MV90 IP Data Transport

ERCOT RecommendationJohn Fisher & Jeff Maddox

2

Option 1 – ERCOT WAN

ERCOT MP WAN

MP Network

IP Meter

IP Meter

IP Meter

ERCOT MV90 Communication Server

ERCOT Network

• MP IP meters are located on MP’s private network

• MP NAT translates the IP Meters to an ERCOT WAN IP Address

• ERCOT polls meters over the ERCOT WAN

3

Option 2 - Internet

• MP IP meters connect to MP network

• MP presents IP meters to ERCOT through an Internet routable IP address

• ERCOT polls meters over the secure encrypted IPSEC tunnel

Internet

MP Network

IP Meter

IP Meter

IP Meter

ERCOT MV90 Communication Server

ERCOT Network

Secure IPSEC Tunnel

4

Notes

• Permitting IP meters access to the Internet increases risk – Man-in-the-middle attacks– IP spoofing– Exposing meters to SCADA based attacks (vulnerabilities are an

unknown at present)

• Private networks are more secure and more reliable– Private networks are isolated by the Service Provider from

unauthorized users