Professional Documents
Culture Documents
Rockwell - Fundamentals of Enet-IP Networking
Rockwell - Fundamentals of Enet-IP Networking
EtherNet/IP Networking
1 IIndustrial
1. d t i lN Network
t k Trends
T d
3. Layers 1 - 7
Safety Motion
Information I/O Control
Applications Control
EtherNet/IP - Enabling/Driving
Convergence of Control and Information
Corporate Network
Corporate Network
Office
Back-Office
Back Office Mainframes and Office Back-Office Mainframes and Applications
Applications,
Servers (ERP, MES, etc.) Applications, Servers (ERP, MES, etc.) Internetworking,
Control Network
Internetworking, Data Servers,
Gateway
Data Servers, Storage
Human Machine Storage
Interface (HMI)
Supervisory Controller
Control Phone
EtherNet/IP - Enabling/Driving
Convergence of Control and Information
Copyright © 2011 Rockwell Automation, Inc. All rights reserved.
6
Industrial Network Design Methodology
MONITOR
• Determine security requirements,
requirements take into
consideration IT requirements and establish
DESIGN/PLAN
early dialogue with IT AUDIT
• Use
U ttechnology
h l andd industry
i d t standards,
t d d IMPLEMENT
Physical Cabling
g Layer 1 Specifies voltage, pin-outs,
pin outs, cable TIA - 1005
Network Layer 3 IP
Data
D t Transport
T t
Layers Data Link Layer 2 IEEE 802.3
Presentation Layer 6
Session Layer 5
Network Layer 3 IP
Session Layer 5
Network Layer 3 IP
Encapsulation De-Encapsulation
Presentation Layer 6
Session Layer 5
Network Layer 3 IP
Presentation Layer 6
Session Layer 5
Network Layer 3 IP
Presentation Layer 6
Session Layer 5
Network Layer 3 IP
Presentation Layer 6
Session Layer 5
Presentation Layer 6
Session Layer 5
Layer No.
Layer 7
L
Layer 4
Layer 3
Network
Layer 2
Independent
Layer 1
Physical Cabling
g Layer 1 Specifies voltage, pin-outs,
pin outs, cable TIA - 1005
M12 Connectivity
RJ45 Connectivity
Accessories
http://www.ab.com/networks/media/ethernet/
Copyright © 2011 Rockwell Automation, Inc. All rights reserved. 22
Baseband vs. Broadband
• Baseband
– Single signal/frequency/channel over the cable
– Example – Ethernet
• Broadband
– Multiple signals/frequencies/channels over the cable simultaneously
– Traditional Definition
• Classic Broadband has a “carrier” for each channel
• Example
E l - Cable
C bl TV
TV, Wi
Wi-Fi,
Fi PPower-Line
Li Communications
C i ti
– Current Definition
• Broadband Internet access – high speed Internet access
• Half Duplex
– One station transmits, other listens.
– While transmitting, you do not receive, as no one else is transmitting.
– If someone else transmits while you are transmitting, then a collision occurs
– Anyy “Receive-while-Transmit” condition is considered a collision
– NON-DETERMINISTIC
• Full Duplex (standardized in 802.3x)
– Transmitit andd receive
T i att th
the same time.
ti
– Transmit on the transmit pair, and receive on the receive pairs.
– No collision detection, backoff, retry, etc.
– Collision Free. No CS, no MA, no CD. Only relationship to Half Duplex is frame
format & encoding/signaling method
– DETERMINISTIC
RSLinx Classic
Module Configuration
g
EN2TR Webpage
Network Settings
RSLogix
S og 5000
EN2TR Properties
Fiber link
Small Form-Factor
Pluggable (SFP)
Fiber link
Use Caution!
Layer
y 1 Domain
Layer
y 2 Bridge
g Layer 2 Interswitch Link
Layer 3 Link
Multi-Layer Switch
Layer 2 and Layer 3
Stratix 8300
Layer 3 Router
Linear - Device Li
Linear - Switch
S it h
Star
Ring - Device
Ring - Switch
Redundant Star
• The Data Link layer is divided into two sub layers: The Media Access Control (MAC)
layer and the Logical Link Control (LLC) layer.
• The MAC sub layer controls how a device on the network gains access to the data and
permission to transmit it.
• The LLC layer controls frame synchronization, flow control and error checking.
• LAN Media Access:
– CSMA/CD
• Layer 2 LAN and WAN Examples:
– 802.3,
802 3 802.5,
802 5 Frame
F Relay,
R l ATM,
ATM ISDN,
ISDN MPLS (service
( i providers)
id )
• Layer 2 Protocol Examples:
– ARP – Address Resolution Protocol
• Layer 2 Services Examples
– QoS – Quality of Service, VLAN – Virtual Local Area Network , Resiliency and Security
Copyright © 2011 Rockwell Automation, Inc. All rights reserved. 35
Layer 2 – Data Link
Hardware Addressing
• All devices on Ethernet communicate using the Ethernet address for the
device. This address is sometimes referred to as the “hardware
address”
dd ” or “MAC address”
dd ” (MAC stands
t d ffor Media
M di Access
A
Controller).
• The hardware address is a unique (in the world) 6-byte
6 byte address that is
embedded in the circuitry of every device that sits on an Ethernet
network.
• Every
E vendor
d off Ethernet
Eth t products
d t obtains
bt i their
th i own unique
i address
dd
range (Allen-Bradley’s is 00:00:BC:XX:XX:XX).
00:00:BC:03:52:A9
Note that each digit of the MAC address is a hex number (range 0-F)
• Unicast
– A method by which a frame is sent to a single destination.
• Multicast
– A technique that allows copies of a single frame to be passed to a selected subset
of ppossible destinations.
– Example: 01-00-0C-CC-CC-CC (Cisco Discovery Protocol – CDP)
• Broadcast
– A fframe ddelivery
li system
t ththatt delivers
d li a given
i frame
f to
t allll hosts
h t on the
th LAN.
LAN
– FF:FF:FF:FF:FF:FF
• Multi-port Bridge
• Ethernet has progressed Ethernet
Layer
y 2 Switch
exponentially since it was first Domain
introduced
– Cost
– Performance Each node has 100 Mbps
– Shared Media vs. Switches
Switched Ethernet 100
– C lli i
Collisions vs. D
Determinism
t i i
• Multiple devices sending at the
same time
• Requirements for an scalable
industrial networking solution go
even farther
Each node has 100 Mbps
• No management capabilities
• No security
• Inexpensive
Unmanaged • Simple to set up
• No diagnostic information
Switches
S tc es • Difficult to troubleshoot
• No resiliency support
• No loop prevention
Copyright © 2011 Rockwell Automation, Inc. All rights reserved. 42
Layer 2 – Data Link
EN2TR Example
EN2TR Webpage
MAC Address
• Unicast
– A method by which a packet is sent to a single destination.
• Multicast
– A technique that allows copies of a single packet to be passed to a selected subset
of ppossible destinations
– 224.0.0.0 - 239.255.255.255
– EtherNet/IP IP Multicast Address Range:
• 239.192.0.0 - 239.195.255.255
• Broadcast
– A packet delivery system that delivers a given packet to all hosts on the LAN.
– 255.255.255.255
t
transactions:
ti
Example – Logix
Controller
Message Instruction,
L i P/C Connection
Logix C ti
Unique
q Network Identityy
Resolves Hostnames to IP
addresses on the network
“User-Friendly” Name to
id tif a node
identify d on the
th network
t k
Server assigns IP addresses Efficient use of IP address More complex to implement and adds a point
from a pool (NOT range of failure
DHCP RECOMMENDED for Can reduce administration Devices get different IP addresses when they
industrial devices) work load reboot
Class A 0 netid
tid h tid
hostid
Class E Reserved
• Subnet masks are also really 32 bit numbers that are represented as 4
bytes to make them easier to read. This subnet mask is actually:
WANs LANs
• Routed protocols
– Examples:
• Internet Protocol (IP)
( )
• Novel Netware Internetwork Packet Exchange (IPX)
• Routing Protocols
– Routers talking to routers
– Maintaining optimal network topology/path to subnets, and forwarding packets along those
paths – static and dynamic routes
– Examples:
• OSPF – Open Shortest Path First,
First IETF Standard (Link-State
(Link State Routing)
• EIGRP – Enhanced Interior Gateway Routing Protocol, Cisco innovation (Distance
Vector Routing)
• Router Redundancyy Protocols
– Fault tolerance for default gateways
– Examples:
• VRRP – Virtual Router Redundancy Protocol, IETF Standards
• HSRP – Hot Standby Router Protocol , Cisco innovation
• GLBP – Gateway Load Balancing Protocol , Cisco innovation
Copyright © 2011 Rockwell Automation, Inc. All rights reserved. 57
Layer 3 – Network
Address Resolution Protocol - ARP
130.151.3.4
I have IP
address
130 151 3 4
130.151.3.4
130.151.3.4
• The DNS server will refer to it’s table and send back an IP address for
the requested name. Once the client device receives the IP address for a
name, it will
ill store
t it in
i it’s
it’ own table
t bl so it does
d nott have
h to
t askk for
f the
th IP
address every time. The device may still have to do an ARP request,
since it must ultimately decode the IP address into a hardware address.
DNS server
The IP address is
130.151.3.4
DNS Table
bl
Name IP address
Controller 130.151.3.3
PowerFlex 130.151.3.4 130.151.3.4
Point 130.151.3.5
• RSLinx Classic
VLAN 17
– Eth
Ethernett Devices
D i Driver
Di Subnet 10.17.10.0/24
• Manual entering of IP
addresses • For either driver, specify Default
– EtherNet/IP
Eth N t/IP DDriver
i Gateway within the EtherNet/IP
• Autobrowse (broadcast) devices and the RSLinx platform
Copyright © 2011 Rockwell Automation, Inc. All rights reserved. 62
Layer 3 – Network
RSLinx and Layer 3 Devices
ip directed-broadcast
VLAN 17
Subnet 10.17.10.0/24
•& ip directed-broadcast
RSLinx Classic
Module Configuration
g
RSLogix 5000
EN2TR Properties
EN2TR Webpage
ARP Table
RSLogix 5000
EN2TR Properties
Port Diagnostics
EN2TR Webpage
IP Statistics
1756-ENBT 64 128
1756 EN2F
1756-EN2F 128 256
ENET-UM001G-EN-P
ENET UM001G EN P EtherNet/IP Modules in Logix5000 Control Systems
…. provides connection and packet rate specs for modules
Copyright © 2011 Rockwell Automation, Inc. All rights reserved. 69
Layer 4 – Transport
EN2TR Example
EN2TR Webpage
UDP Statistics
EN2TR Webpage
Diagnostic Overview
EN2TR Webpage
TCP Connection
Vendor A Vendor B
Bonjour? ?
Ethernet
Guten
? Tag??
Vendor A Vendor B
Bonjour? ?
Ethernet
Guten
? Tag??
Vendor A Vendor B
Hello? H ll !
Hello!
How are
you?
Good
Good.
Program upload/download
– Uses TCP protocol TCP UDP
Layer 4
• Other common traffic
– HTTP, Email, SNMP, etc. OSPF
ICMP
IGMP
Explicit Real-Time
• Advantages
g of EtherNet/IP Messaging I/O Control
– Standard Ethernet and IP Protocol suite ARP IP RARP
Layer 3
– Future proof
– Established – 280
280+ registered vendors IEEE 802.3 Ethernet
Layer 1-2
– Supported – All EIP products require
conformance testing
Copyright © 2011 Rockwell Automation, Inc. All rights reserved. 73
Layer 7 – Application
Common Industrial Protocol
Network
Application
Objects
Identity
Object Assembly
Object
Message Router
Network
Instances Behavior
Attributes Idle
Services Fault
int status;
char value; GetAttr(inp) Run
SetAttr(outp)
Network
Connection
Sensor
Actuator Controller
• Source/Destination
– often referred to as “Polling” or “Request/Response”
– Multiple nodes can consume the same data at the same time from a single producer
so nodes can be synchronized
– More efficient bandwidth usage
– Results in higher degree of determinism and repeatability
required
i d Request
Response
– Use only when needed CP
Node Node
– No need to ‘keepp it alive’ with Server
periodic messages
Device #1 Device #2
I/O Consuming I/O
Producing
Producing Consuming
I/O I/O
Application Application
Connection Connection
Object Object
• A text based file provided by the manufacturer that allows a tool to learn
about the device’s:
– Structure and meaning of I/O data
– What I/O data transfer types are available
– Network accessible application configg parameters
– Supports modular products for complex devices
• Constructs describe a rack system: Chassis, modules & communication
adapters
• EDS file format linked to the product’s identity
– Tailored to individual product features
S f t I/O
Safety S f t Controller
Safety C t ll
I/O
VFD
I/O
Safety Controller
I/O Controller
Copyright © 2011 Rockwell Automation, Inc. All rights reserved. 88
CIP Sync
Layer 7 - Application
S f t I/O
Safety S f t Controller
Safety C t ll
VFD
I/O
I/O
Servo Drive
Controller Servo Drive 91
Copyright © 2011 Rockwell Automation, Inc. All rights reserved.
Layer 7 – Application
EN2TR Example
RSLinx Classic
EN2TR Diagnostics
Connection Manager
EN2TR Webpage
Diagnostic Overview
EN2TR Webpage
Diagnostic Overview
Copyright © 2011 Rockwell Automation, Inc. All rights reserved. 92
Network Architectures
Physical Segmentation
• Two NICs for Network Segmentation • Two NICs for Scalability - performance
and capacity
Information
Network
Controller Controller
Control
and
Information
Network
Control
I/O I/O
Network
• Benefits • Benefits
– Clear network ownership demarcation line – Plantwide information sharing for data
collection and asset management
• Challenges
– Future-proof
p
– Li
Limited
it d visibility
i ibilit to
t control
t l network
t k devices
d i
for asset management • Challenges
– Limited future-proof capability – Blurred network ownership demarcation line
Copyright © 2011 Rockwell Automation, Inc. All rights reserved. 93
Plantwide Network Architectures
Level 3 - Site Operations
Level 4 – Data Center
Cell/Area Zones
Levels 0-2
Enterprise
Business Systems
I/O HMI
HMI
Stratix 8000
Layer 2 Switch
Safety Controller
Drive HMI
I/O Drive
Drive
Safety I/O
Controller
Controller Camera
Drive
Filling Cell/Area Zone Processing Cell/Area Zone
Levels 0-2 Levels 0-2 Material Handling Cell/Area Zone
Ring Topology Ring Topology Levels 0-2
Device Level Ring Resilient Ethernet Protocol (REP) Bus/Star Topology
Enterprise
Business Systems
I/O HMI
HMI
Stratix 8000
Layer 2 Switch
Safety Controller
Drive HMI
I/O Drive
Drive
Safety I/O
Controller
Controller Camera
Drive
Filling Cell/Area Zone Processing Cell/Area Zone
Levels 0-2 Levels 0-2 Material Handling Cell/Area Zone
Ring Topology Ring Topology Levels 0-2
Device Level Ring Resilient Ethernet Protocol (REP) Bus/Star Topology
Enterprise
Business Systems
I/O HMI
HMI
Stratix 8000
Layer 2 Switch
Safety Controller
Drive HMI
I/O Drive
Drive
Safety I/O
Controller
Controller Camera
Drive
Filling Cell/Area Zone Processing Cell/Area Zone
Levels 0-2 Levels 0-2 Material Handling Cell/Area Zone
Ring Topology Ring Topology Levels 0-2
Device Level Ring Resilient Ethernet Protocol (REP) Bus/Star Topology
Patch Management
Terminal Services Cisco 3750G
DMZ Application Mirror StackWise Layer 3
AV Server Distribution Switch
Cisco 2960
Industrial FactoryTalk
Layer 2 Access Switch
Catalyst 3750 SERIES
Cisco 4402
Wireless LAN
Zone Controller (WLC)
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24
1X 11X 13X 23X
Applications
1 2 3 4
SYST
RPS
MASTR
STAT
DUPLX
SPEED
STACK
MODE 2X 12X 14X 24X
2X
1 2 3 4 5 6 7 8 9 10 11 12
11X
12X
13X
14X
13 14 15 16 17 18 19 20 21 22 23 24
23X
24X
1 2 3 4
Cisco 1252G
Stratix 8000 802.11n – Dual Band
Rockwell Automation Access point
IE Managed Ring Topology
Layer 2 Switch
Lightweight AP
(LWAP)
Mobile User
AP as Workgroup
Bridge (WGB)
Embedded
Layer 2 Switch Embedded Layer
Ring Topology 2 Switch Linear
Cell/Area Zone #1
Topology
Cell/Area Zone #2 Cell/Area Zone #3 Cell/Area Zone #4
WAN
PSTN
• Website:
– http://www.odva.org/
http://www odva org/
• Media Planning and Installation Manual
– http://www.odva.org/Portals/0/Library/Publications_Numbered/PUB00148R0_Ether
NetIP_Media_Planning_and_Installation_Manual.pdf
• Network Infrastructure for EtherNet/IP: Introduction and Considerations
– http://www
http://www.odva.org/Portals/0/Library/Publications_Numbered/PUB00035R0_Infrast
odva org/Portals/0/Library/Publications Numbered/PUB00035R0 Infrast
ructure_Guide.pdf
• Device Level Ring
– htt
http://www.odva.org/Portals/0/Library/CIPConf_AGM2009/2009_CIP_Networks_Conference_
// d /P t l /0/Lib /CIPC f AGM2009/2009 CIP N t k C f
Technical_Track_Intro_to_DLR_PPT.pdf
• The CIP Advantage
– http://www.odva.org/default.aspx?tabid=54
• Website
– http://www.ab.com/networks/architectures.html
• Design Guides
– CPwE DIG 2.0
• Education Series
• Whitepapers
– Securing Manufacturing Computer and
Controller Assets
– Production Software within Manufacturing
Reference Architectures
– Achieving Secure Remote Access to Plant Floor
Applications and Data