Power Supply Peer
: 4. INFORM UO that power will be removed from the rack recorded above.
: 5. LOCATE and IDENTIFY       the LCP power supply switch.
Peer
: 6. PLACE the LCP power supply switch to the OFF position.
Peer
: 7. LOCATE and IDENTIFY       the PRI power supply switch.
Peer B. PLACE the PR! power supply switch to the OFF position.
E1-5
 
WBN                 WATTS BAR UNIT 2 EAGLE21                     wo  115799048 Unat 2                COMMUNICATIONS TEST                         Page 5 of 10 Date:
Peer
: 9. LOCATE and IDENTIFY         the LCP power supply switch.
Peer
: 10. PLACE the SEC power supply switch to the OFF position.
Peer
: 11. LOCATE and IDENTIFY the LCP power supply switch.
Peer
: 12. PLACE the TSP power supply switch to the OFF position.
Peer
: 13. REMOVE/RE-INSTALL MC-09 LCP DLH#1 and MC-02 SEC cards from microprocessor card cage slots 9 and 2 as follows:
: a. PLACE anti-static mat on a suitable   work surface and ENSURE mat is connected to frame ground of the designated Eagle 21 rack.
tr
: b. REMOVE the two cable hood retainer bars by pressing in on bar while pushing slide on one end of bar toward the center of bar until slide is free of slot in card cage chassis.                               tr
: c. LOOSEN screws in card retainer at top and bottom of card guides.
tr
: d. MOVE card retainer out of the way.
tr
: e. LOCATE and IDENTIFY         cable hood for MC-09 DLH#1 card.
tr
: f. REMOVE cable hood from MC-09 DLH#1 card.
tr
: g. USE plastic card ejectors   on DLH#1 card to pivot board out of card guides and PULL card out of card guides.
tr h, PLACE card on anti-static mat.
tr
: i. LOCATE and IDENTIFY cable hood for MC-02 SEC card.
: j. REMOVE cable hood from MC-02 SEC card.
E1-6
 
WBN               WATTS BAR UNIT 2 EAGLE2l                       wo  115799048 Unat 2                COMMUNICATIONS TEST                         Page 6 of 10 Date:
: k. USE plastic card ejectors on SEC card to pivot board out of card guides and PULL card out of card guides.
tr
: l. PLACE card on anti-static mat.
u
: m. INSTALL DIP-16 socket ribbon cable adapter in empty socket U12 on DLH#1 board with black dot aligned to pin 1.
tr
: n. Carefully RE-INSTALL DLH#I board in slot 9 of microprocessor card cage while routing ribbon cable out the front of the rack.
tr
: o. LOCATE and IDENTIFY       lSBX 586 Ethernet Daughter board.
tr
: p. REMOVE iSBX 586 Ethernet daughter board from SEC card.
tr
: q. INSTALL   DIP-16 socket ribbon cable adapter in empty socket U12 on SEC board with black dot aligned to pin 1.
D
: r. INSERT #22 AWG solid conductor insulated wire into jumper locations E55 and E51 on SEC   board.                           tr
: s. RE-INSTALL lSBX 586 Ethernet daughter board on SEC card.
tr
: t. Carefully RE-INSTALL SEC board in slot 2 of microprocessor card cage while routing ribbon cable and wires out the front of the rack.
tr
: u. RE-INSTALL cable hood on MC-09 DLH#1 card.
tr
: v. RE-INSTALL cable hood on MC-02 SEC card.
tr
: w. RE-INSTALL microprocessor cage card retainer.
tr
: 14. INFORM UO that power will be restored to the rack recorded above.
: 15. PLACE the LCP power supply switch to the ON position.
Peer
: 16. PLACE the PRI power supply switch to the ON position.
Peer E1-7
 
WBN                   WATTS BAR UNIT 2 EAGLE?I                     wo    115799048 Unat 2                  COMMUNICATIONS TEST                       Page 7 of 10 Date:
17 . PLACE the SEC power supply switch to the ON position.
Peer
: 18. PLACE the TSP power supply switch to the ON position.
Peer B. Connection of Test Equipment       and Verification of Expected Results.
: 1. LOCATE and IDENTIFY SEC{o-FOC cable (5D93449c05) at fiber optic converter located in the designated Eagle 21 rack.
: 2. DISCONNECT SEC-to-FOC cable (5D93449G05) from fiber optic converter located in the designated Eagle 21 rack.
: 3. CONNECT SEC{o-FOC cable to the AUI-to1OBase T transceiver.
: 4. CONNECT Ethernet Switch and Laptop computers at the direction of Engineering.
: 4. CONNECT Ethernet Switch and Laptop computers at the direction of Engineering.
: 5. START ColaSoft packet generation software and configure for network packet generation at the direction of Engineering (Laptop1.)
: 5. START ColaSoft packet generation software and configure for network packet generation at the direction of Engineering (Laptop1.)
: 6. START Wireshark packet analysis software and configure for network packet detection at the direction of Engineering (Laptop 2.)7. VERIFY Laptop2 Wireshark packet analysis software shows network data packets being transmitted to the destination TCP/!P address of the designated Eagle 21 rack.Peer 8. ENERGIZE Oscilloscope and ADJUST Channel 1 and Channel 2 Volts/Division, Time Base and Sync settings at the direction of Engineering.
: 6. START Wireshark packet analysis software and configure for network packet detection at the direction of Engineering (Laptop 2.)
E1-8 WBN Unat 2 WATTS BAR UNIT 2 EAGLE21 COMMUNICATIONS TEST wo 115799048 Page 8 of 10 Date: 9. CONNECT Channel adapter top GREEN represent SEC card 1 oscilloscope probe to SEC DIP-16 ribbon cable wire and probe shield to top YELLOW wire. These wires data transmit onto the serial bus.10. CONNECT Channel 2 Oscilloscope probe to the wires inserted into jumpers E55 and E51. These wires represent SEC card data receive from the serial bus. This data is transmitted every 100 mSec from the Loop Calculation Processor's DLH#1 card.11. VERIFY that Channel 1 Oscilloscope trace shows no data on the SEC transmit lines.Peer 12. VERIFY that Channel 2 Oscilloscope trace shows transmit data from the LCP DLH on the SEC receive lines.Peer 13. OBTAIN Oscilloscope screen capture and ATTACH to this Work Order.14. DISCONNECT and RE-CONNECT Channel2 Oscilloscope probe to DLH#1 DIP-16 ribbon cable adapter DARK PINK wire and probe shield to BLACK wire. These wires represent LCP DLH#1 card data receive from the serial bus.15. VERIFY that Channel 2 Oscilloscope trace shows recieve Iines.Peer no data on the LCP DLH#1 Peer 16. OBTAIN Oscilloscope screen capture and ATTACH to this Work Order.E1-9 WBN Unat 2 WATTS BAR UNIT 2 EAGLE?I COMMUNICATIONS TEST wo 115799048 Page 9 of 10 Date: 17. OBTAIN System Engineer concurrence that the test results were as expected and satisfactory.
: 7. VERIFY Laptop2 Wireshark packet analysis software shows network data packets being transmitted to the destination TCP/!P address of the designated Eagle 21 rack.
System Engineer Date 18. DISCONNECT all test equipment that was used in the performance of this test.C. Restoration of Eagle 21 Designated Rack to As-Found Conditions
Peer
: 1. RESTORE the As-Found condition of the following power supply switches located in the upper power supply drawers of the Eagle 21 rack.LCP Power Supply PRI Power Supply SEC Power Supply TSP Power Supply Peer 2. RETURN designated Eagle 21 rack to As-Found condition per skill of the craft.a. PLACE anti-static mat on a suitable work surface and ENSURE mat is connected to frame ground of the designated Eagle 21 rack.tr b. REMOVE cable hood from MC-09 DLH#1 card.tr c. USE plastic card ejectors on DLH#1 card to pivot board out of card guides and PULL card out of card guides.d. PLACE card on anti-static mat. tr e. REMOVE cable hood from MC-02 SEC card.D f . USE plastic card ejectors on SEC card to pivot board out of card guides and PULL card out of card guides.tr g. PLACE card on anti-static mat.tr E1-10 WBN Unat 2 WATTS BAR UNIT 2 EAGLE?I COMMUNICATIONS TEST wo 115799048 Page 10 of 10 Date: h. REMOVE DIP-16 socket ribbon cable adapter in empty socket U12 on DLH#1 board.tr i. Carefully RE-INSTALL DLH#1 board in slot 9 of microprocessor card@ge.D j. REMOVE lSBX 586 Ethernet daughter board from SEC card.u k. REMOVE DIP-16 socket ribbon cable adapter in empty socket U12 on SEC board.tr l. REMOVE#22 AWG solid conductor insulated wire from jumper locations E55 and E51 on SEC board. tr m. RE-INSTALL lSBX 586 Ethernet daughter board on SEC card.tr n. Carefully RE-INSTALL SEC board in slot 2 of microprocessor card cage.0 o. RE-INSTALL cable hood on MC-09 DLH#1 card.tr p. RE-INSTALL cable hood on MC-02 SEC card.tr q. RE{NSTALL microprocessor cage card retainer.tr r. RE-INSTALL the two cable hood retainer bars by pressing in on bar while pushing slide on one end of bar toward the center of bar until slide is free of slot in card cage chassis. tr 3. OBTAIN System Engineer concurrence that As-Left Eagle 21 designated rack configuration is acceptable for current equipment status and plant conditions.
: 8. ENERGIZE       Oscilloscope and ADJUST Channel 1 and Channel 2 Volts/Division, Time Base and Sync settings at the direction of Engineering.
System Engineer Date E1-11 ENCLOSURE 2 Tennessee Valley Authority Watts Bar Nuclear Plant, Unit 2 Docket No. 50-391 Watts Bar Nuclear Plant Unit 2 Eagle 21 UnidirectionalGommunications Test Summary 13 August 2014 Purpose: A commitment has been made to the Nuclear Regulatory Commission (NRC) to clearly demonstrate that two-way communications is impossible with Eagle 21 in accordance with Watts Bar Nuclear Plant Unit 2 Supplemental Safety Evaluation Report (SSER) 23 Section 7.2.1.1. The purpose of this test was to veriff that the External Communications lnterface (ECl)for WBN Unit 2 Eagle 21 Reactor Protection System only allows data flow in one direction (i.e.data out to the plant computer and no data into the Eagle 21 system). This is a programmable digital system that has an external communications interface for transfer of plant data parameters to the Unit 2 plant lntegrated Computer System (lCS). This communications interface is unidirectional in nature, as the receive RS422 communications integrated circuit (lC), U12, is not installed on the Loop Calculation Processor's (LCP) Data Link Handler (DLH).The transmit RS-422 Communications lCs are also not installed on the Test Sequence Processor's DLH (U13) and the Serialto Ethemet Controller (U12). lllustration 1 was developed as a simplifled block diagram demonstrating this configuration.
E1-8
The plant configuration control documents that were used to accomplish this are listed in the references section. The testing was performed on Eagle Rack 2R4, WBN 2-PNL-099-R4D.
 
This rack is typical for all of the Eagle Racks.H DIH#1 LCP@D t;t lzssrz I I rs,u I t ::J OLH T2 TEP l,;l-,ffii,, I ll CZ 1t m CAR 12. RDA 9-ROB 16. RTA 13 . RTB 8-SDA S-SDB 6 -TTA 3 -TTB 5EC!llustration
WBN                   WATTS BAR UNIT 2 EAGLE21                   wo  115799048 Unat 2                  COMMUNICATIONS TEST                     Page 8 of 10 Date:
: 1. Simplified Block Diagram of Eagle 21 External Communications lnterface.
: 9. CONNECT Channel       1 oscilloscope probe to SEC DIP-16 ribbon cable adapter top GREEN wire and probe shield to top YELLOW wire. These wires represent SEC card data transmit onto the serial bus.
8.SDA 5-sDB 6-TTA 3-TTB 17 - RDA 9- BDB 16 - RTA 13 . RTB DCE INTERFACE CARO Cl CABLE sDA sDB TTB TTA IRDAI(RrlB)(nrBl FrA)!r tirg il r''RS422 RC\,R 5 4 l1 10 15 14 RDA RDB RTA RTB ulz Ry122 XMtT C,rjP H(li !tl\IA.t iD?22 16 E2-1 Test Sequence: The steps that were performed under Work Order 115799048 to successfully demonstrate that the communications interface to the safety-related Loop Calculation Processer (LCP) is unidirectional are as follows.1. The LCP Data Link Handler (DLH) and Serial to Ethernet Controller (SEC) circuit boards were removed from the rack and the ribbon cable socket adapters and jumper wires were installed into the empty socket locations.
: 10. CONNECT Channel 2 Oscilloscope probe to the wires inserted into jumpers E55 and E51. These wires represent SEC card data receive from the serial bus. This data is transmitted every 100 mSec from the Loop Calculation Processor's DLH#1 card.
The circuit boards were re-installed and the rack was powered up.2. Disconnect an operable Eagle 21 Rack from the Fiber Optic Converter located within that rack (i.e. FOC-02).3. Obtain an Ethernet Network Hub (CenterCOM MR820TR) with 4 ports minimum.4. Obtain an Ethernet Network Transceiver (CenterCOM 210T) with an Attachment Unit lnterface (AUl) port and connect the AUI cable going to the SEC in the rack.5. Connect an Ethernet RJ-45 cable from the transceiver to Port 4 on the Ethernet hub.6. Connect an RJ45 Ethernet cable from 1OBase-T Port 1 on the hub to a personal computer (CEG3) with network packet generation software installed on it (ColaSoft Packet Generator).
: 11. VERIFY that Channel 1 Oscilloscope trace shows no data on the SEC transmit lines.
Peer
: 12. VERIFY that Channel 2 Oscilloscope trace shows transmit data from the LCP DLH on the SEC receive lines.
Peer
: 13. OBTAIN Oscilloscope screen capture and ATTACH to this Work Order.
: 14. DISCONNECT and RE-CONNECT Channel2 Oscilloscope probe to DLH#1 DIP-16 ribbon cable adapter DARK PINK wire and probe shield to BLACK wire. These wires represent LCP DLH#1 card data receive from the serial bus.
Peer
: 15. VERIFY that Channel 2 Oscilloscope trace shows no data on the LCP DLH#1 recieve Iines.
Peer
: 16. OBTAIN Oscilloscope screen capture and ATTACH to this Work Order.
E1-9
 
WBN                   WATTS BAR UNIT 2 EAGLE?I                   wo  115799048 Unat 2                  COMMUNICATIONS TEST                       Page 9 of 10 Date:
: 17. OBTAIN System Engineer concurrence that the test results were as expected and satisfactory.
System Engineer                     Date
: 18. DISCONNECT all test equipment that was used in the performance of this test.
C. Restoration of Eagle   21 Designated Rack to As-Found Conditions
: 1. RESTORE the As-Found condition of the following power supply switches located in the upper power supply drawers of the Eagle 21 rack.
LCP Power Supply PRI Power Supply SEC Power Supply TSP Power Supply Peer
: 2. RETURN designated Eagle 21 rack to As-Found condition per skill of the craft.
: a. PLACE anti-static mat on a suitable work surface and ENSURE mat is connected to frame ground of the designated Eagle 21 rack.
tr
: b. REMOVE cable hood from MC-09 DLH#1 card.
tr
: c. USE plastic card ejectors on DLH#1 card to pivot board out of card guides and PULL card out of card guides.
tr
: d. PLACE card on anti-static mat.
: e. REMOVE     cable hood from MC-02 SEC card.
D f . USE plastic card ejectors on SEC card to pivot board out of card guides and PULL card out of card guides.
tr
: g. PLACE card on anti-static mat.
tr E1-10
 
WBN                   WATTS BAR UNIT 2 EAGLE?I                     wo  115799048 Unat 2                  COMMUNICATIONS TEST                       Page 10 of 10 Date:
: h. REMOVE DIP-16 socket ribbon cable adapter in empty socket U12 on DLH#1 board.
tr
: i. Carefully RE-INSTALL DLH#1 board in slot 9 of microprocessor card
                    @ge.
D
: j. REMOVE lSBX 586 Ethernet daughter board from SEC card.
u
: k. REMOVE DIP-16 socket ribbon cable adapter in empty socket U12 on SEC board.
tr
: l. REMOVE#22 AWG solid conductor insulated wire from jumper locations E55 and E51 on SEC board.                           tr
: m. RE-INSTALL lSBX 586 Ethernet daughter board on SEC card.
tr
: n. Carefully RE-INSTALL SEC board in slot 2 of microprocessor card cage.
0
: o. RE-INSTALL cable hood on MC-09 DLH#1 card.
tr
: p. RE-INSTALL cable hood on MC-02 SEC card.
tr
: q. RE{NSTALL         microprocessor cage card retainer.
tr
: r. RE-INSTALL the two cable hood retainer bars by pressing in on bar while pushing slide on one end of bar toward the center of bar until slide is free of slot in card cage chassis.                   tr
: 3. OBTAIN System Engineer concurrence that As-Left Eagle 21 designated rack configuration is acceptable for current equipment status and plant conditions.
System Engineer                         Date E1-11
 
ENCLOSURE 2 Tennessee Valley Authority Watts Bar Nuclear Plant, Unit 2 Docket No. 50-391 Watts Bar Nuclear Plant Unit 2 Eagle 21 UnidirectionalGommunications Test Summary 13 August 2014
 
==Purpose:==
A commitment has been made to the Nuclear Regulatory Commission (NRC) to clearly demonstrate that two-way communications is impossible with Eagle 21 in accordance with Watts Bar Nuclear Plant Unit 2 Supplemental Safety Evaluation Report (SSER) 23 Section 7.2.1.1. The purpose of this test was to veriff that the External Communications lnterface (ECl) for WBN Unit 2 Eagle 21 Reactor Protection System only allows data flow in one direction (i.e.
data out to the plant computer and no data into the Eagle 21 system). This is a programmable digital system that has an external communications interface for transfer of plant data parameters to the Unit 2 plant lntegrated Computer System (lCS). This communications interface is unidirectional in nature, as the receive RS422 communications integrated circuit (lC), U12, is not installed on the Loop Calculation Processor's (LCP) Data Link Handler (DLH).
The transmit RS-422 Communications lCs are also not installed on the Test Sequence Processor's DLH (U13) and the Serialto Ethemet Controller (U12). lllustration 1 was developed as a simplifled block diagram demonstrating this configuration. The plant configuration control documents that were used to accomplish this are listed in the references section. The testing was performed on Eagle Rack 2R4, WBN 2-PNL-099-R4D. This rack is typical for all of the Eagle Racks.
CARO      Cl                      CABLE                                CZ          CAR D 8.SDA 5-sDB 1t m
: 12. RDA 9-ROB        t;t lzssrz H
I 6-TTA    5                                                              15 16. RTA I rs,u   I 3-TTB    4                                                              14 13 . RTB t ::J DIH#1                                                                                                  OLH T2 LCP                                                                                                  TEP 17 - RDA 9-  BDB l1 10 8-SDA S-SDB l,;
    @          16 - RTA 13 . RTB 6 -TTA 3 -TTB l-,ffii,,
ll        I 22      16 DCE INTERFACE            sDA sDB TTB      TTA RDA     RDB    RTA RTB IRDAI(RrlB)(nrBl FrA)
                                    !r         il   r''
tirg                          ulz RS422 RC\,R                 Ry122 XMtT C,rjP H(li !tl\IA.t iD?
5EC
      !llustration 1. Simplified Block Diagram of Eagle 21 External Communications lnterface.
E2-1
 
Test Sequence:
The steps that were performed under Work Order 115799048 to successfully demonstrate that the communications interface to the safety-related Loop Calculation Processer (LCP) is unidirectional are as follows.
: 1. The LCP Data Link Handler (DLH) and Serial to Ethernet Controller (SEC) circuit boards were removed from the rack and the ribbon cable socket adapters and jumper wires were installed into the empty socket locations. The circuit boards were re-installed and the rack was powered up.
: 2. Disconnect an operable Eagle 21 Rack from the Fiber Optic Converter located within that rack (i.e. FOC-02).
: 3. Obtain an Ethernet Network Hub (CenterCOM MR820TR) with 4 ports minimum.
: 4. Obtain an Ethernet Network Transceiver (CenterCOM 210T) with an Attachment Unit lnterface (AUl) port and connect the AUI cable going to the SEC in the rack.
: 5. Connect an Ethernet RJ-45 cable from the transceiver to Port 4 on the Ethernet hub.
: 6. Connect     an RJ45 Ethernet cable from 1OBase-T Port 1 on the hub to a personal computer (CEG3) with network packet generation software installed on it (ColaSoft Packet Generator).
: 7. Connect an RJ45 Ethernet cable from 10Base-T Port2 on the hub to a PC (CEGS) with network packet analysis software installed on it (Wireshark).
: 7. Connect an RJ45 Ethernet cable from 10Base-T Port2 on the hub to a PC (CEGS) with network packet analysis software installed on it (Wireshark).
: 8. Obtain a dual trace digital storage oscilloscope and connect probe 1 to the SEC transmit lines at U12 socket pins 2 and 3 (this lC has been removed).9. Connect probe 2 to SEC receive lines at jumpers E55 (SDA) and E51 (SDB) as shown on lllustration 2 below.10. Configure the packet generation software on CEG3 to generate looping network data packets for the lP address of the selected Eagle 21 rack.11. Configure the packet analysis software on CEGS to monitor TCP/IP and MAC layer network traffic.12.Verity that CEGS shows network packets being injected into the SEC Ethernet port of the Eagle 21 rack.13. Verify no data is visible on probe 1 trace.14.Yerity data is visible on probe 2trace, this is serial data coming from the safety-related LCP DLH.15. Disconnect probe 2 and re-connect to the receive lines on the LCP DLH card at lC socket U12 pins 6 and 7 (this lC has been removed).E2-2  
: 8. Obtain a dual trace digital storage oscilloscope and connect probe 1 to the SEC transmit lines at U12 socket pins 2 and 3 (this lC has been removed).
: 16. Verify no data traffic appears on either oscilloscope trace. A photograph of the oscilloscope traces is included as !llustration 3.17. Disconnect alltest equipment and return to the original configuration when testing is complete.crt-E.a 3lt ,^I -g!-.,0'-J tI f'--{-ter C*B l_ qr 6 ,l tt.rl Jl .J3tr Jt le JD 3T.rl tt Jt ar JC t'CT'Jl 33 lllustration  
: 9. Connect probe 2 to SEC receive lines at jumpers E55 (SDA) and E51 (SDB) as shown on lllustration 2 below.
: 2. SEC Oscilloscope Connection Points.E2-3 It.rtrl\*-qfI'..*  
: 10. Configure the packet generation software on CEG3 to generate looping network data packets for the lP address of the selected Eagle 21 rack.
..-f ,'l lllustration 3.Oscilloscope rr"" ""/Results/Conclusions:
: 11. Configure the packet analysis software on CEGS to monitor TCP/IP and MAC layer network traffic.
The steps performed in Work Order 115799048 verified two-way communications is impossible with the designated Eagle 21 rack. Connection of Oscilloscope probe 1 to the SEC transmit lines at socket U12 pins 2 and 3 showed no transmit information was received on the serial High Level Data Link Control bus from the SEC card. Connection of probe 2 at jumpers E55 and E51 showed serial data being transmitted onto the bus from the LCP DLH card. This serial data is received by the SEC card and sent on to the lCS as unacknowledged User Datagram Protocol Ethernet data packets. The User Datagram Protocol/lnternet Protocolwould normally be the network protocol of choice whenever one-way communications is used, as it does not require an acknowledgement of successful information delivery.
12.Verity that CEGS shows network packets being injected into the SEC Ethernet port of the Eagle 21 rack.
Reconnection of probe 2 to the receive lines of LCP DLH socket U12 pins 6 and 7 shows no data being received on the bottom oscilloscope trace in lllustration 3 shown above. The Wireshark capture file also shows no response from the Eagle 21 rack at !P address 192.168.1.4 when generated data packets were targeted to that specific lP address, as well as the broadcast address of 255.255.255.255.
: 13. Verify no data is visible on probe 1 trace.
E2-4 Reference Drawings: 1 . Vendor Manual WBN-VTD-W120-5037
14.Yerity data is visible on probe 2trace, this is serial data coming from the safety-related LCP DLH.
: 15. Disconnect probe   2 and re-connect to the receive lines on the LCP DLH card at lC socket U12 pins 6 and 7 (this lC has been removed).
E2-2
: 16. Verify no data traffic appears on either oscilloscope trace. A photograph of the oscilloscope traces is included as !llustration 3.
: 17. Disconnect alltest equipment and return to the original configuration when testing is complete.
crt E.a                                                 ,l tt 3lt ,^
                                                                    .rl I                                                           Jl .
      -'-J -g!-.,0 tI f'--{
J3tr Jt le ter C                                              JD 3T
        -            CT'                                          .rl tt B l_ qr      6 Jt ar JC Jl t'
33 lllustration 2. SEC Oscilloscope Connection Points.
E2-3
 
                                                    *-qfI'..*   ..-f It.rtrl\                    'l     ,
lllustration 3. Oscilloscope       rr"" ""/
Results/Conclusions:
The steps performed in Work Order 115799048 verified two-way communications is impossible with the designated Eagle 21 rack. Connection of Oscilloscope probe 1 to the SEC transmit lines at socket U12 pins 2 and 3 showed no transmit information was received on the serial High Level Data Link Control bus from the SEC card. Connection of probe 2 at jumpers E55 and E51 showed serial data being transmitted onto the bus from the LCP DLH card. This serial data is received by the SEC card and sent on to the lCS as unacknowledged User Datagram Protocol Ethernet data packets. The User Datagram Protocol/lnternet Protocolwould normally be the network protocol of choice whenever one-way communications is used, as it does not require an acknowledgement of successful information delivery. Reconnection of probe 2 to the receive lines of LCP DLH socket U12 pins 6 and 7 shows no data being received on the bottom oscilloscope trace in lllustration 3 shown above. The Wireshark capture file also shows no response from the Eagle 21 rack at !P address 192.168.1.4 when generated data packets were targeted to that specific lP address, as well as the broadcast address of 255.255.255.255.
E2-4
 
Reference Drawings:
1 . Vendor Manual WBN-VTD-W120-5037
: 2. Vendor Manual WBN-VTD-W120-5058
: 2. Vendor Manual WBN-VTD-W120-5058
: 3. Plant Drawing 2-65717-3D21648
: 3. Plant Drawing 2-65717-3D21648
: 4. Plant Drawings 2-65717-5D93433-1 , -2,-3 5. Plant Drawings 2-65717-3D21653-1 , -2 6. Plant Drawings 2-65717-1 856E60-2, -8, -9, -11 E2-5 ENCLOSURE 3 Tennessee Valley Authority Watts Bar Nuclear Plant, Unit 2 Docket No. 50-391 High LevelSummary and Block Diagram Backoround:
: 4. Plant Drawings 2-65717-5D93433-1 , -2,-3
The Tennessee Valley Authority performed a test via Work Order 115799048 to clearly demonstrate that two-way communications is impossible with Eagle 21. The purpose of this test was to verify that the External Communications lnterface (EC!) for Watts Bar Nuclear Plant Unit 2 Eagle 21 Reactor Protection System only allows data flow in one direction (i.e. data out to the plant computer (lCS) and no data into the Eagle 21 system).The Eagle 21 is divided into two major sections: 1. Loop Calculation Processor (LCP) section which performs the Safety Related Functions, and 2. Test Sequence Processor (TSP) section which performs the Non Safety Related Functions.
: 5. Plant Drawings 2-65717-3D21653-1 , -2
!nternal unidirectional communication between these section is ensured from the LCP to the TSP by removing the receive communications lCs from the LCP section and removing the transmit communications from the TSP section including the Serial Ethernet Converter (SEC).Therefore'the LCP has no ability to receive data nor does the TSP or SEC have the ability to transmit data.E3-1 Eagle2l Rack 2-R-4 Oscilloscope Probe I Connection Oscilloscope Probe 2 Connection HDLC Serial Bus.21 I\^ J\)Data Link Serial-Et?t/hernet nl Ethernet Add-on Card TSP Da a Link Board ller Board UUNVETTET E UAT u'Normal , tlanoler:onnection to ICS Laptop Computer with WireShark installed Ithernet t{etwork fub Laptop Computer ,vith ColaSoft rnstalled Diagram 1 Test Method: Diagram 1 illustrates the connections made to Eagle 21 rack for the purposes of this test. The Loop Calculation Processor generates status information at a rate of ten times per second. This information travels on the HDLC serial bus where it is received by the SEC and then passed on to the lntegrated Computer System through the Ethernet network connection.
: 6. Plant Drawings 2-65717-1 856E60-2, -8, -9, -11 E2-5
To demonstrate the unidirectional communications, the Ethernet port was disconnected from ICS and a laptop connected in its place. The laptop computer was configured to generate a data storm to the Eagle 21 by targeting its !P address. Another laptop was connected to analyze and record the network data traffic to veriff that the Eagle 21 rack did not respond to the data storm and continued to send out the status information.
 
Oscilloscope probes were connected to the LCP Data Link Handler serial receive lines and the SEC serialtransmit lines to verify that no serial data traffic was present, which was as expected since the SEC has no transmit capability.
ENCLOSURE 3 Tennessee Valley Authority Watts Bar Nuclear Plant, Unit 2 Docket No. 50-391 High LevelSummary and Block Diagram Backoround:
The Tennessee Valley Authority performed a test via Work Order 115799048 to clearly demonstrate that two-way communications is impossible with Eagle 21. The purpose of this test was to verify that the External Communications lnterface (EC!) for Watts Bar Nuclear Plant Unit 2 Eagle 21 Reactor Protection System only allows data flow in one direction (i.e. data out to the plant computer (lCS) and no data into the Eagle 21 system).
The Eagle 21 is divided into two major sections:
: 1. Loop Calculation Processor (LCP) section which performs the Safety Related Functions, and
: 2. Test Sequence Processor (TSP) section which performs the Non Safety Related Functions.
!nternal unidirectional communication between these section is ensured from the LCP to the TSP by removing the receive communications lCs from the LCP section and removing the transmit communications from the TSP section including the Serial Ethernet Converter (SEC).
Therefore'the LCP has no ability to receive data nor does the TSP or SEC have the ability to transmit data.
E3-1
 
Eagle2l Rack 2-R-4 Oscilloscope Probe 2                    Oscilloscope Probe I Connection                             Connection                         HDLC Serial Bus
                                                                                    .21
                                                          \^                         J I
                                                              \
                                        )
Ethernet Add-on Card LCP Data Link         Serial-Et hernet                                               TSP Da a Link
                          ?t/        nl UUNVETTET E UAT u                                               tlanoler Board Handller Board
                                                                  'Normal :onnection to ICS Laptop Computer                    Ithernet              Laptop Computer with WireShark                     t{etwork               ,vith ColaSoft installed                          fub                    rnstalled Diagram     1 Test Method:
Diagram 1 illustrates the connections made to Eagle 21 rack for the purposes of this test. The Loop Calculation Processor generates status information at a rate of ten times per second. This information travels on the HDLC serial bus where it is received by the SEC and then passed on to the lntegrated Computer System through the Ethernet network connection. To demonstrate the unidirectional communications, the Ethernet port was disconnected from ICS and a laptop connected in its place. The laptop computer was configured to generate a data storm to the Eagle 21 by targeting its !P address. Another laptop was connected to analyze and record the network data traffic to veriff that the Eagle 21 rack did not respond to the data storm and continued to send out the status information. Oscilloscope probes were connected to the LCP Data Link Handler serial receive lines and the SEC serialtransmit lines to verify that no serial data traffic was present, which was as expected since the SEC has no transmit capability.


==
==
Conclusion:==
Conclusion:==


The steps performed in Work Order 115799048 verified two-way communications is impossible with the designated Eagle 21 rack.LCP Hand E3-2}}
The steps performed in Work Order 115799048 verified two-way communications is impossible with the designated Eagle 21 rack.
E3-2}}

Latest revision as of 18:09, 5 February 2020

Eagle 21 Test Plan and Test Results
ML14295A520
Person / Time
Site: Watts Bar Tennessee Valley Authority icon.png
Issue date: 10/22/2014
From: James Shea
Tennessee Valley Authority
To:
Document Control Desk, Office of Nuclear Reactor Regulation
References
CNL-14-202
Download: ML14295A520 (22)


Text

{{#Wiki_filter:Tennessee Valley Authority, 1 101 Market Street, Chattanooga, Tennessee 37402 cNL-1 4-202 October 22,2014 10 cFR 50.4 U. S. Nuclear Regulatory Commission ATTN. Document Control Desk Washington, D.C. 20555-0001 Watts Bar Nuclear Plant, Unit 2 NRC Docket No. 50-391

Subject:

WATTS BAR NUCLEAR PLANT UNIT 2 - EAGLE 21 TEST PLAN AND TEST RESULTS

References:

1. Letter from TVA to NRC, "Watts Bar Nuclear Plant (WBN) Unit 2 -

lnstrumentation and Controls Staff lnformation Requests," dated October 21, 2010 (ML103140661 )

2. NUREG-0847, "Supplemental Safety Evaluation Report (SSER) 23 Related to the Operation of Watts Bar Nuclear Plant, Unit 2, Docket Number 50-391," Published July 2011 The purpose of this submittal is to address a Nuclear Regulatory Commission (NRC) request for a high level test summary that demonstrates the unidirectional communication for Eagle 21 Protection Set interface. Enclosure 1 provides the system communication test plan. (A completed copy of the test package was provided to the WBN NRC Unit 2 resident inspector.) Enclosure 2 provides a summary of the test steps and results. Enclosure 3 provides the requested high level summary.

This Eagle 21 test addresses Supplemental Safety Evaluation Report 23, Appendix HH, Open ltems 63 and 93 (Reference 2). The Tennessee Valley Authority considers these items closed based on the information contained in the three enclosures. There are no new regulatory commitments contained in this letter. lf you have any questions, please contact Gordon Arent at (423) 365-2004.

U.S. Nuclear Regulatory Commission cNL-14-202 Page 2 October 22,2014 I declare under penalty of perjury that the foregoing is true and correct. Executed on the 22nd day of Oqtober, 2014. Resy'ecflully,

 . W. Shea Vice President, Nuclear Licensing

Enclosures:

1. Eagle 21 Test Plan - Watts Bar Unit 2 Eagle 21 Unidirectional Communications Test
2. Watts Bar Nuclear Plant Unit 2 - Eagle 21 Unidirectional Communications Test Summary - 13 August 2014
3. High Level Summary and Block Diagram cc: See page 3

U.S. Nuclear Regulatory Commission cNL-1 4-202 Page 3 October 22,2014 cc (Enclosures): U. S. Nuclear Regulatory Commission Region !l Marquis One Tower 245 Peachtree Center Ave., NE Suite 1200 Atlanta, Georgia 30303 -1257 NRC Resident Inspector Unit 1 Watts Bar Nuclear Plant 1260 Nuclear Plant Road Spring City, Tennessee 37381 NRC Resident lnspector Unit2 Watts Bar Nuclear Plant 1260 Nuclear Plant Road Spring City, Tennessee 37381

U.S. Nuclear Regulatory Commission cNL-1 4-202 Page 4 October 22,2014 bcc (Enclosures): Jessie Quichocho U.S. Nuclear Regulatory Commission MS OBGgA One White Flint North 1 1555 Rockville Pike Rockville, Maryland 20 852-2738 Fred Brown, Deputy Regional Administrator for Construction U. S. Nuclear Regulatory Commission Region ll Marquis One Tower 245 Peachtree Center Ave., NE Suite 1200 Atlanta, Georgia 30303 -1257

ENCLOSURE 1 Tennessee Val ley Authority Watts Bar Nuclear Plant, Unit 2 Docket No. 50-391 Eagle 21 Test Plan Watts Bar Unat 2 Eagle 21 Unidirectional Communications Test E1-1

WBN WATTS BAR UNIT 2 EAGLE2l wo {15799048 Unat2 COMi'IUNIGATIONS TEST Page I of 10 Date: WATTS BAR UNIT 2 EAGLE 21 UNIDIRECTIONAL COMNilUNICATIONS TEST Prepared By: ,{ft Date , f {zs/tf Reviewed By:fri oate: l4rl QA Reviewer:i oate:z/a?/4 E1-2

WBN WATTS BAR UNIT 2 EAGLE?I wo 115799048 Unat 2 COMMUNICATIONS TEST Page 2 of 10 Date:

1. PRECAUTIONS AND LIMITATIONS A. When circuit boards or board components are removed and reinstalled from the system, they become susceptible to damage caused by the build-up or discharge of static electricity. To avoid damage to circuit boards, implement the following guidelines:

o When replacing a circuit board at the rack, wear a wrist strap that is grounded to the rack chassis ground. o When replacing a circuit board at the rack, wear a wrist strap that is grounded to the rack chassis ground. o lf circuit board components are to be replaced, wear a grounded wrist strap while removing components from board or removing new components from their storage cases. B. Cards in the card cage are numbered right to left from the Status Panel. The DLH#1 card is in slot 9 and the SEC card is in slot 2. Each have an empty slot to the right. C. Primary Engineering Point of Contact for this test is Steve Kirk, located in !0855 (423) 36s-1 169.

2. SPECTAL TOOLS, MEASURTNG AND TEST EQUIPMENT (M&TE), PARTS AND SUPPLIES A. OBTAIN the following special tools and M&TE, OR DETERMINE they are available for use:

o M&TE approved Laptop Computer with ColaSoft network packet generation software installed. o M&TE approved Laptop Computer with Wireshark network packet analysis software installed. o CenterCOM AT-MR820TR Ethernet 1OBase-T network switch or equivalent supplied by NPG CEG.

         . CenterCOM AT-210T AUl-to-10Base T Ethernet transceiver or equivalent supplied by NPG CEG.

o Techtronix TDS3032B Digital dual trace oscilloscope or equivalent with 2 probes.

         . Category 5 RJ-45 Ethernet cables supplied by NPG CEG(3 required.)

o DIP-16 socket ribbon cable adapter supplied by NPG CEG(2 required.) o #22 AWG solid conductor insulated wire or equivalent supplied by NPG CEG. o Anti-static mat with grounding wrist strap. E1-3

WBN WATTS BAR UNIT 2 EAGLE?I wo 115799048 Unat 2 COMMUNICATIONS TEST Page 3 of 10 Date:

3. REFERENCES A. Vendor Manual WBN-VTD-W1 20-5A37 B. Vendor Manual WBN-VTD-W120-5058 C. Plant Drawing 2-65717-3D21 648 D. Plant Drawings 2-65717-5D93433-1 , -2, -3 E. Plant Drawings 2-65717-3D21653-1, -2 F. Plant Drawings 2-65717-1 856E60-2, -8, -9, -11
4. APPROVALS AND NOTIFICATIONS NOTE Approvals and Notifications shall be performed in accordance with Work lnitiating Document (WlD)

A. INFORM Unit Operator (UO) that power will be removed and re-applied to the target Eagle 21 rack during the performance of this test and alarms may be activated as a result. UO

5. PERFORMANCE CAUTION Anti-static station shall be used during remova!/installation of Eagle 21 circuit cards to prevent Electro-static discharge damage.

NOTE Personnel involved in the performance of this test should be familiar with the Eagle 21 Protection Set hardware and the M&TE used during the test. They should also be familiar with the software tools that are used. NOTE The Eagle 21 rack power supply switches are located on the upper power supply drawer. lf power is not applied to the target Eagle 21 rack, then Steps 5.A.6, 5.A.8, 5.A.10 and 5.A.12 may be marked N/A. E1-4

WBN WATTS BAR UNIT 2 EAGLE21 wo 115799048 Untt2 COMMUNICATIONS TEST Page 4 of 10 Date: A. Removal/lnstallation of MC-09 DLH#1 Card and Removal/lnstallation of MC-02 SEC card

1. RECORD the Unit 2 Eagle 21 rack number that has been designated for the performance of this test.

Rack# UNID Sys Eng

2. LOCATE and IDENTIFY the Eagle 21 rack specified in Step 5.A.1.

Peer

3. DOGUMENT the As-Found condition of the following power supply switches located in the upper power supply drawers of the Eagle 21 rack.

LCP Power Supply PRI Power Supply SEC Power Supply TSP Power Supply Peer

4. INFORM UO that power will be removed from the rack recorded above.
5. LOCATE and IDENTIFY the LCP power supply switch.

Peer

6. PLACE the LCP power supply switch to the OFF position.

Peer

7. LOCATE and IDENTIFY the PRI power supply switch.

Peer B. PLACE the PR! power supply switch to the OFF position. E1-5

WBN WATTS BAR UNIT 2 EAGLE21 wo 115799048 Unat 2 COMMUNICATIONS TEST Page 5 of 10 Date: Peer

9. LOCATE and IDENTIFY the LCP power supply switch.

Peer

10. PLACE the SEC power supply switch to the OFF position.

Peer

11. LOCATE and IDENTIFY the LCP power supply switch.

Peer

12. PLACE the TSP power supply switch to the OFF position.

Peer

13. REMOVE/RE-INSTALL MC-09 LCP DLH#1 and MC-02 SEC cards from microprocessor card cage slots 9 and 2 as follows:
a. PLACE anti-static mat on a suitable work surface and ENSURE mat is connected to frame ground of the designated Eagle 21 rack.

tr

b. REMOVE the two cable hood retainer bars by pressing in on bar while pushing slide on one end of bar toward the center of bar until slide is free of slot in card cage chassis. tr
c. LOOSEN screws in card retainer at top and bottom of card guides.

tr

d. MOVE card retainer out of the way.

tr

e. LOCATE and IDENTIFY cable hood for MC-09 DLH#1 card.

tr

f. REMOVE cable hood from MC-09 DLH#1 card.

tr

g. USE plastic card ejectors on DLH#1 card to pivot board out of card guides and PULL card out of card guides.

tr h, PLACE card on anti-static mat. tr

i. LOCATE and IDENTIFY cable hood for MC-02 SEC card.
j. REMOVE cable hood from MC-02 SEC card.

E1-6

WBN WATTS BAR UNIT 2 EAGLE2l wo 115799048 Unat 2 COMMUNICATIONS TEST Page 6 of 10 Date:

k. USE plastic card ejectors on SEC card to pivot board out of card guides and PULL card out of card guides.

tr

l. PLACE card on anti-static mat.

u

m. INSTALL DIP-16 socket ribbon cable adapter in empty socket U12 on DLH#1 board with black dot aligned to pin 1.

tr

n. Carefully RE-INSTALL DLH#I board in slot 9 of microprocessor card cage while routing ribbon cable out the front of the rack.

tr

o. LOCATE and IDENTIFY lSBX 586 Ethernet Daughter board.

tr

p. REMOVE iSBX 586 Ethernet daughter board from SEC card.

tr

q. INSTALL DIP-16 socket ribbon cable adapter in empty socket U12 on SEC board with black dot aligned to pin 1.

D

r. INSERT #22 AWG solid conductor insulated wire into jumper locations E55 and E51 on SEC board. tr
s. RE-INSTALL lSBX 586 Ethernet daughter board on SEC card.

tr

t. Carefully RE-INSTALL SEC board in slot 2 of microprocessor card cage while routing ribbon cable and wires out the front of the rack.

tr

u. RE-INSTALL cable hood on MC-09 DLH#1 card.

tr

v. RE-INSTALL cable hood on MC-02 SEC card.

tr

w. RE-INSTALL microprocessor cage card retainer.

tr

14. INFORM UO that power will be restored to the rack recorded above.
15. PLACE the LCP power supply switch to the ON position.

Peer

16. PLACE the PRI power supply switch to the ON position.

Peer E1-7

WBN WATTS BAR UNIT 2 EAGLE?I wo 115799048 Unat 2 COMMUNICATIONS TEST Page 7 of 10 Date: 17 . PLACE the SEC power supply switch to the ON position. Peer

18. PLACE the TSP power supply switch to the ON position.

Peer B. Connection of Test Equipment and Verification of Expected Results.

1. LOCATE and IDENTIFY SEC{o-FOC cable (5D93449c05) at fiber optic converter located in the designated Eagle 21 rack.
2. DISCONNECT SEC-to-FOC cable (5D93449G05) from fiber optic converter located in the designated Eagle 21 rack.
3. CONNECT SEC{o-FOC cable to the AUI-to1OBase T transceiver.
4. CONNECT Ethernet Switch and Laptop computers at the direction of Engineering.
5. START ColaSoft packet generation software and configure for network packet generation at the direction of Engineering (Laptop1.)
6. START Wireshark packet analysis software and configure for network packet detection at the direction of Engineering (Laptop 2.)
7. VERIFY Laptop2 Wireshark packet analysis software shows network data packets being transmitted to the destination TCP/!P address of the designated Eagle 21 rack.

Peer

8. ENERGIZE Oscilloscope and ADJUST Channel 1 and Channel 2 Volts/Division, Time Base and Sync settings at the direction of Engineering.

E1-8

WBN WATTS BAR UNIT 2 EAGLE21 wo 115799048 Unat 2 COMMUNICATIONS TEST Page 8 of 10 Date:

9. CONNECT Channel 1 oscilloscope probe to SEC DIP-16 ribbon cable adapter top GREEN wire and probe shield to top YELLOW wire. These wires represent SEC card data transmit onto the serial bus.
10. CONNECT Channel 2 Oscilloscope probe to the wires inserted into jumpers E55 and E51. These wires represent SEC card data receive from the serial bus. This data is transmitted every 100 mSec from the Loop Calculation Processor's DLH#1 card.
11. VERIFY that Channel 1 Oscilloscope trace shows no data on the SEC transmit lines.

Peer

12. VERIFY that Channel 2 Oscilloscope trace shows transmit data from the LCP DLH on the SEC receive lines.

Peer

13. OBTAIN Oscilloscope screen capture and ATTACH to this Work Order.
14. DISCONNECT and RE-CONNECT Channel2 Oscilloscope probe to DLH#1 DIP-16 ribbon cable adapter DARK PINK wire and probe shield to BLACK wire. These wires represent LCP DLH#1 card data receive from the serial bus.

Peer

15. VERIFY that Channel 2 Oscilloscope trace shows no data on the LCP DLH#1 recieve Iines.

Peer

16. OBTAIN Oscilloscope screen capture and ATTACH to this Work Order.

E1-9

WBN WATTS BAR UNIT 2 EAGLE?I wo 115799048 Unat 2 COMMUNICATIONS TEST Page 9 of 10 Date:

17. OBTAIN System Engineer concurrence that the test results were as expected and satisfactory.

System Engineer Date

18. DISCONNECT all test equipment that was used in the performance of this test.

C. Restoration of Eagle 21 Designated Rack to As-Found Conditions

1. RESTORE the As-Found condition of the following power supply switches located in the upper power supply drawers of the Eagle 21 rack.

LCP Power Supply PRI Power Supply SEC Power Supply TSP Power Supply Peer

2. RETURN designated Eagle 21 rack to As-Found condition per skill of the craft.
a. PLACE anti-static mat on a suitable work surface and ENSURE mat is connected to frame ground of the designated Eagle 21 rack.

tr

b. REMOVE cable hood from MC-09 DLH#1 card.

tr

c. USE plastic card ejectors on DLH#1 card to pivot board out of card guides and PULL card out of card guides.

tr

d. PLACE card on anti-static mat.
e. REMOVE cable hood from MC-02 SEC card.

D f . USE plastic card ejectors on SEC card to pivot board out of card guides and PULL card out of card guides. tr

g. PLACE card on anti-static mat.

tr E1-10

WBN WATTS BAR UNIT 2 EAGLE?I wo 115799048 Unat 2 COMMUNICATIONS TEST Page 10 of 10 Date:

h. REMOVE DIP-16 socket ribbon cable adapter in empty socket U12 on DLH#1 board.

tr

i. Carefully RE-INSTALL DLH#1 board in slot 9 of microprocessor card
                   @ge.

D

j. REMOVE lSBX 586 Ethernet daughter board from SEC card.

u

k. REMOVE DIP-16 socket ribbon cable adapter in empty socket U12 on SEC board.

tr

l. REMOVE#22 AWG solid conductor insulated wire from jumper locations E55 and E51 on SEC board. tr
m. RE-INSTALL lSBX 586 Ethernet daughter board on SEC card.

tr

n. Carefully RE-INSTALL SEC board in slot 2 of microprocessor card cage.

0

o. RE-INSTALL cable hood on MC-09 DLH#1 card.

tr

p. RE-INSTALL cable hood on MC-02 SEC card.

tr

q. RE{NSTALL microprocessor cage card retainer.

tr

r. RE-INSTALL the two cable hood retainer bars by pressing in on bar while pushing slide on one end of bar toward the center of bar until slide is free of slot in card cage chassis. tr
3. OBTAIN System Engineer concurrence that As-Left Eagle 21 designated rack configuration is acceptable for current equipment status and plant conditions.

System Engineer Date E1-11

ENCLOSURE 2 Tennessee Valley Authority Watts Bar Nuclear Plant, Unit 2 Docket No. 50-391 Watts Bar Nuclear Plant Unit 2 Eagle 21 UnidirectionalGommunications Test Summary 13 August 2014

Purpose:

A commitment has been made to the Nuclear Regulatory Commission (NRC) to clearly demonstrate that two-way communications is impossible with Eagle 21 in accordance with Watts Bar Nuclear Plant Unit 2 Supplemental Safety Evaluation Report (SSER) 23 Section 7.2.1.1. The purpose of this test was to veriff that the External Communications lnterface (ECl) for WBN Unit 2 Eagle 21 Reactor Protection System only allows data flow in one direction (i.e. data out to the plant computer and no data into the Eagle 21 system). This is a programmable digital system that has an external communications interface for transfer of plant data parameters to the Unit 2 plant lntegrated Computer System (lCS). This communications interface is unidirectional in nature, as the receive RS422 communications integrated circuit (lC), U12, is not installed on the Loop Calculation Processor's (LCP) Data Link Handler (DLH). The transmit RS-422 Communications lCs are also not installed on the Test Sequence Processor's DLH (U13) and the Serialto Ethemet Controller (U12). lllustration 1 was developed as a simplifled block diagram demonstrating this configuration. The plant configuration control documents that were used to accomplish this are listed in the references section. The testing was performed on Eagle Rack 2R4, WBN 2-PNL-099-R4D. This rack is typical for all of the Eagle Racks. CARO Cl CABLE CZ CAR D 8.SDA 5-sDB 1t m

12. RDA 9-ROB t;t lzssrz H

I 6-TTA 5 15 16. RTA I rs,u I 3-TTB 4 14 13 . RTB t ::J DIH#1 OLH T2 LCP TEP 17 - RDA 9- BDB l1 10 8-SDA S-SDB l,;

   @           16 - RTA 13 . RTB 6  -TTA 3 -TTB l-,ffii,,

ll I 22 16 DCE INTERFACE sDA sDB TTB TTA RDA RDB RTA RTB IRDAI(RrlB)(nrBl FrA)

                                   !r         il    r

tirg ulz RS422 RC\,R Ry122 XMtT C,rjP H(li !tl\IA.t iD? 5EC

     !llustration 1. Simplified Block Diagram of Eagle 21 External Communications lnterface.

E2-1

Test Sequence: The steps that were performed under Work Order 115799048 to successfully demonstrate that the communications interface to the safety-related Loop Calculation Processer (LCP) is unidirectional are as follows.

1. The LCP Data Link Handler (DLH) and Serial to Ethernet Controller (SEC) circuit boards were removed from the rack and the ribbon cable socket adapters and jumper wires were installed into the empty socket locations. The circuit boards were re-installed and the rack was powered up.
2. Disconnect an operable Eagle 21 Rack from the Fiber Optic Converter located within that rack (i.e. FOC-02).
3. Obtain an Ethernet Network Hub (CenterCOM MR820TR) with 4 ports minimum.
4. Obtain an Ethernet Network Transceiver (CenterCOM 210T) with an Attachment Unit lnterface (AUl) port and connect the AUI cable going to the SEC in the rack.
5. Connect an Ethernet RJ-45 cable from the transceiver to Port 4 on the Ethernet hub.
6. Connect an RJ45 Ethernet cable from 1OBase-T Port 1 on the hub to a personal computer (CEG3) with network packet generation software installed on it (ColaSoft Packet Generator).
7. Connect an RJ45 Ethernet cable from 10Base-T Port2 on the hub to a PC (CEGS) with network packet analysis software installed on it (Wireshark).
8. Obtain a dual trace digital storage oscilloscope and connect probe 1 to the SEC transmit lines at U12 socket pins 2 and 3 (this lC has been removed).
9. Connect probe 2 to SEC receive lines at jumpers E55 (SDA) and E51 (SDB) as shown on lllustration 2 below.
10. Configure the packet generation software on CEG3 to generate looping network data packets for the lP address of the selected Eagle 21 rack.
11. Configure the packet analysis software on CEGS to monitor TCP/IP and MAC layer network traffic.

12.Verity that CEGS shows network packets being injected into the SEC Ethernet port of the Eagle 21 rack.

13. Verify no data is visible on probe 1 trace.

14.Yerity data is visible on probe 2trace, this is serial data coming from the safety-related LCP DLH.

15. Disconnect probe 2 and re-connect to the receive lines on the LCP DLH card at lC socket U12 pins 6 and 7 (this lC has been removed).

E2-2

16. Verify no data traffic appears on either oscilloscope trace. A photograph of the oscilloscope traces is included as !llustration 3.
17. Disconnect alltest equipment and return to the original configuration when testing is complete.

crt E.a ,l tt 3lt ,^

                                                                   .rl I                                                           Jl .
      -'-J -g!-.,0 tI f'--{

J3tr Jt le ter C JD 3T

       -             CT'                                          .rl tt B l_ qr      6 Jt ar JC Jl t'

33 lllustration 2. SEC Oscilloscope Connection Points. E2-3

                                                   *-qfI'..*    ..-f It.rtrl\                     'l      ,

lllustration 3. Oscilloscope rr"" ""/ Results/Conclusions: The steps performed in Work Order 115799048 verified two-way communications is impossible with the designated Eagle 21 rack. Connection of Oscilloscope probe 1 to the SEC transmit lines at socket U12 pins 2 and 3 showed no transmit information was received on the serial High Level Data Link Control bus from the SEC card. Connection of probe 2 at jumpers E55 and E51 showed serial data being transmitted onto the bus from the LCP DLH card. This serial data is received by the SEC card and sent on to the lCS as unacknowledged User Datagram Protocol Ethernet data packets. The User Datagram Protocol/lnternet Protocolwould normally be the network protocol of choice whenever one-way communications is used, as it does not require an acknowledgement of successful information delivery. Reconnection of probe 2 to the receive lines of LCP DLH socket U12 pins 6 and 7 shows no data being received on the bottom oscilloscope trace in lllustration 3 shown above. The Wireshark capture file also shows no response from the Eagle 21 rack at !P address 192.168.1.4 when generated data packets were targeted to that specific lP address, as well as the broadcast address of 255.255.255.255. E2-4

Reference Drawings: 1 . Vendor Manual WBN-VTD-W120-5037

2. Vendor Manual WBN-VTD-W120-5058
3. Plant Drawing 2-65717-3D21648
4. Plant Drawings 2-65717-5D93433-1 , -2,-3
5. Plant Drawings 2-65717-3D21653-1 , -2
6. Plant Drawings 2-65717-1 856E60-2, -8, -9, -11 E2-5

ENCLOSURE 3 Tennessee Valley Authority Watts Bar Nuclear Plant, Unit 2 Docket No. 50-391 High LevelSummary and Block Diagram Backoround: The Tennessee Valley Authority performed a test via Work Order 115799048 to clearly demonstrate that two-way communications is impossible with Eagle 21. The purpose of this test was to verify that the External Communications lnterface (EC!) for Watts Bar Nuclear Plant Unit 2 Eagle 21 Reactor Protection System only allows data flow in one direction (i.e. data out to the plant computer (lCS) and no data into the Eagle 21 system). The Eagle 21 is divided into two major sections:

1. Loop Calculation Processor (LCP) section which performs the Safety Related Functions, and
2. Test Sequence Processor (TSP) section which performs the Non Safety Related Functions.

!nternal unidirectional communication between these section is ensured from the LCP to the TSP by removing the receive communications lCs from the LCP section and removing the transmit communications from the TSP section including the Serial Ethernet Converter (SEC). Therefore'the LCP has no ability to receive data nor does the TSP or SEC have the ability to transmit data. E3-1

Eagle2l Rack 2-R-4 Oscilloscope Probe 2 Oscilloscope Probe I Connection Connection HDLC Serial Bus

                                                                                    .21
                                                          \^                          J I
                                                              \
                                        )

Ethernet Add-on Card LCP Data Link Serial-Et hernet TSP Da a Link

                         ?t/        nl UUNVETTET E UAT u                                               tlanoler Board Handller Board
                                                                  'Normal :onnection to ICS Laptop Computer                    Ithernet               Laptop Computer with WireShark                     t{etwork               ,vith ColaSoft installed                          fub                    rnstalled Diagram     1 Test Method:

Diagram 1 illustrates the connections made to Eagle 21 rack for the purposes of this test. The Loop Calculation Processor generates status information at a rate of ten times per second. This information travels on the HDLC serial bus where it is received by the SEC and then passed on to the lntegrated Computer System through the Ethernet network connection. To demonstrate the unidirectional communications, the Ethernet port was disconnected from ICS and a laptop connected in its place. The laptop computer was configured to generate a data storm to the Eagle 21 by targeting its !P address. Another laptop was connected to analyze and record the network data traffic to veriff that the Eagle 21 rack did not respond to the data storm and continued to send out the status information. Oscilloscope probes were connected to the LCP Data Link Handler serial receive lines and the SEC serialtransmit lines to verify that no serial data traffic was present, which was as expected since the SEC has no transmit capability.

== Conclusion:==

The steps performed in Work Order 115799048 verified two-way communications is impossible with the designated Eagle 21 rack. E3-2}}