CNL-14-202, Eagle 21 Test Plan and Test Results: Difference between revisions

From kanterella
Jump to navigation Jump to search
(Created page by program invented by StriderTol)
(Created page by program invented by StriderTol)
 
Line 309: Line 309:
Ethernet Add-on Card LCP Data Link        Serial-Et hernet                                                TSP Da a Link
Ethernet Add-on Card LCP Data Link        Serial-Et hernet                                                TSP Da a Link
                           ?t/        nl UUNVETTET E UAT u                                              tlanoler Board Handller Board
                           ?t/        nl UUNVETTET E UAT u                                              tlanoler Board Handller Board
                                                                   'Normal :onnection to ICS
                                                                   'Normal :onnection to ICS Laptop Computer                    Ithernet              Laptop Computer with WireShark                    t{etwork              ,vith ColaSoft installed                          fub                    rnstalled Diagram    1 Test Method:
                                                                          ,
Laptop Computer                    Ithernet              Laptop Computer with WireShark                    t{etwork              ,vith ColaSoft installed                          fub                    rnstalled Diagram    1 Test Method:
Diagram 1 illustrates the connections made to Eagle 21 rack for the purposes of this test. The Loop Calculation Processor generates status information at a rate of ten times per second. This information travels on the HDLC serial bus where it is received by the SEC and then passed on to the lntegrated Computer System through the Ethernet network connection. To demonstrate the unidirectional communications, the Ethernet port was disconnected from ICS and a laptop connected in its place. The laptop computer was configured to generate a data storm to the Eagle 21 by targeting its !P address. Another laptop was connected to analyze and record the network data traffic to veriff that the Eagle 21 rack did not respond to the data storm and continued to send out the status information. Oscilloscope probes were connected to the LCP Data Link Handler serial receive lines and the SEC serialtransmit lines to verify that no serial data traffic was present, which was as expected since the SEC has no transmit capability.
Diagram 1 illustrates the connections made to Eagle 21 rack for the purposes of this test. The Loop Calculation Processor generates status information at a rate of ten times per second. This information travels on the HDLC serial bus where it is received by the SEC and then passed on to the lntegrated Computer System through the Ethernet network connection. To demonstrate the unidirectional communications, the Ethernet port was disconnected from ICS and a laptop connected in its place. The laptop computer was configured to generate a data storm to the Eagle 21 by targeting its !P address. Another laptop was connected to analyze and record the network data traffic to veriff that the Eagle 21 rack did not respond to the data storm and continued to send out the status information. Oscilloscope probes were connected to the LCP Data Link Handler serial receive lines and the SEC serialtransmit lines to verify that no serial data traffic was present, which was as expected since the SEC has no transmit capability.



Latest revision as of 18:09, 5 February 2020

Eagle 21 Test Plan and Test Results
ML14295A520
Person / Time
Site: Watts Bar Tennessee Valley Authority icon.png
Issue date: 10/22/2014
From: James Shea
Tennessee Valley Authority
To:
Document Control Desk, Office of Nuclear Reactor Regulation
References
CNL-14-202
Download: ML14295A520 (22)


Text

{{#Wiki_filter:Tennessee Valley Authority, 1 101 Market Street, Chattanooga, Tennessee 37402 cNL-1 4-202 October 22,2014 10 cFR 50.4 U. S. Nuclear Regulatory Commission ATTN. Document Control Desk Washington, D.C. 20555-0001 Watts Bar Nuclear Plant, Unit 2 NRC Docket No. 50-391

Subject:

WATTS BAR NUCLEAR PLANT UNIT 2 - EAGLE 21 TEST PLAN AND TEST RESULTS

References:

1. Letter from TVA to NRC, "Watts Bar Nuclear Plant (WBN) Unit 2 -

lnstrumentation and Controls Staff lnformation Requests," dated October 21, 2010 (ML103140661 )

2. NUREG-0847, "Supplemental Safety Evaluation Report (SSER) 23 Related to the Operation of Watts Bar Nuclear Plant, Unit 2, Docket Number 50-391," Published July 2011 The purpose of this submittal is to address a Nuclear Regulatory Commission (NRC) request for a high level test summary that demonstrates the unidirectional communication for Eagle 21 Protection Set interface. Enclosure 1 provides the system communication test plan. (A completed copy of the test package was provided to the WBN NRC Unit 2 resident inspector.) Enclosure 2 provides a summary of the test steps and results. Enclosure 3 provides the requested high level summary.

This Eagle 21 test addresses Supplemental Safety Evaluation Report 23, Appendix HH, Open ltems 63 and 93 (Reference 2). The Tennessee Valley Authority considers these items closed based on the information contained in the three enclosures. There are no new regulatory commitments contained in this letter. lf you have any questions, please contact Gordon Arent at (423) 365-2004.

U.S. Nuclear Regulatory Commission cNL-14-202 Page 2 October 22,2014 I declare under penalty of perjury that the foregoing is true and correct. Executed on the 22nd day of Oqtober, 2014. Resy'ecflully,

 . W. Shea Vice President, Nuclear Licensing

Enclosures:

1. Eagle 21 Test Plan - Watts Bar Unit 2 Eagle 21 Unidirectional Communications Test
2. Watts Bar Nuclear Plant Unit 2 - Eagle 21 Unidirectional Communications Test Summary - 13 August 2014
3. High Level Summary and Block Diagram cc: See page 3

U.S. Nuclear Regulatory Commission cNL-1 4-202 Page 3 October 22,2014 cc (Enclosures): U. S. Nuclear Regulatory Commission Region !l Marquis One Tower 245 Peachtree Center Ave., NE Suite 1200 Atlanta, Georgia 30303 -1257 NRC Resident Inspector Unit 1 Watts Bar Nuclear Plant 1260 Nuclear Plant Road Spring City, Tennessee 37381 NRC Resident lnspector Unit2 Watts Bar Nuclear Plant 1260 Nuclear Plant Road Spring City, Tennessee 37381

U.S. Nuclear Regulatory Commission cNL-1 4-202 Page 4 October 22,2014 bcc (Enclosures): Jessie Quichocho U.S. Nuclear Regulatory Commission MS OBGgA One White Flint North 1 1555 Rockville Pike Rockville, Maryland 20 852-2738 Fred Brown, Deputy Regional Administrator for Construction U. S. Nuclear Regulatory Commission Region ll Marquis One Tower 245 Peachtree Center Ave., NE Suite 1200 Atlanta, Georgia 30303 -1257

ENCLOSURE 1 Tennessee Val ley Authority Watts Bar Nuclear Plant, Unit 2 Docket No. 50-391 Eagle 21 Test Plan Watts Bar Unat 2 Eagle 21 Unidirectional Communications Test E1-1

WBN WATTS BAR UNIT 2 EAGLE2l wo {15799048 Unat2 COMi'IUNIGATIONS TEST Page I of 10 Date: WATTS BAR UNIT 2 EAGLE 21 UNIDIRECTIONAL COMNilUNICATIONS TEST Prepared By: ,{ft Date , f {zs/tf Reviewed By:fri oate: l4rl QA Reviewer:i oate:z/a?/4 E1-2

WBN WATTS BAR UNIT 2 EAGLE?I wo 115799048 Unat 2 COMMUNICATIONS TEST Page 2 of 10 Date:

1. PRECAUTIONS AND LIMITATIONS A. When circuit boards or board components are removed and reinstalled from the system, they become susceptible to damage caused by the build-up or discharge of static electricity. To avoid damage to circuit boards, implement the following guidelines:

o When replacing a circuit board at the rack, wear a wrist strap that is grounded to the rack chassis ground. o When replacing a circuit board at the rack, wear a wrist strap that is grounded to the rack chassis ground. o lf circuit board components are to be replaced, wear a grounded wrist strap while removing components from board or removing new components from their storage cases. B. Cards in the card cage are numbered right to left from the Status Panel. The DLH#1 card is in slot 9 and the SEC card is in slot 2. Each have an empty slot to the right. C. Primary Engineering Point of Contact for this test is Steve Kirk, located in !0855 (423) 36s-1 169.

2. SPECTAL TOOLS, MEASURTNG AND TEST EQUIPMENT (M&TE), PARTS AND SUPPLIES A. OBTAIN the following special tools and M&TE, OR DETERMINE they are available for use:

o M&TE approved Laptop Computer with ColaSoft network packet generation software installed. o M&TE approved Laptop Computer with Wireshark network packet analysis software installed. o CenterCOM AT-MR820TR Ethernet 1OBase-T network switch or equivalent supplied by NPG CEG.

         . CenterCOM AT-210T AUl-to-10Base T Ethernet transceiver or equivalent supplied by NPG CEG.

o Techtronix TDS3032B Digital dual trace oscilloscope or equivalent with 2 probes.

         . Category 5 RJ-45 Ethernet cables supplied by NPG CEG(3 required.)

o DIP-16 socket ribbon cable adapter supplied by NPG CEG(2 required.) o #22 AWG solid conductor insulated wire or equivalent supplied by NPG CEG. o Anti-static mat with grounding wrist strap. E1-3

WBN WATTS BAR UNIT 2 EAGLE?I wo 115799048 Unat 2 COMMUNICATIONS TEST Page 3 of 10 Date:

3. REFERENCES A. Vendor Manual WBN-VTD-W1 20-5A37 B. Vendor Manual WBN-VTD-W120-5058 C. Plant Drawing 2-65717-3D21 648 D. Plant Drawings 2-65717-5D93433-1 , -2, -3 E. Plant Drawings 2-65717-3D21653-1, -2 F. Plant Drawings 2-65717-1 856E60-2, -8, -9, -11
4. APPROVALS AND NOTIFICATIONS NOTE Approvals and Notifications shall be performed in accordance with Work lnitiating Document (WlD)

A. INFORM Unit Operator (UO) that power will be removed and re-applied to the target Eagle 21 rack during the performance of this test and alarms may be activated as a result. UO

5. PERFORMANCE CAUTION Anti-static station shall be used during remova!/installation of Eagle 21 circuit cards to prevent Electro-static discharge damage.

NOTE Personnel involved in the performance of this test should be familiar with the Eagle 21 Protection Set hardware and the M&TE used during the test. They should also be familiar with the software tools that are used. NOTE The Eagle 21 rack power supply switches are located on the upper power supply drawer. lf power is not applied to the target Eagle 21 rack, then Steps 5.A.6, 5.A.8, 5.A.10 and 5.A.12 may be marked N/A. E1-4

WBN WATTS BAR UNIT 2 EAGLE21 wo 115799048 Untt2 COMMUNICATIONS TEST Page 4 of 10 Date: A. Removal/lnstallation of MC-09 DLH#1 Card and Removal/lnstallation of MC-02 SEC card

1. RECORD the Unit 2 Eagle 21 rack number that has been designated for the performance of this test.

Rack# UNID Sys Eng

2. LOCATE and IDENTIFY the Eagle 21 rack specified in Step 5.A.1.

Peer

3. DOGUMENT the As-Found condition of the following power supply switches located in the upper power supply drawers of the Eagle 21 rack.

LCP Power Supply PRI Power Supply SEC Power Supply TSP Power Supply Peer

4. INFORM UO that power will be removed from the rack recorded above.
5. LOCATE and IDENTIFY the LCP power supply switch.

Peer

6. PLACE the LCP power supply switch to the OFF position.

Peer

7. LOCATE and IDENTIFY the PRI power supply switch.

Peer B. PLACE the PR! power supply switch to the OFF position. E1-5

WBN WATTS BAR UNIT 2 EAGLE21 wo 115799048 Unat 2 COMMUNICATIONS TEST Page 5 of 10 Date: Peer

9. LOCATE and IDENTIFY the LCP power supply switch.

Peer

10. PLACE the SEC power supply switch to the OFF position.

Peer

11. LOCATE and IDENTIFY the LCP power supply switch.

Peer

12. PLACE the TSP power supply switch to the OFF position.

Peer

13. REMOVE/RE-INSTALL MC-09 LCP DLH#1 and MC-02 SEC cards from microprocessor card cage slots 9 and 2 as follows:
a. PLACE anti-static mat on a suitable work surface and ENSURE mat is connected to frame ground of the designated Eagle 21 rack.

tr

b. REMOVE the two cable hood retainer bars by pressing in on bar while pushing slide on one end of bar toward the center of bar until slide is free of slot in card cage chassis. tr
c. LOOSEN screws in card retainer at top and bottom of card guides.

tr

d. MOVE card retainer out of the way.

tr

e. LOCATE and IDENTIFY cable hood for MC-09 DLH#1 card.

tr

f. REMOVE cable hood from MC-09 DLH#1 card.

tr

g. USE plastic card ejectors on DLH#1 card to pivot board out of card guides and PULL card out of card guides.

tr h, PLACE card on anti-static mat. tr

i. LOCATE and IDENTIFY cable hood for MC-02 SEC card.
j. REMOVE cable hood from MC-02 SEC card.

E1-6

WBN WATTS BAR UNIT 2 EAGLE2l wo 115799048 Unat 2 COMMUNICATIONS TEST Page 6 of 10 Date:

k. USE plastic card ejectors on SEC card to pivot board out of card guides and PULL card out of card guides.

tr

l. PLACE card on anti-static mat.

u

m. INSTALL DIP-16 socket ribbon cable adapter in empty socket U12 on DLH#1 board with black dot aligned to pin 1.

tr

n. Carefully RE-INSTALL DLH#I board in slot 9 of microprocessor card cage while routing ribbon cable out the front of the rack.

tr

o. LOCATE and IDENTIFY lSBX 586 Ethernet Daughter board.

tr

p. REMOVE iSBX 586 Ethernet daughter board from SEC card.

tr

q. INSTALL DIP-16 socket ribbon cable adapter in empty socket U12 on SEC board with black dot aligned to pin 1.

D

r. INSERT #22 AWG solid conductor insulated wire into jumper locations E55 and E51 on SEC board. tr
s. RE-INSTALL lSBX 586 Ethernet daughter board on SEC card.

tr

t. Carefully RE-INSTALL SEC board in slot 2 of microprocessor card cage while routing ribbon cable and wires out the front of the rack.

tr

u. RE-INSTALL cable hood on MC-09 DLH#1 card.

tr

v. RE-INSTALL cable hood on MC-02 SEC card.

tr

w. RE-INSTALL microprocessor cage card retainer.

tr

14. INFORM UO that power will be restored to the rack recorded above.
15. PLACE the LCP power supply switch to the ON position.

Peer

16. PLACE the PRI power supply switch to the ON position.

Peer E1-7

WBN WATTS BAR UNIT 2 EAGLE?I wo 115799048 Unat 2 COMMUNICATIONS TEST Page 7 of 10 Date: 17 . PLACE the SEC power supply switch to the ON position. Peer

18. PLACE the TSP power supply switch to the ON position.

Peer B. Connection of Test Equipment and Verification of Expected Results.

1. LOCATE and IDENTIFY SEC{o-FOC cable (5D93449c05) at fiber optic converter located in the designated Eagle 21 rack.
2. DISCONNECT SEC-to-FOC cable (5D93449G05) from fiber optic converter located in the designated Eagle 21 rack.
3. CONNECT SEC{o-FOC cable to the AUI-to1OBase T transceiver.
4. CONNECT Ethernet Switch and Laptop computers at the direction of Engineering.
5. START ColaSoft packet generation software and configure for network packet generation at the direction of Engineering (Laptop1.)
6. START Wireshark packet analysis software and configure for network packet detection at the direction of Engineering (Laptop 2.)
7. VERIFY Laptop2 Wireshark packet analysis software shows network data packets being transmitted to the destination TCP/!P address of the designated Eagle 21 rack.

Peer

8. ENERGIZE Oscilloscope and ADJUST Channel 1 and Channel 2 Volts/Division, Time Base and Sync settings at the direction of Engineering.

E1-8

WBN WATTS BAR UNIT 2 EAGLE21 wo 115799048 Unat 2 COMMUNICATIONS TEST Page 8 of 10 Date:

9. CONNECT Channel 1 oscilloscope probe to SEC DIP-16 ribbon cable adapter top GREEN wire and probe shield to top YELLOW wire. These wires represent SEC card data transmit onto the serial bus.
10. CONNECT Channel 2 Oscilloscope probe to the wires inserted into jumpers E55 and E51. These wires represent SEC card data receive from the serial bus. This data is transmitted every 100 mSec from the Loop Calculation Processor's DLH#1 card.
11. VERIFY that Channel 1 Oscilloscope trace shows no data on the SEC transmit lines.

Peer

12. VERIFY that Channel 2 Oscilloscope trace shows transmit data from the LCP DLH on the SEC receive lines.

Peer

13. OBTAIN Oscilloscope screen capture and ATTACH to this Work Order.
14. DISCONNECT and RE-CONNECT Channel2 Oscilloscope probe to DLH#1 DIP-16 ribbon cable adapter DARK PINK wire and probe shield to BLACK wire. These wires represent LCP DLH#1 card data receive from the serial bus.

Peer

15. VERIFY that Channel 2 Oscilloscope trace shows no data on the LCP DLH#1 recieve Iines.

Peer

16. OBTAIN Oscilloscope screen capture and ATTACH to this Work Order.

E1-9

WBN WATTS BAR UNIT 2 EAGLE?I wo 115799048 Unat 2 COMMUNICATIONS TEST Page 9 of 10 Date:

17. OBTAIN System Engineer concurrence that the test results were as expected and satisfactory.

System Engineer Date

18. DISCONNECT all test equipment that was used in the performance of this test.

C. Restoration of Eagle 21 Designated Rack to As-Found Conditions

1. RESTORE the As-Found condition of the following power supply switches located in the upper power supply drawers of the Eagle 21 rack.

LCP Power Supply PRI Power Supply SEC Power Supply TSP Power Supply Peer

2. RETURN designated Eagle 21 rack to As-Found condition per skill of the craft.
a. PLACE anti-static mat on a suitable work surface and ENSURE mat is connected to frame ground of the designated Eagle 21 rack.

tr

b. REMOVE cable hood from MC-09 DLH#1 card.

tr

c. USE plastic card ejectors on DLH#1 card to pivot board out of card guides and PULL card out of card guides.

tr

d. PLACE card on anti-static mat.
e. REMOVE cable hood from MC-02 SEC card.

D f . USE plastic card ejectors on SEC card to pivot board out of card guides and PULL card out of card guides. tr

g. PLACE card on anti-static mat.

tr E1-10

WBN WATTS BAR UNIT 2 EAGLE?I wo 115799048 Unat 2 COMMUNICATIONS TEST Page 10 of 10 Date:

h. REMOVE DIP-16 socket ribbon cable adapter in empty socket U12 on DLH#1 board.

tr

i. Carefully RE-INSTALL DLH#1 board in slot 9 of microprocessor card
                   @ge.

D

j. REMOVE lSBX 586 Ethernet daughter board from SEC card.

u

k. REMOVE DIP-16 socket ribbon cable adapter in empty socket U12 on SEC board.

tr

l. REMOVE#22 AWG solid conductor insulated wire from jumper locations E55 and E51 on SEC board. tr
m. RE-INSTALL lSBX 586 Ethernet daughter board on SEC card.

tr

n. Carefully RE-INSTALL SEC board in slot 2 of microprocessor card cage.

0

o. RE-INSTALL cable hood on MC-09 DLH#1 card.

tr

p. RE-INSTALL cable hood on MC-02 SEC card.

tr

q. RE{NSTALL microprocessor cage card retainer.

tr

r. RE-INSTALL the two cable hood retainer bars by pressing in on bar while pushing slide on one end of bar toward the center of bar until slide is free of slot in card cage chassis. tr
3. OBTAIN System Engineer concurrence that As-Left Eagle 21 designated rack configuration is acceptable for current equipment status and plant conditions.

System Engineer Date E1-11

ENCLOSURE 2 Tennessee Valley Authority Watts Bar Nuclear Plant, Unit 2 Docket No. 50-391 Watts Bar Nuclear Plant Unit 2 Eagle 21 UnidirectionalGommunications Test Summary 13 August 2014

Purpose:

A commitment has been made to the Nuclear Regulatory Commission (NRC) to clearly demonstrate that two-way communications is impossible with Eagle 21 in accordance with Watts Bar Nuclear Plant Unit 2 Supplemental Safety Evaluation Report (SSER) 23 Section 7.2.1.1. The purpose of this test was to veriff that the External Communications lnterface (ECl) for WBN Unit 2 Eagle 21 Reactor Protection System only allows data flow in one direction (i.e. data out to the plant computer and no data into the Eagle 21 system). This is a programmable digital system that has an external communications interface for transfer of plant data parameters to the Unit 2 plant lntegrated Computer System (lCS). This communications interface is unidirectional in nature, as the receive RS422 communications integrated circuit (lC), U12, is not installed on the Loop Calculation Processor's (LCP) Data Link Handler (DLH). The transmit RS-422 Communications lCs are also not installed on the Test Sequence Processor's DLH (U13) and the Serialto Ethemet Controller (U12). lllustration 1 was developed as a simplifled block diagram demonstrating this configuration. The plant configuration control documents that were used to accomplish this are listed in the references section. The testing was performed on Eagle Rack 2R4, WBN 2-PNL-099-R4D. This rack is typical for all of the Eagle Racks. CARO Cl CABLE CZ CAR D 8.SDA 5-sDB 1t m

12. RDA 9-ROB t;t lzssrz H

I 6-TTA 5 15 16. RTA I rs,u I 3-TTB 4 14 13 . RTB t ::J DIH#1 OLH T2 LCP TEP 17 - RDA 9- BDB l1 10 8-SDA S-SDB l,;

   @           16 - RTA 13 . RTB 6  -TTA 3 -TTB l-,ffii,,

ll I 22 16 DCE INTERFACE sDA sDB TTB TTA RDA RDB RTA RTB IRDAI(RrlB)(nrBl FrA)

                                   !r         il    r

tirg ulz RS422 RC\,R Ry122 XMtT C,rjP H(li !tl\IA.t iD? 5EC

     !llustration 1. Simplified Block Diagram of Eagle 21 External Communications lnterface.

E2-1

Test Sequence: The steps that were performed under Work Order 115799048 to successfully demonstrate that the communications interface to the safety-related Loop Calculation Processer (LCP) is unidirectional are as follows.

1. The LCP Data Link Handler (DLH) and Serial to Ethernet Controller (SEC) circuit boards were removed from the rack and the ribbon cable socket adapters and jumper wires were installed into the empty socket locations. The circuit boards were re-installed and the rack was powered up.
2. Disconnect an operable Eagle 21 Rack from the Fiber Optic Converter located within that rack (i.e. FOC-02).
3. Obtain an Ethernet Network Hub (CenterCOM MR820TR) with 4 ports minimum.
4. Obtain an Ethernet Network Transceiver (CenterCOM 210T) with an Attachment Unit lnterface (AUl) port and connect the AUI cable going to the SEC in the rack.
5. Connect an Ethernet RJ-45 cable from the transceiver to Port 4 on the Ethernet hub.
6. Connect an RJ45 Ethernet cable from 1OBase-T Port 1 on the hub to a personal computer (CEG3) with network packet generation software installed on it (ColaSoft Packet Generator).
7. Connect an RJ45 Ethernet cable from 10Base-T Port2 on the hub to a PC (CEGS) with network packet analysis software installed on it (Wireshark).
8. Obtain a dual trace digital storage oscilloscope and connect probe 1 to the SEC transmit lines at U12 socket pins 2 and 3 (this lC has been removed).
9. Connect probe 2 to SEC receive lines at jumpers E55 (SDA) and E51 (SDB) as shown on lllustration 2 below.
10. Configure the packet generation software on CEG3 to generate looping network data packets for the lP address of the selected Eagle 21 rack.
11. Configure the packet analysis software on CEGS to monitor TCP/IP and MAC layer network traffic.

12.Verity that CEGS shows network packets being injected into the SEC Ethernet port of the Eagle 21 rack.

13. Verify no data is visible on probe 1 trace.

14.Yerity data is visible on probe 2trace, this is serial data coming from the safety-related LCP DLH.

15. Disconnect probe 2 and re-connect to the receive lines on the LCP DLH card at lC socket U12 pins 6 and 7 (this lC has been removed).

E2-2

16. Verify no data traffic appears on either oscilloscope trace. A photograph of the oscilloscope traces is included as !llustration 3.
17. Disconnect alltest equipment and return to the original configuration when testing is complete.

crt E.a ,l tt 3lt ,^

                                                                   .rl I                                                           Jl .
      -'-J -g!-.,0 tI f'--{

J3tr Jt le ter C JD 3T

       -             CT'                                          .rl tt B l_ qr      6 Jt ar JC Jl t'

33 lllustration 2. SEC Oscilloscope Connection Points. E2-3

                                                   *-qfI'..*    ..-f It.rtrl\                     'l      ,

lllustration 3. Oscilloscope rr"" ""/ Results/Conclusions: The steps performed in Work Order 115799048 verified two-way communications is impossible with the designated Eagle 21 rack. Connection of Oscilloscope probe 1 to the SEC transmit lines at socket U12 pins 2 and 3 showed no transmit information was received on the serial High Level Data Link Control bus from the SEC card. Connection of probe 2 at jumpers E55 and E51 showed serial data being transmitted onto the bus from the LCP DLH card. This serial data is received by the SEC card and sent on to the lCS as unacknowledged User Datagram Protocol Ethernet data packets. The User Datagram Protocol/lnternet Protocolwould normally be the network protocol of choice whenever one-way communications is used, as it does not require an acknowledgement of successful information delivery. Reconnection of probe 2 to the receive lines of LCP DLH socket U12 pins 6 and 7 shows no data being received on the bottom oscilloscope trace in lllustration 3 shown above. The Wireshark capture file also shows no response from the Eagle 21 rack at !P address 192.168.1.4 when generated data packets were targeted to that specific lP address, as well as the broadcast address of 255.255.255.255. E2-4

Reference Drawings: 1 . Vendor Manual WBN-VTD-W120-5037

2. Vendor Manual WBN-VTD-W120-5058
3. Plant Drawing 2-65717-3D21648
4. Plant Drawings 2-65717-5D93433-1 , -2,-3
5. Plant Drawings 2-65717-3D21653-1 , -2
6. Plant Drawings 2-65717-1 856E60-2, -8, -9, -11 E2-5

ENCLOSURE 3 Tennessee Valley Authority Watts Bar Nuclear Plant, Unit 2 Docket No. 50-391 High LevelSummary and Block Diagram Backoround: The Tennessee Valley Authority performed a test via Work Order 115799048 to clearly demonstrate that two-way communications is impossible with Eagle 21. The purpose of this test was to verify that the External Communications lnterface (EC!) for Watts Bar Nuclear Plant Unit 2 Eagle 21 Reactor Protection System only allows data flow in one direction (i.e. data out to the plant computer (lCS) and no data into the Eagle 21 system). The Eagle 21 is divided into two major sections:

1. Loop Calculation Processor (LCP) section which performs the Safety Related Functions, and
2. Test Sequence Processor (TSP) section which performs the Non Safety Related Functions.

!nternal unidirectional communication between these section is ensured from the LCP to the TSP by removing the receive communications lCs from the LCP section and removing the transmit communications from the TSP section including the Serial Ethernet Converter (SEC). Therefore'the LCP has no ability to receive data nor does the TSP or SEC have the ability to transmit data. E3-1

Eagle2l Rack 2-R-4 Oscilloscope Probe 2 Oscilloscope Probe I Connection Connection HDLC Serial Bus

                                                                                    .21
                                                          \^                          J I
                                                              \
                                        )

Ethernet Add-on Card LCP Data Link Serial-Et hernet TSP Da a Link

                         ?t/        nl UUNVETTET E UAT u                                               tlanoler Board Handller Board
                                                                  'Normal :onnection to ICS Laptop Computer                    Ithernet               Laptop Computer with WireShark                     t{etwork               ,vith ColaSoft installed                          fub                    rnstalled Diagram     1 Test Method:

Diagram 1 illustrates the connections made to Eagle 21 rack for the purposes of this test. The Loop Calculation Processor generates status information at a rate of ten times per second. This information travels on the HDLC serial bus where it is received by the SEC and then passed on to the lntegrated Computer System through the Ethernet network connection. To demonstrate the unidirectional communications, the Ethernet port was disconnected from ICS and a laptop connected in its place. The laptop computer was configured to generate a data storm to the Eagle 21 by targeting its !P address. Another laptop was connected to analyze and record the network data traffic to veriff that the Eagle 21 rack did not respond to the data storm and continued to send out the status information. Oscilloscope probes were connected to the LCP Data Link Handler serial receive lines and the SEC serialtransmit lines to verify that no serial data traffic was present, which was as expected since the SEC has no transmit capability.

== Conclusion:==

The steps performed in Work Order 115799048 verified two-way communications is impossible with the designated Eagle 21 rack. E3-2}}