Emerson Exchange 365

authorized Cisco switches in Delta V for SIS and NON SIS

I am looking for a list of authorized cisco switches for use in the Delta V systems.  I am looking for them in used in both the SIS and non SIS area's.  I already have a list of the smart switches.  I need this list to vet the devices for use in out environment.

DavidHeil

• 23 Mar 2020 7:23 PM
• Cancel

7 Replies

• JoshC

  

  • 23 Mar 2020 7:52 PM

  KBA NK-1500-0157 Additional DeltaV Compatible Cisco Switch Models Available is what you're looking for.

  Note though that KBA NK-1400-0250 Network Requirements for DeltaV S-series Controllers Using CHARMs I/O says that for S-Series with Electronic Marshaling, Emerson DeltaV Smart Switches are required for new installations.

  • Cancel
• Alexandre Peixoto

  

  • 23 Mar 2020 7:53 PM

  David, only DeltaV Smart Switches and DeltaV Safety Switches are supported by Emerson for use in the DeltaV Area Control Network and Safety Networks. Emerson doesn't validate Cisco switches on those networks any longer.

  • Cancel
• DavidHeil

  

  • 23 Mar 2020 9:35 PM

  In reply to Alexandre Peixoto:

  this directly from the delta v security manual 5.0 , but when i search for it i cant find it.
  The DeltaV system also supports specific models of Cisco switches that can be configured to provide role-based
  access for management capabilities. Cisco switches can be configured to address similar security characteristics
  available for DeltaV Smart Switches, but they cannot be integrated into the DeltaV Network Device Command
  Center. For information on configuring users and passwords for these switches, see the KBA NA-0400-0055
  Using Cisco Switches with DeltaV Systems and the KBA NK-1500-0157 Additional DeltaV Compatible Cisco Switch
  Models Available. Administration of Cisco switches should also be done using SecureShell (SSH) protocol based
  on digital certificates, and credentials which are managed at the device level. User account management best
  practices are required for an effective protection of these devices.

  • Cancel
• DavidHeil

  

  • 23 Mar 2020 9:35 PM

  In reply to JoshC:

  this directly from the delta v security manual 5.0 , but when i search for it i cant find it.
  The DeltaV system also supports specific models of Cisco switches that can be configured to provide role-based
  access for management capabilities. Cisco switches can be configured to address similar security characteristics
  available for DeltaV Smart Switches, but they cannot be integrated into the DeltaV Network Device Command
  Center. For information on configuring users and passwords for these switches, see the KBA NA-0400-0055
  Using Cisco Switches with DeltaV Systems and the KBA NK-1500-0157 Additional DeltaV Compatible Cisco Switch
  Models Available. Administration of Cisco switches should also be done using SecureShell (SSH) protocol based
  on digital certificates, and credentials which are managed at the device level. User account management best
  practices are required for an effective protection of these devices.

  • Cancel
• Alexandre Peixoto

  

  • 23 Mar 2020 9:44 PM

  In reply to DavidHeil:

  You are correct, v5 of the Manual was published more than one year ago when we still had the Cisco 3850 as a supported switch for DeltaV ACNs in respect to the 3-year lifespan products in Active status should have. However that active period has ended near the end of 2019 when we then discontinued support for any Cisco switches on the ACN as I mentioned on my previous message. The documents you are referring to were removed from online references as they would not make much sense after this last change, and we sent out communications to the field informing that change that is also available in the Lifecycle Status spreadsheet in Guardian for components approved for DeltaV systems. A new version of the DeltaV Security Manual is being prepared to address new things that came out with DeltaV v14.3.1 and to update dated notes like this one.

  • Cancel
• DavidHeil

  

  • 23 Mar 2020 9:53 PM

  In reply to Alexandre Peixoto:

  is there an expected time for the release of the new security documentation? is also the reason for the shift due to emerson purchase of hirschman and the rebranding of that equipment and smart switches? I am the architect for 3M for the CPWE model and have to look at the intergrations of multiple Delta V systems at different sites. Some systems have Delta V running the whole site. Other systems the Delta V application is just one of many applications on a site that have to co-exist due to the shear size of our plants and the number of products we make. I am also concerned with cross platform connections and programming in our current envoironment to connect to the delta V system.

  • Cancel
• Alexandre Peixoto

  

  • 23 Mar 2020 10:00 PM

  In reply to DavidHeil:

  We expect to release the new version of the DeltaV Security Manual along with the DeltaV v14.3.1L and the update on our ISASecure SSA Level 1 certification that is coming next as part of our release cycle. Now, regarding your question on switches, no this has nothing to do with our DeltaV Smart Switches which have been around for more than 13+ years. DeltaV networks are designed to be segregated from other systems, specially at the network level as also detailed in the Security Manual, and support for switches in the DeltaV network - as reference before - is really provided by Emerson on DeltaV Smart Switches only.

  • Cancel