Secure network infrastructure sharing

The communication between the SIMULand configuration software and the devices is encrypted using the AES algorithm and protected against unauthorized changes in the transmitted data using the SHA1 hash algorithm. The switches thus meet the requirements for secure communication according to EN 62676-1-2.

If the switches are used for the transmission of alarm system data, they are subject to EN50131-1 and different VLANs [2] and QoS [1] must be used for each service. It is recommended to assign the highest QoS to the PZTS system and the second highest to the device management.

‌

Remote access to switch management can be restricted by source IP addresses [3] or completely disabled by filling in zero IP addresses (0.0.0.0) [3]. However, it is always accessible via the USB port for local configuration (password protected) or RESET to default settings.

Default settings from FW56: VLAN Enabled, Management VLAN = 1 [2] /PRIO=7 [1]

‌

The compliance of the switches 2G-2S.0.2.F, 2G-2S.0.3.F, 2G-2S.3.0.F and 2G-2S.1.4.F and 2G-2C.0.8.F with EN 50131-1 has been verified by tests in independent test labs up to level 4 (high risk). In applications where the LAN-RING system is used as a transmission path of the PZTS system, the following rules must be observed.