Industrial Ethernet Security - Siemens S7-300 Configuration Manual

Communication via Ethernet CPs in S7 stations

1.2 Industrial Ethernet Security

Allround communication in the industrial sector
Industrial Ethernet is integrated in the SIMATIC NET concept that allows comprehensive
networking of the management, cell and field levels along with PROFINET / PROFIBUS and
the ASInterface (ASi).
Network access
Industrial Ethernet is accessed using the CSMA/CD (Carrier Sense Multiple Access with
Collision Detection) network access technique specified in IEEE 802.3.
1.2 Industrial Ethernet Security
Cell protection concept with Industrial Ethernet Security
With Industrial Ethernet Security, individual devices, automation cells or network segments
of an Ethernet network can be protected. In addition to this, data transmission can be
protected by a combination of different security measures such as a firewall, NAT/NAPT
routers and VPN (Virtual Private Network) via an IPsec Tunnel:
● Data espionage
● Data manipulation
● Unauthorized access
The security functions of the security CPs are configured with the Security Configuration
Tool configuration tool integrated in STEP 7.
14
Configuring and commissioning S7 CPs for Industrial Ethernet
Configuration Manual, 09/2013, C79000-G8976-C182-13