Automation Eng here with limited network knowledge. And would really appreciate any guidance and knowledge the community can spare. I don't need it done for me. Just pointed in the right direction. See attached for the diagram.
Picked up a Switch/Router to try and get this job done. If we can get it to work. We've saved over 30k from a traditional setup. Using a 500$ switch.
I have 28 Allen Bradley PLCs that are getting added to a SCADA network. These PLC's have their own Ethernet/IP network. Complete with robots and field devices. They are nearly identical copies of each other.
What is the best strategy for the isolation of interfaces/ports from one another?
-- So machine 1 can't send packets to machine 2. This would be bad.
What is the best strategy for doing NAT?
-- Do I need both SRC and DST nat rules?
-- Do i need MAC addresses off the PLC's NICs