problem in Network architecture

[jayakumar]

Hi,

is it necessary to seperate the shop floor ethernet lan from corporate ethernet lan in an automation plant.

can we use same ethernet lan in shop floor and corporate network?

please provide me a quick answer.

with best regards
jayakumar

 

[PeterW]

They can share but its normally better practice to keep seperate.

 

[rdrast]

It depends.

If the 'equipment Ethernet' is used to control I/O, or devices, it should be 100% seperate from a corporate LAN.

If the 'equipment Ethernet' is used for HMI's and data collection only, they can share, but beware of corporate IT people.

 

[RheinhardtP]

Seperate

Better safe than sorry.. I always say to my client that the automation networks shouldnt be integrated.. You never know where an IT specialists faultfinding methodolgies will lead him...

And f its not seperate i'm betting its gonna be towards my Scada and PLC..

Rheinhardt

 

[icky812]

I run into this nearly everyday. If the two networks are "shared" without a managed switch, someone is going to get upset. Either it will be the IT folks because the plant data is bogging down the users, or it will be the plant folks because their HMI's and PLC's are loosing data from excessive network traffic.

If you think the data needs to be shared, spend the extra dollars for a managed switch to isolate the networks.

 

[Fritz_frederix]

Hi,


I have always avoided to share LAN networks with IT and this for several reasons.
Normaly IT dept. uses programmable switches which they reprogram at random times without informing you with unpredicticale problems. Furthermore if you try to send large amounts of data over there network (SQLServer data, oracle eso) there network could slowdown. So you're not in control of the capacity/bandwith. Then it will rain complains all over the place.
It's always better to keep the networks separated, so you don't deal with the IT-department what's a good thing on it's own.

Rudi (always fighting with IT-people)

 

[Oakley]

There is a S95 network initiative that seperates the plant floor from the business floor.

We have isolated networks - can connect between the two if necessary, but normal operation is to keep isolated. No network traffic interference, worms, viruses, etc.

We have strict guidelines on connection to our Plant floor networks. One is that only our computers are allowed to connect. This keeps contractor's laptops etc off because "We don't know where you have been." There may be infectious software on that connection.

This is our business model.