IEC 61850 Sampled Values (SV) Explained: Complete Process Bus Reference

By | November 22, 2025

A complete reference for substation engineers covering Sampled Values — IEC 61850-9-2 specification, frame structure, ASDU/APDU, SmpCnt and SmpSynch, ASN.1 BER encoding, multicast addressing, IEC 62351-6 security, PRP/HSR transport, and field troubleshooting

Quick Reference

ItemValue
StandardIEC 61850-9-2:2011 (Edition 2.0) + IEC 61869-9:2016 profile
TransportRaw Ethernet (Layer 2), no TCP/IP
EtherType0x88BA
Multicast MAC range01-0C-CD-04-00-00 to 01-0C-CD-04-01-FF
APPID range0x40000x7FFF (default 0x4000 = “no config”)
Default VLAN priority4 (per IEEE 802.1Q)
EncodingASN.1 Basic Encoding Rules (BER)
Max APDU length1493 octets
PublisherMerging Unit
SubscriberProtection IED, meter, fault recorder
Service modelsMulticast SV (MSVCB) + Unicast SV (USVCB)
Time syncPTP per IEC/IEEE 61850-9-3 (preferred) or 1PPS
SecurityIEC 62351-6 (optional, 28-bit reserved security field)

Introduction

Sampled Values are one of three core protocols of IEC 61850, alongside GOOSE and MMS. While MMS carries SCADA-level configuration and reporting over TCP/IP, and GOOSE carries fast binary events at Layer 2, SV carries continuous high-rate analog measurements over Layer 2 Ethernet.

If GOOSE replaces binary control wiring, Sampled Values replace CT/VT analog wiring.

This article is the complete reference, verified against the IEC 61850-9-2:2011 Edition 2.0 specification and the IEC 61869-9:2016 profile. It covers frame structure, encoding rules, addressing, synchronization, security, network engineering, and field troubleshooting.

1. What Are Sampled Values?

Sampled Values (SV) are real-time digital current and voltage measurements published as Ethernet multicast frames per IEC 61850-9-2. A Merging Unit digitizes CT and VT signals at a fixed sample rate, time-stamps each sample, and continuously streams them on the process bus where any protection IED, meter, or fault recorder can subscribe. SV replaces analog CT/VT wiring with deterministic, time-aligned digital communication.

2. Why Sampled Values Exist

Before SV, substations relied on analog CT/VT wiring — often hundreds of meters of copper from the switchyard to the control room. This created multiple problems:

  • Analog signal distortion over distance
  • Electromagnetic interference on long cable runs
  • High copper cost
  • CT burden and saturation issues
  • Safety risks during maintenance (open CT secondary)
  • One CT/VT could feed only one relay; sharing required wiring duplication

With Sampled Values:

  1. A Merging Unit (MU) digitizes the signal at the switchyard
  2. Samples travel through fiber/Ethernet, not copper
  3. Multiple IEDs subscribe to the same SV stream
  4. No analog distortion or noise once digitized
  5. Time-aligned samples enable cross-bay protection (differential, distance)

This architecture — called the IEC 61850 Process Bus — is the backbone of digital substations.

For the device producing SV streams, see: What Is a Merging Unit?

3. SV vs GOOSE vs MMS — When to Use Each

The three protocols in IEC 61850 serve different purposes:

AspectMMSGOOSESampled Values
PurposeClient/server, SCADA, configFast binary eventsContinuous analog samples
TransportTCP/IP (Layer 5–7)Layer 2 EthernetLayer 2 Ethernet
EtherType(uses TCP port 102)0x88B80x88BA
Data typeAny (structured)Binary status, integersAnalog samples + quality
BehaviorRequest/responseEvent-driven multicastContinuous streaming
Speed10–1000 ms1–4 msµs-level timing
BandwidthLowLowHigh (5–18 Mbit/s per stream)
Typical sourceIEDProtection relayMerging Unit
Replaces what?Configuration UIBinary copper wiringCT/VT analog wiring
StandardIEC 61850-8-1IEC 61850-8-1IEC 61850-9-2

In practice, all three operate simultaneously in a digital substation:

  • MMS for HMI, engineering, supervisory monitoring
  • GOOSE for trips, interlocks, position changes
  • SV for the continuous measurement stream that feeds protection algorithms

4. The IEC 61850 Stack — Where SV Fits

IEC 61850-9-2 defines an SV-specific communication profile using direct Layer 2 Ethernet. There is no IP, no TCP, no UDP in the SV path.

OSI reference model and profiles
OSI reference model and profiles

SV A-Profile (Application + Presentation Layers)

LayerSpecification
ApplicationIEC 61850-9-2 SV service
PresentationASN.1 BER (ISO/IEC 8824-1, 8825-1)
Session(Not used for SV)

SV T-Profile (Transport to Physical Layers)

LayerSpecification
Transport, Network(Not used — SV bypasses these)
Link RedundancyIEC 62439-3 (PRP / HSR) — optional
Data LinkIEEE 802.1Q (Priority tagging/VLAN) + ISO/IEC 8802-3 (CSMA/CD)
Physical100Base-FX fiber optic (recommended)

This minimal stack is why SV is fast: no protocol overhead between the application and the wire.

Client/Server Access to SV Control Blocks

While the SV stream itself bypasses IP, management of the SV Control Block (enable/disable, configuration read/write) uses standard IEC 61850-8-1 MMS over TCP/IP. This is the only place where TCP/IP is involved with SV — and even that is optional (the SVCB may be pre-configured).

5. The SV Communication Model (Publisher/Subscriber)

SV uses a publisher/subscriber model — not client/server. The publisher (typically a Merging Unit) continuously broadcasts SV frames to a multicast MAC address. Any device interested subscribes by receiving multicast traffic from that address.

Key Characteristics

  1. Continuous streaming — SV never stops sending, even with no fault
  2. One-to-many — a single stream feeds protection, backup, fault recorder, meter simultaneously
  3. No acknowledgment — publisher doesn’t know who’s listening
  4. Stateless — each frame is self-contained
  5. Deterministic — frames arrive at fixed intervals

Typical Subscribers

  • Primary protection relay
  • Backup protection relay
  • Bay controller
  • Disturbance/fault recorder
  • Power quality meter
  • Wide-area monitoring system (PMU)
  • Test equipment / simulators

All receive the same data simultaneously without any per-subscriber configuration on the publisher side.

6. Multicast (MSVCB) vs Unicast (USVCB) SV

IEC 61850-9-2 defines two SV service models:

AspectMulticast SV (MSVCB)Unicast SV (USVCB)
DestinationMulticast MAC addressSpecific subscriber’s MAC
SubscribersOne-to-manyOne-to-one
ReservationOpen to allExclusive (Resv flag)
Common useProcess bus measurement distributionSpecific point-to-point flow
Field deploymentStandardRare

Multicast (MSVCB) is the dominant model in real-world substations. The unicast model exists for special-purpose applications where a dedicated point-to-point flow is required (typically inside an MU for diagnostic data).

This article focuses on multicast SV from this point forward.

7. The Sampled Value Control Block

The Multicast Sampled Value Control Block (MSVCB) is the IEC 61850 object that controls how a Merging Unit publishes SV streams. It plays the same role for SV that the GOOSE Control Block (GoCB) plays for GOOSE — but for continuous high-speed streams instead of event-driven messages.

Key MSVCB Attributes (IEC 61850-9-2 Table 9)

AttributeTypePurpose
MsvCBNamIdentifierMMS name of this control block
SvEnaBooleanEnable/disable transmission — TRUE = streaming, FALSE = stopped
MsvIDVisibleStringSystem-wide unique stream identifier
DatSetReferenceData set defining which samples to publish
ConfRevIntegerConfiguration revision counter — increments on any change
SmpRateIntegerSample rate (interpreted per SmpMod)
OptFldsBitStringOptional fields included in each frame
SmpModEnum0 = samples per nominal period, 1 = samples per second, 2 = seconds per sample
DstAddressStructureDestination MAC, VLAN, APPID — see Section 8
noASDUIntegerNumber of ASDUs concatenated per APDU

OptFlds Recommendations (per IEC 61869-9)

Optional FieldIEC 61869-9 Setting
refresh-timeFALSE
sample-synchronisedTRUE (ignored, kept for backward compatibility)
sample-rateFALSE
data-setFALSE
securityFALSE (TRUE only when IEC 62351-6 security is active)

Excluding optional fields keeps frames compact and reduces bandwidth.

8. The SV Frame Structure

Each SV message is a standard IEEE 802.3 Ethernet frame with IEEE 802.1Q VLAN tagging. The complete structure from IEC 61850-9-2 Annex A:

SV Frame Structure
SV Frame Structure

Maximum Frame Sizes

ConfigurationMax Frame Size
No link redundancy1521 octets
HSR redundancy1527 octets (+6 for HSR tag)
PRP redundancy1527 octets (+6 for PRP trailer)

9. Multicast MAC Address Allocation

IEC 61850-9-2 Annex B specifies the recommended multicast address structure:

01 - 0C - CD - 04 - xx - xx
└──┴──┴──┴── IEEE-assigned for IEC 61850
            └── 04 = Multicast Sampled Values
                  (01 = GOOSE, 02 = GSSE)
                  xx-xx = stream-specific, assigned during engineering
ServiceRecommended Range
GOOSE01-0C-CD-01-00-00 to 01-0C-CD-01-01-FF
GSSE01-0C-CD-02-00-00 to 01-0C-CD-02-01-FF
Multicast SV01-0C-CD-04-00-00 to 01-0C-CD-04-01-FF

This range gives 512 unique SV stream addresses per substation — more than sufficient for any practical deployment.

⚠️ Important: Each SV stream should have a unique multicast MAC address within the network. Identical destination MACs cause subscribers to misidentify streams. Most network configuration tools enforce uniqueness at engineering time.

10. APPID and VLAN Configuration

APPID (Application Identifier)

The APPID is a 16-bit identifier in the Ethertype PDU that allows fast filtering at the link layer:

  • Reserved range for SV: 0x4000 to 0x7FFF
  • Default value: 0x4000 (indicates “no configuration” — should be replaced during engineering)
  • Recommendation: Each SV stream gets a unique APPID for source-oriented filtering

VLAN Tag

Structure of tag header
Structure of tag header
FieldValue
TPID0x8100 (fixed per IEEE 802.1Q)
Priority4 (default) — higher than normal traffic, lower than GOOSE if separated
CFI0 (must be reset)
VID0 (default) — configure unique VID per VLAN segmentation

Priority Strategy

Per IEEE 802.1Q recommendations:

  • Priority 0 — Avoid (causes unpredictable delay)
  • Priority 1 — Untagged frames default
  • Priority 2–3 — Lower priority bus traffic
  • Priority 4Sampled Values default
  • Priority 5–7 — Time-critical (PTP, GOOSE trips)

VLAN Segmentation

Per IEC 61850-9-2 recommendations:

  • SV and GOOSE should use different VIDs so they can be bandwidth-allocated independently
  • Process bus VLAN should be separate from station bus VLAN
  • This ensures aggregate SV traffic does not interfere with MMS or other Layer 3 traffic

11. ASDU vs APDU — The Concatenation Model

Inside the SV frame, the APDU is the “envelope” that contains one or more ASDUs.

ASDU (Application Service Data Unit)

One ASDU = one snapshot in time containing:

FieldDescription
svIDStream identifier
datsetData set reference (optional)
smpCntSample counter (16-bit)
confRevConfiguration revision
refrTmRefresh time (optional)
smpSynchSynchronization status
smpRateSample rate (optional)
sampleThe actual data values per the data set
smpModSample mode (optional)

APDU (Application Protocol Data Unit)

An APDU contains:

FieldDescription
savPduApplication tag
noASDUNumber of ASDUs in this APDU (1 to 65535)
securityOptional security field (IEC 62351-6)
asduSequence of ASDUs (oldest first)

Why Concatenate?

Concatenating multiple ASDUs into one APDU reduces frame overhead. For example, the preferred IEC 61869-9 protection variant F4800S2I4U4 sends 2 ASDUs per frame at 4800 sps, producing 2400 frames/second instead of 4800.

The trade-off is latency: a frame with 2 ASDUs is sent only when both ASDUs are ready, adding one sample interval of delay to the first ASDU.

For protection applications, noASDU = 1 or 2 is typical. For metering, noASDU = 6 or 8.

12. SmpCnt — The Sample Counter

The Sample Counter (SmpCnt) is a 16-bit unsigned integer (INT16U) that uniquely identifies each sample within the current second.

Behavior

  • Increments with every new sample
  • Resets to 0 at every synchronization pulse (top of second)
  • Wraps back to 0 after reaching 65535 (only for very high sample rates ≥96 kHz)

Why It Matters

Subscribers use SmpCnt to:

  1. Detect missed samples (gaps in the counter)
  2. Align samples from multiple MUs (sample #1234 from MU-A = sample #1234 from MU-B if both synced)
  3. Time-stamp samples without needing the network refresh time

High Sample Rate Behavior (96 kHz)

At 96000 samples/second:

  • Counter overflows back to 0 after sample 65535
  • Continues counting up to 30463 (96000 − 65536 − 1)
  • Represents the lower 16 bits of an internal 17-bit counter
  • Real top of second is when SmpCnt transitions from 30463 to 0

13. SmpSynch — Synchronization Status Values

The SmpSynch attribute tells subscribers about the time synchronization source. From IEC 61850-9-2 Table 14:

ValueMeaningWhen Safe for Cross-Bay Functions
0Not synchronized (free-running or holdover expired)❌ Local-only measurements
1Synchronized to a local area clock (unspecified ID)⚠️ Only if all MUs share the same local clock
2Synchronized to a global area clock (GPS, NTP, time-traceable)✅ Universal — all global-synced MUs aligned
3, 4Reserved — do not use
5–254Synchronized to specific local clock with this ID✅ Same ID = same clock = aligned
255Reserved — do not use

Practical Use Guidance

ApplicationRequired SmpSynch
Local overcurrent protection (single bay)Any (even 0 works)
Voltage protection (single bay)Any
Differential protection (line, transformer, bus)≥ 1 with matching clock source
Distance protection with remote endpoints≥ 1 with matching clock source
Synchrophasor (PMU)= 2 (global clock required)
Wide-area monitoring= 2

The Merging Unit publishes a current SmpSynch value in every ASDU. If sync is lost, the value drops to 0 and protection logic can take blocking action.

For PTP-based synchronization, see: PTP Power Profile Explained (IEC/IEEE 61850-9-3).

14. The Simulate (S) Flag — Testing in Live Systems

The Reserved 1 field includes a single bit S (Simulate) at bit 7 of octet 0. Per IEC 61850-9-2 Section 5.3.3.4.4:

“When this flag is set, the SampledValue telegram has been issued by a publisher located in a test device and not by the publisher as specified in the configuration file of the device.”

Why This Matters

In a live substation, you may need to inject test SV streams (e.g., from a CMC Omicron, Megger relay tester, or simulator) alongside the real MU streams. The S flag tells subscribers which is real and which is test.

Subscriber Behavior

When the S flag is set:

  • Test mode subscriber: Accept and process the test SV stream
  • Normal mode subscriber: Ignore the test frame — continue using the real MU stream
  • The decision is made per-IED based on its configured operating mode

This mechanism allows engineers to test protection schemes against a known waveform without disconnecting the actual MU. Without the S flag, test injection would conflict with production data.

15. ASN.1 BER Encoding for SV Data Types

SV uses ASN.1 Basic Encoding Rules (BER) per ISO/IEC 8825-1 with a Type-Length-Value (TLV) format. From IEC 61850-9-2 Table 15:

Basic Data Type Encoding

IEC 61850-7-2 TypeEncoding
BOOLEAN8-bit (0 = FALSE, anything else = TRUE)
INT88-bit big-endian signed
INT1616-bit big-endian signed
INT3232-bit big-endian signed (used for SAV.instMag.i)
INT6464-bit big-endian signed
INT8U8-bit big-endian unsigned
INT16U16-bit big-endian unsigned
INT24U24-bit big-endian unsigned
INT32U32-bit big-endian unsigned
FLOAT3232-bit IEEE 754
FLOAT6464-bit IEEE 754
ENUMERATED32-bit big-endian
CODED ENUM32-bit big-endian
OCTET STRING20 bytes ASCII, null-terminated
VISIBLE STRING35 bytes ASCII, null-terminated
UNICODE STRING20 bytes ASCII, null-terminated
TimeStamp64-bit timestamp per IEC 61850-8-1
EntryTime48-bit timestamp per IEC 61850-8-1
BITSTRING (per 8-1)32-bit big-endian

Key Implication for Decoders

The 32-bit signed integer representation of instMag.i gives a dynamic range of ±2 147 483 647 counts. Combined with the IEC 61869-9 scaling factors (0.001 for amps in mA, 0.01 for volts in cV), this allows:

  • Current: up to ±2 147 483 A peak (2.1 MA) — handles fault currents well beyond any practical CT range
  • Voltage: up to ±21 474 836 V (21.4 MV) — covers any HV/EHV system

ASN.1 TLV Example

A complete ASDU has this structure (simplified):

30 [Length] svID    [0] [Length] [Value]
            datset  [1] [Length] [Value]   (optional)
            smpCnt  [2] [Length=2] [Value]
            confRev [3] [Length=4] [Value]
            refrTm  [4] [Length] [Value]   (optional)
            smpSynch[5] [Length=1] [Value]
            smpRate [6] [Length=2] [Value] (optional)
            sample  [7] [Length=N] [Value]
            smpMod  [8] [Length=2] [Value] (optional)

Each TLV triplet allows decoders to skip unknown fields and handle optional elements gracefully.

16. Sample Rates (IEC 61869-9 Preferred Values)

The original IEC 61850-9-2 standard did not mandate specific sample rates. IEC 61869-9:2016 filled this gap with preferred rates:

Sample RateASDUs/FrameFrames/secApplication
4000 sps140009-2LE backward compat (50 Hz)
4800 sps148009-2LE backward compat (60 Hz)
4800 sps22400Preferred — protection/measurement
5760 sps1576060 Hz with 96 samples/cycle
14400 sps62400Preferred — quality metering
12800 sps (deprecated)816009-2LE legacy 50 Hz
15360 sps (deprecated)819209-2LE legacy 60 Hz
96000 sps196000High-bandwidth DC control

The preferred protection rate (F4800S2I4U4) and preferred metering rate (F14400S6I4U4) both produce 2400 frames/second — a frequency-independent network rate that simplifies engineering.

For the variant code notation, see: What Is a Merging Unit?

17. PRP and HSR for SV Streams

Protection-grade SV networks require zero-recovery-time redundancy. IEC 61850-9-2 supports both PRP and HSR per IEC 62439-3.

PRP (Parallel Redundancy Protocol)

The MU has two Ethernet ports, one to LAN A and one to LAN B. Every SV frame is sent simultaneously on both LANs. The subscriber receives both and processes the first arrival, discarding the duplicate.

  • Recovery time: zero (no detection or reconfiguration)
  • Frame overhead: 6-byte PRP trailer (Sequence number + LAN ID + Suffix)
  • Max frame size: 1527 octets (vs 1521 without redundancy)

HSR (High-availability Seamless Redundancy)

The MU is a node in a ring. Every SV frame is sent in both ring directions simultaneously. The receiver gets two copies; the second is discarded.

  • Recovery time: zero (for any single break in the ring)
  • Frame overhead: 6-byte HSR tag (Path + Size + Sequence number)
  • Max frame size: 1527 octets

Bandwidth Doubling

Both PRP and HSR duplicate every SV frame on each network path. A 10-bay substation at F4800S2I4U4:

  • Per LAN (PRP) or per ring direction (HSR): ~60 Mbit/s SV traffic
  • Plus GOOSE, PTP, MMS
  • Gigabit Ethernet strongly recommended for any non-trivial PRP/HSR deployment

For full PRP details, see: Parallel Redundancy Protocol (PRP) Complete Guide For HSR details, see: HSR (High-Availability Seamless Redundancy)

18. IEC 62351-6 Security for SV

IEC 61850-9-2 reserves a 28-bit security field (Reserved 2 + 4 bits of Reserved 1) for use by IEC/TS 62351-6, the security standard for IEC 61850.

What IEC 62351-6 Provides

FeatureStatus
Frame authenticationOptional
Source verificationOptional
Anti-replay protectionOptional
Frame encryptionNOT applied to SV/GOOSE (would break real-time performance)

Why Not Encryption?

Encrypting SV would add latency that breaks protection-class real-time requirements (sub-millisecond). Instead, IEC 62351-6 uses HMAC-SHA256 for authentication only — the SV payload remains plaintext but is signed so subscribers can verify it came from a legitimate publisher.

Activating Security

When IEC 62351-6 security is enabled:

  • MSVCB.OptFlds.security = TRUE
  • The 28-bit security field carries authentication data
  • Subscribers verify the signature; failed verification → discard frame

Adoption Status

IEC 62351-6 security is rarely deployed in production substations due to:

  • Performance overhead (still measurable even without encryption)
  • Key management complexity
  • Limited vendor support
  • Industry preference for network-level isolation (separate VLAN, separate physical network)

Most digital substations rely on physical isolation and network segmentation rather than cryptographic authentication.

19. Network Bandwidth Sizing

SV streams generate continuous high-rate traffic. Bandwidth planning is mandatory.

Per-Stream Bandwidth

Variant CodeFrames/secFrame SizeBandwidth
F4000S1I4U44000~150 B~5 Mbit/s
F4800S1I4U44800~150 B~6 Mbit/s
F4800S2I4U4 (preferred protection)2400~300 B~6 Mbit/s
F14400S6I4U4 (preferred metering)2400~900 B~17 Mbit/s
F96000S1I4U496000~150 B~120 Mbit/s

Aggregate Bandwidth Examples

Substation SizeStreamsTotal SV BWRecommended Network
4 bays, protection only4~24 Mbit/s100 Mbit/s OK
10 bays, protection only10~60 Mbit/s100 Mbit/s tight, Gigabit recommended
10 bays, protection + metering20~230 Mbit/sGigabit required
20 bays, full40~460 Mbit/sGigabit required

Maximum Quantities per Stream (IEC 61869-9)

To prevent network blocking from oversized frames on 100 Mbit/s networks:

ApplicationMax I+U Quantities
General measuring/protection24
Quality metering8
DC control24

No limits apply for Gigabit and faster networks.

20. Network Engineering Requirements

A poorly engineered process bus causes delayed samples and relay misoperation. Required elements:

Mandatory

  • VLAN tagging (IEEE 802.1Q) with VID and priority configured
  • Multicast filtering at switch level (IGMP snooping or static multicast tables)
  • Deterministic switching (cut-through preferred, store-and-forward acceptable for SV)
  • Hardware MAC filtering capable of handling SV multicast load
  • Time synchronization (PTP per IEC/IEEE 61850-9-3 or 1PPS)

Strongly Recommended

  • PRP or HSR redundancy for protection-grade applications
  • Gigabit Ethernet for any deployment beyond a few SV streams
  • Dedicated process bus VLAN separate from station bus
  • IEC 61850-3 / IEEE 1613 rated switches for substation environments
  • Hardware PTP timestamping in switches (transparent clock)

Avoid

  • RSTP on the process bus (recovery too slow)
  • Mixing corporate/IT traffic on the process bus
  • Routing SV between subnets (Layer 2 only)
  • Consumer-grade Ethernet switches
  • Default APPID (0x4000) in production

For network switches in substations, see: IEC 61850-3 Ethernet Switch Requirements

21. SV Performance and Latency

End-to-end SV latency from primary side to subscriber:

ComponentTypical Delay
Primary CT/VT response< 1 µs
MU anti-aliasing filter~100–200 µs
MU ADC + processing~200–500 µs
MU total (processing delay)≤ 2 ms (IEC 61869-9 protection limit)
Switch (cut-through, per hop)~3–10 µs
Switch (store-and-forward, per hop)50–150 µs
Subscriber receive + decode~50–200 µs
Total end-to-endtypically 2–3 ms

IEC 61869-9 Maximum Processing Delay (MU side only)

ApplicationLimit
Quality metering10 ms
Protection and measurement2 ms
Time-critical low-bandwidth DC control100 µs
High-bandwidth DC control25 µs

Why Phase Error ≠ Delay

A common misunderstanding: SV processing delay does NOT cause phase error. The encoded SmpCnt field timestamps the sample with the actual sampling instant. Subscribers use this timestamp to reconstruct phasors — not the time of frame arrival. Thus delay affects fault detection time but not measurement accuracy.

22. Procurement Specification Template

Required Standards

  • IEC 61850-9-2:2011 compliance
  • IEC 61869-9:2016 profile compliance
  • IEC/IEEE 61850-9-3 for time synchronization
  • IEC 61850-10 conformance testing

Required Capabilities

  • EtherType 0x88BA SV publishing
  • Multicast SV (MSVCB) mandatory
  • Unicast SV (USVCB) optional
  • IEEE 802.1Q VLAN tagging with configurable VID and priority
  • PRP and/or HSR support per IEC 62439-3
  • Simulate (S) flag handling per IEC 61850-9-2

Required Variant Codes (IEC 61869-9)

  • F4800S2I4U4 — preferred protection/measurement
  • F14400S6I4U4 — preferred quality metering
  • Legacy variants (F4000S1I4U4 / F4800S1I4U4) if 9-2LE compatibility needed

Subscriber Requirements

  • Multicast frame reception and filtering on configured MAC + APPID + VLAN
  • SmpSynch value handling (0, 1, 2, 5–254)
  • SmpCnt continuity monitoring (gap detection)
  • ConfRev mismatch handling
  • Simulate (S) flag mode handling (test vs production)
  • Maximum number of simultaneous SV subscriptions

Documentation

  • PICS, PIXIT, MICS (IEC 61850-10 compliant)
  • ICD file with full SCL declaration
  • Performance benchmarks (max subscribed streams, max processing delay)
  • Third-party conformance test report

23. Field Troubleshooting: Common Failure Patterns

When working on site, these are the patterns to check first.

🔴 Pattern 1: Subscriber receives no SV stream

Likely causes:

  • SvEna = FALSE in the MSVCB
  • Wrong multicast MAC address configured on subscriber
  • IGMP snooping blocking the multicast on the switch
  • VLAN mismatch between publisher and subscriber

Actions:

  • Verify SvEna = TRUE using system configurator
  • Wireshark capture on the subscriber side, filter eth.type == 0x88ba
  • Check switch multicast forwarding tables
  • Verify VLAN tags match end-to-end

🔴 Pattern 2: SmpSynch stuck at 0

Likely causes:

  • PTP grandmaster unreachable
  • PTP profile mismatch (default IEEE 1588 vs IEC/IEEE 61850-9-3)
  • 1PPS signal lost or jittery beyond ±2 µs
  • MU still in startup, hasn’t acquired sync yet
  • Sync source lost > MU holdover time

Actions:

  • Check PTP master diagnostics, clockClass = 6 (synced) or 7 (holdover)
  • Verify PTP domain matches MU expectation (domain 93 if following IEC/IEEE 61850-9-3 recommendation)
  • For 1PPS, measure signal quality at MU input
  • Allow 30+ seconds after power-on for steady state

🔴 Pattern 3: ConfRev mismatch

Likely causes:

  • MU configuration changed after subscribers were commissioned
  • Data set membership/order modified
  • SCD regeneration without subscriber update

Actions:

  • Compare publisher’s ConfRev against each subscriber’s configured value
  • Re-engineer subscribers if MU dataset changed
  • Verify data set member order matches subscriber expectation

🔴 Pattern 4: Subscriber reads wrong values

Likely causes:

  • Scaling factor mismatch (subscriber doesn’t apply 0.001 for mA → A)
  • Wrong CT/VT ratio on subscriber
  • Data set member order differs from subscriber expectation
  • Wrong TCTR/TVTR instance interpretation (subscriber reading B-phase as A-phase)

Actions:

  • Verify scaling: AmpSv.instMag.i is in milliamperes (multiply by 0.001 for amperes); VolSv.instMag.i is in centivolts (multiply by 0.01 for volts)
  • Check substation section of SCL for phase-to-instance binding
  • Confirm data set order in publisher matches subscriber’s decoding

🔴 Pattern 5: SmpCnt gaps (missing samples)

Likely causes:

  • Network congestion / dropped frames
  • Subscriber CPU overload (can’t keep up with frame rate)
  • Switch buffer overflow
  • Hardware fault on MU output port

Actions:

  • Wireshark capture, check for gaps in smpCnt sequence
  • Verify switch port statistics (drops, errors)
  • Reduce subscriber load (subscribe to fewer streams or use lower rate)
  • Inspect cable and SFP module quality

🔴 Pattern 6: Duplicate APPID conflict

Likely causes:

  • Two MUs configured with the same APPID (e.g., both at default 0x4000)
  • Engineering tool didn’t enforce uniqueness
  • Manual configuration error

Actions:

  • Each SV stream needs a unique APPID in 0x40000x7FFF
  • Wireshark shows duplicate APPIDs immediately when capturing
  • Re-run system configurator to enforce uniqueness

🔴 Pattern 7: Network bandwidth saturation

Likely causes:

  • Too many SV streams on 100 Mbit/s network
  • PRP/HSR doubling traffic without bandwidth headroom
  • Switch CPU overload from multicast snooping
  • Mixed VLAN traffic on same broadcast domain

Actions:

  • Calculate total SV bandwidth (Section 18)
  • Upgrade to Gigabit Ethernet if approaching 50% link utilization
  • Implement IGMP snooping or static multicast filters
  • Segment SV onto dedicated VLAN

🔴 Pattern 8: Test injection accidentally affects production

Likely causes:

  • Test SV stream did NOT set the Simulate (S) bit
  • Subscriber not configured to filter by S flag
  • Same APPID as production stream

Actions:

  • Verify test equipment sets S = 1
  • Configure subscriber test mode to accept S = 1 streams
  • Use different APPID for test streams when possible

🔴 Pattern 9: Differential protection misoperates after sync change

Likely causes:

  • One end’s MU running in free-run mode (SmpSynch = 0)
  • Two ends synced to different local clocks (both SmpSynch = 1, different sources)
  • Time jump > sample interval during PTP re-lock causes SmpCnt discontinuity

Actions:

  • Verify both ends report SmpSynch = 2 (global) or matching ID in 5–254 range
  • Check PTP grandmaster coverage at both ends
  • Implement blocking logic during sync state transitions

🔴 Pattern 10: Cannot decode SV in Wireshark

Likely causes:

  • Wireshark version too old (< 2.0 may not have native SV decoder)
  • VLAN tag stripping by capture interface
  • SPAN port losing VLAN information

Actions:

  • Update Wireshark to latest version
  • Use proper SPAN configuration that preserves VLAN tags
  • Filter eth.type == 0x88ba to isolate SV
  • Apply IEC 61850 dissector preferences for custom decode

For Wireshark-based GOOSE analysis (similar technique applies to SV), see: Decoding IEC 61850 GOOSE Messages with Wireshark

Summary

Sampled Values are the foundation of the IEC 61850 process bus. They replace analog CT/VT wiring with deterministic, time-aligned digital streams that any number of IEDs can simultaneously consume.

Key Takeaways

  • SV operates on Layer 2 Ethernet with EtherType 0x88BA, multicast MAC 01-0C-CD-04-xx-xx, default VLAN priority 4
  • The current authoritative profile is IEC 61869-9:2016 (replaces 9-2LE)
  • Publisher/subscriber model — publishers (MUs) broadcast, any subscriber can consume
  • MSVCB (multicast) is the standard model; USVCB (unicast) rarely used
  • Each frame is ASN.1 BER encoded with TLV structure
  • APDU can contain 1 to N ASDUs — concatenation reduces overhead but adds latency
  • SmpCnt identifies each sample within the second; resets to 0 at sync pulse
  • SmpSynch values: 0 (not synced), 1 (local clock), 2 (global clock), 5–254 (specific local IDs)
  • Simulate (S) bit distinguishes test streams from production
  • AmpSv scaled in milliamperes, VolSv in centivolts (per IEC 61869-9 Tables 904/906)
  • Preferred protection rate: F4800S2I4U4 = 4800 sps × 2 ASDU = 2400 frames/sec
  • Preferred metering rate: F14400S6I4U4 = 14400 sps × 6 ASDU = 2400 frames/sec
  • PRP/HSR doubles bandwidth on each path — plan for Gigabit Ethernet on anything non-trivial
  • IEC 62351-6 security is optional; most deployments use network-level isolation instead
  • Maximum SV processing delay: 2 ms for protection per IEC 61869-9
Author: Zakaria El Intissar

I'm an automation and industrial computing engineer with 12 years of experience in power system automation, SCADA communication protocols, and electrical protection. I build tools and write guides for Modbus, DNP3, IEC 101/103/104, and IEC 61850 on ScadaProtocols.com to help engineers decode, analyze, and troubleshoot real industrial communication systems.

Leave a Reply

Your email address will not be published. Required fields are marked *