MV90 IP Data Transport
ERCOT RecommendationJohn Fisher & Jeff Maddox
2
Option 1 – ERCOT WAN
ERCOT MP WAN
MP Network
IP Meter
IP Meter
IP Meter
ERCOT MV90 Communication Server
ERCOT Network
• MP IP meters are located on MP’s private network
• MP NAT translates the IP Meters to an ERCOT WAN IP Address
• ERCOT polls meters over the ERCOT WAN
3
Option 2 - Internet
• MP IP meters connect to MP network
• MP presents IP meters to ERCOT through an Internet routable IP address
• ERCOT polls meters over the secure encrypted IPSEC tunnel
Internet
MP Network
IP Meter
IP Meter
IP Meter
ERCOT MV90 Communication Server
ERCOT Network
Secure IPSEC Tunnel
4
Notes
• Permitting IP meters access to the Internet increases risk – Man-in-the-middle attacks– IP spoofing– Exposing meters to SCADA based attacks (vulnerabilities are an
unknown at present)
• Private networks are more secure and more reliable– Private networks are isolated by the Service Provider from
unauthorized users
