8-4 L30 Line Current Differential System GE Multilin8.1 PASSWORD SECURITY 8 SECURITY8The following access supervision settings are available.• INVALID ATTEMPTS BEFORE LOCKOUT: This setting specifies the number of times an incorrect password can beentered within a three-minute time span before lockout occurs. When lockout occurs, the LOCAL ACCESS DENIED andREMOTE ACCESS DENIED FlexLogic™ operands are set to “On”. These operands are returned to the “Off” state uponexpiration of the lockout.• PASSWORD LOCKOUT DURATION: This setting specifies the time that the L30 will lockout password access afterthe number of invalid password entries specified by the INVALID ATTEMPS BEFORE LOCKOUT setting has occurred.The L30 provides a means to raise an alarm upon failed password entry. Should password verification fail while accessinga password-protected level of the relay (either settings or commands), the UNAUTHORIZED ACCESS FlexLogic™ operand isasserted. The operand can be programmed to raise an alarm via contact outputs or communications. This feature can beused to protect against both unauthorized and accidental access attempts.The UNAUTHORIZED ACCESS operand is reset with the COMMANDS ÖØ CLEAR RECORDS ÖØ RESET UNAUTHORIZEDALARMS command. Therefore, to apply this feature with security, the command level should be password-protected. Theoperand does not generate events or targets.The access level timeout settings are shown below.PATH: SETTINGS Ö PRODUCT SETUP Ö SECURITY ÖØ ACCESS SUPERVISION Ö ACCESS LEVEL TIMEOUTSThese settings allow the user to specify the length of inactivity required before returning to the restricted access level. Notethat the access level will set as restricted if control power is cycled.• COMMAND LEVEL ACCESS TIMEOUT: This setting specifies the length of inactivity (no local or remote access)required to return to restricted access from the command password level.• SETTING LEVEL ACCESS TIMEOUT: This setting specifies the length of inactivity (no local or remote access)required to return to restricted access from the command password level.8.1.6 DUAL PERMISSION SECURITY ACCESSPATH: SETTINGS Ö PRODUCT SETUP Ö SECURITY ÖØ DUAL PERMISSION SECURITY ACCESSThe dual permission security access feature provides a mechanism for customers to prevent unauthorized or unintendedupload of settings to a relay through the local or remote interfaces interface.The following settings are available through the local (front panel) interface only.• LOCAL SETTING AUTH: This setting is used for local (front panel or RS232 interface) setting access supervision.Valid values for the FlexLogic™ operands are either “On” (default) or any physical “Contact Input ~~ On” value.If this setting is “On“, then local setting access functions as normal; that is, a local setting password is required. If thissetting is any contact input on FlexLogic™ operand, then the operand must be asserted (set as on) prior to providingthe local setting password to gain setting access.If setting access is not authorized for local operation (front panel or RS232 interface) and the user attempts to obtainsetting access, then the UNAUTHORIZED ACCESS message is displayed on the front panel.• REMOTE SETTING AUTH: This setting is used for remote (Ethernet or RS485 interfaces) setting access supervision. ACCESS LEVEL TIMEOUTSCOMMAND LEVEL ACCESSTIMEOUT: 5 minRange: 5 to 480 minutes in steps of 1MESSAGE SETTING LEVEL ACCESSTIMEOUT: 30 minRange: 5 to 480 minutes in steps of 1 DUAL PERMISSION SECURITY ACCESSLOCAL SETTING AUTH:OnRange: selected FlexLogic™ operands (see below)MESSAGE REMOTE SETTING AUTH:OnRange: FlexLogic™ operandMESSAGE ACCESS AUTHTIMEOUT: 30 min.Range: 5 to 480 minutes in steps of 1
