Setting Up, Understanding and Troubleshooting of ...

20
Setting Up, Understanding and Troubleshooting of Industrial Ethernet and Automation Networks

Transcript of Setting Up, Understanding and Troubleshooting of ...

Page 1: Setting Up, Understanding and Troubleshooting of ...

Setting Up, Understanding and Troubleshooting of Industrial Ethernet and Automation Networks

Page 2: Setting Up, Understanding and Troubleshooting of ...

WHO ARE WE? IDC Technologies is internationally acknowledged as the premier provider of practical, technical training for engineers and technicians. We specialize in the fields of electrical systems, industrial data communications, telecommunications, automation and control, mechanical engineering, chemical and civil engineering, and are continually adding to our portfolio of over 60 different workshops. Our instructors are highly respected in their fields of expertise and in the last ten years have trained over 200,000 engineers, scientists and technicians. With offices conveniently located worldwide, IDC Technologies has an enthusiastic team of professional engineers, technicians and support staff who are committed to providing the highest level of training and consultancy. TECHNICAL WORKSHOPS TRAINING THAT WORKS We deliver engineering and technology training that will maximize your business goals. In today’s competitive environment, you require training that will help you and your organization to achieve its goals and produce a large return on investment. With our ‘training that works’ objective you and your organization will:

• Get job-related skills that you need to achieve your business goals • Improve the operation and design of your equipment and plant • Improve your troubleshooting abilities • Sharpen your competitive edge • Boost morale and retain valuable staff • Save time and money

EXPERT INSTRUCTORS We search the world for good quality instructors who have three outstanding attributes:

1. Expert knowledge and experience – of the course topic 2. Superb training abilities – to ensure the know-how is transferred effectively and quickly to you in

a practical, hands-on way 3. Listening skills – they listen carefully to the needs of the participants and want to ensure that you

benefit from the experience. Each and every instructor is evaluated by the delegates and we assess the presentation after every class to ensure that the instructor stays on track in presenting outstanding courses. HANDS-ON APPROACH TO TRAINING All IDC Technologies workshops include practical, hands-on sessions where the delegates are given the opportunity to apply in practice the theory they have learnt. REFERENCE MATERIALS A fully illustrated workshop book with hundreds of pages of tables, charts, figures and handy hints, plus considerable reference material is provided FREE of charge to each delegate. ACCREDITATION AND CONTINUING EDUCATION Satisfactory completion of all IDC workshops satisfies the requirements of the International Association for Continuing Education and Training for the award of 1.4 Continuing Education Units. IDC workshops also satisfy criteria for Continuing Professional Development according to the requirements of the Institution of Electrical Engineers and Institution of Measurement and Control in the UK, Institution of Engineers in Australia, Institution of Engineers New Zealand, and others.

THIS BOOK WAS DEVELOPED BY IDC TECHNOLOGIES

Page 3: Setting Up, Understanding and Troubleshooting of ...

CERTIFICATE OF ATTENDANCE Each delegate receives a Certificate of Attendance documenting their experience. 100% MONEY BACK GUARANTEE IDC Technologies’ engineers have put considerable time and experience into ensuring that you gain maximum value from each workshop. If by lunchtime on the first day you decide that the workshop is not appropriate for your requirements, please let us know so that we can arrange a 100% refund of your fee. ONSITE WORKSHOPS All IDC Technologies Training Workshops are available on an on-site basis, presented at the venue of your choice, saving delegates travel time and expenses, thus providing your company with even greater savings. OFFICE LOCATIONS

AUSTRALIA • CANADA • INDIA • IRELAND • MALAYSIA • NEW ZEALAND • POLAND • SINGAPORE • SOUTH AFRICA • UNITED KINGDOM • UNITED STATES

On-Site Training

All IDC Technologies Training Workshops are available on an on-site basis, presented at the venue of your choice, saving delegates travel time and expenses, thus providing your company with even

greater savings. For more information or a FREE detailed proposal contact Kevin Baker by e-mailing:

[email protected]

[email protected] www.idc-online.com

Visit our website for FREE Pocket Guides IDC Technologies produce a set of 6 Pocket Guides used by

thousands of engineers and technicians worldwide. Vol. 1 – ELECTRONICS Vol. 4 – INSTRUMENTATION Vol. 2 – ELECTRICAL Vol. 5 – FORMULAE & CONVERSIONS Vol. 3 – COMMUNICATIONS Vol. 6 – INDUSTRIAL AUTOMATION

To download a FREE copy of these internationally best selling pocket guides go to:

www.idc-online.com/downloads/

SAVE MORE THAN 50% OFF the per person

cost

CUSTOMISE the training to YOUR WORKPLACE!

Have the training delivered WHEN

AND WHERE you need it!

Page 4: Setting Up, Understanding and Troubleshooting of ...

IDC TECHNOLOGIES

Worldwide Offices

AUSTRALIA Telephone: 1300 138 522 • Facsimile: 1300 138 533

West Coast Office

1031 Wellington Street, West Perth, WA 6005 PO Box 1093, West Perth, WA 6872

East Coast Office

PO Box 1750, North Sydney, NSW 2059

CANADA Toll Free Telephone: 1800 324 4244 • Toll Free Facsimile: 1800 434 4045

Suite 402, 814 Richards Street, Vancouver, NC V6B 3A7

INDIA Telephone : +91 444 208 9353

35 4th Street, Kumaran Colony, Vadapalani, Chennai 600026

IRELAND Telephone : +353 1 473 3190 • Facsimile: +353 1 473 3191

Caoran, Baile na hAbhann, Co. Galway

MALAYSIA Telephone: +60 3 5192 3800 • Facsimile: +60 3 5192 3801

26 Jalan Kota Raja E27/E, Hicom Town Center Seksyen 27, 40400 Shah Alam, Selangor

NEW ZEALAND

Telephone: +64 9 263 4759 • Facsimile: +64 9 262 2304 Parkview Towers, 28 Davies Avenue, Manukau City

PO Box 76-142, Manukau City

POLAND Telephone: +48 12 6304 746 • Facsimile: +48 12 6304 750

ul. Krakowska 50, 30-083 Balice, Krakow

SINGAPORE Telephone: +65 6224 6298 • Facsimile: + 65 6224 7922

100 Eu Tong Sen Street, #04-11 Pearl’s Centre, Singapore 059812

SOUTH AFRICA Telephone: +27 87 751 4294 or +27 79 629 5706 • Facsimile: +27 11 312 2150

68 Pretorius Street, President Park, Midrand PO Box 389, Halfway House 1685

UNITED KINGDOM

Telephone: +44 20 8335 4014 • Facsimile: +44 20 8335 4120 Suite 18, Fitzroy House, Lynwood Drive, Worcester Park, Surrey KT4 7AT

UNITED STATES

Toll Free Telephone: 1800 324 4244 • Toll Free Facsimile: 1800 434 4045 5715 Will Clayton #6175, Humble, TX 77338, USA

Website: www.idc-online.com

Email: [email protected]

Page 5: Setting Up, Understanding and Troubleshooting of ...

Presents

Setting Up, Understanding and Troubleshooting of Industrial Ethernet

and Automation Networks

Revision 1.1

Website: www.idc-online.com E-mail: [email protected]

Page 6: Setting Up, Understanding and Troubleshooting of ...

IDC Technologies Pty Ltd PO Box 1093, West Perth, Western Australia 6872 Offices in Australia, New Zealand, Singapore, United Kingdom, Ireland, Malaysia, Poland, United States of America, Canada, South Africa and India Copyright © IDC Technologies 2007. All rights reserved. First published 2007 Revision 1.1 published 2008 All rights to this publication, associated software and workshop are reserved. No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means electronic, mechanical, photocopying, recording or otherwise without the prior written permission of the publisher. All enquiries should be made to the publisher at the address above. ISBN: 978-1-921007-12-5 Disclaimer Whilst all reasonable care has been taken to ensure that the descriptions, opinions, programs, listings, software and diagrams are accurate and workable, IDC Technologies do not accept any legal responsibility or liability to any person, organization or other entity for any direct loss, consequential loss or damage, however caused, that may be suffered as a result of the use of this publication or the associated workshop and software.

In case of any uncertainty, we recommend that you contact IDC Technologies for clarification or assistance.

Trademarks All logos and trademarks belong to, and are copyrighted to, their companies respectively. Acknowledgements IDC Technologies expresses its sincere thanks to all those engineers and technicians on our training workshops who freely made available their expertise in preparing this manual.

Page 7: Setting Up, Understanding and Troubleshooting of ...

Contents 1 Introduction 1

1.1 Network types 1 1.2 The Open Systems Interconnection (OSI) Model 2 1.3 The Client/Server paradigm 9 1.4 Where the different technologies fit in 10 1.5 Current trends 10

2 Industrial Ethernet 13 2.1 10 Mbps CSMA/CD Ethernet 13 2.2 Medium Access Control (Collisions) 18 2.3 Frame transmission 20 2.4 Frame reception 20 2.5 Frame format 21 2.6 Reducing collisions 23 2.7 Half-duplex Ethernet design rules 23 2.8 100 Mbps Ethernet 25 2.9 Gigabit Ethernet 26 2.10 Switching technology 26 2.11 Industrial Ethernet 30 2.12 Real Time operation 39

3 Industrial Wireless 45 3.1 Wireless LANs (IEEE 802.11) 45 3.2 Wireless Mesh Networks 71 3.3 Wireless Sensor Networks: IEEE 1451.5 84

4 TCP/IP 89 4.1 The TCP/IP Protocol suite 89 4.2 IPv4 92 4.3 IPv6 95 4.4 ICMP 101 4.5 Routing 103 4.6 TCP 108 4.7 UDP 110

5 OPC 113 5.1 What is OPC? 113 5.2 The problems addressed by OPC 114 5.3 The OPC logical object model 117 5.4 OPC Specifications 119

Page 8: Setting Up, Understanding and Troubleshooting of ...

5.5 COM/DCOM 120 5.6 OPC Data Access specification 127 5.7 Group attributes 134 5.8 Item properties 137 5.9 Exchange of information between Server and Client 138 5.10 Implementation issues 143 5.11 Tunneling 149

6 Automation Network Developments 151 6.1 Background 151 6.2 Plant automation hierarchies 153 6.3 Ethernet in field buses 154 6.4 HART 155 6.5 DeviceNet 166 6.6 Ethernet/IP 174 6.7 ProfiBus 179 6.8 PROFInet 189 6.9 FOUNDATION Fieldbus 199 6.10 High-Speed Ethernet (HSE) 207 6.11 EtherCAT 208 6.12 Ethernet Powerlink 211

7 Network Security 213 7.1 Introduction 213 7.2 Security goal 214 7.3 Threats and underlying causes 215 7.4 Motivation for threats 216 7.5 Vulnerabilities 217 7.6 Network attacks 218 7.7 Common Criteria approach for analysis of threats and

vulnerabilities 221 7.8 Overview of IP network security 222 7.9 Security policies 223 7.10 Weaknesses in the TCP/IP protocol 224 7.11 Attack mechanisms 224 7.12 Preparing for an attack 225 7.13 Attack through unauthorized access 225 7.14 Attacking the data (data diddling) 226 7.15 Attack the service through Denial of Service (DoS) 228 7.16 Vulnerabilities of OSI layers 229 7.17 Network security at the Transport layer 231 7.18 Network layer security 233 7.19 Data Link layer security 233 7.20 Implementation of security measures for industrial WLANs 234 7.21 Some general guidelines 239

Page 9: Setting Up, Understanding and Troubleshooting of ...

1

Introduction

This chapter deals primarily with the OSI model and its relevance in terms of the technologies dealt with in this manual.

Learning objectives After studying this chapter you should be able to:

• Describe the functions of the seven OSI layers • Map the various layers of IEEE 802.11 and IEEE 802.15 as well as the

various field buses on to the OSI model (once you have studied them) • Describe current trends in the plant Industrial automation arena

1.1 Network types Communication networks evolved due to the need to exchange and share information amongst a group of machines. During the last century many kinds of communication networks have been developed, such as telephone networks, computer networks and cable TV networks.

With the need for data exchange superseding voice and picture transmission, computer networks have become the most prevalent of all communication networks. Depending on the distances between the computers, computer networks can be further differentiated into:

• LANs (Local Area Networks). These networks interconnect computers and other networked devices located a small distance apart, for instance computers in an office or building. The most popular LAN technology is Ethernet.

• MANs (Metropolitan Area Networks). These networks interconnect computers and other networked devices located at medium distances from each other, for instance around the perimeter of a large city. Technologies used here include Ethernet and FDDI.

Page 10: Setting Up, Understanding and Troubleshooting of ...

2 Setting Up, Understanding and Troubleshooting of Industrial Ethernet and Automation Networks

• WANs (Wide Area Networks). These are interconnected LANs, located at large distances from each other, for instance in different cities or countries. Interconnection is via a ‘communications cloud’ that encompasses technologies such as SDH, ATM and X.25.

• WLANs (Wireless LANs). These are usually wireless extensions to an existing Ethernet network, the most popular being IEEE 802.11 (Wi-Fi).

• PANs (Personal Area Networks): These are networks connecting devices such as mobile phones, PDAs and laptops, as well as wireless sensors in Industrial applications. They are based on the IEEE 802.15 standards, and are typically spread over a few square meters or across a room at most. Specific implementations include Bluetooth, ZigBee and SensiNet. In Industrial applications these networks are often known as WSNs (Wireless Sensor Networks) or WMNs (Wireless Mesh Networks).

1.2 The Open Systems Interconnection (OSI) Model A communication framework that has had a tremendous impact on the design of computer networks is the Open Systems Interconnection (OSI) model of the International Organization for Standardization (ISO). The objective of this model is to provide a framework for the co-ordination of standards development, and allows for existing as well as evolving standards activities to be set within that common framework.

In order to understand the structure of all the technologies discussed in this manual, a quick review of the OSI model basics is a necessity.

Open and closed systems The interconnection of two or more devices with some form of digital communication is the first step towards establishing a network. In addition to the hardware requirements as discussed above, the software problems of communication must also be overcome. Where all the devices on a network are from the same manufacturer, the hardware and software problems are usually easily overcome because all the system components have usually been designed within the same guidelines and specifications.

Proprietary networks that comprise hardware and software from only one vendor are called closed systems. In most cases these systems were developed at a time before standardization, or when it was considered unlikely that equipment from other manufacturers would be included in the network.

In contrast, ‘open’ systems conform to specifications and guidelines that are ‘open’ to all. This allows equipment from any manufacturer that complies with that standard to be used interchangeably on the network. The benefits of open systems include wider availability of equipment, lower prices and easier integration with other components.

Page 11: Setting Up, Understanding and Troubleshooting of ...

Introduction 3

The OSI model (The Open Systems Interconnection Reference Model) Faced with the proliferation of closed network systems, the ISO defined a ‘Reference Model for Communication between Open Systems’ (ISO 7498) in 1978. This has since become known as the OSI model. The OSI model is essentially a data communications management structure that breaks data communications down into a manageable hierarchy (‘stack’) of seven layers. Each layer has a defined purpose and interfaces with the layers above it and below it.

By laying down functions and services for each layer, some flexibility is allowed so that the system designers can develop protocols for each layer independently of each other. By conforming to the OSI standards, a system is able to communicate with any other compliant system, anywhere in the world.

The OSI model supports a client/server model and since there must be at least two nodes to communicate, each layer also appears to converse with its peer layer at the other end of the communication channel in a virtual (‘logical’) manner. The concept of isolation of the process of each layer, together with standardized interfaces and peer-to-peer virtual communication, are fundamental to the concepts developed in a layered model such as the OSI model. This concept is shown in Figure 1.1.

Figure 1.1 OSI layering concept

The actual functions within each layer are provided by entities (abstract devices such as programs, functions, or protocols) that implement the services for a particular layer on a single machine. A layer may have more than one entity; for example a protocol entity and a management entity. Entities in adjacent layers interact through the common upper and lower boundaries by passing physical information through Service Access Points (SAPs). A SAP could be compared to a predefined ‘postbox’ where one layer would collect data from the previous layer. The relationship between layers, entities, functions and SAPs is shown in Figure 1.2.

Page 12: Setting Up, Understanding and Troubleshooting of ...

4 Setting Up, Understanding and Troubleshooting of Industrial Ethernet and Automation Networks

Figure 1.2 Relationship between layers, entities, functions and SAPs

In the OSI model, the entity in the next higher layer is referred to as the N+1 entity and the entity in the next lower layer as N–1. The services available to the higher layers are the result of the services provided by all the lower layers.

The functions and capabilities expected at each layer are specified in the model. However, the model does not prescribe how this functionality should be implemented. The focus in the model is on the ‘interconnection’ and on the information that can be passed over this connection. The OSI model does not concern itself with the internal operations of the systems involved.

When the OSI model was being developed, a number of principles were used to determine exactly how many layers this communication model should encompass. These principles are:

• A layer should be created where a different level of abstraction is required • Each layer should perform a well-defined function • The function of each layer should be chosen with thought given to defining

internationally standardized protocols • The layer boundaries should be chosen to minimize the information flow

across the boundaries • The number of layers should be large enough that distinct functions need

not be thrown together in the same layer out of necessity and small enough that the architecture does not become unwieldy

The use of these principles led to seven layers being defined, each of which has been

given a name in accordance with its purpose. Figure 1.3 shows the seven layers.

Page 13: Setting Up, Understanding and Troubleshooting of ...

Introduction 5

Figure 1.3 The OSI reference model

The service provided by any layer is expressed in the form of a service primitive with

the data to be transferred as a parameter (Figure 1.4). A service primitive is a fundamental service request made between protocols. For example, layer W may sit on top of layer X. If W wishes to invoke a service from X, it may issue a service primitive in the form of X.Connect.request to X.

Figure 1.4 Service primitive

Typically, each layer in the transmitting stack, with the exception of the lowest, adds header information, or Protocol Control Information (PCI) – a.k.a. ‘header’, to the data before passing it across the interface to the next layer. This interface defines which primitive operations and services the lower layer offers to the upper one. The headers are used for peer-to-peer layer communication between the stacks and some layer implementations use the headers to invoke functions and services at the adjacent (N+1 or N-1) layers.

At the transmitting stack, the user application (e.g. the client) invokes the process by passing data, primitive names and control information to the uppermost layer of the protocol stack. The stack then passes the data down through the layers of the stack,

Page 14: Setting Up, Understanding and Troubleshooting of ...

6 Setting Up, Understanding and Troubleshooting of Industrial Ethernet and Automation Networks

adding headers (and possibly trailers), and invoking functions in accordance with the rules of the protocol at each layer.

At each layer, the ‘data’ received at a certain layer (including headers from the layers above it) is referred to as a Service Data Unit or SDU. This is normally prefixed with the first letter of the name of the layer. For example, the Transport layer receives a TSDU from the Session layer. The Transport layer then processes it, adds a header, and creates a Transport Protocol Data Unit or TPDU.

At the receiving site, the opposite occurs with the headers being stripped from the data as it is passed up through the layers of the receiving stack. Generally speaking, layers in the same stack communicate with parameters passed through primitives, and peer layers communicate with the use of the headers across the network.

At this stage it should be quite clear that there is no physical connection or direct communication between the peer layers of the communicating applications. Instead, all physical communication is across the lowest (Physical) layer of the stack. Communication takes place downwards through the protocol stack on the transmitting node and upwards through the receiving stack. Figure 1.5 shows the full architecture of the OSI model, whilst Figure 1.6 shows the effects of the addition of headers to the respective SDUs at each layer. The net effect of this extra information is to reduce the overall bandwidth of the communications channel, since some of the available bandwidth is used to pass control information.

Figure 1.5 Peer layer interaction in the OSI model

Page 15: Setting Up, Understanding and Troubleshooting of ...

Introduction 7

Figure 1.6 OSI message passing

OSI layer services The services provided at each layer of the stack are as follows. Application layer The Application layer is the uppermost layer in the OSI reference model and is responsible for giving applications access to the protocol stack. Examples of Application-layer tasks include file transfer, electronic mail (e-mail) services, and network management. In order to accomplish its tasks, the Application layer passes program requests and data to the Presentation layer, which is responsible for encoding the Application layer’s data in the appropriate form. Presentation layer The Presentation layer is responsible for presenting information in a manner suitable for the applications or users dealing with the information. Functions such as data conversion from EBCDIC to ASCII (or vice versa), the use of special graphics or character sets, data compression or expansion, and data encryption or decryption are carried out at this layer. The Presentation layer provides services for the Application layer above it, and uses the Session layer below it. In practice, the Presentation layer rarely appears in pure form, and it is the least well defined of the OSI layers. Application- or Session-layer programs often encompass some or all of the Presentation layer functions. Session layer The Session layer is responsible for synchronizing and sequencing the dialog and packets in a network connection. This layer is also responsible for ensuring that the connection is maintained until the transmission is complete, and that the appropriate security measures are taken during a ‘session’. The Session layer is used by the Presentation layer above it, and uses the Transport layer below it.

Page 16: Setting Up, Understanding and Troubleshooting of ...

8 Setting Up, Understanding and Troubleshooting of Industrial Ethernet and Automation Networks

Transport layer In the OSI reference model, the Transport layer is responsible for providing data transfer at an agreed-upon level of quality, such as at specified transmission speeds and error rates. To ensure delivery, some Transport layer protocols assign sequence numbers to outgoing packets. The Transport layer at the receiving end checks the packet numbers to make sure all have been delivered and to put the packet contents into the proper sequence for the recipient.

The Transport layer provides services for the Session layer above it, and uses the Network layer below it to find a route between source and destination. The Transport layer is crucial in many ways, because it sits between the upper layers, which are strongly application-dependent, and the lower one, which are network-based.

The layers below the Transport layer are collectively known as the ‘subnet’ layers. Depending on how well (or not) they perform their functions; the Transport layer has to interfere less (or more) in order to maintain a reliable connection. Network layer The Network layer is the third layer from the bottom up, or the uppermost ‘subnet layer’. It is responsible for the following tasks:

• Determining addresses or translating from hardware to network addresses. These addresses may be on a local network or they may refer to networks located elsewhere on an internetwork.

• Finding a route between a source and a destination node or between two intermediate devices

• Fragmentation of large packets of data into frames small enough to be transmitted by the underlying Data Link layer (fragmentation). The corresponding Network layer at the receiving node undertakes reassembly of the packet

Data Link layer The Data Link layer is responsible for creating, transmitting, and receiving data packets. It provides services for the various protocols at the Network layer, and uses the Physical layer to transmit or receive material. The Data Link layer creates packets appropriate for the network architecture being used. Requests and data from the Network layer are part of the data in these packets (or frames, as they are often called at this layer). These frames are passed down to the Physical layer from where they are transmitted to the Physical layer on the destination host via the medium. Network architectures (such as Ethernet and Wi-Fi) typically encompass the Physical layer and the lower half of the Data Link layer.

The IEEE 802 networking working groups have refined the Data Link layer into two sub-layers viz;

• The Logical Link control (LLC) sub-layer in the upper half, implemented as IEEE 802.2 and shared by several networking technologies such as IEEE 802.3 Ethernet, IEEE 802.5 Token Ring and IEEE 802.11Wi-Fi

• The Media Access Control (MAC) sub-layer in the lower half, included with the Physical layer as part of the networking standards mentioned above

The LLC sub-layer provides an interface for the Network layer protocols, and controls

the logical communication with its peer at the receiving side. The MAC sub-layer controls physical access to the medium.

Page 17: Setting Up, Understanding and Troubleshooting of ...

Introduction 9

Physical layer The Physical layer is the lowest layer in the OSI. This layer gets data packets from the Data Link layer above it, and converts the contents of these packets into a series of electrical signals that represent ‘0’ and ‘1’ values in a digital transmission. These signals are sent across a transmission medium to the Physical layer at the receiving end. At the destination, the Physical layer converts the electrical signals into a series of bit values. These values are grouped into packets and passed up to the Data Link layer.

The required mechanical and electrical properties of the transmission medium are defined at this level. These include:

• The type of cable and connectors used. The cable may be coaxial, twisted-pair, or fiber optic. The types of connectors depend on the type of cable

• The pin assignments for the cable and connectors. Pin assignments depend on the type of cable and also on the network architecture being used

• The format for the electrical signals. The encoding scheme used to signal ‘0’ and ‘1’ values in a digital transmission or particular values in an analog transmission depend on the network architecture being used

The medium itself is, however, not specific here. For example, Fast Ethernet dictates Cat5 cable, but the cable itself is specified in TIA/EIA-568B.

1.3 The Client/Server paradigm The stack is there for the benefit of two entities to talk to each other. These are the ‘Client’ and the ‘Server’. These are software entities; the Client is the requester of information, and the Server is the supplier thereof. Examples of Clients are email Clients (e.g. Eudora, Outlook Express) and Web Clients (e.g. IE6, Firefox). Examples of Servers are FTP servers (e.g. Serv-U) or Web Servers (e.g. Apache, Xitami).

An example from the Industrial environment is Modbus. Here the Client is embedded in the Master (i.e. the controller) and the Server is located on the Slave device (e.g. RTU).

Application

Presentation

Session

Transport

Network

Data Link

Physical

Application

Presentation

Session

Transport

Network

Data Link

Physical

Network

Data Link

Physical

Router

Client Server

Communications Medium

Peer to Peer Relationships

Figure 1.7 Client/Server communication

Page 18: Setting Up, Understanding and Troubleshooting of ...

10 Setting Up, Understanding and Troubleshooting of Industrial Ethernet and Automation Networks

1.4 Where the different technologies fit in Networking technologies such as IEEE 802.3 (Ethernet), IEEE 802.11 (Wireless LANs, a.k.a. Wi-Fi) and IEEE 802.15 (Wireless PANs) cover the Physical layer as well as the lower half (the MAC sub-layer) of the Data Link layer. They are therefore able to gain access to the medium (air, cable) and to send and receive packets (frames).

Unfortunately this only allows devices to talk to other similar devices in close proximity or on the same LAN. If the packets are to be sent over large distances to other LANS, e.g. a WAN, routing and end-to-end control becomes necessary, and layers 3 and 4 have to be implemented, in most cases with IP at layer 3 and TCP at layer 4. The TCP/IP protocol stack contains additional protocols such as ARP, ICMP and UDP, the purpose of which will become clear later in this manual.

Automation networks need at least one more layer, Layer 7, since it is the protocol at this layer that has the ability to talk to the client or server and to understand the various instructions or responses emanating from the client or server. Since this type of network is usually deployed over a relatively small area, routing is normally not required and the middle layers are omitted. This is, however, not always the case. DeviceNet, for example, implements all seven layers.

Field buses present another challenge as they require, for example, functional building blocks and device profiles. Since this cannot be included on the seven OSI layers, vendors tend to accommodate it in an additional ‘User layer’ or ‘Layer 8’.

1.5 Current trends The following list shows a couple of trends in the automation world:

• The use of Ethernet. Ethernet, in some or other form, has become the de facto standard for wired Layer 1/Layer 2 implementation; this not only includes domestic and commercial systems, but also Industrial and Military applications. Ethernet can now be found in fighter as well as commercial aircraft, as well as ships.

• The ‘retrofit’ of Ethernet to existing field buses. This has happened with all major field buses such as DeviceNet, PROFIBUS and FOUNDATION Fieldbus.

• The adding of Real Time capabilities to Ethernet. In this regard IEEE 1588 clocks have played a significant role. This capability has been retrofitted to several existing Ethernet-based field buses (e.g. CIPSync for Ethernet/IP), but has also led to a plethora of new generation ultra-fast field buses for fast I/O (especially motor control), such as EtherCAT

• The use of TCP/IP for the middle layers of the stack • The use of OPC. This technology has been embraced by all SCADA

vendors • The use of wireless in Industrial environments. This movement is still in its

infancy, but several technologies have already emerged. The oldest of these is Wireless LAN (WLAN), notably IEEE 802.11. Siemens has recently launched an Industrial WLAN product based on IEEE 802.11, called IWLAN. Other emerging technologies include Wireless Mesh Networks

Page 19: Setting Up, Understanding and Troubleshooting of ...

Introduction 11

(WMNs) based on IEEE 802.15.4 (such as Zigbee and WirelessHART), and Wireless Sensor Networks (WSNs) such as IEEE 1451.5

Page 20: Setting Up, Understanding and Troubleshooting of ...

12 Setting Up, Understanding and Troubleshooting of Industrial Ethernet and Automation Networks