Preface

---

Cisco Validated Design

This document describes the Cisco Ethernet-to-the-Factory (EttF) Architecture, which offers value inside industrial operations when part of a larger integrated, industrial automation architecture.

Document Organization

This document contains the following chapters and appendices.

Chapter or Appendix	Description
Chapter 1, "Ethernet-to-the-Factory Solution Overview."	Provides and overview of the Cisco Ethernet-to-the-Factory solution.
Chapter 2, "Solution Architecture."	Provides an overview of the EttF solution architecture, as a means to describe the various systems, components, and their relation to each other to give context to the networking function and technical requirements.
Chapter 3, "Basic Network Design."	Provides guidelines and best practices for IP addressing, and the selection of routing protocols based on the manufacturing zone topology and server farm access layer design.
Chapter 4, "Implementation of the Cell/Area Zone ."	Outlines recommendations, best practices, configurations, and caveats for implementing a cell/area zone architecture in an EttF environment.
Chapter 5, "Implementation of Security."	Describes the security components of the EttF solution that address the major security concerns of defending against threat, establishing trust boundaries and verifying identity, and securing business communications.
Chapter 6, "Implementation of High Availability."	Describes design considerations and best practices for high availability in the cell/area zone, manufacturing zone, and the DMZ, as well as testing results.
Chapter 7, "Implementation of Network Management."	Describes the use of network management tools such as Cisco Network Assistant and Cisco Adaptive Security Device Manager.
Appendix A "Characterization of the EttF Cell/Area Zone Design."	Outlines the validation methodology and the corresponding results of the testing.
Appendix B "Configuration of the EttF Cell/Area Zone."	Provides sample configurations for the cell/area zone.
Appendix C "Configuration of the EttF Demilitarized Zone."	Provides sample configurations for the DMZ.
Appendix D "EttF High Availability Testing."	Outlines the validation methodology and the corresponding results of the high availability testing.

Document Modification History

The following table shows the modification of this document:

Verison	Date	Comments
1.0	April 2007	Original.
1.1	July 2007	External market with co-branded template.
1.2	July 2008	Minor editorial changes and clarifications. Definition of key terms added. No changes were made to recommendations no additional features/functions added.

Cisco Validated Design

The Cisco Validated Design Program consists of systems and solutions designed, tested, and documented to facilitate faster, more reliable, and more predictable customer deployments. For more information visit www.cisco.com/go/validateddesigns.

ALL DESIGNS, SPECIFICATIONS, STATEMENTS, INFORMATION, AND RECOMMENDATIONS (COLLECTIVELY, "DESIGNS") IN THIS MANUAL ARE PRESENTED "AS IS," WITH ALL FAULTS. CISCO AND ITS SUPPLIERS DISCLAIM ALL WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE. IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THE DESIGNS, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

THE DESIGNS ARE SUBJECT TO CHANGE WITHOUT NOTICE. USERS ARE SOLELY RESPONSIBLE FOR THEIR APPLICATION OF THE DESIGNS. THE DESIGNS DO NOT CONSTITUTE THE TECHNICAL OR OTHER PROFESSIONAL ADVICE OF CISCO, ITS SUPPLIERS OR PARTNERS. USERS SHOULD CONSULT THEIR OWN TECHNICAL ADVISORS BEFORE IMPLEMENTING THE DESIGNS. RESULTS MAY VARY DEPENDING ON FACTORS NOT TESTED BY CISCO.

CCDE, CCENT, Cisco Eos, Cisco Lumin, Cisco Nexus, Cisco StadiumVision, Cisco TelePresence, the Cisco logo, DCE, and Welcome to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn and Cisco Store are service marks; and Access Registrar, Aironet, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, EtherFast, EtherSwitch, Event Center, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, iQuick Study, IronPort, the IronPort logo, LightStream, Linksys, MediaTone, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, Network Registrar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase, SMARTnet, Spectrum Expert, StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.

All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0807R)