IEC61850 based PACS network automation enabled via Intent-Based Networking

Systems (PACS). While IEC 61850 provides a standardized data model and communication services (MMS, GOOSE, SV), configuring the supporting network infrastructure remains a manual, error-prone process, particularly for time-sensitive multicast traffic over process bus networks.

This paper proposes an Intent-Based Networking (IBN) approach to automate and assure network behavior in IEC 61850-based PACS. The key innovation lies in treating the System

Configuration Description (SCD) file—already standardized in IEC 61850—as a source of high-level network intent. By parsing the SCD, the IBN controller can derive precise requirements for VLAN provisioning, multicast containment, QoS prioritization, and IEEE 1588 (PTP) time synchronization, translating them into device-specific configurations using standard southbound protocols such as SNMP, NETCONF, and CLI. A proof-of-concept implementation was developed and validated across a multi-vendor

Ethernet infrastructure, including legacy and MPLS-TP transport domains. The IBN controller automatically configured and monitored multiple switches, adapting the network to enforce

GOOSE and SV delivery requirements without manual CLI scripting. The system also demonstrated intent assurance by continuously validating configuration consistency and monitoring traffic flows and counters.

Key results include a reduction in manual engineering effort, faster deployment cycles, and enhanced visibility and traceability for utility engineers. Most importantly, interoperability was maintained across diverse vendor platforms, proving that IBN can operate in brownfield environments.

Finally, the paper discusses how IBN can evolve into a next-generation orchestration framework for mission-critical power grid networks. Beyond substations, IBN can enable centralized, secure, and automated lifecycle management for substation LANs, WAN backbones, and control center environments. It also creates new opportunities for integrating cybersecurity policies, time synchronization validation, and resilience mechanisms into the same control loop—scaling intent beyond configuration to full operational assurance.