There is a network on the DeltaV workstations connected to the DeltaV port on the firewall whether you have one or many workstations connected to the port. In a DeltaV system, the network between the Emerson Smart Firewall and the DeltaV workstations is called the 2.5 LAN.
It is important that the network addresses used for the DeltaV workstations' Network Interface Cards (NICs) connected to the 2.5 LAN do not conflict with existing network addresses in other networks in the facility. Your IT department can provide guidance in what addresses are available for use in the 2.5 network.
The firewall's internal network (the 2.5 LAN) can be configured with either static or dynamic IP addressing. Emerson recommends static IP addressing with no DNS server entries. If dynamic IP addressing is used, ensure the firewall's external interface address is created statically with no DNS servers. With dynamic IP addressing using DHCP (Dynamic Host Configuration Protocol), the firewall serves the IP addresses to the workstations in the internal network. If dynamic IP addressing is used, the internal workstations' NICs must be set to Obtain an IP address automatically. Also when dynamic IP addressing is used, the firewall administrator must know the maximum number of internal IP addresses that will be generated. Emerson suggests that you set the DeltaV workstations' third NIC to Use the following DNS server addresses and leave the addresses blank so the DNS server does not create the DNS information in the NIC.
With static IP addressing, the workstations are assigned an IP address by the administrator; not served an IP address by the firewall. If static IP addressing is used, the internal workstations' NICs must be set to Use the following IP address and the firewall administrator must enter the required information (IP address, Subnet mask, and Default gateway) at each workstation. Emerson suggests that you set the DeltaV workstations' third NIC to Use the following DNS server addresses and leave the addresses blank so the DNS server does not create the DNS information in the NIC.
If the DeltaV workstations' third NICs are connected to an existing network, you should understand the network architecture and how the DeltaV workstations' network addresses have been assigned before setting up the network. It is highly recommended that you consult with your IT department or with those responsible for the existing network to determine how to install and configure the firewall in the existing network. It is possible that the existing network architecture will require modifications before the Smart Firewall can be installed.
Questions to ask when configuring the internal network for static IP addressing
Consult with your IT department and obtain the following information required to configure the firewall's internal network for static IP addressing where the firewall administrator assigns the network addresses. We recommend that you record this information on the Worksheet for internal workstation names and IP addresses.
Be sure that no DNS information is configured for the NICs.
Questions to ask when configuring the internal network for dynamic IP addressing
Consult with your IT department and obtain the following information required to configure the firewall's internal network for dynamic IP addressing where the firewall assigns the network addresses. We recommend that you record this information on the Worksheet for internal workstation names and IP addresses.
When you have gathered all the necessary information and completed the worksheets, you are ready to configure the internal network.