New 10-2017

Demystifying Industrial Ethernet Networking
Louisiana Users Group

October 2017
ReynoldsOnline.com
Upcoming Events
Users Group Seminars
December 13th January 17th February 21st March 21st

Best in Show II: Automation & Software Power Topic - tbd Industrial Control Topic -
Automation Fair Review Topic - tbd tbd
PUBLIC 2017 Automation Fair® Event #AutoFair17 Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 3
Process Solutions User Group (PSUG)
Intelligent
Motor
Control
Services Modernization eTools
The Connected Enterprise

(Industries)
Integrated
Architecture
Safety
Components
Innovation
Connected Enterprise Pavilion
Food & Bev LACT

CAMA IF318
Compressor
Connected Information Solutions Process Oil & Gas

Information
/ SCIO
Launch
Well Head
Theater Chemical
Pump Jack
Automation Fair 2017
Hardware and Software Highlights
GuardLogix 5580 FactoryTalk Network

ControlLogix Compute Assistant Software as a Subscription
Logix Designer V30 -
-
FactoryTalk AssetCentre
FactoryTalk Analytics for Devices
V4 View Designer -
-
FactoryTalk TeamONE
Studio 5000 Application Code Manager
- Studio 5000 License Portal (license based
protection)
GuardLogix 5580 3RD PARTY OPC 3RD PARTY OPC

CompactLogix 5480 ControlLogix Parallel DATA CLIENT
Redundancy Protocol
UA CLIENT*
Module DCOM UA TCP
ENHANCED
Linx™ Gateway
Flex 5000 (9355-OPDxxxxENE)
See You in Houston!
®
2017 Automation Fair Event
November 15-16
Houston, Texas, USA
George R. Brown Convention Center
Today’s Topic:
Demystifying Industrial Ethernet Networking
?
Today’s Agenda
• Stratix Portfolio
• Managed and Lightly Managed Switches
• Methods used to configure Stratix networking devices
• Converged Plantwide Ethernet (CPwE) concepts
• Resilient Network Design
• Ethernet Media
From the User Group Archives
January 2016 topic covered how to

configure a Stratix 5700 switch using
Device Manager and Studio 5000 AOP
https://trcnew.com/2016/01/18/enabling-the-
industrial-internet-of-things-iiot/
Stratix Introduction
PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 12

12
Networks Infrastructure and Security
Portfolio Overview
Addressing
Stratix 5900™
the needs of ArmorStratix™ 5700
Stratix 8000™/Stratix 8300™ Stratix 5100™
Automation…
Stratix 5410™
…and
Operations
Stratix 5700™
Stratix 2000™ and IT
Stratix 5400™ Stratix 2500™

1783-NATR
The StratixTM product line provides advanced switching, routing and security features for simple,
to complex networks applications. The portfolio includes wireless, “On-Machine™” and rack
mount options for increased flexibility in hard-to-wire and remote areas. Products are configured
using common IT tools for a customized, integrated Plant floor and Enterprise system.
Rockwell Automation / Cisco Partnership:
Best of Both Worlds
 The Connected Enterprise and the convergence of IT/OT
 What Rockwell Automation brings to the table within Stratix®
 Ability to use existing OT tools to design, build, deploy and maintain Stratix network
infrastructure products
 Global distribution network capable of providing full service support local to your sites
 What Cisco brings to the table within Stratix
 Ability to use existing IT tools to configure and support Stratix products
 Best in breed technology designed with the security demands of IT in mind
 What the partnership delivers
 Collaborative engagements not only as it pertains to products, but also for design and
implementation guidance, training, and efforts to address the OT skills gap
COMPANY INTERNAL — CONFIDENTIAL Copyright © 2016 Rockwell Automation, Inc. All Rights Reserved. 14
The Value of Stratix: Design Phase
 Validated Reference Architectures (Converged  Offline Network Performance Evaluation:
Plantwide Ethernet – CPwE):  Layout your network in a software
 Detailed documentation and guidance to environment to proactively identify potential
address common questions and concerns: issues before a single cable is run
 Migrating Legacy Networks
 Network Segmentation considerations
 DMZ Implementation
 Implementing Wireless
 Custom AOPs/AOIs:
 Reduced coding effort, and provides for
automatic and consistent context as it relates
to tag naming and structure within your
programs
The Value of Stratix: Build Phase
 Device Level Ring:  OT Optimized Switch Configuration:
 Ethernet version of “daisy chain” allowing for  Understanding some OEMs and plant maintenance
reduced cabling and built in resiliency personnel may not be familiar with networking best
 OT Centric Distributor Support: practices, the configuration wizard for Stratix®
automatically configures the switch to be optimized
 Local distribution partner who understands the for automation applications – all the way to the per
customer applications and can provide local system port level
level support and training
 Network Address Translation (NAT):
 Allows like equipment to be configured identically
(IP addressing), yet still accessible on the plant
network once commissioned
The Value of Stratix: Deploy Phase
 SD Card Support:  HMI Faceplates:
 Save configurations onto an SD card for quick  Existing Stratix faceplates allow for
and easy deployment at commissioning, or if a diagnostics and troubleshooting directly from
Stratix® switch needs replaced in the future your Rockwell Automation® HMI applications,
reducing the need for PC based
troubleshooting
Switch Port Trend Broken Wire

Information Information Information Test
Faceplate Faceplate Faceplate Faceplate
Stratix and Networking Faceplates

The Value of Stratix: Maintain
 DLR Overview
Faceplate:
 Reduce MTTR by providing instant
feedback to maintenance via the
HMI about topology and
connectivity
 Technical Support:  Auto Device Config/Replace:  Testing:

 Stratix® switches are covered under your existing  When combining Stratix and Logix controllers, it  All of the Stratix portfolio of
Tech Connect support agreement. This also is possible to replace devices on the network in products undergo not only
provides support capabilities for the entire a “plug and play” fashion. The IP address and functional testing, but also
Rockwell Automation® control system as opposed config parameters are automatically system level testing within a
to support tied only to the switch itself downloaded upon replacement Rockwell Automation®
architecture
Managed vs. Unmanaged Switches
PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved.

Network Switch Product Overview
Distribution
Stratix 5410
Access
Stratix 5400
 19 in Rack Mount
Stratix  Layer 2 or Layer 3 routing
8000/8300 firmware
Unmanaged / Lightly Managed Stratix 5700/
Features
ArmorStratix™  Layer 2 or Layer 3 routing  28 ports

5700 firmware
 All gig ports plus four 10
 8–20 ports gig ports
Stratix 6000
 4 port or all gig port  IEEE1588 PTP
Stratix 2500  Layer 2 firmware  Layer 2 or layer 3 versions
routing firmware  Up to 8 separate
 6–20 ports  IEEE1588 PTP integrated NAT ports
Stratix 2000  6–26 ports
 IP30 and IP67  Integrated NAT  Up to 12 PoE/PoE+ ports
 5-port model  5–9 port On-Machine™  Modular platform
 Up to 8 PoE/PoE+ ports  PRP (RedBox)
 8-port model  Lightly managed platform for maximum
flexibility  PRP (RedBox)  DC and AC power input
 Basic  Gig Fiber option  Integrated DLR
 5-16 ports  IEEE1588 PTP options
 Traffic management  Integrated NAT
 Fiber port options
 Diagnostics  PoE/PoE+
 Gig port option  IEEE1588 PTP
 Plug & play  Security
 PoE/PoE+
100M/1G 100M 100M/1G 1G/10G

Stratix 2500 Lightly Managed Switch
Unmanaged Switches Lightly Managed Switches allow you to control the network:
only allow you to connect  Connect your plants, gain critical diagnostic information within
devices, but cannot your Integrated Architecture® system
provide context of the state  Detect network loops using Spanning Tree Protocol (STP) and
of your connectivity prevent them to help uncover errors before the network stops
 Prioritize critical traffic using Quality of Service (QoS)
and optimize bandwidth
 Segment your network using VLANs to help minimize risk of packet
storms that can bring down your network
 Improve your security posture by using network security features
like port security to control connections to the network
Lightly Managed Switches enable a migration path to improved operational efficiencies

and reduced costs through provision of secure, contextualized data and control.
Stratix 2500 Lightly Managed Switch Features
Offers 5 and 8 10/100 Mbps EtherNet/IP copper port versions in a compact design
 Add-on Profile (AOP) for configuration via Studio 5000® and FactoryTalk® View Faceplate
 Port security helps disable ports, or control end device connectivity based on MAC ID
 Diagnostics help minimize downtime
 SNMPv3, Syslog uncovers errors before the network stops completely
 SSH and HTTPS for secure connectivity
 VLAN provides logical segmentation
 IGMP enables multicast for data traffic control
 Topology discovery (LLDP)
 STP, RSTP and MSTP – Loop prevention
 Operating temperature -20 ˚C…60˚C, protection class IP30
Stratix 5700 Managed Switch
 3 base platforms offering 25 configurations
6, 10, 18 and 20 port base units

 2 gig port option
 SFP slots support multi & single mode fiber
 Secure Digital flash card (optional)
 Power over Ethernet (PoE)
 Dual independent power inputs
 Alarm relays (2 inputs and 1 output) Combo ports can be
either copper or SFP
 Supports – NAT, DLR, CIP Sync

Stratix 5700 Managed Switch Differentiators
 Includes integrated DLR connectivity
enabling the switch to act as a node or a
supervisor on the ring
 Offers consolidation of ring information for
a single point of management for retrieving
network machine-level diagnostics and
DLR status (in supervisor mode)
 Provides redundant gateway capability
providing support for two switches on a
single ring connected together on the
network for increased resiliency
 Enables DHCP IP address assignment to
end devices on the DLR network for
simplified device replacement.

Stratix 5700 Enhanced Security Options
Protecting the Machine Protecting the Plant
 Application/Project (CIP) based port access  Encrypted administrative traffic
 Controller-based port control (on/off)  SSHv2, SNMPv3, and HTTPS
 Unauthorized device identification  802.1x for user authentication
(tags) per port
 Configurable port security  Multiple layers of password protection
 Preconfigured port security set-up  Access Control Lists (ACLs) to apply
via smartports security policies per port
 Configure number of devices that are  TACACS+ and Radius for centralized
allowed per port
authentication
 Configurable device MAC ID
authentication
Stratix 5700 Catalog Information

Stratix 5700 Software Features
* Separate SW IOS required

Stratix 5400 Hardware
 18 catalog items supporting
LED mode
 4 gig port versions (8 to 20 ports) selector
 All gig versions (12 to 20 ports)

Dual power
 Single HW form factor (6.12H x 6.12 W x 5.09D in.) inputs including
PoE power
 SecureDigital (SD) flash card (included)

 Power over Ethernet (PoE)
 Up to 12 ports of gig fiber
 Dual power inputs (9.6 to 60 VDC)
 Expanded temp range (-40 to 70 C)
Minimum four Combo
 2 alarm inputs and one output ports for either copper
SD card for
or SFP
backup Alarm
 RJ45 or Mini-USB console port input/outputs


Stratix 5410 Industrial Managed Switch
The Stratix 5410TM industrial distribution switch offers a 19” rack mount design with 28
ports providing a centralized point of network distribution and increased port density. In
addition to its rugged design, the Stratix 5410 also enables layer 2 switching and layer 3
routing with high performance (10-Gigabit port) capabilities, which can help increase
flexibility in designing robust, future-ready network architectures.
Stratix 5410 Applications
 Rugged design for applications where harsh
conditions are present
 Provides a centralized point of network
distribution
 Enables access switching to distribution Stratix 5410
Distribution Switch
switching with routing capabilities for

configuration flexibility
 For use in a wide variety of applications such as: Camera
 Water/wastewater
Camera
Controller
Drive Operator
 Oil & Gas

Interface
 Pulp & Paper

Cell/Area Zone - Levels 0–2
Star Topology
(Lines, Machines, Skids, Equipment)


Stratix Configuration Tools

34
Simplified Setup and Maintenance
Common Configuration and Support Tools
Configure, Manage and Diagnose your network with familiar tools
 Automation (OT) Professionals
 FactoryTalk® Services tightly integrate
into the Integrated Architecture® system
 Studio 5000AOP, Predefined Logix tags
 FactoryTalk® View Faceplates – Sample Code website
 Device Manager web Interface
 IT Professionals
 Cisco IOS software and Command Line Interface (CLI)
 IT management tools: Cisco CNA, CiscoWorks, Cisco Prime, SNMP-based tools
 Tight integration into joint Cisco and Rockwell Automation®
Converged Plantwide Ethernet (CPwE) Architecture
Simplified Setup and Maintenance
Default Configurations and Smartports
Easy Switch configuration without being a network expert

 Express Setup
 Automatically sets switch configuration for typical automation applications
 Smartports
 Pre-defined port settings for
common automation and network
devices like Logix Controllers,
Desktop devices and Routers
 Optimizes traffic through the port
and network
 Minimizes latency
Studio 5000 AOP
Logix IO Tree Stratix Configuration / Monitoring Options in Studio 5000

Cisco CNA
For easy system diagnostics and configuration

New USB Console Cable
New cable:
USB to StratixCNSL - 9300-USBCBL-CNSL
No more adapters
• One cable
• Plugs into USB port on PC
No installation disk Drivers automatically install

Converged Plantwide Ethernet (CPwE)

40
Why Is This Important?
Design Considerations for Robust EtherNet/IP Networking
 Scalable, robust, secure and future-

ready infrastructure/architecture:
 Application
 Software
Internet of Things, Internet of Everything

 Network

Reference Architectures
 Tested, validated and documented Reference Architectures
 Tested for performance, availability, repeatability, scalability and security
 Comprised of a collection of Cisco and Rockwell Automation Validated Designs
 Built on technology and industry standards
 “Future-ready” network design
 Content relevant to both OT and IT Engineers
 OT – Operational Technology
 Industrial Control Systems
 Deliverables
 Tested and Validated Reference Architectures
 Deploy Firewalls Within a CPwE Architecture – Dec. 31, 2016
 Industrial Network and Security Whitepapers
 Deployment of Industrial Firewalls – Dec. 30, 2016

Logical Framework
Wide Area Network (WAN) Internet
Data Center - Virtualized Servers
Enterprise
Information Technology
• ERP - Business Systems External DMZ/
• Email, Web Services Firewall
• Security Services - Active Directory (AD),
Identity Services (AAA)
• Network Services – DNS, DHCP Identity Services
Enterprise Zone
• Call Manager Levels 4-5
Physical or Virtualized Servers Plant Firewalls

• Patch Management • Active/Standby Industrial
• AV Server •
•
Inter-zone traffic segmentation
ACLs, IPS and IDS
Demilitarized Zone
• Application Mirror
• Remote Desktop Gateway Server • VPN Services (IDMZ)
• Portal and Remote Desktop Services proxy
Physical or Virtualized Servers

• FactoryTalk® Application Servers
Identity Services
Core
Switches Access
Switches
Industrial Zone
Levels 0–3
Industrial IT
and Active (Plant-wide Network)
Services Platform Cell/Area Zone
Levels 0–2
• Network & Security Services –
DNS,
AD, DHCP, Identity Services (AAA) Wireless
• Storage Array LAN Controller
(WLC) Remote Distribution Access
Access Switches
Level 3 - Site Operations Server
Distribution
Switch Stack
Switch Stack
(Control Room) Standby Cell/Area Zone
Levels 0–2
LWAP
HMI
SSID
Camera LWAP LWAP 2.4 GHz AP
Rockwell Automation® Safety
Stratix 5000/8000 SSID
Phone Controller
Layer 2 Access Switch 5 GHz
Safety
I/O WGB
SSID Soft
5 GHz Starter
Operational Technology
WGB WGB
Drive
Instrumentation
Controller Safety
I/O Servo HMI Robot
Controller Controller Drive I/O
Cell/Area Zone - Levels 0–2 Cell/Area Zone - Levels 0–2 Cell/Area Zone - Levels 0–2
Redundant Star Topology - Flex Links Resiliency Ring Topology - Resilient Ethernet Protocol (REP) Linear/Bus/Star Topology
Unified Wireless LAN Unified Wireless LAN Autonomous Wireless LAN
(Lines, Machines, Skids, Equipment) (Lines, Machines, Skids, Equipment) (Lines, Machines, Skids, Equipment)

43
Logical Framework
Layer 3 Switch Stack Industrial Zone
Distribution Levels 0-3
Switch
Layer 2
Access Switch Level 2 HMI
HMI
Safety Safety
I/O Controller
Phone
Controller
Camera
MCC I/O Soft
Instrumentation Starter
Servo Level 0 Drive
Media & Level 1 Controller Drive
Connectors
Cell/Area Zone #1 Cell/Area Zone #2 Cell/Area Zone #3

Redundant Star Topology Levels 0-2 Ring Topology Levels 0-2 Bus/Star Topology Levels 0-2

44
Cisco® Catalyst® Switching and Routing
Enterprise
Enterprise Zone

• AV Server •
•
ACLs, IPS and IDS
Demilitarized Zone
Core
Physical or Virtualized Servers Identity Services Switches Access Industrial Zone
Switches
• FactoryTalk® Application Servers Levels 0–3
• Catalyst 3850, Layer 3

Levels 0–2
DNS,
Distribution Switch
Access Switches
Distribution
Switch Stack
Switch Stack
Standby
• StackWise™ allows up to
(Control Room) Cell/Area Zone
Levels 0–2
LWAP
9 switches to be linked
together, managed as a
HMI
SSID
Rockwell Automation® Safety SSID
single switch, 480GB

Stratix 5000/8000 Controller
Phone Layer 2 Access Switch 5 GHz
Safety
I/O WGB
throughput
SSID Soft
5 GHz Starter
WGB WGB
Drive
Instrumentation
Controller Safety
I/O Servo HMI Robot

45
Enterprise
Enterprise Zone

• AV Server •
•
ACLs, IPS and IDS
Demilitarized Zone
Core
Switches
• Catalyst 4500-X, Layer 3

Levels 0–2
DNS,
Distribution/Core Switch
Access Switches
Distribution
Switch Stack
Switch Stack
Standby
• Mid to high level plant

(Control Room) Cell/Area Zone
Levels 0–2
LWAP
distribution and
aggregation
HMI
SSID
Phone Controller
Layer 2 Access Switch 5 GHz
Safety
I/O WGB
SSID Soft
5 GHz Starter
WGB WGB
Drive
Instrumentation
Controller Safety
I/O Servo HMI Robot

46
Enterprise
Enterprise Zone

• AV Server •
•
ACLs, IPS and IDS
Demilitarized Zone
Core
Switches
• Catalyst 6800, Layer 3
Levels 0–2
Core Switch
DNS,
• Flagship network core

Access Switches
Distribution
Switch Stack
Switch Stack
(Control Room) Standby Cell/Area Zone
switch, different chassis

Levels 0–2
LWAP
HMI sizes. 880 GB per slot
bandwidth. 11Terabit
SSID
Controller
system capacity
Phone Layer 2 Access Switch 5 GHz
Safety
I/O WGB
SSID Soft
• Virtual Switching System

5 GHz Starter
WGB WGB
Drive
(VSS) – two switches act

Instrumentation
Controller Safety
I/O Servo HMI Robot

Redundant Star Topology - Flex Links Resiliency
Ring Topology - Resilient Ethernet Protocol (REP)
Linear/Bus/Star Topology
as a single virtual switch

47
Campus Model
 Hierarchal, modular and scalable building blocks
 Creates small domains - clear demarcations and segmentation
 Fault domain (e.g. Layer 2 loops), broadcast domain, domains of trust (security)
 Easier to grow, understand and troubleshoot
 Multi-tier switch model
 Core
 Aggregates distribution switches
 Backbone of network Core
 Industrial DMZ connectivity
 Distribution
 Aggregates access switches
 Provides Layer 3 services Distribution
 Access
 Aggregates industrial automation and
control system (IACS) devices Access
 Provides Layer 2 services

Campus Model
PlantPAx High Availability Architecture
Access

Campus Model
Traffic Recovery
Access
https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Campus/campover.html

EtherNet/IP IntelliCENTER MCC
Connecting to the Plant Ethernet Network

Packaged Power Solutions
Segmented Network Approach  Integrated Network Approach

Industrial Network Design Methodology
Design Considerations for Robust EtherNet/IP Networking
 Logical Model  Network Availability

 Access Layer  Linear
 Distribution  Star
 Structure, Hierarchy and  Ring
Segmentation  Network Redundancy
 Physical vs. Logical
Segmentation
 Virtual LANs

Resilient Network Design

54
Network Availability
Switch Level Star/Redundant Star Ring Linear
Cisco Catalyst Cisco Catalyst Cisco Catalyst
3750 Stackwise 3750 Stackwise 3750 Stackwise
Switch Stack Switch Stack Switch Stack
Cisco HMI HMI

Catalyst 2955
Controllers
Controllers
HMI Controllers Cisco
HMI Cisco Catalyst 2955
Catalyst 2955
Controllers,
Drives, and Distributed I/O
Cell/Area Zone Controllers, Drives, and Distributed I/O Controllers, Drives, and Distributed I/O
Cell/Area Zone Cell/Area Zone Cell/Area Zone
I/O
I/O
Device Level
I/O
HMI
HMI
VFD
Drive
Controller Servo
Drive
VFD
Drive Controller I/O
Servo Drive
Network Resiliency Protocols
Selection is Application Driven
Network Network Network
Resiliency Mixed Redundant
Ring Convergence Convergence Convergence Layer 3 Layer 2
Protocol Vendor Star > 250 ms 60 - 100 ms 1 - 3 ms
STP (802.1D) X X X X
RSTP (802.1w) X X X X X
MSTP (802.1s) X X X X X
rPVST+ X X X X
REP X X X
EtherChannel
X X X X
(LACP 802.3ad)
Flex Links X X X
DLR
X X X X
(IEC & ODVA)
StackWise X X X X X
HSRP X X X X
GLBP X X X X
VRRP
X X X X X
(IETF RFC 3768)

Device Level Ring
Device Level Ring (DLR) Overview
 A DLR network is a single-fault tolerant

ring network intended for the
interconnection of automation devices:
 Advantages include:
 Simple installation
 Resilience to a single point of
failure on the network
 Fast recovery time when a single
fault occurs on the network
Embedded Switch Technology
Direct DLR Overview (available on select Stratix 5700™ switches)
 Direct DLR connection to Stratix 5700™ : CompactLogix™ 5370
 Firmware upgrade on selective

hardware versions ETAP
Stratix
 Eliminates the need for an ETAP 5700™
 Removes single point of failure at Before:

ETAP Point I/O™ ArmorPoint I/O™ Point I/O™
PowerFlex®
Drive
 Can be configured as a node or After: CompactLogix™ 5370
supervisor (active or backup)

 Supports Redundant Gateway and
DHCP Stratix
5700™
 Provides consolidated (in the switch)
network status and diagnostics Point I/O™ ArmorPoint I/O™ Point I/O™
PowerFlex®
Drive
Embedded Switch Technology
Device Level Ring (DLR) Example
 Shown using DLR faceplates: Network

Supervisor
Ring
Participant
Connection Link
Status (Red/Green)
Supervisor
Takeover
Node Node Order
 Available diagnostics:

Spanning Tree Protocol (MSTP)
 MSTP is an IEEE standard Distribution
Switch
 Ring and redundant star topology
Catalyst 3750
 Built into Stratix 5410 / 5400 / 5700 / 8000 / 8300 / 2500 Switch Stack
 Provides:
 Loop-free network
 Redundancy in case of failure
 Distribution is the root bridge F B F B
 Operates in a plug-and-play fashion Stratix 8000
 Coordinate with IT before implementing Access
Switches
F - Forwarding
B - Blocking

EtherChannel
 Link Aggregation Control Protocol (LACP) port aggregation – IEEE
802.3ad Distribution
Switch
 Redundant Star Topology
Catalyst 3750
 Built into Stratix 5410/5400/5700/8000/8300 Switch Stack
 Aggregates multiple physical links into one logical link

 Provides resiliency between connected switches if a connection is
broken
F F F F
Stratix 8000
Access
Switches
F - Forwarding

EtherNet/IP IntelliCENTER MCC
High Availability – Redundant Star Topology with EtherChannel
 EtherChannel redundant star topology

 Provides redundancy with higher bandwidth
 MCC Serviceability
 Device-level Star topology remains -- no impact
 Network and Device Configuration

 Requires Stratix 5700 with Full firmware
 Complex implementation, typically used for larger
networks
 Network Fault Tolerance

 High level of network performance & convergence

Flex Links
 Cisco technology Distribution
 Redundant star only Switch
 Built into Stratix 5410/5400/5700/8000/8300 Catalyst 3750

Switch Stack
 Active/Standby port scheme

 Provides alternate path in case of failures, avoiding loops
 No bandwidth aggregation
 Applied to the Stratix Access Switch
 Recommend using equal speed ports
A S A S
 Provides fast fail over for multicast traffic
Stratix 8000
Access
Switches
A - Active
S- Standby

Flex Links
Redundant Star Topology
Stratix 5410
Stratix 5700
(Full Features)

Resilient Ethernet Protocol (REP)
• A REP segment is a chain of switch ports connected to each • The blocked port helps ensure that the traffic within the segment is
other and configured with the same segment ID. loop-free by requiring traffic flow to exit only one of the edge ports.
• Each end of a segment terminates on what is called the Therefore, when a failure occurs in the segment, REP opens the
"edge port" of an edge switch. alternate port so traffic can reach the edge of the segment.
• With REP, in order to prevent a loop in the network, one
switch port (the alternate port) is always blocked in any
given segment.

REP
Single Ring
Stratix 5410
Stratix 5400
Stratix 5700
(Lite or Full Features)

REP
Dual Ring
Stratix 5410
Stratix 5700
(Lite or Full Features)

NEW - 1756-EN2TP
Parallel Redundancy Protocol Module

68
1756-EN2TP Parallel Redundancy Protocol Module
The 1756-EN2TP Parallel Redundancy Protocol Module offers PRP support for a redundant network
infrastructure for high availability to help minimize unplanned downtime.

1756-EN2TP Parallel Redundancy Protocol Module
Features and Benefits
 Provides a redundant
network infrastructure for high availability,
helping minimize the risk of downtime
 IEC 62439-3 compliant
 Same packets sent out of both ports to
eliminate network switchover time
 PRP is a different protocol than DLR
 Acts as I/O scanner in controller chassis
or I/O adapter in remote chassis
 Supports HMI communications
 Provides same performance and capacity
as 1756-EN2TR
Offers ControlLogix® redundancy system support

Building a PRP Network
Starting with a Basic Star Topology
* For example only - number

of switches and topology varies
based on application

Adding Redundant Media and ControlLogix PRP Modules
 Redundant Ethernet Networks
 Independent LANs
DAN
 Independent Paths
 Switches are not PRP aware

 Redundancy is in the end nodes, called, LAN A LAN B
“Doubly Attached Nodes (DANs)” attach
to both LANs
 The DANs in this example are all
1756-EN2TP PRP modules
 Any switch that supports 1506 byte
frames can be used
 Stratix 5700 switches
shown in example DAN DAN DAN

Sending Frames on both LANs
 Source DAN sends same frame
over both LANs
 Destination DAN consumes
the frame the first time it is received,
then discards the duplicate when
received
 DAN has 1 MAC, 1 IP address
 Frames have LAN ID

Adding RedBox Devices
 RedBox: a device that attaches non-PRP
devices to a redundant network
 Devices attached through a Redbox are called,
“Virtual Doubly Attached Nodes (VDANs)”
 The RedBox shown is a standard Stratix 5400
switch with built-in RedBox functionality
Redbox
VDANs
Adding a Singly Attached Node
 Non-PRP devices can be connected SAN
to only one of the two LANs,
however, media redundancy is lost
 Singly Attached Nodes (SANs)
SAN
can communicate only to other
devices on the LAN that they
are connected to
 SANs are not PRP-aware

Adding ControlLogix Controller Redundancy
 Future capability - ControlLogix
Redundancy kit that supports the
1756-EN2TP

Ethernet Media

77
Demystifying Ethernet Types
www.ab.com/networks/media/ethernet
Speed 1000Mbps 10 Gbps over 33-55
meters (110-165 feet)
of cable
Cost Varies by length and Varies by length and
manufacturer, manufacturer, with
generally $0.20 - $0.30 $0.40 - $0.60 per foot
per foot. as an average;
generally about 20%
higher than Cat5e.
Frequency Up to 100MHz Up to 250 MHz
Performance Less Signal-to-Noise-Ratio
crosstalk/interference higher
than CAT5. Potentially
more interference than
CAT6.
Maximum Cable 100 meters 100 meters for slower
Length network speeds (up to
1,000 Mbps) For
Gigabit Ethernet, 55
meters max, with 33
meters in high
crosstalk conditions.
Thicker sheath
Standard gauges in 24-26 AWG wire 22-24 AWG wire
conductors

Product Overview
Ethernet Media – Complete Portfolio
 Ethernet Cable Spools & RJ45 Cables  M12 Patchcords/Cordsets & Field attachables
 Unshielded Twisted Pair (UTP)  M12 Connectivity - D Code
 2-pair High Flex TPE – 10 million cycles  Straight / Right Angle – Male & Female Connectors
Unshielded High Flex TPE Cable – 2 pair
 4-pair High Flex TPE – 10 million cycles

 Shielded High Flex, Halogen Free PUR Cable -2 pair
 4-pair PVC Riser – General Purpose
 Shielded 600V cable – 2 pair
 4-pair Plenum – Air duct applications
 M12 to RJ45 Connectivity - Patchcords
 Shielded Twisted Pair (STP)  M12 Female Receptacle to RJ45 Patchcord
 STP 4-pair PVC Riser – General Purpose  M12 Field Attachable Components
 STP 4-pair PUR – Halogen Free – High Flex  M12 IDC Connector
 STP 2-pair PUR – Halogen Free – High Flex  M12 to RJ45 Bulkhead Connector - IP20 to IP67
 STP 4-pair PVC – 600 Volts
 STP 2-pair PVC – 600 Volts  RJ45 Field Attachable Components
 RJ45 Right and Left Angle overmolded Connectors  RJ45 IDC Connector
 RJ45 IP67 Overmolded Patchcords  CAT 6 rating
 Variant 1 Overmolded Patchcords  AWG 26-22
 Male to Male Variant 1 Patchcords  RJ45 Crimp Connector with rugged Boot
 Variant 1 Field Attachable Connectors  Crimp Tool Kit
 Male Housing with Crimp/IDC Insert  Crimper, cable stripper/cutter, conductor separator
 Female Receptacle Outlet
 Female to Female RJ45 Coupler
 Protective Cap for Housing and Outlet

Thank you!
PUBLIC
www.rockwellautomation.com
Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 80

Additional Material

81
Additional Material
CPwE Architectures - Cisco and Rockwell Automation
 CPwE websites
 Rockwell Automation
 Cisco

Additional Material
 Whitepapers
 ENET-WP022B-EN-P - Top 10 Recommendations for Plant-wide EtherNet/IP Deployments
 ENET-WP031A-EN-P - Design Considerations for Securing Industrial Automation and Control
System Networks
 ENET-WP033A-EN-P - Resilient Ethernet Protocol in a Converged Plantwide Ethernet (CPwE)
Architecture
 ENET-WP034A-EN-P - Deploying 802.11 Wireless LAN Technology within a Converged Plantwide
Ethernet Architecture
 ENET-WP036A-EN-P - Deploying Network Address Translation within a Converged Plantwide

Additional Material
 Whitepapers
 ENET-WP037A-EN-P - Deploying Identity Services within a Converged Plantwide
 ENET-WP038A-EN-P - Securely Traversing IACS Data Across the Industrial
Demilitarized Zone
 ENET-WP039B-EN-P - A Resilient Converged Plantwide Ethernet Architecture
 ENET-WP040A-EN-P - modernizing Legacy IACS Networks to a Converged
Plantwide Ethernet Architecture

Additional Material
 Design and Implementation Guides
 ENET-TD001E-EN-P - Converged Plantwide Ethernet (CPwE) Baseline Document
 ENET-TD005B-EN-P - Deploying the Resilient Ethernet Protocol (REP) in a Converged
 ENET-TD006A-EN-P - Deploying 802.11 Wireless LAN Technology within a Converged
 ENET-TD007A-EN-P - Deploying Network Address Translation within a Converged

Additional Material
 Design and Implementation Guides
 ENET-TD008A-EN-P - Deploying Identity Services within a Converged Plantwide Ethernet
Architecture
 ENET-TD009A-EN-P - Securely Traversing IACS Data Across the Industrial Demilitarized Zone
 ENET-TD010A-EN-P - Deploying A Resilient Converged Plantwide Ethernet Architecture
 ENET-TD011A-EN-P - modernizing Legacy IACS Networks to a Converged Plantwide Ethernet
Architecture
 ENET-TD012A-EN-P - Site-to-site VPN to a Converged Plantwide Ethernet Architecture

Additional Material
 Application Guides
 ENET-TD003A-EN-E - Fiber-optic Infrastructure Application Guide
(Panduit/Cisco/Rockwell Automation)

Additional Material
Reference Documents
 Ethernet Design Considerations  The OEM Guide to Networking

Reference Manual  ENET-RM001A-EN-P
 ENET-RM002C-EN-P  This guide is intended to help OEMs
 EtherNet/IP Overview, Ethernet understand relevant technologies,
Infrastructure Components, networking capabilities and other
EtherNet/IP Protocol, Predict considerations that could impact
System Performance them as they develop EtherNet/IP
solutions for the machines, skids or
 EtherNet/IP IntelliCENTER® equipment they build
Reference Manual (MCC-RM001)

88
Additional Material
Tools
 Integrated Architecture® Builder (IAB)  EtherNet/IP Capacity Tool

 Updates and additions to better-  Popular Configuration Drawings
reflect CPwE structure, hierarchy and (PCDs)
best practices  Updates and additions to better
 Improved Switch Wizard for
reflect CPwE recent enhancements
distribution (e.g. Stratix 5410™) and
access (e.g. Stratix 5700™)
 Easier to create a large EtherNet/IP
network with many topologies
 CIP traffic is measured per segment,
not just controller scanner and
adapter centric
89
Additional Material
Education - OT - OT/IT Convergence - Industrial IT
 Community of like-minded companies – Network Design eLearning modules
Cisco, Panduit, and Rockwell Automation Module 1
Designing for the Cell/Area Zone (part
1)
 Four eLearning courses that teach critical Designing for the Cell/Area Zone (part
Module 2
network design skills based on CPwE 2)
Reference Architectures Module 3 The Industrial Zone
 Scenario-based training on topics such as: Module 4 IT/OT Integration
logical topologies, protocols, switching,

routing, wireless and physical cabling
 Sign up today for free on the Industrial IP
Advantage website

Additional Material
Training and Certification - OT - OT/IT Convergence - Industrial IT
 Cisco Industrial Networking  CCNA Industrial Training and

Specialist Training and Certification
Certification  Classroom training
 Classroom training  Managing Industrial Networks for
 Managing Industrial Networks Manufacturing with Cisco
Technologies (IMINS2)
with Cisco Networking
Technologies (IMINS)  Exam: 200-601 IMINS2
 Exam: 200-401 IMINS

 CPwE Design Considerations
and Best Practices
 CPwE Design Considerations
and Best Practices

91
Additional Material
Training and Certification - OT - OT/IT Convergence - Industrial IT
Industrial Networking Specialist CCNA Industrial
Industrial Networking Solutions and Industrial Networking Concepts and
Module 1 Module 1
Products Components
Industrial Network Documentation and Module 2 General Troubleshooting Issues
Module 2
Deployment Considerations
Module 3 EtherNet/IP
Installing Industrial Network Switches,
Module 3
Routers, and Cabling Module 4 Troubleshooting EtherNet/IP
Module 4 Deploying Industrial Ethernet Devices Module 5 PROFINET
Maintaining Industrial Ethernet
Module 5 Module 6 Configuring PROFINET
Networks
Troubleshooting Industrial Ethernet Module 7 Troubleshooting PROFINET
Module 6
Networks Module 8 Exploring Security Concerns
Module 9 802.11 Industrial Ethernet Wireless Networking

92

New 10-2017

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

New 10-2017

Uploaded by

Copyright:

Available Formats

Demystifying Industrial Ethernet Networking

Louisiana Users Group

Users Group Seminars

December 13th January 17th February 21st March 21st

The Connected Enterprise

Food & Bev LACT

Connected Information Solutions Process Oil & Gas

GuardLogix 5580 FactoryTalk Network

GuardLogix 5580 3RD PARTY OPC 3RD PARTY OPC

Demystifying Industrial Ethernet Networking

• Converged Plantwide Ethernet (CPwE) concepts

• Resilient Network Design

January 2016 topic covered how to

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 12

Stratix 5400™ Stratix 2500™

Switch Port Trend Broken Wire

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 18

 Technical Support:  Auto Device Config/Replace:  Testing:

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved.

ArmorStratix™  Layer 2 or Layer 3 routing  28 ports

100M/1G 100M 100M/1G 1G/10G

Lightly Managed Switches enable a migration path to improved operational efficiencies

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 24

PUBLIC Copyright © 2016 Rockwell Automation, Inc. All Rights Reserved. 25

PUBLIC Copyright © 2016 Rockwell Automation, Inc. All Rights Reserved. 27

* Separate SW IOS required

PUBLIC Copyright © 2016 Rockwell Automation, Inc. All Rights Reserved. 28

 All gig versions (12 to 20 ports)

 SecureDigital (SD) flash card (included)

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 29

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 30

switching with routing capabilities for

 Oil & Gas

 Pulp & Paper

PUBLIC Copyright © 2016 Rockwell Automation, Inc. All Rights Reserved. 32

PUBLIC Copyright © 2016 Rockwell Automation, Inc. All Rights Reserved. 33

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 34

Easy Switch configuration without being a network expert

Logix IO Tree Stratix Configuration / Monitoring Options in Studio 5000

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 37

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 38

No installation disk Drivers automatically install

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 39

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 40

 Scalable, robust, secure and future-

Internet of Things, Internet of Everything

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 41

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 42

Physical or Virtualized Servers Plant Firewalls

Physical or Virtualized Servers

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 43

Cell/Area Zone #1 Cell/Area Zone #2 Cell/Area Zone #3

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 44

Physical or Virtualized Servers Plant Firewalls

• Catalyst 3850, Layer 3

single switch, 480GB

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 15

Physical or Virtualized Servers Plant Firewalls

• Catalyst 4500-X, Layer 3

• Mid to high level plant

PUBLIC Copyright © 2017 Rockwell Automation, Inc. All Rights Reserved. 15

Physical or Virtualized Servers Plant Firewalls

• Flagship network core