SMB layer 2 setup

Hirschmann_Netw — Tue, 18 Jun 2019 08:17:18 GMT

Hi all,

Currently we are designing protection for a factory. They have a fiber ring and want to protect their process automation. We implemented some 1200R firewalls in bridge mode with strict policy and it works fine.

The problem is in the current setup people can easily remove the firewall and the protection is gone. It did happen when the System Integrator had some problems, removed the firewall, solved the problem and did not restore the connection.

There is a possibility to use a RADIUS server, but I'm lost in how to set this up on the 1200R.

Does anyone have an idea on how to solve this?

And NO we can not use Layer3 on the 1200R, the PLC's only support Layer2 communication.

Thanks in advance!

Henk

Re: SMB layer 2 setup

_Val_ — Fri, 21 Jun 2019 10:18:34 GMT

One of possibilities would be to put an alert when FW stops filtering traffic or sending logs. That would cover the case of removed device.

topic SMB layer 2 setup in Spark Firewall (SMB)

SMB layer 2 setup

Re: SMB layer 2 setup