westermo.co.uk

1. Robust Industrial Data Communications - Made Easy Basic Ethernet Principals Westermo Data Communications UK Ltd Day 1 www.westermo.co.uk

2. Day 1 Networking fundamentals OSI model How Ethernet and IP work Wide Area Networks Westermo Product Overview Lynx Wolverine MR / DR Routers EDW Redfox Security VPN: Theory and Application Firewalls VLANs Training Agenda Robust Industrial Data Communications - Made Easy Day 2 • S&S Routed System setup • System design principals • Configuration specifics • Configure & Test Routed system Day 3 • S&S Local Access System setup • System Design Principals • Configuration specifics • Configure & Test Local Access System www.westermo.co.uk

3. Ethernet & IP fundamentals Product Overview Virtual Private Networks Day 1 Overview

4. Shared communication medium Address – based system CSMA/CD Fault tolerant Protocol independent What is Ethernet?

5. 7 Layer OSI Model • Hierarchal model for defining communication between Ethernet devices. • Defines end-to-end communication between applications • Lower layers “encapsulate” data from higher layers

8. Point to point Hub – Spoke Ring / Mesh Network Topology

9. Network Devices • Layer 1: • Hub / Bridge • Repeats network traffic out of all ports • One collision domain • Simple (dumb) unit

10. Network Devices • Layer 2: • Switch • Builds a MAC address table to forward unicast packets • Breaks up collision domains • VLAN tagging support, and VLAN trunk support (802.1q)

11. Network Devices • Layer 3: • Router • Builds IP routing table to forward traffic between networks • Breaks up broadcast domains • Inter-VLAN routing • Firewall • Many other high-level functions

12. Layer 2 - MAC Address 48 bit address written in HEX format Physically hard-coded onto network adapter 00-22-FB-BB-AC-E8 Ethernet Addressing OUI Organisation Unique Identifier NIC Network Interface Controller Used for local communication between devices

13. Layer 3 - IP Address 32 bit address written in “dotted decimal” Logical addressing scheme Uses a “Subnet Mask” to identify Network and Host portions of address 192 . 168 . 0 . 1 255 . 255 . 255 . 0 Ethernet Addressing

14. Subnet Mask A logical AND is used so: 0 AND 0 = 0 0 AND 1 = 0 1 AND 0 = 0 1 AND 1 = 1

15. Over 250 hosts on this sub network Over 2 million sub networks 11111111 11111111 11111 00000 1 0 1 0 1 0 255 255 255 0 More Hosts More Networks 192 168 0 21 . . . 11000000 10101000 11111110 00010101 Mask 192 168 0 0 . . . Result

16. The first address in a subnet is always the subnet ID and the last is always the broadcast address for the network. So for our example: 192.168.0.0 Network ID 255.255.255.0 Subnet Mask 192.168.0.1 to .254 Host IP Addresses 192.168.0.255 Broadcast Address Network and Broadcast

17. If there is a router / gateway on the network it is usually found at the lowest IP address In our example it would be 192.168.0.1 This is traditionally due to some protocols such as RSTP and IGMP which elect the lowest IP address device to be the master IP addressing good practice

18. The Internet Assigned Numbers Authority (IANA) has reserved the following IP address space for private use: 10.0.0.0 - 10.255.255.255 172.16.0.0 - 172.31.255.255 192.168.0.0 - 192.168.255.255 224.0.0.0 to 239.255.255.255 Multicast ONLY Why these IP addresses?

19. Types of Network Traffic • Unicast - one to one • Broadcast - one to all • Multicast - one to many

20. UDP - User Datagram Protocol TCP - Transmission Control Protocol Types of Network Traffic cont… UDP is like sending a letter using standard post - no notification of delivery TCP is like sending a letter via recorded post – you get a message back giving delivery confirmation

21. TCP and UDP Ports • IP address is the postal address • UDP or TCP is the type of delivery • Ports are the person the letter is for smtp modbus Port: 80 Port: 21 Port: 502 Port: 25 http ftp

22. ARP request packet: To: 255.255.255.255 Whois: 192.168.50.100 Tell 192.168.50.1 ARP reply packet: To: 192.168.50.1 I am:192.168.50.100! My MAC address is: 04:CA:15:99:B2:0A How devices communicate with each other: ARP 192.168.50.100 192.168.50.1 Ah! A broadcast packet, I better read this… I need to send some data to 192.168.50.100 I don’t know which device has that IP Address! Host 192.168.50.1 is looking for 192.168.50.100… that’sME! I had better tell him my physical address so that he can communicate directly with me. Aha! Host 192.168.50.100 replied, and he is on my local network! Now I know exactly where to send the data

23. PLC Port PLC Port 1 1 2 2 3 3 “So A is reached through port 2” ? A Where is B? B ARP reply A “So B is reached through port 2” ARP and MAC tables in Switches B A W X B A A B

24. B,C ? A Where is D? D ARP reply A PLC Port PLC Port PLC Port A B 1 1 C 1 B A 2 2 A,B A 2 3 3 3 Learning, Flooding and Forwarding B A W X C C D Flooding Y D Z PLC Port D 1 A What happens if Z and Y are linked? 2 3

25. PLC Port C 1 A A,B 2 3 Switch MAC Tables 00:00:00:00:00:00 There has been no activity from this device for a while so the switch will remove the entry from the MAC table. This is known as MAC Ageing

26. Communication session established! How devices communicate with each other: TCP I received some messages! I am expecting message 4 next. Sending message: Sending message: 1 2 3 4 5 6 192.168.50.100 Hey! I need to send you some data! 192.168.50.1 OK! Send me 3 messages at a time. Alright! Get ready! Sends data Acknowledges data

27. So far we have covered Local Area Networks or LANs What if we wish to talk to another LAN or remote network? A Gateway / Router is used. Connecting to other networks

28. Gateway and Routers LAN A LAN B 192.168.0.2 192.168.1.2 Gateway:192.168.0.1 Gateway:192.168.1.1 Gateway 192.168.0.1 Gateway 192.168.1.1 192.168.0.3 192.168.1.3

29. The most common mistake made is forgetting to enter the Gateway address in a device that needs to communicate with another network

30. Product Overview

31. Westermo Routers DR-250 MRD-310 MR-250

32. Westermo Routers DR-250 MRD-310 MR-250