Deploying CIP Security within a Converged Plantwide Ethernet Architecture

References

---

This appendix includes the following reference sections:

• Converged Plantwide Ethernet (CPwE)
• Other References

Converged Plantwide Ethernet (CPwE)

• Design Zone for Manufacturing—Converged Plantwide Ethernet
  http://www.cisco.com/c/en/us/solutions/enterprise/design-zone-manufacturing/landing_ettf.html
• Industrial Network Architectures—Converged Plantwide Ethernet
  http://www.rockwellautomation.com/global/products-technologies/network-technology/architectures.page
• Converged Plantwide Ethernet (CPwE) Design and Implementation Guide:

– Rockwell Automation site:
http://literature.rockwellautomation.com/idc/groups/literature/documents/td/enet-td001_-en-p.pdf

– Cisco site:
https://www.cisco.com/c/dam/en/us/td/docs/solutions/Verticals/CPwE/CPwE-CVD-Sept-2011.pdf

• Deploying 802.11 Wireless LAN Technology within a Converged Plantwide Ethernet Architecture Design and Implementation Guide:

– Rockwell Automation site:
http://literature.rockwellautomation.com/idc/groups/literature/documents/td/enet-td006_-en-p.pdf

– Cisco site:
https://www.cisco.com/c/en/us/td/docs/solutions/Verticals/CPwE/NovCVD/CPwE_WLAN_CVD.html

• Deploying Network Address Translation within a Converged Plantwide Ethernet Architecture Design and Implementation Guide:

– Rockwell Automation site:
http://literature.rockwellautomation.com/idc/groups/literature/documents/td/enet-td007_-en-p.pdf

– Cisco site:
https://www.cisco.com/c/en/us/td/docs/solutions/Verticals/CPwE/3-5-1/NAT/DIG/CPwE_NAT_CVD.html

• OEM Networking within a Converged Plantwide Ethernet Architecture Design Guide:

– Rockwell Automation site:
http://literature.rockwellautomation.com/idc/groups/literature/documents/td/enet-td018_-en-p.pdf

– Cisco site:
https://www.cisco.com/c/en/us/td/docs/solutions/Verticals/CPwE/5-1/OEM/WP/CPwE-5-1-OEM-WP/CPwE-5-1-OEM-WP.html

• Deploying Identity and Mobility Services within a Converged Plantwide Ethernet Architecture Design and Implementation Guide:

– Rockwell Automation site:
http://literature.rockwellautomation.com/idc/groups/literature/documents/td/enet-td008_-en-p.pdf

– Cisco site:
http://www.cisco.com/c/en/us/td/docs/solutions/Verticals/CPwE/3-5-1/ISE/DIG/CPwE_ISE_CVD.html

• Securely Traversing IACS Data Across the Industrial Demilitarized Zone Design and Implementation Guide:

– Rockwell Automation site:
http://literature.rockwellautomation.com/idc/groups/literature/documents/td/enet-td009_-en-p.pdf

– Cisco site:
https://www.cisco.com/c/en/us/td/docs/solutions/Verticals/CPwE/3-5-1/IDMZ/DIG/CPwE_IDMZ_CVD.html

• Deploying Industrial Firewalls within a Converged Plantwide Ethernet Architecture Design and Implementation Guide:

– Rockwell Automation site:
http://literature.rockwellautomation.com/idc/groups/literature/documents/td/enet-td002_-en-p.pdf

– Cisco site:
https://www.cisco.com/c/en/us/td/docs/solutions/Verticals/CPwE/5-0/Firewalls/DIG/CPwE-5-IFS-DIG.html

• Cloud Connectivity to a Converged Plantwide Ethernet Architecture:

– Rockwell Automation site:
https://literature.rockwellautomation.com/idc/groups/literature/documents/td/enet-td017_-en-p.pdf

– Cisco site:
https://www.cisco.com/c/en/us/td/docs/solutions/Verticals/CPwE/5-1/Cloud/DIG/CPwE_Cloud_Connect_CVD.html

• Deploying Network Security within a Converged Plantwide Ethernet Architecture:

– Rockwell Automation site:
https://literature.rockwellautomation.com/idc/groups/literature/documents/td/enet-td019_-en-p.pdf

– Cisco site:
https://www.cisco.com/c/en/us/td/docs/solutions/Verticals/CPwE/5-1/Network_Security/DIG/CPwE-5-1-NetworkSecurity-DIG.html

• Deploying Scalable Time Distribution within a Converged Plantwide Ethernet Architecture:

– Rockwell Automation site:
https://literature.rockwellautomation.com/idc/groups/literature/documents/td/enet-td016_-en-p.pdf

– Cisco site:
https://www.cisco.com/c/en/us/td/docs/solutions/Verticals/CPwE/5-1/STD/DIG/CPwE-5-1-STD-DIG.html

• Deploying A Resilient Converged Plantwide Ethernet Architecture Design and Implementation Guide:

– Rockwell Automation site:
http://literature.rockwellautomation.com/idc/groups/literature/documents/td/enet-td010_-en-p.pdf

– Cisco site:
https://www.cisco.com/c/en/us/td/docs/solutions/Verticals/CPwE/4-0/Resiliency/DIG/CPwE_resil_CVD.html

• Deploying Parallel Redundancy Protocol within a Converged Plantwide Ethernet Architecture:

– Rockwell Automation site:
https://literature.rockwellautomation.com/idc/groups/literature/documents/td/enet-td021_-en-p.pdf

– Cisco site:
https://www.cisco.com/c/en/us/td/docs/solutions/Verticals/CPwE/5-1/PRP/DIG/CPwE-5-1-PRP-DIG.html

• Deploying Device Level Ring within a Converged Plantwide Ethernet Architecture Design Guide:

– Rockwell Automation site:
https://literature.rockwellautomation.com/idc/groups/literature/documents/td/enet-td015_-en-p.pdf

– Cisco site:
http://www.cisco.com/c/en/us/solutions/enterprise/design-zone-manufacturing/landing_ettf.html

Other References

• CIP Security with Rockwell Automation Products Application Technique
  https://literature.rockwellautomation.com/idc/groups/literature/documents/at/secure-at001_-en-p.pdf
• ODVA, CIP Security
  https://www.odva.org/Technology-Standards/Common-Industrial-Protocol-CIP/CIP-Security
• ODVA, Overview of CIP Security
  https://www.odva.org/Portals/0/Library/Publications_Numbered/PUB00319R1_CIP_Security_At_a_Glance.pdf
• Stratix Managed Switches User Manual
  http://literature.rockwellautomation.com/idc/groups/literature/documents/um/1783-um007_-en-p.pdf