0

DNP3 link-layer source and destination addresses are 16 bits each. It means it can have 2^16 = 65536 total different addresses. Based on official DNP3 docs, there are 65536 destination addresses, which I understand. But there are only 65520 source addresses, why is that? What are other remaining 16 addresses for?

On what I said above, you can read from any dnp3 docs or this link also works: https://www.ixiacom.com/company/blog/scada-distributed-network-protocol-dnp3

Uddhav P. Gautam
  • 7,362
  • 3
  • 47
  • 64

1 Answers1

2

I'm not familiar with DNP3, but I found a specification for a DNP3 link layer protocol implementation at https://library.e.abb.com/public/06e4e2267fd04c3884515a0360210068/1MRK511380-UUS_-_en_Point_list_manual__DNP_650_series_2.1.pdf. See page 36:

1.4.1 Data Link Address: Indicates if the link address is configurable over the entire valid range of 0 to 65,519. Data link addresses 0xFFF0 through 0xFFFF are reserved for broadcast or other special purposes.

While the source doesn't indicate what these 16 addresses are reserved for (possibly as a precaution for future needs), it does indicate that they are reserved.

Mike Hill
  • 3,622
  • 23
  • 27
  • thank you. Yes they are reserved, but I don't know what are some use cases for what these reserved addresses have been used. – Uddhav P. Gautam Jan 18 '19 at 21:36
  • Many protocols reserve addresses, flags, bits.. and fact is for plenty of them you never know until you need them :) – bsaverino Apr 30 '19 at 19:41