Stratix 5700 Selection Guide
The Stratix 5700 (Bulletin 1783) are compact, scalable Layer 2 Managed Industrial-grade Ethernet Switches co-developed by Cisco and Rockwell Automation. These switches include embedded Cisco technology – the latest Cisco Catalyst feature set and switch architecture – for use in an extensive range of automation applications from small, isolated networks to complex industrial networks such as plantwide SCADA infrastructure.
A Stratix 5700 Ethernet switch can be integrated into the following:
- Pre-set Logix tags for simplified monitoring and control of the switch ports.
- A built-in IOS (Internet Operating System) from Cisco that provides secure premier integration with enterprise-level networks.
- And more.
Essentially, the Stratix 5700 managed Ethernet switches provide a secure network switching mechanism for extreme industrial environments. They can be connected to network devices such as routers, servers, and other types of network switches. In industrial automation applications, you can connect the Stratix 5700 switches to Ethernet-enabled communication devices, including Human Machine Interfaces (HMIs), Programmable Automation Controllers (PACs), Programmable Logic Controllers (PLCs), sensors, actuators, drives, and I/O.
Also, with the extensive deployment of EtherNet/IP networks in industrial automation applications, there is an increasing demand to manage this industrial communication network more properly. Also, integrating up-to-date machine-level industrial networks into an existing plantwide network infrastructure requires convergence. And with more automation devices getting connected on the same EtherNet/IP network more than ever, a managed industrial Ethernet switch becomes an essential tool. This is to help simplify such a network infrastructure and ensure that the process of adding new industrial machines is much easier. Primarily, the Allen-Bradley Stratix 5700 switches are designed and developed for use in EtherNet/IP-industrial automation applications.
Moreover, adding a Stratix 5700 managed Ethernet switch to an industrial network architecture assists Information Technology (IT) and Operations Technology (OT) professionals to leverage configuration and monitoring tools they’re familiar with and which allows easy setup and quick diagnostics with Rockwell Automation’s Integrated Architecture system. These tools also enable secure integration into enterprise-level networks.
Features of Stratix 5700 Ethernet Switches
The Allen-Bradley Stratix 5700 switches provide various advanced networking features, including:
A) Integrated Device Level Ring (DLR) Connectivity
Device Level Ring (DLR) is an EtherNet/IP Layer 2 protocol specified by ODVA (Open DeviceNet Vendors’ Association). It’s used for high-performance, high-speed industrial automation applications where network resiliency is required. This is because it provides a faster means for network fault detection and reconfiguration in order to support the most demanding industrial control applications. The DLR protocol was primarily developed for implementation in multi-port EtherNet/IP end devices to form ring-based EtherNet/IP network topologies. It also provides high network availability and media redundancy in such network topologies.
To accomplish the foretasted functions, a DLR EtherNet/IP network includes three types of ring nodes, namely:
- Ring Supervisor Node: The ring supervisor collects diagnostic data for the DLR network, and it also manages traffic on the network. At least one ring node on a DLR network should be configured as a supervisory ring node.
- Ring Participants: These types of nodes process the data being transmitted over the DLR network while enabling data transfer to the next ring node in the network. They also report fault conditions to the active ring supervisor nodes. Note whenever a fault condition arises on a DLR network, the ring participant nodes reconfigure themselves and relearn the topology of the network.
- Optional Redundant Gateways: These are multiple switches that connect to a Device Level Ring network while also interconnecting through the remaining part of the main network. They provide the resiliency of the DLR network to the other network connections.
Note: Based on their firmware capabilities, both Ethernet switches and other network devices can function as ring supervisors or participants on a DLR network. But only switches can function as redundant gateways.
Some models of Stratix 5700 Ethernet switches include integrated DLR connectivity, which allows such switches to operate as ring supervisors or participants on a ring-based EtherNet/IP network. When functioning as a ring supervisor, a Stratix 5700 Ethernet switch can consolidate diagnostic data from the ring participants and act as a central point for managing the DLR status and machine-level network diagnostics. So, when a Stratix 5700 ring supervisor detects a Single Fault Condition (SFC) or breaks in the ring-based EtherNet/IP network, it provides an alternative data transmission route to assist in the quick recovery of the network.
For redundant gateway capabilities, two Stratix 5700 switches are supported on a single DLR network while being connected directly to the remaining part of the main network. This provides enhanced network resiliency. Also, Stratix 5700 switches do provide assignment of DHCP IP address to EtherNet/IP end devices on a DLR network, thereby enabling simplified replacement of the devices. In a nutshell, integrating DLR connectivity in Stratix 5700 switches provides consolidated EtherNet/IP network diagnostics and network architecture optimization.
B) Integrated Network Address Translation (NAT)
Network Address Translation (NAT) is a process of mapping multiple private (non-internet facing) Internet Protocol (IP) addresses on a local network to a public (outward facing) IP address before transferring the IP packets onto the Internet. This is done by modifying the IP packet header (network address information) while the packets are being transmitted via a router. Essentially, NAT provides 1:1 IP address translations from one subnetwork to another. This helps to improve network security and reduce the number of IP addresses on an enterprise-wide network; hence, by using NAT, organizations can employ a single IP address for multiple devices. Also, you can use NAT to easily integrate new machines into an already existing enterprise-wide network architecture.
Integration of machines onto an existing plantwide network architecture can be a challenging task because the IP addresses created by machine builders seldom match the IP addresses of the end-user networks. Also, the IP address of a new machine is often concealed until the installation of the machine. As a solution, Stratix 5700 Ethernet switches are integrated with Network Address Translation (NAT) as a Layer 2 implementation that enables “wire speed” 1:1 IP address translations perfect for industrial control applications in which performance is critical.
In summary, NAT integration into Stratix 5700 Ethernet switches allows:
- End-users to easily integrate new machines into existing larger networks.
- Simplified integration of Internet Protocol (IP)-addresses mapped from a collection of machine-level IP addresses inside a local network to the end-user plantwide network.
- OEMs (Original Equipment Manufacturers) provide standard machinery to end users without the need to program the machines with unique IP addresses.
C) Power Over Ethernet (PoE) Feature
PoE Stratix 5700 switches can provide electric power along with the transfer of data over two different strands of the same Ethernet cable to end devices. This makes the PoE versions of Stratix 5700 Ethernet switches ideal for long-distance data transmission networks, where Ethernet cables are connected through remote regions without any network connectivity and electrical power. These PoE switches can identify PoE-enabled or compatible end devices on a network and connect with them.
In addition, PoE Stratix 5700 switches are designed as ruggedized, industrial-grade switches that can withstand extremely harsh environmental parameters. They also help speed up data transmission rates and traffic flow on a network.
D) Advanced Security Features
The Stratix 5700 switches have the following security features:
- CIP Fault Detection & Port Control: This feature allows secure access to an EtherNet/IP network as per the conditions of the connected machines. It also enables secure access to Ethernet ports based on the Logix controller mode (fault/idle) or program.
- Media Access Control (MAC) ID Port Security: This software feature checks the Media Access Control ID of end devices linked to a Stratix 5700 Ethernet switch to determine if the MAC ID is authorized. If it’s not authorized, the end device with that MAC ID will be blocked, and a warning message will be sent to the connected controller. This provides a secure method of blocking unauthorized access to an EtherNet/IP network.
- IEEE 802.1x Security: This is an IEEE-standard security feature for user authentication and access control. It’s mainly used to monitor access to resources of a network and to secure the network’s infrastructure.
- RADIUS and TACACS+ Authentication: RADIUS (Remote Authentication Dial-In User Service) is a client-server network access protocol that facilitates communication between a remote access server and a central (main host) server to validate dial-in users and allows them to access the requested network system or service. On the other hand, TACACS+ (Terminal Access Controller Access-Control System Plus) is a remote authentication protocol predominantly used to administrate various network devices, including Stratix 5700 switches, routers, and servers.
- Encryption (HTTPS, SNMPv3, SSH): The Encryption security feature in Stratix 5700 switches secures a network by encrypting administrator traffic during SNMP and Telnet sessions.
- Secure Digital (SD) Card: This card allows simplified replacement of end devices. If needed, you can order it separately from the Stratix 5700 switch.
Note: Not every Stratix 5700 Ethernet switch model will include all the features discussed above. Therefore, ensure that you select a Stratix 5700 switch that includes the specific features required by your application. Also, the availability of some features depends on the software type of the Stratix 5700 switch in question, whether Lite or Full firmware.
Selecting the Right Stratix 5700 Ethernet Switch
Choosing the right Stratix 5700 Ethernet switch for your industrial automation application is essential for the proper functioning of your network. There are many different factors you should consider when determining which Stratix 5700 Ethernet switch is the best fit for your application. Discussed below are some of those factors.
1. Compatibility and Data Transmission Efficiency
The compatibility of a Stratix 5700 Ethernet switch with other network devices is critical to its proper functioning. Hence, be sure to select a Stratix 5700 Ethernet switch that meets this criterion. Also, ensure that the Stratix 5700 Ethernet switches you select are QoS (Quality of Service) enabled and have increasingly advanced data transmission features like VLANs with Trunking, auto-forwarding multicast traffic, etc. Such features will increase your network’s data transmission efficiency and accuracy.
For instance, the QoS software feature is used to optimize network performance by allowing different priorities to be provided to different network users, data flows, or applications. Thus, QoS-enabled Stratix 5700 Ethernet switches do assist in providing a higher level of network determinism. On the other hand, the VLANs with the Trunking feature allow the grouping of network devices with similar specifications into network segments. As a result, Stratix 5700 Ethernet switches featuring VLANs can be used to provide improved network management, increased security factor, and scalability to your network, particularly in real-time data transmission.
2. Durability and Reliability
You should select a Stratix 5700 Ethernet switch that can offer reliable performance and durability even when operating in harsh industrial environments– characterized by noise, excessive shock and vibration, high humidity, and extreme temperatures. To ensure those aspects, check the NEMA, UL, and IP ratings, as well as the conformal coating standards of the switch you intend to select. Basically, select an industrial-grade Stratix 5700 Ethernet switch with an IP30 environmental rating that’s compliant with the following standards: c-UL-us, CE, C-Tick, Ex, and EtherNet/IP specifications. Also, the operating temperature range of the selected switch should be wide enough, normally from -40 to 60 °C (-40...140 °F).
3. Number of Ports
The total number of ports on your Stratix 5700 Ethernet switch will determine the maximum number of automation devices you can connect to the switch. As such, it is necessary to select an industrial Ethernet switch that has a sufficient number of ports to accommodate all your devices and allow for future expansion. Stratix 5700 industrial Ethernet switches are available in 6 to 20 port versions; the type and number of ports vary with each Stratix 5700 switch model. Some of those ports include:
- Console Port: It’s used for configuring, monitoring, and managing an Ethernet switch. Also, users can connect the Ethernet switch to a computer via the console port. Stratix 5700 Ethernet switches connect to the console ports with mini-USB cables or various adapter cables, including 9300-USBCBL-CNSL, USB-RJ45, or an RJ45-to-DB-9 adapter cable.
- 1000/100 Mbps SFP Ports: The Small Form-Factor Pluggable (SFP) ports on industrial switches enable the switch to connect to different types of Ethernet and fiber cables of varying data transmission speeds. The SFP ports on some Stratix 5700 Ethernet switch models provide full-duplex, 1000-Mbps (Megabits per second), or 100-Mbps Ethernet connectivity.
- 100/10 Mbps Copper Ports: These ports can be configured to operate at 100 Mbps or 10 Mbps, half-duplex, or full duplex. In addition, the 10/100 Copper ports can be set for duplex and speed auto-negotiation in conformance with the IEEE 802.3-2002 standard for Ethernet specifications. When the auto-negotiation procedure is set as default, the copper ports sense the duplex mode and data speed settings of the attached end devices. If the connected end device can also support auto-negotiation, then the copper port on the Stratix 5700 managed Ethernet switch will negotiate the Ethernet connection with the fastest line speed that’s supported by both the connected end device and Ethernet switch. Moreover, the copper port will also negotiate full-duplex transmission mode if the connected end device supports it. Next, the copper port reconfigures itself accordingly. However, for the auto-negotiation procedure to be successful, the connected device should be within 100 meters (329 feet) of the Stratix 5700 switch.
- Combo (Dual-Purpose) Uplink Ports: The Combo Uplink ports are available on some Stratix 5700 switch models and can be configured for SFP (fiber) or RJ45 (copper) media types. But only one of these media connections (SFP or RJ45) in each of the Combo ports can be active at any given time. If both media types are connected, the SFP fiber module is given priority. When connected in Combo uplink ports, the RJ45 copper modules may be configured to operate as fixed 100 Mbps, 1000 Mbps (1 Gigabit per second), or 10 Mbps Ethernet ports, full-duplex, or half-duplex. But the 1 Gbps (1000 Mbps) setting is not supported on all Stratix 5700 switches with dual-purpose (Combo) uplink ports. On the other hand, SFP modules connected in dual-purpose uplink ports operate in full-duplex mode only. And Ethernet-enabled SFP modules approved for 100 Mbps or 1 Gbps can be used to establish fiber-optic Ethernet connections to the end devices on the network. Being transceiver modules, these SFP modules provide uplink interfaces once inserted into an SFP fiber module slot, and they are field replaceable. Also, you can connect a fiber-optic SFP module to a Combo port on a Stratix 5700 switch using a fiber-optic cable with an LC connector.
Note: You cannot use Copper-made SFP modules in Combo uplink ports. Only fiber-made SFP modules can be used in those ports.
- PoE+/PoE Ports: The PoE (Power over Ethernet) ports are available on some Stratix 5700 managed Ethernet switch models, and the switches’ expansion modules can be configured for IEEE 802.3at Type 2 PoE+ or IEEE 802.3af-2003 PoE standard. You can configure these ports in any PoE or PoE+ combination. For PoE configuration, the Stratix 5700 expansion modules will require a dedicated electrical power supply.
- Power and Relay Connectors: These are two physically identical connectors used to connect alarm and power signals to the front-side panel of a Stratix 5700 managed Ethernet switch. One connector supplies primary DC power, while the other provides secondary DC power. The alarm signals can originate from activated alarms for power supply, port status, and environmental conditions. The alarms can also be set to indicate closed or open relay contacts in the network. A separate PoE power connector is required for PoE configuration in Stratix 5700 expansion modules.
Therefore, to select the right Stratix 5700 industrial Ethernet switch, determine the number and type of automation devices you need to connect to your switch and if there’s a likelihood of increasing that number in the near future. Then select a Stratix 5700 Ethernet switch that can adequately accommodate all those devices. Ideally, in a medium-sized blended network, the selected Stratix 5700 Ethernet switch should have at least 4 FE (Fast Ethernet) or 2 GE (Gigabit Ethernet) SFP module ports and 10 FE (Fast Ethernet) Copper ports.
4. Data Transfer Speeds
Selecting a Stratix 5700 Ethernet switch that can easily transmit the amount and type of data required for your industrial automation application is important. As such, when choosing a Stratix 5700 industrial Ethernet switch, you should determine the data transmission speed required of your application and select a switch that can achieve that speed.
For mid-sized networks, Fast-Ethernet (FE) Stratix 5700 switches of 100 Mbps are ideally suitable, while large industrial networks may require Gigabit-Ethernet (GE) Stratix 5700 switches that can offer 1000 Mbps (1 Gbps) data speeds. For extremely large networks requiring long-distance data transmissions between connected devices, you can consider Stratix 5700 switches enhanced with fiber-optic data transfer technology.
5. Switch Installation and Maintenance
As much as possible, select a Stratix 5700 switch that is easy to install and which has low maintenance requirements. Also, check the Stratix 5700 installation manuals provided by Rockwell Automation to ensure that the installation method of the Stratix 5700 switch you intend to select does match the application environment in terms of available installation space, recommended mounting options, and switch design. That also means you should choose the correct mounting option for the selected Stratix 5700 switch to utilize the available installation space properly.