XIO USER MANUAL | 2106424MNAB | 195
and connected to other field devices on any of the other available Ethernet interfaces. Figure 9-12
shows
an example of this scenario.
Figure 9-12: Use of a port forwarding XIO to securely isolate field LAN from WAN
The XIO connection to the corporate network (2) is considered the uplink connection (also referred to as
the enterprise connection in PCCU). The connections to field devices (on XIO port B2) are local
connections. In the example in Figure 9-12
, devices (RMC, XIO-1, XIO-2) are daisy-chained. For security,
the port forwarding XIO can be configured to keep the uplink connection to the corporate network isolated
from the connections to the field while still allowing access to specific devices and their enabled services.
That is, the Enterprise (A-Network) is separated from the Industrial (B-Networks).
The term “uplink” in port forwarding refers to the interface used for the
connection to the wide area network. The Port Forwarding tab uses the term “enterprise” for the
interface for this connection. Note that any of the Ethernet interfaces that are active and enabled
ca
n be selected as the enterprise interface from the Enterprise Interface drop-
down menu on the
Port Forwarding tab. Therefore, any A
-Network or B-
Network interface can be selected, not just A
interfaces (which are the ones referred to as Enterprise interfac
es on the Networking tab). The
choice depends on the customer requirements for field connections.
9.7.1 Configuration overview
Port forwarding requires careful selection and configuration of the Ethernet interfaces used for WAN and
LAN connections. Review sections 9.7.2 Ethernet interface IP addressing guidelines and 9.7.3
Determine
field connections to determine configuration requirements for your field conditions. Sections 9.7.4 Use A-
Network ports for field LAN connections and 9.7.5 Use A-Network ports for WAN (uplink) connection
provide two example scenarios.
Sections 9.7.6 Enable port forwarding and 9.7.7 Define port forwarding rules describe how to enable port
forwarding and configure forwarding rules on the XIO. These procedures assume that the devices for
To Next Page
Loading...
Need help?
General
