Implementing Secure Layer 2 Tunneling Protocols for IEC 61850-90-5 Based Routable and Non-Routable GOOSE and SV Messages

In this paper, the performance of layer 2 tunnelling for IEC 61850 inter-substation communication is presented for a teleprotection function use case. Generic Object-Oriented Substation Events (GOOSE) and Sampled Value (SV) packets routed over layer 2/3 VPN using Multiprotocol Label Switching (MPLS) network and the end-to-end timing and latency of packets were evaluated. The performance and impact of using MACsec and IPsec security schemes are also presented. The paper also aims to show the minimal if not negligible, impact of end-to-end encryption of securing GOOSE and SV Messages over layer 2 VPN.