KENDALL DATACOMM. INDUSTRIAL NETWORKING Switches, Micro Data Center (MDC), Industrial

Transcription

1

2 KENDALL DATACOMM INDUSTRIAL NETWORKING Switches, Micro Data Center (MDC), Industrial Distribution Frames (IDF) and Zone Enclosures DATA - Jacks, Faceplates, Patch Panels, Patch Cords, Wire Management, Industrial Connectivity, Data Center Products, Fiber Cable, CAT 3, 5e, 6 & 6A Cable. VIDEO - CCTV Cameras, DVR s, IP Cameras AUDIO - Paging Amplifiers, Horns, Speakers SECURITY - Voice & Video Intercom AUTOMATION - Integrated Security, Lighting, HVAC Control and Entertainment Systems for home and small business.

3 Practical Solutions & Connected Enterprise SWITCH SELECTION Managed vs. UnManaged OUT OF THE BOX Stratix 2500 Express Setup PHYSICAL LAYER Structured Cabling and CPwE Best Practices LOGICAL LAYER VLANs, NAT & ROUTING TOOLS & RESOURCES

4 Practical Solutions & Connected Enterprise SWITCH SELECTION Managed vs. UnManaged OUT OF THE BOX Stratix 2500 Express Setup PHYSICAL LAYER Structured Cabling and CPwE Best Practices LOGICAL LAYER VLANs, NAT & ROUTING TOOLS & RESOURCES

5 SWITCH SELECTION Managed vs. UnManaged

6 Features Network Switch Product Overview Distribution Access Stratix 5410 Managed Stratix 5400 Unmanaged Stratix 2000 Stratix port model 8-port model Basic 5-16 ports Traffic management Fiber port Diagnostics options Gig port option Security Plug & play 10M/100M Lightly Managed Stratix port Lightly managed Gig SFP option Stratix 5700/ ArmorStratix Layer 2 firmware 6 20 ports IP30 and IP67 On-Machine platform Integrated DLR Integrated NAT IEEE1588 PTP PoE/PoE+ Stratix 8000/8300 Layer 2 or layer 3 routing firmware 6 26 ports Modular platform for maximum flexibility IEEE1588 PTP PoE/PoE+ 10M/100M/1G Layer 2 or Layer 3 routing firmware 8 20 ports 4 port or all gig port versions IEEE1588 PTP Integrated NAT Up to 8 PoE/PoE+ ports PRP (RedBox) 10M/100M/1G 19 in Rack Mount Layer 2 or Layer 3 routing firmware 28 ports All gig ports plus four 10 gig ports IEEE1588 PTP Up to 8 separate integrated NAT ports Up to 12 PoE/PoE+ ports PRP (RedBox) DC and AC power input options 10M/100M1G/10G

7 SWITCH SELECTION Stratix 2500 Lightly Managed Switch Two Installation Methods Out of the box installation that prioritizes traffic, or Configured for specific applications to support security, resiliency and bandwidth optimization features Features & Benefits Premier Integration to the Rockwell Automation Integrated Architecture system Minimized downtime by monitoring traffic flow Improved network resiliency to help uncover errors before the network stops Increased network security with port security to control connections to the network when needed Reduced overall TCO with logical segmentation Offered in 5 and 8 10/100 Mbps fast EtherNet/IP copper

8 SWITCH SELECTION Comparison

9 Why Choose a Full Managed switch over a Lightly Managed Switch? The Stratix 5700 differentiates itself from the Stratix 2500 through enhanced failure annunciation capabilities, security, resiliency protocol support, and flexibility. Higher port density (represented by 6, 10, 18 and 20-port catalogs numbers in Lite Firmware and Full Firmware category), support for up to 4 SFP slots for fiber connectivity, up to 2 Gig ports, up to 4 power over Ethernet (PoE) ports DHCP per port (which simplifies Automatic Device Configuration) for automatic end device IP address assignment Internal Flash and SD card for backup and restore capability Support of REP resiliency protocol Select Stratix 5700 catalog numbers offer integrated DLR, NAT, and support of PTP It is built on Cisco IOS, which provides a command line interface (CLI) as a flexible configuration tool that is familiar to IT professionals Stratix 5700 extends on Stratix 2500 security capabilities through Access Control Lists, IEEE 802.1x Security, Centralized Authentication capability (RADIUS, TACACS+)

10 Practical Solutions & Connected Enterprise SWITCH SELECTION Managed vs. UnManaged OUT OF THE BOX Stratix 2500 Express Setup PHYSICAL LAYER Structured Cabling and CPwE Best Practices LOGICAL LAYER VLANs, NAT & ROUTING TOOLS & RESOURCES

11 Stratix 2500 Express Setup Power up the switch Press Express Setup

12 Stratix 2500 Express Setup

13 Stratix 2500 Express Setup

14 Stratix 2500 Express Setup 1. Open a new tab in the browser or close and reopen the browser Open up the network connection settings locate the local area connection go to internet protocol version 4 click on properties. 3. Change the IP address to / Click OK (2) times and then click on close. 4

15 Stratix 2500 Express Setup Open a command window and test the connection between the switch and your pc. Ping

16 Stratix 2500 Express Setup

17 Stratix 2500 Express Setup

18 Stratix 2500 Express Setup

19 Stratix 2500 Express Setup

20 Stratix 2500 DEMO Basic Offering

21 SWITCH SELECTION 5700 Series Basic Offering

22 SWITCH SELECTION ArmorStratix port Basic Offering 18-port You get all of the features of the base offering in a 10 and 18 port version: IP67-rated for dust and washdown protection Rugged M12 (D-coded) Ethernet Connectors Panel/machine mount design for onmachine connectivity outside of the cabinet Dual Power Input Console port SD card for simplified device replacement

23 SWITCH SELECTION ArmorStratix 5700 Part of an On-Machine system moving the industrial controls and hardware closer to the application, or onto the machine Rugged, IP67-rated design for ideal integration into widely distributed applications with extreme environment conditions Enables integration with enterprise network using Cisco Internet Operating System (IOS) Provides Premier Integration (CIP-enabled) to the Rockwell Automation Integrated Architecture system

24 Stratix 5700 Industrial Managed Switch The Stratix 5700 is a compact, scalable Layer 2 managed switch for use in applications from small isolated, to complex networks. The switch combines advanced Cisco technology and premier integration into the Integrated Architecture to provide solutions for both Information Technology (IT) and Operations Technology (OT) professionals

25 Stratix 5700 Managed Switch Benefits Advanced Features Power over Ethernet (PoE and PoE+) delivers power over a single Ethernet cable Network Address Translation (NAT) reduces commissioning time Integrated Device Level Ring (DLR) connectivity helps optimize the network architecture and provide consolidated network diagnostics Enhanced Security Options Application/project based port access for machine protection Encrypted administrative traffic and advanced security features such as centralized authentication for plant protection Optimized Integration Embedded Cisco technology provides integration with enterprise network FactoryTalk View Faceplates for status monitoring and alarming Predefined Logix tags help diagnostics retrieval Studio 5000 add-on profiles for configuration and monitoring Simplified Setup & Maintenance SD card for easy device replacement Default configurations Common Smartports DHCP per port IP addressing Diagnostics and tools

26 Optimized Integration Studio 5000 Add-on Profile (AOP) for easy configuration and monitoring Pre-defined Logix tags for monitoring and port control Pre-designed FactoryTalk View faceplates for monitoring and alarming

27 Simplified Integration Configure, Manage and Diagnose your network with familiar tools Automation Operations Technology (OT) Professionals FactoryTalk Services tightly integrate into the Integrated Architecture system Information Technology (IT) Professionals Cisco CNA, CLI, Cisco Prime tightly integrate into joint Cisco and Rockwell Automation Converged Plant-wide Ethernet (CPwE) Reference Architectures

28 Simplified Setup and Maintenance Easy Switch configuration without being a network expert Express Setup Automatically sets switch configuration for typical automation applications Smartports Pre-defined port settings for common automation and network devices like Logix Controllers, Desktop devices and Routers Optimizes traffic through the port and network Minimizes latency

29 Stratix Switch Portfolio Industrial Control Switches (OT)

30 Practical Solutions & Connected Enterprise SWITCH SELECTION Managed vs. UnManaged OUT OF THE BOX Stratix 2500 Express Setup PHYSICAL LAYER Structured Cabling and CPwE Best Practices LOGICAL LAYER VLANs, NAT & ROUTING TOOLS & RESOURCES

31 PHYSICAL LAYER CPwE & The Connected Enterprise

32 Converged Plant-wide Ethernet (CPwE) Common Standards ANSI/TIA-568- C.0 (Generic) TIA-569-B (Pathways and spaces) ANSI/TIA-606-A (Administrative) ANSI/TIA-607-B (Bonding and grounding / earthing) ANSI/TIA-758-A (Outside plant) Premises Standards ANSI/TIA-568- C.1 (Commercial) ANSI/TIA-570-B (Residential) ANSI/TIA-942 (Data centers) ANSI/TIA-1005 (Industrial) Telecommunications Standards ANSI/TIA-1179 (Healthcare) Component Standards ANSI/TIA-568- C.2 (Balanced twisted-pair) ANSI/TIA-568- C.3 (Optical fiber) ANSI/TIA-568- C.4 (Coaxial) ANSI/TIA-1005 is explicitly supported by the 568-C cabling standard TIA/EIA-568-C Defines cabling types, distances, connectors, cable system architectures, cable termination standards and performance characteristics, cable installation requirements and methods of testing installed cable C.0 defines the overall premises infrastructure for copper and fiber cabling C.2 addresses components of the copper cabling system C.3 addresses components of fiber optic cable systems ANSI/TIA-862 (Building automation systems)

33 The Connected Enterprise Micro Data Center MDC Micro Data Center The Physical Separation Between IT & OT

34 The Connected Enterprise Industrial Distribution Frame Cell Zone Area IN-ROUTE TM Distributing Ethernet Machine-to-Machine Distribute Ethernet beyond IN-ROOM throughout the plant floor, from machine-to-machine with fiber backbone solutions An architecture that provides a methodology for deploying a high performing, appropriately segmented network, localizing network traffic, reducing traffic overloads Pre-Configured IDF deploys and protects rack mount Ethernet switches in industrial applications Network Zone System deploys plant-wide EtherNet/IP networks, incorporating all active and passive equipment IDF - INDUSTRIAL DISTRIBUTION FRAMES

35 The Connected Enterprise Horizontal Link Point to Point Cabling Single cable terminated to Jacks Most often stranded conductors for flexibility Solid cable prone to break De-rated length Testing can be inaccurate Jacks can be hard to terminate reliably for the long term, especially for higher bandwidth cable Female Jack Module Solid Core Twisted Pair Cable Female Jack Module Cannot plan for the future Distance limitations

36 The Connected Enterprise Home Runs Flat vs Zone Architecture IDF Traditional IT Cable Deployment: IDF to Device home runs

37 The Connected Enterprise - Temporary Connections The Reality of most networks

38 The Connected Enterprise Semi Permanent Connections So, What can we do to ensure your network doesn t end up like this?

39 The Connected Enterprise Zone Cabling Flat vs Zone Architecture IDF Traditional Cable Deployment Node to network room home runs IDF Zone Architecture Reduced installation time Simplified diagnostics

40 IN THE ZONE ZONE Layout / The Panduit ZONE Enclosure A critical part of the Connected Enterprise

41 The Connected Enterprise Related Item Other Issues You Have to Address

42 Practical Solutions & Connected Enterprise SWITCH SELECTION Managed vs. UnManaged OUT OF THE BOX Stratix 2500 Express Setup PHYSICAL LAYER Structured Cabling and CPwE Best Practices LOGICAL LAYER VLANs, NAT & ROUTING TOOLS & RESOURCES

43 LOGICAL LAYER VLANs, NAT & ROUTING Camera Camera Controller Drive Operator Interface

44 LOGICAL LAYER Today s OT Network Linear network example

45 LOGICAL LAYER Layers 2 & 3 NAT: Network Address Translation (NAT) provides, Remote support capabilities of control systems Flexibility to allow the placement of identical machines on a Ethernet network without network setting changes Ability to apply consistent configurations to control systems on a network, allowing for exact duplications of machines / processes Reduces the need for public IP addresses Routing/VLAN Routing Provides, Ability to converge two or more distinct IP scheme into the same network Ability to converge two or more distinct VLANs into the same network Access Control Lists Provide Grant or restrict access to any of the destination ports of a TCP/IP Address Firewalls Provide DeMilitarized Zone (DMZ) between the internet and controls network DeMilitarized Zone (DMZ) between the IT and OT network

46 LOGICAL LAYER NAT SOLUTION 4 Networks same IP Scheme

47 LOGICAL LAYER Routing Solution

48 LOGICAL LAYER - ACL Filtering can be done by examining such things as: - Source IP, MAC ID, or port - Destination IP, MAC ID, or port - Upper layer protocol Stratix 5410 Distribution Switch ACLs are implemented the same way in all Stratix switches with ACL capabilities Only applies to inbound traffic on an interface Camera Camera Controller Drive Cell/Area Zone - Levels 0 2 Star Topology (Lines, Machines, Skids, Equipment) Operator Interface

49 LOGICAL LAYER Rockwell NAT Options NATR ENA STRATIX 5700 STRATIX NATR Layer ENA Layer 3 / VPN 1783-BMS10CGN Layer BMS20CGN Layer Layer 2/3

50 LOGICAL LAYER Rockwell Options NATR 5950 ENA WHEN? 5700

51 LOGICAL LAYER NAT SOLUTION How many work cells are involved? ANSWER: 1 to 4 How many devices (nodes) do you have in the work cell? 1 to 32 = 1783-NATR NATR ENA 32 to 128 = 9300-ENA 1783-NATR 9300-ENA /w VPN

52 LOGICAL LAYER Configuration Questions How many work cells are involved? ANSWER: 4 or more Do all of the work cells have unique private IP addresses? ANSWER: 2 or more similar or dissimilar IP s How many devices (nodes) are in the work cell? ANSWER: The 5700 configuration can support an almost limitless amount of nodes. It s true limit is the switch processor utilization and the amount of data the needs to flow between the private and public networks. Are you planning on using a single appliance? ANSWER: If YES, The 5700 configuration can support multiple NAT Tables, meaning it is able to bring multiple work cells together into one public address BMS10CGN 1783-BMS20CGN

53 LOGICAL LAYER Stratix 5950 Do all of the work cells have unique private IP addresses? With which public network are you converging? Are you creating a DMZ between the OT and IT networks? Are you creating a firewall between a work cell and the rest of the network? 5950

54 LOGICAL LAYER Firewalls Inline Transparent Mode Inline Routed Mode Network A IFW Network A Network A IFW Network B Traffic Traffic Traffic Traffic Same Network Addresses on Ingress and Egress Interfaces Passive Monitor Mode Different Network Addresses on Ingress and Egress Interfaces (Think router ) Packet IFW Copy of the Packet Packet

55 LOGICAL LAYER Stratix 5950

56 LOGICAL LAYER Summary 1783-NATR = NAT SOLUTION (1 4) work cells, (1 32) NAT translations, 1 NAT TABLE 9300-ENA = NAT SOLUTION & VPN (1 4) work cells, (1 128) NAT translations, 1 NAT TABLE 1783-BMS10CGN 1783-BMS20CGN = NAT & ACL SOLUTION (4 or more) work cells, 2 or more NAT tables 1783-SRKIT = NAT, ACL, FIREWALL SOLUTION & P2P VPN Router (DMZ control), Firewall (DMZ control), NAT 1783-SAD2T2SPK9 = NAT, ACL, FIREWALL SOLUTION & VPN Router (DMZ control), Firewall (DMZ control), NAT

57 TOOLS & RESOURCES Join for the latest trends, developments, and implementation advice on the use of IP in industrial applications, don t leave without registering. Join for the latest ANSI/TIA Standards Other definitions: TCP Transmission Control Protocol UDP User Datagram Protocol

58 Presented by: Tom Herbstreith Datacom Specialist Mobile: