Guard Ethernet Control Networks

May 1, 2006
Three new features—rate limiting, port locking and overlapping VLANs—have been added to the vendor’s EISX_M, EICP_M and EISB_M managed switches in order to prevent risks to control networks when interconnecting office and factory Ethernet networks.

Rate limiting lets users select a maximum traffic level (from 64kB to 100Mbps) so normal communications will operate properly, even allowing the control network to function in the event that the office network has a catastrophic problem. Port locking, another method of controlling traffic that comes through the office network, limits what devices can communicate through a specific port of the switch. Overlapping VLANs enable a few devices to be shared between the office and control network. With this feature, office traffic is eliminated from the portion of the control network that does not need to communicate with the office network. If only a SCADA system needs to communicate with both the office network and the control network, for example, an overlapping VLAN can be used to keep office traffic from all control devices except for the SCADA system.

Sponsored Recommendations

Why should American-Made Products be a top priority?

Within this white paper, Shalabh “Shalli” Kumar, founder of AVG Advanced Technologies, stresses the importance of prioritizing American-made products to safeguard the country'...

How to Improve Production Accountability in Manufacturing

David Greenfield, Automation World's Editor-in-Chief, and Shalli Kumar, founder of EZAutomation, discuss the idea of production monitors: a preprogrammed PLC/LED display that ...

HALT/HASS: The Ultimate Test for Reliability

Discover how companies like EZAutomation push the limits of reliability with HALT/HASS testing, originally designed to mimic the extreme conditions of space shuttle launches. ...

Your Next Production Monitor Is Only a Few Clicks Away

Shop for your very own EZ Production Monitor. It's designed for non-technical staff, so there's no programming required! It combines pre-coded firmware, real-time data, and WiFi...