About the Book
This document describes the steps for configuring the firewall for PacDrive LMC controllers (PacDrive LMC Eco, PacDrive LMC Pro/Pro2).
This document has been released with the release of EcoStruxureTM Machine Expert V1.2.4.
|
Document title |
Reference |
|---|---|
|
PacDrive LMC Eco Hardware Guide |
|
|
PacDrive LMC Eco Device Objects and Parameters |
|
|
PacDrive LMC Pro/Pro2 Hardware Guide |
|
|
PacDrive LMC Pro/Pro2 Device Objects and Parameters |
|
|
EcoStruxure Machine Expert Programming Guide |
|
|
CommonToolbox Library Guide |
You can download these technical publications and other technical information from our website at https://www.se.com/ww/en/download/.
The characteristics that are described in the present document, as well as other related documents, should be the same as those characteristics that appear online. In line with our policy of constant improvement, we may revise content over time to improve clarity and accuracy. If you see a difference between the document and online information, use the online information as your reference.
|
|
|
LOSS OF CONTROL |
|
oThe designer of any control scheme must consider the potential failure modes of control paths and, for certain critical control functions, provide a means to achieve a safe state during and after a path failure. Examples of critical control functions are emergency stop and overtravel stop, power outage and restart. oSeparate or redundant control paths must be provided for critical control functions. oSystem control paths may include communication links. Consideration must be given to the implications of unanticipated transmission delays or failures of the link. oObserve all accident prevention regulations and local safety guidelines.1 oEach implementation of this equipment must be individually and thoroughly tested for proper operation before being placed into service. |
|
Failure to follow these instructions can result in death, serious injury, or equipment damage. |
1 For additional information, refer to NEMA ICS 1.1 (latest edition), "Safety Guidelines for the Application, Installation, and Maintenance of Solid State Control" and to NEMA ICS 7.1 (latest edition), "Safety Standards for Construction and Guide for Selection, Installation and Operation of Adjustable-Speed Drive Systems" or their equivalent governing your particular location.
|
|
|
UNINTENDED EQUIPMENT OPERATION |
|
oOnly use software approved by Schneider Electric for use with this equipment. oUpdate your application program every time you change the physical hardware configuration. |
|
Failure to follow these instructions can result in death, serious injury, or equipment damage. |
NOTE: Schneider Electric adheres to industry best practices in the development and implementation of control systems. This includes a "Defense-in-Depth" approach to secure an Industrial Control System. This approach places the controllers behind one or more firewalls to restrict access to authorized personnel and protocols only.
|
|
|
UNAUTHENTICATED ACCESS AND SUBSEQUENT UNAUTHORIZED MACHINE OPERATION |
|
oEvaluate whether your environment or your machines are connected to your critical infrastructure and, if so, take appropriate steps in terms of prevention, based on Defense-in-Depth, before connecting the automation system to any network. oLimit the number of devices connected to a network to the minimum necessary. oIsolate your industrial network from other networks inside your company. oProtect any network against unintended access by using firewalls, VPN, or other, proven security measures. oMonitor activities within your systems. oPrevent subject devices from direct access or direct link by unauthorized parties or unauthenticated actions. oPrepare a recovery plan including backup of your system and process information. |
|
Failure to follow these instructions can result in death, serious injury, or equipment damage. |
For reasons of Internet security, TCP/IP forwarding is disabled by default. Therefore, you must manually enable TCP/IP forwarding. However, doing so may expose your network to possible cyberattacks if you do not take additional measures to protect your enterprise. In addition, you may be subject to laws and regulations concerning cybersecurity.
|
|
|
UNAUTHENTICATED ACCESS AND SUBSEQUENT NETWORK INTRUSION |
|
oObserve and respect any an all pertinent national, regional and local cybersecurity and/or personal data laws and regulations when enabling TCP/IP forwarding on an industrial network. oIsolate your industrial network from other networks inside your company. oProtect any network against unintended access by using firewalls, VPN, or other, proven security measures. |
|
Failure to follow these instructions can result in death, serious injury, or equipment damage. |
Terminology Derived from Standards
The technical terms, terminology, symbols and the corresponding descriptions in this manual, or that appear in or on the products themselves, are generally derived from the terms or definitions of international standards.
In the area of functional safety systems, drives and general automation, this may include, but is not limited to, terms such as safety, safety function, safe state, fault, fault reset, malfunction, failure, error, error message, dangerous, etc.
Among others, these standards include:
|
Standard |
Description |
|---|---|
|
IEC 61131-2:2007 |
Programmable controllers, part 2: Equipment requirements and tests. |
|
ISO 13849-1:2015 |
Safety of machinery: Safety related parts of control systems. General principles for design. |
|
EN 61496-1:2013 |
Safety of machinery: Electro-sensitive protective equipment. Part 1: General requirements and tests. |
|
ISO 12100:2010 |
Safety of machinery - General principles for design - Risk assessment and risk reduction |
|
EN 60204-1:2006 |
Safety of machinery - Electrical equipment of machines - Part 1: General requirements |
|
ISO 14119:2013 |
Safety of machinery - Interlocking devices associated with guards - Principles for design and selection |
|
ISO 13850:2015 |
Safety of machinery - Emergency stop - Principles for design |
|
IEC 62061:2015 |
Safety of machinery - Functional safety of safety-related electrical, electronic, and electronic programmable control systems |
|
IEC 61508-1:2010 |
Functional safety of electrical/electronic/programmable electronic safety-related systems: General requirements. |
|
IEC 61508-2:2010 |
Functional safety of electrical/electronic/programmable electronic safety-related systems: Requirements for electrical/electronic/programmable electronic safety-related systems. |
|
IEC 61508-3:2010 |
Functional safety of electrical/electronic/programmable electronic safety-related systems: Software requirements. |
|
IEC 61784-3:2016 |
Industrial communication networks - Profiles - Part 3: Functional safety fieldbuses - General rules and profile definitions. |
|
2006/42/EC |
Machinery Directive |
|
2014/30/EU |
Electromagnetic Compatibility Directive |
|
2014/35/EU |
Low Voltage Directive |
In addition, terms used in the present document may tangentially be used as they are derived from other standards such as:
|
Standard |
Description |
|---|---|
|
IEC 60034 series |
Rotating electrical machines |
|
IEC 61800 series |
Adjustable speed electrical power drive systems |
|
IEC 61158 series |
Digital data communications for measurement and control – Fieldbus for use in industrial control systems |
Finally, the term zone of operation may be used in conjunction with the description of specific hazards, and is defined as it is for a hazard zone or danger zone in the Machinery Directive (2006/42/EC) and ISO 12100:2010.
NOTE: The aforementioned standards may or may not apply to the specific products cited in the present documentation. For more information concerning the individual standards applicable to the products described herein, see the characteristics tables for those product references.
