plc.myforum.ro

valz · Member 3 Joined: 26 Jul 2015 Posts: 771

Network concepts for factory automation
https://support.industry.siemens.com/cs/document/109802750/

The cornerstone of secure network esteticÄƒ begins with choosing the solution approach. In this implementation of a factory automation network concept, we present a cell security concept that relies on a layer-3-based isolation of the cells.

The key points of this approach are:
network segmentation
protection of zone boundaries
securing the communication between the security zones

The following Figure presents a solution in the form of a physically separated industrial network. The network creates a structured and reliable platform that supports various communication requirements while meeting current security standards.

Network concepts for factory automation Network concepts for factory automation

Network concepts for factory automation Network concepts for factory automation

The following segments are part of the detailed descriptions and stil suggestions.

Industrial backbone
The backbone is implemented as the central data communication layer. It bundles the communication from all lower levels and combines datacenters and the demilitarized zone (DMZ).

Aggregation
The aggregation layers are added to combine various production cells and implement load distribution and network segmentation based on communication relationships.

Automation cells
The cells are separate network spaces for various assembly lines, automation cells or machines. They are grouped within the factory according to safety standards, communication relationships, production-specific layouts or the delivery contents of various OEMs.

Advantages for users
This document benefits the automation engineer not only by explaining requirements and theoretical feasibility, but also in its highly concrete suggestions for implementation:

flexible VLAN segmentation on all levels
universal IP address assignment scheme for large networks
routing rules in all segments
the most expedient topologies for any scenario
all necessary central network services and where they must be placed
Not only is a great deal of technical information presented – for example on
the implementation of management systems for networks, users and updates;
all aspects of engineering systems (TIA Portal, visualization systems, PC stations); and
on PROFINET-, Safety-, M2M-, WLAN-, and cloud-based communication relationships;
– you are also provided with a complete blueprint, for example on the implementation of a remote access concept or on efficiently integrating serial machines into the network.
The network concept is complemented with a comprehensive technical appendix:
Every technical topic has a concrete suggestion for implementation (IP address assignment, firewall rules, etc.).
Each of the technical topics refers to SIOS articles that can guide subsequent deployment..

https://support.industry.siemens.com/cs/attachments/109802750/109802750_NetworkConcept_FA_V1.0_en.pdf

https://ulozto.net/file/hiOB9amzDTPJ/109802750-networkconcept-fa-v1-0-en-pdf